last executing test programs:
3.259702087s ago: executing program 1 (id=12380):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0xa0c00)
read(r0, &(0x7f00000035c0)=""/100, 0x64)
3.245649572s ago: executing program 2 (id=12381):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038340300000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000008030380040300800800034000000002100002800c00028008000180", @ANYBLOB='F'], 0x3c8}, 0x1, 0x0, 0x0, 0x4}, 0x50)
2.87272041s ago: executing program 0 (id=12384):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x38, 0x4014}, 0x2804ccd0)
2.872447868s ago: executing program 1 (id=12385):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f00000003c0))
2.791611899s ago: executing program 2 (id=12388):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003c000701000000000500000001fc0000040049800c000180068606003b0000100c0002"], 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x4010)
2.588588028s ago: executing program 0 (id=12392):
r0 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000980)={0xb, @pix={0x6, 0x4, 0x41495043, 0x1, 0x1, 0x5, 0x5, 0x8, 0x1, 0x3, 0x1, 0x1}})
2.520609099s ago: executing program 1 (id=12393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000)
2.427440905s ago: executing program 2 (id=12394):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000)
2.378068205s ago: executing program 0 (id=12396):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0xd3, 0x0, &(0x7f0000000380)="b9ff030200000000000000f00800c1e8ad56b742f633e239a5df5a04f7d3dd0c1853bf74d5e8c2900a1c3450d7bcc171437c2c0caf296ae83bc3695246de8ac42fbe8c1602a3f54f3ff3d156347989f73c39b5e370411c343fd06a51d41a641912ba89a07de0add36794c5a7c3b3b4d4fcd9c715e7b0f7f95175c06a6b8e6c172e164fffa905098eaf0fdc16fa690fbdc469e98fbaf647efd192c49e2a5f8ae8f88ef3d5ed0cc0d1d8b05af4ff9d45958102fdc845093aa9ca205ac2e18dba0262d49be44b217512ea468b0308578b09f94b09", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
2.357027754s ago: executing program 1 (id=12398):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
2.212398223s ago: executing program 1 (id=12399):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, 0x0, 0x21, 0x0, &(0x7f0000000100))
2.158618401s ago: executing program 0 (id=12401):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffff8100000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
2.064609326s ago: executing program 2 (id=12402):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5)
1.963400476s ago: executing program 3 (id=12403):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgid(0xffffffffffffffff)
1.916678406s ago: executing program 2 (id=12404):
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x100)
ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000004380)=0x2a5d)
1.855022461s ago: executing program 0 (id=12406):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff9f, &(0x7f0000000080)=ANY=[])
1.761986322s ago: executing program 3 (id=12407):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24)
1.728666103s ago: executing program 2 (id=12408):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="01"])
1.566752444s ago: executing program 3 (id=12410):
r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x4, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000400)={0x0, 0x0, {0x1, 0xffffffff, 0x101c, 0x4, 0x0, 0x0, 0x5, 0x4}})
1.481439131s ago: executing program 3 (id=12412):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
1.43508752s ago: executing program 4 (id=12413):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x3e, 0x0, &(0x7f0000000100)="c9188e9bb95d02ff4284860186dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
1.362453897s ago: executing program 3 (id=12414):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, 0x2b, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x78, 0x0, 0x1, [@generic='\b']}]}, @nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0xc8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4040)
1.151958728s ago: executing program 4 (id=12415):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x14, 0x1c, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x8000000000000000}, @nested={0x4, 0xfb}]}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40815}, 0xc000)
612.379044ms ago: executing program 4 (id=12416):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x76, 0x0, &(0x7f0000000280))
502.27502ms ago: executing program 3 (id=12417):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$eJzs3c9PHG0dAPDvDGihvm+F1/dQExM3sYlGDYGeVJpIKS2FFmuqNsbLdoFtiy5sA4vx0EN7a+LJxIPx0GjijVPDwaP1T/DisZ6b6MGLiUkjZndngRl2AxIWpPl8Epid5zf73Xl45jD7pJnGk5WN0spGqbJWqi892rha+nm9trlajfSUnHX/5Fzo9cb3I05if3bu3bj1gwdXI/68/Nd3Ozs7O9E0GF1N7Hv9r38+W9p/7EgLdZrtdm/tpPwkIj49MK6mgYj48R8jkoi4nqVNZ8fhiLgU7bwHz375sHRCo3n9tnqt/H7h5fbklfmtV9u9//Yk4re1L37z8erfvzIw+bevn1D3AAAAAAAAAAAAAAAAAACcc7P37/3o++MT8SaJwa3k4PO6s9mx1/OxOyfmy/3/YwEAAAAAAAAAAAAAAAAAAOD/1N7z/6Xkky7P/89kx6ke9Xe+2/8x0j9z37s3c3N8Itv/PTmQ/60s6R/XB2K0sO/7iy77v18v1O++//vBfo6rM75OvyORpGO58zQdG4v4fbbx++XkYlqrbzS+8ai+ubZ8YsM4t/Lxb+/en4tOtqF/t/hHl/hPF9rv//7/XzjwaWqePzzsI/aZPg7pHMnHf6BnuT+8SI4U/xuFeqcRf44vH//BVtrw/gJT7QmgGf9fDR4e/5lC+/2K/6WIKCXNsZZyM0BzDdNM77VeIS8f//akmJs6szey1/X/70L8bxbaP6v5/3nxHxFd5eP/2VbaUK7E3vU/mh5+/d8qtH8W8W+O//nJLTE/aPn4X2gnDuaKtN7Jo87/s4X2+xD/zhfGtcd5Kcl9AraS9vh7fV8defn4Dx3I37v/S4+0/rtdqH9a93+dfjv3f53p/2tJ+/6P7vLxH+5Z7qjX/1yhXr/n/6nW+o/jysf/Yistv3Yeaf0+avznC+33K/6tVclQJ/6tSaB5SxD/udBO/53135Hk4/+5dmK6v8Tz1u/W+i85fP1/p9D+ma3/0/72+qHIx/+jnuWa8f/LEf7/3y3U63/8I8at9Y8tH/+Pe5ZrXf9Dh8d/Ye/ln+IU4v/VfjYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcA5MZ8eRSNKx3Hmajo1F3MjOL8fFZLGyXF6s1Zd+thExk6WX4pPkca2+WKmVV9bqy9VypVarL0XczPI/jaFko1ZvlFcrT2/ttjWcPKlW1huL1UojImaz9C/Fx522Flcaq5WnEXF7N+/zaX396ZPKWnl5Zf074+Pj4zG3O4bRpPqLRnWt0e69nRsxv1t3JNk3uFb2nd2xfJT8tL65vlap5dKbdWr1pUptX52FLO/XMZo01jfXliqNarlWf9zp7yxNZceZufs/vH934kD+w6R9nD7dYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3oz+e3fRMRg+yyNiFKSvUiyn5zXb6vXyu8XXm5PXpnferX9rlsZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYpX+UBoIoDsBvxkJLj2G17Ha2K4po4YrgCfQYHkaP4iW8g0WKtClCIJmFsH9gm6T6vubB/Jh5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMs9vnXvr3UTkeJqexnx+/n3f5w/l/p9N33/4gwzcjpPL939Q92Uf0+j/LYcrdq8Tzfrr4+YqL2fwZ4M9+lg3Gdobt/m5uv7XkfKVUS0Jb9JOVfVsrcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYsQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUXfBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKwAA//9k4ChH")
mknod$loop(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8, 0x0)
304.584934ms ago: executing program 4 (id=12418):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000240)={0x18})
153.810685ms ago: executing program 1 (id=12419):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{0x10, 0x3}, {0x1, 0x2}, 0x3, 0x1, 0x10})
150.978283ms ago: executing program 4 (id=12420):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x26, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0)
5.912427ms ago: executing program 4 (id=12421):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x3764}], 0x1, 0x0, 0x0, 0x0)
0s ago: executing program 0 (id=12422):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x12c, 0x0)
kernel console output (not intermixed with test programs):
utes in process `syz.4.10902'.
[ 1086.033284][T29618] netlink: 124 bytes leftover after parsing attributes in process `syz.4.10902'.
[ 1086.201823][ T5970] Flush: task=udevd[5970] dev=loop3 state=2
[ 1086.298660][ T5970] Teardown: task=udevd[5970] dev=loop3 state=2
[ 1086.512272][T29636] CIFS: VFS: UNC: missing share name
[ 1086.512586][T29636] CIFS: VFS: Malformed UNC in devname
[ 1086.941188][T29652] binder: BC_ATTEMPT_ACQUIRE not supported
[ 1086.941204][T29652] binder: 29651:29652 ioctl c0306201 200000000000 returned -22
[ 1087.239356][T29630] orangefs_mount: mount request failed with -4
[ 1087.749506][T29679] openvswitch: netlink: IPv4 tunnel dst address is zero
[ 1088.176838][T29697] loop0: detected capacity change from 0 to 764
[ 1088.393512][ T5633] Flush: task=syz-executor[5633] dev=loop0 state=2
[ 1088.476183][ T5633] Teardown: task=syz-executor[5633] dev=loop0 state=2
[ 1088.710708][T29723] lo: left promiscuous mode
[ 1088.710921][T29723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1089.010707][T29738] autofs4:pid:29738:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374)
[ 1089.283983][T29751] loop4: detected capacity change from 0 to 256
[ 1089.312461][T29751] exfat: Deprecated parameter 'utf8'
[ 1089.352949][T29751] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[ 1089.541420][T29754] loop3: detected capacity change from 0 to 512
[ 1089.544066][T29754] EXT4-fs: Ignoring removed bh option
[ 1089.608424][T29754] EXT4-fs (loop3): 1 truncate cleaned up
[ 1089.634597][T29754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1089.918016][ T5636] Flush: task=syz-executor[5636] dev=loop4 state=2
[ 1089.962786][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1089.992980][ T5636] Teardown: task=syz-executor[5636] dev=loop4 state=2
[ 1090.064480][ T5635] Flush: task=syz-executor[5635] dev=loop3 state=2
[ 1090.176356][ T5635] Teardown: task=syz-executor[5635] dev=loop3 state=2
[ 1090.464516][T29779] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1090.465003][T29779] batadv_slave_0: entered allmulticast mode
[ 1090.742276][T29789] loop0: detected capacity change from 0 to 512
[ 1090.784323][T29789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1090.784439][T29789] ext4 filesystem being mounted at /2157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1090.784795][T29791] team0: entered promiscuous mode
[ 1090.784811][T29791] team_slave_0: entered promiscuous mode
[ 1090.785113][T29791] team_slave_1: entered promiscuous mode
[ 1090.785303][T29791] geneve1: entered promiscuous mode
[ 1090.944255][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1091.058760][ T5970] Flush: task=udevd[5970] dev=loop0 state=2
[ 1091.150549][ T5970] Teardown: task=udevd[5970] dev=loop0 state=2
[ 1091.152114][T29807] netlink: 'syz.2.10991': attribute type 1 has an invalid length.
[ 1091.152133][T29807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10991'.
[ 1091.237000][ T5646] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1091.273406][T29811] tmpfs: Bad value for 'nr_inodes'
[ 1091.286984][T29812] loop3: detected capacity change from 0 to 128
[ 1091.312274][T29813] comedi comedi1: multiq3: I/O base address not correctly aligned
[ 1091.324504][T29812] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1091.326800][T29812] ext4 filesystem being mounted at /2217/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1091.399471][ T5646] usb 5-1: Using ep0 maxpacket: 16
[ 1091.401862][ T5646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1091.401900][ T5646] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1091.405794][ T5646] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1091.405822][ T5646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.405842][ T5646] usb 5-1: Product: syz
[ 1091.405855][ T5646] usb 5-1: Manufacturer: syz
[ 1091.405869][ T5646] usb 5-1: SerialNumber: syz
[ 1091.420079][ T5646] usb 5-1: config 0 descriptor??
[ 1091.452524][ T5646] em28xx 5-1:0.0: audio device (2040:0264): interface 0, class 1
[ 1091.607621][ T5635] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1091.729942][ T5635] Flush: task=syz-executor[5635] dev=loop3 state=2
[ 1091.762544][ T5646] usb 5-1: USB disconnect, device number 10
[ 1091.812400][ T5635] Teardown: task=syz-executor[5635] dev=loop3 state=2
[ 1091.848211][T29828] netlink: 'syz.0.11003': attribute type 5 has an invalid length.
[ 1091.954887][T29833] loop1: detected capacity change from 0 to 1024
[ 1091.970914][T29833] EXT4-fs: inline encryption not supported
[ 1092.097952][T29833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1092.098093][T29833] ext4 filesystem being mounted at /2075/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1092.265543][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1092.381201][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1092.626594][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank
[ 1092.668474][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1093.011621][T29867] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[ 1093.011650][T29867] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[ 1093.011661][T29867] overlayfs: missing 'lowerdir'
[ 1093.165953][T29872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11019'.
[ 1093.165978][T29872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11019'.
[ 1093.636286][T29891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11028'.
[ 1093.636308][T29891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11028'.
[ 1093.637675][T29892] netlink: 'syz.1.11030': attribute type 2 has an invalid length.
[ 1093.887277][T29901] loop0: detected capacity change from 0 to 256
[ 1093.888472][T29901] exfat: Deprecated parameter 'namecase'
[ 1093.888522][T29901] exfat: Deprecated parameter 'utf8'
[ 1093.921799][T29892] þ: entered promiscuous mode
[ 1093.972017][T29901] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[ 1094.086977][T29907] tmpfs: User quota inode hardlimit too large.
[ 1094.204351][ T5633] Flush: task=syz-executor[5633] dev=loop0 state=2
[ 1094.303831][ T5633] Teardown: task=syz-executor[5633] dev=loop0 state=2
[ 1094.342494][T29913] bond3: option lacp_active: invalid value (7)
[ 1094.477618][T29913] bond3 (unregistering): Released all slaves
[ 1095.209832][ T5646] IPVS: starting estimator thread 0...
[ 1095.305840][T29951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11057'.
[ 1095.305866][T29951] netlink: 'syz.3.11057': attribute type 1 has an invalid length.
[ 1095.400440][T29946] IPVS: using max 10 ests per chain, 24000 per kthread
[ 1095.585958][T29963] overlayfs: cannot append lower layer
[ 1096.090556][T29982] loop2: detected capacity change from 0 to 512
[ 1096.115926][T29982] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1096.147452][T29982] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.11070: bad orphan inode 13
[ 1096.147484][T29982] loop2: lost filesystem error report for type 5 error -117
[ 1096.149596][T29982] ext4_test_bit(bit=12, block=18) = 1
[ 1096.149614][T29982] is_bad_inode(inode)=0
[ 1096.149623][T29982] NEXT_ORPHAN(inode)=0
[ 1096.149631][T29982] max_ino=32
[ 1096.149639][T29982] i_nlink=1
[ 1096.200633][T29982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[ 1096.349008][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[ 1096.393287][T29996] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11076'.
[ 1096.535808][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1096.631833][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1096.702318][T29959] loop4: detected capacity change from 0 to 32768
[ 1096.815478][T29959] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1097.018018][T30007] loop2: detected capacity change from 0 to 4096
[ 1097.032764][T30007] EXT4-fs: Ignoring removed i_version option
[ 1097.050139][T30007] EXT4-fs (loop2): cluster size (1024) smaller than block size (4096)
[ 1097.150336][T30019] loop1: detected capacity change from 0 to 512
[ 1097.201959][T30019] EXT4-fs (loop1): revision level too high, forcing read-only mode
[ 1097.201982][T30019] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[ 1097.202075][T30019] System zones: 0-1, 15-15, 18-18, 34-34
[ 1097.202438][T30019] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1097.202530][T30019] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[ 1097.202629][T30019] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1097.202671][T30019] EXT4-fs (loop1): Cannot turn on quotas: error -22
[ 1097.363324][T30019] EXT4-fs (loop1): 1 truncate cleaned up
[ 1097.399604][T30019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1097.493290][T30019] fscrypt (loop1, inode 16): Error -61 getting encryption context
[ 1097.612761][ T5904] Flush: task=udevd[5904] dev=loop2 state=2
[ 1097.660544][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1097.700237][ T5904] Teardown: task=udevd[5904] dev=loop2 state=2
[ 1097.931961][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1097.934133][T30039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11096'.
[ 1097.936087][T30033] loop2: detected capacity change from 0 to 4096
[ 1097.946559][T30033] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[ 1097.985774][T30033] ntfs3(loop2): ino=19, mi_enum_attr
[ 1097.985803][T30033] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 1097.987083][T30033] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[ 1098.030200][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1098.098635][ T5636] ocfs2: Unmounting device (7,4) on (node local)
[ 1098.162302][ T5636] Flush: task=syz-executor[5636] dev=loop4 state=2
[ 1098.246637][ T5636] Teardown: task=syz-executor[5636] dev=loop4 state=2
[ 1098.313281][ T37] audit: type=1326 audit(2000000233.815:679): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30050 comm="syz.1.11100" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1098.313334][ T37] audit: type=1326 audit(2000000233.815:680): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30050 comm="syz.1.11100" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1098.313378][ T37] audit: type=1326 audit(2000000233.815:681): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30050 comm="syz.1.11100" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1098.313419][ T37] audit: type=1326 audit(2000000233.815:682): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30050 comm="syz.1.11100" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1098.313460][ T37] audit: type=1326 audit(2000000233.815:683): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30050 comm="syz.1.11100" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1098.313502][ T37] audit: type=1326 audit(2000000233.815:684): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30050 comm="syz.1.11100" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1098.313544][ T37] audit: type=1326 audit(2000000233.815:685): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30050 comm="syz.1.11100" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1098.313615][ T37] audit: type=1326 audit(2000000233.815:686): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30050 comm="syz.1.11100" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1098.313657][ T37] audit: type=1326 audit(2000000233.815:687): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30050 comm="syz.1.11100" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1098.557510][ T5970] Flush: task=udevd[5970] dev=loop2 state=2
[ 1098.557673][T30055] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11103'.
[ 1098.654485][ T5970] Teardown: task=udevd[5970] dev=loop2 state=2
[ 1099.137370][T30082] comedi: No check for data length of config insn id 7 is implemented
[ 1099.137388][T30082] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[ 1099.137400][T30082] comedi: Assuming n=15 is correct
[ 1099.303133][T30089] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11116'.
[ 1099.489483][T30095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11121'.
[ 1100.198312][T30130] loop3: detected capacity change from 0 to 512
[ 1100.208438][T30130] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1100.214788][T30130] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[ 1100.215488][T30130] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1100.215507][T30130] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.11139: bad orphan inode 3
[ 1100.215536][T30130] loop3: lost filesystem error report for type 5 error -117
[ 1100.216660][ C0] EXT4-fs (loop3): error count since last fsck: 1
[ 1100.216680][ C0] EXT4-fs (loop3): initial error at time 2000000235: ext4_orphan_get:1425
[ 1100.216703][ C0] EXT4-fs (loop3): last error at time 2000000235: ext4_orphan_get:1425
[ 1100.219547][T30130] EXT4-fs (loop3): Remounting filesystem read-only
[ 1100.230549][T30130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[ 1100.316920][T30130] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.11139: dx entry: limit 0 != root limit 125
[ 1100.316960][T30130] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.11139: Corrupt directory, running e2fsck is recommended
[ 1100.464951][T30138] IPVS: Error joining to the multicast group
[ 1100.656409][T30145] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1100.706916][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[ 1100.890521][ T5635] Flush: task=syz-executor[5635] dev=loop3 state=2
[ 1101.008093][ T5635] Teardown: task=syz-executor[5635] dev=loop3 state=2
[ 1101.393183][T30170] loop4: detected capacity change from 0 to 16
[ 1101.527094][T30170] erofs (device loop4): mounted with root inode @ nid 36.
[ 1101.972662][ T5636] do_umount: task=syz-executor[5636] propagate_mount_busy()!=0
[ 1101.972872][ T5636] do_umount: task=syz-executor[5636] propagate_mount_busy()!=0
[ 1102.281210][ T5636] Flush: task=syz-executor[5636] dev=loop4 state=2
[ 1102.361789][ T5636] Teardown: task=syz-executor[5636] dev=loop4 state=2
[ 1102.659847][T30217] loop3: detected capacity change from 0 to 1024
[ 1103.377750][ T5635] Flush: task=syz-executor[5635] dev=loop3 state=2
[ 1103.434004][T21957] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1103.459586][ T5635] Teardown: task=syz-executor[5635] dev=loop3 state=2
[ 1103.631863][T21957] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 1103.631893][T21957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.631913][T21957] usb 5-1: Product: syz
[ 1103.631928][T21957] usb 5-1: Manufacturer: syz
[ 1103.631943][T21957] usb 5-1: SerialNumber: syz
[ 1103.696688][T21957] usb 5-1: config 0 descriptor??
[ 1103.757283][T30261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11202'.
[ 1103.757310][T30261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11202'.
[ 1103.766270][T30258] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[ 1103.766410][T30258] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1103.790605][T30262] netlink: 'syz.3.11203': attribute type 3 has an invalid length.
[ 1103.790674][T30262] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11203'.
[ 1104.155365][T21957] usb 5-1: f81604_write: reg: 105 data: 20 failed: -EPROTO
[ 1104.155467][T21957] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO
[ 1104.156817][T21957] f81604 5-1:0.0: probe with driver f81604 failed with error -71
[ 1104.192520][T21957] usb 5-1: USB disconnect, device number 11
[ 1104.476993][T30290] loop3: detected capacity change from 0 to 256
[ 1104.526574][T30292] loop0: detected capacity change from 0 to 128
[ 1104.756873][ T5635] Flush: task=syz-executor[5635] dev=loop3 state=2
[ 1104.842538][ T5635] Teardown: task=syz-executor[5635] dev=loop3 state=2
[ 1104.874518][T21957] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1104.933408][ T5633] Flush: task=syz-executor[5633] dev=loop0 state=2
[ 1104.938177][T30302] netlink: 'syz.3.11221': attribute type 1 has an invalid length.
[ 1104.938198][T30302] netlink: 'syz.3.11221': attribute type 1 has an invalid length.
[ 1105.039962][ T5633] Teardown: task=syz-executor[5633] dev=loop0 state=2
[ 1105.057057][T21957] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1105.057114][T21957] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1105.085094][T21957] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1105.085123][T21957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1105.085144][T21957] usb 3-1: Product: syz
[ 1105.085159][T21957] usb 3-1: Manufacturer: syz
[ 1105.085173][T21957] usb 3-1: SerialNumber: syz
[ 1105.161603][T21957] cdc_ncm 3-1:1.0: skipping garbage
[ 1105.161656][T21957] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing
[ 1105.161695][T21957] cdc_ncm 3-1:1.0: bind() failure
[ 1105.190373][T21957] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[ 1105.190419][T21957] cdc_ncm 3-1:1.1: bind() failure
[ 1105.412817][T21902] usb 3-1: USB disconnect, device number 2
[ 1105.498025][T30326] ALSA: mixer_oss: invalid OSS volume 'u'
[ 1105.665902][T30332] loop1: detected capacity change from 0 to 4096
[ 1105.695768][T30335] loop3: detected capacity change from 0 to 2048
[ 1105.709729][T30335] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1105.796051][T30332] ntfs3(loop1): ino=9, mi_enum_attr
[ 1105.796078][T30332] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 1105.797306][T30332] ntfs3(loop1): ino=9, mi_enum_attr
[ 1105.802973][T30332] ntfs3(loop1): ino=b, mi_enum_attr
[ 1105.803035][T30332] ntfs3(loop1): Failed to load $Extend (-22).
[ 1105.803050][T30332] ntfs3(loop1): Failed to initialize $Extend.
[ 1105.836061][T30342] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1106.067355][ T37] audit: type=1800 audit(2000000240.997:688): pid=30332 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.11237" name="file1" dev="loop1" ino=30 res=0 errno=0
[ 1106.301948][ T5970] Flush: task=udevd[5970] dev=loop1 state=2
[ 1106.314157][ T5896] Flush: task=udevd[5896] dev=loop3 state=2
[ 1106.402440][ T5970] Teardown: task=udevd[5970] dev=loop1 state=2
[ 1106.404706][ T5896] Teardown: task=udevd[5896] dev=loop3 state=2
[ 1106.448142][T30354] loop1: detected capacity change from 0 to 512
[ 1106.465478][T30354] FAT-fs (loop1): bogus logical sector size 0
[ 1106.465499][T30354] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1106.466411][T30354] Flush: task=syz.1.11247[30354] dev=loop1 state=2
[ 1106.543424][T30360] bridge3: the hash_elasticity option has been deprecated and is always 16
[ 1106.543453][T30360] bridge3: entered allmulticast mode
[ 1106.543662][T30354] Teardown: task=syz.1.11247[30354] dev=loop1 state=2
[ 1107.047006][T30375] loop0: detected capacity change from 0 to 2048
[ 1107.067912][T30375] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[ 1107.078476][T30375] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1107.144834][T21261] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1107.373964][T21261] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[ 1107.374082][T21261] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[ 1107.374105][T21261] usb 3-1: Product: syz
[ 1107.404974][T21261] usb 3-1: config 0 descriptor??
[ 1107.438831][T21261] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[ 1107.451909][T21261] usb 3-1: Detected FT232H
[ 1107.463429][T30373] bond3 (unregistering): Released all slaves
[ 1107.509372][ T5633] Flush: task=syz-executor[5633] dev=loop0 state=2
[ 1107.520119][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11261'.
[ 1107.520244][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11261'.
[ 1107.520289][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11261'.
[ 1107.520395][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11261'.
[ 1107.520438][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11261'.
[ 1107.520480][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11261'.
[ 1107.520603][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11261'.
[ 1107.638136][ T5633] Teardown: task=syz-executor[5633] dev=loop0 state=2
[ 1107.750495][T30389] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058)
[ 1108.003312][T21261] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1108.004197][T21261] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[ 1108.010664][T21261] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1108.014480][T21261] usb 3-1: USB disconnect, device number 3
[ 1108.029022][T21261] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1108.071691][T21261] ftdi_sio 3-1:0.0: device disconnected
[ 1108.208209][T30398] gretap2: entered allmulticast mode
[ 1108.745203][T30419] loop3: detected capacity change from 0 to 2048
[ 1108.807889][T30419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1108.849278][T30419] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.11279: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[ 1109.138341][T30419] EXT4-fs (loop3): Remounting filesystem read-only
[ 1109.279561][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1109.392572][ T5635] Flush: task=syz-executor[5635] dev=loop3 state=2
[ 1109.491296][ T5635] Teardown: task=syz-executor[5635] dev=loop3 state=2
[ 1110.039980][T30474] loop1: detected capacity change from 0 to 1764
[ 1110.115505][T30479] overlay: Unknown parameter '\'
[ 1110.313401][T30488] loop4: detected capacity change from 0 to 22
[ 1110.341515][T30488] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 1110.408015][T30488] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1110.624884][T30474] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1110.630919][ T5636] Flush: task=syz-executor[5636] dev=loop4 state=2
[ 1110.714450][ T5636] Teardown: task=syz-executor[5636] dev=loop4 state=2
[ 1110.775391][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1110.882205][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1111.215290][T30523] cgroup: name respecified
[ 1112.403889][T30578] loop2: detected capacity change from 0 to 256
[ 1112.476108][T30582] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1112.535612][T21902] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1112.587469][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1112.685857][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1112.711239][T21902] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1112.714744][T21902] usb 4-1: config 64 has an invalid interface number: 44 but max is 0
[ 1112.714770][T21902] usb 4-1: config 64 has no interface number 0
[ 1112.714814][T21902] usb 4-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9
[ 1112.714842][T21902] usb 4-1: config 64 interface 44 has no altsetting 0
[ 1112.759548][T21902] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2
[ 1112.759578][T21902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1112.759597][T21902] usb 4-1: Product: syz
[ 1112.759611][T21902] usb 4-1: Manufacturer: syz
[ 1112.759625][T21902] usb 4-1: SerialNumber: syz
[ 1112.874807][T30590] loop0: detected capacity change from 0 to 4096
[ 1112.885484][T30590] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[ 1112.940708][T30589] loop4: detected capacity change from 0 to 4096
[ 1112.958972][T30589] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[ 1113.055817][T21902] iowarrior 4-1:64.44: no interrupt-out endpoint found
[ 1113.063711][ T4909] Bluetooth: hci2: unexpected event for opcode 0x0404
[ 1113.068768][T30590] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[ 1113.100793][T21902] usb 4-1: USB disconnect, device number 8
[ 1113.174240][T30589] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[ 1113.518268][ T5970] Flush: task=udevd[5970] dev=loop0 state=2
[ 1113.600821][ T5970] Teardown: task=udevd[5970] dev=loop0 state=2
[ 1113.636371][ T5636] Flush: task=syz-executor[5636] dev=loop4 state=2
[ 1113.725141][ T5636] Teardown: task=syz-executor[5636] dev=loop4 state=2
[ 1113.882495][ T37] audit: type=1326 audit(2000000248.207:689): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30624 comm="syz.1.11381" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1113.884470][ T37] audit: type=1326 audit(2000000248.207:690): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30624 comm="syz.1.11381" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1113.940305][ T37] audit: type=1326 audit(2000000248.254:691): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30624 comm="syz.1.11381" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1113.944901][T30629] loop4: detected capacity change from 0 to 256
[ 1113.958150][T30630] program syz.0.11380 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1113.965364][ T37] audit: type=1326 audit(2000000248.281:692): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30624 comm="syz.1.11381" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1113.965413][ T37] audit: type=1326 audit(2000000248.281:693): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30624 comm="syz.1.11381" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1113.965451][ T37] audit: type=1326 audit(2000000248.281:694): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30624 comm="syz.1.11381" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1113.995675][ T37] audit: type=1326 audit(2000000248.318:695): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30624 comm="syz.1.11381" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1113.997852][ T37] audit: type=1326 audit(2000000248.318:696): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30624 comm="syz.1.11381" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1114.002779][ T37] audit: type=1326 audit(2000000248.318:697): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30624 comm="syz.1.11381" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1114.475852][ T5636] Flush: task=syz-executor[5636] dev=loop4 state=2
[ 1114.507003][T30646] __nla_validate_parse: 31 callbacks suppressed
[ 1114.507023][T30646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11389'.
[ 1114.646210][ T5636] Teardown: task=syz-executor[5636] dev=loop4 state=2
[ 1114.732027][T21902] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1114.758490][T30659] binder: 30654:30659 ioctl 40046210 0 returned -14
[ 1114.894701][T21902] usb 2-1: Using ep0 maxpacket: 16
[ 1114.899641][T21902] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1114.901516][T21902] usb 2-1: config 251 has an invalid interface number: 33 but max is 0
[ 1114.901543][T21902] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[ 1114.901562][T21902] usb 2-1: config 251 has no interface number 0
[ 1114.901593][T21902] usb 2-1: config 251 interface 33 has no altsetting 0
[ 1114.959004][T21902] usb 2-1: New USB device found, idVendor=12d1, idProduct=9634, bcdDevice=18.90
[ 1114.959033][T21902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1114.959053][T21902] usb 2-1: Product: syz
[ 1114.959067][T21902] usb 2-1: Manufacturer: syz
[ 1114.959081][T21902] usb 2-1: SerialNumber: syz
[ 1115.257835][T21902] qmi_wwan 2-1:251.33: probe with driver qmi_wwan failed with error -22
[ 1115.290398][T21902] usb 2-1: USB disconnect, device number 20
[ 1115.988755][T30704] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11417'.
[ 1116.377826][ T5967] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1116.544102][ T5967] usb 3-1: config 9 has an invalid interface number: 245 but max is 0
[ 1116.544128][ T5967] usb 3-1: config 9 has no interface number 0
[ 1116.544159][ T5967] usb 3-1: config 9 interface 245 has no altsetting 0
[ 1116.549689][ T5967] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=d1.59
[ 1116.549724][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1116.549742][ T5967] usb 3-1: Product: syz
[ 1116.549755][ T5967] usb 3-1: Manufacturer: syz
[ 1116.549768][ T5967] usb 3-1: SerialNumber: syz
[ 1116.672010][T30738] [U] Œ/ûTÛEðãòNïhÝ>¹Ó´Oˆ]ê¿>ý&º+xä
[ 1116.672044][T30738] [U] ¸Êå½}ýcsLý¾µ–63ûñº?gö¾?¢6ŒCw±“ƒâÉös´I’¾ær;&tIlytŸo˜ME#ÈR·_m*Ôf¢,À·
[ 1116.672055][T30738] [U] Sz˜Ô
[ 1116.672137][T30738] [U] µ7¶(aƒPú5üzkÑʈE:Ûæ^óZ“k”iX=…DÐEÛŸK£è‰½Ês9$›Ù}PkZņKøÞWJÍĺhØx²Àäg-}¶ãÆóÔSpšÐ ÅŽbxÒúy·`fë
[ 1116.672534][T30737] [U] ã
[ 1116.888474][ T5967] pegasus 3-1:9.245: Missing or invalid endpoints
[ 1116.899846][ T5967] usb 3-1: USB disconnect, device number 4
[ 1117.147551][T21261] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1117.311194][T21261] usb 5-1: Using ep0 maxpacket: 16
[ 1117.316897][T21261] usb 5-1: config 254 has an invalid interface number: 235 but max is 0
[ 1117.316923][T21261] usb 5-1: config 254 has no interface number 0
[ 1117.316967][T21261] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[ 1117.316991][T21261] usb 5-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1117.317016][T21261] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1117.317042][T21261] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1117.317063][T21261] usb 5-1: config 254 interface 235 has no altsetting 0
[ 1117.393708][T21261] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[ 1117.393738][T21261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1117.393758][T21261] usb 5-1: Product: syz
[ 1117.393771][T21261] usb 5-1: Manufacturer: syz
[ 1117.393786][T21261] usb 5-1: SerialNumber: syz
[ 1117.429211][T30744] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1117.463554][T30764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1117.655581][T30744] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1117.678775][T21261] usbtest 5-1:254.235: Linux gadget zero
[ 1117.678795][T21261] usbtest 5-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt)
[ 1117.746588][T30768] loop3: detected capacity change from 0 to 2048
[ 1117.751171][T30768] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362
[ 1117.792645][T30768] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1117.793207][T30768] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[ 1117.799308][T30768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1117.895495][T21902] usb 5-1: USB disconnect, device number 12
[ 1118.085660][T30786] loop1: detected capacity change from 0 to 64
[ 1118.088772][T30786] MINIX-fs: mounting file system with errors, running fsck is recommended
[ 1118.089338][T21261] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1118.130153][T30786] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[ 1118.257975][T21261] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1118.270641][T21261] usb 3-1: config 114 has an invalid interface number: 240 but max is 0
[ 1118.270668][T21261] usb 3-1: config 114 has no interface number 0
[ 1118.270711][T21261] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[ 1118.270735][T21261] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[ 1118.270760][T21261] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[ 1118.270784][T21261] usb 3-1: config 114 interface 240 has no altsetting 0
[ 1118.284718][ T5970] Flush: task=udevd[5970] dev=loop3 state=2
[ 1118.302110][ T5904] Flush: task=udevd[5904] dev=loop1 state=2
[ 1118.345022][T21261] usb 3-1: string descriptor 0 read error: -22
[ 1118.345171][T21261] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[ 1118.345195][T21261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1118.371699][ T5970] Teardown: task=udevd[5970] dev=loop3 state=2
[ 1118.380754][T30776] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1118.380871][T30776] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1118.392987][ T5904] Teardown: task=udevd[5904] dev=loop1 state=2
[ 1118.408630][T21261] ir_usb 3-1:114.240: IR Dongle converter detected
[ 1118.576719][T30798] ip6tnl6: entered promiscuous mode
[ 1118.670833][T21261] usb 3-1: IR Dongle converter now attached to ttyUSB0
[ 1118.862149][ T5646] usb 3-1: USB disconnect, device number 5
[ 1118.961291][ T5646] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[ 1118.968136][ T5646] ir_usb 3-1:114.240: device disconnected
[ 1118.971112][T30810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11469'.
[ 1119.045969][T30815] netlink: 'syz.0.11470': attribute type 5 has an invalid length.
[ 1119.156912][T30810] bond5: option miimon: invalid value (18446744073709551615)
[ 1119.156953][T30810] bond5: option miimon: allowed values 0 - 2147483647
[ 1119.181948][T30819] Invalid source name
[ 1119.199009][T30810] bond5 (unregistering): Released all slaves
[ 1119.547355][T30815] ip6erspan0: entered promiscuous mode
[ 1119.746837][T30837] netlink: 'syz.4.11481': attribute type 6 has an invalid length.
[ 1119.795748][T30841] loop1: detected capacity change from 0 to 64
[ 1119.986507][ T37] audit: type=1326 audit(2000000253.848:698): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30850 comm="syz.3.11491" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1119.988482][ T37] audit: type=1326 audit(2000000253.848:699): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30850 comm="syz.3.11491" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1119.989255][ T37] audit: type=1326 audit(2000000253.848:700): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30850 comm="syz.3.11491" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1119.989540][ T37] audit: type=1326 audit(2000000253.848:701): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30850 comm="syz.3.11491" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1119.989795][ T37] audit: type=1326 audit(2000000253.848:702): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30850 comm="syz.3.11491" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1119.990050][ T37] audit: type=1326 audit(2000000253.848:703): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30850 comm="syz.3.11491" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1119.990299][ T37] audit: type=1326 audit(2000000253.848:704): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30850 comm="syz.3.11491" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1119.990738][ T37] audit: type=1326 audit(2000000253.848:705): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30850 comm="syz.3.11491" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1119.991076][ T37] audit: type=1326 audit(2000000253.848:706): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30850 comm="syz.3.11491" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1120.783941][T30874] loop4: detected capacity change from 0 to 2048
[ 1120.849060][T30874] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1120.884512][ T5967] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[ 1121.011134][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1121.048984][ T5967] usb 4-1: config 0 has an invalid interface number: 6 but max is 0
[ 1121.049012][ T5967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1121.049031][ T5967] usb 4-1: config 0 has no interface number 0
[ 1121.049076][ T5967] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 1121.049102][ T5967] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1121.099246][ T5967] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[ 1121.099275][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1121.099295][ T5967] usb 4-1: Product: syz
[ 1121.099309][ T5967] usb 4-1: Manufacturer: syz
[ 1121.099323][ T5967] usb 4-1: SerialNumber: syz
[ 1121.113541][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1121.135469][ T5967] usb 4-1: config 0 descriptor??
[ 1121.143189][T30868] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1121.194347][ T5967] vmk80xx 4-1:0.6: driver 'vmk80xx' failed to auto-configure device.
[ 1121.204406][ T5967] vmk80xx 4-1:0.6: probe with driver vmk80xx failed with error -22
[ 1121.285924][ T5970] Flush: task=udevd[5970] dev=loop4 state=2
[ 1121.392957][ T5970] Teardown: task=udevd[5970] dev=loop4 state=2
[ 1121.421525][ T37] audit: type=1326 audit(2000000255.168:707): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30891 comm="syz.0.11509" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53644cde99 code=0x7ffc0000
[ 1121.463947][ T5646] usb 4-1: USB disconnect, device number 9
[ 1121.655797][ T5836] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[ 1121.688575][T30908] netlink: 'syz.4.11517': attribute type 10 has an invalid length.
[ 1121.695344][T30905] loop2: detected capacity change from 0 to 16
[ 1121.701998][T30905] erofs (device loop2): invalid sb_extslots 4192 (more than a fs block)
[ 1121.704497][T30905] Flush: task=syz.2.11516[30905] dev=loop2 state=2
[ 1121.785858][T30905] Teardown: task=syz.2.11516[30905] dev=loop2 state=2
[ 1121.844219][ T5836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1121.844245][ T5836] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1121.844294][ T5836] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[ 1121.844335][ T5836] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1121.844356][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1121.903382][T30893] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1121.909155][ T5836] hub 2-1:1.0: bad descriptor, ignoring hub
[ 1121.909191][ T5836] hub 2-1:1.0: probe with driver hub failed with error -5
[ 1121.911882][ T5836] cdc_wdm 2-1:1.0: skipping garbage
[ 1121.911900][ T5836] cdc_wdm 2-1:1.0: skipping garbage
[ 1121.911913][ T5836] cdc_wdm 2-1:1.0: skipping garbage
[ 1121.956920][ T5836] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1121.956941][ T5836] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1122.270743][ T5836] usb 2-1: USB disconnect, device number 21
[ 1122.368954][T30927] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[ 1122.552326][ T5646] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1122.687900][T30917] loop2: detected capacity change from 0 to 32768
[ 1122.742077][ T5646] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1122.742119][ T5646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1122.742137][ T5646] usb 5-1: Product: syz
[ 1122.742152][ T5646] usb 5-1: Manufacturer: syz
[ 1122.742165][ T5646] usb 5-1: SerialNumber: syz
[ 1122.835814][T30917] JBD2: Ignoring recovery information on journal
[ 1122.969486][ T5967] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1123.347176][T30917] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1123.654760][T30917] grow_buffers: requested out-of-range block 8029422755854968174 for device loop2
[ 1123.654785][T30917] (syz.2.11521,30917,0):ocfs2_read_blocks_sync:110 ERROR: status = -12
[ 1123.654877][T30917] (syz.2.11521,30917,0):ocfs2_get_suballoc_slot_bit:3160 ERROR: read block 8029422755854968174 failed -12
[ 1123.654933][T30917] (syz.2.11521,30917,0):ocfs2_get_suballoc_slot_bit:3192 ERROR: status = -12
[ 1123.654956][T30917] (syz.2.11521,30917,0):ocfs2_test_inode_bit:3278 ERROR: get alloc slot and bit failed -12
[ 1123.654978][T30917] (syz.2.11521,30917,0):ocfs2_test_inode_bit:3323 ERROR: status = -12
[ 1123.654998][T30917] (syz.2.11521,30917,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[ 1124.021859][T30959] loop0: detected capacity change from 0 to 64
[ 1124.542912][ T5967] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1124.963840][T30969] loop3: detected capacity change from 0 to 512
[ 1125.028540][T30969] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.11548: missing EA_INODE flag
[ 1125.028574][T30969] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1125.032355][ C0] EXT4-fs (loop3): error count since last fsck: 1
[ 1125.032378][ C0] EXT4-fs (loop3): initial error at time 2000000258: ext4_xattr_inode_iget:441: inode 11
[ 1125.032409][ C0] EXT4-fs (loop3): last error at time 2000000258: ext4_xattr_inode_iget:441: inode 11
[ 1125.080024][T30969] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.11548: error while reading EA inode 11 err=-117
[ 1125.080056][T30969] loop3: lost filesystem error report for type 5 error -117
[ 1125.127877][T30969] EXT4-fs (loop3): 1 orphan inode deleted
[ 1125.145145][T30969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1125.654477][ T5646] usb 5-1: USB disconnect, device number 13
[ 1125.765243][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1125.863756][ T5967] ath9k_htc: Failed to initialize the device
[ 1125.869815][ T5646] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1125.883109][ T5635] Flush: task=syz-executor[5635] dev=loop3 state=2
[ 1125.884133][ T5633] Flush: task=syz-executor[5633] dev=loop0 state=2
[ 1126.077091][ T5634] ocfs2: Unmounting device (7,2) on (node local)
[ 1126.141495][ T5633] Teardown: task=syz-executor[5633] dev=loop0 state=2
[ 1126.144248][ T5635] Teardown: task=syz-executor[5635] dev=loop3 state=2
[ 1126.203648][T30985] loop1: detected capacity change from 0 to 256
[ 1126.220440][T30985] exfat: Deprecated parameter 'namecase'
[ 1126.220479][T30985] exfat: Deprecated parameter 'namecase'
[ 1126.237233][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1126.340121][T30985] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[ 1126.386761][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1126.531840][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1126.637164][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1126.778658][ T5836] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[ 1126.829395][T31010] loop0: detected capacity change from 0 to 256
[ 1126.951849][ T5836] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 1126.951879][ T5836] usb 5-1: config 179 has no interface number 0
[ 1126.951935][ T5836] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[ 1126.951961][ T5836] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8
[ 1126.951988][ T5836] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1126.952014][ T5836] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8
[ 1126.952041][ T5836] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1126.952087][ T5836] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1126.952110][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.055333][T30997] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1127.055528][T30997] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1127.254785][ T5970] Flush: task=udevd[5970] dev=loop0 state=2
[ 1127.307225][ T5646] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[ 1127.442564][ T4909] Bluetooth: hci4: Received unexpected HCI Event 0x00
[ 1127.454419][ T5967] usb 5-1: USB disconnect, device number 14
[ 1127.454505][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1127.454578][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1127.463135][ T5970] Teardown: task=udevd[5970] dev=loop0 state=2
[ 1127.472047][ T5646] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[ 1127.472073][ T5646] usb 2-1: config 0 has no interface number 0
[ 1127.472116][ T5646] usb 2-1: config 0 interface 41 has no altsetting 0
[ 1127.474290][ T5646] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1127.474313][ T5646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1127.474332][ T5646] usb 2-1: Product: syz
[ 1127.474345][ T5646] usb 2-1: Manufacturer: syz
[ 1127.474359][ T5646] usb 2-1: SerialNumber: syz
[ 1127.501721][ T5646] usb 2-1: config 0 descriptor??
[ 1127.769537][T31030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11574'.
[ 1127.955189][T31038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1127.956856][ T5646] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[ 1127.960700][ T5646] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[ 1127.974957][ T5646] usb 2-1: USB disconnect, device number 22
[ 1128.863880][T31079] loop4: detected capacity change from 0 to 164
[ 1129.081060][ T5970] Flush: task=udevd[5970] dev=loop4 state=2
[ 1129.161498][ T5970] Teardown: task=udevd[5970] dev=loop4 state=2
[ 1129.166328][T31089] openvswitch: netlink: Multiple metadata blocks provided
[ 1129.311370][ T5646] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[ 1129.476230][ T5646] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1129.476256][ T5646] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1129.476276][ T5646] usb 1-1: config 1 has no interface number 0
[ 1129.476321][ T5646] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1129.476347][ T5646] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1129.476373][ T5646] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1129.476474][ T5646] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1129.476496][ T5646] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1129.479241][ T5646] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1129.479268][ T5646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1129.479289][ T5646] usb 1-1: Product: syz
[ 1129.479303][ T5646] usb 1-1: Manufacturer: syz
[ 1129.479318][ T5646] usb 1-1: SerialNumber: syz
[ 1129.601974][T31085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1129.686333][T31103] loop2: detected capacity change from 0 to 256
[ 1129.787223][T31103] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x9c8165b0, utbl_chksum : 0xe619d30d)
[ 1129.856580][T31103] exFAT-fs (loop2): error, data size is invalid(16781312)
[ 1129.856603][T31103] exFAT-fs (loop2): Filesystem has been set read-only
[ 1130.103903][ T5646] cdc_ncm 1-1:1.1: bind() failure
[ 1130.110981][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1130.171094][ T5646] usb 1-1: USB disconnect, device number 15
[ 1130.221769][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1131.169841][T31136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1131.876862][T31152] loop0: detected capacity change from 0 to 4096
[ 1131.896682][T31152] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[ 1132.067071][T31152] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[ 1132.158463][ T37] kauditd_printk_skb: 13 callbacks suppressed
[ 1132.158481][ T37] audit: type=1326 audit(2000000265.074:721): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31165 comm="syz.3.11642" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1132.158524][ T37] audit: type=1326 audit(2000000265.074:722): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31165 comm="syz.3.11642" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1132.221823][ T37] audit: type=1326 audit(2000000265.130:723): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31165 comm="syz.3.11642" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1132.222273][ T37] audit: type=1326 audit(2000000265.130:724): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31165 comm="syz.3.11642" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1132.222316][ T37] audit: type=1326 audit(2000000265.130:725): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31165 comm="syz.3.11642" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1132.301082][ T37] audit: type=1326 audit(2000000265.213:726): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31165 comm="syz.3.11642" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc1bb13e6ce code=0x7ffc0000
[ 1132.301443][ T37] audit: type=1326 audit(2000000265.213:727): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31165 comm="syz.3.11642" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1132.301701][ T37] audit: type=1326 audit(2000000265.213:728): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31165 comm="syz.3.11642" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1132.302793][ T37] audit: type=1326 audit(2000000265.213:729): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31165 comm="syz.3.11642" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1132.303110][ T37] audit: type=1326 audit(2000000265.213:730): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31165 comm="syz.3.11642" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1132.354388][T31170] loop1: detected capacity change from 0 to 256
[ 1132.369312][T31170] exfat: Deprecated parameter 'namecase'
[ 1132.495079][T31170] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d)
[ 1132.519810][T31173] loop2: detected capacity change from 0 to 128
[ 1132.582884][T31173] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1132.604031][T31173] ext4 filesystem being mounted at /2392/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1132.827152][ T5896] Flush: task=udevd[5896] dev=loop0 state=2
[ 1132.898857][ T5634] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1133.026604][ T5896] Teardown: task=udevd[5896] dev=loop0 state=2
[ 1133.112776][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1133.150773][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1133.213515][T31187] loop0: detected capacity change from 0 to 256
[ 1133.252033][T31187] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[ 1133.264911][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1133.269051][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1133.280373][T31187] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff)
[ 1133.539968][ T5970] Flush: task=udevd[5970] dev=loop0 state=2
[ 1133.697463][T31203] overlayfs: conflicting options: nfs_export=on,index=off
[ 1133.735167][ T5970] Teardown: task=udevd[5970] dev=loop0 state=2
[ 1133.802775][T31199] loop4: detected capacity change from 0 to 4096
[ 1134.030503][T31199] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[ 1134.031017][T31214] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1134.031290][T31199] NILFS (loop4): mounting fs with errors
[ 1134.477214][T31199] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 159744
[ 1134.561802][T31199] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1134.561835][T31199] NILFS (loop4): error -5 truncating bmap (ino=15)
[ 1134.727493][T21957] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1134.894848][ T5636] Flush: task=syz-executor[5636] dev=loop4 state=2
[ 1134.914613][T21957] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1134.914657][T21957] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1134.914683][T21957] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1134.920645][T21957] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1134.920673][T21957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1134.920692][T21957] usb 1-1: Product: syz
[ 1134.920708][T21957] usb 1-1: Manufacturer: syz
[ 1134.920722][T21957] usb 1-1: SerialNumber: syz
[ 1134.952988][T21957] usb 1-1: config 0 descriptor??
[ 1134.953786][T31225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1134.953905][T31225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1134.962404][T21957] usb 1-1: ucan: probing device on interface #0
[ 1135.002854][T31236] loop3: detected capacity change from 0 to 4096
[ 1135.013348][T31236] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1135.119842][ T5636] Teardown: task=syz-executor[5636] dev=loop4 state=2
[ 1135.141298][T31236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1135.417310][T31252] netlink: 'syz.1.11680': attribute type 27 has an invalid length.
[ 1135.417872][T31252] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[ 1135.475207][T21902] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1135.490373][T21957] usb 1-1: ucan: failed to retrieve device info
[ 1135.490396][T21957] usb 1-1: ucan: probe failed; try to update the device firmware
[ 1135.533085][T21957] usb 1-1: USB disconnect, device number 16
[ 1135.574148][ T5646] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[ 1135.639940][T31256] loop1: detected capacity change from 0 to 256
[ 1135.641089][T31256] exfat: Deprecated parameter 'utf8'
[ 1135.641106][T31256] exfat: Deprecated parameter 'utf8'
[ 1135.642163][T21902] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1135.642186][T21902] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[ 1135.642246][T21902] usb 4-1: config 220 interface 1 altsetting 5 endpoint 0x89 has an invalid bInterval 48, changing to 7
[ 1135.642272][T21902] usb 4-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid maxpacket 9583, setting to 1024
[ 1135.642298][T21902] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[ 1135.642325][T21902] usb 4-1: config 220 interface 0 has no altsetting 0
[ 1135.642343][T21902] usb 4-1: config 220 interface 1 has no altsetting 0
[ 1135.645167][T21902] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9
[ 1135.645193][T21902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.645213][T21902] usb 4-1: Product: syz
[ 1135.645227][T21902] usb 4-1: Manufacturer: syz
[ 1135.645240][T21902] usb 4-1: SerialNumber: syz
[ 1135.648225][T31256] exfat: Deprecated parameter 'namecase'
[ 1135.691309][T31256] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[ 1135.817553][ T5646] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1135.817618][ T5646] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1135.817645][ T5646] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1135.817684][ T5646] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1135.817722][ T5646] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1135.817745][ T5646] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1135.820798][ T5646] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1135.820825][ T5646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.820845][ T5646] usb 5-1: Product: syz
[ 1135.842341][ T5646] usb 5-1: Manufacturer: syz
[ 1135.842362][ T5646] usb 5-1: SerialNumber: syz
[ 1135.938784][T31249] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1136.031884][T21902] usb 4-1: selecting invalid altsetting 0
[ 1136.090285][T21902] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22
[ 1136.132549][T21902] usb 4-1: selecting invalid altsetting 0
[ 1136.132589][T21902] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[ 1136.164890][T21902] usb 4-1: USB disconnect, device number 10
[ 1136.217580][T31249] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1136.261707][ T5896] Flush: task=udevd[5896] dev=loop1 state=2
[ 1136.355427][ T5896] Teardown: task=udevd[5896] dev=loop1 state=2
[ 1136.525453][ T5646] cdc_ncm 5-1:1.0: bind() failure
[ 1136.635941][ T5646] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1136.636942][ T5646] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1136.639898][ T5646] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[ 1136.720083][ T5646] usb 5-1: USB disconnect, device number 15
[ 1136.790668][ T5635] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1136.906095][ T5635] Flush: task=syz-executor[5635] dev=loop3 state=2
[ 1136.939785][T31274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11692'.
[ 1136.939816][T31274] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1136.991272][ T5635] Teardown: task=syz-executor[5635] dev=loop3 state=2
[ 1137.172413][T31280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11691'.
[ 1137.406796][T31289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11699'.
[ 1137.729530][T31299] loop2: detected capacity change from 0 to 2048
[ 1137.734962][T31299] udf: Bad value for 'volume'
[ 1137.735389][T31299] Flush: task=syz.2.11703[31299] dev=loop2 state=2
[ 1137.837079][T31299] Teardown: task=syz.2.11703[31299] dev=loop2 state=2
[ 1137.918408][T31299] ext4: Unexpected value for 'discard'
[ 1137.932857][ T37] audit: type=1326 audit(2000000270.401:731): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31309 comm="syz.4.11708" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1137.957843][ T37] audit: type=1326 audit(2000000270.401:732): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31309 comm="syz.4.11708" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1137.958293][ T37] audit: type=1326 audit(2000000270.438:733): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31309 comm="syz.4.11708" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1137.958619][ T37] audit: type=1326 audit(2000000270.438:734): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31309 comm="syz.4.11708" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1137.958914][ T37] audit: type=1326 audit(2000000270.438:735): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31309 comm="syz.4.11708" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1138.024316][T21902] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1138.185862][T21902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1138.185915][T21902] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1138.185938][T21902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.196110][T21902] usb 1-1: config 0 descriptor??
[ 1138.268820][T31322] loop1: detected capacity change from 0 to 128
[ 1138.648393][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1138.669352][T31336] @0Ù: renamed from bond_slave_1 (while UP)
[ 1138.688322][T21902] ath6kl: Failed to read usb control message: -71
[ 1138.688371][T21902] ath6kl: Unable to read the bmi data from the device: -71
[ 1138.688386][T21902] ath6kl: Unable to recv target info: -71
[ 1138.689454][T21902] ath6kl: Failed to init ath6kl core: -71
[ 1138.689987][T21902] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1138.775026][T21902] usb 1-1: USB disconnect, device number 17
[ 1138.786739][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1138.940797][T31341] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11722'.
[ 1138.940827][T31341] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11722'.
[ 1139.252086][T31352] overlay: ./bus is not a directory
[ 1139.377649][T31356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11729'.
[ 1139.397883][T31354] loop1: detected capacity change from 0 to 2048
[ 1139.444044][T31354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1139.605903][T31371] trusted_key: encrypted_key: insufficient parameters specified
[ 1139.799746][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1139.923868][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1140.022366][ T37] audit: type=1326 audit(2000000272.331:736): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31386 comm="syz.2.11744" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e3a3de99 code=0x7ffc0000
[ 1140.022553][ T37] audit: type=1326 audit(2000000272.331:737): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31386 comm="syz.2.11744" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e3a3de99 code=0x7ffc0000
[ 1140.024438][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1140.081628][ T37] audit: type=1326 audit(2000000272.395:738): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31386 comm="syz.2.11744" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e3a3de99 code=0x7ffc0000
[ 1140.081768][ T37] audit: type=1326 audit(2000000272.395:739): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31386 comm="syz.2.11744" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e3a3de99 code=0x7ffc0000
[ 1140.081950][ T37] audit: type=1326 audit(2000000272.395:740): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31386 comm="syz.2.11744" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fe3e3a3de99 code=0x7ffc0000
[ 1140.347540][T31399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11749'.
[ 1141.833059][T21902] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[ 1141.865446][T31461] loop3: detected capacity change from 0 to 256
[ 1141.868133][T31461] exfat: Deprecated parameter 'namecase'
[ 1141.868188][T31461] exfat: Deprecated parameter 'namecase'
[ 1141.917587][T31461] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[ 1142.019459][T21902] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1142.019494][T21902] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[ 1142.022165][T21902] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1142.022189][T21902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1142.022208][T21902] usb 3-1: SerialNumber: syz
[ 1142.082789][T31452] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1142.307459][T31452] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1142.527826][T21902] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[ 1142.551863][T21902] usb 3-1: USB disconnect, device number 6
[ 1142.686966][ T5635] Flush: task=syz-executor[5635] dev=loop3 state=2
[ 1142.787812][ T5635] Teardown: task=syz-executor[5635] dev=loop3 state=2
[ 1143.661407][T31497] loop0: detected capacity change from 0 to 512
[ 1143.679190][T31497] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 1143.724614][T31497] UDF-fs: error (device loop0): udf_read_inode: (ino 19) failed ident=264
[ 1144.080679][ T5633] Flush: task=syz-executor[5633] dev=loop0 state=2
[ 1144.183443][ T5633] Teardown: task=syz-executor[5633] dev=loop0 state=2
[ 1144.331319][T31522] netlink: 'syz.3.11806': attribute type 6 has an invalid length.
[ 1144.336501][T31524] loop2: detected capacity change from 0 to 256
[ 1144.451498][T31528] loop1: detected capacity change from 0 to 512
[ 1144.453481][T31528] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1144.453499][T31528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1144.497821][T31528] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.11807: bad orphan inode 131083
[ 1144.497850][T31528] loop1: lost filesystem error report for type 5 error -117
[ 1144.509891][T31528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1144.544240][ T37] kauditd_printk_skb: 3 callbacks suppressed
[ 1144.544268][ T37] audit: type=1326 audit(2000000276.513:744): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31531 comm="syz.4.11810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1144.544388][ T37] audit: type=1326 audit(2000000276.513:745): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31531 comm="syz.4.11810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1144.546517][ T37] audit: type=1326 audit(2000000276.513:746): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31531 comm="syz.4.11810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1144.548178][ T37] audit: type=1326 audit(2000000276.513:747): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31531 comm="syz.4.11810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1144.548225][ T37] audit: type=1326 audit(2000000276.513:748): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31531 comm="syz.4.11810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1144.548266][ T37] audit: type=1326 audit(2000000276.513:749): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31531 comm="syz.4.11810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1144.548307][ T37] audit: type=1326 audit(2000000276.513:750): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31531 comm="syz.4.11810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1144.548346][ T37] audit: type=1326 audit(2000000276.513:751): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=31531 comm="syz.4.11810" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f70103bde99 code=0x7ffc0000
[ 1144.565491][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1144.602546][T31523] loop0: detected capacity change from 0 to 4096
[ 1144.613733][T31523] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[ 1144.615728][T31523] ntfs3(loop0): It is recommended to use chkdsk.
[ 1144.695566][T31523] ntfs3(loop0): ino=5, "/" indx_read_ra
[ 1144.803666][ T5967] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1144.859549][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1144.921678][T31536] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.4194304)
[ 1144.981340][ T5967] usb 2-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config
[ 1144.981406][ T5967] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1144.984126][ T5967] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1144.984155][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1144.984175][ T5967] usb 2-1: SerialNumber: syz
[ 1145.044487][ T5967] usb 2-1: No union descriptors
[ 1145.228301][ T5970] Flush: task=udevd[5970] dev=loop0 state=2
[ 1145.264158][T21949] usb 2-1: USB disconnect, device number 23
[ 1145.309953][ T5970] Teardown: task=udevd[5970] dev=loop0 state=2
[ 1145.612322][T31554] loop2: detected capacity change from 0 to 256
[ 1145.852594][T31534] loop3: detected capacity change from 0 to 32768
[ 1145.881054][ T5970] Flush: task=udevd[5970] dev=loop2 state=2
[ 1145.988114][ T5970] Teardown: task=udevd[5970] dev=loop2 state=2
[ 1145.994163][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1146.151634][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1146.185697][T31568] loop0: detected capacity change from 0 to 64
[ 1146.201786][ T5635] Flush: task=syz-executor[5635] dev=loop3 state=2
[ 1146.261264][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1146.450587][ T5635] Teardown: task=syz-executor[5635] dev=loop3 state=2
[ 1146.618706][ T5633] Flush: task=syz-executor[5633] dev=loop0 state=2
[ 1146.729304][ T5633] Teardown: task=syz-executor[5633] dev=loop0 state=2
[ 1146.801753][T31570] loop2: detected capacity change from 0 to 32768
[ 1146.803656][T31570] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11829 (31570)
[ 1146.833567][T31570] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1146.833601][T31570] BTRFS info (device loop2): using sha256 checksum algorithm
[ 1147.012176][T31570] BTRFS info (device loop2): turning off barriers
[ 1147.012201][T31570] BTRFS info (device loop2): enabling free space tree
[ 1147.241005][ T5634] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1147.823462][ T5970] Flush: task=udevd[5970] dev=loop2 state=2
[ 1147.949466][T31624] loop3: detected capacity change from 0 to 1764
[ 1148.017842][ T5970] Teardown: task=udevd[5970] dev=loop2 state=2
[ 1148.044619][ T5635] Flush: task=syz-executor[5635] dev=loop3 state=2
[ 1148.182391][ T5635] Teardown: task=syz-executor[5635] dev=loop3 state=2
[ 1148.893362][T21902] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1149.111742][T21902] usb 4-1: Using ep0 maxpacket: 8
[ 1149.114257][T21902] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1149.115654][T21902] usb 4-1: config 4 interface 0 has no altsetting 0
[ 1149.120741][T21902] usb 4-1: string descriptor 0 read error: -22
[ 1149.120826][T21902] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1149.120848][T21902] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1149.261755][T21902] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1149.290991][T21902] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1149.292900][T21902] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1149.292951][T21902] usb 4-1: media controller created
[ 1149.336983][T31665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11867'.
[ 1149.371861][T31669] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed
[ 1149.573798][T21902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1149.683920][T31666] loop4: detected capacity change from 0 to 4096
[ 1149.685082][T31666] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1149.718370][T31666] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1149.780878][T31666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1150.273177][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1150.275573][T31684] loop1: detected capacity change from 0 to 256
[ 1150.383495][T21902] usb 4-1: USB disconnect, device number 11
[ 1150.677577][ T5970] Flush: task=udevd[5970] dev=loop4 state=2
[ 1150.752758][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1150.765128][ T5970] Teardown: task=udevd[5970] dev=loop4 state=2
[ 1150.856904][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1152.066049][T31738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11901'.
[ 1152.475325][T31716] loop2: detected capacity change from 0 to 32768
[ 1152.481249][T31750] binder: Bad value for 'max'
[ 1152.530619][T31716] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 71: chain list count 102
[ 1152.530673][T31716] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1152.530685][T31716] OCFS2: File system is now read-only.
[ 1152.530696][T31716] (syz.2.11891,31716,1):ocfs2_read_locked_inode:633 ERROR: status = -30
[ 1152.530826][T31716] (syz.2.11891,31716,1):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[ 1152.531442][T31716] (syz.2.11891,31716,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[ 1152.531468][T31716] (syz.2.11891,31716,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs?
[ 1152.531490][T31716] (syz.2.11891,31716,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[ 1152.531512][T31716] (syz.2.11891,31716,1):ocfs2_initialize_super:2194 ERROR: status = -30
[ 1152.531605][T31716] (syz.2.11891,31716,1):ocfs2_fill_super:1177 ERROR: status = -30
[ 1152.920843][ T5896] Flush: task=udevd[5896] dev=loop2 state=2
[ 1152.956477][T31770] fuse: Bad value for 'fd'
[ 1153.004414][ T5896] Teardown: task=udevd[5896] dev=loop2 state=2
[ 1153.147108][T31777] loop1: detected capacity change from 0 to 256
[ 1153.251761][T31776] bridge0: port 4(netdevsim1) entered blocking state
[ 1153.252404][T31776] bridge0: port 4(netdevsim1) entered disabled state
[ 1153.252728][T31776] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[ 1153.685961][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1153.776961][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1154.290202][T31782] loop2: detected capacity change from 0 to 32768
[ 1154.300434][T21902] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1154.327532][T31782] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1154.417038][T31782] XFS (loop2): Ending clean mount
[ 1154.465312][T21902] usb 5-1: config 127 has an invalid interface number: 6 but max is 0
[ 1154.465339][T21902] usb 5-1: config 127 has no interface number 0
[ 1154.465370][T21902] usb 5-1: config 127 interface 6 has no altsetting 0
[ 1154.468032][T21902] usb 5-1: New USB device found, idVendor=050d, idProduct=0109, bcdDevice=56.f2
[ 1154.468059][T21902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1154.468077][T21902] usb 5-1: Product: syz
[ 1154.468237][T21902] usb 5-1: Manufacturer: syz
[ 1154.468252][T21902] usb 5-1: SerialNumber: syz
[ 1154.603833][ T5836] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1154.674950][ T5634] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1154.790107][ T5836] usb 4-1: Using ep0 maxpacket: 32
[ 1154.797463][ T5836] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1154.797556][ T5836] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1154.802550][ T5836] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1154.802577][ T5836] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1154.802658][ T5836] usb 4-1: Product: syz
[ 1154.802672][ T5836] usb 4-1: Manufacturer: syz
[ 1154.844057][T21904] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[ 1154.977524][T21902] mct_u232 5-1:127.6: MCT U232 converter detected
[ 1154.981674][T21902] mct_u232 ttyUSB0: expected endpoint missing
[ 1155.014471][ T5836] hub 4-1:4.0: USB hub found
[ 1155.040024][T21902] usb 5-1: USB disconnect, device number 16
[ 1155.101004][T21902] mct_u232 5-1:127.6: device disconnected
[ 1155.126812][T21904] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1155.126842][T21904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1155.215609][ T5836] hub 4-1:4.0: 2 ports detected
[ 1155.256486][T21904] usb 1-1: config 0 descriptor??
[ 1155.294202][T21904] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1155.378174][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1155.460117][ T5836] hub 4-1:4.0: hub_hub_status failed (err = -71)
[ 1155.460142][ T5836] hub 4-1:4.0: config failed, can't get hub status (err -71)
[ 1155.488553][T31836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11947'.
[ 1155.568510][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1155.742560][ T5836] usb 4-1: USB disconnect, device number 12
[ 1155.867118][T21904] gp8psk: usb in 128 operation failed.
[ 1155.981229][T21904] gp8psk: usb in 137 operation failed.
[ 1155.981250][T21904] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1155.981288][T21904] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 1156.021069][T21904] usb 1-1: USB disconnect, device number 18
[ 1156.327642][T31859] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11957'.
[ 1156.378062][T31859] veth2: entered allmulticast mode
[ 1156.614765][T31870] 9p: Unknown access argument : -22
[ 1156.845783][T21904] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1156.880920][T31882] loop1: detected capacity change from 0 to 256
[ 1157.019925][T21904] usb 1-1: Using ep0 maxpacket: 16
[ 1157.027076][T21904] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1157.027107][T21904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1157.027127][T21904] usb 1-1: Product: syz
[ 1157.027141][T21904] usb 1-1: Manufacturer: syz
[ 1157.027155][T21904] usb 1-1: SerialNumber: syz
[ 1157.048641][T21904] usb 1-1: config 0 descriptor??
[ 1157.071407][T21904] visor 1-1:0.0: Sony Clie 3.5 converter detected
[ 1157.308778][T31896] loop3: detected capacity change from 0 to 256
[ 1157.491201][ T5970] Flush: task=udevd[5970] dev=loop1 state=2
[ 1157.543119][T21904] usb 1-1: clie_3_5_startup: get interface number failed: -71
[ 1157.543278][T21904] visor 1-1:0.0: probe with driver visor failed with error -71
[ 1157.571158][T21904] usb 1-1: USB disconnect, device number 19
[ 1157.645801][T31906] loop2: detected capacity change from 0 to 512
[ 1157.647104][T31906] EXT4-fs: Ignoring removed i_version option
[ 1157.662434][ T5970] Teardown: task=udevd[5970] dev=loop1 state=2
[ 1157.668031][T31906] EXT4-fs: Ignoring removed bh option
[ 1157.703939][T31906] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.11982: inode #13: comm syz.2.11982: iget: illegal inode #
[ 1157.703972][T31906] loop2: lost filesystem error report for type 5 error -117
[ 1157.704864][T31909] loop1: detected capacity change from 0 to 64
[ 1157.705276][T31906] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.11982: couldn't read orphan inode 13 (err -117)
[ 1157.705303][T31906] loop2: lost filesystem error report for type 5 error -117
[ 1157.750049][T31906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1157.783262][ T5839] Flush: task=udevd[5839] dev=loop3 state=2
[ 1157.811019][T31914] loop4: detected capacity change from 0 to 256
[ 1157.834698][T31914] exfat: Deprecated parameter 'utf8'
[ 1157.834775][T31914] exfat: Deprecated parameter 'namecase'
[ 1157.834832][T31914] exfat: Deprecated parameter 'namecase'
[ 1157.834907][T31914] exfat: Deprecated parameter 'namecase'
[ 1157.836020][T31906] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.11982: deleted inode referenced: 15
[ 1157.892430][T31914] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[ 1157.901835][T31909] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[ 1157.936222][ T5839] Teardown: task=udevd[5839] dev=loop3 state=2
[ 1158.088746][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1158.138227][ T5636] Flush: task=syz-executor[5636] dev=loop4 state=2
[ 1158.201151][ T5970] Flush: task=udevd[5970] dev=loop1 state=2
[ 1158.239286][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1158.373605][ T5636] Teardown: task=syz-executor[5636] dev=loop4 state=2
[ 1158.373805][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1158.378864][ T5970] Teardown: task=udevd[5970] dev=loop1 state=2
[ 1158.813367][T31940] program syz.3.11997 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1158.813687][T31940] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1159.034978][T21949] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1159.197701][T21949] usb 5-1: Using ep0 maxpacket: 8
[ 1159.202818][T21949] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1159.202861][T21949] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1159.202881][T21949] usb 5-1: Product: syz
[ 1159.202895][T21949] usb 5-1: Manufacturer: syz
[ 1159.202909][T21949] usb 5-1: SerialNumber: syz
[ 1159.245171][T21949] usb 5-1: config 0 descriptor??
[ 1159.260467][T21949] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1159.272107][T21904] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1159.458483][T21904] usb 1-1: Using ep0 maxpacket: 8
[ 1159.466671][T21904] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[ 1159.466695][T21904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1159.466715][T21904] usb 1-1: config 0 has no interface number 0
[ 1159.466744][T21904] usb 1-1: config 0 interface 52 has no altsetting 0
[ 1159.466774][T21904] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[ 1159.466797][T21904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1159.485382][T21949] gspca_zc3xx: reg_w_i err -71
[ 1159.485473][T21949] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1159.505677][T21949] usb 5-1: USB disconnect, device number 17
[ 1159.557714][T21904] usb 1-1: config 0 descriptor??
[ 1159.756086][T31976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12014'.
[ 1160.042140][T31987] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1160.063543][T31985] loop3: detected capacity change from 0 to 2048
[ 1160.071256][T21949] usb 1-1: USB disconnect, device number 20
[ 1160.125807][T31985] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1160.303767][ T5896] Flush: task=udevd[5896] dev=loop3 state=2
[ 1160.378966][ T5896] Teardown: task=udevd[5896] dev=loop3 state=2
[ 1160.466170][T21904] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1160.658575][T21904] usb 2-1: Using ep0 maxpacket: 16
[ 1160.676160][T21904] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1160.677836][T21904] usb 2-1: config 9 has an invalid interface number: 57 but max is 0
[ 1160.677859][T21904] usb 2-1: config 9 has no interface number 0
[ 1160.677890][T21904] usb 2-1: config 9 interface 57 has no altsetting 0
[ 1160.733921][T21904] usb 2-1: string descriptor 0 read error: -22
[ 1160.734062][T21904] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[ 1160.734087][T21904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.838541][T32015] loop0: detected capacity change from 0 to 1764
[ 1160.855257][T32017] loop3: detected capacity change from 0 to 256
[ 1160.856657][T32017] exfat: Deprecated parameter 'utf8'
[ 1160.863135][T32017] exfat: Deprecated parameter 'utf8'
[ 1160.863227][T32017] exfat: Deprecated parameter 'namecase'
[ 1160.863357][T32017] exfat: Deprecated parameter 'namecase'
[ 1160.912985][T32017] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[ 1160.934772][T32015] iso9660: Corrupted directory entry in block 14 of inode 1920
[ 1161.123555][ T5896] Flush: task=udevd[5896] dev=loop0 state=2
[ 1161.211340][ T5896] Teardown: task=udevd[5896] dev=loop0 state=2
[ 1161.240211][T32023] loop0: detected capacity change from 0 to 16
[ 1161.251005][ T5839] Flush: task=udevd[5839] dev=loop3 state=2
[ 1161.326400][T32023] erofs (device loop0): mounted with root inode @ nid 36.
[ 1161.326499][T21904] video4linux radio48: keene_cmd_main failed (-71)
[ 1161.326536][T21904] radio-keene 2-1:9.57: V4L2 device registered as radio48
[ 1161.359164][T21904] usb 2-1: USB disconnect, device number 24
[ 1161.407682][ T5839] Teardown: task=udevd[5839] dev=loop3 state=2
[ 1161.547824][ T5896] Flush: task=udevd[5896] dev=loop0 state=2
[ 1161.623035][ T5896] Teardown: task=udevd[5896] dev=loop0 state=2
[ 1162.260984][T32062] netlink: 'syz.1.12054': attribute type 12 has an invalid length.
[ 1162.261006][T32062] netlink: 'syz.1.12054': attribute type 5 has an invalid length.
[ 1162.525628][T32074] loop1: detected capacity change from 0 to 64
[ 1162.592404][T32080] bridge0: port 3(netdevsim1) entered blocking state
[ 1162.592799][T32080] bridge0: port 3(netdevsim1) entered disabled state
[ 1162.593106][T32080] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[ 1162.639557][T32080] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[ 1162.861887][T32082] bond0: entered allmulticast mode
[ 1162.863475][T32082] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1163.088594][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1163.258893][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1163.269084][ T5967] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[ 1163.441271][ T5967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1163.460405][ T5967] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[ 1163.460435][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.460456][ T5967] usb 3-1: Product: syz
[ 1163.460469][ T5967] usb 3-1: Manufacturer: syz
[ 1163.460484][ T5967] usb 3-1: SerialNumber: syz
[ 1163.484263][ T5967] usb 3-1: config 0 descriptor??
[ 1163.510358][ T5967] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1163.510477][ T5967] imon 3-1:0.0: unable to initialize intf0, err -19
[ 1163.510493][ T5967] imon:imon_probe: failed to initialize context!
[ 1163.510505][ T5967] imon 3-1:0.0: unable to register, err -19
[ 1163.615619][T21955] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 1163.763036][ T5967] usb 3-1: USB disconnect, device number 7
[ 1163.794841][T21955] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1163.794869][T21955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.794888][T21955] usb 1-1: Product: syz
[ 1163.794902][T21955] usb 1-1: Manufacturer: syz
[ 1163.794916][T21955] usb 1-1: SerialNumber: syz
[ 1163.905137][ T5836] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1164.400770][ T5967] usb 1-1: USB disconnect, device number 21
[ 1164.495598][T32115] @0Ù: renamed from virt_wifi0
[ 1164.588318][ T37] audit: type=1326 audit(2000000295.023:752): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32118 comm="syz.1.12084" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1164.615616][ T37] audit: type=1326 audit(2000000295.023:753): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32118 comm="syz.1.12084" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1164.619387][ T37] audit: type=1326 audit(2000000295.041:754): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32118 comm="syz.1.12084" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1164.788039][ T37] audit: type=1326 audit(2000000295.208:755): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32118 comm="syz.1.12084" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1164.788299][ T37] audit: type=1326 audit(2000000295.208:756): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32118 comm="syz.1.12084" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x7ffc0000
[ 1164.946948][T32124] loop4: detected capacity change from 0 to 512
[ 1164.977375][T32124] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1165.023569][T32124] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[ 1165.117445][ C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1165.117470][ C1] EXT4-fs (loop4): initial error at time 2000000295: ext4_mb_generate_buddy:1317
[ 1165.117496][ C1] EXT4-fs (loop4): last error at time 2000000295: ext4_mb_generate_buddy:1317
[ 1165.131659][T32124] Quota error (device loop4): write_blk: dquota write failed
[ 1165.131682][T32124] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[ 1165.131791][T32124] Quota error (device loop4): write_blk: dquota write failed
[ 1165.131896][T32124] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[ 1165.158052][T32124] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.12086: Failed to acquire dquot type 1
[ 1165.158084][T32124] loop4: lost filesystem error report for type 5 error -28
[ 1165.158788][T32124] EXT4-fs (loop4): 1 truncate cleaned up
[ 1165.159886][ T5836] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 1165.163285][T32124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1165.212759][T32124] EXT4-fs: Cannot specify journal on remount
[ 1165.247568][T32136] sg_write: data in/out 207068/136 bytes for SCSI command 0x0-- guessing data in;
[ 1165.247568][T32136] program syz.0.12091 not setting count and/or reply_len properly
[ 1165.336645][T32140] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12093'.
[ 1165.336668][T32140] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12093'.
[ 1165.495695][ T5836] ath9k_htc: Failed to initialize the device
[ 1165.507123][T32146] loop2: detected capacity change from 0 to 64
[ 1165.510160][ T5967] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1165.533101][T32146] MINIX-fs: mounting file system with errors, running fsck is recommended
[ 1165.673963][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1165.919194][ T5636] Flush: task=syz-executor[5636] dev=loop4 state=2
[ 1165.919762][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1166.030643][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1166.047586][ T5636] Teardown: task=syz-executor[5636] dev=loop4 state=2
[ 1166.207009][ T5967] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1166.212713][T32162] loop4: detected capacity change from 0 to 512
[ 1166.259166][T32162] EXT4-fs (loop4): revision level too high, forcing read-only mode
[ 1166.259187][T32162] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[ 1166.259484][T32162] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1166.262088][T32162] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.12094: iget: bad i_size value: 12154761577498
[ 1166.262119][T32162] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[ 1166.269399][ C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1166.269420][ C1] EXT4-fs (loop4): initial error at time 2000000296: ext4_orphan_get:1399: inode 13
[ 1166.269448][ C1] EXT4-fs (loop4): last error at time 2000000296: ext4_orphan_get:1399: inode 13
[ 1166.372771][T32162] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.12094: couldn't read orphan inode 13 (err -117)
[ 1166.372804][T32162] loop4: lost filesystem error report for type 5 error -117
[ 1166.390798][ T5967] usb 2-1: config 0 has an invalid interface number: 54 but max is 0
[ 1166.390825][ T5967] usb 2-1: config 0 has no interface number 0
[ 1166.390865][ T5967] usb 2-1: config 0 interface 54 altsetting 165 has 0 endpoint descriptors, different from the interface descriptor's value: 28
[ 1166.390893][ T5967] usb 2-1: config 0 interface 54 has no altsetting 0
[ 1166.397908][T32162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1166.416408][ T5967] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[ 1166.416436][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.416456][ T5967] usb 2-1: Product: syz
[ 1166.416470][ T5967] usb 2-1: Manufacturer: syz
[ 1166.416485][ T5967] usb 2-1: SerialNumber: syz
[ 1166.441657][ T5967] usb 2-1: config 0 descriptor??
[ 1166.473385][T32162] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.12094: dx entry: limit 65535 != root limit 120
[ 1166.473478][T32162] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.12094: Corrupt directory, running e2fsck is recommended
[ 1166.546336][T32168] loop2: detected capacity change from 0 to 2048
[ 1166.548384][T32168] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18881, location=18881
[ 1166.570160][T32168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1166.771444][ T5967] usb 2-1: USB disconnect, device number 25
[ 1166.811720][T32171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12109'.
[ 1166.833497][ T5839] Flush: task=udevd[5839] dev=loop2 state=2
[ 1166.964539][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1166.980523][ T5839] Teardown: task=udevd[5839] dev=loop2 state=2
[ 1167.054001][T32179] xt_AUDIT: Audit type out of range (valid range: 0..2)
[ 1167.167062][ T5636] Flush: task=syz-executor[5636] dev=loop4 state=2
[ 1167.244944][ T5636] Teardown: task=syz-executor[5636] dev=loop4 state=2
[ 1167.427110][T32192] loop0: detected capacity change from 0 to 164
[ 1167.447567][T32192] rock: directory entry would overflow storage
[ 1167.447577][T32192] rock: sig=0x4543, size=28, remaining=18
[ 1167.465610][T32192] /dev/loop0: Can't open blockdev
[ 1167.680740][ T5896] Flush: task=udevd[5896] dev=loop0 state=2
[ 1167.784972][ T5896] Teardown: task=udevd[5896] dev=loop0 state=2
[ 1167.860423][T32206] loop4: detected capacity change from 0 to 1024
[ 1168.190555][T32214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12129'.
[ 1168.190609][T32214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12129'.
[ 1168.254184][ T5896] Flush: task=udevd[5896] dev=loop4 state=2
[ 1168.349553][ T5896] Teardown: task=udevd[5896] dev=loop4 state=2
[ 1168.362585][T32220] loop0: detected capacity change from 0 to 512
[ 1168.540900][T32220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1168.541040][T32220] ext4 filesystem being mounted at /2387/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1168.724306][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1168.898118][ T5633] Flush: task=syz-executor[5633] dev=loop0 state=2
[ 1168.909942][T32232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12136'.
[ 1168.977773][ T5633] Teardown: task=syz-executor[5633] dev=loop0 state=2
[ 1169.125164][T32244] bond0: option ad_select: unable to set because the bond device is up
[ 1169.659983][ T5836] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1169.822320][ T5836] usb 5-1: Using ep0 maxpacket: 8
[ 1169.824532][ T5836] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[ 1169.824559][ T5836] usb 5-1: config 0 has no interface number 0
[ 1169.824603][ T5836] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1169.824626][ T5836] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1169.824648][ T5836] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1169.824673][ T5836] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 28265, setting to 1024
[ 1169.824699][ T5836] usb 5-1: config 0 interface 186 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024
[ 1169.824723][ T5836] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1169.827714][ T5836] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1169.827743][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1169.827770][ T5836] usb 5-1: Product: syz
[ 1169.827784][ T5836] usb 5-1: Manufacturer: syz
[ 1169.827799][ T5836] usb 5-1: SerialNumber: syz
[ 1169.954498][ T5836] usb 5-1: config 0 descriptor??
[ 1169.956059][T32257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1169.959695][ T5836] iowarrior 5-1:0.186: no interrupt-in endpoint found
[ 1170.032138][T32277] loop2: detected capacity change from 0 to 256
[ 1170.035389][T32277] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1170.190959][T21904] usb 5-1: USB disconnect, device number 18
[ 1170.262319][T32277] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[ 1170.262336][T32277] FAT-fs (loop2): Filesystem has been set read-only
[ 1170.281040][ T5836] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1170.394648][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1170.451265][ T5836] usb 1-1: Using ep0 maxpacket: 16
[ 1170.454705][ T5836] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[ 1170.454729][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1170.454748][ T5836] usb 1-1: config 0 has no interface number 0
[ 1170.457749][ T5836] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1170.457777][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.457797][ T5836] usb 1-1: Product: syz
[ 1170.457811][ T5836] usb 1-1: Manufacturer: syz
[ 1170.457825][ T5836] usb 1-1: SerialNumber: syz
[ 1170.502184][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1170.541104][ T5836] usb 1-1: config 0 descriptor??
[ 1170.554758][ T5836] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[ 1170.554805][ T5836] uvcvideo 1-1:0.105: No valid video chain found.
[ 1170.590607][T32285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12160'.
[ 1170.702110][T32289] netlink: 'syz.2.12165': attribute type 9 has an invalid length.
[ 1170.794918][ T5836] usb 1-1: USB disconnect, device number 22
[ 1172.792294][ T5967] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1172.896389][T32081] syz.3.12064 (32081): drop_caches: 3
[ 1172.979600][ T5967] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1172.979630][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1172.979648][ T5967] usb 5-1: Product: syz
[ 1172.979662][ T5967] usb 5-1: SerialNumber: syz
[ 1173.021989][ T5967] usb 5-1: config 0 descriptor??
[ 1173.355983][T21955] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1173.512622][T21949] usb 5-1: USB disconnect, device number 19
[ 1173.545520][T21955] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1173.545549][T21955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1173.549856][T21955] usb 3-1: Product: syz
[ 1173.549874][T21955] usb 3-1: Manufacturer: syz
[ 1173.549889][T21955] usb 3-1: SerialNumber: syz
[ 1173.584899][T21955] usb 3-1: config 0 descriptor??
[ 1173.593658][T21955] ch341 3-1:0.0: ch341-uart converter detected
[ 1173.817898][T32376] loop0: detected capacity change from 0 to 4096
[ 1174.043154][T21955] usb 3-1: failed to send control message: -71
[ 1174.043211][T21955] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1174.060564][T21955] usb 3-1: USB disconnect, device number 8
[ 1174.067851][T21955] ch341 3-1:0.0: device disconnected
[ 1174.250652][T32391] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1174.595100][ T5633] Flush: task=syz-executor[5633] dev=loop0 state=2
[ 1174.729214][T21949] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1174.891663][T21949] usb 4-1: Using ep0 maxpacket: 8
[ 1174.894015][T21949] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1174.894043][T21949] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1174.943226][T21949] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1174.943254][T21949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1174.943273][T21949] usb 4-1: Product: syz
[ 1174.943286][T21949] usb 4-1: Manufacturer: syz
[ 1174.943299][T21949] usb 4-1: SerialNumber: syz
[ 1174.981622][T21949] usb 4-1: config 0 descriptor??
[ 1175.001274][T21949] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[ 1175.299068][T21949] snd_usb_toneport 4-1:0.0: cannot get proper max packet size
[ 1175.299283][T21949] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1175.300737][T21949] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1175.424287][ T5633] Teardown: task=syz-executor[5633] dev=loop0 state=2
[ 1175.570033][T21904] usb 4-1: USB disconnect, device number 13
[ 1175.774652][T32427] netlink: 'syz.2.12230': attribute type 2 has an invalid length.
[ 1175.774674][T32427] netlink: 228 bytes leftover after parsing attributes in process `syz.2.12230'.
[ 1176.143682][T32443] loop0: detected capacity change from 0 to 1024
[ 1176.147721][T32445] loop1: detected capacity change from 0 to 8
[ 1176.218530][T32445] cramfs: bad data blocksize 3959421443
[ 1176.218551][T32445] cramfs: bad data blocksize 4294965915
[ 1176.218564][T32445] cramfs: bad data blocksize 802397048
[ 1176.219329][T32445] cramfs: bad data blocksize 4294742353
[ 1176.219442][T32445] cramfs: bad data blocksize 3367320904
[ 1176.219460][T32445] cramfs: bad data blocksize 859179931
[ 1176.219473][T32445] cramfs: bad data blocksize 3436389781
[ 1176.219486][T32445] cramfs: bad data blocksize 4294365136
[ 1176.219515][T32445] cramfs: bad data blocksize 4294967040
[ 1176.219535][T32445] cramfs: bad data blocksize 3959421443
[ 1176.310675][T21949] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1176.383204][ T37] audit: type=1800 audit(2000000305.908:757): pid=32445 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.12240" name="file2" dev="loop1" ino=268 res=0 errno=0
[ 1176.473131][T21949] usb 5-1: Using ep0 maxpacket: 8
[ 1176.484974][T21949] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[ 1176.485003][T21949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1176.485020][T21949] usb 5-1: Product: syz
[ 1176.485034][T21949] usb 5-1: Manufacturer: syz
[ 1176.485046][T21949] usb 5-1: SerialNumber: syz
[ 1176.485453][ T5839] Flush: task=udevd[5839] dev=loop0 state=2
[ 1176.531003][T21949] usb 5-1: config 0 descriptor??
[ 1176.542633][T21949] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[ 1176.547003][T21949] dvb-usb: bulk message failed: -22 (2/0)
[ 1176.557317][ T37] audit: type=1326 audit(2000000306.055:758): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32453 comm="syz.0.12243" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53644cde99 code=0x7ffc0000
[ 1176.557366][ T37] audit: type=1326 audit(2000000306.055:759): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32453 comm="syz.0.12243" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53644cde99 code=0x7ffc0000
[ 1176.592578][ T37] audit: type=1326 audit(2000000306.101:760): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32453 comm="syz.0.12243" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f53644cde99 code=0x7ffc0000
[ 1176.592628][ T37] audit: type=1326 audit(2000000306.101:761): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32453 comm="syz.0.12243" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53644cde99 code=0x7ffc0000
[ 1176.592667][ T37] audit: type=1326 audit(2000000306.101:762): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32453 comm="syz.0.12243" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53644cde99 code=0x7ffc0000
[ 1176.596908][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1176.652264][ T5839] Teardown: task=udevd[5839] dev=loop0 state=2
[ 1176.762201][T21949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1176.762949][T21949] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[ 1176.763001][T21949] usb 5-1: media controller created
[ 1176.807090][T21949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1176.865254][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1176.929599][T21949] dvb-usb: bulk message failed: -22 (1/0)
[ 1176.990348][T21949] DVB: Unable to find symbol mt352_attach()
[ 1176.990382][T21949] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[ 1177.005315][T32461] 9p: Could not find request transport: xen
[ 1177.035546][T32467] usb usb1: usbfs: process 32467 (syz.2.12250) did not claim interface 7 before use
[ 1177.206148][T32472] netlink: 120 bytes leftover after parsing attributes in process `syz.3.12254'.
[ 1177.206176][T32472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12254'.
[ 1177.206190][T32472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12254'.
[ 1177.231293][T21949] rc_core: IR keymap rc-dvico-portable not found
[ 1177.231311][T21949] Registered IR keymap rc-empty
[ 1177.250722][T21949] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[ 1177.268630][T21949] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input64
[ 1177.274225][T21949] dvb-usb: schedule remote query interval to 100 msecs.
[ 1177.274254][T21949] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[ 1177.318567][T21949] usb 5-1: USB disconnect, device number 20
[ 1177.517824][T32481] loop0: detected capacity change from 0 to 512
[ 1177.548903][T21949] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[ 1177.560015][ T5970] udevd[5970]: setting mode of /dev/bus/usb/005/020 to 020664 failed: No such file or directory
[ 1177.560167][ T5970] udevd[5970]: setting owner of /dev/bus/usb/005/020 to uid=0, gid=0 failed: No such file or directory
[ 1177.634160][T32481] EXT4-fs (loop0): 1 orphan inode deleted
[ 1177.660303][T32481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1177.662325][T32481] ext4 filesystem being mounted at /2407/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1177.697338][ T42] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1177.697442][ T42] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1
[ 1177.746250][T32495] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1177.799941][ T37] audit: type=1326 audit(2000000307.218:763): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32496 comm="syz.1.12263" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1acb6de99 code=0x0
[ 1178.017568][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1178.236431][ T5839] Flush: task=udevd[5839] dev=loop0 state=2
[ 1178.252274][ T37] audit: type=1326 audit(2000000307.634:764): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32505 comm="syz.4.12268" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70103bde99 code=0x0
[ 1178.347528][ T5839] Teardown: task=udevd[5839] dev=loop0 state=2
[ 1178.353269][T32509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12269'.
[ 1178.443435][T32512] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12271'.
[ 1178.861430][T32491] loop2: detected capacity change from 0 to 32768
[ 1178.995393][T32525] sit1: entered allmulticast mode
[ 1179.634251][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1179.747163][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1180.310094][T21904] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1180.443849][T32574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12300'.
[ 1180.485900][T21904] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1180.485929][T21904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1180.485947][T21904] usb 5-1: Product: syz
[ 1180.485961][T21904] usb 5-1: Manufacturer: syz
[ 1180.485975][T21904] usb 5-1: SerialNumber: syz
[ 1180.687291][T32582] loop2: detected capacity change from 0 to 512
[ 1180.713682][T32582] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[ 1180.713877][T32582] System zones: 1-12
[ 1180.716237][T32582] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.12304: Directory hole found for htree index block 0
[ 1180.716269][T32582] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[ 1180.716457][T21955] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1180.725289][ C0] EXT4-fs (loop2): error count since last fsck: 1
[ 1180.725309][ C0] EXT4-fs (loop2): initial error at time 2000000309: dx_probe:791: inode 2
[ 1180.725335][ C0] EXT4-fs (loop2): last error at time 2000000309: dx_probe:791: inode 2
[ 1180.812251][T32582] EXT4-fs (loop2): Remounting filesystem read-only
[ 1180.812310][T32582] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[ 1180.812695][T32582] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[ 1180.843226][T32582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1180.908047][T32555] loop1: detected capacity change from 0 to 32768
[ 1180.911893][T32582] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[ 1181.052657][T32588] loop3: detected capacity change from 0 to 16
[ 1181.089787][T32588] erofs (device loop3): mounted with root inode @ nid 36.
[ 1181.205806][T32555] ERROR: (device loop1): dbAllocNext: Corrupt dmap page
[ 1181.205806][T32555]
[ 1181.278801][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1181.372758][T32555] ERROR: (device loop1): remounting filesystem as read-only
[ 1181.372976][T32555] ialloc: diAlloc returned -5!
[ 1182.209031][T32608] loop0: detected capacity change from 0 to 512
[ 1182.247060][T21955] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1182.247446][T21904] usb 5-1: USB disconnect, device number 21
[ 1182.289624][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending?
[ 1182.318329][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1182.341462][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1182.372703][ T5635] Flush: task=syz-executor[5635] dev=loop3 state=2
[ 1182.374153][T32608] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.12319: missing EA_INODE flag
[ 1182.374182][T32608] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1182.374762][T32608] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.12319: error while reading EA inode 11 err=-117
[ 1182.374790][T32608] loop0: lost filesystem error report for type 5 error -117
[ 1182.375301][T32608] EXT4-fs (loop0): 1 orphan inode deleted
[ 1182.382051][T32608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1182.438158][T21955] ath9k_htc: Failed to initialize the device
[ 1182.439141][T21904] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1182.509678][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1182.563825][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1182.595985][ T5632] Teardown: task=syz-executor[5632] dev=loop1 state=2
[ 1182.597690][ T5635] Teardown: task=syz-executor[5635] dev=loop3 state=2
[ 1182.624808][T32612] loop2: detected capacity change from 0 to 512
[ 1182.661705][ T5633] Flush: task=syz-executor[5633] dev=loop0 state=2
[ 1182.674916][T32612] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[ 1182.674985][T32612] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[ 1182.699874][T32612] EXT4-fs (loop2): 1 truncate cleaned up
[ 1182.703673][T32612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1182.833825][T32612] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1182.844525][ T5633] Teardown: task=syz-executor[5633] dev=loop0 state=2
[ 1183.016494][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1183.163639][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1183.256257][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1184.069840][T32626] loop4: detected capacity change from 0 to 32768
[ 1184.736835][T32626] ERROR: (device loop4): dbAlloc: unable to allocate blocks
[ 1184.736835][T32626]
[ 1184.753298][T32626] ERROR: (device loop4): remounting filesystem as read-only
[ 1184.753324][T32626] ialloc: diAlloc returned -5!
[ 1184.801343][T32666] loop2: detected capacity change from 0 to 1024
[ 1184.802438][T32666] EXT4-fs: inline encryption not supported
[ 1184.853704][T32666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1184.882446][T32673] loop0: detected capacity change from 0 to 16
[ 1184.903723][T32673] erofs (device loop0): mounted with root inode @ nid 36.
[ 1185.089504][ T5633] Flush: task=syz-executor[5633] dev=loop0 state=2
[ 1185.104999][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1185.137577][ T5636] Flush: task=syz-executor[5636] dev=loop4 state=2
[ 1185.204473][ T5634] Flush: task=syz-executor[5634] dev=loop2 state=2
[ 1185.247915][ T5633] Teardown: task=syz-executor[5633] dev=loop0 state=2
[ 1185.270176][ T5636] Teardown: task=syz-executor[5636] dev=loop4 state=2
[ 1185.303739][ T5634] Teardown: task=syz-executor[5634] dev=loop2 state=2
[ 1186.021667][T32712] loop1: detected capacity change from 0 to 256
[ 1186.137975][T32717] gfs2: error -5 reading superblock
[ 1186.211033][T32719] fuse: Invalid rootmode
[ 1186.270937][T32721] netlink: 'syz.2.12366': attribute type 46 has an invalid length.
[ 1186.288048][ T5970] Flush: task=udevd[5970] dev=loop1 state=2
[ 1186.397118][ T5970] Teardown: task=udevd[5970] dev=loop1 state=2
[ 1186.755707][ T37] audit: type=1326 audit(2000000315.481:765): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32743 comm="syz.3.12378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1186.755755][ T37] audit: type=1326 audit(2000000315.481:766): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32743 comm="syz.3.12378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1186.758797][T32747] .¿: renamed from vlan0
[ 1186.760030][ T37] audit: type=1326 audit(2000000315.481:767): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32743 comm="syz.3.12378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1186.760077][ T37] audit: type=1326 audit(2000000315.481:768): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32743 comm="syz.3.12378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1186.760118][ T37] audit: type=1326 audit(2000000315.481:769): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32743 comm="syz.3.12378" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1bb17de99 code=0x7ffc0000
[ 1186.872085][T32744] loop4: detected capacity change from 0 to 2048
[ 1186.886041][T32750] netlink: 744 bytes leftover after parsing attributes in process `syz.2.12381'.
[ 1186.886067][T32750] netlink: 744 bytes leftover after parsing attributes in process `syz.2.12381'.
[ 1187.249110][ T5904] Flush: task=udevd[5904] dev=loop4 state=2
[ 1187.338776][ T5904] Teardown: task=udevd[5904] dev=loop4 state=2
[ 1188.513139][T21904] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1188.680798][ T5646] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1188.697096][T21904] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[ 1188.697124][T21904] usb 1-1: config 0 has no interface number 0
[ 1188.697168][T21904] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 1188.697195][T21904] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1188.700952][T21904] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 1188.700979][T21904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1188.700998][T21904] usb 1-1: Product: syz
[ 1188.701012][T21904] usb 1-1: Manufacturer: syz
[ 1188.701027][T21904] usb 1-1: SerialNumber: syz
[ 1188.719395][T21904] usb 1-1: config 0 descriptor??
[ 1188.721712][ T336] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1188.731551][T21904] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 1188.820650][T21904] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1188.825279][ T322] loop1: detected capacity change from 0 to 32768
[ 1188.851877][ T352] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1188.895247][ T5646] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[ 1188.895274][ T5646] usb 3-1: config 0 has no interface number 0
[ 1188.895397][ T5646] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 1188.895421][ T5646] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1188.935119][ T5646] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 1188.935148][ T5646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1188.935168][ T5646] usb 3-1: Product: syz
[ 1188.935182][ T5646] usb 3-1: Manufacturer: syz
[ 1188.935195][ T5646] usb 3-1: SerialNumber: syz
[ 1188.940214][ T5646] usb 3-1: config 0 descriptor??
[ 1188.978477][ T340] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1189.002168][ T5646] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 1189.024912][ T5646] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1
[ 1189.149479][ T354] openvswitch: netlink: nsh attr 251 is out of range max 3
[ 1189.304461][ C1] cyberjack ttyUSB1: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[ 1189.331518][ T5646] usb 1-1: USB disconnect, device number 23
[ 1189.419550][ T5646] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1189.422925][ T5646] cyberjack 1-1:0.69: device disconnected
[ 1189.519945][ T5967] usb 3-1: USB disconnect, device number 9
[ 1189.564533][ T5967] cyberjack ttyUSB1: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB1
[ 1189.565388][ T5967] cyberjack 3-1:0.69: device disconnected
[ 1189.912832][ T362] netlink: 'syz.4.12420': attribute type 1 has an invalid length.
[ 1189.915244][ T12] JFS: metapage_get_blocks failed
[ 1189.918823][ T130] blkno = 50030, nblocks = 1
[ 1189.918838][ T130] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[ 1189.918838][ T130]
[ 1189.919180][ T130] ERROR: (device loop1): remounting filesystem as read-only
[ 1189.919227][ T130] blkno = 5002c, nblocks = 4
[ 1189.919237][ T130] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[ 1189.919237][ T130]
[ 1189.933935][ T5632] JFS: metapage_get_blocks failed
[ 1189.934236][ T12] JFS: metapage_get_blocks failed
[ 1189.934259][ T12] JFS: metapage_get_blocks failed
[ 1189.934282][ T12] JFS: metapage_get_blocks failed
[ 1189.967841][ T5632] Flush: task=syz-executor[5632] dev=loop1 state=2
[ 1190.020917][ T130] ==================================================================
[ 1190.020933][ T130] BUG: KASAN: slab-use-after-free in jfs_la[ 1190.020933][ T130] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x6e1/0xa20
[ 1190.020966][ T130] Read of size 4 at addr ffff88803c51ec94 by task jfsCommit/130
[ 1190.020982][ T130]
[ 1190.020994][ T130] CPU: 0 UID: 0 PID: 130 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 1190.021016][ T130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1190.021029][ T130] Call Trace:
[ 1190.021037][ T130]
[ 1190.021047][ T130] dump_stack_lvl+0xe8/0x150
[ 1190.021077][ T130] print_address_description+0x55/0x1e0
[ 1190.021192][ T130] ? jfs_lazycommit+0x6e1/0xa20
[ 1190.021216][ T130] print_report+0x58/0x70
[ 1190.021242][ T130] kasan_report+0x117/0x150
[ 1190.021296][ T130] ? jfs_lazycommit+0x6e1/0xa20
[ 1190.021324][ T130] jfs_lazycommit+0x6e1/0xa20
[ 1190.021351][ T130] ? __pfx_jfs_lazycommit+0x10/0x10
[ 1190.021376][ T130] ? __pfx_default_wake_function+0x10/0x10
[ 1190.021436][ T130] ? __kthread_parkme+0x71/0x1f0
[ 1190.021463][ T130] ? __kthread_parkme+0x196/0x1f0
[ 1190.021490][ T130] kthread+0x388/0x470
[ 1190.021519][ T130] ? __pfx_jfs_lazycommit+0x10/0x10
[ 1190.021542][ T130] ? __pfx_kthread+0x10/0x10
[ 1190.021571][ T130] ret_from_fork+0x514/0xb70
[ 1190.021604][ T130] ? __pfx_ret_from_fork+0x10/0x10
[ 1190.021633][ T130] ? __switch_to+0xc89/0x1420
[ 1190.021707][ T130] ? __pfx_kthread+0x10/0x10
[ 1190.021736][ T130] ret_from_fork_asm+0x1a/0x30
[ 1190.021762][ T130]
[ 1190.021770][ T130]
[ 1190.021780][ T130] Allocated by task 322:
[ 1190.021790][ T130] kasan_save_track+0x3e/0x80
[ 1190.021807][ T130] __kasan_kmalloc+0x93/0xb0
[ 1190.021825][ T130] __kmalloc_cache_noprof+0x3cd/0x670
[ 1190.021844][ T130] jfs_fill_super+0xc2/0xda0
[ 1190.021870][ T130] get_tree_bdev_flags+0x430/0x4f0
[ 1190.021894][ T130] vfs_get_tree+0x92/0x2a0
[ 1190.021919][ T130] do_new_mount+0x319/0xdc0
[ 1190.021939][ T130] __se_sys_mount+0x31d/0x420
[ 1190.021959][ T130] do_syscall_64+0x17b/0x530
[ 1190.021987][ T130] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1190.022005][ T130]
[ 1190.022010][ T130] Freed by task 5632:
[ 1190.022019][ T130] kasan_save_track+0x3e/0x80
[ 1190.022036][ T130] kasan_save_free_info+0x40/0x50
[ 1190.022060][ T130] __kasan_slab_free+0x5c/0x80
[ 1190.022078][ T130] kfree+0x1c5/0x6c0
[ 1190.022128][ T130] generic_shutdown_super+0x13d/0x2d0
[ 1190.022150][ T130] kill_block_super+0x44/0xa0
[ 1190.022175][ T130] deactivate_locked_super+0xbc/0x110
[ 1190.022196][ T130] cleanup_mnt+0x3d3/0x460
[ 1190.022228][ T130] task_work_run+0x1d9/0x270
[ 1190.022244][ T130] exit_to_user_mode_loop+0x1fa/0x730
[ 1190.022290][ T130] do_syscall_64+0x33d/0x530
[ 1190.022316][ T130] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1190.022334][ T130]
[ 1190.022339][ T130] The buggy address belongs to the object at ffff88803c51ec00
[ 1190.022339][ T130] which belongs to the cache kmalloc-256 of size 256
[ 1190.022359][ T130] The buggy address is located 148 bytes inside of
[ 1190.022359][ T130] freed 256-byte region [ffff88803c51ec00, ffff88803c51ed00)
[ 1190.022385][ T130]
[ 1190.022391][ T130] The buggy address belongs to the physical page:
[ 1190.022401][ T130] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3c51e
[ 1190.022420][ T130] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1190.022437][ T130] flags: 0x80000000000040(head|node=0|zone=1)
[ 1190.022453][ T130] page_type: f5(slab)
[ 1190.022471][ T130] raw: 0080000000000040 ffff88813feaeb40 dead000000000100 dead000000000122
[ 1190.022488][ T130] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 1190.022506][ T130] head: 0080000000000040 ffff88813feaeb40 dead000000000100 dead000000000122
[ 1190.022523][ T130] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 1190.022540][ T130] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 1190.022557][ T130] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 1190.022567][ T130] page dumped because: kasan: bad access detected
[ 1190.022582][ T130] page_owner tracks the page as allocated
[ 1190.022589][ T130] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5635, tgid 5635 (syz-executor), ts 90894414305
[ 1190.022622][ T130] post_alloc_hook+0x1f9/0x250
[ 1190.022651][ T130] get_page_from_freelist+0x264c/0x26c0
[ 1190.022672][ T130] __alloc_frozen_pages_noprof+0x222/0x5b0
[ 1190.022691][ T130] allocate_slab+0x7c/0x5e0
[ 1190.022713][ T130] refill_objects+0x2d8/0x350
[ 1190.022735][ T130] __pcs_replace_empty_main+0x330/0x690
[ 1190.022757][ T130] __kmalloc_noprof+0x543/0x790
[ 1190.022773][ T130] fib_create_info+0x16fe/0x3170
[ 1190.022796][ T130] fib_table_insert+0xcb/0x1b10
[ 1190.022821][ T130] fib_magic+0x43b/0x530
[ 1190.022846][ T130] fib_add_ifaddr+0x139/0x5d0
[ 1190.022862][ T130] fib_inetaddr_event+0x12e/0x190
[ 1190.022882][ T130] notifier_call_chain+0x1a5/0x3d0
[ 1190.022909][ T130] blocking_notifier_call_chain+0x6a/0x90
[ 1190.022936][ T130] __inet_insert_ifa+0x9ef/0xbc0
[ 1190.022953][ T130] inet_rtm_newaddr+0x1039/0x19f0
[ 1190.022970][ T130] page last free pid 29 tgid 29 ts 90698366743 stack trace:
[ 1190.022983][ T130] __free_frozen_pages+0x1185/0x1270
[ 1190.023001][ T130] rcu_cpu_kthread+0x950/0x1480
[ 1190.023076][ T130] smpboot_thread_fn+0x57c/0xa80
[ 1190.023124][ T130] kthread+0x388/0x470
[ 1190.023150][ T130] ret_from_fork+0x514/0xb70
[ 1190.023178][ T130] ret_from_fork_asm+0x1a/0x30
[ 1190.023194][ T130]
[ 1190.023199][ T130] Memory state around the buggy address:
[ 1190.023210][ T130] ffff88803c51eb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1190.023223][ T130] ffff88803c51ec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1190.023236][ T130] >ffff88803c51ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1190.023246][ T130] ^
[ 1190.023257][ T130] ffff88803c51ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1190.023270][ T130] ffff88803c51ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1190.023281][ T130] ==================================================================
[ 1190.035370][ T130] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1190.035395][ T130] CPU: 0 UID: 0 PID: 130 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 1190.035418][ T130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1190.035429][ T130] Call Trace:
[ 1190.035437][ T130]
[ 1190.035445][ T130] vpanic+0x56c/0xa60
[ 1190.035470][ T130] ? __pfx_vpanic+0x10/0x10
[ 1190.035492][ T130] panic+0xc5/0xd0
[ 1190.035509][ T130] ? __pfx_panic+0x10/0x10
[ 1190.035526][ T130] ? preempt_schedule_thunk+0x16/0x40
[ 1190.035610][ T130] ? jfs_lazycommit+0x6e1/0xa20
[ 1190.035634][ T130] ? preempt_schedule_thunk+0x16/0x40
[ 1190.035656][ T130] ? jfs_lazycommit+0x6e1/0xa20
[ 1190.035679][ T130] check_panic_on_warn+0x89/0xb0
[ 1190.035704][ T130] ? jfs_lazycommit+0x6e1/0xa20
[ 1190.035726][ T130] end_report+0x73/0x170
[ 1190.035747][ T130] ? jfs_lazycommit+0x6e1/0xa20
[ 1190.035769][ T130] kasan_report+0x128/0x150
[ 1190.035791][ T130] ? jfs_lazycommit+0x6e1/0xa20
[ 1190.035825][ T130] jfs_lazycommit+0x6e1/0xa20
[ 1190.035851][ T130] ? __pfx_jfs_lazycommit+0x10/0x10
[ 1190.035875][ T130] ? __pfx_default_wake_function+0x10/0x10
[ 1190.035898][ T130] ? __kthread_parkme+0x71/0x1f0
[ 1190.035923][ T130] ? __kthread_parkme+0x196/0x1f0
[ 1190.035950][ T130] kthread+0x388/0x470
[ 1190.035977][ T130] ? __pfx_jfs_lazycommit+0x10/0x10
[ 1190.036000][ T130] ? __pfx_kthread+0x10/0x10
[ 1190.036028][ T130] ret_from_fork+0x514/0xb70
[ 1190.036058][ T130] ? __pfx_ret_from_fork+0x10/0x10
[ 1190.036086][ T130] ? __switch_to+0xc89/0x1420
[ 1190.036112][ T130] ? __pfx_kthread+0x10/0x10
[ 1190.036140][ T130] ret_from_fork_asm+0x1a/0x30
[ 1190.036165][ T130]
[ 1190.036522][ T130] Kernel Offset: disabled