last executing test programs:

7.192896494s ago: executing program 0 (id=4045):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0)

5.682268182s ago: executing program 0 (id=4054):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000054000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

5.515092474s ago: executing program 0 (id=4057):
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000b00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xf6ab}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x9, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x3, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0xf8, 0xf4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7f, 0xe, 0x9}}}}}}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x2d, &(0x7f0000000c80)={0x5, 0xf, 0x2d, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x8, 0xff00, 0x5, [0xff000f, 0xc00f]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "76d5c8d487de9ecc500297966dfb815d"}]}})

4.239287879s ago: executing program 3 (id=4069):
syz_emit_ethernet(0xc2, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@rr={0x7, 0x3, 0xdd}, @ssrr={0x89, 0x3, 0xd0}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private=0x11}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {@multicast2}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)

4.16005676s ago: executing program 3 (id=4070):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

4.002854362s ago: executing program 3 (id=4072):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.813670544s ago: executing program 3 (id=4075):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0)

3.736224185s ago: executing program 0 (id=4076):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d7010203030902120001000000000904"], 0x0)

3.596490937s ago: executing program 4 (id=4077):
syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00f14b033cf178b83cad2fbc7b3d3219638693ba046d223863ca830350e29ed0ede95a83eb4437c13c4ab31d7581239c8c9a13f73340b4b0c51883830aa6c75037c6a1d307fc02ad014879701cf1f62cc23f47e450cb2d20e83ec3d5ad1385f6826de4ee17358d23a560ed2e7a8253df4c8eff0cd5e9fb357723f470860a0a633fffcb34c448b8f363bef776a15fe79d45da9baa8ba1cafa94f9037ea8375cccecbde864e40387409caa"], 0x1, 0x22a, &(0x7f00000003c0)="$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")

3.263246091s ago: executing program 4 (id=4079):
setgroups(0x24, 0xffffffffffffffff)

3.020027294s ago: executing program 4 (id=4081):
syz_usb_connect(0x3, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x1, 0x4b, 0xb9, 0x40, 0xf11, 0x1100, 0x2e87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xde, 0x0, 0x80, 0x9, [{{0x9, 0x4, 0xe9, 0x0, 0x2, 0xea, 0xb5, 0x8a, 0xe, [], [{{0x9, 0x5, 0x9, 0x3, 0x8, 0x3, 0x9d, 0x6}}, {{0x9, 0x5, 0x8c, 0x2, 0x200, 0x5, 0x0, 0x5a}}]}}]}}]}}, 0x0)

2.259588363s ago: executing program 1 (id=4089):
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @random="be9689ce9f88", @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x8, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0x7, 0x41, [@rand_addr=0x64010102]}, @generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x7, 0x2, 0x1, 0x0, 0x2, 0xc}, 0x1, {0xc49}}}, {0x8, 0x22eb, 0x6, {{0x9, 0x2, 0x7, 0x1, 0x1, 0x1, 0x1}, 0x2, {0x1, 0x100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0)

2.128082935s ago: executing program 3 (id=4090):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@acl}, {@alloc_mode_def}, {@six_active_logs}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x6}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x2}}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")

2.095101435s ago: executing program 1 (id=4091):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="7a0a00ff0000170071105d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

2.094853705s ago: executing program 0 (id=4092):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x207, &(0x7f0000000180)={[{@discard}, {@jqfmt_vfsv0}, {@usrquota}, {@dioread_lock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe4d}}, {@debug}, {@errors_remount}]}, 0x1, 0x469, &(0x7f0000000240)="$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")

1.901605237s ago: executing program 1 (id=4094):
syz_mount_image$ubifs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000009e80), 0x1, 0x9dc3, &(0x7f0000009ec0)="$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")

1.564917471s ago: executing program 1 (id=4095):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x1010080, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0xa1, 0x308, &(0x7f00000001c0)="$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")

1.469209092s ago: executing program 4 (id=4096):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0x2}, 0x4}}}, 0x7)

1.248355905s ago: executing program 0 (id=4097):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009937f0103c41d281e8250102030109021b0002000000000904d5000005de67000904008000ff"], 0x0)

1.173054365s ago: executing program 4 (id=4099):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535eogjjOAC/M7pZIKV0EfIYGCKiNwkL+kUklGtgxy6dgzpEQgZFQWFEx4IgCOoWFQSdAsu/IOognbrVpYIOBhFUjM6k7AgbLvSa8zywvDPM7jtfGHZ33vczvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvHmZ0LnVl7afeWxVdXXwgd+bFNIYSRZGn787620B1C+PZ1+lRYpS10N/T/ZmJmrHzW5M/WgbFHN0aStddffLY4b1dI0sEV+7uSNB0cXHv/G9XdgedTA0kIaexCiGJ+9OnpWgihLXYhRPHr49zF7Pe9PXYhRNH34V5ndv1rsQshim17PvXW8ns8qud8/cLAyv/+ZrfgLdyisw69PXHlfeqiVt7LfPzfnn/HjQer4cu52XcvYhdBNNdmJo/GrgEAAPi3zjbJ/8PWpe0Hl5PQ3VXO/b835P89Df2vnv8vu7/j5uh0SyHE9tLcZLY/tL+VPje+k/1X77yume+pKvl/tcn/q03+X23y/2qT/1eb/J/Mq3z8n8j/K+XJrb0Ls7GLIBr5PwAAVM/h4+OT9aHhbPC/+WdHOa/vzdt6nqc/vD3V/3jFvJH88P925Nj4wUNDw/l1L08ILq//kC4e/ZE/79HYFiYanrtotv5Dz7P5uesd5XfU//L5jaK+4rzWfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgN7tzT8MgGIVh9LutiNpoVTRh4SfBBxoYEYAUZjSggwkDMBACChjIOcu9ybO8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADzfv8rr4vtLY6TXGpGmssuu/XM8zX7mvh2W99njxq0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPBQAA//8lxsws")

1.157887846s ago: executing program 1 (id=4100):
futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f00000005c0), &(0x7f0000048000), 0x0)

928.827589ms ago: executing program 1 (id=4101):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0)

928.683889ms ago: executing program 2 (id=4102):
openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x24880, 0x0)

824.18161ms ago: executing program 2 (id=4103):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

716.567791ms ago: executing program 2 (id=4104):
syz_clone3(&(0x7f0000000000)={0xc6089080, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0, 0x63}, 0x58)

649.399402ms ago: executing program 3 (id=4105):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8000c0, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1, 0x4460, &(0x7f0000000180)="$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")

591.489292ms ago: executing program 2 (id=4106):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xd, 0x4, 0x4, 0x1, 0x20200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

321.182975ms ago: executing program 2 (id=4107):
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map, 0x4, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

113.685599ms ago: executing program 2 (id=4108):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

0s ago: executing program 4 (id=4109):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xf4240, 0x0, 0x0)

kernel console output (not intermixed with test programs):

e=c4.46
[  480.182431][ T4670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.208204][ T4670] usb 4-1: Product: syz
[  480.219840][ T4670] usb 4-1: Manufacturer: syz
[  480.225144][ T4670] usb 4-1: SerialNumber: syz
[  480.268821][ T4670] usb 4-1: config 0 descriptor??
[  480.284394][ T4670] usb 4-1: bad CDC descriptors
[  480.293966][ T4670] usb 4-1: bad CDC descriptors
[  480.316481][T12440] loop0: detected capacity change from 0 to 8
[  480.339042][T12440] unable to read xattr id index table
[  480.385690][ T7610] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  480.414612][  T951] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  480.488730][ T5835] usb 4-1: USB disconnect, device number 124
[  480.610099][  T951] usb 5-1: Using ep0 maxpacket: 16
[  480.623749][  T951] usb 5-1: config 0 has an invalid interface number: 4 but max is 0
[  480.651530][  T951] usb 5-1: config 0 has no interface number 0
[  480.657958][  T951] usb 5-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  480.686574][  T951] usb 5-1: New USB device found, idVendor=05c6, idProduct=9000, bcdDevice=45.8e
[  480.712888][  T951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.728802][  T951] usb 5-1: Product: syz
[  480.733413][  T951] usb 5-1: Manufacturer: syz
[  480.738054][  T951] usb 5-1: SerialNumber: syz
[  480.750130][ T4670] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  480.757402][  T951] usb 5-1: config 0 descriptor??
[  480.766607][T12433] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  480.940035][ T4670] usb 3-1: Using ep0 maxpacket: 16
[  480.950784][ T4670] usb 3-1: config 0 has an invalid interface number: 16 but max is 0
[  480.964797][ T4670] usb 3-1: config 0 has no interface number 0
[  480.972535][ T4670] usb 3-1: config 0 interface 16 has no altsetting 0
[  480.989867][ T5835] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  481.012390][ T4670] usb 3-1: New USB device found, idVendor=05d8, idProduct=8108, bcdDevice=cd.4f
[  481.042195][ T4670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.057727][ T4670] usb 3-1: Product: syz
[  481.069927][ T4670] usb 3-1: Manufacturer: syz
[  481.074781][ T4670] usb 3-1: SerialNumber: syz
[  481.090659][ T5822] usb 5-1: USB disconnect, device number 115
[  481.108502][ T4670] usb 3-1: config 0 descriptor??
[  481.121984][ T4670] dvb-usb: found a 'Artec T1 USB1.1 TVBOX with AN2235' in warm state.
[  481.139220][ T4670] dvb-usb: bulk message failed: -22 (3/0)
[  481.189358][ T4670] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  481.199203][ T5835] usb 2-1: Using ep0 maxpacket: 8
[  481.206353][ T5835] usb 2-1: config 0 has an invalid interface number: 122 but max is 0
[  481.216425][ T4670] dvbdev: DVB: registering new adapter (Artec T1 USB1.1 TVBOX with AN2235)
[  481.226248][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  481.238573][ T4670] usb 3-1: media controller created
[  481.248726][T12466] loop0: detected capacity change from 0 to 1024
[  481.256828][ T5835] usb 2-1: config 0 has no interface number 0
[  481.262128][T12466] hfsplus: invalid uid specified
[  481.277755][ T4670] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  481.279689][T12466] hfsplus: unable to parse mount options
[  481.287007][ T5835] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  481.303856][ T5835] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  481.319205][ T5835] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  481.330897][ T4670] dvb-usb: bulk message failed: -22 (6/0)
[  481.336718][ T4670] dvb-usb: no frontend was attached by 'Artec T1 USB1.1 TVBOX with AN2235'
[  481.350569][ T5835] usb 2-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[  481.366682][ T4670] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41
[  481.382638][ T5835] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  481.392029][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.400815][ T5835] usb 2-1: Product: syz
[  481.405880][ T4670] dvb-usb: schedule remote query interval to 150 msecs.
[  481.413394][ T5835] usb 2-1: Manufacturer: syz
[  481.418036][ T5835] usb 2-1: SerialNumber: syz
[  481.422835][ T4670] dvb-usb: bulk message failed: -22 (3/0)
[  481.431271][ T5835] usb 2-1: config 0 descriptor??
[  481.449883][ T4670] dvb-usb: Artec T1 USB1.1 TVBOX with AN2235 successfully initialized and connected.
[  481.488434][ T4670] usb 3-1: USB disconnect, device number 114
[  481.531188][ T5822] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[  481.591875][ T4670] dvb-usb: Artec T1 USB1.1 TVBOX with AN2235 successfully deinitialized and disconnected.
[  481.643477][ T5835] usb 2-1: NFC: intf ffff88807b8e9000 id ffffffff8d1fdb40
[  481.667017][ T5835] usb 2-1: USB disconnect, device number 109
[  481.712615][T12472] loop4: detected capacity change from 0 to 16
[  481.729967][ T5822] usb 4-1: Using ep0 maxpacket: 8
[  481.750263][ T5822] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  481.760888][T12472] erofs: (device loop4): z_erofs_load_lz4_config: invalid lz4 cfgs, size=4
[  481.769608][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.769637][ T5822] usb 4-1: Product: syz
[  481.769653][ T5822] usb 4-1: Manufacturer: syz
[  481.769668][ T5822] usb 4-1: SerialNumber: syz
[  481.793147][ T5822] usb 4-1: config 0 descriptor??
[  481.825736][ T5822] gspca_main: sq905-2.14.0 probing 2770:9120
[  481.837829][ T4818] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  482.012597][ T5822] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[  482.029865][ T5822] sq905: probe of 4-1:0.0 failed with error -71
[  482.048477][ T5822] usb 4-1: USB disconnect, device number 125
[  482.069432][T12478] loop2: detected capacity change from 0 to 128
[  482.090079][  T951] usb 1-1: new full-speed USB device number 110 using dummy_hcd
[  482.106962][T12478] FAT-fs (loop2): bogus number of reserved sectors
[  482.115516][T12478] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  482.125499][T12478] FAT-fs (loop2): Can't find a valid FAT filesystem
[  482.294497][  T951] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  482.315584][  T951] usb 1-1: config 1 has no interface number 1
[  482.323161][  T951] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  482.355581][  T951] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  482.382542][  T951] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  482.394907][  T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.409697][  T951] usb 1-1: Product: syz
[  482.414125][  T951] usb 1-1: Manufacturer: syz
[  482.424252][  T951] usb 1-1: SerialNumber: syz
[  482.481474][T12484] loop1: detected capacity change from 0 to 16
[  482.501683][T12484] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0
[  482.515952][T12484] erofs: (device loop1): EXPERIMENTAL compressed inline data feature in use. Use at your own risk!
[  482.527498][T12484] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[  482.559055][T12484] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[  482.618605][T12476] loop4: detected capacity change from 0 to 32768
[  482.652534][  T951] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  482.676174][  T951] usb 1-1: 2:1 : sample bitwidth 189 in over sample bytes 3
[  482.718606][  T951] usb 1-1: failed to enable PITCH for EP 0x82
[  482.789902][  T951] usb 1-1: USB disconnect, device number 110
[  482.827470][T12476] XFS (loop4): Mounting V5 Filesystem
[  483.036786][T12476] XFS (loop4): Ending clean mount
[  483.092573][ T4908] udevd[4908]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  483.206359][ T4741] XFS (loop4): Unmounting Filesystem
[  483.332081][T12502] loop2: detected capacity change from 0 to 512
[  483.338649][T12493] loop3: detected capacity change from 0 to 32768
[  483.379321][T12493] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.3576 (12493)
[  483.413232][T12502] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  483.422694][T12502] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  483.492428][T12493] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  483.504154][T12502] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  483.519964][T12493] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  483.544273][T12493] BTRFS info (device loop3): enabling auto defrag
[  483.568545][T12502] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  483.597305][T12493] BTRFS info (device loop3): doing ref verification
[  483.604533][T12502] System zones: 0-2, 18-18, 34-35
[  483.612150][T12495] loop1: detected capacity change from 0 to 32768
[  483.628529][T12493] BTRFS info (device loop3): max_inline at 0
[  483.660684][T12502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  483.675120][T12495] JBD2: Ignoring recovery information on journal
[  483.682097][T12493] BTRFS info (device loop3): force clearing of disk cache
[  483.689261][T12493] BTRFS info (device loop3): turning on sync discard
[  483.691299][T12495] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[  483.704999][  T951] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  483.712903][T12493] BTRFS info (device loop3): disabling free space tree
[  483.823554][T12495] JBD2: bad block at offset 32
[  483.855936][ T4747] EXT4-fs (loop2): unmounting filesystem.
[  483.856160][T12495] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  483.884164][T12524] loop4: detected capacity change from 0 to 164
[  483.959720][T12493] BTRFS info (device loop3): enabling ssd optimizations
[  483.971474][  T951] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  483.990893][T12493] BTRFS info (device loop3): rebuilding free space tree
[  484.001007][  T951] usb 1-1: config 0 has no interface number 0
[  484.020962][T12529] loop2: detected capacity change from 0 to 4096
[  484.031412][  T951] usb 1-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  484.037719][T12493] BTRFS info (device loop3): disabling free space tree
[  484.056946][  T951] usb 1-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7
[  484.067619][T12493] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  484.070627][  T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.087278][T12529] ntfs3: loop2: Failed to load $MFT.
[  484.105586][T12493] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  484.127695][  T951] usb 1-1: config 0 descriptor??
[  484.136124][T12504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  484.163834][ T4740] ocfs2: Unmounting device (7,1) on (node local)
[  484.325220][ T4819] udevd[4819]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  484.398201][ T4746] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  484.444091][ T6016] usb 1-1: USB disconnect, device number 111
[  484.575282][  T951] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  484.660719][ T6017] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  484.752915][T12539] loop3: detected capacity change from 0 to 8
[  484.769478][  T951] usb 5-1: Using ep0 maxpacket: 16
[  484.795765][  T951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  484.807065][  T951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  484.818860][  T951] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  484.828761][ T5251] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  484.837106][  T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.840544][T12539] SQUASHFS error: xz decompression failed, data probably corrupt
[  484.859514][ T6017] usb 3-1: Using ep0 maxpacket: 8
[  484.864698][T12539] SQUASHFS error: Failed to read block 0x108: -5
[  484.873419][ T6017] usb 3-1: config 6 has an invalid interface number: 55 but max is 0
[  484.881634][T12539] SQUASHFS error: Unable to read metadata cache entry [106]
[  484.881656][T12539] SQUASHFS error: Unable to read inode 0x11f
[  484.891969][  T951] usb 5-1: config 0 descriptor??
[  484.905916][ T6017] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  484.919974][ T6017] usb 3-1: config 6 has no interface number 0
[  484.929269][  T951] usb 5-1: Found UVC 0.00 device <unnamed> (10c4:ea90)
[  484.940998][ T6017] usb 3-1: config 6 interface 55 altsetting 0 endpoint 0x5 has an invalid bInterval 36, changing to 9
[  484.959087][  T951] usb 5-1: No valid video chain found.
[  484.973143][ T6017] usb 3-1: config 6 interface 55 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  484.984710][ T6017] usb 3-1: config 6 interface 55 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  485.012273][ T6017] usb 3-1: New USB device found, idVendor=13d8, idProduct=0002, bcdDevice=7e.91
[  485.027263][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.036413][ T6017] usb 3-1: Product: syz
[  485.050986][ T5251] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=40.bf
[  485.064707][ T6017] usb 3-1: Manufacturer: syz
[  485.072985][ T5251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.086863][ T6017] usb 3-1: SerialNumber: syz
[  485.093990][ T5251] usb 2-1: Product: syz
[  485.099218][ T5251] usb 2-1: Manufacturer: syz
[  485.105972][ T5251] usb 2-1: SerialNumber: syz
[  485.120171][ T5251] usb 2-1: config 0 descriptor??
[  485.155794][T12543] loop0: detected capacity change from 0 to 64
[  485.156380][ T5251] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input42
[  485.173747][  T951] usb 5-1: USB disconnect, device number 116
[  485.234650][T12543] hfs: bad catalog namelength
[  485.245322][T12543] hfs: get root inode failed
[  485.317945][ T6017] usb 3-1: selecting invalid altsetting 3
[  485.332117][ T3609] bcm5974 2-1:0.0: could not read from device
[  485.345418][ T6017] comedi comedi0: could not set alternate setting 3 in high speed
[  485.355152][ T3609] bcm5974 2-1:0.0: could not read from device
[  485.356670][ T5251] usb 2-1: USB disconnect, device number 110
[  485.383427][ T3609] bcm5974 2-1:0.0: could not read from device
[  485.404400][ T3609] bcm5974 2-1:0.0: could not read from device
[  485.407841][ T6017] usbdux 3-1:6.55: driver 'usbdux' failed to auto-configure device.
[  485.447581][ T6017] usbdux: probe of 3-1:6.55 failed with error -22
[  485.473903][ T6017] usb 3-1: USB disconnect, device number 115
[  485.758780][T12555] loop3: detected capacity change from 0 to 256
[  485.786046][T12555] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  485.793585][T12557] loop0: detected capacity change from 0 to 128
[  485.813108][T12559] loop4: detected capacity change from 0 to 8
[  485.842094][T12559] SQUASHFS error: lzo decompression failed, data probably corrupt
[  485.870869][ T7013] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  485.909365][T12559] SQUASHFS error: Failed to read block 0x62b: -5
[  485.950355][T12559] SQUASHFS error: Unable to read metadata cache entry [629]
[  485.994555][T12559] SQUASHFS error: Unable to read inode 0x11f
[  486.094814][T12567] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xa
[  486.510013][ T6017] usb 3-1: new full-speed USB device number 116 using dummy_hcd
[  486.564486][ T7017] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  486.567039][T12563] loop3: detected capacity change from 0 to 40427
[  486.586037][T12563] F2FS-fs (loop3): Invalid log sectorsize (131081)
[  486.592677][   T14] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  486.601606][T12563] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  486.625783][T12563] F2FS-fs (loop3): invalid crc value
[  486.636856][T12563] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  486.708706][T12563] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[  486.712064][ T6017] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  486.727024][T12563] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  486.734516][T12563] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  486.743425][ T6017] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  486.759223][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.759650][ T7017] usb 1-1: Using ep0 maxpacket: 16
[  486.773740][   T14] usb 2-1: Using ep0 maxpacket: 16
[  486.777840][ T6017] usb 3-1: Product: syz
[  486.783165][ T6017] usb 3-1: Manufacturer: syz
[  486.787790][ T6017] usb 3-1: SerialNumber: syz
[  486.793764][T12575] loop4: detected capacity change from 0 to 32768
[  486.800934][   T14] usb 2-1: unable to get BOS descriptor or descriptor too short
[  486.835111][ T7017] usb 1-1: unable to get BOS descriptor or descriptor too short
[  486.846002][   T14] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=10.66
[  486.846589][T12575] XFS (loop4): stripe width (1) must be a multiple of the stripe unit (64)
[  486.861672][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.878193][ T7017] usb 1-1: config 4 has an invalid interface number: 3 but max is 0
[  486.894548][ T7017] usb 1-1: config 4 has no interface number 0
[  486.933678][ T7017] usb 1-1: config 4 interface 3 has no altsetting 0
[  486.988238][ T7017] usb 1-1: New USB device found, idVendor=05c6, idProduct=9222, bcdDevice=83.86
[  487.019354][ T7017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.027441][ T7017] usb 1-1: Product: syz
[  487.035576][ T6017] usb 3-1: probing VID:PID(0424:012C)   
[  487.040148][ T7017] usb 1-1: Manufacturer: 䙭�翏犋�鋧澌䦛喣뤹杳颭ﱼ鯷ɞ�溞峝䔽嵞ⶓ뀖ￆ픆齩꽎ｊ曍ｙꡖ豍��ꗤޗ睿捆鮭᛾ꡣ
[  487.058202][ T6017] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  487.105260][ T7017] usb 1-1: SerialNumber: syz
[  487.125163][ T6017] vub300: probe of 3-1:2.0 failed with error -22
[  487.149935][ T6017] usb 3-1: USB disconnect, device number 116
[  487.165344][   T14] usb 2-1: string descriptor 0 read error: -71
[  487.219242][T12581] loop4: detected capacity change from 0 to 512
[  487.236919][   T14] usb_8dev 2-1:127.0 can0: sending command message failed
[  487.259172][   T14] usb_8dev 2-1:127.0 can0: can't get firmware version
[  487.268468][T12581] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  487.286759][T12581] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  487.330803][T12581] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  487.382335][ T7017] usb 1-1: USB disconnect, device number 112
[  487.395192][T12581] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  487.404456][   T14] usb_8dev: probe of 2-1:127.0 failed with error -22
[  487.407186][T12581] System zones: 0-2, 18-18, 34-35
[  487.424037][T12581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  487.446527][   T14] usb 2-1: USB disconnect, device number 111
[  487.516548][ T4741] EXT4-fs (loop4): unmounting filesystem.
[  487.814996][T12595] loop4: detected capacity change from 0 to 512
[  487.838078][T12593] loop2: detected capacity change from 0 to 4096
[  487.854717][T12595] EXT4-fs (loop4): filesystem is read-only
[  487.878021][T12593] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  487.893683][T12593] ntfs: (device loop2): ntfs_read_inode_mount(): ntfs_mapping_pairs_decompress() failed with error code -5.  $MFT is corrupt.
[  487.922165][ T7013] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  487.957021][T12593] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  487.999662][T12593] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata.
[  488.335845][T12609] loop0: detected capacity change from 0 to 128
[  488.383601][T12609] FAT-fs (loop0): Directory bread(block 162) failed
[  488.406044][T12609] FAT-fs (loop0): Directory bread(block 163) failed
[  488.413029][T12609] FAT-fs (loop0): Directory bread(block 164) failed
[  488.420198][T12609] FAT-fs (loop0): Directory bread(block 165) failed
[  488.426925][T12609] FAT-fs (loop0): Directory bread(block 166) failed
[  488.434729][T12609] FAT-fs (loop0): Directory bread(block 167) failed
[  488.454277][T12609] FAT-fs (loop0): Directory bread(block 168) failed
[  488.461097][ T7017] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  488.477233][T12613] loop2: detected capacity change from 0 to 4096
[  488.485790][T12613] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  488.489814][T12609] FAT-fs (loop0): Directory bread(block 169) failed
[  488.525480][T12613] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  488.535670][T12613] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  488.560416][T12613] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  488.579116][T12613] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  488.606402][T12613] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  488.663935][ T7017] usb 2-1: config 0 has an invalid interface number: 238 but max is 0
[  488.682772][ T7017] usb 2-1: config 0 has no interface number 0
[  488.689410][ T6017] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  488.700910][ T7017] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  488.732290][ T7017] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  488.761072][ T7017] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  488.792372][ T7017] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  488.840899][ T7017] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a
[  488.878974][ T7017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.902567][ T7017] usb 2-1: Product: syz
[  488.906801][ T7017] usb 2-1: Manufacturer: syz
[  488.921159][ T6017] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  488.933186][ T7017] usb 2-1: SerialNumber: syz
[  488.957515][ T6017] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  488.959192][ T7017] usb 2-1: config 0 descriptor??
[  488.990506][ T6017] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  489.012245][ T6017] usb 4-1: config 1 interface 0 has no altsetting 1
[  489.025644][ T7017] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device.
[  489.028809][ T6017] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  489.091393][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.123078][ T6017] usb 4-1: Product: syz
[  489.127321][ T6017] usb 4-1: Manufacturer: syz
[  489.143293][ T6017] usb 4-1: SerialNumber: syz
[  489.174134][ T6017] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  489.184534][ T6017] cdc_ncm 4-1:1.0: bind() failure
[  489.252743][   T14] usb 2-1: USB disconnect, device number 112
[  489.262411][  T126] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  489.396689][ T6017] usb 4-1: USB disconnect, device number 126
[  489.450081][  T126] usb 3-1: Using ep0 maxpacket: 8
[  489.458518][  T126] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  489.494530][  T126] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  489.514789][  T126] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  489.546268][  T126] usb 3-1: config 1 interface 1 has no altsetting 0
[  489.558126][T12629] loop0: detected capacity change from 0 to 32768
[  489.573088][  T126] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  489.588234][  T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.598680][  T126] usb 3-1: Product: syz
[  489.605270][  T126] usb 3-1: Manufacturer: syz
[  489.612643][  T126] usb 3-1: SerialNumber: syz
[  489.618717][T12629] JBD2: Ignoring recovery information on journal
[  489.640282][T12629] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75
[  489.648655][T12629] JBD2: bad block at offset 32
[  489.656536][T12629] (syz.0.3630,12629,1):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75
[  489.666458][T12629] (syz.0.3630,12629,1):ocfs2_load_local_alloc:355 ERROR: status = -22
[  489.675363][T12629] (syz.0.3630,12629,1):ocfs2_check_volume:2458 ERROR: status = -22
[  489.683441][T12629] (syz.0.3630,12629,1):ocfs2_check_volume:2486 ERROR: status = -22
[  489.691459][T12629] (syz.0.3630,12629,1):ocfs2_mount_volume:1821 ERROR: status = -22
[  489.716085][T12629] (syz.0.3630,12629,1):ocfs2_fill_super:1176 ERROR: status = -22
[  489.819092][ T4697] usb 5-1: new full-speed USB device number 117 using dummy_hcd
[  489.837413][  T126] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  489.845100][  T126] usb 3-1: 2:1 : invalid channels 0
[  489.893579][  T126] usb 3-1: USB disconnect, device number 117
[  490.030397][ T4697] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  490.055336][ T4697] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  490.091057][ T4697] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  490.126501][ T4697] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  490.151671][ T7013] udevd[7013]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  490.158852][ T4697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.203668][ T4697] usb 5-1: Product: syz
[  490.207998][ T4697] usb 5-1: Manufacturer: syz
[  490.222295][ T4697] usb 5-1: SerialNumber: syz
[  490.318984][ T7017] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  490.448190][ T4697] usb 5-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[  490.470940][ T4697] usb 5-1: found format II with max.bitrate = 0, frame size=0
[  490.486665][ T4697] usb 5-1: 2:1: All rates were zero
[  490.509602][ T7017] usb 4-1: Using ep0 maxpacket: 32
[  490.519673][ T7017] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=67.9c
[  490.542172][T12657] futex_wake_op: syz.2.3643 tries to shift op by -1; fix this program
[  490.550771][ T4697] usb 5-1: USB disconnect, device number 117
[  490.568987][ T7017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.602486][ T7017] usb 4-1: Product: syz
[  490.617281][ T7017] usb 4-1: Manufacturer: syz
[  490.628788][ T7017] usb 4-1: SerialNumber: syz
[  490.644461][ T7017] usb 4-1: config 0 descriptor??
[  490.706587][T12655] loop0: detected capacity change from 0 to 4096
[  490.734165][T12655] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  490.782792][T12655] ntfs3: loop0: volume is dirty and "force" flag is not set!
[  490.832102][ T7013] udevd[7013]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  490.896167][ T7017] usb 4-1: USB disconnect, device number 127
[  491.324478][T12654] loop1: detected capacity change from 0 to 40427
[  491.350119][T12654] F2FS-fs (loop1): Invalid log sectorsize (131081)
[  491.363549][T12654] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  491.444599][T12654] F2FS-fs (loop1): invalid crc value
[  491.514958][T12654] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  491.697353][T12654] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  491.734578][T12654] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  491.742071][T12654] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  491.758806][   T14] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  491.758903][T12666] loop2: detected capacity change from 0 to 40427
[  491.822596][T12666] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  491.839910][T12666] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  491.878183][T12666] F2FS-fs (loop2): invalid crc value
[  491.892780][ T6017] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  491.894855][T12666] F2FS-fs (loop2): Found nat_bits in checkpoint
[  491.945093][T12666] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  491.959366][   T14] usb 1-1: Using ep0 maxpacket: 16
[  491.966385][   T14] usb 1-1: config 0 has an invalid interface number: 194 but max is 0
[  491.979536][T12666] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  491.991395][   T14] usb 1-1: config 0 has no interface number 0
[  491.998348][   T14] usb 1-1: config 0 interface 194 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32
[  492.008649][   T14] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=3d.96
[  492.017755][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.054122][   T14] usb 1-1: config 0 descriptor??
[  492.069769][T12676] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  492.080130][ T6017] usb 5-1: Using ep0 maxpacket: 8
[  492.087614][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  492.110256][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  492.131769][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  492.145635][ T6017] usb 5-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc
[  492.155411][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.166347][ T6017] usb 5-1: config 0 descriptor??
[  492.168953][ T7017] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  492.175457][ T6017] appletouch 5-1:0.0: Could not find int-in endpoint
[  492.186162][ T6017] appletouch: probe of 5-1:0.0 failed with error -5
[  492.194267][ T6017] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  492.283160][   T14] ath6kl: Failed to submit usb control message: -71
[  492.307117][   T14] ath6kl: unable to send the bmi data to the device: -71
[  492.334820][   T14] ath6kl: Unable to send get target info: -71
[  492.350957][   T14] ath6kl: Failed to init ath6kl core: -71
[  492.381141][ T6017] usb 5-1: USB disconnect, device number 118
[  492.408733][ T7017] usb 4-1: Using ep0 maxpacket: 8
[  492.418218][ T7017] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  492.439773][   T14] ath6kl_usb: probe of 1-1:0.194 failed with error -71
[  492.449808][ T7017] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  492.464409][   T14] usb 1-1: USB disconnect, device number 113
[  492.471074][ T7017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  492.484774][ T7017] usb 4-1: SerialNumber: syz
[  492.492818][ T7017] usb 4-1: config 0 descriptor??
[  492.509949][ T7017] usb 4-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  492.516893][ T7017] usb 4-1: No valid video chain found.
[  492.698768][ T5251] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  492.722107][   T14] usb 4-1: USB disconnect, device number 2
[  492.746425][T12695] loop2: detected capacity change from 0 to 32768
[  492.773643][T12695] JBD2: Ignoring recovery information on journal
[  492.782149][T12695] OCFS2: ERROR (device loop2): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 75 has bad extent record (0, 304, 0)
[  492.809263][T12695] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  492.825960][T12695] (syz.2.3657,12695,0):ocfs2_get_clusters:624 ERROR: status = -30
[  492.855550][T12695] (syz.2.3657,12695,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  492.870826][T12695] (syz.2.3657,12695,1):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 32
[  492.880802][T12695] (syz.2.3657,12695,1):ocfs2_bmap:488 ERROR: status = -30
[  492.889292][T12695] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75
[  492.897809][T12695] JBD2: bad block at offset 32
[  492.904780][T12695] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  492.920536][ T5251] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62
[  492.937097][ T5251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.957215][ T5251] usb 2-1: config 0 descriptor??
[  492.981663][ T5251] usb 2-1: selecting invalid altsetting 1
[  492.987462][ T5251] flexcop_usb: set interface failed.
[  493.010567][ T5251] b2c2_flexcop_usb: probe of 2-1:0.0 failed with error -22
[  493.056396][ T4747] ocfs2: Unmounting device (7,2) on (node local)
[  493.128673][ T4697] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  493.188493][   T14] usb 2-1: USB disconnect, device number 113
[  493.311737][T12685] Process accounting resumed
[  493.348851][ T4697] usb 1-1: Using ep0 maxpacket: 16
[  493.355890][ T4697] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  493.393203][ T4697] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  493.423154][ T4697] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  493.448536][ T4697] usb 1-1: Manufacturer: syz
[  493.455780][ T4697] usb 1-1: config 0 descriptor??
[  493.678468][ T5251] usb 1-1: USB disconnect, device number 114
[  493.766637][T12717] loop4: detected capacity change from 0 to 4096
[  493.768945][ T6017] usb 3-1: new full-speed USB device number 118 using dummy_hcd
[  493.806909][T12717] __ntfs_warning: 24 callbacks suppressed
[  493.806927][T12717] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  493.866692][T12717] ntfs: (device loop4): parse_options(): The uid option requires an argument.
[  493.895018][T12721] loop1: detected capacity change from 0 to 4096
[  493.919346][T12721] ntfs: (device loop1): parse_ntfs_boot_sector(): Sector size (256) is smaller than the device block size (512).  This is not supported.  Sorry.
[  493.947323][T12721] ntfs: (device loop1): ntfs_fill_super(): Unsupported NTFS filesystem.
[  493.980354][ T6017] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7F, skipping
[  493.998693][ T6017] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  494.048729][ T6017] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  494.090113][ T6017] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  494.118666][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  494.142349][ T6017] usb 3-1: SerialNumber: syz
[  494.170531][T12713] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  494.177982][T12713] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  494.205881][T12725] loop4: detected capacity change from 0 to 128
[  494.222878][T12725] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed)
[  494.259171][T12725] affs: Error parsing options
[  494.404945][ T6017] usb 3-1: USB disconnect, device number 118
[  494.410143][T12729] loop1: detected capacity change from 0 to 256
[  494.457423][T12729] exFAT-fs (loop1): failed to load upcase table
[  494.467879][T12729] exFAT-fs (loop1): failed to recognize exfat type
[  494.708665][ T7017] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  494.735981][T12719] loop3: detected capacity change from 0 to 32768
[  494.746974][T12719] gfs2: fsid=commit: Trying to join cluster "lock_nolock", "commit"
[  494.780669][T12719] gfs2: fsid=commit: Now mounting FS (format 0)...
[  494.792904][T12719] gfs2: Invalid block size
[  494.797377][T12719] gfs2: fsid=commit: can't read superblock: -22
[  494.835334][T12740] loop1: detected capacity change from 0 to 64
[  494.858888][T12740] hfs: get root inode failed
[  494.898849][ T7017] usb 1-1: Using ep0 maxpacket: 16
[  494.931968][ T7017] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[  494.967450][ T7017] usb 1-1: config 0 has no interface number 0
[  494.973824][ T7017] usb 1-1: config 0 interface 16 has no altsetting 0
[  495.015413][ T7017] usb 1-1: New USB device found, idVendor=05d8, idProduct=8108, bcdDevice=cd.4f
[  495.032988][ T7017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.051137][ T7017] usb 1-1: Product: syz
[  495.055366][ T7017] usb 1-1: Manufacturer: syz
[  495.068751][ T7017] usb 1-1: SerialNumber: syz
[  495.094940][ T7017] usb 1-1: config 0 descriptor??
[  495.109981][ T7017] dvb-usb: found a 'Artec T1 USB1.1 TVBOX with AN2235' in warm state.
[  495.118236][ T7017] dvb-usb: bulk message failed: -22 (3/0)
[  495.217752][ T7017] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  495.255441][ T7017] dvbdev: DVB: registering new adapter (Artec T1 USB1.1 TVBOX with AN2235)
[  495.264200][ T7017] usb 1-1: media controller created
[  495.376761][ T7017] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  495.439164][ T7017] dvb-usb: bulk message failed: -22 (6/0)
[  495.445064][ T7017] dvb-usb: no frontend was attached by 'Artec T1 USB1.1 TVBOX with AN2235'
[  495.475234][ T7017] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input43
[  495.526028][T12757] loop4: detected capacity change from 0 to 8
[  495.567020][ T7017] dvb-usb: schedule remote query interval to 150 msecs.
[  495.588485][ T7017] dvb-usb: bulk message failed: -22 (3/0)
[  495.613229][T12763] loop2: detected capacity change from 0 to 16
[  495.621175][ T7017] dvb-usb: Artec T1 USB1.1 TVBOX with AN2235 successfully initialized and connected.
[  495.626458][T12757] SQUASHFS error: xz decompression failed, data probably corrupt
[  495.654728][ T7017] usb 1-1: USB disconnect, device number 115
[  495.678467][T12763] erofs: (device loop2): erofs_read_superblock: invalid sb_extslots 4208 (more than a fs block)
[  495.692016][T12757] SQUASHFS error: Failed to read block 0x108: -5
[  495.713739][T12757] SQUASHFS error: Unable to read metadata cache entry [106]
[  495.734032][T12757] SQUASHFS error: Unable to read inode 0x11f
[  495.763520][ T7017] dvb-usb: Artec T1 USB1.1 TVBOX with AN2235 successfully deinitialized and disconnected.
[  495.858884][   T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  496.070792][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  496.094559][   T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[  496.105279][   T26] audit: type=1326 audit(1745576962.863:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12775 comm="syz.4.3692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff11298e969 code=0x0
[  496.162421][   T14] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3
[  496.201315][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.209638][   T14] usb 4-1: Product: syz
[  496.213824][   T14] usb 4-1: Manufacturer: syz
[  496.218449][   T14] usb 4-1: SerialNumber: syz
[  496.255667][   T14] usb 4-1: config 0 descriptor??
[  496.276409][   T14] kvaser_usb 4-1:0.0: Cannot get usb endpoint(s)
[  496.338707][ T6017] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  496.353641][T12778] loop1: detected capacity change from 0 to 4096
[  496.366742][T12778] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  496.396007][T12778] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  496.406982][T12778] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  496.433639][T12778] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  496.448904][T12778] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  496.491417][ T7017] usb 4-1: USB disconnect, device number 3
[  496.545660][ T6017] usb 3-1: Using ep0 maxpacket: 16
[  496.560759][ T6017] usb 3-1: unable to get BOS descriptor or descriptor too short
[  496.575245][T12774] loop0: detected capacity change from 0 to 32768
[  496.591159][ T6017] usb 3-1: config 168 has an invalid interface number: 125 but max is 0
[  496.593081][   T14] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  496.616794][ T6017] usb 3-1: config 168 has no interface number 0
[  496.623891][ T6017] usb 3-1: config 168 interface 125 has no altsetting 0
[  496.644367][T12774] XFS (loop0): Mounting V5 Filesystem
[  496.650306][ T6017] usb 3-1: New USB device found, idVendor=0409, idProduct=8024, bcdDevice=64.0f
[  496.673501][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.684589][ T6017] usb 3-1: Product: syz
[  496.699099][T12774] XFS (loop0): Ending clean mount
[  496.710956][T12774] XFS (loop0): Quotacheck needed: Please wait.
[  496.725950][ T6017] usb 3-1: Manufacturer: syz
[  496.735130][ T6017] usb 3-1: SerialNumber: syz
[  496.804336][T12774] XFS (loop0): Quotacheck: Done.
[  496.829068][   T14] usb 5-1: Using ep0 maxpacket: 32
[  496.846396][   T14] usb 5-1: unable to get BOS descriptor or descriptor too short
[  496.865878][   T14] usb 5-1: config 127 has an invalid interface number: 228 but max is 0
[  496.876239][   T14] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  496.894831][ T4737] XFS (loop0): Unmounting Filesystem
[  496.902753][   T14] usb 5-1: config 127 has no interface number 0
[  496.916680][   T14] usb 5-1: config 127 interface 228 altsetting 1 endpoint 0xC has an invalid bInterval 0, changing to 7
[  496.935924][   T14] usb 5-1: config 127 interface 228 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0
[  496.946275][   T14] usb 5-1: config 127 interface 228 has no altsetting 0
[  496.977225][ T6017] cdc_ether 3-1:168.125: More than one union descriptor, skipping ...
[  496.996311][ T6017] usb 3-1: bad CDC descriptors
[  496.997145][   T14] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=1a.16
[  497.023039][ T6017] usb 3-1: USB disconnect, device number 119
[  497.040165][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.048222][   T14] usb 5-1: Product: syz
[  497.066458][   T14] usb 5-1: Manufacturer: syz
[  497.076440][   T14] usb 5-1: SerialNumber: syz
[  497.167437][T12795] loop1: detected capacity change from 0 to 4096
[  497.183305][T12797] loop3: detected capacity change from 0 to 190
[  497.241000][T12795] ntfs: volume version 3.1.
[  497.247082][T12797] ntfs: volume version 3.1.
[  497.257037][T12797] syz.3.3701: attempt to access beyond end of device
[  497.257037][T12797] loop3: rw=0, sector=552, nr_sectors = 8 limit=190
[  497.302017][   T14] usb 5-1: USB disconnect, device number 119
[  497.697797][T12808] loop2: detected capacity change from 0 to 8
[  497.756709][T12808] unable to read inode lookup table
[  497.762912][ T4742] Bluetooth: Wrong link type (-57)
[  497.828830][   T14] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  498.035704][   T14] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  498.064965][   T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  498.108257][   T14] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c
[  498.133599][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.158717][   T14] usb 2-1: Product: syz
[  498.173411][   T14] usb 2-1: Manufacturer: syz
[  498.178077][   T14] usb 2-1: SerialNumber: syz
[  498.202962][T12828] loop3: detected capacity change from 0 to 8
[  498.211451][   T14] usb 2-1: config 0 descriptor??
[  498.230767][   T14] ims_pcu 2-1:0.0: Missing CDC union descriptor
[  498.264894][   T14] ims_pcu: probe of 2-1:0.0 failed with error -22
[  498.298208][T12828] SQUASHFS error: lzo decompression failed, data probably corrupt
[  498.324256][T12825] loop0: detected capacity change from 0 to 8192
[  498.338884][T12828] SQUASHFS error: Failed to read block 0x91: -5
[  498.379537][T12828] SQUASHFS error: Unable to read metadata cache entry [8f]
[  498.386801][T12828] SQUASHFS error: Unable to read inode 0x11f
[  498.447948][ T5251] usb 2-1: USB disconnect, device number 114
[  498.603869][T12837] loop2: detected capacity change from 0 to 8
[  498.708357][T12837] SQUASHFS error: xz decompression failed, data probably corrupt
[  498.728690][T12837] SQUASHFS error: Failed to read block 0x108: -5
[  498.747171][T12837] SQUASHFS error: Unable to read metadata cache entry [106]
[  498.779187][T12837] SQUASHFS error: Unable to read inode 0x11f
[  498.954073][T12849] loop0: detected capacity change from 0 to 1024
[  498.991171][T12849] journal_path: not usable as path
[  499.026837][T12849] EXT4-fs: error: could not find journal device path
[  499.231705][T12858] loop4: detected capacity change from 0 to 512
[  499.276762][T12858] EXT4-fs: Ignoring removed i_version option
[  499.306809][T12858] EXT4-fs: Ignoring removed mblk_io_submit option
[  499.354086][T12858] EXT4-fs (loop4): Test dummy encryption mode enabled
[  499.422366][T12867] loop1: detected capacity change from 0 to 16
[  499.454107][T12867] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk!
[  499.475893][T12858] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.3732: inode #13: comm syz.4.3732: iget: illegal inode #
[  499.547802][T12867] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk!
[  499.561900][T12858] EXT4-fs (loop4): Remounting filesystem read-only
[  499.590852][T12858] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.3732: couldn't read orphan inode 13 (err -117)
[  499.611578][T12867] erofs: (device loop1): mounted with root inode @ nid 36.
[  499.642273][T12858] EXT4-fs (loop4): Remounting filesystem read-only
[  499.682364][T12858] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  499.810207][T12878] dccp_invalid_packet: invalid packet type
[  499.845810][ T4741] EXT4-fs (loop4): unmounting filesystem.
[  499.992454][T12876] loop3: detected capacity change from 0 to 8192
[  500.062761][T12876] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  500.103666][T12876] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  500.132226][T12876]  loop3: unable to read partition table
[  500.144844][T12863] loop0: detected capacity change from 0 to 32768
[  500.148861][   T14] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  500.164726][T12863] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.3729 (12863)
[  500.178925][T12876] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  500.208948][ T3624] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  500.235910][ T3624] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  500.247641][T12863] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  500.276746][ T3624]  loop3: unable to read partition table
[  500.297014][T12863] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  500.336282][T12863] BTRFS info (device loop0): enabling auto defrag
[  500.357753][ T7013] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  500.368676][T12863] BTRFS info (device loop0): doing ref verification
[  500.369976][   T14] usb 2-1: unable to get BOS descriptor or descriptor too short
[  500.375346][T12863] BTRFS info (device loop0): max_inline at 0
[  500.424621][   T14] usb 2-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13
[  500.457348][T12863] BTRFS info (device loop0): force clearing of disk cache
[  500.475104][T12863] BTRFS info (device loop0): turning on sync discard
[  500.484693][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.525876][   T14] usb 2-1: Product: syz
[  500.531081][T12863] BTRFS info (device loop0): disabling free space tree
[  500.542454][   T14] usb 2-1: Manufacturer: syz
[  500.567576][   T14] usb 2-1: SerialNumber: syz
[  500.725519][T12863] BTRFS info (device loop0): enabling ssd optimizations
[  500.757778][T12863] BTRFS info (device loop0): rebuilding free space tree
[  500.805288][T12863] BTRFS info (device loop0): disabling free space tree
[  500.820383][T12863] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  500.835699][T12863] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  500.849081][   T14] snd-usb-audio: probe of 2-1:8.0 failed with error -2
[  500.880286][   T14] usb 2-1: USB disconnect, device number 115
[  500.898675][ T5251] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  500.906018][ T7013] udevd[7013]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  501.088838][ T5251] usb 5-1: Using ep0 maxpacket: 16
[  501.098610][ T5251] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[  501.133846][ T4737] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  501.138540][ T5251] usb 5-1: config 0 has no interface number 0
[  501.157660][T12923] loop2: detected capacity change from 0 to 512
[  501.170661][ T5251] usb 5-1: config 0 interface 16 has no altsetting 0
[  501.196185][ T5251] usb 5-1: New USB device found, idVendor=05d8, idProduct=8108, bcdDevice=cd.4f
[  501.236091][ T5251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.260324][ T5251] usb 5-1: Product: syz
[  501.265260][T12923] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 3: comm syz.2.3751: lblock 0 mapped to illegal pblock 3 (length 1)
[  501.310008][ T5251] usb 5-1: Manufacturer: syz
[  501.327142][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  501.333528][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  501.350324][ T5251] usb 5-1: SerialNumber: syz
[  501.381465][ T5251] usb 5-1: config 0 descriptor??
[  501.424881][T12923] EXT4-fs (loop2): Remounting filesystem read-only
[  501.448746][T12923] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.3751: error -117 reading directory block
[  501.458885][ T5251] dvb-usb: found a 'Artec T1 USB1.1 TVBOX with AN2235' in warm state.
[  501.488317][T12923] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  501.497886][ T5251] dvb-usb: bulk message failed: -22 (3/0)
[  501.508898][T12923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  501.580542][ T5251] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  501.644083][ T4742] Bluetooth: hci1: unexpected event for opcode 0x202d
[  501.644761][ T5251] dvbdev: DVB: registering new adapter (Artec T1 USB1.1 TVBOX with AN2235)
[  501.716675][T12928] loop0: detected capacity change from 0 to 4096
[  501.753290][ T5251] usb 5-1: media controller created
[  501.770058][T12928] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  501.814951][ T5251] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  501.842771][ T4747] EXT4-fs (loop2): unmounting filesystem.
[  501.869292][ T5251] dvb-usb: bulk message failed: -22 (6/0)
[  501.882968][T12928] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  501.896433][ T5251] dvb-usb: no frontend was attached by 'Artec T1 USB1.1 TVBOX with AN2235'
[  501.940583][ T5251] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44
[  501.967334][ T5251] dvb-usb: schedule remote query interval to 150 msecs.
[  501.988682][ T5251] dvb-usb: bulk message failed: -22 (3/0)
[  502.029316][ T5251] dvb-usb: Artec T1 USB1.1 TVBOX with AN2235 successfully initialized and connected.
[  502.091149][ T5251] usb 5-1: USB disconnect, device number 120
[  502.212103][T12944] loop0: detected capacity change from 0 to 1024
[  502.224999][ T5251] dvb-usb: Artec T1 USB1.1 TVBOX with AN2235 successfully deinitialized and disconnected.
[  502.231068][T12944] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  502.280879][T12944] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  502.406707][T12946] loop1: detected capacity change from 0 to 128
[  502.419028][ T2185] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  502.591985][T12948] loop2: detected capacity change from 0 to 4096
[  502.612087][T12948] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  502.638869][ T2185] usb 4-1: New USB device found, idVendor=0bfd, idProduct=001d, bcdDevice=f2.28
[  502.661570][T12954] loop4: detected capacity change from 0 to 16
[  502.664806][ T2185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.686532][T12952] loop0: detected capacity change from 0 to 2048
[  502.694646][T12954] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300)
[  502.736975][ T2185] usb 4-1: Product: syz
[  502.747110][ T2185] usb 4-1: Manufacturer: syz
[  502.765035][ T2185] usb 4-1: SerialNumber: syz
[  502.769160][T12952] Dev loop0: unable to read partition block 206864252928
[  502.784718][ T2185] usb 4-1: config 0 descriptor??
[  502.793258][T12952]  loop0: RDSK (538708992) unable to read partition table
[  502.814059][ T2185] kvaser_usb 4-1:0.0: Cannot get usb endpoint(s)
[  502.822841][T12948] ntfs3: loop2: Failed to load $Secure.
[  502.845227][T12952] loop0: partition table beyond EOD, truncated
[  502.887445][T12952] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  502.928362][ T3624] Dev loop0: unable to read partition block 206864252928
[  502.935961][ T3624]  loop0: RDSK (538708992) unable to read partition table
[  502.965005][ T3624] loop0: partition table beyond EOD, truncated
[  503.051252][ T2185] usb 4-1: USB disconnect, device number 4
[  503.068878][ T4819] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  503.380955][T12968] loop4: detected capacity change from 0 to 4096
[  503.409395][T12968] __ntfs_error: 46 callbacks suppressed
[  503.409425][T12968] ntfs: (device loop4): ntfs_read_inode_mount(): MST fixup failed. $MFT is corrupt.
[  503.451055][T12968] ntfs: (device loop4): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  503.632711][T12977] futex_wake_op: syz.2.3779 tries to shift op by -1; fix this program
[  503.800515][T12984] loop2: detected capacity change from 0 to 128
[  503.855310][T12984] omfs: Invalid superblock (7b3184f9)
[  503.938777][  T951] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  504.031814][T12960] loop1: detected capacity change from 0 to 40427
[  504.066197][T12960] F2FS-fs (loop1): build fault injection attr: rate: 5, type: 0x3ffff
[  504.096696][T12960] F2FS-fs (loop1) : inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x3d61/0x6b20
[  504.117599][T12960] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  504.138688][  T951] usb 5-1: Using ep0 maxpacket: 32
[  504.145780][  T951] usb 5-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config
[  504.196916][  T951] usb 5-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d
[  504.227323][  T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.311998][  T951] quatech2 5-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected
[  504.384394][ T4714] usb 3-1: new full-speed USB device number 120 using dummy_hcd
[  504.435188][T13002] loop0: detected capacity change from 0 to 8
[  504.465667][T13002] Filesystem uses "unknown" compression. This is not supported
[  504.515996][  T951] usb 5-1: qt2_attach - failed to power on unit: -71
[  504.530803][  T951] quatech2: probe of 5-1:24.0 failed with error -71
[  504.561449][  T951] usb 5-1: USB disconnect, device number 121
[  504.590675][ T4714] usb 3-1: config 150 has an invalid interface number: 204 but max is 1
[  504.621552][ T4714] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  504.643209][ T4697] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  504.645785][ T4714] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 2
[  504.656790][T13000] loop1: detected capacity change from 0 to 8192
[  504.667853][ T4714] usb 3-1: config 150 has no interface number 0
[  504.681191][ T4714] usb 3-1: config 150 interface 204 has no altsetting 0
[  504.695536][ T4714] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  504.704898][ T4714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.734010][ T4714] usb 3-1: Product: syz
[  504.738322][ T4714] usb 3-1: Manufacturer: syz
[  504.743769][ T4714] usb 3-1: SerialNumber: syz
[  504.799353][T13006] loop0: detected capacity change from 0 to 128
[  504.829009][ T4697] usb 4-1: Using ep0 maxpacket: 8
[  504.852071][ T4697] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48
[  504.882897][ T4697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.914184][ T4697] usb 4-1: config 0 descriptor??
[  505.006624][ T5251] usb 3-1: USB disconnect, device number 120
[  505.050338][T13009] loop1: detected capacity change from 0 to 4096
[  505.074181][T13009] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  505.099969][T13009] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  505.118725][T13009] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  505.140731][T13010] loop0: detected capacity change from 0 to 8192
[  505.156184][ T4697] usb 4-1: USB disconnect, device number 5
[  505.168177][T13009] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  505.195728][T13010] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  505.250548][T13009] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  505.289014][T13010] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  505.321021][T13010] REISERFS (device loop0): using ordered data mode
[  505.332346][T13009] ntfs: volume version 3.1.
[  505.337015][T13010] reiserfs: using flush barriers
[  505.339609][T13009] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  505.344427][T13010] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  505.354589][T13009] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  505.379908][T13010] REISERFS (device loop0): checking transaction log (loop0)
[  505.385396][T13009] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  505.399943][T13010] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[-4 -1 0x2 UNKNOWN], item_len 0, item_location 2048, free_space(entry_count) 255
[  505.440092][T13010] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  505.451057][T13010] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[  505.578790][ T6017] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  505.708440][T13021] loop2: detected capacity change from 0 to 16
[  505.764576][T13021] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700)
[  505.780619][ T6017] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62
[  505.807894][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.850357][ T6017] usb 5-1: config 0 descriptor??
[  505.859609][ T6017] usb 5-1: selecting invalid altsetting 1
[  505.865393][ T6017] flexcop_usb: set interface failed.
[  505.906739][ T6017] b2c2_flexcop_usb: probe of 5-1:0.0 failed with error -22
[  506.082579][ T4697] usb 5-1: USB disconnect, device number 122
[  506.508798][  T951] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  506.550973][T13027] loop0: detected capacity change from 0 to 40427
[  506.572992][T13027] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  506.589444][T13027] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  506.603669][T13027] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x3ffff
[  506.612966][T13027] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8
[  506.628896][ T6017] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  506.633930][T13035] loop1: detected capacity change from 0 to 32768
[  506.649260][T13027] F2FS-fs (loop0): invalid crc value
[  506.674369][T13027] F2FS-fs (loop0): Found nat_bits in checkpoint
[  506.708817][  T951] usb 4-1: Using ep0 maxpacket: 32
[  506.716880][  T951] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  506.756885][  T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.775721][  T951] usb 4-1: config 0 descriptor??
[  506.797131][  T951] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  506.806593][T13027] F2FS-fs (loop0): recover fsync data on readonly fs
[  506.814943][  T951] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45
[  506.826257][ T6017] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  506.865649][T13027] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[  506.881495][ T6017] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40
[  506.902109][T13027] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  506.918734][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.948937][ T6017] usb 3-1: Product: syz
[  506.953169][ T6017] usb 3-1: Manufacturer: syz
[  506.988334][ T6017] usb 3-1: SerialNumber: syz
[  507.027310][  T951] usb 4-1: USB disconnect, device number 6
[  507.044727][ T6017] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input46
[  507.248049][ T3609] bcm5974 3-1:1.0: could not read from device
[  507.267969][ T6017] usb 3-1: USB disconnect, device number 121
[  507.274826][ T3609] bcm5974 3-1:1.0: could not read from device
[  507.840281][T13051] loop1: detected capacity change from 0 to 32768
[  507.872394][T13051] (syz.1.3812,13051,0):ocfs2_verify_volume:2376 ERROR: Superblock slots found greater than file system maximum: found 65535, max 255
[  507.905714][ T4742] Bluetooth: hci4: unexpected event for opcode 0x2042
[  507.920162][T13051] (syz.1.3812,13051,1):ocfs2_verify_volume:2385 ERROR: status = -22
[  507.928226][T13051] (syz.1.3812,13051,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  507.938644][ T4714] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  507.951290][T13051] (syz.1.3812,13051,0):ocfs2_fill_super:1176 ERROR: status = -22
[  507.953238][ T4697] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  508.078172][T13069] loop2: detected capacity change from 0 to 256
[  508.088233][T13069] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  508.130558][ T4714] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea
[  508.137130][T13069] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  508.163906][T13069] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  508.171890][ T4714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.173818][ T4714] usb 1-1: config 0 descriptor??
[  508.188723][ T4697] usb 4-1: Using ep0 maxpacket: 8
[  508.203624][ T4697] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17
[  508.220034][ T4697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.220206][ T4714] usb 1-1: Invalid firmware size=18.
[  508.228211][T13069] UDF-fs: Scanning with blocksize 512 failed
[  508.245365][ T4697] usb 4-1: Product: syz
[  508.249685][ T4697] usb 4-1: Manufacturer: syz
[  508.256286][T13069] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  508.287165][ T4697] usb 4-1: SerialNumber: syz
[  508.304915][ T4697] usb 4-1: config 0 descriptor??
[  508.324433][T13069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  508.336210][ T4697] hub 4-1:0.0: bad descriptor, ignoring hub
[  508.348624][ T4697] hub: probe of 4-1:0.0 failed with error -5
[  508.369413][ T4697] gspca_main: jeilinj-2.14.0 probing 0979:0270
[  508.425106][ T4714] usb 1-1: USB disconnect, device number 116
[  508.495447][T13078] loop1: detected capacity change from 0 to 8
[  508.564315][ T2185] usb 4-1: USB disconnect, device number 7
[  508.587724][T13078] SQUASHFS error: xz decompression failed, data probably corrupt
[  508.631966][T13078] SQUASHFS error: Failed to read block 0x108: -5
[  508.651870][T13078] SQUASHFS error: Unable to read metadata cache entry [106]
[  508.673645][T13078] SQUASHFS error: Unable to read inode 0x11f
[  509.117426][T13098] loop1: detected capacity change from 0 to 1024
[  509.238218][T13100] loop3: detected capacity change from 0 to 512
[  509.274919][ T4777] hfsplus: b-tree write err: -5, ino 4
[  509.289344][T13094] loop4: detected capacity change from 0 to 8192
[  509.320277][T13100] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768
[  509.360347][T13094] REISERFS warning (device loop4): super-6506 reiserfs_getopt: bad value "continue" for option "errors"
[  509.360347][T13094] 
[  509.776075][T13091] loop2: detected capacity change from 0 to 32768
[  509.878825][ T6017] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  509.916636][T13096] loop0: detected capacity change from 0 to 32768
[  509.981843][T13096] ERROR: (device loop0): diRead: i_ino != di_number
[  509.981843][T13096] 
[  510.091147][ T6017] usb 4-1: unable to get BOS descriptor or descriptor too short
[  510.109615][ T6017] usb 4-1: not running at top speed; connect to a high speed hub
[  510.142096][ T6017] usb 4-1: New USB device found, idVendor=2184, idProduct=0030, bcdDevice=ea.18
[  510.198770][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.217119][ T6017] usb 4-1: Product: syz
[  510.221387][ T6017] usb 4-1: Manufacturer: syz
[  510.226020][ T6017] usb 4-1: SerialNumber: syz
[  510.262247][ T6017] usb 4-1: config 0 descriptor??
[  510.289043][ T6017] hub 4-1:0.0: bad descriptor, ignoring hub
[  510.303106][T13121] loop4: detected capacity change from 0 to 1024
[  510.313283][ T6017] hub: probe of 4-1:0.0 failed with error -5
[  510.338425][ T6017] cp210x 4-1:0.0: cp210x converter detected
[  510.347425][T13121] EXT4-fs (loop4): filesystem too large to mount safely on this system
[  510.472404][ T6017] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  510.487253][ T6017] cp210x 4-1:0.0: querying part number failed
[  510.514284][ T6017] usb 4-1: cp210x converter now attached to ttyUSB0
[  510.587598][ T6017] usb 4-1: USB disconnect, device number 8
[  510.608312][ T6017] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  510.645094][ T6017] cp210x 4-1:0.0: device disconnected
[  510.818980][T13131] futex_wake_op: syz.4.3853 tries to shift op by -1; fix this program
[  510.934363][T13137] loop0: detected capacity change from 0 to 64
[  511.008143][T13137] MINIX-fs: file system does not have enough zmap blocks allocated.  Refusing to mount.
[  511.038712][T13137] MINIX-fs: bad superblock or unable to read bitmaps
[  511.313605][T13141] loop2: detected capacity change from 0 to 8192
[  511.374541][T13141] Dev loop2: RDB in block 1 has bad checksum
[  511.442505][T13153] loop3: detected capacity change from 0 to 4096
[  511.449833][ T4714] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  511.460030][T13153] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  511.518657][T13153] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  511.531914][T13153] ntfs3: loop3: Failed to load $AttrDef -> 0
[  511.548153][ T6017] usb 1-1: new full-speed USB device number 117 using dummy_hcd
[  511.575825][T13157] loop4: detected capacity change from 0 to 8
[  511.632511][T13157] SQUASHFS error: zlib decompression failed, data probably corrupt
[  511.674319][ T4714] usb 2-1: Using ep0 maxpacket: 16
[  511.690335][ T4714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  511.706270][T13157] SQUASHFS error: Failed to read block 0x9b: -5
[  511.741007][T13157] SQUASHFS error: Unable to read metadata cache entry [99]
[  511.746831][ T4714] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  511.768457][ T4714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.776802][T13157] SQUASHFS error: Unable to read inode 0x127
[  511.793742][ T6017] usb 1-1: config 0 has an invalid interface number: 207 but max is 0
[  511.802437][ T6017] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  511.812573][ T6017] usb 1-1: config 0 has no interface number 0
[  511.823015][ T4714] usb 2-1: Product: syz
[  511.839793][ T4714] usb 2-1: Manufacturer: syz
[  511.844450][ T4714] usb 2-1: SerialNumber: syz
[  511.865214][ T6017] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  511.891077][ T6017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.906399][ T4714] usb 2-1: config 0 descriptor??
[  511.918245][ T6017] usb 1-1: Product: syz
[  511.933806][ T6017] usb 1-1: Manufacturer: syz
[  511.938507][ T6017] usb 1-1: SerialNumber: syz
[  511.977566][ T6017] usb 1-1: config 0 descriptor??
[  511.984638][ T4742] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  511.994699][ T4742] Bluetooth: hci4: Injecting HCI hardware error event
[  512.005837][ T4742] Bluetooth: hci4: hardware error 0x00
[  512.181998][ T2185] usb 2-1: USB disconnect, device number 116
[  512.204247][ T6017] qmi_wwan: probe of 1-1:0.207 failed with error -22
[  512.226873][ T6017] usb 1-1: USB disconnect, device number 117
[  512.500733][T13172] loop3: detected capacity change from 0 to 128
[  512.558954][T13172] omfs: sysblock number (f784317bf884317b) is out of range
[  512.934935][T13162] loop2: detected capacity change from 0 to 32768
[  512.971197][T13162] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.3868 (13162)
[  513.044906][T13162] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  513.069450][T13162] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  513.080020][T13174] loop3: detected capacity change from 0 to 8192
[  513.087344][T13162] BTRFS info (device loop2): turning off barriers
[  513.111022][T13168] loop4: detected capacity change from 0 to 32768
[  513.117948][T13162] BTRFS info (device loop2): max_inline at 0
[  513.135385][ T2185] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  513.178851][T13168] JBD2: Ignoring recovery information on journal
[  513.187171][T13162] BTRFS info (device loop2): enabling all of the rescue options
[  513.195664][T13168] JBD2: corrupted journal superblock
[  513.200986][T13168] JBD2: error -117 scanning journal
[  513.222737][T13168] (syz.4.3870,13168,1):ocfs2_journal_wipe:1161 ERROR: status = -117
[  513.265555][T13162] BTRFS info (device loop2): ignoring data csums
[  513.281293][T13168] (syz.4.3870,13168,1):ocfs2_check_volume:2417 ERROR: status = -117
[  513.300896][T13162] BTRFS info (device loop2): ignoring bad roots
[  513.323605][T13168] (syz.4.3870,13168,0):ocfs2_check_volume:2486 ERROR: status = -117
[  513.333324][T13162] BTRFS info (device loop2): disabling log replay at mount time
[  513.335112][ T2185] usb 2-1: Using ep0 maxpacket: 32
[  513.349854][T13181] loop0: detected capacity change from 0 to 4096
[  513.353637][T13168] (syz.4.3870,13168,0):ocfs2_mount_volume:1821 ERROR: status = -117
[  513.372181][T13162] BTRFS info (device loop2): force zlib compression, level 3
[  513.378137][ T2185] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=ac.b4
[  513.406957][T13181] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  513.420693][ T2185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.426252][T13162] BTRFS info (device loop2): allowing degraded mounts
[  513.442650][T13168] (syz.4.3870,13168,0):ocfs2_fill_super:1176 ERROR: status = -117
[  513.455864][T13162] BTRFS info (device loop2): enabling auto defrag
[  513.456170][ T2185] usb 2-1: Product: syz
[  513.477237][T13162] BTRFS info (device loop2): using free space tree
[  513.491772][ T2185] usb 2-1: Manufacturer: syz
[  513.496430][ T2185] usb 2-1: SerialNumber: syz
[  513.532794][ T2185] usb 2-1: config 0 descriptor??
[  513.615507][T13181] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  513.637192][T13181] ntfs3: loop0: Failed to load $Secure.
[  513.757133][ T5830] usb 2-1: USB disconnect, device number 117
[  513.877124][   T32] BTRFS warning (device loop2: state C): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1
[  513.941174][T13206] loop4: detected capacity change from 0 to 512
[  513.948615][T13206] EXT4-fs: Ignoring removed orlov option
[  513.972978][T13206] EXT4-fs (loop4): orphan cleanup on readonly fs
[  513.990681][T13162] BTRFS info (device loop2: state C): enabling ssd optimizations
[  514.006359][ T4742] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  514.044205][T13206] EXT4-fs error (device loop4): ext4_find_extent:936: inode #4: comm syz.4.3881: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0)
[  514.078090][T13206] EXT4-fs (loop4): Remounting filesystem read-only
[  514.100974][T13206] __quota_error: 6 callbacks suppressed
[  514.100993][T13206] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117
[  514.171241][T13206] EXT4-fs warning (device loop4): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  514.205153][ T4747] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  514.210493][T13206] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  514.239793][T13206] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  514.250582][T13211] loop3: detected capacity change from 0 to 4096
[  514.295371][T13211] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  514.491568][T13217] loop1: detected capacity change from 0 to 512
[  514.556948][T13217] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  514.582077][T13217] EXT4-fs (loop1): orphan cleanup on readonly fs
[  514.597385][T13217] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated!
[  514.617622][T13217] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  514.627590][T13217] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.3886: Failed to acquire dquot type 1
[  514.658687][T13217] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3886: bg 0: block 40: padding at end of block bitmap is not set
[  514.730425][T13211] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  514.738465][ T4741] EXT4-fs (loop4): unmounting filesystem.
[  514.772964][T13211] ntfs3: loop3: Failed to load $Extend.
[  514.787593][T13217] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  514.817196][T13217] EXT4-fs (loop1): 1 truncate cleaned up
[  514.817966][T13211] ntfs3: loop3: Failed to load root.
[  514.828721][T13217] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  514.991380][ T4740] EXT4-fs (loop1): unmounting filesystem.
[  515.204216][ T6012] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[  515.266394][T13237] loop3: detected capacity change from 0 to 164
[  515.275064][ T5253] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  515.293852][T13237] Unable to read rock-ridge attributes
[  515.331506][T13239] loop2: detected capacity change from 0 to 1024
[  515.366088][ T6020] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  515.416412][ T6012] usb 5-1: Using ep0 maxpacket: 16
[  515.423511][ T6012] usb 5-1: config 0 has an invalid interface number: 107 but max is 0
[  515.438392][ T6012] usb 5-1: config 0 has no interface number 0
[  515.444763][ T6012] usb 5-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255
[  515.487763][ T5253] usb 1-1: config 0 has an invalid interface number: 153 but max is 0
[  515.501725][ T5253] usb 1-1: config 0 has no interface number 0
[  515.508491][ T5253] usb 1-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30
[  515.526416][ T5253] usb 1-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  515.545760][ T5253] usb 1-1: config 0 interface 153 has no altsetting 0
[  515.553836][ T6012] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  515.563433][ T6012] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  515.572600][ T6012] usb 5-1: Product: syz
[  515.577222][ T6012] usb 5-1: Manufacturer: syz
[  515.582924][ T6012] usb 5-1: SerialNumber: syz
[  515.594839][ T5253] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  515.605694][ T6020] usb 2-1: Using ep0 maxpacket: 8
[  515.613087][ T6020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 11008, setting to 64
[  515.629869][ T6012] usb 5-1: config 0 descriptor??
[  515.635013][ T5253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.646022][T13225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  515.654526][ T5253] usb 1-1: Product: syz
[  515.661647][ T5253] usb 1-1: Manufacturer: syz
[  515.666906][ T6020] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  515.676746][ T5253] usb 1-1: SerialNumber: syz
[  515.676989][T13245] loop3: detected capacity change from 0 to 2048
[  515.681896][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.697842][ T6020] usb 2-1: Product: syz
[  515.703375][ T5253] usb 1-1: config 0 descriptor??
[  515.709738][ T6020] usb 2-1: Manufacturer: syz
[  515.716446][ T5253] hub 1-1:0.153: bad descriptor, ignoring hub
[  515.729440][ T4818] udevd[4818]: incorrect nilfs2 checksum on /dev/loop3
[  515.730654][ T6020] usb 2-1: SerialNumber: syz
[  515.747865][ T5253] hub: probe of 1-1:0.153 failed with error -5
[  515.755423][T13245] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  515.756079][ T5253] sierra 1-1:0.153: Sierra USB modem converter detected
[  515.776636][ T6020] usb 2-1: config 0 descriptor??
[  515.777030][T13243] loop2: detected capacity change from 0 to 8192
[  515.783779][T13245] NILFS (loop3): too large filesystem blocksize: 2 ^ 347668480 KiB
[  515.800807][ T4818] udevd[4818]: incorrect nilfs2 checksum on /dev/loop3
[  515.802022][ T6020] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[  515.860536][T13243] Dev loop2: RDB in block 1 has bad checksum
[  515.875208][ T6012] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected
[  515.898815][ T6012] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81
[  515.919632][ T3624] Dev loop2: RDB in block 1 has bad checksum
[  515.944052][ T6012] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1
[  515.954257][ T5253] usb 1-1: USB disconnect, device number 118
[  515.963494][ T6012] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  515.971814][ T5253] sierra 1-1:0.153: device disconnected
[  516.007924][ T6012] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2
[  516.017380][ T6012] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  516.029370][ T6012] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4
[  516.055933][ T6012] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  516.106736][ T6012] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6
[  516.113631][ T4714] usb 2-1: USB disconnect, device number 118
[  516.140731][ T6012] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  516.176598][ T6012] usb 5-1: USB disconnect, device number 123
[  516.199991][ T6012] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  516.277972][ T6012] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  516.303749][ T6012] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  516.349666][ T6012] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  516.371652][ T6012] keyspan 5-1:0.107: device disconnected
[  516.442509][T13257] loop2: detected capacity change from 0 to 8
[  516.450850][T13257] Filesystem uses "lzma" compression. This is not supported
[  516.595384][ T5253] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  516.813646][ T5253] usb 4-1: Using ep0 maxpacket: 32
[  516.822430][ T5253] usb 4-1: config 0 has an invalid interface number: 96 but max is 0
[  516.830817][ T5253] usb 4-1: config 0 has no interface number 0
[  516.838568][ T5253] usb 4-1: config 0 interface 96 has no altsetting 0
[  516.849383][ T5253] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44
[  516.862917][ T5253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.871292][ T5253] usb 4-1: Product: syz
[  516.874773][T13271] loop1: detected capacity change from 0 to 4096
[  516.876732][ T5253] usb 4-1: Manufacturer: syz
[  516.887078][ T5253] usb 4-1: SerialNumber: syz
[  516.893933][T13271] ntfs: (device loop1): ntfs_read_inode_mount(): Incorrect mft record size 2048 in superblock, should be 4096.
[  516.910960][T13271] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  516.912339][ T5253] usb 4-1: config 0 descriptor??
[  516.920382][T13271] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata.
[  516.925553][ T6020] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  516.944757][ T6012] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[  516.955416][ T5253] legousbtower 4-1:0.96: interrupt endpoints not found
[  517.056828][  T951] usb 3-1: new full-speed USB device number 122 using dummy_hcd
[  517.152375][ T6020] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  517.171931][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.172183][ T6012] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=6a.0a
[  517.197562][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.206635][ T6020] usb 1-1: config 0 descriptor??
[  517.220466][ T6012] usb 5-1: Product: syz
[  517.229087][ T6012] usb 5-1: Manufacturer: syz
[  517.229631][ T4714] usb 4-1: USB disconnect, device number 9
[  517.236651][ T6012] usb 5-1: SerialNumber: syz
[  517.256376][  T951] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  517.274898][  T951] usb 3-1: config 0 has no interface number 0
[  517.281092][  T951] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023
[  517.294626][  T951] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64
[  517.306841][ T6012] usb 5-1: config 0 descriptor??
[  517.313387][ T6012] kalmia: probe of 5-1:0.0 failed with error -22
[  517.320681][  T951] usb 3-1: config 0 interface 128 has no altsetting 0
[  517.343786][  T951] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91
[  517.360294][  T951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.369739][  T951] usb 3-1: Product: syz
[  517.373983][  T951] usb 3-1: Manufacturer: syz
[  517.383964][  T951] usb 3-1: SerialNumber: syz
[  517.393854][  T951] usb 3-1: config 0 descriptor??
[  517.403467][  T951] radio-si470x 3-1:0.128: could not find interrupt in endpoint
[  517.411218][  T951] radio-si470x: probe of 3-1:0.128 failed with error -5
[  517.419908][  T951] usbhid 3-1:0.128: couldn't find an input interrupt endpoint
[  517.444588][ T6020] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e
[  517.453965][ T6020] hackrf 1-1:0.0: Could not detect board
[  517.461036][ T6020] hackrf: probe of 1-1:0.0 failed with error -71
[  517.468950][ T6020] usb 1-1: USB disconnect, device number 119
[  517.538641][ T4714] usb 5-1: USB disconnect, device number 124
[  517.562621][ T2185] usb 2-1: new full-speed USB device number 119 using dummy_hcd
[  517.622201][ T5830] usb 3-1: USB disconnect, device number 122
[  517.761298][ T2185] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  517.773547][ T2185] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6
[  517.782769][ T2185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.792329][ T2185] usb 2-1: Product: syz
[  517.796516][ T2185] usb 2-1: Manufacturer: syz
[  517.801200][ T2185] usb 2-1: SerialNumber: syz
[  517.817879][ T2185] usb 2-1: config 0 descriptor??
[  517.835507][ T2185] mct_u232 2-1:0.0: MCT U232 converter detected
[  517.855898][ T2185] mct_u232 ttyUSB0: expected endpoint missing
[  518.064827][ T5830] usb 2-1: USB disconnect, device number 119
[  518.072581][ T5830] mct_u232 2-1:0.0: device disconnected
[  518.250405][T13292] dccp_invalid_packet: P.Data Offset(4) too small
[  518.538751][ T2185] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  518.646594][T13287] loop3: detected capacity change from 0 to 32768
[  518.712591][T13287] XFS (loop3): Mounting V5 Filesystem
[  518.726602][ T2185] usb 1-1: Using ep0 maxpacket: 16
[  518.735796][ T2185] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b
[  518.750538][ T2185] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  518.758868][ T2185] usb 1-1: Product: syz
[  518.763093][ T2185] usb 1-1: SerialNumber: syz
[  518.773438][ T2185] usb 1-1: config 0 descriptor??
[  518.784895][ T2185] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  518.793112][ T2185] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22
[  518.800620][ T2185] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  518.807111][ T2185] dvb_usb_af9035: probe of 1-1:0.0 failed with error -22
[  518.934894][T13287] XFS (loop3): Ending clean mount
[  518.943450][T13319] loop1: detected capacity change from 0 to 512
[  518.957022][T13287] XFS (loop3): Quotacheck needed: Please wait.
[  518.964599][T13319] EXT4-fs (loop1): invalid inodes per group: 0
[  518.964599][T13319] 
[  519.012087][ T5830] usb 1-1: USB disconnect, device number 120
[  519.058534][T13287] XFS (loop3): Quotacheck: Done.
[  519.087031][ T7013] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  519.231649][ T4746] XFS (loop3): Unmounting Filesystem
[  519.993826][ T6012] usb 2-1: new full-speed USB device number 120 using dummy_hcd
[  520.045868][T13353] loop2: detected capacity change from 0 to 2048
[  520.111620][T13353] EXT4-fs (loop2): failed to initialize system zone (-117)
[  520.119032][T13353] EXT4-fs (loop2): mount failed
[  520.214498][ T6020] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  520.223677][ T6012] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  520.251294][ T6012] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  520.275531][ T6012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.294863][ T6012] usb 2-1: Product: syz
[  520.305467][ T6012] usb 2-1: Manufacturer: syz
[  520.316079][ T6012] usb 2-1: SerialNumber: syz
[  520.347461][ T6012] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  520.392114][   T26] audit: type=1326 audit(21487578.002:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13356 comm="syz.2.3949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36b1d8e969 code=0x0
[  520.423033][T13343] loop4: detected capacity change from 0 to 40427
[  520.445810][ T6020] usb 4-1: Using ep0 maxpacket: 32
[  520.453490][ T6020] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[  520.465310][T13343] F2FS-fs (loop4): quotafile must be on filesystem root
[  520.504632][ T6020] usb 4-1: config 0 has no interface number 0
[  520.522734][ T6020] usb 4-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c
[  520.557836][ T6012] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  520.588174][ T6020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.602016][ T6020] usb 4-1: Product: syz
[  520.615236][ T6012] usb 2-1: USB disconnect, device number 120
[  520.621910][ T6020] usb 4-1: Manufacturer: syz
[  520.633300][ T6020] usb 4-1: SerialNumber: syz
[  520.652772][ T6020] usb 4-1: config 0 descriptor??
[  520.654486][T13349] loop0: detected capacity change from 0 to 32768
[  520.744203][T13349] XFS (loop0): Mounting V5 Filesystem
[  520.793068][ T5830] XFS (loop0): Corruption warning: Metadata has LSN (98305:16) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  520.824126][ T5830] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_inobt block 0x18 
[  520.836178][ T4714] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  520.843944][ T5830] XFS (loop0): Unmount and run xfs_repair
[  520.851383][ T5830] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  520.859199][ T5830] 00000000: 49 41 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  IAB3............
[  520.885264][ T5830] 00000010: 00 00 00 00 00 00 00 18 00 01 80 01 00 00 00 10  ................
[  520.905365][ T6020] mos7840 4-1:0.186: missing endpoints
[  520.907031][ T5830] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab  ..*.w.B.....G.K.
[  520.917929][ T6020] usb 4-1: USB disconnect, device number 10
[  520.941307][ T5830] 00000030: 00 00 00 00 80 e5 f6 6c 00 00 04 20 00 00 00 37  .......l... ...7
[  520.951313][ T5830] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  520.964960][ T5830] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  520.973963][ T5830] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  520.983012][ T5830] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  520.992627][T13349] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x18 len 8 error 74
[  521.013574][T13349] XFS (loop0): Failed to read root inode 0x420, error 117
[  521.036614][ T4714] usb 3-1: Using ep0 maxpacket: 16
[  521.057291][ T4714] usb 3-1: config 1 descriptor has 1 excess byte, ignoring
[  521.071433][ T4714] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  521.084301][ T4714] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  521.135836][T13371] loop4: detected capacity change from 0 to 4096
[  521.139111][ T4714] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40
[  521.152671][ T4714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.167198][ T4714] usb 3-1: Product: syz
[  521.171406][ T4714] usb 3-1: Manufacturer: syz
[  521.239041][ T4714] usb 3-1: SerialNumber: syz
[  521.262091][T13371] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  521.277236][ T4714] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input47
[  521.278075][T13371] ntfs3: loop4: Failed to load $Extend.
[  521.559377][ T4714] usb 3-1: USB disconnect, device number 123
[  521.708382][T13380] loop1: detected capacity change from 0 to 64
[  521.755784][T13380] hfs: get root inode failed
[  521.921928][T13383] loop4: detected capacity change from 0 to 4096
[  521.968565][T13387] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  521.974989][T13387] PKCS7: Only support pkcs7_signedData type
[  521.993523][T13383] ntfs: (device loop4): ntfs_read_inode_mount(): Incorrect mft record size 2048 in superblock, should be 4096.
[  522.017338][T13383] ntfs: (device loop4): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  522.541895][T13396] loop1: detected capacity change from 0 to 8192
[  522.602237][ T5830] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  522.710200][T13409] loop4: detected capacity change from 0 to 128
[  522.805916][ T5830] usb 3-1: Using ep0 maxpacket: 32
[  522.841017][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short
[  522.888035][ T5830] usb 3-1: config 0 has an invalid interface number: 82 but max is 1
[  522.907117][ T5830] usb 3-1: config 0 has an invalid interface number: 159 but max is 1
[  522.941543][ T5830] usb 3-1: config 0 has no interface number 0
[  522.947765][ T5830] usb 3-1: config 0 has no interface number 1
[  522.973826][ T5830] usb 3-1: config 0 interface 82 has no altsetting 0
[  522.991429][ T5830] usb 3-1: config 0 interface 159 has no altsetting 0
[  523.015438][ T5830] usb 3-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d
[  523.046420][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.068874][ T5830] usb 3-1: Product: syz
[  523.073094][ T5830] usb 3-1: Manufacturer: syz
[  523.112012][ T5830] usb 3-1: SerialNumber: syz
[  523.148289][T13421] loop1: detected capacity change from 0 to 190
[  523.149138][ T5830] usb 3-1: config 0 descriptor??
[  523.455041][ T5830] usb 3-1: USB disconnect, device number 124
[  523.503899][ T2185] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  523.587678][ T4818] udevd[4818]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.159/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  523.720597][ T2185] usb 5-1: Using ep0 maxpacket: 8
[  523.737316][ T2185] usb 5-1: config 1 interface 0 has no altsetting 0
[  523.752499][T13411] loop0: detected capacity change from 0 to 40427
[  523.766459][T13411] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[  523.775577][ T2185] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  523.786804][ T2185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.796208][T13411] F2FS-fs (loop0): invalid crc value
[  523.807879][ T2185] usb 5-1: Product: syz
[  523.817367][ T4819] udevd[4819]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.82/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  523.817374][ T2185] usb 5-1: Manufacturer: syz
[  523.817396][ T2185] usb 5-1: SerialNumber: syz
[  523.857541][T13411] F2FS-fs (loop0): Found nat_bits in checkpoint
[  523.940499][ T6020] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  523.942059][T13411] F2FS-fs (loop0): recover fsync data on readonly fs
[  523.974615][T13411] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  523.983341][T13411] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  523.991359][T13411] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  524.100492][ T2185] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input48
[  524.133609][ T3609] bcm5974 5-1:1.0: could not read from device
[  524.137120][ T2185] usb 5-1: USB disconnect, device number 125
[  524.163276][ T6020] usb 4-1: Using ep0 maxpacket: 8
[  524.171300][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  524.236139][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  524.260478][ T6020] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  524.301116][ T6020] usb 4-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=5c.30
[  524.310228][ T6020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.334829][ T6020] usb 4-1: config 0 descriptor??
[  524.355142][ T6020] hdpvr 4-1:0.0: Could not find bulk-in endpoint
[  524.361580][ T6020] hdpvr: probe of 4-1:0.0 failed with error -12
[  524.492502][ T5830] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  524.529884][T13448] loop1: detected capacity change from 0 to 8192
[  524.571519][ T4714] usb 4-1: USB disconnect, device number 11
[  524.697394][ T5830] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  524.712506][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  524.759553][ T5830] usb 3-1: config 0 has no interface number 0
[  524.781619][ T5830] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  524.811803][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.825840][T13456] loop1: detected capacity change from 0 to 128
[  524.833781][ T5830] usb 3-1: Product: syz
[  524.838018][ T5830] usb 3-1: Manufacturer: syz
[  524.842661][ T5830] usb 3-1: SerialNumber: syz
[  524.857191][ T5830] usb 3-1: config 0 descriptor??
[  524.868922][ T5830] ims_pcu 3-1:0.41: Missing CDC union descriptor
[  524.875351][ T5830] ims_pcu: probe of 3-1:0.41 failed with error -22
[  524.938939][ T4819] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  524.964065][   T26] audit: type=1326 audit(21487582.324:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13459 comm="syz.4.3995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff11298e969 code=0x0
[  525.106099][ T5830] usb 3-1: USB disconnect, device number 125
[  525.176928][T13433] Process accounting paused
[  525.285124][T13468] loop1: detected capacity change from 0 to 128
[  525.323074][T13468] ADFS-fs (loop1): unrecognised mount option "uid<00000000000000000000" or missing value
[  525.491907][T13474] loop4: detected capacity change from 0 to 8192
[  525.510667][T13474] NILFS: invalid option "cp=0x0000000000000001": read-only option is not specified
[  525.564749][T13480] loop1: detected capacity change from 0 to 512
[  525.590017][ T2185] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  525.655466][T13480] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4006: bg 0: block 393: padding at end of block bitmap is not set
[  525.691541][T13480] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  525.719004][T13480] EXT4-fs (loop1): 2 truncates cleaned up
[  525.735850][T13480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  525.812517][ T2185] usb 1-1: Using ep0 maxpacket: 8
[  525.821690][ T2185] usb 1-1: unable to get BOS descriptor or descriptor too short
[  525.854631][ T2185] usb 1-1: config 7 has an invalid interface number: 162 but max is 0
[  525.885322][ T2185] usb 1-1: config 7 has no interface number 0
[  525.902398][ T2185] usb 1-1: config 7 interface 162 has no altsetting 0
[  525.926072][ T2185] usb 1-1: New USB device found, idVendor=9b30, idProduct=a016, bcdDevice=11.82
[  525.937560][ T4740] EXT4-fs (loop1): unmounting filesystem.
[  525.978807][ T2185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.025607][ T2185] usb 1-1: Product: syz
[  526.029835][ T2185] usb 1-1: Manufacturer: syz
[  526.056820][ T2185] usb 1-1: SerialNumber: syz
[  526.156677][T13496] loop2: detected capacity change from 0 to 2048
[  526.227373][T13496] UDF-fs: error (device loop2): udf_read_inode: (ino 1312) failed !bh
[  526.251294][T13496] UDF-fs: Scanning with blocksize 512 failed
[  526.275021][T13496] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  526.299395][T13496] UDF-fs: Scanning with blocksize 1024 failed
[  526.314557][ T2185] rndis_wlan 1-1:7.162: skipping garbage
[  526.320270][ T2185] usb 1-1: bad CDC descriptors
[  526.328236][T13496] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  526.333772][ T2185] rndis_host 1-1:7.162: skipping garbage
[  526.344374][ T2185] usb 1-1: bad CDC descriptors
[  526.373760][ T2185] usb 1-1: USB disconnect, device number 121
[  526.377544][T13496] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  526.402605][T13496] UDF-fs: Scanning with blocksize 2048 failed
[  526.408572][T13507] loop4: detected capacity change from 0 to 1024
[  526.440357][T13496] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  526.451010][T13507] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  526.462509][T13507] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  526.473690][T13507] EXT4-fs error (device loop4): ext4_get_journal_inode:5723: comm syz.4.4017: inode #4294967295: comm syz.4.4017: iget: illegal inode #
[  526.490560][T13496] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  526.505527][T13507] EXT4-fs (loop4): no journal found
[  526.506351][T13496] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  526.510886][T13507] EXT4-fs (loop4): can't get journal size
[  526.524537][T13496] UDF-fs: Scanning with blocksize 4096 failed
[  526.531951][T13496] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  526.546746][T13507] EXT4-fs (loop4): failed to initialize system zone (-22)
[  526.558555][ T5830] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  526.578738][T13507] EXT4-fs (loop4): mount failed
[  526.761024][ T5830] usb 2-1: Using ep0 maxpacket: 8
[  526.768130][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  526.768485][T13516] loop2: detected capacity change from 0 to 64
[  526.788945][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  526.810629][ T5830] usb 2-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice=8d.a7
[  526.821449][T13516] BFS-fs: bfs_iget(): Bad inode number loop2:00000002
[  526.857661][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.880208][T13514] loop3: detected capacity change from 0 to 4096
[  526.891688][ T5830] usb 2-1: config 0 descriptor??
[  526.903990][ T5830] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  526.942390][T13514] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  526.989524][ T5830] imon 2-1:0.0: unable to initialize intf0, err -19
[  527.008193][ T5830] imon:imon_probe: failed to initialize context!
[  527.030692][ T5830] imon 2-1:0.0: unable to register, err -19
[  527.090884][T13514] ntfs3: loop3: Failed to load $Secure.
[  527.129227][ T5830] usb 2-1: USB disconnect, device number 121
[  527.293663][T13526] loop3: detected capacity change from 0 to 256
[  527.326396][ T4714] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  527.337170][T13526] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  527.433079][ T4742] Bluetooth: hci3: unexpected event for opcode 0x2023
[  527.496863][   T14] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  527.528810][ T4714] usb 1-1: Using ep0 maxpacket: 8
[  527.536264][ T4714] usb 1-1: unable to get BOS descriptor or descriptor too short
[  527.549597][ T4714] usb 1-1: config 3 has an invalid interface number: 182 but max is 0
[  527.558750][ T4714] usb 1-1: config 3 has no interface number 0
[  527.566278][ T4714] usb 1-1: config 3 interface 182 altsetting 9 endpoint 0xF has invalid wMaxPacketSize 0
[  527.576614][ T4714] usb 1-1: config 3 interface 182 altsetting 9 endpoint 0xA has an invalid bInterval 106, changing to 10
[  527.588801][ T4714] usb 1-1: config 3 interface 182 altsetting 9 endpoint 0x3 has an invalid bInterval 92, changing to 10
[  527.600327][ T4714] usb 1-1: config 3 interface 182 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0
[  527.610487][ T4714] usb 1-1: config 3 interface 182 has no altsetting 0
[  527.620119][ T4714] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57
[  527.629656][ T4714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.638075][ T4714] usb 1-1: Product: syz
[  527.642353][ T4714] usb 1-1: Manufacturer: syz
[  527.647390][ T4714] usb 1-1: SerialNumber: syz
[  527.688793][   T14] usb 3-1: Using ep0 maxpacket: 16
[  527.688954][ T6020] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  527.698749][   T14] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b
[  527.731423][   T14] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  527.752863][   T14] usb 3-1: Product: syz
[  527.757117][   T14] usb 3-1: SerialNumber: syz
[  527.775549][   T14] usb 3-1: config 0 descriptor??
[  527.799369][   T14] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  527.817685][   T14] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22
[  527.831812][   T14] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  527.838358][   T14] dvb_usb_af9035: probe of 3-1:0.0 failed with error -22
[  527.877479][ T4714] usbtest 1-1:3.182: couldn't get endpoints, -71
[  527.899762][ T4714] usbtest: probe of 1-1:3.182 failed with error -71
[  527.917322][ T4714] usb 1-1: USB disconnect, device number 122
[  527.934416][ T6020] usb 5-1: Using ep0 maxpacket: 32
[  527.942260][ T6020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  527.961595][ T6020] usb 5-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=75.43
[  527.973958][ T6020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.998734][ T6020] usb 5-1: Product: syz
[  528.007312][ T6020] usb 5-1: Manufacturer: syz
[  528.012579][ T6020] usb 5-1: SerialNumber: syz
[  528.019974][ T6020] usb 5-1: config 0 descriptor??
[  528.050917][ T2185] usb 3-1: USB disconnect, device number 126
[  528.072880][ T6012] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  528.248801][ T6020] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware
[  528.277239][ T6012] usb 4-1: config 0 has an invalid interface number: 207 but max is 0
[  528.285478][ T6012] usb 4-1: config 0 has no interface number 0
[  528.292138][ T6012] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  528.303535][ T6012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.313848][ T6012] usb 4-1: config 0 descriptor??
[  528.322261][ T6012] go7007 4-1:0.207: Sensoray 2250 found
[  528.328199][ T6012] go7007: probe of 4-1:0.207 failed with error -12
[  528.349234][ T6020] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  528.357420][ T6020] dib0700: firmware download failed at 7 with -22
[  528.367895][ T6020] usb 5-1: USB disconnect, device number 126
[  528.531772][ T4714] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  528.552037][  T951] usb 4-1: USB disconnect, device number 12
[  528.664603][T13556] loop0: detected capacity change from 0 to 1024
[  528.748383][ T4714] usb 2-1: Using ep0 maxpacket: 32
[  528.759631][ T4714] usb 2-1: unable to get BOS descriptor or descriptor too short
[  528.793227][ T4714] usb 2-1: config 0 has an invalid interface number: 82 but max is 1
[  528.813234][ T4714] usb 2-1: config 0 has an invalid interface number: 159 but max is 1
[  528.838547][ T4714] usb 2-1: config 0 has no interface number 0
[  528.850213][ T4714] usb 2-1: config 0 has no interface number 1
[  528.861099][ T4714] usb 2-1: config 0 interface 82 has no altsetting 0
[  528.870528][ T4714] usb 2-1: config 0 interface 159 has no altsetting 0
[  528.897306][ T4714] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d
[  528.911780][ T4714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.921865][ T4714] usb 2-1: Product: syz
[  528.924683][T13564] loop4: detected capacity change from 0 to 128
[  528.926183][ T4714] usb 2-1: Manufacturer: syz
[  528.939176][T13564] hpfs: bad mount options.
[  528.943988][ T4714] usb 2-1: SerialNumber: syz
[  528.950580][ T4714] usb 2-1: config 0 descriptor??
[  529.140152][  T951] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  529.182910][ T2185] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  529.245876][ T4714] usb 2-1: USB disconnect, device number 122
[  529.328637][ T4818] udevd[4818]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.159/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  529.353932][  T951] usb 1-1: Using ep0 maxpacket: 16
[  529.365638][   T14] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  529.373933][  T951] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  529.383321][  T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.396460][ T2185] usb 3-1: Using ep0 maxpacket: 32
[  529.402240][  T951] usb 1-1: Product: syz
[  529.403646][ T2185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  529.406434][  T951] usb 1-1: Manufacturer: syz
[  529.406455][  T951] usb 1-1: SerialNumber: syz
[  529.409550][  T951] usb 1-1: config 0 descriptor??
[  529.441220][ T2185] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=9c.e2
[  529.450761][ T2185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.459240][ T2185] usb 3-1: Product: syz
[  529.464387][ T2185] usb 3-1: Manufacturer: syz
[  529.469031][ T2185] usb 3-1: SerialNumber: syz
[  529.483422][ T2185] usb 3-1: config 0 descriptor??
[  529.514772][T13572] loop3: detected capacity change from 0 to 8192
[  529.536244][ T4819] udevd[4819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.82/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  529.564079][T13572] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  529.569824][   T14] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[  529.579296][T13572] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  529.596272][T13572] REISERFS (device loop3): using ordered data mode
[  529.603135][T13572] reiserfs: using flush barriers
[  529.610271][T13572] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  529.645901][T13572] REISERFS (device loop3): checking transaction log (loop3)
[  529.666193][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.670870][  T951] speedtch 1-1:0.0: speedtch_bind: data interface not found!
[  529.688074][  T951] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  529.707581][  T951] usb 1-1: USB disconnect, device number 123
[  529.740371][   T14] usb 5-1: config 0 descriptor??
[  529.775657][ T6012] usb 3-1: USB disconnect, device number 127
[  529.800555][   T14] pwc: Philips SPC 900NC USB webcam detected.
[  529.802670][T13572] REISERFS (device loop3): Using r5 hash to sort names
[  529.814298][T13572] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  529.996958][   T14] pwc: Failed to set LED on/off time (-71)
[  530.008314][   T14] pwc: send_video_command error -71
[  530.013570][   T14] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  530.046090][   T14] Philips webcam: probe of 5-1:0.0 failed with error -71
[  530.067137][   T14] usb 5-1: USB disconnect, device number 127
[  530.354897][T13576] loop1: detected capacity change from 0 to 32768
[  530.394191][T13576] (syz.1.4051,13576,1):ocfs2_verify_volume:2357 ERROR: found superblock with bad version: found 65419.90, should be 0.90
[  530.430272][T13576] (syz.1.4051,13576,1):ocfs2_verify_volume:2385 ERROR: status = -22
[  530.469759][T13576] (syz.1.4051,13576,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  530.489679][T13576] (syz.1.4051,13576,1):ocfs2_fill_super:1176 ERROR: status = -22
[  530.821527][T13594] loop3: detected capacity change from 0 to 4096
[  530.870360][   T14] usb 1-1: new full-speed USB device number 124 using dummy_hcd
[  531.098389][   T14] usb 1-1: not running at top speed; connect to a high speed hub
[  531.149555][   T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  531.182262][   T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  531.228938][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.258874][   T14] usb 1-1: Product: syz
[  531.263100][   T14] usb 1-1: Manufacturer: syz
[  531.302100][   T14] usb 1-1: SerialNumber: syz
[  531.310820][T13600] loop1: detected capacity change from 0 to 2048
[  531.332392][T13602] loop2: detected capacity change from 0 to 4096
[  531.339370][T13590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  531.360067][T13600] hpfs: filesystem error: invalid number of hotfixes: 0, used: 13; already mounted read-only
[  531.385003][T13602] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  531.404310][T13600] hpfs: filesystem error: improperly stopped
[  531.426111][T13600] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  531.446885][T13602] ntfs3: loop2: volume is dirty and "force" flag is not set!
[  531.593196][   T14] cdc_ncm 1-1:1.0: bind() failure
[  531.595908][T13596] loop4: detected capacity change from 0 to 32768
[  531.605464][   T14] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  531.643660][   T14] cdc_ncm 1-1:1.1: bind() failure
[  531.665553][   T14] usb 1-1: USB disconnect, device number 124
[  531.671137][T13596] jbd2_journal_init_inode: Cannot locate journal superblock
[  531.746060][T13596] (syz.4.4061,13596,1):ocfs2_journal_init:918 ERROR: Linux journal layer error
[  531.784594][T13611] loop1: detected capacity change from 0 to 128
[  531.802298][T13596] (syz.4.4061,13596,1):ocfs2_check_volume:2401 ERROR: Could not initialize journal!
[  531.840358][T13596] (syz.4.4061,13596,1):ocfs2_check_volume:2486 ERROR: status = -22
[  531.842731][T13613] tmpfs: Bad value for 'mpol'
[  531.877276][T13596] (syz.4.4061,13596,1):ocfs2_mount_volume:1821 ERROR: status = -22
[  531.887615][T13611] qnx6: superblock #1 checksum error
[  531.938362][T13596] (syz.4.4061,13596,1):ocfs2_fill_super:1176 ERROR: status = -22
[  532.080557][T13621] loop1: detected capacity change from 0 to 64
[  532.193981][T13621] hfs: request for non-existent node 1061 in B*Tree
[  532.225696][T13621] hfs: request for non-existent node 1061 in B*Tree
[  532.261885][T13621] hfs: get root inode failed
[  532.412370][T13624] loop2: detected capacity change from 0 to 4096
[  532.429248][T13629] loop4: detected capacity change from 0 to 8
[  532.446087][T13624] ntfs3: loop2: ino=0, Correct links count -> 1.
[  532.495170][T13629] SQUASHFS error: xz decompression failed, data probably corrupt
[  532.501601][T13624] ntfs3: loop2: MFT: r=0, expect seq=1 instead of 0!
[  532.509894][T13629] SQUASHFS error: Failed to read block 0x108: -5
[  532.510590][T13624] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  532.523705][T13624] ntfs3: loop2: Failed to load $MFT.
[  532.525491][T13629] SQUASHFS error: Unable to read metadata cache entry [106]
[  532.537871][T13629] SQUASHFS error: Unable to read inode 0x11f
[  532.557932][ T6020] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  532.594445][T13631] loop1: detected capacity change from 0 to 8192
[  532.625240][T13631] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  532.654334][ T4697] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  532.662374][T13631] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  532.679656][T13631] REISERFS (device loop1): using ordered data mode
[  532.704453][T13631] reiserfs: using flush barriers
[  532.710842][T13631] REISERFS warning (device loop1): sh-460 journal_init: journal header magic 0 (device ram0) does not match to magic found in super block 49ce1e1e
[  532.727275][T13631] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  532.782313][ T6020] usb 4-1: Using ep0 maxpacket: 16
[  532.792525][ T6020] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b
[  532.793065][ T4819] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  532.837315][ T6020] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  532.856816][ T6020] usb 4-1: Product: syz
[  532.865466][ T6020] usb 4-1: SerialNumber: syz
[  532.877241][ T4697] usb 1-1: Using ep0 maxpacket: 16
[  532.891969][ T4697] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  532.922472][ T6020] usb 4-1: config 0 descriptor??
[  532.928172][ T4697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.937929][ T4697] usb 1-1: Product: syz
[  532.945759][ T6020] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  532.954017][ T4697] usb 1-1: Manufacturer: syz
[  532.958660][ T4697] usb 1-1: SerialNumber: syz
[  532.965065][ T6020] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22
[  532.972371][ T6020] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  532.992148][ T4697] usb 1-1: config 0 descriptor??
[  533.005182][ T6020] dvb_usb_af9035: probe of 4-1:0.0 failed with error -22
[  533.015972][ T4697] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  533.048495][T13636] loop2: detected capacity change from 0 to 4096
[  533.082670][T13636] ntfs: (device loop2): parse_options(): Unrecognized mount option show_sys_fil“s.
[  533.092905][T13636] ntfs: (device loop2): parse_options(): Unrecognized mount option git.
[  533.226502][ T6020] usb 4-1: USB disconnect, device number 13
[  533.240613][ T4697] pwc: Warning: more than 1 configuration available.
[  533.255480][ T4697] pwc: Failed to set LED on/off time (-71)
[  533.270164][ T4697] pwc: send_video_command error -71
[  533.284537][ T4697] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  533.313972][ T4697] Philips webcam: probe of 1-1:0.0 failed with error -71
[  533.317748][   T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  533.330626][ T4697] usb 1-1: USB disconnect, device number 125
[  533.474776][T13648] loop2: detected capacity change from 0 to 64
[  533.509607][T13648] Bad inode number on dev loop2: 1 is out of range
[  533.535203][T13650] loop1: detected capacity change from 0 to 128
[  533.542993][   T14] usb 5-1: config 222 has an invalid interface number: 233 but max is 0
[  533.551389][   T14] usb 5-1: config 222 has no interface number 0
[  533.553732][T13650] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  533.558516][ T7013] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  533.587323][T13650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  533.604416][   T14] usb 5-1: New USB device found, idVendor=0f11, idProduct=1100, bcdDevice=2e.87
[  533.624128][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.648148][   T14] usb 5-1: Product: syz
[  533.652372][   T14] usb 5-1: Manufacturer: syz
[  533.656993][   T14] usb 5-1: SerialNumber: syz
[  533.719180][T13652] loop2: detected capacity change from 0 to 512
[  533.765078][T13652] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  533.777653][T13652] EXT4-fs (loop2): mount failed
[  533.905896][   T14] ldusb 5-1:222.233: Interrupt in endpoint not found
[  533.941088][   T14] usb 5-1: USB disconnect, device number 2
[  534.047617][T13660] loop0: detected capacity change from 0 to 512
[  534.130852][T13660] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  534.160594][T13663] loop1: detected capacity change from 0 to 128
[  534.172969][T13665] loop2: detected capacity change from 0 to 512
[  534.190869][T13660] [EXT4 FS bs=1024, gc=1, bpg=4096, ipg=32, mo=e80ec028, mo2=0000]
[  534.201150][T13663] UBIFS error (pid: 13663): cannot open "/dev/loop1", error -22
[  534.248797][T13665] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  534.274358][ T4819] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  534.299770][T13660] System zones: 2-12, 7-7
[  534.305297][T13660] EXT4-fs (loop0): orphan cleanup on readonly fs
[  534.382812][T13660] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.4092: Block bitmap for bg 0 marked uninitialized
[  534.407078][T13665] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4093: invalid indirect mapped block 4294967295 (level 1)
[  534.427957][T13665] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4093: invalid indirect mapped block 4294967295 (level 1)
[  534.456957][T13665] EXT4-fs (loop2): 2 truncates cleaned up
[  534.492829][T13665] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  534.504726][T13661] loop3: detected capacity change from 0 to 40427
[  534.511296][T13660] EXT4-fs (loop0): Remounting filesystem read-only
[  534.534815][T13660] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  534.552762][T13661] F2FS-fs (loop3): build fault injection attr: rate: 6, type: 0x3ffff
[  534.557520][T13670] loop1: detected capacity change from 0 to 64
[  534.568297][T13660] EXT4-fs (loop0): Remounting filesystem read-only
[  534.576505][T13660] EXT4-fs (loop0): 1 orphan inode deleted
[  534.588228][T13660] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  534.598993][T13661] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x2
[  534.616241][T13661] F2FS-fs (loop3): invalid crc value
[  534.622928][T13670] hfs: unable to open extent tree
[  534.628021][T13670] hfs: can't find a HFS filesystem on dev loop1
[  534.662585][T13661] F2FS-fs (loop3) : inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x43d1/0x6b20
[  534.695217][T13661] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12)
[  534.725278][ T4737] EXT4-fs (loop0): unmounting filesystem.
[  534.746672][ T4747] EXT4-fs (loop2): unmounting filesystem.
[  535.197939][ T6020] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  535.400695][ T6020] usb 1-1: Using ep0 maxpacket: 16
[  535.407876][ T6020] usb 1-1: config 0 has an invalid interface number: 213 but max is 1
[  535.416354][  T951] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  535.431547][ T6020] usb 1-1: config 0 has no interface number 1
[  535.453925][ T6020] usb 1-1: config 0 interface 0 has no altsetting 0
[  535.462968][ T6020] usb 1-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8
[  535.496641][ T6020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.504699][ T6020] usb 1-1: Product: syz
[  535.528674][ T6020] usb 1-1: Manufacturer: syz
[  535.533336][ T6020] usb 1-1: SerialNumber: syz
[  535.554749][T13679] loop4: detected capacity change from 0 to 32768
[  535.559485][ T6020] usb 1-1: config 0 descriptor??
[  535.578338][ T6020] usb 1-1: selecting invalid altsetting 0
[  535.580605][T13679] (syz.4.4099,13679,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  535.599548][ T6020] usb 1-1: Could not set interface, error -22
[  535.634566][T13679] (syz.4.4099,13679,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  535.657282][  T951] usb 2-1: Using ep0 maxpacket: 16
[  535.666512][  T951] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b
[  535.678739][T13679] JBD2: Ignoring recovery information on journal
[  535.692363][  T951] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  535.702597][  T951] usb 2-1: Product: syz
[  535.706814][  T951] usb 2-1: SerialNumber: syz
[  535.714281][  T951] usb 2-1: config 0 descriptor??
[  535.734551][  T951] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  535.741637][  T951] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22
[  535.762854][  T951] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  535.769992][  T951] dvb_usb_af9035: probe of 2-1:0.0 failed with error -22
[  535.807672][T13679] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  535.814015][  T951] usb 1-1: USB disconnect, device number 126
[  535.859279][ T4794] ocfs2: Finishing quota recovery on device (7,4) for slot 0
[  535.959847][   T14] usb 2-1: USB disconnect, device number 123
[  535.980251][ T4741] 
[  535.982632][ T4741] ======================================================
[  535.989666][ T4741] WARNING: possible circular locking dependency detected
[  535.996715][ T4741] 6.1.135-syzkaller #0 Not tainted
[  536.001839][ T4741] ------------------------------------------------------
[  536.008869][ T4741] syz-executor/4741 is trying to acquire lock:
[  536.015038][ T4741] ffff8880765af138 ((wq_completion)ocfs2_wq){+.+.}-{0:0}, at: __flush_workqueue+0x124/0x1380
[  536.024055][T13692] loop3: detected capacity change from 0 to 32768
[  536.025244][ T4741] 
[  536.025244][ T4741] but task is already holding lock:
[  536.025253][ T4741] ffff88805238e0e0 (&type->s_umount_key#115){++++}-{3:3}, at: deactivate_super+0xa0/0xd0
[  536.048882][ T4741] 
[  536.048882][ T4741] which lock already depends on the new lock.
[  536.048882][ T4741] 
[  536.059299][ T4741] 
[  536.059299][ T4741] the existing dependency chain (in reverse order) is:
[  536.068324][ T4741] 
[  536.068324][ T4741] -> #2 (&type->s_umount_key#115){++++}-{3:3}:
[  536.076688][ T4741]        down_read+0x42/0x2d0
[  536.081377][ T4741]        ocfs2_finish_quota_recovery+0x129/0x1e40
[  536.087802][ T4741]        ocfs2_complete_recovery+0x157c/0x23a0
[  536.093974][ T4741]        process_one_work+0x898/0x1160
[  536.099446][ T4741]        worker_thread+0xaa2/0x1250
[  536.104652][ T4741]        kthread+0x29d/0x330
[  536.109254][ T4741]        ret_from_fork+0x1f/0x30
[  536.114200][ T4741] 
[  536.114200][ T4741] -> #1 ((work_completion)(&journal->j_recovery_work)){+.+.}-{0:0}:
[  536.124365][ T4741]        process_one_work+0x7d9/0x1160
[  536.129827][ T4741]        worker_thread+0xaa2/0x1250
[  536.135025][ T4741]        kthread+0x29d/0x330
[  536.139620][ T4741]        ret_from_fork+0x1f/0x30
[  536.144577][ T4741] 
[  536.144577][ T4741] -> #0 ((wq_completion)ocfs2_wq){+.+.}-{0:0}:
[  536.152933][ T4741]        __lock_acquire+0x2cf8/0x7c50
[  536.158337][ T4741]        lock_acquire+0x1b4/0x490
[  536.163381][ T4741]        __flush_workqueue+0x13d/0x1380
[  536.168951][ T4741]        ocfs2_shutdown_local_alloc+0xe4/0xa10
[  536.175116][ T4741]        ocfs2_dismount_volume+0x1f4/0x920
[  536.180934][ T4741]        generic_shutdown_super+0x130/0x340
[  536.186842][ T4741]        kill_block_super+0x7c/0xe0
[  536.192053][ T4741]        deactivate_locked_super+0x93/0xf0
[  536.197870][ T4741]        cleanup_mnt+0x463/0x4f0
[  536.202815][ T4741]        task_work_run+0x1ca/0x250
[  536.207930][ T4741]        exit_to_user_mode_loop+0xe6/0x110
[  536.213743][ T4741]        exit_to_user_mode_prepare+0xb1/0x140
[  536.219829][ T4741]        syscall_exit_to_user_mode+0x16/0x40
[  536.225817][ T4741]        do_syscall_64+0x58/0xa0
[  536.230756][ T4741]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  536.237179][ T4741] 
[  536.237179][ T4741] other info that might help us debug this:
[  536.237179][ T4741] 
[  536.247402][ T4741] Chain exists of:
[  536.247402][ T4741]   (wq_completion)ocfs2_wq --> (work_completion)(&journal->j_recovery_work) --> &type->s_umount_key#115
[  536.247402][ T4741] 
[  536.264353][ T4741]  Possible unsafe locking scenario:
[  536.264353][ T4741] 
[  536.271798][ T4741]        CPU0                    CPU1
[  536.277158][ T4741]        ----                    ----
[  536.282519][ T4741]   lock(&type->s_umount_key#115);
[  536.287634][ T4741]                                lock((work_completion)(&journal->j_recovery_work));
[  536.297093][ T4741]                                lock(&type->s_umount_key#115);
[  536.304727][ T4741]   lock((wq_completion)ocfs2_wq);
[  536.309839][ T4741] 
[  536.309839][ T4741]  *** DEADLOCK ***
[  536.309839][ T4741] 
[  536.317975][ T4741] 1 lock held by syz-executor/4741:
[  536.323169][ T4741]  #0: ffff88805238e0e0 (&type->s_umount_key#115){++++}-{3:3}, at: deactivate_super+0xa0/0xd0
[  536.333450][ T4741] 
[  536.333450][ T4741] stack backtrace:
[  536.339336][ T4741] CPU: 1 PID: 4741 Comm: syz-executor Not tainted 6.1.135-syzkaller #0
[  536.347570][ T4741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  536.357621][ T4741] Call Trace:
[  536.360900][ T4741]  <TASK>
[  536.363849][ T4741]  dump_stack_lvl+0x168/0x22e
[  536.368560][ T4741]  ? load_image+0x3b0/0x3b0
[  536.373077][ T4741]  ? show_regs_print_info+0x12/0x12
[  536.378295][ T4741]  ? print_circular_bug+0x12b/0x1a0
[  536.383519][ T4741]  check_noncircular+0x274/0x310
[  536.388481][ T4741]  ? add_chain_block+0x940/0x940
[  536.393432][ T4741]  ? lockdep_lock+0xdc/0x1e0
[  536.398038][ T4741]  ? register_lock_class+0xb1/0x860
[  536.403244][ T4741]  ? _find_first_zero_bit+0xcf/0x100
[  536.408534][ T4741]  __lock_acquire+0x2cf8/0x7c50
[  536.413404][ T4741]  ? verify_lock_unused+0x140/0x140
[  536.418609][ T4741]  ? debug_object_assert_init+0x1ed/0x2f0
[  536.424332][ T4741]  ? __lock_acquire+0x7c50/0x7c50
[  536.429369][ T4741]  ? __rwlock_init+0x140/0x140
[  536.434142][ T4741]  ? debug_object_activate+0x490/0x490
[  536.439606][ T4741]  ? memset+0x1e/0x40
[  536.443604][ T4741]  lock_acquire+0x1b4/0x490
[  536.448137][ T4741]  ? __flush_workqueue+0x124/0x1380
[  536.453362][ T4741]  ? debug_object_assert_init+0x1ed/0x2f0
[  536.459100][ T4741]  ? read_lock_is_recursive+0x10/0x10
[  536.464506][ T4741]  ? __init_swait_queue_head+0xa5/0x150
[  536.470072][ T4741]  ? __flush_workqueue+0x124/0x1380
[  536.475297][ T4741]  __flush_workqueue+0x13d/0x1380
[  536.480338][ T4741]  ? __flush_workqueue+0x124/0x1380
[  536.485548][ T4741]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  536.491534][ T4741]  ? lock_chain_count+0x20/0x20
[  536.496390][ T4741]  ? __flush_work+0x978/0xa60
[  536.501075][ T4741]  ? rcu_work_rcufn+0x110/0x110
[  536.505936][ T4741]  ? __cancel_work+0x1f4/0x2d0
[  536.510712][ T4741]  ? cancel_work+0x20/0x20
[  536.515137][ T4741]  ? mark_lock+0x94/0x320
[  536.519476][ T4741]  ocfs2_shutdown_local_alloc+0xe4/0xa10
[  536.525124][ T4741]  ? lock_chain_count+0x20/0x20
[  536.529978][ T4741]  ? __cancel_work_timer+0x331/0x520
[  536.535269][ T4741]  ? ocfs2_local_alloc_count_bits+0x290/0x290
[  536.541340][ T4741]  ? __cancel_work_timer+0x470/0x520
[  536.546634][ T4741]  ? cancel_work_sync+0x20/0x20
[  536.551491][ T4741]  ? _atomic_dec_and_lock+0x8f/0x110
[  536.556785][ T4741]  ? _atomic_dec_and_lock+0x8f/0x110
[  536.562075][ T4741]  ? iput+0x3c0/0x980
[  536.566067][ T4741]  ? ocfs2_disable_quotas+0x1be/0x210
[  536.571463][ T4741]  ocfs2_dismount_volume+0x1f4/0x920
[  536.576770][ T4741]  ? ocfs2_enable_quotas+0x440/0x440
[  536.582065][ T4741]  ? clear_inode+0x150/0x150
[  536.586670][ T4741]  ? ocfs2_free_inode+0x20/0x20
[  536.591523][ T4741]  generic_shutdown_super+0x130/0x340
[  536.596899][ T4741]  kill_block_super+0x7c/0xe0
[  536.601582][ T4741]  deactivate_locked_super+0x93/0xf0
[  536.606869][ T4741]  cleanup_mnt+0x463/0x4f0
[  536.611295][ T4741]  ? lockdep_hardirqs_on+0x94/0x140
[  536.616506][ T4741]  task_work_run+0x1ca/0x250
[  536.621107][ T4741]  ? task_work_cancel+0x230/0x230
[  536.626138][ T4741]  ? exit_to_user_mode_loop+0x3b/0x110
[  536.631605][ T4741]  exit_to_user_mode_loop+0xe6/0x110
[  536.636929][ T4741]  exit_to_user_mode_prepare+0xb1/0x140
[  536.642499][ T4741]  syscall_exit_to_user_mode+0x16/0x40
[  536.647983][ T4741]  do_syscall_64+0x58/0xa0
[  536.652420][ T4741]  ? clear_bhb_loop+0x45/0xa0
[  536.657105][ T4741]  ? clear_bhb_loop+0x45/0xa0
[  536.661788][ T4741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  536.667690][ T4741] RIP: 0033:0x7ff11298fc97
[  536.672109][ T4741] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  536.691749][ T4741] RSP: 002b:00007ffe3b80ee28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  536.700164][ T4741] RAX: 0000000000000000 RBX: 00007ff112a1089d RCX: 00007ff11298fc97
[  536.708146][ T4741] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3b80eee0
[  536.716117][ T4741] RBP: 00007ffe3b80eee0 R08: 0000000000000000 R09: 0000000000000000
[  536.724092][ T4741] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe3b80ff70
[  536.732063][ T4741] R13: 00007ff112a1089d R14: 00000000000828fe R15: 00007ffe3b80ffb0
[  536.740045][ T4741]  </TASK>
[  536.757363][T13692] (syz.3.4105,13692,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: directory entry overrun - offset=88, inode=69, rec_len=2324, name_len=8
[  536.782364][ T4741] ocfs2: Unmounting device (7,4) on (node local)
[  536.794800][T13692] (syz.3.4105,13692,0):ocfs2_init_global_system_inodes:461 ERROR: status = -22
[  536.804872][T13692] (syz.3.4105,13692,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 2, possibly corrupt fs?
[  536.804907][T13692] (syz.3.4105,13692,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22
[  536.826763][T13692] (syz.3.4105,13692,0):ocfs2_initialize_super:2252 ERROR: status = -22
[  536.836269][T13692] (syz.3.4105,13692,0):ocfs2_fill_super:1176 ERROR: status = -22