last executing test programs:
4.164068966s ago: executing program 1 (id=4739):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDMKTONE(r0, 0x4b30, 0xdfc3fe3)
4.140217229s ago: executing program 3 (id=4740):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[], 0xffffffffffffff8c})
3.956065277s ago: executing program 1 (id=4743):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x1407, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x14)
3.831261114s ago: executing program 3 (id=4746):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose, 0x40}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48)
3.697361355s ago: executing program 1 (id=4748):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x54}}, 0x0)
3.545602053s ago: executing program 3 (id=4750):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock m'], 0x9)
3.479990177s ago: executing program 1 (id=4753):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8919, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0x0, @broadcast}, 'lo\x00'})
3.277836772s ago: executing program 3 (id=4754):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000025e40)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4, 0xe}, @CTA_MARK={0x8}]}, 0x70}}, 0x0)
2.983916149s ago: executing program 3 (id=4757):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
2.705988891s ago: executing program 1 (id=4760):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000001000014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
2.675128697s ago: executing program 2 (id=4761):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0xc, {0x0, 0x2, 0x4, 0x1}})
2.507546664s ago: executing program 0 (id=4762):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e23, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}], 0x3c)
2.402906086s ago: executing program 2 (id=4763):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xab, 0xa00)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x10000000, 0x0, 0x32315559, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}})
2.285023725s ago: executing program 0 (id=4764):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0xfffffffffffffffd, 0x3f})
2.238627205s ago: executing program 2 (id=4765):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x18)
1.924596722s ago: executing program 2 (id=4768):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000540)={0x200000, 0x3, &(0x7f0000000440)=[0x2, 0x3, 0xfe00], 0x0, 0x0, &(0x7f0000000500)})
1.772084136s ago: executing program 2 (id=4769):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
poll(&(0x7f0000001400)=[{r0, 0x4000}], 0x1, 0x1ff)
1.578858415s ago: executing program 2 (id=4771):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
1.531992444s ago: executing program 4 (id=4772):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14241313560608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})
1.531730032s ago: executing program 0 (id=4773):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0)
1.309064167s ago: executing program 5 (id=4774):
r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r0, 0x0, 0x0)
1.213393325s ago: executing program 0 (id=4775):
r0 = socket$pppoe(0x18, 0x1, 0x0)
getpeername(r0, 0x0, &(0x7f0000000000)=0x2)
1.1079388s ago: executing program 4 (id=4776):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x98, 0x11e0, 0x0, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0xff000000, 'netpci0\x00', 'nr0\x00', {}, {}, 0x5c}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3b}}}, {{@uncond, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x1, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7, 0xffffffffffffffff, 0x0, 0x80000000}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x1]}, {0xffff, [0x0, 0x1, 0x0, 0x0, 0x0, 0x5], 0x0, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff, 'veth1_to_bridge\x00', 'veth0_vlan\x00', {}, {}, 0x8, 0x1, 0x21}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370)
1.006978497s ago: executing program 5 (id=4777):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x410)
966.72156ms ago: executing program 4 (id=4778):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x3}, [], {0x20, 0x1}, [], {0x10, 0x4}, {0x20, 0x1}}, 0xc, 0x1)
885.366247ms ago: executing program 0 (id=4779):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000007fffffe00ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
711.562499ms ago: executing program 0 (id=4780):
ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014)
syz_usb_connect(0x0, 0x24, &(0x7f0000002500)={{0x12, 0x1, 0x0, 0xeb, 0xe4, 0x45, 0x20, 0x93a, 0x2603, 0x5301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x96, 0xf3, 0x0, 0xd, 0x80, 0xde}}]}}]}}, 0x0)
651.693229ms ago: executing program 5 (id=4781):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newae={0x70, 0x1e, 0x101, 0x70bd2b, 0x25dfdbfb, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0xa, 0x2b}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xb413, 0x34ff}, [@lifetime_val={0x24, 0x9, {0x786, 0x1, 0xfffffffffffffe00, 0x9}}, @mark={0xc, 0x15, {0x35075a, 0x6}}]}, 0x70}}, 0x20008000)
600.611819ms ago: executing program 4 (id=4782):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
369.624238ms ago: executing program 3 (id=4783):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000580)=""/65, 0x41, 0x8000)
292.859739ms ago: executing program 4 (id=4784):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/117, &(0x7f0000000100)=0x75)
292.615861ms ago: executing program 5 (id=4785):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x63682, 0x0)
pwritev2(r0, &(0x7f0000001940)=[{&(0x7f0000000080)="13", 0x1}, {0x0}], 0x2, 0x100, 0x5800, 0x11)
218.376927ms ago: executing program 1 (id=4786):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
116.084779ms ago: executing program 5 (id=4787):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
37.316053ms ago: executing program 4 (id=4788):
r0 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff)
keyctl$revoke(0x3, r0)
0s ago: executing program 5 (id=4789):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xff4f, 0x0}, &(0x7f00000003c0)=0x10)
kernel console output (not intermixed with test programs):
oop2): btree ptr not marked in member info btree allocated bitmap
[ 497.381133][T13943] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a64f6cc698df3452 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[ 497.414146][T13947] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[ 497.414146][T13947] allowing incompatible features above 0.0: (unknown version)
[ 497.438332][T13943] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[ 497.438355][T13943] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[ 497.446246][T13947] bcachefs (loop0): recovering from clean shutdown, journal seq 13
[ 497.470173][T13951] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[ 497.470195][T13951] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[ 497.476340][T13947] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags
[ 497.476340][T13947] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[ 497.515748][T13951] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[ 497.515773][T13951] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[ 497.550404][T13943] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[ 497.550427][T13943] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[ 497.566666][T13947] bcachefs (loop0): accounting_read...
[ 497.576567][T13951] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[ 497.576590][T13951] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[ 497.599004][T13947] done
[ 497.599024][T13947] bcachefs (loop0): alloc_read... done
[ 497.599078][T13947] bcachefs (loop0): snapshots_read... done
[ 497.599171][T13947] bcachefs (loop0): check_allocations...
[ 497.639246][T13947] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 497.639271][T13947] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1818ce08861e3527 written 40 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[ 497.735284][T13943] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[ 497.735308][T13943] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[ 497.798508][T13951] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap
[ 497.798535][T13951] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[ 497.869488][T13947] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 497.869513][T13947] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2a20405ac3f40602 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[ 497.920669][T13951] done
[ 497.929405][T13943] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[ 497.929427][T13943] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[ 497.930714][T13991] loop3: detected capacity change from 0 to 32768
[ 497.965854][T13951] bcachefs (loop1): going read-write
[ 497.972377][T13943] bcachefs (loop2): btree ptr not marked in member info btree allocated bitmap
[ 497.972398][T13943] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[ 497.978844][T13991] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3549 (13991)
[ 498.012483][T13947] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 498.012507][T13947] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 267fcf747c875937 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[ 498.031663][T13943] done
[ 498.037275][T13991] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 498.037373][T13991] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[ 498.037412][T13991] BTRFS info (device loop3): using free-space-tree
[ 498.049804][T13951] bcachefs (loop1): journal_replay...
[ 498.111532][T13943] bcachefs (loop2): going read-write
[ 498.127526][T13947] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 498.127548][T13947] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d682cebdf2a7eb26 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[ 498.160759][T13943] bcachefs (loop2): journal_replay...
[ 498.230704][T13951] done
[ 498.233879][T13951] bcachefs (loop1): check_extents_to_backpointers...
[ 498.236013][T13951] bcachefs (loop1): scanning for missing backpointers in 6/128 buckets
[ 498.240350][T13951] done
[ 498.255967][T13951] bcachefs (loop1): check_inodes... done
[ 498.317167][T13947] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 498.317191][T13947] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d771a06d670df06c written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[ 498.336785][T13943] done
[ 498.367782][T13943] bcachefs (loop2): check_extents_to_backpointers...
[ 498.369961][T13943] bcachefs (loop2): scanning for missing backpointers in 6/128 buckets
[ 498.390423][T13943] done
[ 498.396327][T13951] bcachefs (loop1): resume_logged_ops... done
[ 498.396393][T13951] bcachefs (loop1): delete_dead_inodes... done
[ 498.412269][T13943] bcachefs (loop2): check_inodes... done
[ 498.413936][T13951] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[ 498.413957][T13951] bcachefs (loop1): check_extents_to_backpointers... done
[ 498.415534][T13951] bcachefs (loop1): check_inodes... done
[ 498.416262][T13951] bcachefs (loop1): resume_logged_ops... done
[ 498.416315][T13951] bcachefs (loop1): delete_dead_inodes... done
[ 498.429745][T13943] bcachefs (loop2): resume_logged_ops... done
[ 498.429800][T13943] bcachefs (loop2): delete_dead_inodes... done
[ 498.460356][T13943] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[ 498.460382][T13943] bcachefs (loop2): check_extents_to_backpointers...
[ 498.460665][T13951] bcachefs (loop1): done starting filesystem
[ 498.461706][T13943] done
[ 498.461728][T13943] bcachefs (loop2): check_inodes... done
[ 498.462261][T13943] bcachefs (loop2): resume_logged_ops... done
[ 498.462305][T13943] bcachefs (loop2): delete_dead_inodes... done
[ 498.539848][T13951] syz.1.3540 (13951) used greatest stack depth: 12072 bytes left
[ 498.547605][T13943] bcachefs (loop2): done starting filesystem
[ 498.563381][ T5875] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 498.752106][ T5876] bcachefs (loop1): shutting down
[ 498.752145][ T5876] bcachefs (loop1): going read-only
[ 498.752170][ T5876] bcachefs (loop1): finished waiting for writes to stop
[ 498.752814][ T5866] bcachefs (loop2): shutting down
[ 498.752830][ T5866] bcachefs (loop2): going read-only
[ 498.752853][ T5866] bcachefs (loop2): finished waiting for writes to stop
[ 498.779313][ T5876] bcachefs (loop1): flushing journal and stopping allocators, journal seq 18
[ 498.779808][ T5876] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 18
[ 498.780606][ T5866] bcachefs (loop2): flushing journal and stopping allocators, journal seq 23
[ 498.780770][ T5866] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 23
[ 498.804683][ T5876] bcachefs (loop1): clean shutdown complete, journal seq 19
[ 498.804780][ T5866] bcachefs (loop2): clean shutdown complete, journal seq 24
[ 498.856265][ T5866] bcachefs (loop2): marking filesystem clean
[ 498.864777][ T5876] bcachefs (loop1): marking filesystem clean
[ 498.993746][T13994] loop5: detected capacity change from 0 to 32768
[ 499.041703][ T5876] bcachefs (loop1): shutdown complete
[ 499.096673][ T5866] bcachefs (loop2): shutdown complete
[ 499.485155][T13997] loop4: detected capacity change from 0 to 32768
[ 499.511988][T13997] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3551 (13997)
[ 499.537848][T13997] BTRFS info (device loop4): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31
[ 499.537953][T13997] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[ 499.537991][T13997] BTRFS info (device loop4): using free-space-tree
[ 499.602182][T13994] bcachefs (baafa011-d992-4344-aaf9-4ff0e0bec0ff): Using encoding defined by superblock: utf8-12.1.0
[ 499.602327][T13994] bcachefs (baafa011-d992-4344-aaf9-4ff0e0bec0ff): filesystem UUID already open
[ 499.602471][T13994] bcachefs (baafa011-d992-4344-aaf9-4ff0e0bec0ff): shutdown complete
[ 500.080617][T13947] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[ 500.080652][T13947] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b6c44d07df4e9bb7 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[ 500.113984][T14021] loop3: detected capacity change from 0 to 32768
[ 500.166721][T14021] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3552 (14021)
[ 500.189540][ T5882] BTRFS info (device loop4): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31
[ 500.205539][T14021] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 500.205638][T14021] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[ 500.205675][T14021] BTRFS info (device loop3): using free-space-tree
[ 500.410537][T13994] bcachefs: bch2_fs_get_tree() error: EINVAL
[ 500.570881][T13947] done
[ 500.612243][T14064] loop1: detected capacity change from 0 to 128
[ 500.624560][T13947] bcachefs (loop0): going read-write
[ 500.698193][T13947] bcachefs (loop0): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[ 500.721677][T14064] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[ 500.764333][T14064] hpfs: hpfs_map_sector(): read error
[ 500.783010][ T5875] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 500.816371][T13947] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13
[ 500.825458][T13947] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13
[ 500.868943][T14069] loop2: detected capacity change from 0 to 8
[ 500.941039][T13947] bcachefs (loop0): unclean shutdown complete, journal seq 14
[ 500.944484][T14069] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 500.962967][T14071] loop4: detected capacity change from 0 to 65
[ 501.042014][T14071] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop4
[ 501.100650][T13947] bcachefs (loop0): bch2_fs_recovery(): error EINTR
[ 501.143787][T13947] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR
[ 501.151946][T13947] bcachefs (loop0): shutting down
[ 501.344445][T14077] loop4: detected capacity change from 0 to 16
[ 501.418249][T14077] erofs (device loop4): mounted with root inode @ nid 36.
[ 501.427333][T13947] bcachefs (loop0): shutdown complete
[ 501.549988][T14080] loop2: detected capacity change from 0 to 512
[ 501.630593][T14080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 501.748072][ T5922] usb 2-1: new full-speed USB device number 89 using dummy_hcd
[ 501.861270][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 501.946067][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 501.980659][ T5922] usb 2-1: not running at top speed; connect to a high speed hub
[ 501.990515][ T5922] usb 2-1: config 8 has an invalid interface number: 225 but max is 0
[ 502.019012][ T5922] usb 2-1: config 8 has no interface number 0
[ 502.056996][ T5922] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=6f.84
[ 502.083773][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 502.120658][ T5922] usb 2-1: Product: syz
[ 502.124870][ T5922] usb 2-1: Manufacturer: syz
[ 502.151807][ T5922] usb 2-1: SerialNumber: syz
[ 502.475184][ T5922] usbhid 2-1:8.225: couldn't find an input interrupt endpoint
[ 502.510965][ T5922] usb 2-1: USB disconnect, device number 89
[ 502.624631][T14075] loop5: detected capacity change from 0 to 32768
[ 502.654396][T14075] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3560 (14075)
[ 502.727148][T14085] loop3: detected capacity change from 0 to 32768
[ 502.736323][T14075] BTRFS info (device loop5): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 502.769679][T14085] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3557 (14085)
[ 502.782963][T14075] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[ 502.837893][T14075] BTRFS info (device loop5): using free-space-tree
[ 502.864868][T14085] BTRFS info (device loop3): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97
[ 502.913427][T14085] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[ 502.941528][T14087] loop4: detected capacity change from 0 to 32768
[ 502.951605][T14085] BTRFS info (device loop3): using free-space-tree
[ 502.969746][T14087] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3565 (14087)
[ 503.015519][T14087] BTRFS info (device loop4): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc
[ 503.069964][T14087] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[ 503.140657][T14087] BTRFS info (device loop4): using free-space-tree
[ 503.239478][ T5879] BTRFS info (device loop5): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[ 503.251664][T14091] loop2: detected capacity change from 0 to 32768
[ 503.334765][T14091] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3567 (14091)
[ 503.489488][ T5875] BTRFS info (device loop3): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97
[ 503.494857][T14091] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[ 503.590898][T14091] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[ 503.600186][T14091] BTRFS info (device loop2): using free-space-tree
[ 503.787406][ T5882] BTRFS info (device loop4): last unmount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc
[ 503.969551][ T5922] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 504.204227][ T5922] usb 2-1: Using ep0 maxpacket: 8
[ 504.247953][ T5922] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 504.314836][ T5922] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 504.360055][ T5922] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 504.395330][ T5866] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[ 504.429208][ T5922] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40
[ 504.449505][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 504.479980][ T5922] usb 2-1: Product: syz
[ 504.495183][ T5922] usb 2-1: Manufacturer: syz
[ 504.499824][ T5922] usb 2-1: SerialNumber: syz
[ 504.562779][ T5922] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input41
[ 504.844553][T13947] bcachefs: bch2_fs_get_tree() error: EINTR
[ 504.894712][ T5179] bcm5974 2-1:1.0: could not read from device
[ 504.895068][ T973] usb 2-1: USB disconnect, device number 90
[ 504.953817][ T5179] bcm5974 2-1:1.0: could not read from device
[ 504.993647][ T6249] bcm5974 2-1:1.0: could not read from device
[ 505.020761][ T5179] bcm5974 2-1:1.0: could not read from device
[ 505.107679][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 505.149432][ T6249] udevd[6249]: Error opening device "/dev/input/event4": No such device
[ 505.160959][ T6249] udevd[6249]: Unable to EVIOCGABS device "/dev/input/event4"
[ 505.168575][ T6249] udevd[6249]: Unable to EVIOCGABS device "/dev/input/event4"
[ 505.211298][ T6249] udevd[6249]: Unable to EVIOCGABS device "/dev/input/event4"
[ 505.258568][ T6249] udevd[6249]: Unable to EVIOCGABS device "/dev/input/event4"
[ 505.302488][ T24] usb 3-1: Using ep0 maxpacket: 16
[ 505.324803][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 505.358609][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 505.410011][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 505.509499][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[ 505.551049][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 505.559073][ T24] usb 3-1: Product: syz
[ 505.583481][ T24] usb 3-1: Manufacturer: syz
[ 505.599117][ T24] usb 3-1: SerialNumber: syz
[ 505.638848][ T24] usb 3-1: config 0 descriptor??
[ 505.681730][ T24] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[ 505.687977][ T24] gspca_stv06xx: st6422 sensor detected
[ 505.698873][T14171] loop1: detected capacity change from 0 to 256
[ 506.001241][ T24] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71
[ 506.055508][ T24] usb 3-1: USB disconnect, device number 75
[ 507.944014][T14181] loop3: detected capacity change from 0 to 132
[ 508.075978][ T973] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 508.260584][ T973] usb 5-1: Using ep0 maxpacket: 8
[ 508.283342][ T973] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 508.284101][T14183] loop3: detected capacity change from 0 to 1164
[ 508.298945][ T973] usb 5-1: config 3 has an invalid interface number: 182 but max is 0
[ 508.324573][ T973] usb 5-1: config 3 has no interface number 0
[ 508.338020][ T973] usb 5-1: config 3 interface 182 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0
[ 508.357002][ T973] usb 5-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 129, changing to 11
[ 508.404472][ T973] usb 5-1: config 3 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 92, changing to 10
[ 508.439228][ T973] usb 5-1: config 3 interface 182 has no altsetting 0
[ 508.452554][ T973] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57
[ 508.474134][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 508.505820][ T973] usb 5-1: Product: syz
[ 508.516733][ T973] usb 5-1: Manufacturer: syz
[ 508.533697][ T973] usb 5-1: SerialNumber: syz
[ 508.617550][T14185] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[ 508.624286][T14185] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 508.674781][T14185] vhci_hcd vhci_hcd.0: Device attached
[ 508.696966][T14186] vhci_hcd: connection closed
[ 508.699171][ T1150] vhci_hcd: stop threads
[ 508.721241][ T1150] vhci_hcd: release socket
[ 508.736883][ T1150] vhci_hcd: disconnect device
[ 508.796680][ T973] usbtest 5-1:3.182: couldn't get endpoints, -71
[ 508.816190][ T973] usbtest 5-1:3.182: probe with driver usbtest failed with error -71
[ 508.847721][ T973] usb 5-1: USB disconnect, device number 91
[ 509.460258][T14189] loop3: detected capacity change from 0 to 2364
[ 509.598469][T14191] loop0: detected capacity change from 0 to 512
[ 509.739565][T14191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 509.766235][T14198] loop3: detected capacity change from 0 to 64
[ 509.830597][T14191] ext4 filesystem being mounted at /685/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 510.011975][ T5867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 510.159645][T14202] loop3: detected capacity change from 0 to 128
[ 510.373059][T14193] loop4: detected capacity change from 0 to 32768
[ 510.418199][T14193] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3585 (14193)
[ 510.438047][ T24] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 510.445794][T14204] loop3: detected capacity change from 0 to 256
[ 510.486648][T14193] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 510.535329][T14193] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[ 510.567501][T14193] BTRFS info (device loop4): using free-space-tree
[ 510.621386][ T24] usb 1-1: Using ep0 maxpacket: 32
[ 510.637268][ T24] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[ 510.646008][ T24] usb 1-1: config 0 has no interface number 0
[ 510.664630][ T24] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 510.686423][ T24] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 510.708385][ T24] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 510.719418][ T24] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x9 has invalid maxpacket 19604, setting to 1024
[ 510.741365][ T24] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[ 510.755242][ T24] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 510.839929][T14222] loop5: detected capacity change from 0 to 256
[ 510.845008][ T24] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 510.873716][T14223] loop3: detected capacity change from 0 to 128
[ 510.889999][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 510.909094][ T24] usb 1-1: Product: syz
[ 510.935572][ T24] usb 1-1: Manufacturer: syz
[ 510.940215][ T24] usb 1-1: SerialNumber: syz
[ 510.995444][ T5882] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 511.012184][ T24] usb 1-1: config 0 descriptor??
[ 511.022419][T14201] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 511.029695][T14201] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 511.088503][ T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk.
[ 511.101572][T14226] loop1: detected capacity change from 0 to 2048
[ 511.151134][ T24] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out.
[ 511.291302][T14228] loop2: detected capacity change from 0 to 2048
[ 511.456765][ T24] usb 1-1: USB disconnect, device number 71
[ 511.710222][T14230] loop3: detected capacity change from 0 to 4096
[ 511.778006][T14232] loop5: detected capacity change from 0 to 8192
[ 511.792006][T14230] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[ 511.832950][T14232] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[ 511.885830][T14236] loop1: detected capacity change from 0 to 4096
[ 511.945195][T14236] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[ 513.701371][T14247] loop5: detected capacity change from 0 to 32768
[ 513.819379][T14247] (syz.5.3602,14247,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[ 513.842568][T14248] loop3: detected capacity change from 0 to 32768
[ 513.881975][T14247] (syz.5.3602,14247,1):ocfs2_fill_super:1177 ERROR: status = -22
[ 513.969098][T14248] (syz.3.3603,14248,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[ 514.049604][T14248] (syz.3.3603,14248,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 514.344523][T14253] loop0: detected capacity change from 0 to 32768
[ 514.444312][T14253] (syz.0.3605,14253,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[ 514.498564][T14253] (syz.0.3605,14253,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 515.457721][T14257] loop5: detected capacity change from 0 to 32768
[ 515.482565][T14264] loop2: detected capacity change from 0 to 128
[ 515.516493][T14259] loop3: detected capacity change from 0 to 32768
[ 515.553635][T14257] (syz.5.3606,14257,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[ 515.578432][T14264] omfs: Invalid superblock (7b3184f9)
[ 515.595033][T14259] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3607 (14259)
[ 515.595221][T14257] (syz.5.3606,14257,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 515.715693][T14259] BTRFS info (device loop3): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f
[ 515.792256][T14259] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[ 515.833050][T14259] BTRFS info (device loop3): using free-space-tree
[ 516.273829][T14262] loop0: detected capacity change from 0 to 32768
[ 516.369355][T14268] loop2: detected capacity change from 0 to 32768
[ 516.382777][T14262] (syz.0.3608,14262,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[ 516.410072][T14289] syz.1.3612: attempt to access beyond end of device
[ 516.410072][T14289] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 516.456457][T14262] (syz.0.3608,14262,1):ocfs2_fill_super:1177 ERROR: status = -22
[ 516.483905][T14289] SQUASHFS error: Failed to read block 0x0: -5
[ 516.490131][T14289] unable to read squashfs_super_block
[ 516.512343][T14268] (syz.2.3610,14268,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[ 516.529279][T14290] loop4: detected capacity change from 0 to 8
[ 516.535649][T14268] (syz.2.3610,14268,1):ocfs2_fill_super:1177 ERROR: status = -22
[ 516.587421][ T5875] BTRFS info (device loop3): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f
[ 517.008654][T14295] loop1: detected capacity change from 0 to 256
[ 517.030979][T14299] loop4: detected capacity change from 0 to 8
[ 517.094528][T14295] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 517.113155][T14297] loop2: detected capacity change from 0 to 2048
[ 517.189907][T14295] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[ 517.251849][T14295] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[ 517.259538][T14295] UDF-fs: Scanning with blocksize 512 failed
[ 517.268343][T14297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 517.371203][T14295] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 517.458728][T14295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 517.637185][T14303] loop4: detected capacity change from 0 to 2048
[ 517.677337][T14301] loop3: detected capacity change from 0 to 8192
[ 517.719708][T14303] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[ 517.767524][T14303] UDF-fs: Scanning with blocksize 512 failed
[ 517.871099][T14303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 517.909973][T14307] loop1: detected capacity change from 0 to 512
[ 517.943069][T14281] loop5: detected capacity change from 0 to 32768
[ 518.040056][T14307] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 518.082481][T14281] (syz.5.3611,14281,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[ 518.091509][T14307] UDF-fs: Scanning with blocksize 512 failed
[ 518.140698][T14281] (syz.5.3611,14281,1):ocfs2_fill_super:1177 ERROR: status = -22
[ 518.193563][T14307] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 518.216078][T14307] UDF-fs: Scanning with blocksize 1024 failed
[ 518.232789][T14307] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 518.274634][T14312] loop4: detected capacity change from 0 to 512
[ 518.292500][T14307] UDF-fs: Scanning with blocksize 2048 failed
[ 518.325564][T14307] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 518.440453][T14307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 518.503259][T14314] loop5: detected capacity change from 0 to 128
[ 518.899548][T14318] loop4: detected capacity change from 0 to 1764
[ 518.909767][T14320] loop1: detected capacity change from 0 to 128
[ 519.327315][T14324] loop1: detected capacity change from 0 to 512
[ 519.434918][T14326] loop4: detected capacity change from 0 to 2048
[ 519.682992][T14328] loop1: detected capacity change from 0 to 128
[ 519.733106][T14328] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 519.819260][T14330] loop4: detected capacity change from 0 to 512
[ 519.858273][T14328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 520.134183][T14332] loop4: detected capacity change from 0 to 128
[ 520.299915][T14334] loop1: detected capacity change from 0 to 2048
[ 520.375774][T14334] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[ 520.415819][T14334] UDF-fs: Scanning with blocksize 512 failed
[ 520.475822][T14334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 520.500976][T14336] loop4: detected capacity change from 0 to 512
[ 521.778892][T14338] loop0: detected capacity change from 0 to 32768
[ 521.857374][T14340] loop1: detected capacity change from 0 to 32768
[ 522.024058][T14342] loop4: detected capacity change from 0 to 32768
[ 522.130347][T14342] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 522.464864][T14342] XFS (loop4): Ending clean mount
[ 522.676976][ T5882] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 523.082211][T14355] loop1: detected capacity change from 0 to 32768
[ 523.191521][ T6248] loop1: p1 p3 < p5 p6 >
[ 523.240458][T14358] loop0: detected capacity change from 0 to 32768
[ 523.253024][T14364] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3645'.
[ 523.396117][ T5194] loop0: p1 p2 p3
[ 523.458939][T14366] loop4: detected capacity change from 0 to 1
[ 523.487914][T14366] syz.4.3646: attempt to access beyond end of device
[ 523.487914][T14366] loop4: rw=2048, sector=0, nr_sectors = 8 limit=1
[ 523.577422][T14366] SQUASHFS error: Failed to read block 0x0: -5
[ 523.635639][T14366] unable to read squashfs_super_block
[ 523.904124][T14372] loop5: detected capacity change from 0 to 22
[ 523.916730][T14372] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 523.968926][T14372] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 523.991389][T14374] loop1: detected capacity change from 0 to 128
[ 524.045087][T14374] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 524.125927][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 524.135729][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 524.150335][T14374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 524.450398][ T6196] udevd[6196]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[ 524.486722][ T6248] udevd[6248]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[ 524.505775][ T6869] udevd[6869]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[ 524.510196][ T8008] udevd[8008]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[ 524.560529][T14384] loop1: detected capacity change from 0 to 256
[ 524.599631][ T6196] udevd[6196]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[ 524.646816][T14344] loop2: detected capacity change from 0 to 65536
[ 524.656032][ T8008] udevd[8008]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[ 524.701805][ T6196] udevd[6196]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[ 525.519287][T14416] loop0: detected capacity change from 0 to 256
[ 525.526649][T14416] exfat: Deprecated parameter 'namecase'
[ 525.737068][T14416] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[ 526.333081][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3681'.
[ 526.781534][T14457] warning: `syz.1.3688' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 527.287150][T14473] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 527.400551][T14479] loop1: detected capacity change from 0 to 1
[ 527.423816][T14479] syz.1.3700: attempt to access beyond end of device
[ 527.423816][T14479] loop1: rw=2048, sector=0, nr_sectors = 8 limit=1
[ 527.443537][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3701'.
[ 527.464926][T14479] SQUASHFS error: Failed to read block 0x0: -5
[ 527.475552][T14479] unable to read squashfs_super_block
[ 527.620578][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3702'.
[ 527.639684][T14432] loop5: detected capacity change from 0 to 32768
[ 527.652816][ T973] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[ 527.728581][T14432] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 527.847845][ T973] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[ 527.856064][ T973] usb 1-1: config 0 has no interface number 0
[ 527.923772][ T973] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 527.972720][T14432] XFS (loop5): Ending clean mount
[ 527.977901][ T973] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[ 527.986948][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 528.111488][ T973] usb 1-1: config 0 descriptor??
[ 528.161754][ T973] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input42
[ 528.189841][ T5879] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 528.544128][ T5923] usb 1-1: USB disconnect, device number 72
[ 529.154307][T14538] loop2: detected capacity change from 0 to 256
[ 529.300706][T14543] loop1: detected capacity change from 0 to 1764
[ 529.312207][T14538] FAT-fs (loop2): Directory bread(block 64) failed
[ 529.318764][T14538] FAT-fs (loop2): Directory bread(block 65) failed
[ 529.369616][T14538] FAT-fs (loop2): Directory bread(block 66) failed
[ 529.387791][T14538] FAT-fs (loop2): Directory bread(block 67) failed
[ 529.426317][T14538] FAT-fs (loop2): Directory bread(block 68) failed
[ 529.448145][T14538] FAT-fs (loop2): Directory bread(block 69) failed
[ 529.470076][T14538] FAT-fs (loop2): Directory bread(block 70) failed
[ 529.503001][T14538] FAT-fs (loop2): Directory bread(block 71) failed
[ 529.557665][T14538] FAT-fs (loop2): Directory bread(block 72) failed
[ 529.592089][T14538] FAT-fs (loop2): Directory bread(block 73) failed
[ 529.641150][T14556] loop1: detected capacity change from 0 to 64
[ 529.691507][ T2338] pvrusb2: request_firmware fatal error with code=-110
[ 529.748531][ T2338] pvrusb2: Failure uploading firmware1
[ 529.774171][T14558] netlink: 'syz.3.3734': attribute type 1 has an invalid length.
[ 529.777655][ T2338] pvrusb2: Device initialization was not successful.
[ 529.830355][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 529.841708][T14558] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3734'.
[ 529.882607][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 529.942571][ T53] pvrusb2: Device being rendered inoperable
[ 530.101030][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3740'.
[ 530.133664][T14572] Driver unsupported XDP return value 0 on prog (id 276) dev N/A, expect packet loss!
[ 530.381311][ T53] usb 6-1: new full-speed USB device number 71 using dummy_hcd
[ 530.436084][T14581] netlink: 'syz.3.3745': attribute type 4 has an invalid length.
[ 530.500874][T14581] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3745'.
[ 530.590451][ T53] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 530.618537][ T53] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78
[ 530.641409][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 530.672451][ T53] usb 6-1: Product: syz
[ 530.677054][ T53] usb 6-1: Manufacturer: syz
[ 530.681668][ T53] usb 6-1: SerialNumber: syz
[ 530.720536][ T53] usb 6-1: config 0 descriptor??
[ 530.870972][T14596] usb usb8: usbfs: process 14596 (syz.0.3753) did not claim interface 0 before use
[ 531.228789][ T53] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 531.269216][ T53] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[ 531.312627][ T53] asix 6-1:0.0: probe with driver asix failed with error -71
[ 531.353197][ T53] usb 6-1: USB disconnect, device number 71
[ 531.992729][T14636] loop5: detected capacity change from 0 to 256
[ 532.017136][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3772'.
[ 532.105630][ T53] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 532.159323][T14638] loop4: detected capacity change from 0 to 64
[ 532.230899][T14636] FAT-fs (loop5): Directory bread(block 64) failed
[ 532.261767][T14636] FAT-fs (loop5): Directory bread(block 65) failed
[ 532.304710][T14636] FAT-fs (loop5): Directory bread(block 66) failed
[ 532.311280][T14636] FAT-fs (loop5): Directory bread(block 67) failed
[ 532.349423][ T53] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 532.381828][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 532.398774][T14636] FAT-fs (loop5): Directory bread(block 68) failed
[ 532.407088][ T53] usb 3-1: Product: syz
[ 532.412225][ T53] usb 3-1: Manufacturer: syz
[ 532.417061][T14636] FAT-fs (loop5): Directory bread(block 69) failed
[ 532.423681][ T53] usb 3-1: SerialNumber: syz
[ 532.430423][T14636] FAT-fs (loop5): Directory bread(block 70) failed
[ 532.489868][ T53] r8152-cfgselector 3-1: Unknown version 0x0000
[ 532.502174][ T53] r8152-cfgselector 3-1: config 0 descriptor??
[ 532.510760][T14636] FAT-fs (loop5): Directory bread(block 71) failed
[ 532.554960][T14636] FAT-fs (loop5): Directory bread(block 72) failed
[ 532.582427][T14636] FAT-fs (loop5): Directory bread(block 73) failed
[ 532.669182][T14650] netlink: 'syz.3.3780': attribute type 1 has an invalid length.
[ 532.730709][T14650] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3780'.
[ 533.003230][ T6096] r8152-cfgselector 3-1: USB disconnect, device number 76
[ 533.456178][T14681] loop1: detected capacity change from 0 to 128
[ 533.541588][T14681] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 533.627557][T14681] ext4 filesystem being mounted at /646/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 533.794327][T14695] netlink: 'syz.3.3802': attribute type 7 has an invalid length.
[ 533.838380][ T5876] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 534.082873][T14703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 534.166056][T14709] loop4: detected capacity change from 0 to 256
[ 534.174508][T14710] loop1: detected capacity change from 0 to 64
[ 534.269521][T14709] FAT-fs (loop4): Directory bread(block 64) failed
[ 534.290763][T14709] FAT-fs (loop4): Directory bread(block 65) failed
[ 534.338192][T14709] FAT-fs (loop4): Directory bread(block 66) failed
[ 534.344773][T14709] FAT-fs (loop4): Directory bread(block 67) failed
[ 534.405682][T14709] FAT-fs (loop4): Directory bread(block 68) failed
[ 534.412270][T14709] FAT-fs (loop4): Directory bread(block 69) failed
[ 534.432110][T14719] loop2: detected capacity change from 0 to 64
[ 534.460512][T14709] FAT-fs (loop4): Directory bread(block 70) failed
[ 534.506161][T14709] FAT-fs (loop4): Directory bread(block 71) failed
[ 534.528644][T14709] FAT-fs (loop4): Directory bread(block 72) failed
[ 534.554254][T14709] FAT-fs (loop4): Directory bread(block 73) failed
[ 534.859744][T14729] hfs: unable to load iocharset "I†#hÆIarsÌ8ÒÎŽ wÑ·}+Ô[S‚“š_. ô,ƒs$n¡FÿBlÿbÆSR,Ð.R]^kŽR¥“Lý/ J}&Æìo9b6˜Ž\wÜm¨$xšÙçųñCdeOé«jocÚ…`1Ò†Ÿ‚m‰#C”X^ݾOø;;ï©ï¦ ó£«Xp!°ì³+ÿ¥Æ‡ÇK=ÊA ‡Øa2H‹îKAµ ² Š»r·‹pæ"
[ 535.358117][T14739] bridge_slave_0: left allmulticast mode
[ 535.363805][T14739] bridge_slave_0: left promiscuous mode
[ 535.382841][T14739] bridge0: port 1(bridge_slave_0) entered disabled state
[ 535.429195][T14739] bridge_slave_1: left allmulticast mode
[ 535.475178][T14739] bridge_slave_1: left promiscuous mode
[ 535.485196][T14739] bridge0: port 2(bridge_slave_1) entered disabled state
[ 535.500170][T14747] Cannot find add_set index 0 as target
[ 535.531240][T14739] bond0: (slave bond_slave_0): Releasing backup interface
[ 535.563580][T14739] bond0: (slave bond_slave_1): Releasing backup interface
[ 535.619853][T14739] team0: Port device team_slave_0 removed
[ 535.661867][T14739] team0: Port device team_slave_1 removed
[ 535.668690][T14739] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 535.746163][T14739] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 535.760681][T14755] loop5: detected capacity change from 0 to 128
[ 535.791348][T14739] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 535.865217][T14739] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 535.991825][ T30] audit: type=1326 audit(1747350824.333:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950118e969 code=0x7ffc0000
[ 536.073679][T14763] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 536.081607][ T30] audit: type=1326 audit(1747350824.333:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f950118e969 code=0x7ffc0000
[ 536.122568][T14760] veth3: entered promiscuous mode
[ 536.163965][ T30] audit: type=1326 audit(1747350824.333:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950118e969 code=0x7ffc0000
[ 536.304208][ T30] audit: type=1326 audit(1747350824.333:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950118e969 code=0x7ffc0000
[ 536.583456][T14771] loop1: detected capacity change from 0 to 4096
[ 536.612638][T14771] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 536.668615][T14771] NILFS (loop1): invalid segment: Checksum error in segment payload
[ 536.703321][T14771] NILFS (loop1): unable to fall back to spare super block
[ 536.723569][T14771] NILFS (loop1): error -22 while searching super root
[ 536.732233][T14774] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 536.748404][T14774] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 537.077712][T14786] tmpfs: Bad value for 'size'
[ 537.100650][ T973] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 537.271494][T14726] loop3: detected capacity change from 0 to 65536
[ 537.296270][ T973] usb 2-1: Using ep0 maxpacket: 8
[ 537.321975][ T973] usb 2-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config
[ 537.357021][ T973] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 537.370580][T14726] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel.
[ 537.378861][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 537.394952][ T973] usb 2-1: Product: syz
[ 537.400113][ T973] usb 2-1: Manufacturer: syz
[ 537.405640][ T973] usb 2-1: SerialNumber: syz
[ 537.474970][ T973] cdc_ether 2-1:1.0: skipping garbage
[ 537.506800][ T973] usb 2-1: bad CDC descriptors
[ 537.702822][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3855'.
[ 537.744549][ T973] usb 2-1: USB disconnect, device number 91
[ 537.898244][T14816] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT
[ 537.952823][T14816] SET target dimension over the limit!
[ 538.577015][T14842] openvswitch: netlink: IP tunnel dst address not specified
[ 538.628122][ T5923] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 538.882936][ T5923] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 538.908405][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 538.950385][ T5923] usb 4-1: Product: syz
[ 538.976980][ T5923] usb 4-1: Manufacturer: syz
[ 538.984936][ T5923] usb 4-1: SerialNumber: syz
[ 539.033846][ T5923] r8152-cfgselector 4-1: Unknown version 0x0000
[ 539.064432][ T5923] r8152-cfgselector 4-1: config 0 descriptor??
[ 539.362286][T14870] loop4: detected capacity change from 0 to 16
[ 539.401552][T14870] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 539.522560][ T973] r8152-cfgselector 4-1: USB disconnect, device number 86
[ 539.593236][T14874] loop2: detected capacity change from 0 to 2048
[ 539.694902][T14874] Alternate GPT is invalid, using primary GPT.
[ 539.709559][T14874] loop2: p1 p2 p3
[ 540.149844][ T6869] udevd[6869]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[ 540.169968][ T6196] udevd[6196]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[ 540.191558][ T9786] udevd[9786]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[ 540.574873][T14908] loop5: detected capacity change from 0 to 4096
[ 540.640526][T14908] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[ 540.958790][T14927] ieee802154 phy0 wpan0: encryption failed: -22
[ 541.607231][ T53] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 541.666515][T14947] loop3: detected capacity change from 0 to 1764
[ 541.785704][T14947] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 541.827472][ T53] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[ 541.846867][ T53] usb 6-1: config 0 has no interface number 0
[ 541.876223][ T53] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 541.937329][ T53] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 541.999951][ T53] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 542.037182][T14955] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3928'.
[ 542.046616][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 542.083909][ T53] usb 6-1: Product: syz
[ 542.103069][ T53] usb 6-1: Manufacturer: syz
[ 542.124182][ T53] usb 6-1: SerialNumber: syz
[ 542.160930][ T53] usb 6-1: config 0 descriptor??
[ 542.196820][T14940] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 542.212189][ T53] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 542.265548][ T53] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 542.669227][T14965] loop3: detected capacity change from 0 to 4096
[ 542.686891][T14941] loop4: detected capacity change from 0 to 32768
[ 542.752314][ T53] usb 6-1: USB disconnect, device number 72
[ 542.784432][T14941] (syz.4.3921,14941,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 542.813824][T14974] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 542.826915][ T53] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 542.852524][T14941] (syz.4.3921,14941,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 542.880496][ T53] cyberjack 6-1:0.69: device disconnected
[ 542.986410][T14976] cifs: Unknown parameter 'no'‘a£Nð[ G¶zob,erèèµ;%j¸¼
[ 542.986410][T14976] ‡üzæ,€@q¬Ú÷ ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷™¿1®ðÚ<“™;Ï8+`# ÷Ž'
[ 543.095897][T14941] JBD2: Ignoring recovery information on journal
[ 543.119074][T14983] loop1: detected capacity change from 0 to 16
[ 543.173144][T14983] cramfs: Error -3 while decompressing!
[ 543.219801][T14983] cramfs: ffffffff99942448(27)->ffff8880483e7000(4096)
[ 543.242537][T14941] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 543.286621][ T5921] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 543.297311][T14983] cramfs: Error -3 while decompressing!
[ 543.316501][T14983] cramfs: ffffffff99942463(16)->ffff888010e3f000(4096)
[ 543.358900][T14983] cramfs: Error -3 while decompressing!
[ 543.380685][T14983] cramfs: ffffffff99942448(27)->ffff8880483e7000(4096)
[ 543.409512][ T30] audit: type=1800 audit(1747350831.191:21): pid=14983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3942" name="file3" dev="loop1" ino=348 res=0 errno=0
[ 543.483820][ T5921] usb 1-1: Using ep0 maxpacket: 16
[ 543.530795][ T5882] ocfs2: Unmounting device (7,4) on (node local)
[ 543.537344][ T5921] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 543.537380][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 543.537407][ T5921] usb 1-1: Product: syz
[ 543.537427][ T5921] usb 1-1: Manufacturer: syz
[ 543.537447][ T5921] usb 1-1: SerialNumber: syz
[ 543.542725][ T5921] r8152-cfgselector 1-1: Unknown version 0x0000
[ 543.542752][ T5921] r8152-cfgselector 1-1: config 0 descriptor??
[ 543.991156][ T6096] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 544.047267][ T5921] r8152-cfgselector 1-1: USB disconnect, device number 73
[ 544.155187][ T6096] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 544.176681][ T6096] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 544.198238][ T6096] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[ 544.241313][ T6096] usb 2-1: config 1 interface 0 has no altsetting 0
[ 544.260836][T15012] IPVS: length: 4096 != 24
[ 544.266804][ T6096] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 544.276927][ T6096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 544.295759][ T6096] usb 2-1: Product: syz
[ 544.307711][ T6096] usb 2-1: Manufacturer: syz
[ 544.313255][ T6096] usb 2-1: SerialNumber: syz
[ 544.394907][T15015] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 544.447061][T15015] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 544.832572][ T6096] usb 2-1: USB disconnect, device number 92
[ 544.994698][T15038] netlink: 'syz.2.3967': attribute type 3 has an invalid length.
[ 545.329749][T15050] netlink: 'syz.2.3973': attribute type 3 has an invalid length.
[ 545.707344][T15065] netlink: 'syz.3.3981': attribute type 1 has an invalid length.
[ 545.756724][T15065] netlink: 'syz.3.3981': attribute type 2 has an invalid length.
[ 545.916273][T15076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3986'.
[ 545.970317][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3986'.
[ 546.027645][T15076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3986'.
[ 546.331053][ T973] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 546.492369][T15096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 546.529831][ T973] usb 6-1: Using ep0 maxpacket: 16
[ 546.569576][ T973] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[ 546.603248][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 546.672485][ T973] usb 6-1: config 0 descriptor??
[ 546.693081][ T973] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[ 546.807846][T15109] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002
[ 546.915142][ T973] usb 6-1: Detected FT232B
[ 547.135108][ T973] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 547.165308][ T973] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 547.208917][ T973] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 547.251989][ T973] usb 6-1: USB disconnect, device number 73
[ 547.298316][ T973] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 547.338850][ T973] ftdi_sio 6-1:0.0: device disconnected
[ 547.632928][T15134] loop3: detected capacity change from 0 to 2048
[ 547.692784][T15134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 547.827333][ T5875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 548.144226][T15162] loop3: detected capacity change from 0 to 512
[ 548.248168][T15162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 548.313741][T15162] ext4 filesystem being mounted at /631/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 548.504215][T15172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4031'.
[ 548.591631][ T30] audit: type=1326 audit(1747350835.963:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz.5.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83fdd8e969 code=0x7ffc0000
[ 548.691986][ T5875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 548.725337][ T30] audit: type=1326 audit(1747350835.991:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz.5.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83fdd8e969 code=0x7ffc0000
[ 548.838120][ T30] audit: type=1326 audit(1747350836.009:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz.5.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f83fdd8e969 code=0x7ffc0000
[ 548.963679][ T30] audit: type=1326 audit(1747350836.009:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz.5.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83fdd8e969 code=0x7ffc0000
[ 549.050335][ T30] audit: type=1326 audit(1747350836.009:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz.5.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83fdd8e969 code=0x7ffc0000
[ 549.238518][T15190] netlink: 'syz.1.4041': attribute type 2 has an invalid length.
[ 549.502518][T15199] loop1: detected capacity change from 0 to 64
[ 549.525514][T15161] loop4: detected capacity change from 0 to 32768
[ 549.575720][T15199] hfs: unable to locate alternate MDB
[ 549.613461][T15199] hfs: continuing without an alternate MDB
[ 549.613482][T15166] loop0: detected capacity change from 0 to 32768
[ 549.653382][T15199] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only.
[ 549.668599][T15161] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 549.683311][T15203] netlink: 'syz.2.4046': attribute type 4 has an invalid length.
[ 549.740683][T15203] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4046'.
[ 549.834918][T15161] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature
[ 549.953104][T15161] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 550.026922][T15161] OCFS2: File system is now read-only.
[ 550.045811][T15161] (syz.4.4027,15161,1):ocfs2_search_chain:1852 ERROR: status = -30
[ 550.091298][T15161] (syz.4.4027,15161,1):ocfs2_search_chain:1940 ERROR: status = -30
[ 550.119064][T15161] (syz.4.4027,15161,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[ 550.149781][T15217] loop1: detected capacity change from 0 to 256
[ 550.176402][T15161] (syz.4.4027,15161,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[ 550.231274][T15161] (syz.4.4027,15161,1):__ocfs2_claim_clusters:2438 ERROR: status = -30
[ 550.241203][T15161] (syz.4.4027,15161,1):__ocfs2_claim_clusters:2446 ERROR: status = -30
[ 550.289830][T15161] (syz.4.4027,15161,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -30
[ 550.323386][T15161] (syz.4.4027,15161,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -30
[ 550.358735][T15161] (syz.4.4027,15161,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30
[ 550.420322][T15161] (syz.4.4027,15161,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[ 550.429595][T15223] Mount JFS Failure: -22
[ 550.473947][T15161] (syz.4.4027,15161,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[ 550.505394][T15161] (syz.4.4027,15161,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[ 550.539663][T15161] (syz.4.4027,15161,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[ 550.585076][T15161] (syz.4.4027,15161,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[ 550.647653][T15161] (syz.4.4027,15161,1):ocfs2_expand_inline_dir:2856 ERROR: status = -30
[ 550.668074][T15161] (syz.4.4027,15161,1):ocfs2_extend_dir:3203 ERROR: status = -30
[ 550.710539][T15161] (syz.4.4027,15161,1):ocfs2_prepare_dir_for_insert:4308 ERROR: status = -30
[ 550.749967][T15161] (syz.4.4027,15161,1):ocfs2_mknod:298 ERROR: status = -30
[ 550.786458][T15161] (syz.4.4027,15161,1):ocfs2_mknod:502 ERROR: status = -30
[ 550.944163][ T5882] (syz-executor,5882,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72
[ 550.984163][ T5882] ocfs2: Unmounting device (7,4) on (node local)
[ 551.017398][T15238] loop5: detected capacity change from 0 to 164
[ 551.025115][T15239] netlink: 'syz.3.4063': attribute type 21 has an invalid length.
[ 551.053143][T15239] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4063'.
[ 551.086817][T15238] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 551.711295][T15219] loop2: detected capacity change from 0 to 32768
[ 551.819921][T15219] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 551.972440][T15275] capability: warning: `syz.5.4074' uses deprecated v2 capabilities in a way that may be insecure
[ 552.241905][T15219] XFS (loop2): Ending clean mount
[ 552.267142][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4077'.
[ 552.324864][T15283] bridge1: entered promiscuous mode
[ 552.348549][T15287] loop1: detected capacity change from 0 to 1024
[ 552.356630][T15287] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 552.468228][ T5866] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 552.491465][T15295] binder: 15294:15295 ioctl 400c620e 0 returned -14
[ 552.501373][T15287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 552.561947][T15293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4083'.
[ 552.726372][T15300] loop0: detected capacity change from 0 to 16
[ 552.804234][T15300] erofs: DAX unsupported by block device. Turning off DAX.
[ 552.844158][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 552.853425][T15300] erofs (device loop0): mounted with root inode @ nid 36.
[ 552.867005][T15300] syz.0.4085: attempt to access beyond end of device
[ 552.867005][T15300] loop0: rw=0, sector=131157, nr_sectors = 1 limit=16
[ 552.980913][T15300] erofs (device loop0): read error -5 @ 0 of nid 36
[ 553.622419][ T6096] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 553.832926][T15316] loop0: detected capacity change from 0 to 4096
[ 553.839497][ T6096] usb 6-1: Using ep0 maxpacket: 8
[ 553.862904][ T6096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 553.927183][ T6096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 553.988188][T15323] libceph: resolve '4' (ret=-3): failed
[ 553.991356][ T6096] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 554.053838][ T6096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 554.099032][ T6096] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 554.142583][T15328] usb usb1: usbfs: process 15328 (syz.3.4100) did not claim interface 0 before use
[ 554.177023][ T6096] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 554.182983][T15329] mmap: syz.4.4099 (15329): VmData 37466112 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[ 554.209134][ T6096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 554.263680][ T6096] usb 6-1: config 0 descriptor??
[ 554.270130][T15311] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 554.571383][T15341] loop2: detected capacity change from 0 to 128
[ 554.604855][T15341] EXT4-fs: Ignoring removed bh option
[ 554.642629][T15341] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 554.665189][T15341] ext4 filesystem being mounted at /703/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 554.848034][T15353] loop3: detected capacity change from 0 to 64
[ 554.858872][ T5921] usb 6-1: USB disconnect, device number 74
[ 554.859537][ T5866] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 554.866712][ T5134] Bluetooth: hci6: Opcode 0x0c03 failed: -19
[ 555.246659][T15369] netlink: 'syz.3.4119': attribute type 11 has an invalid length.
[ 555.274328][T15369] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4119'.
[ 555.334647][T15371] loop4: detected capacity change from 0 to 1024
[ 555.366716][ T5922] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 555.417574][T15374] dummy0: entered promiscuous mode
[ 555.565231][ T5922] usb 3-1: Using ep0 maxpacket: 8
[ 555.610880][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 555.695203][ T5922] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 555.727690][ T5922] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 555.771284][ T5922] usb 3-1: Product: syz
[ 555.786679][ T5922] usb 3-1: Manufacturer: syz
[ 555.807356][ T5922] usb 3-1: SerialNumber: syz
[ 556.092650][ T5922] usb 3-1: Handspring Visor / Palm OS: No valid connect info available
[ 556.135603][ T5922] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use
[ 556.164330][ T5922] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use
[ 556.194333][T15398] loop3: detected capacity change from 0 to 256
[ 556.209572][ T5922] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2
[ 556.387128][T15398] FAT-fs (loop3): Directory bread(block 64) failed
[ 556.417681][T15398] FAT-fs (loop3): Directory bread(block 65) failed
[ 556.424418][ T5922] usb 3-1: palm_os_3_probe - error -71 getting bytes available request
[ 556.461048][T15398] FAT-fs (loop3): Directory bread(block 66) failed
[ 556.467632][T15398] FAT-fs (loop3): Directory bread(block 67) failed
[ 556.474945][ T5922] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[ 556.511265][ T5922] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 556.533802][T15398] FAT-fs (loop3): Directory bread(block 68) failed
[ 556.578251][ T5922] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 556.597771][T15398] FAT-fs (loop3): Directory bread(block 69) failed
[ 556.645271][T15398] FAT-fs (loop3): Directory bread(block 70) failed
[ 556.651873][T15398] FAT-fs (loop3): Directory bread(block 71) failed
[ 556.663167][ T5922] usb 3-1: USB disconnect, device number 77
[ 556.721762][ T5922] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 556.742877][T15398] FAT-fs (loop3): Directory bread(block 72) failed
[ 556.784229][T15398] FAT-fs (loop3): Directory bread(block 73) failed
[ 556.805962][ T5922] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 556.851638][ T5922] visor 3-1:1.0: device disconnected
[ 556.883628][ T5921] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 557.111003][ T5921] usb 2-1: Using ep0 maxpacket: 16
[ 557.179191][ T5921] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[ 557.203745][ T5921] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 557.255654][ T5921] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 557.305973][ T5921] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 557.314189][ T5921] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 557.392737][ T5921] usb 2-1: config 0 has no interface number 0
[ 557.424950][ T5921] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 557.494176][ T5921] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 557.544338][ T5921] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 557.554226][ T5921] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 557.652876][ T5921] usb 2-1: config 0 interface 125 has no altsetting 0
[ 557.672392][ T5921] usb 2-1: config 0 interface 125 has no altsetting 2
[ 557.738804][ T5921] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 557.782994][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 557.844362][ T5921] usb 2-1: Product: syz
[ 557.867354][ T5921] usb 2-1: Manufacturer: syz
[ 557.906520][ T5921] usb 2-1: SerialNumber: syz
[ 557.937687][ T5921] usb 2-1: config 0 descriptor??
[ 558.008461][ T5921] usb 2-1: selecting invalid altsetting 2
[ 558.449497][ C1] usb 2-1: async_complete: urb error -71
[ 558.455292][ C1] usb 2-1: async_complete: urb error -71
[ 558.461033][ C1] usb 2-1: async_complete: urb error -71
[ 558.516197][ T5921] get_1284_register: usb error -71
[ 558.521716][ T5921] uss720 2-1:0.125: probe with driver uss720 failed with error -71
[ 558.579542][ T5921] usb 2-1: USB disconnect, device number 93
[ 558.848600][T15471] loop2: detected capacity change from 0 to 4096
[ 558.924067][T15471] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[ 558.972941][T15441] loop4: detected capacity change from 0 to 32768
[ 559.022819][T15471] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 559.073274][T15471] ntfs3(loop2): ino=19, mi_enum_attr
[ 559.122074][T15441] JBD2: Ignoring recovery information on journal
[ 559.244624][T15471] ntfs3(loop2): failed to convert "c46c" to macgaelic
[ 559.361102][T15471] ntfs3(loop2): ino=20, mi_enum_attr
[ 559.386971][T15441] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[ 559.527922][T15454] loop5: detected capacity change from 0 to 32768
[ 559.788692][ T5882] ocfs2: Unmounting device (7,4) on (node local)
[ 559.926953][T15454] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[ 560.067399][T15493] loop3: detected capacity change from 0 to 4096
[ 560.140504][T15493] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[ 560.226813][T15454] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,nojournal_transaction_names,reconstruct_alloc
[ 560.226813][T15454] allowing incompatible features above 0.0: (unknown version)
[ 560.387020][T15454] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[ 560.387917][T15493] ntfs3(loop3): ino=19, mi_enum_attr
[ 560.433539][T15493] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 560.449493][T15454] bcachefs (loop5): Version upgrade required:
[ 560.449493][T15454] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[ 560.449493][T15454] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[ 560.449493][T15454] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[ 560.519270][ C0] vkms_vblank_simulate: vblank timer overrun
[ 560.617147][T15454] bcachefs (loop5): dropping and reconstructing all alloc info
[ 560.661367][T15454] bcachefs (loop5): accounting_read...
[ 560.675498][T15493] ntfs3(loop3): failed to convert "c46c" to cp864
[ 560.717037][T15454] done
[ 560.720966][T15454] bcachefs (loop5): alloc_read... done
[ 560.726499][T15454] bcachefs (loop5): snapshots_read... done
[ 560.756624][T15493] ntfs3(loop3): ino=20, mi_enum_attr
[ 560.768621][T15454] bcachefs (loop5): done starting filesystem
[ 560.960064][T15530] loop0: detected capacity change from 0 to 64
[ 561.046080][T15531] 8021q: adding VLAN 0 to HW filter on device bond0
[ 561.148921][T15531] bond0: (slave rose0): Enslaving as an active interface with an up link
[ 561.209518][ T5879] bcachefs (loop5): shutting down
[ 561.526847][ T5879] bcachefs (loop5): shutdown complete
[ 561.583901][T15546] bridge_slave_0: left allmulticast mode
[ 561.631079][T15546] bridge_slave_0: left promiscuous mode
[ 561.636894][T15546] bridge0: port 1(bridge_slave_0) entered disabled state
[ 561.733887][T15546] bridge_slave_1: left allmulticast mode
[ 561.813150][T15546] bridge_slave_1: left promiscuous mode
[ 561.825946][T15546] bridge0: port 2(bridge_slave_1) entered disabled state
[ 561.918166][T15546] bond0: (slave bond_slave_0): Releasing backup interface
[ 561.992353][T15546] bond0: (slave bond_slave_1): Releasing backup interface
[ 562.070318][T15546] team0: Port device team_slave_0 removed
[ 562.113986][T15546] team0: Port device team_slave_1 removed
[ 562.142440][T15546] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 562.184508][T15546] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 562.221759][ T973] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 562.234354][T15546] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 562.265881][T15546] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 562.409284][ T973] usb 1-1: config 0 has too many interfaces: 202, using maximum allowed: 32
[ 562.420328][ T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 562.474009][ T973] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 202
[ 562.482418][ T973] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[ 562.482453][ T973] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[ 562.482480][ T973] usb 1-1: Product: syz
[ 562.482501][ T973] usb 1-1: Manufacturer: syz
[ 562.482521][ T973] usb 1-1: SerialNumber: syz
[ 562.497930][ T973] usb 1-1: config 0 descriptor??
[ 562.506071][ T973] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 562.784973][ T973] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 562.908758][ T6196] udevd[6196]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 562.983724][ T973] usb 1-1: USB disconnect, device number 74
[ 563.395142][ T5921] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 563.454156][T15606] sit0: entered promiscuous mode
[ 563.498379][T15606] netlink: 'syz.1.4206': attribute type 1 has an invalid length.
[ 563.575029][T15606] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4206'.
[ 563.624423][ T5921] usb 3-1: Using ep0 maxpacket: 8
[ 563.647005][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 563.656237][ T5921] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 563.716947][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 563.741506][ T5921] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 563.752431][ T5921] usb 3-1: config 1 has no interface number 1
[ 563.774082][ T5921] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 563.824390][ T5921] usb 3-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE
[ 563.884281][ T5921] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0
[ 563.956157][ T5921] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 564.014345][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 564.022401][ T5921] usb 3-1: Product: syz
[ 564.040560][ T5921] usb 3-1: Manufacturer: syz
[ 564.053528][T15622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4214'.
[ 564.064233][ T5921] usb 3-1: SerialNumber: syz
[ 564.090231][T15622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4214'.
[ 564.442358][ T5921] usb 3-1: USB disconnect, device number 78
[ 564.630238][ T6196] udevd[6196]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 564.828057][T15643] loop0: detected capacity change from 0 to 764
[ 564.886032][T15643] rock: directory entry would overflow storage
[ 564.895627][T15649] syz.4.4224: attempt to access beyond end of device
[ 564.895627][T15649] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0
[ 564.922583][T15643] rock: sig=0x4654, size=5, remaining=4
[ 565.518527][ T973] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 565.584109][T15675] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 565.610194][ C0] vkms_vblank_simulate: vblank timer overrun
[ 565.697921][T15683] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4237'.
[ 565.707474][T15675] CIFS mount error: No usable UNC path provided in device string!
[ 565.707474][T15675]
[ 565.763705][ T973] usb 5-1: config index 0 descriptor too short (expected 63506, got 18)
[ 565.779682][ T973] usb 5-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b
[ 565.801217][T15675] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 565.816109][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 565.858142][ T973] usb 5-1: Product: syz
[ 565.862381][ T973] usb 5-1: Manufacturer: syz
[ 565.901171][ T5921] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 565.916177][ T973] usb 5-1: SerialNumber: syz
[ 566.103467][ T5921] usb 1-1: Using ep0 maxpacket: 16
[ 566.145164][ T5921] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 566.200812][ T5921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 566.213506][ T973] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[ 566.254025][ T5921] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 566.275419][ T973] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 566.313485][ T5921] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 566.343575][ T973] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 566.369031][T15700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4244'.
[ 566.378290][ T5921] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[ 566.411510][T15700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4244'.
[ 566.451404][T15694] loop5: detected capacity change from 0 to 4096
[ 566.458133][ T973] usb 5-1: USB disconnect, device number 92
[ 566.464230][ T5921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 566.497665][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 566.534713][ T5921] usb 1-1: SerialNumber: syz
[ 566.551511][ T973] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 566.629204][T15678] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 566.637377][T15705] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4246'.
[ 566.659980][ T5921] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[ 566.672404][T15694] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 566.690303][ T973] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 566.700106][ T5921] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12
[ 566.720114][T15694] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[ 566.749113][ T973] visor 5-1:1.0: device disconnected
[ 566.826227][T15710] netlink: 'syz.2.4247': attribute type 1 has an invalid length.
[ 566.886790][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4247'.
[ 566.958587][ T6096] usb 1-1: USB disconnect, device number 75
[ 568.289002][T15768] ip6t_srh: unknown srh invflags 7D00
[ 568.297775][T15766] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[ 568.337834][T15766] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4273'.
[ 568.604770][T15779] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 569.115157][T15800] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4287'.
[ 569.381973][T15810] loop2: detected capacity change from 0 to 64
[ 569.727086][T15825] loop3: detected capacity change from 0 to 8
[ 569.798158][T15829] netlink: 'syz.4.4302': attribute type 21 has an invalid length.
[ 569.806066][T15829] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4302'.
[ 569.822557][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4304'.
[ 570.449278][T15851] loop4: detected capacity change from 0 to 256
[ 570.643349][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4315'.
[ 571.083919][T15867] tmpfs: Bad value for 'mpol'
[ 571.220430][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4323'.
[ 571.285716][T15823] loop5: detected capacity change from 0 to 32768
[ 571.297641][T15871] batadv1: entered allmulticast mode
[ 571.325616][T15823] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4300 (15823)
[ 571.403871][T15823] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 571.465906][T15823] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[ 571.530275][T15823] BTRFS info (device loop5): disk space caching is enabled
[ 571.596362][T15823] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 571.618470][T15881] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4327'.
[ 571.882694][T15837] loop0: detected capacity change from 0 to 40427
[ 571.909430][T15823] BTRFS info (device loop5): rebuilding free space tree
[ 571.928114][T15837] F2FS-fs (loop0): Invalid segment count (1)
[ 571.956489][T15837] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 571.989633][T15823] BTRFS info (device loop5): disabling free space tree
[ 571.996609][T15823] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 571.997392][T15837] F2FS-fs (loop0): heap/no_heap options were deprecated
[ 572.073224][T15823] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 572.198302][T15905] loop2: detected capacity change from 0 to 4096
[ 572.277918][T15905] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[ 572.291265][T15837] F2FS-fs (loop0): invalid crc value
[ 572.397573][ T5879] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 572.485631][T15905] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[ 572.496423][T15915] loop1: detected capacity change from 0 to 256
[ 572.621076][T15915] process 'syz.1.4337' launched './file2' with NULL argv: empty string added
[ 572.656640][T15917] ieee802154 phy1 wpan1: encryption failed: -22
[ 572.697610][T15837] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[ 572.708296][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 572.713577][T15837] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 572.779376][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 572.787962][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 572.880748][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 572.918222][T15837] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0
[ 572.957052][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.002465][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.078546][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.124194][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.144950][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.190806][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.239506][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.259721][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.292414][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.338203][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.373362][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.381942][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.390641][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.399307][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.408341][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.428822][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.438199][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.459945][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.468552][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.483140][ T973] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 573.503201][T15915] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 573.525622][ T30] audit: type=1800 audit(1747350858.974:27): pid=15915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4337" name="file2" dev="loop1" ino=1048637 res=0 errno=0
[ 573.665559][T15935] loop2: detected capacity change from 0 to 47
[ 573.689967][ T973] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[ 573.713131][T15913] loop3: detected capacity change from 0 to 32768
[ 573.721743][ T973] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[ 573.776234][ T973] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x66, changing to 0x6
[ 573.794040][T15913] (syz.3.4335,15913,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 573.830688][ T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[ 573.889829][ T973] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[ 573.896783][T15913] (syz.3.4335,15913,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 573.969981][ T973] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 574.031627][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 574.067263][ T973] usb 6-1: Product: syz
[ 574.084420][T15913] JBD2: Ignoring recovery information on journal
[ 574.107996][ T973] usb 6-1: Manufacturer: syz
[ 574.204069][ T973] usb 6-1: SerialNumber: syz
[ 574.236965][ T973] usb 6-1: config 0 descriptor??
[ 574.256432][T15928] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 574.270327][ T973] usb 6-1: ucan: probing device on interface #0
[ 574.292653][T15913] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 574.331798][ T973] usb 6-1: ucan: invalid out_ep MaxPacketSize
[ 574.340344][ T973] usb 6-1: ucan: probe failed; try to update the device firmware
[ 574.527905][T15950] loop2: detected capacity change from 0 to 512
[ 574.557492][ T5922] usb 6-1: USB disconnect, device number 75
[ 574.701552][ T5875] ocfs2: Unmounting device (7,3) on (node local)
[ 574.724090][T15950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 574.751945][T15960] SET target dimension over the limit!
[ 574.787264][T15950] ext4 filesystem being mounted at /745/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 574.868740][T15950] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.4352: corrupted xattr block 33: invalid ea_ino
[ 575.077470][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 575.236061][T15972] loop4: detected capacity change from 0 to 256
[ 575.302726][T15972] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[ 575.363257][T15972] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[ 575.444908][T15972] exFAT-fs (loop4): valid_size(150994954) is greater than size(10)
[ 575.491110][T15978] loop0: detected capacity change from 0 to 2048
[ 575.558715][T15978] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=26504, location=26504
[ 575.608483][T15978] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 575.638936][ T24] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 575.834698][ T24] usb 6-1: Using ep0 maxpacket: 8
[ 575.842055][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 575.883513][T15982] bond1: entered promiscuous mode
[ 575.892667][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 575.916099][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 575.954681][T15982] bond1: entered allmulticast mode
[ 575.960371][T15982] 8021q: adding VLAN 0 to HW filter on device bond1
[ 575.961169][ T24] usb 6-1: Product: syz
[ 576.014551][T15991] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[ 576.043874][ T24] usb 6-1: Manufacturer: syz
[ 576.074427][ T24] usb 6-1: SerialNumber: syz
[ 576.092870][T15988] loop3: detected capacity change from 0 to 2048
[ 576.120222][ T24] usb 6-1: bad CDC descriptors
[ 576.180403][T15994] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 576.241205][T15988] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[ 576.305508][T15988] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16)
[ 576.382296][T15988] Remounting filesystem read-only
[ 576.426085][ T6096] usb 6-1: USB disconnect, device number 76
[ 576.450282][T15988] NILFS (loop3): error -5 truncating bmap (ino=16)
[ 576.601318][T15969] loop1: detected capacity change from 0 to 32768
[ 576.619899][ T5875] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[ 576.668403][T15969] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 576.676627][T15969] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 576.817093][T16008] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.4375'.
[ 576.871361][T15969] gfs2: fsid=syz:syz.0: journal 0 mapped with 23 extents in 0ms
[ 576.897642][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 576.927272][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 577.013069][T16010] loop0: detected capacity change from 0 to 4096
[ 577.099419][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 158ms
[ 577.125693][ T24] gfs2: fsid=syz:syz.0: jid=0: Done
[ 577.131251][T15969] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 577.240723][T16019] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4381'.
[ 577.311554][T16022] PKCS7: Unknown OID: [4] 0.0
[ 577.316390][T16022] PKCS7: Only support pkcs7_signedData type
[ 578.350904][T16057] netlink: 'syz.4.4400': attribute type 3 has an invalid length.
[ 578.396833][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4400'.
[ 578.940494][T16079] netlink: 'syz.2.4412': attribute type 4 has an invalid length.
[ 578.962647][T16079] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4412'.
[ 579.008759][T16072] loop5: detected capacity change from 0 to 4096
[ 579.033399][T16082] netlink: 'syz.3.4413': attribute type 9 has an invalid length.
[ 579.055342][T16079] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[ 579.083842][T16072] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[ 579.202101][T16072] ntfs3(loop5): ino=19, mi_enum_attr
[ 579.232142][T16072] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 579.446442][T16087] loop4: detected capacity change from 0 to 4096
[ 579.543921][T16087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 579.804140][ T5882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 580.038990][T16111] netlink: 'syz.2.4428': attribute type 9 has an invalid length.
[ 580.239970][T16113] loop3: detected capacity change from 0 to 4096
[ 580.265942][T16120] loop5: detected capacity change from 0 to 8
[ 580.278762][T16113] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[ 580.327509][T16120] unable to read id index table
[ 580.385276][T16122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4432'.
[ 580.426448][T16113] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 580.665318][ T973] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 580.850463][ T973] usb 6-1: Using ep0 maxpacket: 32
[ 580.879468][ T973] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 580.942297][ T973] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 580.955126][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 580.994395][ T973] usb 6-1: Product: syz
[ 580.998614][ T973] usb 6-1: Manufacturer: syz
[ 581.045666][ T973] usb 6-1: SerialNumber: syz
[ 581.089689][ T973] usb 6-1: config 0 descriptor??
[ 581.132768][ T973] usb 6-1: bad CDC descriptors
[ 581.138282][ T973] usb 6-1: unsupported MDLM descriptors
[ 581.412277][ T24] usb 6-1: USB disconnect, device number 77
[ 582.662312][ T973] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 582.804428][ T24] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 582.830320][T16216] loop5: detected capacity change from 0 to 64
[ 582.871076][ T973] usb 4-1: Using ep0 maxpacket: 32
[ 582.894910][ T973] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 582.941614][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 582.984951][ T973] usb 4-1: config 0 descriptor??
[ 583.004472][ T24] usb 1-1: Using ep0 maxpacket: 32
[ 583.012097][ T973] as10x_usb: device has been detected
[ 583.037105][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 583.067961][ T973] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 583.099004][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 583.160611][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 583.170574][ T973] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 583.209264][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 583.254290][ T973] as10x_usb: error during firmware upload part1
[ 583.254982][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 583.261217][ T973] Registered device nBox DVB-T Dongle
[ 583.300825][T16226] loop5: detected capacity change from 0 to 64
[ 583.310648][ T973] usb 4-1: USB disconnect, device number 87
[ 583.373236][ T24] usb 1-1: config 0 descriptor??
[ 583.406834][T16204] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 583.421046][ T24] hub 1-1:0.0: USB hub found
[ 583.428793][ T973] Unregistered device nBox DVB-T Dongle
[ 583.439208][ T973] as10x_usb: device has been disconnected
[ 583.667723][ T24] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 583.896416][ T24] usbhid 1-1:0.0: can't add hid device: -71
[ 583.924658][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 584.011925][ T24] usb 1-1: USB disconnect, device number 76
[ 584.085039][T16250] loop2: detected capacity change from 0 to 1024
[ 584.175520][T16256] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4490'.
[ 584.181303][T16250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 584.198531][T16256] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4490'.
[ 584.224829][T16256] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4490'.
[ 584.373935][T16262] lo speed is unknown, defaulting to 1000
[ 584.389528][T16250] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.4488: Abort forced by user
[ 584.404765][T16262] lo speed is unknown, defaulting to 1000
[ 584.442565][T16250] EXT4-fs (loop2): Remounting filesystem read-only
[ 584.477166][T16262] lo speed is unknown, defaulting to 1000
[ 584.480258][T16250] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[ 584.521621][ T30] audit: type=1326 audit(1747351382.110:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16264 comm="syz.4.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcb18e969 code=0x7ffc0000
[ 584.564843][T16262] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 584.657902][ T30] audit: type=1326 audit(1747351382.137:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16264 comm="syz.4.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcb18e969 code=0x7ffc0000
[ 584.699455][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 584.708701][T16262] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 584.729535][ T30] audit: type=1326 audit(1747351382.137:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16264 comm="syz.4.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7efdcb18e969 code=0x7ffc0000
[ 584.864657][ T30] audit: type=1326 audit(1747351382.137:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16264 comm="syz.4.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcb18e969 code=0x7ffc0000
[ 584.900859][T16262] lo speed is unknown, defaulting to 1000
[ 584.936063][ T30] audit: type=1326 audit(1747351382.137:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16264 comm="syz.4.4494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcb18e969 code=0x7ffc0000
[ 584.969286][T16262] lo speed is unknown, defaulting to 1000
[ 584.976947][T16262] lo speed is unknown, defaulting to 1000
[ 585.061247][T16262] lo speed is unknown, defaulting to 1000
[ 585.100327][T16262] lo speed is unknown, defaulting to 1000
[ 585.159223][T16262] lo speed is unknown, defaulting to 1000
[ 585.337476][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4504'.
[ 585.348633][T16286] loop0: detected capacity change from 0 to 1024
[ 585.465078][T16289] netlink: 'syz.4.4506': attribute type 13 has an invalid length.
[ 585.494854][T16289] netlink: 'syz.4.4506': attribute type 27 has an invalid length.
[ 585.622799][T16292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4508'.
[ 585.667570][ T36] hfsplus: b-tree write err: -5, ino 4
[ 585.892286][T16299] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 586.349353][T16312] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 586.358581][T16275] loop1: detected capacity change from 0 to 32768
[ 586.368170][T16310] loop0: detected capacity change from 0 to 2048
[ 586.378752][T16274] loop3: detected capacity change from 0 to 32768
[ 586.411921][T16310] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 586.447955][T16275] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 586.541555][T16274] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 586.667718][T16275] XFS (loop1): Ending clean mount
[ 586.719463][T16275] XFS (loop1): Quotacheck needed: Please wait.
[ 586.895614][T16275] XFS (loop1): Quotacheck: Done.
[ 587.201609][T16274] XFS (loop3): Ending clean mount
[ 587.208851][T16351] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 587.209203][ T5876] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 587.549920][ T5875] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 587.696933][T16363] loop5: detected capacity change from 0 to 1024
[ 587.706943][T16365] loop4: detected capacity change from 0 to 1024
[ 587.756293][T16365] EXT4-fs: Ignoring removed bh option
[ 587.882188][T16365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 587.935309][T16363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 587.987275][T16376] loop1: detected capacity change from 0 to 2048
[ 588.008029][T16376] NILFS (loop1): invalid segment: Checksum error in segment payload
[ 588.025381][T16365] ext4 filesystem being mounted at /749/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 588.090925][T16376] NILFS (loop1): trying rollback from an earlier position
[ 588.120290][T16365] EXT4-fs: Ignoring removed bh option
[ 588.146810][T16376] NILFS (loop1): recovery complete
[ 588.211172][T16377] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 588.278774][T16365] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.4538: Abort forced by user
[ 588.314753][ T5879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 588.352109][T16365] EXT4-fs (loop4): Remounting filesystem read-only
[ 588.371300][T16365] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 588.442102][ T30] audit: type=1326 audit(1747351385.708:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16382 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e98e969 code=0x7ffc0000
[ 588.521166][ T30] audit: type=1326 audit(1747351385.736:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16382 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f524e98e969 code=0x7ffc0000
[ 588.550865][ T30] audit: type=1326 audit(1747351385.736:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16382 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e98e969 code=0x7ffc0000
[ 588.692852][ T30] audit: type=1326 audit(1747351385.736:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16382 comm="syz.3.4537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524e98e969 code=0x7ffc0000
[ 588.699785][ T5882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 588.870691][T16393] loop3: detected capacity change from 0 to 1024
[ 588.913202][T16393] EXT4-fs: Ignoring removed mblk_io_submit option
[ 588.952856][T16399] loop0: detected capacity change from 0 to 256
[ 589.023165][T16393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 589.167967][T16399] FAT-fs (loop0): Directory bread(block 64) failed
[ 589.194327][T16399] FAT-fs (loop0): Directory bread(block 65) failed
[ 589.200986][T16399] FAT-fs (loop0): Directory bread(block 66) failed
[ 589.236425][T16399] FAT-fs (loop0): Directory bread(block 67) failed
[ 589.245948][T16411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4557'.
[ 589.284317][T16399] FAT-fs (loop0): Directory bread(block 68) failed
[ 589.290870][T16399] FAT-fs (loop0): Directory bread(block 69) failed
[ 589.298603][T16411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4557'.
[ 589.314161][T16414] loop2: detected capacity change from 0 to 256
[ 589.329405][T16399] FAT-fs (loop0): Directory bread(block 70) failed
[ 589.338303][T16399] FAT-fs (loop0): Directory bread(block 71) failed
[ 589.356233][T16399] FAT-fs (loop0): Directory bread(block 72) failed
[ 589.379496][ T5875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 589.441345][T16399] FAT-fs (loop0): Directory bread(block 73) failed
[ 589.502839][T16414] FAT-fs (loop2): Directory bread(block 64) failed
[ 589.565078][T16414] FAT-fs (loop2): Directory bread(block 65) failed
[ 589.574164][T16414] FAT-fs (loop2): Directory bread(block 66) failed
[ 589.620754][T16418] netlink: 'syz.5.4559': attribute type 2 has an invalid length.
[ 589.642320][T16414] FAT-fs (loop2): Directory bread(block 67) failed
[ 589.648989][T16414] FAT-fs (loop2): Directory bread(block 68) failed
[ 589.718485][T16414] FAT-fs (loop2): Directory bread(block 69) failed
[ 589.741492][T16414] FAT-fs (loop2): Directory bread(block 70) failed
[ 589.777153][T16414] FAT-fs (loop2): Directory bread(block 71) failed
[ 589.827519][T16414] FAT-fs (loop2): Directory bread(block 72) failed
[ 589.834113][T16414] FAT-fs (loop2): Directory bread(block 73) failed
[ 589.871123][T16424] usb usb8: usbfs: process 16424 (syz.4.4561) did not claim interface 0 before use
[ 590.120219][T16433] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave
[ 590.142093][T16434] netlink: 'syz.0.4565': attribute type 1 has an invalid length.
[ 590.179655][T16433] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0)
[ 590.184261][T16436] loop5: detected capacity change from 0 to 256
[ 590.282395][T16436] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 590.339265][T16436] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff)
[ 590.384452][T16440] loop1: detected capacity change from 0 to 8
[ 590.478955][T16439] loop3: detected capacity change from 0 to 2048
[ 590.491393][T16442] loop2: detected capacity change from 0 to 512
[ 590.511620][T16440] SQUASHFS error: xz decompression failed, data probably corrupt
[ 590.534409][T16440] SQUASHFS error: Failed to read block 0x108: -5
[ 590.570961][T16440] SQUASHFS error: Unable to read metadata cache entry [106]
[ 590.583420][T16448] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 590.592539][T16440] SQUASHFS error: Unable to read inode 0x11f
[ 590.614124][T16442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 590.637348][T16442] ext4 filesystem being mounted at /789/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 590.762905][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 590.793805][T16442] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz.2.4568: invalid size
[ 591.021701][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 591.066362][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 591.227490][ T10] usb 2-1: Using ep0 maxpacket: 16
[ 591.259445][ T10] usb 2-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config
[ 591.292361][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85
[ 591.338278][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 38305, setting to 1024
[ 591.379727][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 591.415382][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 591.512388][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 591.514760][T16475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4585'.
[ 591.530589][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 591.530620][ T10] usb 2-1: Manufacturer: syz
[ 591.542134][ T10] usb 2-1: config 0 descriptor??
[ 591.582660][T16440] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 591.629703][T16478] loop2: detected capacity change from 0 to 8
[ 591.648327][T16478] MTD: Attempt to mount non-MTD device "/dev/loop2"
[ 591.720196][ T9786] udevd[9786]: incorrect cramfs checksum on /dev/loop2
[ 591.724794][T16478] cramfs: Error -3 while decompressing!
[ 591.743993][T16478] cramfs: ffffffff99942462(639)->ffff88804ad51000(4096)
[ 591.783852][T16478] cramfs: bad data blocksize 4294966699
[ 591.815819][T16478] cramfs: Error -3 while decompressing!
[ 591.841310][ T53] usb 2-1: USB disconnect, device number 94
[ 591.866104][T16475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4585'.
[ 591.877478][T16478] cramfs: ffffffff99942462(639)->ffff88804ad51000(4096)
[ 591.926885][ T30] audit: type=1800 audit(1747351388.896:37): pid=16478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4586" name="file2" dev="loop2" ino=348 res=0 errno=0
[ 592.154487][T16496] loop5: detected capacity change from 0 to 22
[ 592.205858][T16496] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 592.243276][T16496] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 592.404008][T16504] loop4: detected capacity change from 0 to 256
[ 592.564200][T16500] loop0: detected capacity change from 0 to 4096
[ 592.778918][T16500] ntfs3(loop0): Failed to load $Extend (-22).
[ 592.793291][T16500] ntfs3(loop0): Failed to initialize $Extend.
[ 593.608942][T16546] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 593.647007][T16548] loop4: detected capacity change from 0 to 512
[ 593.661064][T16546] xt_recent: hitcount (33554432) is larger than allowed maximum (65535)
[ 593.848445][T16548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 593.915676][T16548] ext4 filesystem being mounted at /765/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 594.005797][ T5882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 594.069280][T16562] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4625'.
[ 594.192505][T16567] loop5: detected capacity change from 0 to 256
[ 594.304619][T16567] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f50, chksum : 0xa6aae999, utbl_chksum : 0xe619d30d)
[ 594.730091][T16588] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4634'.
[ 594.839364][T16588] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4634'.
[ 594.887283][T16592] loop1: detected capacity change from 0 to 8
[ 594.969914][T16597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4641'.
[ 595.211164][ T30] audit: type=1326 audit(1747351391.910:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950118e969 code=0x7ffc0000
[ 595.295063][ T30] audit: type=1326 audit(1747351391.910:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950118e969 code=0x7ffc0000
[ 595.317351][ C1] vkms_vblank_simulate: vblank timer overrun
[ 595.332876][T16560] loop2: detected capacity change from 0 to 32768
[ 595.421126][ T30] audit: type=1326 audit(1747351391.910:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f950118e969 code=0x7ffc0000
[ 595.443415][ C1] vkms_vblank_simulate: vblank timer overrun
[ 595.489825][T16560] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[ 595.532188][ T30] audit: type=1326 audit(1747351391.910:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950118e969 code=0x7ffc0000
[ 595.547206][T16560] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 595.554448][ C1] vkms_vblank_simulate: vblank timer overrun
[ 595.555325][ T30] audit: type=1326 audit(1747351391.910:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950118e969 code=0x7ffc0000
[ 595.615071][T16603] loop1: detected capacity change from 0 to 4096
[ 595.697825][T16603] ntfs3(loop1): It is recommened to use chkdsk.
[ 595.721299][T16613] loop5: detected capacity change from 0 to 1764
[ 595.771828][T16603] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[ 595.807322][T16603] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[ 595.867307][T16603] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[ 595.868405][T16621] overlayfs: missing 'lowerdir'
[ 595.915066][T16603] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[ 595.964227][T16603] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00
[ 595.984699][ T5866] ocfs2: Unmounting device (7,2) on (node local)
[ 596.021338][T16623] loop3: detected capacity change from 0 to 64
[ 596.029768][T16603] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00
[ 596.071629][T16603] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00
[ 596.079562][T16603] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00
[ 596.199225][T16603] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00
[ 596.509852][T16633] loop5: detected capacity change from 0 to 256
[ 596.750025][T16633] FAT-fs (loop5): Directory bread(block 64) failed
[ 596.756636][T16633] FAT-fs (loop5): Directory bread(block 65) failed
[ 596.841384][T16638] loop3: detected capacity change from 0 to 256
[ 596.847953][T16633] FAT-fs (loop5): Directory bread(block 66) failed
[ 596.854518][T16633] FAT-fs (loop5): Directory bread(block 67) failed
[ 596.897590][T16633] FAT-fs (loop5): Directory bread(block 68) failed
[ 596.931791][T16633] FAT-fs (loop5): Directory bread(block 69) failed
[ 596.955205][T16638] exfat: Deprecated parameter 'utf8'
[ 596.960539][T16638] exfat: Deprecated parameter 'utf8'
[ 596.961027][T16633] FAT-fs (loop5): Directory bread(block 70) failed
[ 597.024127][T16641] loop1: detected capacity change from 0 to 16
[ 597.044403][T16638] exfat: Deprecated parameter 'utf8'
[ 597.051918][T16633] FAT-fs (loop5): Directory bread(block 71) failed
[ 597.060580][T16641] erofs (device loop1): mounted with root inode @ nid 36.
[ 597.097306][T16633] FAT-fs (loop5): Directory bread(block 72) failed
[ 597.125936][T16633] FAT-fs (loop5): Directory bread(block 73) failed
[ 597.135911][T16638] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[ 597.322306][T16619] loop4: detected capacity change from 0 to 32768
[ 597.382517][T16619] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4650 (16619)
[ 597.442487][T16619] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 597.475288][T16619] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[ 597.510885][T16619] BTRFS info (device loop4): disk space caching is enabled
[ 597.518146][T16619] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 597.883507][T16619] BTRFS info (device loop4): rebuilding free space tree
[ 597.968868][T16619] BTRFS info (device loop4): disabling free space tree
[ 598.057155][T16619] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 598.150384][T16619] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 598.179260][T16665] bond2: entered promiscuous mode
[ 598.184360][T16665] bond2: entered allmulticast mode
[ 598.189228][T16682] loop3: detected capacity change from 0 to 512
[ 598.229350][T16665] 8021q: adding VLAN 0 to HW filter on device bond2
[ 598.237323][T16682] EXT4-fs: Ignoring removed orlov option
[ 598.269184][T16682] EXT4-fs: inline encryption not supported
[ 598.363157][T16682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 598.443745][T16682] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c09d, mo2=0002]
[ 598.453948][T16682] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 598.486856][T16682] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4671: bg 0: block 248: padding at end of block bitmap is not set
[ 598.524422][T16682] Quota error (device loop3): write_blk: dquota write failed
[ 598.531924][T16682] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 598.536290][T16684] loop1: detected capacity change from 0 to 4096
[ 598.574234][ T5882] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 598.629321][T16684] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[ 598.635597][T16682] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4671: Failed to acquire dquot type 1
[ 598.671673][T16684] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[ 598.737478][T16682] EXT4-fs (loop3): 1 truncate cleaned up
[ 598.742373][T16684] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[ 598.751065][T16684] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[ 598.763697][T16682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 598.827026][T16684] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00
[ 598.897547][T16684] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00
[ 598.949464][T16684] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00
[ 598.986936][T16684] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00
[ 598.996850][T16682] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[ 599.002256][T16684] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00
[ 599.019831][T16684] ntfs3(loop1): try to read out of volume at offset 0x3fffffe0c00
[ 599.038827][T16682] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c09d, mo2=0002]
[ 599.071033][T16682] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[ 599.146287][T16682] ext4 filesystem being remounted at /747/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 599.311043][T16706] loop2: detected capacity change from 0 to 164
[ 599.361797][T16706] syz.2.4681: attempt to access beyond end of device
[ 599.361797][T16706] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[ 599.387253][T16709] ieee802154 phy1 wpan1: encryption failed: -90
[ 599.445641][T16706] syz.2.4681: attempt to access beyond end of device
[ 599.445641][T16706] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[ 599.529938][ T5875] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 599.560421][ T30] audit: type=1800 audit(1747351395.880:43): pid=16706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4681" name="file0" dev="loop2" ino=1862 res=0 errno=0
[ 600.017889][T16726] netlink: 'syz.5.4691': attribute type 3 has an invalid length.
[ 600.055301][T16728] loop1: detected capacity change from 0 to 128
[ 600.117192][T16728] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 600.553679][T16744] netlink: 'syz.4.4699': attribute type 20 has an invalid length.
[ 600.563906][T16746] ieee802154 phy1 wpan1: encryption failed: -22
[ 600.795598][T16753] loop1: detected capacity change from 0 to 16
[ 600.842967][T16753] erofs (device loop1): mounted with root inode @ nid 36.
[ 601.332216][T16779] netlink: 964 bytes leftover after parsing attributes in process `syz.4.4714'.
[ 601.828213][T16798] netlink: 'syz.3.4721': attribute type 30 has an invalid length.
[ 601.941388][T16795] loop5: detected capacity change from 0 to 4096
[ 601.990489][T16795] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[ 602.438560][T16817] loop4: detected capacity change from 0 to 2048
[ 602.604904][T16828] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 602.638763][T16827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4733'.
[ 602.650533][T16829] netlink: 'syz.0.4734': attribute type 1 has an invalid length.
[ 602.722878][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4733'.
[ 602.759854][T16827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4733'.
[ 602.790868][T16817] NILFS (loop4): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3)
[ 602.886978][T16817] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=13)
[ 602.941123][T16817] Remounting filesystem read-only
[ 602.995654][T16817] NILFS (loop4): error -5 truncating bmap (ino=13)
[ 603.270706][ T5882] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[ 603.574507][ T5923] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 603.813966][ T5923] usb 6-1: Using ep0 maxpacket: 32
[ 603.848468][ T5923] usb 6-1: config 2 has an invalid interface number: 16 but max is 0
[ 603.875203][ T5923] usb 6-1: config 2 has no interface number 0
[ 603.924300][ T5923] usb 6-1: config 2 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[ 603.986765][ T5923] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 604.005580][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 604.034285][ T5923] usb 6-1: Product: syz
[ 604.045997][ T5923] usb 6-1: Manufacturer: syz
[ 604.056828][ T5923] usb 6-1: SerialNumber: syz
[ 604.117124][T16850] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 604.125227][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 604.193697][ T5923] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 604.327877][ T24] usb 5-1: Using ep0 maxpacket: 16
[ 604.356203][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 604.382076][ T24] usb 5-1: config 2 has an invalid interface number: 22 but max is 0
[ 604.390225][ T24] usb 5-1: config 2 has no interface number 0
[ 604.466692][ T24] usb 5-1: config 2 interface 22 has no altsetting 0
[ 604.533957][ T5923] usb 6-1: USB disconnect, device number 78
[ 604.556879][ T24] usb 5-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00
[ 604.569120][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 604.609759][ T24] usb 5-1: Product: syz
[ 604.616203][ T24] usb 5-1: Manufacturer: syz
[ 604.631902][ T24] usb 5-1: SerialNumber: syz
[ 604.749241][ T8008] udevd[8008]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 604.861101][ T5921] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 604.936871][ T24] usb-storage 5-1:2.22: USB Mass Storage device detected
[ 604.992603][ T24] usb-storage 5-1:2.22: Quirks match for vid 0451 pid 5416: 2
[ 605.102964][ T5921] usb 2-1: Using ep0 maxpacket: 32
[ 605.127633][ T5921] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 605.175512][T16913] loop0: detected capacity change from 0 to 512
[ 605.182670][ T24] usb 5-1: USB disconnect, device number 93
[ 605.194276][ T5921] usb 2-1: config 0 has no interface number 0
[ 605.224762][ T5921] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 605.250527][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 605.273478][ T5921] usb 2-1: Product: syz
[ 605.281334][ T5921] usb 2-1: Manufacturer: syz
[ 605.300095][ T5921] usb 2-1: SerialNumber: syz
[ 605.349773][T16913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 605.373485][ T5921] usb 2-1: config 0 descriptor??
[ 605.419830][T16913] ext4 filesystem being mounted at /881/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 605.451336][ T5921] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 605.483857][ T5921] usb 2-1: selecting invalid altsetting 1
[ 605.494163][ T5921] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 605.560295][ T5921] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 605.591588][ T5921] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 605.600381][ T5921] usb 2-1: media controller created
[ 605.640138][ T5867] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 605.768580][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 605.919782][T16888] loop3: detected capacity change from 0 to 32768
[ 605.931308][ T5921] usb 2-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)...
[ 605.947189][T16888] (syz.3.4757,16888,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 605.968855][ T5921] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered.
[ 606.030451][T16888] (syz.3.4757,16888,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 606.104489][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 606.169799][T16944] SET target dimension over the limit!
[ 606.217860][T16888] JBD2: Ignoring recovery information on journal
[ 606.246489][ T5921] DVB: Unable to find symbol mxl5005s_attach()
[ 606.298610][ T10] usb 3-1: Using ep0 maxpacket: 16
[ 606.317801][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 606.347579][ T5921] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 606.352139][ T10] usb 3-1: config 0 has no interface number 0
[ 606.363241][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11
[ 606.405329][T16888] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 606.448400][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 606.486415][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 606.531251][ T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 606.557766][ T10] usb 3-1: Product: syz
[ 606.577179][ T10] usb 3-1: SerialNumber: syz
[ 606.607164][ T5921] usb 2-1: USB disconnect, device number 95
[ 606.754127][ T10] usb 3-1: config 0 descriptor??
[ 606.793682][ T10] cm109 3-1:0.8: invalid payload size 1024, expected 4
[ 606.866979][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input44
[ 606.946294][ T5922] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 606.960665][ T5875] ocfs2: Unmounting device (7,3) on (node local)
[ 607.185258][ T5922] usb 1-1: Using ep0 maxpacket: 32
[ 607.207165][ T5922] usb 1-1: config 0 has an invalid interface number: 150 but max is 0
[ 607.228564][ T5922] usb 1-1: config 0 has no interface number 0
[ 607.234732][ T5922] usb 1-1: config 0 interface 150 has no altsetting 0
[ 607.249517][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[ 607.256480][ C0] ------------[ cut here ]------------
[ 607.262088][ C0] URB ffff88802864d500 submitted while active
[ 607.269018][ C0] WARNING: CPU: 0 PID: 15 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfa8/0x1870
[ 607.278417][ C0] Modules linked in:
[ 607.282494][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full)
[ 607.294383][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 607.304442][ C0] RIP: 0010:usb_submit_urb+0xfa8/0x1870
[ 607.310014][ C0] Code: 00 eb 5c e8 0a cd aa fa e9 09 f1 ff ff e8 00 cd aa fa c6 05 10 de 53 08 01 90 48 c7 c7 00 6b 12 8c 48 89 de e8 79 29 6f fa 90 <0f> 0b 90 90 e9 d0 f0 ff ff e8 da cc aa fa eb 11 e8 d3 cc aa fa bd
[ 607.329727][ C0] RSP: 0018:ffffc90000147578 EFLAGS: 00010046
[ 607.335808][ C0] RAX: 114adc0faa128200 RBX: ffff88802864d500 RCX: 0000000000040000
[ 607.343786][ C0] RDX: ffffc90002203000 RSI: 00000000000093da RDI: 00000000000093db
[ 607.351760][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004
[ 607.359731][ C0] R10: dffffc0000000000 R11: fffffbfff1bba944 R12: 1ffff1100515430a
[ 607.367708][ C0] R13: dffffc0000000000 R14: ffff88802864d508 R15: 0000000000000820
[ 607.375730][ C0] FS: 0000000000000000(0000) GS:ffff8881260c7000(0000) knlGS:0000000000000000
[ 607.384663][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 607.391248][ C0] CR2: 0000001b3261dff8 CR3: 0000000047e6c000 CR4: 0000000000350ef0
[ 607.399224][ C0] Call Trace:
[ 607.402500][ C0]
[ 607.405432][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.411080][ C0] ? kcov_remote_start+0x97/0x7f0
[ 607.416125][ C0] cm109_urb_irq_callback+0x718/0xc80
[ 607.421521][ C0] __usb_hcd_giveback_urb+0x41a/0x690
[ 607.426897][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.432545][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[ 607.438442][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.444086][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.449726][ C0] ? usb_hcd_giveback_urb+0x10e/0x420
[ 607.455102][ C0] dummy_timer+0x862/0x4550
[ 607.459622][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.465288][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.470940][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.476582][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 607.481968][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10
[ 607.487530][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.493174][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.498818][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 607.503864][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 607.508820][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 607.513771][ C0] __hrtimer_run_queues+0x52c/0xc60
[ 607.518993][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.524658][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 607.530399][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.536038][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.541692][ C0] hrtimer_run_softirq+0x187/0x2b0
[ 607.547070][ C0] handle_softirqs+0x286/0x870
[ 607.551837][ C0] ? schedule+0x165/0x360
[ 607.556181][ C0] ? run_ksoftirqd+0x9b/0x100
[ 607.560880][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 607.566177][ C0] ? smpboot_thread_fn+0x4d/0xa60
[ 607.571201][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.576841][ C0] ? smpboot_thread_fn+0x4d/0xa60
[ 607.581864][ C0] run_ksoftirqd+0x9b/0x100
[ 607.586375][ C0] ? __pfx_run_ksoftirqd+0x10/0x10
[ 607.591587][ C0] smpboot_thread_fn+0x542/0xa60
[ 607.596528][ C0] ? smpboot_thread_fn+0x4d/0xa60
[ 607.601565][ C0] kthread+0x711/0x8a0
[ 607.605646][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 607.611106][ C0] ? __pfx_kthread+0x10/0x10
[ 607.615733][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.621375][ C0] ? __pfx_kthread+0x10/0x10
[ 607.625970][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 607.631174][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.636813][ C0] ? lockdep_hardirqs_on+0x9c/0x150
[ 607.642044][ C0] ? __pfx_kthread+0x10/0x10
[ 607.646642][ C0] ret_from_fork+0x4e/0x80
[ 607.651061][ C0] ? __pfx_kthread+0x10/0x10
[ 607.655661][ C0] ret_from_fork_asm+0x1a/0x30
[ 607.660449][ C0]
[ 607.663471][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 607.670756][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full)
[ 607.682648][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 607.692705][ C0] Call Trace:
[ 607.696069][ C0]
[ 607.699002][ C0] dump_stack_lvl+0x99/0x250
[ 607.703617][ C0] ? __asan_memcpy+0x40/0x70
[ 607.708222][ C0] ? __pfx_dump_stack_lvl+0x10/0x10
[ 607.713437][ C0] ? __pfx__printk+0x10/0x10
[ 607.718037][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.723681][ C0] panic+0x2db/0x790
[ 607.727591][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.733233][ C0] ? __pfx_panic+0x10/0x10
[ 607.737673][ C0] ? ret_from_fork_asm+0x1a/0x30
[ 607.742620][ C0] __warn+0x31b/0x4b0
[ 607.746610][ C0] ? usb_submit_urb+0xfa8/0x1870
[ 607.751562][ C0] ? usb_submit_urb+0xfa8/0x1870
[ 607.756505][ C0] report_bug+0x2be/0x4f0
[ 607.760845][ C0] ? usb_submit_urb+0xfa8/0x1870
[ 607.765790][ C0] ? usb_submit_urb+0xfa8/0x1870
[ 607.770734][ C0] ? usb_submit_urb+0xfaa/0x1870
[ 607.775690][ C0] handle_bug+0x84/0x160
[ 607.780001][ C0] exc_invalid_op+0x1a/0x50
[ 607.784523][ C0] asm_exc_invalid_op+0x1a/0x20
[ 607.789377][ C0] RIP: 0010:usb_submit_urb+0xfa8/0x1870
[ 607.794971][ C0] Code: 00 eb 5c e8 0a cd aa fa e9 09 f1 ff ff e8 00 cd aa fa c6 05 10 de 53 08 01 90 48 c7 c7 00 6b 12 8c 48 89 de e8 79 29 6f fa 90 <0f> 0b 90 90 e9 d0 f0 ff ff e8 da cc aa fa eb 11 e8 d3 cc aa fa bd
[ 607.814581][ C0] RSP: 0018:ffffc90000147578 EFLAGS: 00010046
[ 607.820662][ C0] RAX: 114adc0faa128200 RBX: ffff88802864d500 RCX: 0000000000040000
[ 607.828638][ C0] RDX: ffffc90002203000 RSI: 00000000000093da RDI: 00000000000093db
[ 607.836609][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004
[ 607.844603][ C0] R10: dffffc0000000000 R11: fffffbfff1bba944 R12: 1ffff1100515430a
[ 607.852594][ C0] R13: dffffc0000000000 R14: ffff88802864d508 R15: 0000000000000820
[ 607.860605][ C0] ? usb_submit_urb+0xfa7/0x1870
[ 607.865558][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.871208][ C0] ? kcov_remote_start+0x97/0x7f0
[ 607.876251][ C0] cm109_urb_irq_callback+0x718/0xc80
[ 607.881656][ C0] __usb_hcd_giveback_urb+0x41a/0x690
[ 607.887082][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.892759][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[ 607.898661][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.904335][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.909977][ C0] ? usb_hcd_giveback_urb+0x10e/0x420
[ 607.915445][ C0] dummy_timer+0x862/0x4550
[ 607.919969][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.925620][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.931352][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.937020][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 607.942403][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10
[ 607.947972][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.953617][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.959260][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 607.964218][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 607.969171][ C0] ? __pfx_dummy_timer+0x10/0x10
[ 607.974211][ C0] __hrtimer_run_queues+0x52c/0xc60
[ 607.979432][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.985087][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 607.990819][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 607.996461][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 608.002108][ C0] hrtimer_run_softirq+0x187/0x2b0
[ 608.007226][ C0] handle_softirqs+0x286/0x870
[ 608.011991][ C0] ? schedule+0x165/0x360
[ 608.016329][ C0] ? run_ksoftirqd+0x9b/0x100
[ 608.021014][ C0] ? __pfx_handle_softirqs+0x10/0x10
[ 608.026303][ C0] ? smpboot_thread_fn+0x4d/0xa60
[ 608.031322][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 608.036961][ C0] ? smpboot_thread_fn+0x4d/0xa60
[ 608.041983][ C0] run_ksoftirqd+0x9b/0x100
[ 608.046498][ C0] ? __pfx_run_ksoftirqd+0x10/0x10
[ 608.051629][ C0] smpboot_thread_fn+0x542/0xa60
[ 608.056582][ C0] ? smpboot_thread_fn+0x4d/0xa60
[ 608.061643][ C0] kthread+0x711/0x8a0
[ 608.065733][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 608.071194][ C0] ? __pfx_kthread+0x10/0x10
[ 608.075792][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 608.081430][ C0] ? __pfx_kthread+0x10/0x10
[ 608.086030][ C0] ? _raw_spin_unlock_irq+0x23/0x50
[ 608.091229][ C0] ? srso_alias_return_thunk+0x5/0xfbef5
[ 608.096867][ C0] ? lockdep_hardirqs_on+0x9c/0x150
[ 608.102113][ C0] ? __pfx_kthread+0x10/0x10
[ 608.106707][ C0] ret_from_fork+0x4e/0x80
[ 608.111124][ C0] ? __pfx_kthread+0x10/0x10
[ 608.115722][ C0] ret_from_fork_asm+0x1a/0x30
[ 608.120505][ C0]
[ 608.123729][ C0] Kernel Offset: disabled
[ 608.128050][ C0] Rebooting in 86400 seconds..