last executing test programs: 14m32.610686347s ago: executing program 32 (id=621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x13c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0xf0, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000040) 14m11.508358709s ago: executing program 33 (id=759): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000002c0)={"1b00", 0x0, 0x5, 0x2, 0x802, 0x80000000, "f759e1006dc710000000d9fc6300", '\x00', "000500", "e8cc1304", ["f2e7ffffffffffef68c10012", "08ea313cab4fec00", '\x00\x00\x00\t\t\x00\x00\x00\x00\x00\x00$', "0000005fc8000040001000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x9, 0x5, 0x4, 0x10000, 0x7, 0x7, "dddcbd75e2cd26cc945517073876a817", 0x1, 0x1, 0x3, 0x2, 0x9, 0x5, 0x8}) 13m59.069709619s ago: executing program 34 (id=839): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x140, 0x4, 0x1f, 0x6ffffffe, 0x1, 0x5, 0x8, 0x5, 0x8, 0xf, 0x4, 0x76c28e09, 0xf8, 0x100008, 0x4cb, 0x209e9b, 0x101, 0x400401, 0x9, 0x9, 0x40, 0x8, 0xd, 0x9, 0xffc, 0x200000, 0xb0, 0xfffffff9, 0x10001fc, 0x1000000, 0xc]}) 9m31.070851481s ago: executing program 35 (id=3307): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x2040400) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x7c) 7m17.108706248s ago: executing program 36 (id=4533): syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0xc0ed008e, &(0x7f00000003c0)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@nombcache}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x47d, &(0x7f0000000440)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x0, 0x0) 7m16.797218113s ago: executing program 8 (id=4541): r0 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) read(r0, &(0x7f0000000380)=""/238, 0xee) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) 7m15.907489891s ago: executing program 8 (id=4545): clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x100000000000000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x1ff, 0x0, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) 7m15.371998814s ago: executing program 37 (id=4546): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000300)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 7m14.334409972s ago: executing program 8 (id=4554): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)={0x20, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="4018410000004d"], 0x0, 0x0}) 7m12.208983422s ago: executing program 8 (id=4564): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'maciceland'}}]}, 0x9, 0x608, &(0x7f0000000640)="$eJzs3c1rHOcdB/DvrF6sdcFREjtJ3UJECsXExNaLSVsoVC2m6BBMoJdcRS3HwmsnSOui5FDU4j8kPainHHopgdJDKD73kH9A0GOh0KPIZcvMzr7IlmQp1csq+Xzws/M8+8z85jc/zz5oV4IN8J219EEmNlNk6fp7G+V4e2uhtb218LDXT3IhSaP6l/Gy+69k7Ekyk27L95MUdbhiv/N8Mf/51a/ubFzrjhp1q/YfO+i4w9msWxbrJBePMd7T/zte0b/CMujtXvBR0Hmx/57g6cdOMDZHUOzzfzGdXEwyVa8DvRu3cbrZHb+ReQECAADACXppJzvZyKWzzgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOk/r7/4u6NXr9mRS97/+frJ9L3T/XvjzrBAAAAAAAAADgGLy5k51s5FJv3Cmq3/m/VQ0uV4/fy+OsZyVruZGNLKeddtYyl2S6e0z1xwCTG8vt9trcIY6cHxyZwZHzp3fNAAAAAAAAAPCtMLVr9McsDX7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo6BIxrqbql3u9afTGE8ylWSy3G8z+Xuvf559edYJAAAAwCl4aSc72cil3rhTVO/5X6ve90/lcR6lndW008pK7lafBXTf9Te2txZa21sLD8v2fNxf/udIaVQR0/3sYe8zz1Z7XOkfsZRf5ze5npm83+lkNb/LctpZyUxuV73lFJmuP72Y7uW5d76Lu0bvvyjXN6pMmrmX1Sq3G/ltPkord9OorqHa5+Az/qGsTvGL2iFrdLfeFknxg/rKRsN0VZGJfkVm69qX1Xj54Ersvk8aRz3TXBr9z6Aun0DNL9bbsuZTo1fzifQrMT909712cCWSd9p/ffN+69GD+/fWr4/OJX1Dz94TC0OVeP3gSnzd6XS+RZWYrKvRXUX3WS2ztudq+VZ17KWs5k4+yt2s5Cd5N/NVW6i2w3W9cojXWuNor7UfXas7ryRFs7sdEWVdXx6q6/BKN13NDT8zqNIrx78ijV+tO2NJMd7PaRQ8W4m5oUq8enAl/tQpH9dbjx6s3V/++JDn+3G9LdfmCyO1Nk/Wd+94Ndp9d5Rzr+45N1fNXe7PNZ6bu9Kfe9ErdbL+Ge75SPPV3Ot7znWPe2Nobq+fcgAYeRffvjjZ/Hfzn83Pmk+a95vvTf3qwk8v/HAyE0/H/zb2l8afGz8v3s5n+f3g/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDNrX/y6YPlVmtl7Zg640mONaDO853H3a/pydBU/UxGJEOdc995dqWYOuWVidNws/3w45vrn3z6zurD5Q9XPlx5dGt2fu7dW3M/u3Xz3mprZbb7eNZZclIGL/qzzgQAAAAAAAAAAICjOI0/Jz3rawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD8WPogE5spMjd7Y7Ycb28ttMrW6w/2bCQZL7dfJ2NPkpl0W6aHwhX7neeL+c+vfnVn49ogVqO3/1iSfxwm18a+M5t1y2Kd5OKzezSPFH5XvKd7xTuSol+ZMujtXnA4a/8LAAD//8i3G90=") mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) 7m11.765117312s ago: executing program 8 (id=4569): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x10, "4e84ad8bee8ade2451c2f976801bc207"}, &(0x7f0000000500)=0x18) 7m11.737252662s ago: executing program 3 (id=4570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbc4252c0000002000018008000100", @ANYRES32=r1, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x8811}, 0xc080) 7m11.277577648s ago: executing program 3 (id=4573): r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000080)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000000000000000000070000007e0b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4c004) 7m10.795657369s ago: executing program 3 (id=4576): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 7m10.748214696s ago: executing program 8 (id=4577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) 7m10.20146394s ago: executing program 38 (id=4577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40) 7m10.176896375s ago: executing program 3 (id=4580): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'maciceland'}}]}, 0x9, 0x608, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) 7m9.77016886s ago: executing program 3 (id=4583): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m9.367064935s ago: executing program 3 (id=4585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) 7m8.308303023s ago: executing program 39 (id=4585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) 6m38.561323511s ago: executing program 7 (id=4653): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_setup(0x8b8, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, 0x0}]) 6m37.852822978s ago: executing program 7 (id=4658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000003080), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f00000030c0)={0x54, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x4}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0xc0d0) 6m37.486176446s ago: executing program 7 (id=4662): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='z', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x81, @loopback, 0x1}, 0x1c) 6m37.126762142s ago: executing program 7 (id=4665): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./bus\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6m36.0245223s ago: executing program 7 (id=4674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 6m34.703685553s ago: executing program 7 (id=4684): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x400000, 0x3}}, 0x20) 6m34.214387698s ago: executing program 40 (id=4684): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x400000, 0x3}}, 0x20) 1m41.451663334s ago: executing program 0 (id=6908): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="1100000010000000000e00"/22, 0x16) 1m41.155259284s ago: executing program 0 (id=6912): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setresgid(0xee00, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 1m40.630075641s ago: executing program 0 (id=6928): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43f8160000118d5a1511"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) 1m39.993145152s ago: executing program 0 (id=6920): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m39.549309746s ago: executing program 0 (id=6924): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1d, 0x401, 0x70b928, 0x25dfdc00, {0x7, 0x0, 0xffff, r1, 0x42, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}}, 0x840) 1m38.624053344s ago: executing program 0 (id=6927): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x94, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x17c, 0x40, 0x1, {0x22, 0x15}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) 1m37.531658586s ago: executing program 41 (id=6927): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x94, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x17c, 0x40, 0x1, {0x22, 0x15}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) 9.216128739s ago: executing program 9 (id=7462): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x67c, &(0x7f0000000580)="$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") lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@random={'osx.', 'com.apple.FinderInfo\x00'}, 0x0, 0x0) 8.615251106s ago: executing program 9 (id=7466): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, 0x4) 8.283303419s ago: executing program 9 (id=7470): mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 7.880558231s ago: executing program 9 (id=7475): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x800, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 7.076411979s ago: executing program 9 (id=7484): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x4003, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x1cc, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 6.15671994s ago: executing program 6 (id=7494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 6.000287702s ago: executing program 9 (id=7495): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}, 0x1, 0x0, 0x0, 0x801}, 0x0) 5.134383312s ago: executing program 42 (id=7495): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}, 0x1, 0x0, 0x0, 0x801}, 0x0) 5.114085263s ago: executing program 6 (id=7497): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000200)="4000000005000140000000", 0xb) 5.106422748s ago: executing program 5 (id=7500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 4.872630947s ago: executing program 6 (id=7501): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0xc004, &(0x7f0000003d00)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16], 0x1, 0x5f7, &(0x7f0000000c80)="$eJzs3UFvHGcZB/D/bBxnHUTquEkbUCWsIlUIi2RtSyTlApSCLFShShw4W8RJrGzSynaR2wMExKHi1I9QhPwFEMci5UB74ACnno16ROLum9HMzqzXydZ1Yte7bn4/afZ9Zt6Zd595dnYys1Y0AZ5ZS3OZeJgiS3NvbJbz21uL3e2txXtNnORcklbSTlKUi/+W5LPkQXpTvtF0DLSP+fSj9u1PPvj4/d5cOVa7mOitXxy03eH0c5nu5Vq1xzXewtHH27eHM0lmjzweHIPdxn+Gdh/xewkAjLMiOTNs+XRyvr5gL+8DelfFvWvsU+3BqBMAAACAE/DcTnaymQujzgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOk/r5/0U9tZp4NkXz/P/Jelnq+FR7OOoEAAAAAAAAAOAYfGsnO9nMhWZ+t6j+5v9yNXOpev1a3sl6VrKWq9nMcjaykbXMJ5keGGhyc3ljY23+EFsuDN1y4WT2FwAAAAAAAAC+ov6Qpb2//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDgokjO9ppouNfF0WhNJ2kkmy/UeJP9u4tPs4agTAAAAgBPw3E52spkLzfxuUd3zv1Dd97fzTu5nI6vZSDcruVn9FtC7629tby12t7cW75XTo6NO5Mf/e6I0qhHT++1h+DtfqdaYyq2sVkuu5td5K93cTKvasnSlyWd4Xr8vcyp+WDtkZjfrttzzn9fteJiuKnK2X5FOnVtZjYsHV+IJP51H32k+rf4vP5e+hJqfr9tyf14f65ovDBx9LxxciWTmV3+6fqd7/+6dW+tz47NLT6E9pBKLA5V48ZmpRKlTVeJyf34pP8svM5fZvJm1rOY3Wc5GVjKb16touT6ey9fpgyv1o31zb35RJpP159I7iz5ZTi9X217Ian6Rt3Kz+kQ7uZ7rWcj382o6+z7hy0Pz/t1u3b2zu7ub1pN967/9nTo4m+SndTseyrpeHKjr4Dl3uuobXLJXpZnjPzdOfLMOyqPntbE7N1585F+JphLPH1yJP1cHznr3/t21O8tvH/L9XqnbsgI/6Vdiol66e+ZYduqplMfLTD+X/UdH2ff80L75qu9Sv6/1WN/lft8XfVMn62u4x0daqPpeHNrX2+7KQN+w6y0Axt75756fnPrv1L+mPpz649SdqTfar527ce6lyZz9x9kfTHTOvNJ6qfhrPsxv9+7/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp7f+7nt3l7vdlbWnDponER11HIFgfIPmoWTjks+XH4zyrASchGsb996+tv7ue99bvbd8e+X2yv1XOzduzM/PX+9cu7XaXalfR50lAHCc9i76R50JAAAAAAAAAAAAAADweU7ivxOPeh8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICvtqW5TDxMkfnO1U45v7212C2nJt5bs52kKIO/J/kseZDelOmB4YrPe59PP2rf/uSDj9/fG6tdrf/PhePYi325tB7J6ajjLQyM95dmja8fYpRWExT9yswmmalbGLn/BwAA///m5gNq") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000440)=0x40) 4.581432236s ago: executing program 5 (id=7503): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002e00090027bd7000fedbdf250400000008001a80"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001600010325bd7000fcffffff20000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x440d3}, 0x0) 4.393968083s ago: executing program 4 (id=7504): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000006640)=ANY=[@ANYBLOB='quota,discard=0x000000000020aff9,iocharset=none,iocharset=cp949,errors=remount-ro,grpquota,nointegrity,errors=remount-ro,nodiscard,errors=remount-ro,\x00'], 0x24, 0x62a7, &(0x7f0000006700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x44) getdents64(r0, &(0x7f0000000140)=""/82, 0x52) 4.067334563s ago: executing program 6 (id=7505): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.019429268s ago: executing program 5 (id=7507): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x4003, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x1cc, &(0x7f00000004c0)="$eJzslT/P0lAUxp/b0pIak9dVJxNJ3tfB/kONDA7E0UETjcYNIoWgRQx0ACb4FM7ODs7EhcTF76CDOpkobk4m1tz21l5LCSlWYuL5DbdPey6Hc04vDyAI4r/l44dv718e1wyuT6OGqnj+SU33KNL+5dH3i2/7t149s7++W65uNjLp9KLfXwGwaqoIxH0YhqEcr4nrXSiJ1tBK4/fBYArdgoJ7QntgeCD0I0kP+X7T7PZ9z3w49Dtc2Hxx+OLypZ6tb71g6Ej1MSk+ns4et33fG/25uMHLzgvtmt+6qeC6VJ/8vpLZ2On84ECBI3QdDHeEvoZqMpt4JFL/5yppfvXv9F+C+FxaQgbMeX+/hQzskfDs0Y49Gv6F0ZUukl/JRuiNCBRIaKTOcsguRAvzQp9i0SH5Yhy21LLECyM683reiysmUn8KnzMcS/5UkfzDCgZPrfF0dqk/aPe8nvfEdetX7cu2fcW1IiOyuq83XU+R/M+I/OmUlF/b4pU60zFpB8HIiddf9+6kimDk5jmuHvmfgpMLcdUs508uOiZn2Hl+OVGBH2HMljIIgiAIgiAIgiAIgiAIgiD2QwPYIszSQPaJezva/jMAAP//Y6hiTA==") chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 3.477384444s ago: executing program 1 (id=7508): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000080)=0x64, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f0000000280)) 3.324233496s ago: executing program 5 (id=7509): ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x2, 'vlan0\x00', {0x7}, 0x1000}) r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000280)) 3.019639547s ago: executing program 1 (id=7511): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r0, 0x200000000000000) 2.722467909s ago: executing program 2 (id=7512): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) file_setattr(r0, 0x0, &(0x7f0000000c80)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) 2.685816829s ago: executing program 6 (id=7513): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0x5}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0x8d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4045}, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2.669410972s ago: executing program 4 (id=7514): sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x40000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x4bfb, &(0x7f0000000000)) 2.41153394s ago: executing program 1 (id=7515): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r0, 0x108000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.274263716s ago: executing program 2 (id=7516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x3, 0xf, &(0x7f0000002300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000002380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000023c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000002440)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.246058698s ago: executing program 5 (id=7517): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000200)='(', 0x1, 0x10000000005970}]) 2.141130149s ago: executing program 4 (id=7518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00660000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x1, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000000480)=""/239}, 0x20) 1.82433437s ago: executing program 6 (id=7519): r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d313113200000000000109022200010100803209040000000000000009040001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001d40)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.718653909s ago: executing program 1 (id=7520): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x3, &(0x7f00000003c0)={0x3, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0) 1.555774249s ago: executing program 4 (id=7521): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setneightbl={0x34, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_PARMS={0x10, 0x6, 0x0, 0x1, [@NDTPA_BASE_REACHABLE_TIME={0xc}]}]}, 0x34}}, 0x0) 1.476351635s ago: executing program 5 (id=7522): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.468524365s ago: executing program 2 (id=7523): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000004c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x203f}, 0x1}) 1.362026071s ago: executing program 1 (id=7524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x50, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 1.15950448s ago: executing program 2 (id=7525): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080005000000000008000600000000004dfd050000000000240007800800050000000000000005000000000061ff0500000000000800050000000000040007801400078008000600000040"], 0xd0}}, 0x0) 1.14444764s ago: executing program 4 (id=7526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000021000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 826.355824ms ago: executing program 1 (id=7527): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1}, 0x1f02) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 525.034786ms ago: executing program 4 (id=7528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a0, 0x6, 0xa, 0x60b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x174, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1c8}, 0x1, 0x0, 0x0, 0x8010}, 0x24000800) 314.709954ms ago: executing program 2 (id=7529): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 0s ago: executing program 2 (id=7530): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x5, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0xfc, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/92, 0x5c}, {0x0}], 0x2) kernel console output (not intermixed with test programs): system error report for type 5 error -117 [ 942.395881][T25386] fido_id[25386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 942.850599][T18368] DVB: Unable to find symbol stv0299_attach() [ 943.051404][T18368] DVB: Unable to find symbol tda8083_attach() [ 943.051436][T18368] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 943.075934][T18368] usb 10-1: USB disconnect, device number 24 [ 943.437795][T25408] loop0: detected capacity change from 0 to 512 [ 943.451677][T25408] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 943.451709][T25408] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 943.632947][T25408] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #16: comm syz.0.6817: invalid indirect mapped block 32768 (level 2) [ 943.633026][T25408] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 943.638619][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 943.638654][ C1] EXT4-fs (loop0): initial error at time 2000000456: ext4_free_branches:1020: inode 16 [ 943.638706][ C1] EXT4-fs (loop0): last error at time 2000000456: ext4_free_branches:1020: inode 16 [ 943.666043][T25408] EXT4-fs (loop0): 1 orphan inode deleted [ 943.666090][T25408] EXT4-fs (loop0): 1 truncate cleaned up [ 943.676765][T25408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.753255][T25417] loop9: detected capacity change from 0 to 764 [ 944.085310][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.311798][T25431] nbd: socks must be embedded in a SOCK_ITEM attr [ 944.407603][T25435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.799380][T25448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6835'. [ 944.956915][T25451] loop0: detected capacity change from 0 to 512 [ 944.981925][T25451] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 944.988075][T25451] EXT4-fs (loop0): invalid journal inode [ 944.988167][T25451] EXT4-fs (loop0): can't get journal size [ 945.064294][T25451] EXT4-fs (loop0): 1 truncate cleaned up [ 945.144701][T25451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.302166][T25464] dummy0: entered allmulticast mode [ 945.431775][T25461] dummy0: left allmulticast mode [ 945.488004][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.865465][T25477] loop1: detected capacity change from 0 to 1024 [ 945.870201][T25477] EXT4-fs: Ignoring removed mblk_io_submit option [ 945.897802][T25477] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 945.942893][T25477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.568717][T25495] loop0: detected capacity change from 0 to 4096 [ 946.625179][T18139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.781454][T25495] ntfs3(loop0): ino=9, mi_enum_attr [ 946.781513][T25495] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 946.784271][T25495] ntfs3(loop0): ino=9, mi_enum_attr [ 946.784407][T25495] ntfs3(loop0): ino=b, mi_enum_attr [ 946.784512][T25495] ntfs3(loop0): Failed to load $Extend (-22). [ 946.784548][T25495] ntfs3(loop0): Failed to initialize $Extend. [ 947.042811][T25486] loop9: detected capacity change from 0 to 32768 [ 947.097151][T25486] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6851 (25486) [ 947.130291][T25486] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 947.130397][T25486] BTRFS info (device loop9): using crc32c checksum algorithm [ 947.196678][T25473] loop5: detected capacity change from 0 to 32768 [ 947.305069][T25473] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 947.320813][T25525] loop4: detected capacity change from 0 to 1024 [ 947.326339][T25525] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 947.412841][T25486] BTRFS info (device loop9): enabling ssd optimizations [ 947.412899][T25486] BTRFS info (device loop9): turning on flush-on-commit [ 947.412940][T25486] BTRFS info (device loop9): enabling free space tree [ 947.413013][T25486] BTRFS info (device loop9): enabling auto defrag [ 947.413050][T25486] BTRFS info (device loop9): use lzo compression, level 1 [ 947.413099][T25486] BTRFS info (device loop9): max_inline set to 4096 [ 947.576778][T25532] loop2: detected capacity change from 0 to 512 [ 947.597417][T25532] EXT4-fs: Ignoring removed orlov option [ 947.603392][T25473] XFS (loop5): Ending clean mount [ 947.662376][T25532] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 947.726332][T25473] XFS (loop5): Quotacheck needed: Please wait. [ 947.844231][T25532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6861'. [ 947.932161][T18865] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 947.936757][ T5618] Bluetooth: hci3: ISO packet too small [ 948.084935][T25539] scsi_nl_rcv_msg: discarding partial message [ 948.127943][T25537] loop0: detected capacity change from 0 to 164 [ 948.619024][T25473] XFS (loop5): Quotacheck: Done. [ 948.923575][T18241] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 950.166602][T25574] lo speed is unknown, defaulting to 1000 [ 950.166691][T25574] lo speed is unknown, defaulting to 1000 [ 950.225454][T25574] lo speed is unknown, defaulting to 1000 [ 950.226762][T25574] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 950.226840][T25574] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 950.226952][T25574] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 950.233927][T25574] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 950.585631][T25574] lo speed is unknown, defaulting to 1000 [ 950.609113][T25574] lo speed is unknown, defaulting to 1000 [ 950.620588][T25574] lo speed is unknown, defaulting to 1000 [ 950.630999][T25574] lo speed is unknown, defaulting to 1000 [ 950.646647][T25574] lo speed is unknown, defaulting to 1000 [ 950.662547][T25574] lo speed is unknown, defaulting to 1000 [ 951.174960][T25597] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6892'. [ 951.175000][T25597] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6892'. [ 951.175029][T25597] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 951.456774][T25603] loop4: detected capacity change from 0 to 2048 [ 951.526639][T25603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.756500][T25612] loop5: detected capacity change from 0 to 1024 [ 951.767466][T25612] EXT4-fs: Ignoring removed mblk_io_submit option [ 951.771681][T25612] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 951.816045][T25612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.011336][T18108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.296614][T18241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.476181][T25621] loop9: detected capacity change from 0 to 4096 [ 952.675237][T25621] ntfs3(loop9): ino=19, mi_enum_attr [ 952.675295][T25621] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 952.882906][T25631] loop4: detected capacity change from 0 to 764 [ 952.907592][T25631] rock: directory entry would overflow storage [ 952.907614][T25631] rock: sig=0x5245, size=8, remaining=5 [ 953.547465][T25651] loop5: detected capacity change from 0 to 1024 [ 953.566945][T25651] EXT4-fs: Ignoring removed mblk_io_submit option [ 953.571215][T25651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 953.571607][T25651] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 953.610475][T25651] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.6913: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 953.610579][T25651] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 953.612604][T25651] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.6913: couldn't read orphan inode 11 (err -117) [ 953.615205][T25651] loop5: lost filesystem error report for type 5 error -117 [ 953.676429][T25651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.787240][T25651] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:486: comm syz.5.6913: Invalid block bitmap block 0 in block_group 0 [ 953.791553][T25651] Quota error (device loop5): write_blk: dquota write failed [ 953.797855][T25651] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 953.797956][T25651] EXT4-fs error (device loop5): ext4_acquire_dquot:7068: comm syz.5.6913: Failed to acquire dquot type 0 [ 953.936938][T25656] loop1: detected capacity change from 0 to 256 [ 953.949716][T25656] exfat: Deprecated parameter 'namecase' [ 953.949779][T25656] exfat: Deprecated parameter 'namecase' [ 953.949878][T25656] exfat: Deprecated parameter 'namecase' [ 953.999416][T18368] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 954.027622][T25656] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 954.093886][T18241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.101295][T18241] EXT4-fs error (device loop5): __ext4_get_inode_loc:4915: comm syz-executor: Invalid inode table block 8589934593 in block_group 0 [ 954.101351][T18241] loop5: lost filesystem error report for type 5 error -117 [ 954.181159][T25661] loop4: detected capacity change from 0 to 512 [ 954.196640][T18368] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 954.211476][T18368] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.211558][T18368] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 954.211625][T18368] usb 3-1: config 0 interface 0 has no altsetting 0 [ 954.211691][T18368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.254363][T25661] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 954.254398][T25661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 954.304932][T18368] usb 3-1: config 0 descriptor?? [ 954.320759][T25661] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #16: comm syz.4.6916: invalid indirect mapped block 32768 (level 2) [ 954.320835][T25661] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 954.329999][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 954.330042][ C1] EXT4-fs (loop4): initial error at time 2000000467: ext4_free_branches:1020: inode 16 [ 954.330108][ C1] EXT4-fs (loop4): last error at time 2000000467: ext4_free_branches:1020: inode 16 [ 954.443651][T25661] EXT4-fs (loop4): 1 orphan inode deleted [ 954.443698][T25661] EXT4-fs (loop4): 1 truncate cleaned up [ 954.480557][T25661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 954.758558][T18108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.892687][T18368] hid-multitouch 0003:0EEF:72C4.008E: unknown main item tag 0x0 [ 954.913963][T18368] hid-multitouch 0003:0EEF:72C4.008E: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 955.113187][ T30] usb 3-1: USB disconnect, device number 53 [ 955.266968][T25674] fido_id[25674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 955.359477][T25662] loop9: detected capacity change from 0 to 32768 [ 955.377379][T25662] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6918 (25662) [ 955.497975][T25662] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 955.498042][T25662] BTRFS info (device loop9): using crc32c checksum algorithm [ 955.860909][T25662] BTRFS info (device loop9): setting nodatasum [ 955.860965][T25662] BTRFS info (device loop9): setting nodatacow [ 955.861008][T25662] BTRFS info (device loop9): disabling tree log [ 955.861049][T25662] BTRFS info (device loop9): turning on async discard [ 955.861094][T25662] BTRFS info (device loop9): enabling free space tree [ 955.861135][T25662] BTRFS info (device loop9): max_inline set to 0 [ 956.331551][T18865] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 957.041344][ T4299] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.175373][T25709] loop1: detected capacity change from 0 to 512 [ 957.193206][T25705] loop9: detected capacity change from 0 to 512 [ 957.221930][T25705] EXT4-fs (loop9): Test dummy encryption mode enabled [ 957.276578][T25705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e09d, mo2=0002] [ 957.277153][T25705] System zones: 1-12 [ 957.419623][T25709] EXT4-fs error (device loop1): ext4_validate_block_bitmap:435: comm syz.1.6934: bg 0: block 5: invalid block bitmap [ 957.419698][T25709] loop1: lost filesystem error report for type 5 error -117 [ 957.430235][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 957.430271][ C0] EXT4-fs (loop1): initial error at time 2000000470: ext4_validate_block_bitmap:435 [ 957.430312][ C0] EXT4-fs (loop1): last error at time 2000000470: ext4_validate_block_bitmap:435 [ 957.434441][T25709] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 957.434485][T25709] loop1: lost filesystem error report for type 5 error -117 [ 957.441000][ T30] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 957.442323][T25709] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.6934: invalid indirect mapped block 3 (level 2) [ 957.442391][T25709] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 957.446514][T25709] EXT4-fs (loop1): 2 truncates cleaned up [ 957.451051][T25705] EXT4-fs (loop9): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.454607][T25709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.598749][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 957.599713][ T30] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 957.601139][ T30] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 957.601211][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 957.601272][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.701619][ T30] usb 5-1: config 0 descriptor?? [ 957.911848][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 957.916788][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 957.942505][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 957.998293][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 958.012359][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 958.025618][T18865] EXT4-fs (loop9): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 958.205996][ T30] isku 0003:1E7D:319C.008F: unknown main item tag 0x0 [ 958.206055][ T30] isku 0003:1E7D:319C.008F: unknown main item tag 0x0 [ 958.206100][ T30] isku 0003:1E7D:319C.008F: unknown main item tag 0x0 [ 958.206142][ T30] isku 0003:1E7D:319C.008F: unknown main item tag 0x0 [ 958.206209][ T30] isku 0003:1E7D:319C.008F: unknown main item tag 0x0 [ 958.206254][ T30] isku 0003:1E7D:319C.008F: unknown main item tag 0x0 [ 958.206299][ T30] isku 0003:1E7D:319C.008F: unknown main item tag 0x0 [ 958.206377][ T30] isku 0003:1E7D:319C.008F: unknown main item tag 0x0 [ 958.206420][ T30] isku 0003:1E7D:319C.008F: unknown main item tag 0x0 [ 958.209956][ T30] isku 0003:1E7D:319C.008F: hidraw0: USB HID v0.09 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 958.455699][ T30] usb 5-1: USB disconnect, device number 18 [ 958.586654][T18139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.610888][ T4299] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.857555][T25720] fido_id[25720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 958.927686][ T4299] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.316699][T25714] loop2: detected capacity change from 0 to 32768 [ 959.339707][T25714] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6935 (25714) [ 959.406849][T25714] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 959.406917][T25714] BTRFS info (device loop2): using crc32c checksum algorithm [ 959.635124][T25723] loop9: detected capacity change from 0 to 32768 [ 959.674449][ T4299] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.743910][T25714] BTRFS info (device loop2): enabling ssd optimizations [ 959.743962][T25714] BTRFS info (device loop2): turning on flush-on-commit [ 959.744001][T25714] BTRFS info (device loop2): enabling free space tree [ 959.744052][T25714] BTRFS info (device loop2): enabling auto defrag [ 959.744091][T25714] BTRFS info (device loop2): use lzo compression, level 1 [ 959.744140][T25714] BTRFS info (device loop2): max_inline set to 4096 [ 960.120235][ T5618] Bluetooth: hci5: command tx timeout [ 960.283032][ T5612] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 960.509180][T25756] loop4: detected capacity change from 0 to 8192 [ 960.525739][T18368] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 960.653782][T25756] loop4: p1 p2 p3 p4[DM] [ 960.654082][T25756] loop4: p1 size 835329 extends beyond EOD, truncated [ 960.680523][T18368] usb 6-1: Using ep0 maxpacket: 16 [ 960.692564][T18368] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 960.719494][T18368] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.719569][T18368] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.719626][T18368] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 960.719715][T18368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.776644][T18368] usb 6-1: config 0 descriptor?? [ 960.863495][T25756] loop4: p2 size 327680 extends beyond EOD, truncated [ 960.881145][T25756] loop4: p3 start 1052673 is beyond EOD, truncated [ 960.881198][T25756] loop4: p4 size 262144 extends beyond EOD, truncated [ 961.244509][T25715] rxe_eth0 speed is unknown, defaulting to 1000 [ 961.314407][T18368] hid_parser_main: 35 callbacks suppressed [ 961.314447][T18368] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 961.314496][T18368] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 961.314537][T18368] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 961.314579][T18368] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 961.314624][T18368] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 961.314665][T18368] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 961.314708][T18368] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 961.314750][T18368] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 961.314792][T18368] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 961.314836][T18368] microsoft 0003:045E:07DA.0090: unknown main item tag 0x0 [ 961.478107][T18368] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0090/input/input90 [ 961.707111][T18368] microsoft 0003:045E:07DA.0090: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 961.752313][T18368] usb 6-1: USB disconnect, device number 21 [ 961.801889][ T25] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 961.937904][T25776] loop2: detected capacity change from 0 to 512 [ 961.969674][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 961.972876][ T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 961.972934][ T25] usb 2-1: config 0 has no interface number 0 [ 961.973005][ T25] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 961.973111][ T25] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 961.973190][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.038584][ T25] usb 2-1: config 0 descriptor?? [ 962.039689][T25774] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 962.072023][ T25] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 962.222584][ T5618] Bluetooth: hci5: command tx timeout [ 962.259060][T25776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.259268][T25776] ext4 filesystem being mounted at /1187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.322894][T19443] udevd[19443]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 962.364635][T18640] udevd[18640]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 962.372478][T24049] udevd[24049]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 962.645293][T25792] loop9: detected capacity change from 0 to 1024 [ 962.658211][ T25] usb 2-1: USB disconnect, device number 21 [ 962.672692][T25792] EXT4-fs: Ignoring removed mblk_io_submit option [ 962.673840][T25792] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 962.674209][T25792] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 962.723253][T25792] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #11: comm syz.9.6955: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 962.723397][T25792] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 962.728399][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 962.728438][ C1] EXT4-fs (loop9): initial error at time 2000000475: ext4_ext_check_inode:521: inode 11 [ 962.728487][ C1] EXT4-fs (loop9): last error at time 2000000475: ext4_ext_check_inode:521: inode 11 [ 962.729172][T25792] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.6955: couldn't read orphan inode 11 (err -117) [ 962.729235][T25792] loop9: lost filesystem error report for type 5 error -117 [ 962.768073][T25792] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.903982][T25792] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:486: comm syz.9.6955: Invalid block bitmap block 0 in block_group 0 [ 962.907243][T25792] Quota error (device loop9): write_blk: dquota write failed [ 962.907303][T25792] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 962.907402][T25792] EXT4-fs error (device loop9): ext4_acquire_dquot:7068: comm syz.9.6955: Failed to acquire dquot type 0 [ 962.935278][T25797] loop4: detected capacity change from 0 to 64 [ 962.995115][ T4299] bridge_slave_1: left allmulticast mode [ 962.995157][ T4299] bridge_slave_1: left promiscuous mode [ 962.995430][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.027958][ T4299] bridge_slave_0: left allmulticast mode [ 963.027994][ T4299] bridge_slave_0: left promiscuous mode [ 963.038252][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.264361][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.283893][ T4299] pimreg3: left allmulticast mode [ 963.467243][T18865] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.505463][T18865] EXT4-fs error (device loop9): __ext4_get_inode_loc:4915: comm syz-executor: Invalid inode table block 8589934593 in block_group 0 [ 963.505522][T18865] loop9: lost filesystem error report for type 5 error -117 [ 964.017191][T25815] netlink: 220 bytes leftover after parsing attributes in process `syz.9.6960'. [ 964.017242][T25815] NCSI netlink: No device for ifindex 0 [ 964.134072][T25816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6963'. [ 964.278739][ T5618] Bluetooth: hci5: command tx timeout [ 964.600475][T25829] loop2: detected capacity change from 0 to 256 [ 964.610163][T25829] exfat: Deprecated parameter 'utf8' [ 964.707908][T25829] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 964.976824][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.994447][ T4299] bond_slave_0: left promiscuous mode [ 965.015678][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.028973][ T4299] bond_slave_1: left promiscuous mode [ 965.030790][ T4299] bond0 (unregistering): Released all slaves [ 965.111529][T25715] dummy0 speed is unknown, defaulting to 1000 [ 965.380151][ T4299] tipc: Disabling bearer [ 965.455912][ T4299] tipc: Disabling bearer [ 965.487702][ T4299] tipc: Left network mode [ 965.563763][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 965.645689][T25715] lo speed is unknown, defaulting to 1000 [ 966.360249][ T5618] Bluetooth: hci5: command tx timeout [ 966.716688][T25873] loop9: detected capacity change from 0 to 256 [ 966.960545][ T4299] IPVS: stopping master sync thread 18185 ... [ 967.211359][T25882] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 967.475209][T25886] netlink: 296 bytes leftover after parsing attributes in process `syz.2.6987'. [ 968.064601][T25901] loop9: detected capacity change from 0 to 2048 [ 968.257674][T25901] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.394497][T25915] loop2: detected capacity change from 0 to 256 [ 968.428182][T25915] FAT-fs (loop2): Directory bread(block 1285) failed [ 968.428246][T25915] FAT-fs (loop2): Directory bread(block 1286) failed [ 968.428296][T25915] FAT-fs (loop2): Directory bread(block 1287) failed [ 968.452140][T25915] FAT-fs (loop2): Directory bread(block 1288) failed [ 968.559149][T25915] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 968.647339][T25901] EXT4-fs: can't change dax mount option while remounting [ 968.994304][T18865] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.311849][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 969.312521][T25715] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.312643][T25715] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.312822][T25715] bridge_slave_0: entered allmulticast mode [ 969.347954][T25715] bridge_slave_0: entered promiscuous mode [ 969.372745][T25715] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.372857][T25715] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.373015][T25715] bridge_slave_1: entered allmulticast mode [ 969.433486][T25715] bridge_slave_1: entered promiscuous mode [ 969.765767][T25715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.790182][T25715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.943687][T25939] loop2: detected capacity change from 0 to 128 [ 970.033117][T25939] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 970.062278][T25926] loop5: detected capacity change from 0 to 32768 [ 970.063795][T25939] ext4 filesystem being mounted at /1197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 970.172382][T25926] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 970.324072][T25926] XFS (loop5): Ending clean mount [ 970.355555][T25715] team0: Port device team_slave_0 added [ 970.394344][T25927] loop1: detected capacity change from 0 to 32768 [ 970.412423][T25927] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7000 (25927) [ 970.450058][ T5612] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 970.524231][T25715] team0: Port device team_slave_1 added [ 970.702113][T18241] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 970.743182][T25927] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 970.743258][T25927] BTRFS info (device loop1): using crc32c checksum algorithm [ 970.968279][T25715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.968978][T25715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.969028][T25715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.972743][T25715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.972767][T25715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.972818][T25715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.274763][T25975] loop4: detected capacity change from 0 to 256 [ 971.308189][T25975] exfat: Deprecated parameter 'namecase' [ 971.308287][T25975] exfat: Deprecated parameter 'namecase' [ 971.365064][T25927] BTRFS info (device loop1): enabling ssd optimizations [ 971.365114][T25927] BTRFS info (device loop1): turning on flush-on-commit [ 971.365150][T25927] BTRFS info (device loop1): enabling free space tree [ 971.365189][T25927] BTRFS info (device loop1): enabling auto defrag [ 971.365224][T25927] BTRFS info (device loop1): use lzo compression, level 1 [ 971.365277][T25927] BTRFS info (device loop1): max_inline set to 4096 [ 971.503873][T25975] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 971.514057][T25715] hsr_slave_0: entered promiscuous mode [ 971.525912][T25715] hsr_slave_1: entered promiscuous mode [ 971.564499][T25715] debugfs: 'hsr0' already exists in 'hsr' [ 971.564542][T25715] Cannot create hsr debugfs directory [ 971.849190][ T5784] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 971.867031][T25988] loop5: detected capacity change from 0 to 512 [ 972.023204][ T5784] usb 10-1: Using ep0 maxpacket: 16 [ 972.030674][ T5784] usb 10-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.40 [ 972.035460][ T5784] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 972.058760][ T5784] usb 10-1: string descriptor 0 read error: -22 [ 972.058958][ T5784] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.133007][T25988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.133207][T25988] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 972.442659][T18139] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 972.649282][T18241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.751285][T26001] loop4: detected capacity change from 0 to 512 [ 972.880232][T26001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 972.880468][T26001] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 972.896449][ T5784] cherry 0003:046A:0027.0091: hidraw0: USB HID v0.01 Device [HID 046a:0027] on usb-dummy_hcd.9-1/input0 [ 973.103507][ T5342] usb 10-1: USB disconnect, device number 25 [ 973.225972][T26001] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.7016: No space for directory leaf checksum. Please run e2fsck -D. [ 973.228265][T26001] EXT4-fs error (device loop4): ext4_readdir:224: inode #2: comm syz.4.7016: path /404/file0: directory fails checksum at offset 0 [ 973.269605][ T4299] hsr_slave_0: left promiscuous mode [ 973.341075][ T4299] hsr_slave_1: left promiscuous mode [ 973.342297][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.342365][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.381124][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.381164][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.704040][ T4299] veth1_macvtap: left promiscuous mode [ 973.705647][ T4299] veth0_macvtap: left promiscuous mode [ 973.705790][ T4299] veth1_vlan: left promiscuous mode [ 973.705881][ T4299] veth0_vlan: left promiscuous mode [ 973.737636][T18108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.753122][ T5768] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 973.762669][T26004] fido_id[26004]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 973.931246][ T5768] usb 3-1: Using ep0 maxpacket: 8 [ 973.932142][ T5768] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 973.934078][ T5768] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 132, changing to 11 [ 973.934151][ T5768] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 973.934223][ T5768] usb 3-1: config 0 interface 0 has no altsetting 0 [ 973.934289][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.990367][ T5768] usb 3-1: config 0 descriptor?? [ 974.294412][T26019] loop9: detected capacity change from 0 to 1024 [ 974.343544][T26015] loop5: detected capacity change from 0 to 4096 [ 974.434257][T26019] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 974.436529][T26015] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 974.561113][T26015] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 974.583760][T26015] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 974.775598][ T5768] uclogic 0003:28BD:0042.0092: interface is invalid, ignoring [ 975.079209][ T5775] usb 3-1: USB disconnect, device number 54 [ 975.386099][T26024] loop9: detected capacity change from 0 to 2048 [ 975.458035][T26018] loop4: detected capacity change from 0 to 32768 [ 975.480926][T26024] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.481108][T26024] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 975.526791][T26018] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 975.681202][T26024] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 975.681247][T26024] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 975.725967][T26018] XFS (loop4): Ending clean mount [ 975.886860][ T4299] team0 (unregistering): Port device team_slave_1 removed [ 975.951090][ T4299] team0 (unregistering): Port device team_slave_0 removed [ 976.125811][T18108] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 976.417737][T18865] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.531463][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 977.247808][T26053] loop2: detected capacity change from 0 to 512 [ 978.142101][ T5768] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 978.344400][ T5768] usb 10-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 978.363567][ T5768] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 978.363675][ T5768] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.381574][ T5768] usb 10-1: config 0 descriptor?? [ 978.384557][T26067] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 978.882414][ T5768] uclogic 0003:5543:0005.0093: unknown main item tag 0x0 [ 978.882472][ T5768] uclogic 0003:5543:0005.0093: unknown main item tag 0x0 [ 978.882521][ T5768] uclogic 0003:5543:0005.0093: unknown main item tag 0x0 [ 978.882565][ T5768] uclogic 0003:5543:0005.0093: unknown main item tag 0x0 [ 978.882616][ T5768] uclogic 0003:5543:0005.0093: unknown main item tag 0x0 [ 978.882664][ T5768] uclogic 0003:5543:0005.0093: unknown main item tag 0x0 [ 978.882712][ T5768] uclogic 0003:5543:0005.0093: unknown main item tag 0x0 [ 978.882759][ T5768] uclogic 0003:5543:0005.0093: unknown main item tag 0x0 [ 978.882802][ T5768] uclogic 0003:5543:0005.0093: unknown main item tag 0x0 [ 978.882848][ T5768] uclogic 0003:5543:0005.0093: unknown main item tag 0x0 [ 979.072377][ T5768] uclogic 0003:5543:0005.0093: hidraw0: USB HID v7f.fd Device [HID 5543:0005] on usb-dummy_hcd.9-1/input0 [ 979.103288][ T5768] usb 10-1: USB disconnect, device number 26 [ 979.687566][T26092] fido_id[26092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 980.017479][ T4299] IPVS: stop unused estimator thread 0... [ 980.148539][T26086] loop2: detected capacity change from 0 to 32768 [ 980.189218][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 980.433946][T26086] jfs_strtoUCS: char2uni returned -22. [ 980.433979][T26086] charset = euc-jp, char = 0xfc [ 980.595342][T26112] loop1: detected capacity change from 0 to 512 [ 980.770710][T26112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.770901][T26112] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.885353][T26112] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.7053: No space for directory leaf checksum. Please run e2fsck -D. [ 980.885444][T26112] EXT4-fs error (device loop1): ext4_readdir:224: inode #2: comm syz.1.7053: path /411/file0: directory fails checksum at offset 0 [ 981.131348][T18139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.544421][T26127] loop5: detected capacity change from 0 to 128 [ 981.787905][T26131] loop9: detected capacity change from 0 to 512 [ 981.836455][T26131] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #11: comm syz.9.7059: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 981.836564][T26131] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 981.838399][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 981.838435][ C1] EXT4-fs (loop9): initial error at time 2000000495: ext4_ext_check_inode:521: inode 11 [ 981.838489][ C1] EXT4-fs (loop9): last error at time 2000000495: ext4_ext_check_inode:521: inode 11 [ 981.892484][T26131] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.7059: couldn't read orphan inode 11 (err -117) [ 981.892559][T26131] loop9: lost filesystem error report for type 5 error -117 [ 981.895900][T26131] EXT4-fs (loop9): 1 truncate cleaned up [ 981.924581][T26131] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.043629][T26140] loop1: detected capacity change from 0 to 2048 [ 982.082013][T26140] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 982.111938][T26140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 982.167948][T26140] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 100 with incorrect tag 100 [ 982.459271][T18865] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.706900][ T25] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 983.859521][ T25] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 983.861143][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 983.861217][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.862690][ T25] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 983.862747][ T25] usb 6-1: Manufacturer: syz [ 983.941271][ T25] usb 6-1: config 0 descriptor?? [ 984.105485][T26181] loop2: detected capacity change from 0 to 4096 [ 984.124924][T26181] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 984.285570][T26181] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 984.316528][T26181] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 984.490263][ T25] hid_parser_main: 470 callbacks suppressed [ 984.490338][ T25] cougar 0003:060B:700A.0094: unknown main item tag 0x0 [ 984.490393][ T25] cougar 0003:060B:700A.0094: unknown main item tag 0x0 [ 984.490448][ T25] cougar 0003:060B:700A.0094: unknown main item tag 0x0 [ 984.490494][ T25] cougar 0003:060B:700A.0094: unknown main item tag 0x0 [ 984.490546][ T25] cougar 0003:060B:700A.0094: unknown main item tag 0x0 [ 984.557727][ T25] cougar 0003:060B:700A.0094: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 984.574539][T25715] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 984.612798][T25715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 984.613998][T25715] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 984.694286][T25715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 984.767317][T25715] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 984.826675][ T5342] usb 6-1: USB disconnect, device number 22 [ 984.903587][T25715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 985.061610][T25715] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 985.110656][T26201] loop9: detected capacity change from 0 to 128 [ 985.161391][T25715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 985.249626][T26201] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 985.289039][T26201] ext4 filesystem being mounted at /388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 985.319406][T26189] rxe_eth0 speed is unknown, defaulting to 1000 [ 985.375021][T26198] fido_id[26198]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 985.785974][T18865] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 985.926578][T25715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.107607][T25715] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.193628][T18532] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.193761][T18532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.237246][T26185] loop4: detected capacity change from 0 to 32768 [ 986.237977][T26222] loop9: detected capacity change from 0 to 512 [ 986.263933][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.264059][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.365280][T26222] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 986.367836][T26222] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #13: comm syz.9.7085: invalid indirect mapped block 2683928664 (level 1) [ 986.367913][T26222] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 986.368372][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 986.368404][ C0] EXT4-fs (loop9): initial error at time 2000000499: ext4_free_branches:1020: inode 13 [ 986.368456][ C0] EXT4-fs (loop9): last error at time 2000000499: ext4_free_branches:1020: inode 13 [ 986.393091][T26222] EXT4-fs (loop9): 1 truncate cleaned up [ 986.412614][T26185] JBD2: Ignoring recovery information on journal [ 986.454770][T26185] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 986.454808][T26185] JBD2: bad block at offset 32 [ 986.483707][T26222] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.546919][T26185] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 986.860513][T26222] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 987.142980][T26222] EXT4-fs (loop9): can't enable nombcache during remount [ 987.286709][T18865] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.549137][T26189] dummy0 speed is unknown, defaulting to 1000 [ 988.154676][T18108] ocfs2: Unmounting device (7,4) on (node local) [ 988.232612][T26253] [U]  [ 988.616036][T26257] loop5: detected capacity change from 0 to 1024 [ 988.962033][T26189] lo speed is unknown, defaulting to 1000 [ 989.210219][T18647] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 989.312508][T26274] loop5: detected capacity change from 0 to 256 [ 989.364396][T26278] binder: 26277:26278 ioctl 4018620d 0 returned -22 [ 989.381745][T18647] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 989.394920][T18647] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.394988][T18647] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.395062][T18647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.907031][T26286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7103'. [ 990.014350][T25715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.051702][T18647] hid-picolcd 0003:04D8:C002.0095: No report with id 0x11 found [ 990.289676][ T5784] usb 3-1: USB disconnect, device number 55 [ 990.375774][T26297] loop4: detected capacity change from 0 to 64 [ 990.458597][T26297] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 991.522519][T26320] loop4: detected capacity change from 0 to 512 [ 991.626768][T26320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.626972][T26320] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 991.763871][T25715] veth0_vlan: entered promiscuous mode [ 991.794941][T25715] veth1_vlan: entered promiscuous mode [ 991.837600][T26328] loop5: detected capacity change from 0 to 256 [ 991.853196][T26328] vfat: Deprecated parameter 'posix' [ 991.853236][T26328] FAT-fs: "posix" option is obsolete, not supported now [ 991.872659][T25715] veth0_macvtap: entered promiscuous mode [ 991.894325][T25715] veth1_macvtap: entered promiscuous mode [ 991.931116][T25715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.970249][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.085107][T26331] loop9: detected capacity change from 0 to 2048 [ 992.092323][T25715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.188826][ T194] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.191952][ T32] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.197157][ T32] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.209044][ T32] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.384042][T26336] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 992.474120][T26331] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.474322][T26331] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.873004][T18108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.962225][T18865] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.972978][T26343] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7119'. [ 993.217282][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.217347][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.627637][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.627674][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.943395][T26364] loop4: detected capacity change from 0 to 128 [ 994.052635][T26364] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 994.053561][T26364] ext4 filesystem being mounted at /424/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 994.334415][T18108] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 994.521260][T26374] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6929'. [ 994.521352][T26374] netlink: 'syz.6.6929': attribute type 1 has an invalid length. [ 994.749458][T26360] loop2: detected capacity change from 0 to 32768 [ 994.920611][T26381] tipc: Enabling of bearer rejected, failed to enable media [ 996.461932][T26344] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 996.620546][T26344] usb 5-1: Using ep0 maxpacket: 16 [ 996.629177][T26344] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 996.642080][T26344] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.642151][T26344] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.642208][T26344] usb 5-1: config 0 interface 0 has no altsetting 0 [ 996.642273][T26344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.652548][T26344] usb 5-1: config 0 descriptor?? [ 997.237350][T26344] mcp2221 0003:04D8:00DD.0096: unbalanced delimiter at end of report description [ 997.238235][T26344] mcp2221 0003:04D8:00DD.0096: can't parse reports [ 997.252744][T26344] mcp2221 0003:04D8:00DD.0096: probe with driver mcp2221 failed with error -22 [ 997.268476][ T5775] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 997.365533][T26406] loop1: detected capacity change from 0 to 32768 [ 997.418530][ T5775] usb 10-1: Using ep0 maxpacket: 32 [ 997.419481][ T5775] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 997.420814][ T5775] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 997.420872][ T5775] usb 10-1: config 0 has no interface number 0 [ 997.420934][ T5775] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 997.420995][ T5775] usb 10-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 997.421051][ T5775] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 997.421109][ T5775] usb 10-1: config 0 interface 196 has no altsetting 0 [ 997.423690][ T5775] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.423738][ T5775] usb 10-1: Product: syz [ 997.423772][ T5775] usb 10-1: Manufacturer: syz [ 997.423811][ T5775] usb 10-1: SerialNumber: syz [ 997.428102][ T5775] usb 10-1: config 0 descriptor?? [ 997.535716][T26434] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 997.558026][T26406] non-latin1 character 0xffff found in JFS file name [ 997.558056][T26406] mount with iocharset=utf8 to access [ 997.673464][T26344] usb 5-1: USB disconnect, device number 19 [ 997.885044][T26439] loop2: detected capacity change from 0 to 4096 [ 997.903984][T26439] ntfs3(loop2): ino=3, mi_enum_attr [ 997.982498][ T5775] ipheth 10-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 997.982890][ T5775] ipheth 10-1:0.196: probe with driver ipheth failed with error -22 [ 998.270232][ T5784] usb 10-1: USB disconnect, device number 27 [ 998.401678][T26439] ntfs3(loop2): ino=9, attr_set_size_ex [ 998.827203][T26463] loop6: detected capacity change from 0 to 1024 [ 998.844303][T26463] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 999.171817][ T5775] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 999.331267][ T5775] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 999.332647][ T5775] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 999.332704][ T5775] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 999.332754][ T5775] usb 5-1: config 220 has no interface number 2 [ 999.332847][ T5775] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1023 [ 999.332916][ T5775] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 999.332985][ T5775] usb 5-1: config 220 interface 0 has no altsetting 0 [ 999.333032][ T5775] usb 5-1: config 220 interface 76 has no altsetting 0 [ 999.333080][ T5775] usb 5-1: config 220 interface 1 has no altsetting 0 [ 999.431421][ T5775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.431478][ T5775] usb 5-1: Product: syz [ 999.431511][ T5775] usb 5-1: Manufacturer: syz [ 999.431550][ T5775] usb 5-1: SerialNumber: syz [ 999.462692][T26476] loop9: detected capacity change from 0 to 256 [ 999.667802][T26480] xt_time: unknown flags 0xf4 [ 999.758507][ T5784] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 999.793942][ T5775] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 999.794027][ T5775] uvcvideo 5-1:220.0: No valid video chain found. [ 999.794162][ T5775] usb 5-1: selecting invalid altsetting 0 [ 999.871588][ T5775] usb 5-1: selecting invalid altsetting 0 [ 999.871644][ T5775] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 999.876421][ T5775] usb 5-1: USB disconnect, device number 20 [ 999.919147][ T5784] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 999.920538][ T5784] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 999.920595][ T5784] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 999.923320][ T5784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.923367][ T5784] usb 7-1: Product: syz [ 999.923407][ T5784] usb 7-1: Manufacturer: syz [ 999.923442][ T5784] usb 7-1: SerialNumber: syz [ 1000.280888][ T5858] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1000.398489][ T25] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1000.453643][ T5858] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1000.455447][ T5858] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1000.455516][ T5858] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1000.455581][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1000.455644][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.481340][ T5858] usb 3-1: config 0 descriptor?? [ 1000.484202][T26484] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1000.494563][ C1] usb 7-1: check_urb_status: overflow actual length is 128 [ 1000.494614][ C1] usb 7-1: arpc in-urb error -75 (dropped) [ 1000.571122][ T25] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1000.577624][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.577674][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1000.577793][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.624753][ T25] usb 6-1: config 0 descriptor?? [ 1000.645376][ T25] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1000.645477][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 1000.680080][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1000.681070][ T25] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1000.681214][ T25] usb 6-1: media controller created [ 1000.684195][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1000.733710][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 1000.733849][ T25] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1000.752096][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input92 [ 1000.803279][ T5784] usb 7-1: failed to set cport flags for port 0 [ 1000.803483][ T5784] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 1000.911099][ T5784] es2_ap_driver 7-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1000.923265][T26487] dibusb: i2c wr: len=61 is too big! [ 1000.923265][T26487] [ 1000.947919][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 1000.947961][ T25] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1000.951756][ T25] usb 6-1: USB disconnect, device number 23 [ 1000.975045][ T5784] usb 7-1: USB disconnect, device number 29 [ 1001.180849][ T5858] lenovo 0003:17EF:60EE.0097: ignoring exceeding usage max [ 1001.250484][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1001.345303][ T5858] lenovo 0003:17EF:60EE.0097: hidraw0: USB HID v0.11 Joystick [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 1001.385315][ T5858] usb 3-1: USB disconnect, device number 56 [ 1001.448443][ T5784] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1001.559032][ T30] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1001.599159][ T5784] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1001.600878][ T5784] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.600969][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.604987][ T5784] usb 5-1: config 0 descriptor?? [ 1001.647048][ T5784] pwc: Askey VC010 type 2 USB webcam detected. [ 1001.717271][T26507] fido_id[26507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1001.733947][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 1001.734895][ T30] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 1001.736468][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1001.736570][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1001.736651][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.797066][ T30] usb 2-1: config 0 descriptor?? [ 1001.926718][T26511] loop6: detected capacity change from 0 to 8 [ 1002.180208][T26511] SQUASHFS error: Unable to read directory block [1d0:74] [ 1002.303850][ T30] betop 0003:11C2:2208.0098: no output reports found [ 1002.315685][ T5784] pwc: recv_control_msg error -71 req 02 val 2700 [ 1002.323282][ T5784] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1002.331109][ T30] betop 0003:11C2:2208.0098: hidraw0: USB HID v0.00 Joystick [HID 11c2:2208] on usb-dummy_hcd.1-1/input0 [ 1002.344685][ T5784] pwc: recv_control_msg error -71 req 04 val 1000 [ 1002.345203][ T5784] pwc: recv_control_msg error -71 req 04 val 1300 [ 1002.345700][ T5784] pwc: recv_control_msg error -71 req 04 val 1400 [ 1002.346145][ T5784] pwc: recv_control_msg error -71 req 02 val 2000 [ 1002.346673][ T5784] pwc: recv_control_msg error -71 req 02 val 2100 [ 1002.385490][ T5784] pwc: recv_control_msg error -71 req 04 val 1500 [ 1002.387428][ T5784] pwc: recv_control_msg error -71 req 02 val 2500 [ 1002.402652][ T5784] pwc: recv_control_msg error -71 req 02 val 2400 [ 1002.409879][ T5784] pwc: recv_control_msg error -71 req 02 val 2600 [ 1002.412774][ T5784] pwc: recv_control_msg error -71 req 02 val 2900 [ 1002.413246][ T5784] pwc: recv_control_msg error -71 req 02 val 2800 [ 1002.413879][ T5784] pwc: recv_control_msg error -71 req 04 val 1100 [ 1002.415710][ T5784] pwc: recv_control_msg error -71 req 04 val 1200 [ 1002.505436][ T5784] pwc: Registered as video103. [ 1002.510451][T26492] loop9: detected capacity change from 0 to 32768 [ 1002.522543][T26492] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.7168 (26492) [ 1002.543955][ T5784] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input95 [ 1002.559070][ T5784] usb 5-1: USB disconnect, device number 21 [ 1002.596241][ T5763] usb 2-1: USB disconnect, device number 22 [ 1002.708255][T26492] BTRFS info (device loop9): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 1002.710512][T26492] BTRFS info (device loop9): using xxhash64 checksum algorithm [ 1003.015059][T26492] BTRFS info (device loop9): enabling ssd optimizations [ 1003.015107][T26492] BTRFS info (device loop9): turning on async discard [ 1003.015147][T26492] BTRFS info (device loop9): enabling free space tree [ 1003.282010][T26519] fido_id[26519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1003.312718][T26541] loop2: detected capacity change from 0 to 512 [ 1003.331009][T26541] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1003.331042][T26541] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1003.380845][T26541] EXT4-fs (loop2): 1 truncate cleaned up [ 1003.406797][T26541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.681788][T18865] BTRFS info (device loop9): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 1003.841354][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.952703][T26549] loop5: detected capacity change from 0 to 4096 [ 1003.968787][T26549] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1004.225816][T26549] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 1004.226236][T26549] ntfs3(loop5): ino=5, mi_enum_attr [ 1004.837770][T26569] loop4: detected capacity change from 0 to 512 [ 1004.868698][T26569] EXT4-fs: Ignoring removed mblk_io_submit option [ 1004.936957][T26569] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1004.945168][T26569] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1004.988158][T26569] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1004.988594][T26569] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1005.282400][T26569] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:486: comm syz.4.7187: Invalid block bitmap block 0 in block_group 0 [ 1005.282476][T26569] loop4: lost filesystem error report for type 5 error -117 [ 1005.288370][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1005.288409][ C0] EXT4-fs (loop4): last error at time 2000000518: ext4_read_block_bitmap_nowait:486 [ 1005.527943][T26569] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:486: comm syz.4.7187: Invalid block bitmap block 0 in block_group 0 [ 1005.528030][T26569] loop4: lost filesystem error report for type 5 error -117 [ 1005.717420][T26569] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:486: comm syz.4.7187: Invalid block bitmap block 0 in block_group 0 [ 1005.717510][T26569] loop4: lost filesystem error report for type 5 error -117 [ 1005.750358][T26569] Quota error (device loop4): write_blk: dquota write failed [ 1005.750485][T26569] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1005.750546][T26569] EXT4-fs error (device loop4): ext4_acquire_dquot:7068: comm syz.4.7187: Failed to acquire dquot type 1 [ 1005.750598][T26569] loop4: lost filesystem error report for type 5 error -28 [ 1005.751651][T26569] EXT4-fs (loop4): 1 orphan inode deleted [ 1005.767456][ T13] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 1005.767571][ T13] EXT4-fs error (device loop4): ext4_release_dquot:7104: comm kworker/u8:1: Failed to release dquot type 1 [ 1005.767613][ T13] loop4: lost filesystem error report for type 5 error -117 [ 1005.804366][T26569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1005.926770][T26554] loop1: detected capacity change from 0 to 32768 [ 1006.337005][T18108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.356907][T26554] read_mapping_page failed! [ 1006.356935][T26554] ialloc: diAlloc returned -5! [ 1006.363686][T26584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7190'. [ 1006.543453][T26566] loop6: detected capacity change from 0 to 32768 [ 1006.568638][T26566] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7185 (26566) [ 1006.629086][T26566] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1006.629150][T26566] BTRFS info (device loop6): using crc32c checksum algorithm [ 1006.642514][T26344] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1006.783332][T26566] BTRFS info (device loop6): enabling ssd optimizations [ 1006.783389][T26566] BTRFS info (device loop6): turning on async discard [ 1006.783430][T26566] BTRFS info (device loop6): enabling free space tree [ 1006.804366][T26606] loop5: detected capacity change from 0 to 512 [ 1006.806060][T26606] EXT4-fs: Ignoring removed i_version option [ 1006.809932][T26606] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1006.810169][T26344] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1006.810730][T26606] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1006.811554][T26344] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1006.811608][T26344] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1006.811662][T26344] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1006.814773][T26344] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.814822][T26344] usb 10-1: Product: syz [ 1006.814858][T26344] usb 10-1: Manufacturer: syz [ 1006.814893][T26344] usb 10-1: SerialNumber: syz [ 1006.838669][T26344] hub 10-1:1.0: bad descriptor, ignoring hub [ 1006.838720][T26344] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1006.840069][T26606] EXT4-fs (loop5): 1 truncate cleaned up [ 1006.883778][T26606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.967878][T26606] EXT4-fs warning (device loop5): ext4_group_extend:1890: can't read last block, resize aborted [ 1007.195217][T26344] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1007.252943][T18241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.544611][T25715] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1008.045689][T26623] tmpfs: Using encoding : utf8-12.1.0 [ 1008.093282][ T5615] usb 10-1: USB disconnect, device number 28 [ 1008.247956][T26626] loop1: detected capacity change from 0 to 512 [ 1008.258231][T26626] EXT4-fs: Ignoring removed nobh option [ 1008.294188][T26627] loop5: detected capacity change from 0 to 512 [ 1008.297705][T26627] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1008.316927][ T5615] usblp0: removed [ 1008.385223][T26627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e11c, mo2=0102] [ 1008.385580][T26627] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1008.400109][T26627] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #11: comm syz.5.7201: attempt to clear invalid blocks 1024 len 1 [ 1008.400185][T26627] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1008.408346][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1008.408388][ C0] EXT4-fs (loop5): initial error at time 2000000521: ext4_clear_blocks:874: inode 11 [ 1008.408439][ C0] EXT4-fs (loop5): last error at time 2000000521: ext4_clear_blocks:874: inode 11 [ 1008.498213][T26627] EXT4-fs error (device loop5): ext4_validate_block_bitmap:444: comm syz.5.7201: bg 0: block 361: padding at end of block bitmap is not set [ 1008.526715][T26627] loop5: lost filesystem error report for type 5 error -117 [ 1008.532207][T26627] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1008.532256][T26627] loop5: lost filesystem error report for type 5 error -117 [ 1008.585516][T26626] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 1008.585567][T26626] loop1: lost filesystem error report for type 5 error -12 [ 1008.588650][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1008.588685][ C1] EXT4-fs (loop1): initial error at time 2000000521: ext4_process_orphan:346 [ 1008.588724][ C1] EXT4-fs (loop1): last error at time 2000000521: ext4_process_orphan:346 [ 1008.641103][T26626] EXT4-fs (loop1): 2 truncates cleaned up [ 1008.643707][T26626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.659080][T26627] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.7201: invalid indirect mapped block 1811939328 (level 0) [ 1008.659163][T26627] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1008.663801][T26627] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.7201: invalid indirect mapped block 2185560079 (level 1) [ 1008.663873][T26627] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1008.726220][T26634] sctp: [Deprecated]: syz.2.7202 (pid 26634) Use of int in max_burst socket option deprecated. [ 1008.726220][T26634] Use struct sctp_assoc_value instead [ 1008.793624][T26627] EXT4-fs (loop5): 1 truncate cleaned up [ 1008.825447][T26627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1009.072475][T26624] EXT4-fs error (device loop1): ext4_validate_block_bitmap:435: comm syz.1.7193: bg 0: block 5: invalid block bitmap [ 1009.185630][T26627] EXT4-fs warning (device loop5): dx_probe:859: inode #2: comm syz.5.7201: dx entry: limit 0 != root limit 125 [ 1009.185701][T26627] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.7201: Corrupt directory, running e2fsck is recommended [ 1009.271241][T26624] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1009.271297][T26624] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1009.271297][T26624] [ 1009.271325][T26624] EXT4-fs (loop1): Total free blocks count 0 [ 1009.271351][T26624] EXT4-fs (loop1): Free/Dirty block details [ 1009.271396][T26624] EXT4-fs (loop1): free_blocks=0 [ 1009.271444][T26624] EXT4-fs (loop1): dirty_blocks=1 [ 1009.271468][T26624] EXT4-fs (loop1): Block reservation details [ 1009.271491][T26624] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1009.293954][T18241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1009.432399][T26646] ip_tables: iptables: counters copy to user failed while replacing table [ 1009.732445][T26653] loop9: detected capacity change from 0 to 128 [ 1009.816633][T26653] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1009.816719][T26653] hpfs: filesystem error: improperly stopped [ 1009.816750][T26653] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1009.816784][T26653] hpfs: You really don't want any checks? You are crazy... [ 1009.817182][T26653] hpfs: hpfs_map_sector(): read error [ 1009.817205][T26653] hpfs: code page support is disabled [ 1009.821052][T26653] hpfs: hpfs_map_4sectors(): unaligned read [ 1009.821163][T26653] hpfs: hpfs_map_4sectors(): unaligned read [ 1009.821185][T26653] hpfs: filesystem error: unable to find root dir [ 1009.918156][T26653] hpfs: hpfs_map_4sectors(): unaligned read [ 1009.951245][T18139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.291647][T26665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7212'. [ 1010.817811][T26669] loop6: detected capacity change from 0 to 4096 [ 1010.842406][T26669] ntfs3(loop6): ino=3, mi_enum_attr [ 1011.195340][T26669] ntfs3(loop6): ino=9, attr_set_size_ex [ 1011.221506][T26660] loop9: detected capacity change from 0 to 32768 [ 1011.516022][T26660] jfs_lookup: iget failed on inum 5 [ 1011.516315][T26660] jfs_lookup: iget failed on inum 5 [ 1011.572004][T26654] loop5: detected capacity change from 0 to 32768 [ 1011.844505][T26688] loop4: detected capacity change from 0 to 1024 [ 1011.868832][T26688] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1012.330643][ T31] audit: type=1326 audit(2000000525.510:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26694 comm="syz.2.7225" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa42559e559 code=0x0 [ 1012.582356][T26704] loop1: detected capacity change from 0 to 1024 [ 1012.714902][T26704] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 1012.714993][T26704] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1012.715037][T26704] EXT4-fs error (device loop1): ext4_acquire_dquot:7068: comm syz.1.7227: Failed to acquire dquot type 0 [ 1012.715090][T26704] loop1: lost filesystem error report for type 5 error -117 [ 1012.720134][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1012.720169][ C0] EXT4-fs (loop1): initial error at time 2000000525: ext4_acquire_dquot:7068 [ 1012.720209][ C0] EXT4-fs (loop1): last error at time 2000000525: ext4_acquire_dquot:7068 [ 1012.721289][ T5858] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1012.760781][T26704] EXT4-fs error (device loop1): mb_free_blocks:2046: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1012.760965][T26704] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #13: comm syz.1.7227: corrupted inode contents [ 1012.761026][T26704] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1012.766226][T26704] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #13: comm syz.1.7227: mark_inode_dirty error [ 1012.766289][T26704] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1012.767799][T26704] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #13: comm syz.1.7227: corrupted inode contents [ 1012.767861][T26704] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1012.771688][T26704] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.7227: mark_inode_dirty error [ 1012.771748][T26704] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1012.775185][T26704] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #13: comm syz.1.7227: corrupted inode contents [ 1012.775246][T26704] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1012.776040][T26704] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 1012.776085][T26704] loop1: lost filesystem error report for type 5 error -117 [ 1012.776664][T26704] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #13: comm syz.1.7227: corrupted inode contents [ 1012.776725][T26704] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1012.779700][T26704] EXT4-fs error (device loop1): ext4_truncate:4721: inode #13: comm syz.1.7227: mark_inode_dirty error [ 1012.779760][T26704] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1012.781213][T26704] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 1012.781261][T26704] loop1: lost filesystem error report for type 5 error -117 [ 1012.785137][T26704] EXT4-fs (loop1): 1 truncate cleaned up [ 1012.795836][T26704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.892593][ T5858] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1012.895359][ T5858] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1012.895425][ T5858] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1012.923664][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.923721][ T5858] usb 5-1: Product: syz [ 1012.923758][ T5858] usb 5-1: Manufacturer: syz [ 1012.923796][ T5858] usb 5-1: SerialNumber: syz [ 1013.136155][T26704] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 1013.136283][T26704] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1013.136328][T26704] EXT4-fs error (device loop1): ext4_acquire_dquot:7068: comm syz.1.7227: Failed to acquire dquot type 0 [ 1013.516676][T18139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.575580][ C0] usb 5-1: check_urb_status: overflow actual length is 128 [ 1013.575635][ C0] usb 5-1: arpc in-urb error -75 (dropped) [ 1013.694272][T26724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7236'. [ 1013.782112][ T5858] usb 5-1: failed to set cport flags for port 0 [ 1013.782301][ T5858] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 1013.961423][ T5858] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1014.019417][ T5858] usb 5-1: USB disconnect, device number 22 [ 1014.189874][ T5784] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1014.340908][ T5784] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1014.347118][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.347173][ T5784] usb 2-1: Product: syz [ 1014.347208][ T5784] usb 2-1: Manufacturer: syz [ 1014.347247][ T5784] usb 2-1: SerialNumber: syz [ 1014.404137][ T5784] ums-karma 2-1:1.0: USB Mass Storage device detected [ 1014.465020][ T5784] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1014.465020][ T5784] Please send a copy of this message to and [ 1014.517468][T26741] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 1014.908177][ T5784] scsi host1: usb-storage 2-1:1.0 [ 1015.196087][T26505] usb 2-1: USB disconnect, device number 23 [ 1015.271089][T18368] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1015.473884][T18368] usb 5-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.00 [ 1015.475359][T18368] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1015.475455][T18368] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1015.475525][T18368] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1015.475591][T18368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.495065][T18368] usb 5-1: config 0 descriptor?? [ 1016.010595][T18368] hid-generic 0003:0EEF:720C.0099: unknown main item tag 0x0 [ 1016.010657][T18368] hid-generic 0003:0EEF:720C.0099: unknown main item tag 0x3 [ 1016.065491][T18368] hid-generic 0003:0EEF:720C.0099: hidraw0: USB HID v0.11 Device [HID 0eef:720c] on usb-dummy_hcd.4-1/input0 [ 1016.136510][T26775] loop1: detected capacity change from 0 to 1024 [ 1016.310757][T26344] usb 5-1: USB disconnect, device number 23 [ 1016.407413][T26746] loop9: detected capacity change from 0 to 32768 [ 1016.457634][T26755] loop6: detected capacity change from 0 to 32768 [ 1016.483351][T26755] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7244 (26755) [ 1016.533500][T26755] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1016.533568][T26755] BTRFS info (device loop6): using blake2b checksum algorithm [ 1016.598072][T26775] hfsplus: xattr search failed [ 1016.787161][T26792] read_mapping_page failed! [ 1016.806262][T26778] fido_id[26778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1016.937637][T26755] BTRFS info (device loop6): enabling ssd optimizations [ 1016.937691][T26755] BTRFS info (device loop6): turning on async discard [ 1016.937730][T26755] BTRFS info (device loop6): enabling free space tree [ 1016.937772][T26755] BTRFS info (device loop6): use zstd compression, level 3 [ 1017.126714][T25715] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1017.739974][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7255'. [ 1018.047145][T26804] loop9: detected capacity change from 0 to 4096 [ 1018.097824][T26804] ntfs3(loop9): ino=3, mi_enum_attr [ 1018.681657][T26804] ntfs3(loop9): ino=9, attr_set_size_ex [ 1019.263943][T26832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7265'. [ 1019.474173][T26834] loop5: detected capacity change from 0 to 64 [ 1019.685730][T26802] loop2: detected capacity change from 0 to 32768 [ 1019.740374][T26802] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1019.902434][T26802] XFS (loop2): Ending clean mount [ 1020.197154][T26842] loop1: detected capacity change from 0 to 4096 [ 1020.221461][T26842] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1020.421935][T26842] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1020.426129][T26842] ntfs3(loop1): Inode r=b is not in use! [ 1020.426264][T26842] ntfs3(loop1): Failed to load $Extend (-116). [ 1020.426323][T26842] ntfs3(loop1): Failed to initialize $Extend. [ 1020.580375][ T5612] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1021.601071][T26877] loop9: detected capacity change from 0 to 512 [ 1021.745617][T26857] loop5: detected capacity change from 0 to 32768 [ 1021.827921][T26877] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.828081][T26877] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.110555][T26857] read_mapping_page failed! [ 1022.110586][T26857] ERROR: (device loop5): dbDiscardAG: -EIO [ 1022.110586][T26857] [ 1022.168639][T26857] ERROR: (device loop5): remounting filesystem as read-only [ 1022.381086][T26893] loop2: detected capacity change from 0 to 16 [ 1022.484003][T18865] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.708455][ T5784] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1022.858374][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 1022.859329][ T5784] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1022.861024][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.861086][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.861133][ T5784] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1022.861204][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.867100][ T5784] usb 2-1: config 0 descriptor?? [ 1023.120198][T26905] loop6: detected capacity change from 0 to 512 [ 1023.123416][T26905] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1023.123441][T26905] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1023.175963][T26905] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #16: comm syz.6.7282: invalid indirect mapped block 4294967295 (level 0) [ 1023.176062][T26905] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1023.177078][T26905] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #16: comm syz.6.7282: invalid indirect mapped block 4294967295 (level 1) [ 1023.177138][T26905] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1023.178384][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 1023.178417][ C1] EXT4-fs (loop6): initial error at time 2000000536: ext4_free_branches:1020: inode 16 [ 1023.178469][ C1] EXT4-fs (loop6): last error at time 2000000536: ext4_free_branches:1020: inode 16 [ 1023.249989][T18368] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1023.420651][T18368] usb 10-1: Using ep0 maxpacket: 32 [ 1023.426550][T18368] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1023.440303][T26905] EXT4-fs (loop6): 1 orphan inode deleted [ 1023.440347][T26905] EXT4-fs (loop6): 1 truncate cleaned up [ 1023.443590][T26905] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.476723][T18368] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.476774][T18368] usb 10-1: Product: syz [ 1023.476803][T18368] usb 10-1: Manufacturer: syz [ 1023.476831][T18368] usb 10-1: SerialNumber: syz [ 1023.509548][ T5784] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 1023.509598][ T5784] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 1023.509636][ T5784] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 1023.509673][ T5784] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 1023.509708][ T5784] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 1023.509742][ T5784] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 1023.509775][ T5784] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 1023.509809][ T5784] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 1023.509842][ T5784] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 1023.509876][ T5784] microsoft 0003:045E:07DA.009A: unknown main item tag 0x0 [ 1023.575328][T18368] usb 10-1: config 0 descriptor?? [ 1023.627540][ T5784] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.009A/input/input96 [ 1023.657594][T18368] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1023.657695][T18368] dvb-usb: bulk message failed: -22 (4/0) [ 1023.657715][T18368] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1023.657824][T18368] dvb-usb: bulk message failed: -22 (5/0) [ 1023.657843][T18368] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1023.710183][ T5784] microsoft 0003:045E:07DA.009A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1023.762028][T18368] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1023.788551][T18368] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1023.788629][T18368] usb 10-1: media controller created [ 1023.837064][T26887] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.7282: iget: bad extra_isize 46 (inode size 256) [ 1023.917666][T26903] dvb-usb: bulk message failed: -22 (7/0) [ 1023.917705][T26903] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1023.917771][T26903] ttusb2: i2c transfer failed. [ 1024.030347][T18368] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1024.046784][ T5858] usb 2-1: USB disconnect, device number 24 [ 1024.294224][T18368] usb 10-1: selecting invalid altsetting 3 [ 1024.294263][T18368] ttusb2: set interface to alts=3 failed [ 1024.392397][T26920] fido_id[26920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1024.626712][T18368] DVB: Unable to find symbol tda10086_attach() [ 1024.626740][T18368] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1024.637820][T18368] dvb-usb: bulk message failed: -22 (4/0) [ 1024.637855][T18368] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1024.638009][T18368] dvb-usb: bulk message failed: -22 (5/0) [ 1024.638039][T18368] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1024.638121][T18368] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1024.646033][T18368] usb 10-1: USB disconnect, device number 29 [ 1024.659503][T26344] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1024.804839][T26344] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 1024.806272][T26344] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1024.806331][T26344] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1024.806383][T26344] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1024.806435][T26344] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1024.825699][T26344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.825748][T26344] usb 5-1: Product: syz [ 1024.825776][T26344] usb 5-1: Manufacturer: syz [ 1024.825804][T26344] usb 5-1: SerialNumber: syz [ 1024.864942][T26927] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1024.865149][T26927] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1024.917536][T26344] ums-onetouch 5-1:1.0: USB Mass Storage device detected [ 1025.035258][T18368] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1025.093867][T26344] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/input/input97 [ 1025.093982][T26344] input input97: usb_submit_urb failed [ 1025.194779][T26940] binder: 26939:26940 ioctl 541b 0 returned -22 [ 1025.342156][T26344] input: failed to attach handler kbd to device input97, error: -5 [ 1025.344348][ T4961] input input97: usb_submit_urb failed [ 1025.359727][T26344] scsi host1: usb-storage 5-1:1.0 [ 1025.391869][ T4961] input input97: usb_submit_urb failed [ 1025.442685][T25715] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.582063][T26344] usb 5-1: USB disconnect, device number 24 [ 1026.147195][T26966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7305'. [ 1026.188426][ T5784] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1026.242481][T26968] loop4: detected capacity change from 0 to 8 [ 1026.339404][ T5784] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1026.343302][ T5784] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1026.343349][ T5784] usb 7-1: config 0 has no interface number 0 [ 1026.343431][ T5784] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1026.383493][ T5784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.383554][ T5784] usb 7-1: Product: syz [ 1026.383580][ T5784] usb 7-1: Manufacturer: syz [ 1026.383603][ T5784] usb 7-1: SerialNumber: syz [ 1026.415968][ T5784] usb 7-1: config 0 descriptor?? [ 1026.417402][ T31] audit: type=1326 audit(2000000539.590:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26970 comm="syz.1.7306" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e6499e559 code=0x0 [ 1027.002896][T26992] loop9: detected capacity change from 0 to 64 [ 1027.035067][T26991] loop2: detected capacity change from 0 to 256 [ 1027.077747][ T5784] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1027.100678][ T5784] usb 7-1: USB disconnect, device number 30 [ 1027.187987][T26994] ip_tables: iptables: counters copy to user failed while replacing table [ 1028.802021][T27033] loop2: detected capacity change from 0 to 8192 [ 1028.806957][T27033] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1028.895440][T26344] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1028.918437][ T5784] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1029.070170][T26344] usb 7-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1029.071527][ T5784] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1029.073711][ T5784] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1029.073782][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 1029.073832][ T5784] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1029.073900][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.074911][T26344] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.087267][T26344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.087316][T26344] usb 7-1: Product: syz [ 1029.087343][T26344] usb 7-1: Manufacturer: syz [ 1029.087371][T26344] usb 7-1: SerialNumber: syz [ 1029.196509][ T5784] usb 5-1: config 0 descriptor?? [ 1029.374644][T26344] dvbdev: DVB: registering new adapter (DEC3000-s) [ 1029.394351][T26344] usb 7-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 1029.576492][T26344] ttusb_dec_send_command: command bulk message failed: error -71 [ 1029.613730][T26344] usb 7-1: USB disconnect, device number 31 [ 1029.663657][ T5784] uclogic 0003:28BD:0071.009B: interface is invalid, ignoring [ 1029.868127][T18368] usb 5-1: USB disconnect, device number 25 [ 1030.961236][T27084] loop9: detected capacity change from 0 to 512 [ 1031.074250][T27084] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1031.074318][T27084] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1031.117097][T27084] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #16: comm syz.9.7344: invalid indirect mapped block 4294967295 (level 0) [ 1031.117164][T27084] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1031.117777][T27084] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #16: comm syz.9.7344: invalid indirect mapped block 4294967295 (level 1) [ 1031.117837][T27084] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1031.123323][ C1] EXT4-fs (loop9): error count since last fsck: 2 [ 1031.123360][ C1] EXT4-fs (loop9): initial error at time 2000000544: ext4_free_branches:1020: inode 16 [ 1031.123415][ C1] EXT4-fs (loop9): last error at time 2000000544: ext4_free_branches:1020: inode 16 [ 1031.151660][T27084] EXT4-fs (loop9): 1 orphan inode deleted [ 1031.151828][T27084] EXT4-fs (loop9): 1 truncate cleaned up [ 1031.271473][T27084] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.350626][T27057] EXT4-fs error (device loop9): ext4_lookup:1787: inode #15: comm syz.9.7344: iget: bad extra_isize 46 (inode size 256) [ 1031.717270][T27099] loop1: detected capacity change from 0 to 4096 [ 1031.816765][T27109] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1032.115033][T18865] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.230952][T26344] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1032.366349][T27099] NILFS (loop1): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 1032.366430][T27099] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 1032.392867][T27121] loop4: detected capacity change from 0 to 1024 [ 1032.404816][T26344] usb 7-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 1032.406772][T26344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.447435][T27099] Remounting filesystem read-only [ 1032.612997][T26344] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1033.039895][ T5763] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1033.058809][T27135] loop9: detected capacity change from 0 to 64 [ 1033.160004][T26344] scsi host1: usb-storage 7-1:1.0 [ 1033.210859][ T5763] usb 2-1: Using ep0 maxpacket: 16 [ 1033.213134][ T5763] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1033.217730][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.217787][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.217839][ T5763] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1033.217909][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.227343][T26344] usb 7-1: USB disconnect, device number 32 [ 1033.283694][ T5763] usb 2-1: config 0 descriptor?? [ 1033.632682][ T5858] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1033.744183][ T5763] microsoft 0003:045E:07DA.009C: ignoring exceeding usage max [ 1033.755511][ T5763] hid_parser_main: 5 callbacks suppressed [ 1033.755549][ T5763] microsoft 0003:045E:07DA.009C: unknown main item tag 0x0 [ 1033.755591][ T5763] microsoft 0003:045E:07DA.009C: unknown main item tag 0x0 [ 1033.755629][ T5763] microsoft 0003:045E:07DA.009C: unknown main item tag 0x0 [ 1033.757651][ T5763] microsoft 0003:045E:07DA.009C: unknown main item tag 0x0 [ 1033.757693][ T5763] microsoft 0003:045E:07DA.009C: unknown main item tag 0x0 [ 1033.757731][ T5763] microsoft 0003:045E:07DA.009C: unknown main item tag 0x0 [ 1033.757769][ T5763] microsoft 0003:045E:07DA.009C: unknown main item tag 0x0 [ 1033.757806][ T5763] microsoft 0003:045E:07DA.009C: unknown main item tag 0x0 [ 1033.757842][ T5763] microsoft 0003:045E:07DA.009C: unknown main item tag 0x0 [ 1033.757887][ T5763] microsoft 0003:045E:07DA.009C: unknown main item tag 0x0 [ 1033.770125][T18368] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1033.809935][ T5858] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1033.810044][ T5858] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1033.813465][ T5858] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.813507][ T5858] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1033.813603][ T5858] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1033.813663][ T5858] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1033.813757][ T5858] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1033.813807][ T5858] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1033.822106][ T5858] usb 6-1: string descriptor 0 read error: -22 [ 1033.822361][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.933850][T18368] usb 3-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 1033.936548][T18368] usb 3-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 1033.936651][T18368] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.936700][T18368] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1033.936789][T18368] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1033.936839][T18368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.949901][T18368] usb 3-1: config 0 descriptor?? [ 1033.988097][ T5763] microsoft 0003:045E:07DA.009C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1034.055412][ T5763] usb 2-1: USB disconnect, device number 25 [ 1034.170889][ T5858] usb 6-1: 2:0: failed to get current value for ch 0 (-32) [ 1034.353559][T27155] fido_id[27155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1034.390652][ T5858] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1034.390740][ T5858] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1034.390775][ T5858] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1034.428445][ T5615] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1034.533015][T18368] input: HID 04b3:3109 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04B3:3109.009D/input/input98 [ 1034.587593][ T5615] usb 7-1: not running at top speed; connect to a high speed hub [ 1034.587652][ T5615] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1034.597603][ T5615] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.597659][ T5615] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1034.597741][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.701159][T18368] lenovo 0003:04B3:3109.009D: input,hidraw0: USB HID vd.8f Joystick [HID 04b3:3109] on usb-dummy_hcd.2-1/input0 [ 1034.701442][ T5615] uvcvideo 7-1:1.0: Found UVC 1.00 device (046d:0825) [ 1034.769263][T18368] usb 3-1: USB disconnect, device number 57 [ 1034.781450][ T5858] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1035.080242][ T5858] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1035.086223][T27161] loop1: detected capacity change from 0 to 64 [ 1035.132219][ T5615] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 1035.134957][ T5615] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1035.135074][ T5615] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 1035.149170][ T5858] usb 6-1: USB disconnect, device number 24 [ 1035.178145][ T5615] usb 7-1: USB disconnect, device number 33 [ 1035.349202][ T5775] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1035.467517][T27159] fido_id[27159]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1035.498495][ T5775] usb 10-1: Using ep0 maxpacket: 8 [ 1035.499491][ T5775] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1035.500906][T27165] loop2: detected capacity change from 0 to 512 [ 1035.501202][ T5775] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1035.501240][ T5775] usb 10-1: config 0 has no interface number 0 [ 1035.501323][ T5775] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1035.501366][ T5775] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1035.501414][ T5775] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1035.501466][ T5775] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1035.501535][ T5775] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.505687][ T5775] usb 10-1: config 0 descriptor?? [ 1035.523863][T27165] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1035.523898][T27165] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1035.594202][T27165] EXT4-fs (loop2): 1 truncate cleaned up [ 1035.624279][T27165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.675383][ T5775] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1035.857522][ T5775] usb 10-1: USB disconnect, device number 30 [ 1035.920142][ T5775] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1036.097740][T27145] loop4: detected capacity change from 0 to 40427 [ 1036.112115][T27145] F2FS-fs (loop4): invalid crc value [ 1036.203088][T27169] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1036.236956][T27169] EXT4-fs (loop2): Remounting filesystem read-only [ 1036.292900][T27165] overlayfs: failed to set uuid (/file0, err=-30); falling back to uuid=null. [ 1036.292989][T27165] overlayfs: failed to verify upper root origin [ 1036.444237][T27145] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1036.456318][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.832592][T27186] loop9: detected capacity change from 0 to 64 [ 1037.130627][T27186] syz.9.7382: attempt to access beyond end of device [ 1037.130627][T27186] loop9: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 1037.130691][T27186] Buffer I/O error on dev loop9, logical block 512, async page read [ 1037.130748][T27186] syz.9.7382: attempt to access beyond end of device [ 1037.130748][T27186] loop9: rw=8388608, sector=32768, nr_sectors = 2 limit=64 [ 1037.130793][T27186] Buffer I/O error on dev loop9, logical block 16384, async page read [ 1037.190933][ T5768] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1037.371852][ T5768] usb 6-1: Using ep0 maxpacket: 8 [ 1037.373254][ T5768] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1037.374823][ T5768] usb 6-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1037.374881][ T5768] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1037.374940][ T5768] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.384750][ T5768] usb 6-1: config 0 descriptor?? [ 1037.597186][T27200] loop1: detected capacity change from 0 to 256 [ 1037.643535][T27200] exfat: Deprecated parameter 'namecase' [ 1037.643652][T27200] exfat: Deprecated parameter 'utf8' [ 1037.667830][T27203] loop6: detected capacity change from 0 to 512 [ 1037.684985][T27203] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1037.685020][T27203] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1037.685040][T27203] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1037.722125][T27200] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1037.737379][T27203] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.7394: bad orphan inode 131083 [ 1037.737439][T27203] loop6: lost filesystem error report for type 5 error -117 [ 1037.760503][T27204] loop2: detected capacity change from 0 to 64 [ 1037.784993][T27203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1037.882136][ T5768] isku 0003:1E7D:319C.009E: unexpected long global item [ 1037.882988][ T5768] isku 0003:1E7D:319C.009E: parse failed [ 1037.883090][ T5768] isku 0003:1E7D:319C.009E: probe with driver isku failed with error -22 [ 1037.934240][T27204] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1038.066025][ T5768] usb 6-1: USB disconnect, device number 25 [ 1038.131778][T25715] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.033953][T27231] loop4: detected capacity change from 0 to 1024 [ 1039.137459][T27235] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7406'. [ 1039.168053][T27238] loop1: detected capacity change from 0 to 64 [ 1039.217157][T27231] hfsplus: found bad thread record in catalog [ 1039.217315][T27231] hfsplus: found bad thread record in catalog [ 1039.303549][ T1009] hfsplus: found bad thread record in catalog [ 1039.734446][T27248] can0: slcan on ptm0. [ 1039.931856][T27246] can0 (unregistered): slcan off ptm0. [ 1040.033066][ T5615] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1040.178453][ T5615] usb 10-1: Using ep0 maxpacket: 16 [ 1040.179467][ T5615] usb 10-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1040.182812][ T5615] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.182911][ T5615] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.182954][ T5615] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1040.183023][ T5615] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.258831][ T5615] usb 10-1: config 0 descriptor?? [ 1040.719496][ T5615] hid_parser_main: 6 callbacks suppressed [ 1040.719538][ T5615] aquacomputer_d5next 0003:0C70:F00A.009F: unknown main item tag 0x0 [ 1040.719591][ T5615] aquacomputer_d5next 0003:0C70:F00A.009F: unknown main item tag 0x0 [ 1040.719632][ T5615] aquacomputer_d5next 0003:0C70:F00A.009F: unknown main item tag 0x0 [ 1040.719670][ T5615] aquacomputer_d5next 0003:0C70:F00A.009F: unknown main item tag 0x0 [ 1040.719710][ T5615] aquacomputer_d5next 0003:0C70:F00A.009F: unknown main item tag 0x0 [ 1040.719748][ T5615] aquacomputer_d5next 0003:0C70:F00A.009F: unknown main item tag 0x0 [ 1040.719788][ T5615] aquacomputer_d5next 0003:0C70:F00A.009F: unknown main item tag 0x0 [ 1040.719828][ T5615] aquacomputer_d5next 0003:0C70:F00A.009F: unknown main item tag 0x0 [ 1040.719866][ T5615] aquacomputer_d5next 0003:0C70:F00A.009F: unknown main item tag 0x0 [ 1040.719910][ T5615] aquacomputer_d5next 0003:0C70:F00A.009F: unknown main item tag 0x0 [ 1040.784732][T27280] loop1: detected capacity change from 0 to 512 [ 1040.837452][ T5615] aquacomputer_d5next 0003:0C70:F00A.009F: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.9-1/input0 [ 1040.909032][ T5615] usb 10-1: USB disconnect, device number 31 [ 1040.965754][T27283] loop6: detected capacity change from 0 to 256 [ 1041.000361][T27283] exfat: Deprecated parameter 'utf8' [ 1041.086090][T27280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.095707][T27283] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1041.246715][T27292] fido_id[27292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1041.262626][T27280] Invalid ELF header magic: != ELF [ 1041.324759][T27294] loop2: detected capacity change from 0 to 64 [ 1041.353065][T27294] hfs: unable to locate alternate MDB [ 1041.353088][T27294] hfs: continuing without an alternate MDB [ 1041.425894][T27296] program syz.4.7429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1041.636959][T18139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.083354][T27309] loop1: detected capacity change from 0 to 164 [ 1042.322849][T27316] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1042.970866][T27333] loop6: detected capacity change from 0 to 64 [ 1043.076758][T27333] syz.6.7443: attempt to access beyond end of device [ 1043.076758][T27333] loop6: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 1043.076820][T27333] Buffer I/O error on dev loop6, logical block 512, async page read [ 1043.076859][T27333] syz.6.7443: attempt to access beyond end of device [ 1043.076859][T27333] loop6: rw=8388608, sector=32768, nr_sectors = 2 limit=64 [ 1043.076901][T27333] Buffer I/O error on dev loop6, logical block 16384, async page read [ 1043.102898][T27335] sg_write: data in/out 8192/12 bytes for SCSI command 0x2-- guessing data in; [ 1043.102898][T27335] program syz.1.7444 not setting count and/or reply_len properly [ 1043.666423][T27311] loop9: detected capacity change from 0 to 32768 [ 1043.691695][T27311] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.7434 (27311) [ 1043.756671][ T1009] IPVS: starting estimator thread 0... [ 1043.770097][T27311] BTRFS info (device loop9): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1043.770159][T27311] BTRFS info (device loop9): using xxhash64 checksum algorithm [ 1043.848573][T27352] IPVS: using max 22 ests per chain, 52800 per kthread [ 1043.944509][T27339] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7446'. [ 1044.065873][T27311] BTRFS info (device loop9): setting nodatasum [ 1044.065922][T27311] BTRFS info (device loop9): allowing degraded mounts [ 1044.065955][T27311] BTRFS info (device loop9): turning on async discard [ 1044.065985][T27311] BTRFS info (device loop9): enabling free space tree [ 1044.066017][T27311] BTRFS info (device loop9): force zlib compression, level 3 [ 1044.287520][T18865] BTRFS info (device loop9): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1044.594923][T18368] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1044.771594][T18368] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1044.775789][T18368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.775838][T18368] usb 3-1: Product: syz [ 1044.775868][T18368] usb 3-1: Manufacturer: syz [ 1044.775908][T18368] usb 3-1: SerialNumber: syz [ 1044.862324][T18368] usb 3-1: config 0 descriptor?? [ 1044.892095][T18368] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1045.270453][ T5768] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1045.482609][ T5768] usb 6-1: Using ep0 maxpacket: 16 [ 1045.487621][ T5768] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1045.492831][ T5768] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.492926][ T5768] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.492971][ T5768] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1045.493072][ T5768] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.497424][ T5768] usb 6-1: config 0 descriptor?? [ 1045.508869][T18368] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1045.509018][T18368] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 1045.604574][T18368] usb 3-1: USB disconnect, device number 58 [ 1046.017852][ T5768] microsoft 0003:045E:07DA.00A0: ignoring exceeding usage max [ 1046.037412][ T5768] microsoft 0003:045E:07DA.00A0: ignoring exceeding usage max [ 1046.221623][ T5768] microsoft 0003:045E:07DA.00A0: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1046.249505][T27415] netlink: 39 bytes leftover after parsing attributes in process `syz.1.7469'. [ 1046.265620][ T5768] usb 6-1: USB disconnect, device number 26 [ 1046.566652][T27417] fido_id[27417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1046.655966][T27421] sd 0:0:1:0: device reset [ 1046.800325][T27427] loop9: detected capacity change from 0 to 512 [ 1046.824389][T27427] EXT4-fs: Ignoring removed orlov option [ 1046.824468][T27427] EXT4-fs: Ignoring removed mblk_io_submit option [ 1046.867309][T27427] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1046.867350][T27427] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 1046.879302][T27427] EXT4-fs error (device loop9): ext4_clear_blocks:874: inode #13: comm syz.9.7475: attempt to clear invalid blocks 2 len 1 [ 1046.879361][T27427] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1046.881999][T27427] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1046.882224][T27427] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #13: comm syz.9.7475: invalid indirect mapped block 1819239214 (level 0) [ 1046.882279][T27427] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1046.888317][ C0] EXT4-fs (loop9): error count since last fsck: 3 [ 1046.888352][ C0] EXT4-fs (loop9): initial error at time 2000000560: ext4_clear_blocks:874: inode 13 [ 1046.888403][ C0] EXT4-fs (loop9): last error at time 2000000560: ext4_free_branches:1020: inode 13 [ 1046.892464][T27427] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #13: comm syz.9.7475: invalid indirect mapped block 1819239214 (level 1) [ 1046.892521][T27427] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1046.898072][T27427] EXT4-fs (loop9): 1 truncate cleaned up [ 1046.937515][T27427] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1047.007702][T27430] loop2: detected capacity change from 0 to 2048 [ 1047.077591][T27430] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1047.112965][T27430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1047.329734][T18865] EXT4-fs error (device loop9): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 1047.410068][T18865] EXT4-fs error (device loop9): ext4_iget_extra_inode:5209: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 1047.412934][T18865] EXT4-fs error (device loop9): ext4_iget_extra_inode:5209: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 1048.115396][T27450] loop1: detected capacity change from 0 to 4096 [ 1048.156087][T27450] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1048.156136][T27450] NILFS (loop1): trying rollback from an earlier position [ 1048.277350][T27450] NILFS (loop1): recovery complete [ 1048.285344][T18865] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.334389][T27460] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1048.358106][T27459] blktrace: Concurrent blktraces are not allowed on loop4 [ 1049.451454][ T1009] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.893820][T27476] loop6: detected capacity change from 0 to 1024 [ 1050.086854][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1050.096739][T27482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7503'. [ 1050.140524][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1050.141752][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1050.148124][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1050.157663][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1050.191784][ T1009] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.609173][T27490] loop6: detected capacity change from 0 to 512 [ 1050.627832][T27490] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1050.627870][T27490] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1050.635993][T27492] loop5: detected capacity change from 0 to 16 [ 1050.638996][T27492] erofs (device loop5): mounted with root inode @ nid 36. [ 1050.715758][T27490] EXT4-fs (loop6): 1 truncate cleaned up [ 1050.715959][T27489] loop2: detected capacity change from 0 to 1024 [ 1050.774726][T27489] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1050.835027][ T1009] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.854838][T27490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.856666][T27492] erofs (device loop5): invalid fast symlink size 39 @ nid 83 [ 1051.474087][T27490] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1051.544490][T27490] EXT4-fs (loop6): Remounting filesystem read-only [ 1051.544820][T27490] overlayfs: failed to verify upper root origin [ 1051.591109][T27485] loop4: detected capacity change from 0 to 32768 [ 1051.645336][ T1009] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.838877][T25715] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.976541][ T5617] Bluetooth: hci5: command tx timeout [ 1052.340613][T27514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7513'. [ 1052.340659][T27514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7513'. [ 1052.340704][T27514] netlink: 'syz.6.7513': attribute type 12 has an invalid length. [ 1052.340737][T27514] netlink: 'syz.6.7513': attribute type 14 has an invalid length. [ 1052.359006][ T5617] Bluetooth: hci4: command tx timeout [ 1052.960883][ T5768] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1053.142028][ T5768] usb 7-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice= 0.00 [ 1053.144983][ T5768] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.145060][ T5768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.246164][ T5768] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 1053.296595][ T5768] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1053.297728][ T5768] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 1053.297816][ T5768] usb 7-1: media controller created [ 1053.320208][ T5784] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1053.352048][ T5768] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1053.411524][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.490021][ T5784] usb 6-1: Using ep0 maxpacket: 16 [ 1053.491661][ T5784] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1053.495956][ T5784] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1053.495999][ T5784] usb 6-1: config 0 has no interface number 0 [ 1053.496057][ T5784] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1053.511729][ T5784] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1053.511776][ T5784] usb 6-1: Product: syz [ 1053.511805][ T5784] usb 6-1: SerialNumber: syz [ 1053.653158][ T5784] usb 6-1: config 0 descriptor?? [ 1053.680258][ T5768] DVB: Unable to find symbol mt352_attach() [ 1053.680285][ T5768] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 1053.681309][T27479] rxe_eth0 speed is unknown, defaulting to 1000 [ 1053.683165][ T5768] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input100 [ 1053.687406][ T5768] dvb-usb: schedule remote query interval to 100 msecs. [ 1053.687434][ T5768] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 1053.696104][ T5784] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 1053.715023][T27541] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1053.715094][T27541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1053.715122][T27541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1053.715150][T27541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1053.726543][ T5784] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input101 [ 1053.942741][ T1009] bridge_slave_1: left allmulticast mode [ 1053.942816][ T1009] bridge_slave_1: left promiscuous mode [ 1053.943146][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.012113][ T1009] bridge_slave_0: left allmulticast mode [ 1054.012150][ T1009] bridge_slave_0: left promiscuous mode [ 1054.023947][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.155235][ T5768] dvb_usb_m920x 7-1:1.0: probe with driver dvb_usb_m920x failed with error -71 [ 1054.160382][ T5768] usb 7-1: USB disconnect, device number 34 [ 1054.207274][T26344] m920x_read = error: -71 [ 1054.207318][T26344] dvb-usb: error while querying for an remote control event. [ 1054.309976][T26344] m920x_read = error: -19 [ 1054.310021][T26344] dvb-usb: error while querying for an remote control event. [ 1054.419794][ T5768] m920x_read = error: -19 [ 1054.419832][ T5768] dvb-usb: error while querying for an remote control event. [ 1054.433381][T27552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7528'. [ 1054.433551][T27552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7528'. [ 1054.438808][ T5617] Bluetooth: hci4: command tx timeout [ 1054.469421][ C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1054.469477][ C1] ------------[ cut here ]------------ [ 1054.469494][ C1] URB ffff88802b8d0f00 submitted while active [ 1054.469513][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x1689/0x19b0, CPU#1: syz.5.7522/27530 [ 1054.498335][ C1] Modules linked in: [ 1054.502265][ C1] CPU: 1 UID: 0 PID: 27530 Comm: syz.5.7522 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.513281][ C1] Tainted: [L]=SOFTLOCKUP [ 1054.517619][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1054.527721][ C1] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 1054.533427][ C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 8e 78 7b fa 48 8d 3d 57 32 c2 0a 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 1054.553128][ C1] RSP: 0018:ffffc90000a18af8 EFLAGS: 00010083 [ 1054.559298][ C1] RAX: 000000000000051f RBX: ffff88802b8d0f00 RCX: ffffc900022b2000 [ 1054.567307][ C1] RDX: 0000000000040000 RSI: ffff88802b8d0f00 RDI: ffffffff9252ef40 [ 1054.571307][T26344] m920x_read = error: -19 [ 1054.571343][T26344] dvb-usb: error while querying for an remote control event. [ 1054.586997][ C1] RBP: ffff8880355d5160 R08: 0000000000000001 R09: 0000000000000000 [ 1054.595043][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000087 [ 1054.603082][ C1] R13: ffff88802dc97858 R14: 000000000000000f R15: 0000000000000000 [ 1054.611117][ C1] FS: 0000555569229500(0000) GS:ffff888122a44000(0000) knlGS:0000000000000000 [ 1054.620077][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1054.626711][ C1] CR2: 0000001b33505ff8 CR3: 0000000023ff5000 CR4: 0000000000350ef0 [ 1054.634706][ C1] Call Trace: [ 1054.637992][ C1] [ 1054.640858][ C1] cm109_urb_irq_callback+0x473/0xa70 [ 1054.646275][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.651951][ C1] __usb_hcd_giveback_urb+0x38e/0x610 [ 1054.657377][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1054.662630][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.668307][ C1] dummy_timer+0xdaf/0x3820 [ 1054.672860][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.678548][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.684221][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.689891][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1054.695760][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.701430][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1054.707135][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1054.712445][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.718112][ C1] ? rcu_is_watching+0x13/0xc0 [ 1054.722926][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1054.728831][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1054.734075][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1054.739347][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 1054.744517][ C1] handle_softirqs+0x1e6/0x9d0 [ 1054.749317][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1054.754634][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.760354][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1054.765550][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.771253][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1054.776968][ C1] __irq_exit_rcu+0x16a/0x210 [ 1054.781683][ C1] irq_exit_rcu+0x9/0x30 [ 1054.785947][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1054.791638][ C1] [ 1054.794575][ C1] [ 1054.797511][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1054.803527][ C1] RIP: 0010:rcu_is_watching+0x13/0xc0 [ 1054.808949][ C1] Code: 8f 00 eb cd 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 48 ff 05 aa dc 9d 13 e8 1d e7 e3 09 <48> c7 c3 e8 fd 8e 95 89 c5 83 f8 07 0f 87 83 00 00 00 48 8d 3c ed [ 1054.828597][ C1] RSP: 0018:ffffc9000f37f718 EFLAGS: 00000282 [ 1054.834706][ C1] RAX: 0000000000000001 RBX: ffffc9000f37f890 RCX: ffffffff92e75501 [ 1054.842705][ C1] RDX: 0000000000000001 RSI: ffffffff8c625b00 RDI: ffffffff8c625b40 [ 1054.850713][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 [ 1054.858697][ C1] R10: 0000000000000200 R11: 000000000000b0a6 R12: ffffc9000f37f840 [ 1054.866676][ C1] R13: ffffc9000f37f7f0 R14: ffffc9000f37f890 R15: ffffc9000f37f824 [ 1054.874687][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.880360][ C1] ? rcu_is_watching+0x13/0xc0 [ 1054.885168][ C1] unwind_next_frame+0x745/0x2090 [ 1054.890235][ C1] ? arch_stack_walk+0x73/0xf0 [ 1054.895043][ C1] __unwind_start+0x3cd/0x7e0 [ 1054.899764][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1054.905973][ C1] arch_stack_walk+0x73/0xf0 [ 1054.910597][ C1] ? stack_trace_save+0x8e/0xc0 [ 1054.915466][ C1] stack_trace_save+0x8e/0xc0 [ 1054.920158][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1054.925559][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.931216][ C1] ? kasan_save_stack+0x3f/0x50 [ 1054.936086][ C1] ? kasan_save_stack+0x30/0x50 [ 1054.940949][ C1] ? kasan_save_track+0x14/0x30 [ 1054.945814][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1054.950590][ C1] ? __kmalloc_noprof+0x32f/0x840 [ 1054.955627][ C1] ? raw_event_queue_add+0x82/0x220 [ 1054.960862][ C1] ? gadget_disconnect+0x58/0xd0 [ 1054.965841][ C1] kasan_save_stack+0x30/0x50 [ 1054.970621][ C1] kasan_save_track+0x14/0x30 [ 1054.975329][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1054.979940][ C1] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1054.985355][ C1] ? kobject_uevent_env+0x263/0x18b0 [ 1054.990699][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1054.997228][ C1] kobject_uevent_env+0x263/0x18b0 [ 1055.002386][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.008055][ C1] ? gadget_unbind_driver+0x371/0x4f0 [ 1055.013452][ C1] ? __pfx_dummy_udc_async_callbacks+0x10/0x10 [ 1055.019657][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1055.025417][ C1] device_remove+0xcb/0x180 [ 1055.029952][ C1] device_release_driver_internal+0x44e/0x620 [ 1055.036056][ C1] driver_detach+0xd8/0x1b0 [ 1055.040585][ C1] bus_remove_driver+0x13b/0x2e0 [ 1055.045602][ C1] driver_unregister+0x76/0xb0 [ 1055.050394][ C1] usb_gadget_unregister_driver+0x49/0x70 [ 1055.056139][ C1] raw_release+0x19b/0x260 [ 1055.060600][ C1] ? __pfx_raw_release+0x10/0x10 [ 1055.065576][ C1] __fput+0x400/0xb60 [ 1055.069615][ C1] task_work_run+0x150/0x240 [ 1055.074280][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1055.079429][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.085104][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.090781][ C1] exit_to_user_mode_loop+0x1d8/0x700 [ 1055.096200][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.101947][ C1] ? rcu_is_watching+0x13/0xc0 [ 1055.106760][ C1] do_syscall_64+0x661/0x790 [ 1055.111377][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.117298][ C1] RIP: 0033:0x7f3b6919e559 [ 1055.121727][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.141363][ C1] RSP: 002b:00007ffc13538ad8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1055.149986][ C1] RAX: 0000000000000000 RBX: 00007ffc13538bc0 RCX: 00007f3b6919e559 [ 1055.158057][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1055.166039][ C1] RBP: 000000000010133b R08: 0000000000000001 R09: 0000000000000000 [ 1055.174057][ C1] R10: 0000001b2f320000 R11: 0000000000000246 R12: 00007ffc13538c00 [ 1055.182045][ C1] R13: 00007f3b69425fac R14: 0000000000101927 R15: 00007f3b69425fa0 [ 1055.190061][ C1] [ 1055.193148][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1055.200456][ C1] CPU: 1 UID: 0 PID: 27530 Comm: syz.5.7522 Tainted: G L syzkaller #0 PREEMPT(full) [ 1055.211460][ C1] Tainted: [L]=SOFTLOCKUP [ 1055.215796][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1055.225957][ C1] Call Trace: [ 1055.229259][ C1] [ 1055.232115][ C1] dump_stack_lvl+0x100/0x190 [ 1055.236901][ C1] vpanic+0x553/0x970 [ 1055.240951][ C1] ? __pfx_vpanic+0x10/0x10 [ 1055.245495][ C1] panic+0xd1/0xe0 [ 1055.249269][ C1] ? __pfx_panic+0x10/0x10 [ 1055.253729][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1055.259123][ C1] ? usb_submit_urb+0x1689/0x19b0 [ 1055.264194][ C1] __warn.cold+0x191/0x318 [ 1055.268649][ C1] __report_bug+0x30f/0x440 [ 1055.273225][ C1] ? usb_submit_urb+0x1689/0x19b0 [ 1055.278286][ C1] ? __pfx___report_bug+0x10/0x10 [ 1055.283374][ C1] ? dev_printk_emit+0xd2/0x10d [ 1055.288296][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1055.293657][ C1] report_bug_entry+0xe2/0x290 [ 1055.298509][ C1] ? usb_submit_urb+0x168c/0x19b0 [ 1055.303563][ C1] handle_bug+0x1cd/0x2a0 [ 1055.307958][ C1] exc_invalid_op+0x17/0x50 [ 1055.312502][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1055.317386][ C1] RIP: 0010:usb_submit_urb+0x168c/0x19b0 [ 1055.323053][ C1] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 70 ff ff ff bb ed ff ff ff e9 ac f1 ff ff e8 8e 78 7b fa 48 8d 3d 57 32 c2 0a 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 8e f1 ff ff c7 44 24 30 00 00 00 [ 1055.342693][ C1] RSP: 0018:ffffc90000a18af8 EFLAGS: 00010083 [ 1055.348791][ C1] RAX: 000000000000051f RBX: ffff88802b8d0f00 RCX: ffffc900022b2000 [ 1055.356773][ C1] RDX: 0000000000040000 RSI: ffff88802b8d0f00 RDI: ffffffff9252ef40 [ 1055.364753][ C1] RBP: ffff8880355d5160 R08: 0000000000000001 R09: 0000000000000000 [ 1055.372741][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000087 [ 1055.380726][ C1] R13: ffff88802dc97858 R14: 000000000000000f R15: 0000000000000000 [ 1055.388737][ C1] ? usb_submit_urb+0x1682/0x19b0 [ 1055.393808][ C1] cm109_urb_irq_callback+0x473/0xa70 [ 1055.399219][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.404890][ C1] __usb_hcd_giveback_urb+0x38e/0x610 [ 1055.410323][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1055.415574][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.421248][ C1] dummy_timer+0xdaf/0x3820 [ 1055.425789][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.431454][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.437122][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.442776][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1055.448626][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.454283][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1055.459995][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1055.464974][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.470675][ C1] ? rcu_is_watching+0x13/0xc0 [ 1055.475481][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1055.481333][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1055.486287][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1055.491591][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 1055.496756][ C1] handle_softirqs+0x1e6/0x9d0 [ 1055.501554][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1055.506856][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.512521][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1055.517426][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.523096][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1055.528785][ C1] __irq_exit_rcu+0x16a/0x210 [ 1055.533486][ C1] irq_exit_rcu+0x9/0x30 [ 1055.537744][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1055.543516][ C1] [ 1055.546453][ C1] [ 1055.549389][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1055.555405][ C1] RIP: 0010:rcu_is_watching+0x13/0xc0 [ 1055.560826][ C1] Code: 8f 00 eb cd 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 48 ff 05 aa dc 9d 13 e8 1d e7 e3 09 <48> c7 c3 e8 fd 8e 95 89 c5 83 f8 07 0f 87 83 00 00 00 48 8d 3c ed [ 1055.580477][ C1] RSP: 0018:ffffc9000f37f718 EFLAGS: 00000282 [ 1055.586577][ C1] RAX: 0000000000000001 RBX: ffffc9000f37f890 RCX: ffffffff92e75501 [ 1055.594571][ C1] RDX: 0000000000000001 RSI: ffffffff8c625b00 RDI: ffffffff8c625b40 [ 1055.602567][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 [ 1055.610558][ C1] R10: 0000000000000200 R11: 000000000000b0a6 R12: ffffc9000f37f840 [ 1055.618552][ C1] R13: ffffc9000f37f7f0 R14: ffffc9000f37f890 R15: ffffc9000f37f824 [ 1055.626604][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.632313][ C1] ? rcu_is_watching+0x13/0xc0 [ 1055.637133][ C1] unwind_next_frame+0x745/0x2090 [ 1055.642200][ C1] ? arch_stack_walk+0x73/0xf0 [ 1055.647010][ C1] __unwind_start+0x3cd/0x7e0 [ 1055.651726][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1055.657933][ C1] arch_stack_walk+0x73/0xf0 [ 1055.662565][ C1] ? stack_trace_save+0x8e/0xc0 [ 1055.667452][ C1] stack_trace_save+0x8e/0xc0 [ 1055.672158][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1055.677555][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.683654][ C1] ? kasan_save_stack+0x3f/0x50 [ 1055.688538][ C1] ? kasan_save_stack+0x30/0x50 [ 1055.693417][ C1] ? kasan_save_track+0x14/0x30 [ 1055.698354][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1055.703143][ C1] ? __kmalloc_noprof+0x32f/0x840 [ 1055.708185][ C1] ? raw_event_queue_add+0x82/0x220 [ 1055.713432][ C1] ? gadget_disconnect+0x58/0xd0 [ 1055.718428][ C1] kasan_save_stack+0x30/0x50 [ 1055.723211][ C1] kasan_save_track+0x14/0x30 [ 1055.727914][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1055.732531][ C1] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1055.737950][ C1] ? kobject_uevent_env+0x263/0x18b0 [ 1055.743274][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1055.749020][ C1] kobject_uevent_env+0x263/0x18b0 [ 1055.754174][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.759838][ C1] ? gadget_unbind_driver+0x371/0x4f0 [ 1055.765330][ C1] ? __pfx_dummy_udc_async_callbacks+0x10/0x10 [ 1055.771544][ C1] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1055.777307][ C1] device_remove+0xcb/0x180 [ 1055.781842][ C1] device_release_driver_internal+0x44e/0x620 [ 1055.787961][ C1] driver_detach+0xd8/0x1b0 [ 1055.792505][ C1] bus_remove_driver+0x13b/0x2e0 [ 1055.797498][ C1] driver_unregister+0x76/0xb0 [ 1055.802298][ C1] usb_gadget_unregister_driver+0x49/0x70 [ 1055.808059][ C1] raw_release+0x19b/0x260 [ 1055.812527][ C1] ? __pfx_raw_release+0x10/0x10 [ 1055.817515][ C1] __fput+0x400/0xb60 [ 1055.821586][ C1] task_work_run+0x150/0x240 [ 1055.826245][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1055.831396][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.837076][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.842744][ C1] exit_to_user_mode_loop+0x1d8/0x700 [ 1055.848149][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1055.853851][ C1] ? rcu_is_watching+0x13/0xc0 [ 1055.858668][ C1] do_syscall_64+0x661/0x790 [ 1055.863424][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.869408][ C1] RIP: 0033:0x7f3b6919e559 [ 1055.873847][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.893519][ C1] RSP: 002b:00007ffc13538ad8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1055.901993][ C1] RAX: 0000000000000000 RBX: 00007ffc13538bc0 RCX: 00007f3b6919e559 [ 1055.910126][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1055.918136][ C1] RBP: 000000000010133b R08: 0000000000000001 R09: 0000000000000000 [ 1055.926254][ C1] R10: 0000001b2f320000 R11: 0000000000000246 R12: 00007ffc13538c00 [ 1055.934305][ C1] R13: 00007f3b69425fac R14: 0000000000101927 R15: 00007f3b69425fa0 [ 1055.942517][ C1] [ 1055.945890][ C1] Kernel Offset: disabled [ 1055.950219][ C1] Rebooting in 86400 seconds..