last executing test programs:

6.118464112s ago: executing program 3 (id=1094):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0xa4480, 0x5, 0xbca6, 0x4, 0x7f, 0x0, 0x0, 0x10, 0x98}}, 0x50)
ftruncate(r0, 0x8008976)
lseek(r0, 0x5, 0x4)

6.008760778s ago: executing program 3 (id=1096):
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000200)={[{@pquota}, {@discard}, {@swalloc}, {@grpid}, {@logbufs={'logbufs', 0x3d, 0x3}}, {@noalign}, {@inode64}, {@inode32}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x2, 0xadea})
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x8, 0x0, 0x2, 0x0, 0xffff})

4.018989861s ago: executing program 3 (id=1114):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1100000004000000040000000c"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.164103626s ago: executing program 4 (id=1123):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)=""/110, 0x6e}], 0x2}, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x31, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x23, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e24, 0x4e20, 0xf, 0x0, @opaque="c5236745cdddcb"}}}}}, 0x0)

2.973259155s ago: executing program 1 (id=1127):
r0 = epoll_create1(0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x1b})
poll(&(0x7f00000000c0)=[{r0, 0x1009}], 0x1, 0x8000007)

2.972358536s ago: executing program 3 (id=1128):
r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, &(0x7f00000001c0)={0x40, 0x11, 0x2, {0x2, 0x5}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

2.908719939s ago: executing program 4 (id=1129):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000000130a810100000000000000000200000008000340000000010900010073797a300000"], 0x28}}, 0x20004000)

2.875594251s ago: executing program 1 (id=1130):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0xa}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40810)

2.841059113s ago: executing program 0 (id=1131):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000020, 0x0, 0x6}]})

2.748892677s ago: executing program 1 (id=1132):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/10, &(0x7f0000000240)=0xa)

2.733401878s ago: executing program 4 (id=1133):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usb_disconnect(r0)
close_range(r1, 0xffffffffffffffff, 0x0)

2.597260656s ago: executing program 1 (id=1134):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twmw'], 0xa)

2.591981936s ago: executing program 0 (id=1135):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r2, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0)

2.51285693s ago: executing program 1 (id=1136):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x74, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ad}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc44}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.457461243s ago: executing program 1 (id=1137):
syz_usb_connect$uac2(0x0, 0x80, &(0x7f0000002200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x19b5, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x3, 0xc0, 0x21, {0x8, 0xb, 0x2, 0x0, 0x1, 0x2, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xc63, 0x1, 0xe, 0x84}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x30, 0x80, 0x84, 0x6, {0x8, 0x25, 0x1, 0x81, 0xf, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x91, 0x2, {0x8, 0x25, 0x1, 0x2, 0x33, 0x0, 0xffff}}}}}}}}]}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

2.433271564s ago: executing program 0 (id=1138):
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0x2, 0x0, 0x0, r2, 0x40, 0x10, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x3c}}, 0x20024090)

2.362970137s ago: executing program 0 (id=1139):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x40000010, 0x0, 0x1}]})

2.134910899s ago: executing program 0 (id=1141):
syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x30, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x16}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0xff, 0x7}, {0x6, 0x24, 0x1a, 0x31c0, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x3, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xff, 0x9, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfc, 0x1, 0x9}}}}}}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

1.855799094s ago: executing program 2 (id=1145):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c)
setsockopt$sock_attach_bpf(r0, 0x6, 0xa, &(0x7f0000000100), 0x4)
close(r0)

1.700914872s ago: executing program 2 (id=1146):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000)

1.597222627s ago: executing program 2 (id=1147):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4)

1.484099373s ago: executing program 2 (id=1148):
unshare(0x26020400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x2)

1.439861156s ago: executing program 2 (id=1149):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000050000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232)

833.751107ms ago: executing program 4 (id=1150):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800001, &(0x7f0000000380)=ANY=[@ANYRES8=0x0], 0x3, 0xa86, &(0x7f0000000e40)="$eJzs3U1sXEfhAPB5a68TJ+k/m/4TapLQJny05aN245jwEUFTNReipuJWqeISpWmJSAMilaBVJZKcuNGqClco4lQOFSCk9oKinrhUopG49FQ4cCAKUiUOtJAs8npm/Xay27e2Y++u9/eTxrPz5u3OvOe3b9/XzARgbNVafxcWZooQrrz16vF/3P/36cUpj7TnaLT+TpZS9RBCEdOT2ee9P7EU3/zgpdPd4iLMt/6mdHjiRvu920MIF8OBcDU0wt4r1155Z/7xk5dOXD747utHr6/P0gMAwHj59tWjC3v++ud9uz56495jYUt7ejo+b8T0jnjcfywe+Kfj/1roTBelUDaVzTcZQy2bb6LLfOVy6tl8kz3Kn8o+t97O39cx35aK8idK07otN4yytB03QlGb7UjXarOzS+fkoXVeP1XMnj977pkLA6oocMf9674QwgFhpaHZbP6ktQKHoC6CsNrQ3DnoPRDAkvx+4W0u5lcW1qb9aZP9lX/j0Vr398MdsNHbv/JHq/xfX7LH4c7ZrFtTWq70PdoR0/l9hPz5pZV+/9Pn5fcj6n3Ws9d9hFG5v9CrnhMbXI/V6lX/fLvYrL4R47Qevpnll78/+f90VP7HQHf/3qjr/69ND/xa52I4MAR12NShPgR1EPoOzUHvgIChtfzc3JJmlPLz5/ry/C0V+Vsr8qcr8rdV5G+vyIdx9vvnfxZeLpbP8/Nz+pVeD0vX2e6K8f+tsD759ciVlp8/97tSay0/f54Yhtmbp54889Wnn7q29Px/0d7+b8Xt/UBMN+J362qcIV0vzK+rt5/9b3SWU+sx391Zfe66bf7mUom7O+crdi9/TijtZ26rx0zn+3b2mm9/53yNbL7pGLZm9c2PT7Zl70vHH2m/mtbXZLa89Ww5prJ6pP3Krhjn9YDVSNtjr+f/0/Y5E+rFM2fPnXk4ptN2+qeJ+pbF6YfKH/qbjak7sDat35UPl0+Ke7X/mQmd7X92tKfXa+X9ws7l6UV5v9DIps8vJdu3ydP0wzGdfue+OzHdmj57+vvnnl6H5YdxduGFF7936ty5Mz/0Ir2Ytlq88KJqz7FZnxyE8TH3/HM/mLvwwosPnX3u1LNnnj1z/vCRI4fn54987fDCXOu4fq58dA9sJss/+oOuCQAAAAAAAAAAANCvH504fu0vb3/lvaX2/8vt/1L7//Tkb2r//9Os/X/eTj61CkjtAHd1yW+Nu/dmZz2msvnqMfx/Vt/dWTl7svd9Isbtcfxi+//U3j7v1zXV555set5/b5ov607gtv5SprI+SNrjBcYG+5+O6csx/lWAASqmu0+OcVX/1mlbT/1T6JdiNKX/W9oaUj8mqf13r36d0v5/1wbUkTtvI5oTDnoZge7+OfTjf5aOxAdel48Nzebg67D2MPzrWbiDodk0igcwHAY9/me67pni83/81tbFkGa78Wjn/jLvvxTWYtjHn1T+5hr/sz3+XV/7vy69q3f089z/6Aof/uL6e6Viw95+97/58qd+oHdXl1n2USw/Lf8Dob/ym69l5ec3hPr0n6z8bX2Wf9vy719d+f+N5afV9uBn+i1/qcZFrbMe+XXjdP8vv26c3MyWP/XtueLlX+VAjbdi+TDOeo8z2+8ItsNpVMb/7SV/DuPLMZ12hOk5h/wXeaX1T89XpN+BPdnnFxW/b6MyTnEvHzP+71qHkhkJX49x1fchjf+btsdGl3StlK53Wbejvq3AZvP+0N//G7FwcV0/f/lhrUEvp7CKMBxjYJdDs9kcaEfeehEfrEGv/0HffR50+YNe/1Xy8X/zY/h8/N9adgKRj/+bvz8f/zfPz8fXy/Pz8X/z9ZmP/5vn35N9bn4Fe6Yi/5MV+Xsr8vct5093y99f8f5PVeQfrMi/tyL/vor8uyvyJyryP1uR/7mK/Psr8h+syP98Rf5m12qPUvpSjdvywzjL2+f5/sP4SPd/en3/d1fkA6Pr528ceuyp332nsdT+f6p9vpbu4x2L6Xo8d/5xTOf3vUMpvZj3dkz/Lcsf9usdME7y/jPy3/cHKvKB0ZWe8/L9hjFUdO+xJ7/f1qvfql7H+YyWL8T4izH+UowfivFsjOdifCjG8xtUP9bHY7/9w9GXi+Xz/Z1Zfr/Pk+ftgfJ+og73WZ/8+sBKn2fP+/FbqbWWv8rmYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTa/1dWJgpQrjy1qvHnzx5dm5xyiPtORqtv5OlVL39vhAejvFEjH8ZX9z84KXT5fhWjIswH4pQtKeHJ260S9oeQrgYDoSroRH2Xrn2yjvzj5+8dOLywXdfP3p9/dYAAAAAbH7/CwAA///G5yKN")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x2, 0x0, 0x0)

814.866708ms ago: executing program 2 (id=1160):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=")
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000000), &(0x7f0000000400)=ANY=[], 0x841, 0x0)
rmdir(&(0x7f00000004c0)='./file1\x00')

259.665637ms ago: executing program 3 (id=1151):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0xf0, 0x1c, 0x7, 0x80000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0)

52.115048ms ago: executing program 3 (id=1152):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000040))

51.879908ms ago: executing program 4 (id=1153):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="a02bf76d006b6cff71e3d448425fd6af9e53307a85faef44c9f7952a4f8f8fe7210955dc530f02e70c71ff36673e3a3ab888381167ea35da3009f63e027a49181fb81c93a42c5bee6e0c10932e36624c601d9538ea98e79f3ef4afcf3045a2f25dd161f981d1ebbc2d05265b3d37adb94b2c410c1ebb23ea37f7e1838ef4d3ee639b227b9c87941096514ae0a75fa4b933ec501170c0274a2b6111eab3e753e6dd1bec8c9007bbb78d75216ad4fede270d5a29834b5c2faac01f4d4d9d3ae6e64aaa3c40c22f03849a309f01ca3c4ee7c4c6fa604a", 0xd5)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x1d8, 0x1d8, 0x0, 0x1d8, 0xe8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [0xff0000ff, 0x4de325748c9179dc, 0xffffffff, 0xff000000], 'wlan1\x00', 'wlan0\x00', {}, {0xff}, 0x6, 0x0, 0x2, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e21}}}, {{@ipv6={@remote, @local, [0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff], 'veth1_macvtap\x00', 'erspan0\x00', {0xff}, {}, 0x87, 0x7f, 0x4, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1, 0x33, 0x23, 0x8}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'pimreg\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x49, 0x1, 0x54}, 0x0, 0x208, 0x248, 0x0, {}, [@common=@rt={{0x138}, {0x80000000, [0x64b3d7eb, 0x4], 0xd3, 0x21, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @private1, @mcast2, @private1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x10}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xffffffff, 0x7, 0x76be0f9b, 0x7, 0x8, 0x4, 0x733]}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5c, 0xf7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x653afb6a7eb5282b)

8.3583ms ago: executing program 4 (id=1154):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000002"], 0x0, 0x26}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x60, &(0x7f00000002c0), 0x10}, 0x80)

0s ago: executing program 0 (id=1155):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2000}, {r0, 0x4030}], 0x2, 0x6)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0xf0f022})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x8, 0x3, 0x10000, 0x0, 0x6, 0x1, 0x74c3924ecb75b6cd}})

kernel console output (not intermixed with test programs):

erval = 5 seconds, CP frequency < 30 seconds
[   80.863381][   T26] audit: type=1800 audit(1777286607.023:5): pid=4801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.188" name="file1" dev="loop0" ino=15 res=0 errno=0
[   80.888173][ T4816] EXT4-fs (loop3): Test dummy encryption mode enabled
[   80.895112][ T4816] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   80.977624][ T4816] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.193: bad orphan inode 131083
[   81.075733][ T4816] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none.
[   81.134145][ T4816] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 35: comm syz.3.193: bad entry in directory: inode out of bounds - offset=12, inode=7929858, rec_len=12, size=1024 fake=1
[   81.333170][ T4841] loop2: detected capacity change from 0 to 256
[   81.338426][ T4846] loop1: detected capacity change from 0 to 512
[   81.433778][ T4836] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 35: comm syz.3.193: bad entry in directory: inode out of bounds - offset=12, inode=7929858, rec_len=12, size=1024 fake=1
[   81.509665][ T4836] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[   81.510138][ T4846] EXT4-fs (loop1): 1 orphan inode deleted
[   81.588159][ T4846] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=remount-ro,debug_want_extra_isize=0x0000000000000036,user_xattr,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none.
[   81.679045][ T4856] capability: warning: `syz.0.209' uses deprecated v2 capabilities in a way that may be insecure
[   81.695247][ T1346] cfg80211: failed to load regulatory.db
[   81.844918][ T4862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'.
[   81.859405][ T4861] loop1: detected capacity change from 0 to 512
[   81.910253][ T4861] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   82.001559][ T4861] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.208: bad orphan inode 15
[   82.029475][ T4861] ext4_test_bit(bit=14, block=18) = 1
[   82.050447][ T4861] is_bad_inode(inode)=0
[   82.054667][ T4861] NEXT_ORPHAN(inode)=1023
[   82.081771][ T4872] program syz.3.214 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   82.097523][ T4861] max_ino=32
[   82.100776][ T4861] i_nlink=0
[   82.114676][ T4873] loop4: detected capacity change from 0 to 4096
[   82.125245][ T4861] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   82.140061][ T4861] ext2 filesystem being mounted at /40/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   82.226680][ T4861] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 3: comm syz.1.208: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0
[   82.229499][ T4878] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.247512][   T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   82.310025][   T26] audit: type=1800 audit(1777286608.473:6): pid=4873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.213" name="file1" dev="loop4" ino=15 res=0 errno=0
[   82.518567][   T23] usb 1-1: Using ep0 maxpacket: 8
[   82.637657][   T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[   82.667513][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.677050][ T4888] loop3: detected capacity change from 0 to 128
[   82.740134][   T23] pvrusb2: Hardware description: Terratec Grabster AV400
[   82.755048][   T23] pvrusb2: **********
[   82.767134][   T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   82.805767][   T23] pvrusb2: Important functionality might not be entirely working.
[   82.821571][   T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   82.835807][   T23] pvrusb2: **********
[   82.863623][ T4888] attempt to access beyond end of device
[   82.863623][ T4888] loop3: rw=2049, want=250, limit=128
[   82.975782][ T2425] pvrusb2: Invalid write control endpoint
[   83.178272][ T2425] pvrusb2: Invalid write control endpoint
[   83.207592][ T4188] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   83.221270][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   83.255292][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   83.273155][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   83.322029][ T2425] pvrusb2: Device being rendered inoperable
[   83.365661][ T4866] pvrusb2: Killing an I2C write to 9 that is too large (desired=8192 limit=61)
[   83.397870][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[   83.405562][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[   83.416505][    T7] usb 1-1: USB disconnect, device number 4
[   83.457544][ T4188] usb 3-1: Using ep0 maxpacket: 16
[   83.480332][ T2425] pvrusb2: Attached sub-driver cx25840
[   83.510592][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   83.544389][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   83.587809][ T4188] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.613475][ T4188] usb 3-1: config 0 interface 0 has no altsetting 0
[   83.633314][ T4188] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   83.692561][ T4188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.725610][ T4188] usb 3-1: config 0 descriptor??
[   83.841907][ T4906] loop1: detected capacity change from 0 to 32768
[   83.877586][   T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   84.155464][   T26] audit: type=1326 audit(1777286610.313:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc560f41dd9 code=0x0
[   84.200321][ T4188] mcp2221 0003:04D8:00DD.0004: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[   84.214501][ T1346] kernel read not supported for file /dsp1 (pid: 1346 comm: kworker/0:3)
[   84.220123][ T4921] loop1: detected capacity change from 0 to 4096
[   84.302027][ T4927] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.321288][ T4926] loop0: detected capacity change from 0 to 2048
[   84.327676][   T23] usb 5-1: unable to get BOS descriptor or descriptor too short
[   84.361321][   T26] audit: type=1800 audit(1777286610.523:8): pid=4921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.234" name="file1" dev="loop1" ino=15 res=0 errno=0
[   84.418438][   T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.419932][ T4926] UDF-fs: warning (device loop0): udf_verify_domain_identifier: Possibly not OSTA UDF compliant logical volume descriptor.
[   84.476725][   T23] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   84.505838][   T23] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   84.517259][   T23] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   84.529325][ T4929] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   84.545352][ T4926] UDF-fs: error (device loop0): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (148 > 10)
[   84.586601][   T23] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   84.617663][ T4926] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[   84.628094][   T23] usb 5-1: config 1 interface 1 has no altsetting 0
[   84.654113][ T4926] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   84.667217][ T4926] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[   84.689580][ T4926] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[   84.707844][ T4188] usb 3-1: USB disconnect, device number 5
[   84.754802][ T4932] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config
[   84.878287][   T23] usb 5-1: string descriptor 0 read error: -22
[   84.884712][   T23] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   84.900098][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.327777][   T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.367517][ T4188] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   85.485153][ T4962] sp0: Synchronizing with TNC
[   85.513273][ T4965] sp0: Found TNC
[   85.578113][   T21] usb 4-1: Using ep0 maxpacket: 16
[   85.607818][ T4188] usb 2-1: Using ep0 maxpacket: 8
[   85.672582][ T4971] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.257'.
[   85.707982][   T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.727954][ T4188] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[   85.737177][ T4188] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   85.764545][   T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   85.791650][ T4188] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   85.800624][ T4976] loop0: detected capacity change from 0 to 512
[   85.804962][ T4188] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   85.818922][ T4188] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   85.839741][ T4188] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   85.860892][ T4188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.878229][   T23] usb 5-1: USB disconnect, device number 3
[   85.906500][ T4976] EXT4-fs (loop0): Ignoring removed nobh option
[   85.958571][   T21] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   85.965917][ T4976] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.259: invalid indirect mapped block 256 (level 2)
[   85.974354][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.993313][   T21] usb 4-1: Product: syz
[   85.997872][   T21] usb 4-1: Manufacturer: syz
[   86.003326][   T21] usb 4-1: SerialNumber: syz
[   86.033711][ T4976] EXT4-fs (loop0): Remounting filesystem read-only
[   86.051820][ T4976] EXT4-fs (loop0): 2 truncates cleaned up
[   86.058083][ T4976] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,errors=remount-ro,. Quota mode: writeback.
[   86.084500][ T4976] EXT4-fs error (device loop0) in ext4_setattr:5645: Readonly filesystem
[   86.098201][ T4976] EXT4-fs (loop0): Remounting filesystem read-only
[   86.147672][ T4188] usb 2-1: GET_CAPABILITIES returned 0
[   86.158138][ T4188] usbtmc 2-1:16.0: can't read capabilities
[   86.392340][ T4773] usb 2-1: USB disconnect, device number 5
[   86.507696][   T21] usb 4-1: 0:2 : does not exist
[   86.578002][   T21] usb 4-1: USB disconnect, device number 2
[   86.833895][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   86.863481][ T4981] loop2: detected capacity change from 0 to 32768
[   86.913304][ T5002] loop0: detected capacity change from 0 to 512
[   86.930356][ T4981] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.261 (4981)
[   86.991385][ T4981] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   87.017720][ T4981] BTRFS info (device loop2): turning off barriers
[   87.035241][ T4981] BTRFS info (device loop2): setting nodatasum
[   87.068082][ T5002] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   87.098988][ T4981] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   87.128402][ T5002] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.160425][ T4981] BTRFS info (device loop2): use zstd compression, level 3
[   87.162152][ T5007] loop1: detected capacity change from 0 to 4096
[   87.167807][ T4981] BTRFS info (device loop2): using free space tree
[   87.167855][ T4981] BTRFS info (device loop2): has skinny extents
[   87.271701][ T5011] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[   87.278957][ T5011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   87.334964][ T5011] vhci_hcd vhci_hcd.0: Device attached
[   87.340561][ T5002] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2923: inode #15: comm syz.0.270: corrupted xattr block 33
[   87.372342][ T5022] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.270: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[   87.477009][ T5002] EXT4-fs warning (device loop0): ext4_evict_inode:304: xattr delete (err -74)
[   87.490609][   T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   87.537687][ T1346] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   87.602292][   T21] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[   87.752296][   T23] usb 4-1: Using ep0 maxpacket: 8
[   87.779071][ T5007] ntfs3: loop1: MFT: r=1f, expect seq=1 instead of 0!
[   87.917657][   T23] usb 4-1: unable to get BOS descriptor or descriptor too short
[   87.933969][ T1346] usb 5-1: config 0 has no interfaces?
[   87.940077][ T1346] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   87.961879][ T1346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.995367][ T1346] usb 5-1: config 0 descriptor??
[   87.997789][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.047533][   T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 983
[   88.091569][   T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32
[   88.109684][   T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 109, changing to 10
[   88.194244][   T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 26473, setting to 1024
[   88.301964][ T5019] usb 41-1: recv xbuf, 0
[   88.317515][  T154] vhci_hcd: stop threads
[   88.318981][ T4596] usb 5-1: USB disconnect, device number 4
[   88.322897][  T154] vhci_hcd: release socket
[   88.360651][  T154] vhci_hcd: disconnect device
[   88.396933][   T21] vhci_hcd: vhci_device speed not set
[   88.408207][   T23] usb 4-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40
[   88.425640][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.434256][   T23] usb 4-1: Product: syz
[   88.439105][   T23] usb 4-1: Manufacturer: syz
[   88.443825][   T23] usb 4-1: SerialNumber: syz
[   88.454308][ T5060] loop0: detected capacity change from 0 to 512
[   88.545570][ T5060] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[   88.561973][ T5060] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   88.763680][ T5078] loop0: detected capacity change from 0 to 16
[   88.819152][ T5078] erofs: (device loop0): mounted with root inode @ nid 36.
[   88.858038][   T23] usb 4-1: MIDIStreaming interface descriptor not found
[   88.937823][   T23] usb 4-1: USB disconnect, device number 3
[   88.976197][ T5084] device sit0 entered promiscuous mode
[   89.031048][ T5084] netlink: 'syz.2.295': attribute type 1 has an invalid length.
[   89.077239][ T5084] netlink: 1 bytes leftover after parsing attributes in process `syz.2.295'.
[   89.219492][ T5094] ax25_connect(): syz.2.301 uses autobind, please contact jreuter@yaina.de
[   89.231304][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   89.397735][ T4600] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   89.557368][ T5100] loop2: detected capacity change from 0 to 8192
[   89.597851][ T5100] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[   89.618785][ T5100] REISERFS (device loop2): using ordered data mode
[   89.633569][ T5100] reiserfs: using flush barriers
[   89.654824][ T5100] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   89.661445][ T5096] loop0: detected capacity change from 0 to 32768
[   89.678062][ T5100] REISERFS (device loop2): checking transaction log (loop2)
[   89.693677][ T5100] REISERFS (device loop2): Using r5 hash to sort names
[   89.704149][ T5100] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   89.720155][ T5100] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   89.757730][ T4600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.777830][ T4600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.793638][ T5096] XFS (loop0): Mounting V5 Filesystem
[   89.816876][ T5100] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   89.839311][ T5100] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   89.897657][ T4600] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   89.915974][ T4600] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   89.926556][ T4600] usb 5-1: Manufacturer: syz
[   89.960026][ T4600] usb 5-1: config 0 descriptor??
[   89.964225][ T5096] XFS (loop0): Ending clean mount
[   90.063892][ T4184] XFS (loop0): Unmounting Filesystem
[   90.222185][ T5113] loop2: detected capacity change from 0 to 256
[   90.243142][   T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   90.404428][ T5115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.308'.
[   90.488020][   T21] usb 2-1: Using ep0 maxpacket: 32
[   90.553921][ T5122] loop2: detected capacity change from 0 to 1024
[   90.607689][   T21] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[   90.640829][   T21] usb 2-1: config 0 has no interface number 0
[   90.674028][ T4600] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71
[   90.686589][ T5122] hfsplus: bad catalog entry type
[   90.693499][ T4600] uclogic 0003:256C:006D.0005: failed probing parameters: -71
[   90.707910][ T4600] uclogic: probe of 0003:256C:006D.0005 failed with error -71
[   90.739402][ T4600] usb 5-1: USB disconnect, device number 5
[   90.765371][ T5126] EXT4-fs (loop0): inline encryption not supported
[   90.773500][ T4291] hfsplus: b-tree write err: -5, ino 25
[   90.790510][ T4291] hfsplus: b-tree write err: -5, ino 4
[   90.796155][ T4291] hfsplus: b-tree write err: -5, ino 2
[   90.813210][   T21] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   90.840909][ T4291] hfsplus: b-tree write err: -5, ino 26
[   90.849608][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.860009][ T5126] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   90.871628][ T5131] set_capacity_and_notify: 1 callbacks suppressed
[   90.871645][ T5131] loop3: detected capacity change from 0 to 256
[   90.883760][ T5126] System zones: 0-5
[   90.891887][   T21] usb 2-1: Product: syz
[   90.896250][   T21] usb 2-1: Manufacturer: syz
[   90.903524][   T21] usb 2-1: SerialNumber: syz
[   90.925037][   T21] usb 2-1: config 0 descriptor??
[   90.935632][ T5126] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,delalloc,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[   90.970263][ T5131] exfat: Deprecated parameter 'utf8'
[   90.990752][ T5131] exfat: Deprecated parameter 'utf8'
[   91.019355][   T21] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   91.057787][ T5131] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[   91.228336][   T21] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   91.267828][   T21] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   91.411302][ T5142] loop0: detected capacity change from 0 to 4096
[   91.554839][ T5154] loop3: detected capacity change from 0 to 4096
[   91.612869][ T5142] ntfs3: loop0: ino=21, fallocate(0x40) is not supported
[   91.685775][ T4600] usb 2-1: USB disconnect, device number 6
[   91.691984][ T5154] ntfs: (device loop3): parse_options(): NLS character set is not found. Using previous one default.
[   91.703327][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[   91.720830][ T5154] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[   91.728348][ T4600] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   91.736185][ T4184] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[   91.782353][ T4184] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   91.818060][ T4600] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   91.845729][ T5154] ntfs: volume version 3.1.
[   91.894036][ T4600] quatech2 2-1:0.51: device disconnected
[   92.066563][ T5167] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default.  You might want to try to use the mount option nls=utf8.
[   92.097529][   T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   92.300144][ T5167] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[   92.322498][ T5171] netlink: 'syz.4.332': attribute type 1 has an invalid length.
[   92.337594][   T21] usb 3-1: Using ep0 maxpacket: 8
[   92.344171][ T5171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.332'.
[   92.458032][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[   92.497126][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   92.544403][   T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   92.567166][ T5176] netlink: 64 bytes leftover after parsing attributes in process `syz.4.335'.
[   92.584674][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[   92.603649][   T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   92.634941][   T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   92.659529][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.681505][   T21] usb 3-1: config 0 descriptor??
[   92.698755][ T5159] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   92.989565][ T5191] netlink: 88 bytes leftover after parsing attributes in process `syz.0.341'.
[   93.009519][ T5191] netlink: 48 bytes leftover after parsing attributes in process `syz.0.341'.
[   93.128223][   T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   93.184413][ T5199] netlink: 36 bytes leftover after parsing attributes in process `syz.0.344'.
[   93.211012][ T4232] usb 3-1: USB disconnect, device number 6
[   93.234124][ T5200] loop4: detected capacity change from 0 to 512
[   93.354341][ T5207] loop1: detected capacity change from 0 to 2048
[   93.402101][ T5209] loop0: detected capacity change from 0 to 256
[   93.426930][ T5207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.461356][ T5209] exfat: Deprecated parameter 'utf8'
[   93.466865][ T5209] exfat: Deprecated parameter 'namecase'
[   93.473669][ T5209] exfat: Deprecated parameter 'namecase'
[   93.480473][ T5209] exfat: Deprecated parameter 'utf8'
[   93.487887][   T21] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[   93.496199][   T21] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   93.515904][   T21] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   93.538700][   T21] usb 4-1: config 220 has no interface number 2
[   93.545242][   T21] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   93.554290][ T5209] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   93.565761][   T21] usb 4-1: config 220 interface 0 has no altsetting 0
[   93.606214][   T21] usb 4-1: config 220 interface 76 has no altsetting 0
[   93.634648][   T21] usb 4-1: config 220 interface 1 has no altsetting 0
[   93.807835][   T21] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   93.817001][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.843111][   T21] usb 4-1: Product: syz
[   93.847361][   T21] usb 4-1: Manufacturer: syz
[   93.855476][   T21] usb 4-1: SerialNumber: syz
[   94.025931][ T5224] loop4: detected capacity change from 0 to 2048
[   94.036189][ T5220] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.046431][ T5220] team0: Port device bond1 added
[   94.087736][ T5224] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[   94.129312][ T5228] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.219357][   T21] uvcvideo 4-1:220.1: Unknown video format 4e000600-0020-2408-9a00-000000000000
[   94.241871][   T21] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[   94.259722][   T21] usb 4-1: No valid video chain found.
[   94.281220][   T21] usb 4-1: selecting invalid altsetting 0
[   94.410294][   T21] usb 4-1: selecting invalid altsetting 0
[   94.422026][   T21] usbtest: probe of 4-1:220.1 failed with error -22
[   94.453462][   T21] usb 4-1: USB disconnect, device number 4
[   94.620137][ T5240] loop1: detected capacity change from 0 to 1024
[   94.723514][ T5242] netlink: 'syz.0.364': attribute type 1 has an invalid length.
[   94.847208][ T5240] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[   94.873091][ T5240] hfsplus: xattr search failed
[   94.887141][ T5244] loop2: detected capacity change from 0 to 2048
[   94.952495][ T5244] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   95.017896][    T9] hfsplus: b-tree write err: -5, ino 25
[   95.023879][    T9] hfsplus: b-tree write err: -5, ino 4
[   95.030869][ T5244] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[   95.059383][    T9] hfsplus: b-tree write err: -5, ino 2
[   95.079994][ T5244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.092033][    T9] hfsplus: b-tree write err: -5, ino 28
[   95.593243][ T5270] loop0: detected capacity change from 0 to 256
[   95.746102][ T5270] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   95.764064][ T5236] F2FS-fs (loop4): invalid crc value
[   95.802268][ T5236] F2FS-fs (loop4): Found nat_bits in checkpoint
[   95.982456][ T5236] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   95.991195][ T5278] set_capacity_and_notify: 1 callbacks suppressed
[   95.991211][ T5278] loop3: detected capacity change from 0 to 1764
[   96.249562][ T4185] attempt to access beyond end of device
[   96.249562][ T4185] loop4: rw=2049, want=45104, limit=40427
[   96.849605][ T5305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.392'.
[   97.021294][ T5309] loop3: detected capacity change from 0 to 256
[   97.028494][ T5310] sch_tbf: burst 9 is lower than device lo mtu (65550) !
[   97.074953][ T5312] sch_tbf: burst 5 is lower than device lo mtu (81) !
[   97.186915][ T5318] loop4: detected capacity change from 0 to 164
[   97.233984][ T5319] loop1: detected capacity change from 0 to 128
[   97.241970][ T5321] netlink: 'syz.2.398': attribute type 17 has an invalid length.
[   97.251321][ T5321] netlink: 148 bytes leftover after parsing attributes in process `syz.2.398'.
[   97.327542][ T5318] iso9660: Corrupted directory entry in block 4 of inode 1792
[   97.348101][ T5324] netlink: 52 bytes leftover after parsing attributes in process `syz.0.400'.
[   97.754952][ T5340] tipc: Started in network mode
[   97.786257][ T5340] tipc: Node identity ac14140f, cluster identity 4711
[   97.815807][ T5340] tipc: New replicast peer: 255.255.255.255
[   97.867174][ T5340] tipc: Enabled bearer <udp:syz2>, priority 10
[   98.243711][ T5362] loop2: detected capacity change from 0 to 8
[   98.482640][ T5364] loop0: detected capacity change from 0 to 2048
[   98.594971][ T5364] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.674756][   T26] audit: type=1800 audit(1777286624.833:9): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.416" name="file1" dev="loop0" ino=1367 res=0 errno=0
[   98.784818][ T5375] loop3: detected capacity change from 0 to 512
[   98.853517][ T5334] loop4: detected capacity change from 0 to 32768
[   98.981218][   T21] tipc: Node number set to 2886997007
[   99.034884][ T5334] XFS (loop4): Mounting V5 Filesystem
[   99.038245][ T5390] loop0: detected capacity change from 0 to 1024
[   99.184171][ T5334] XFS (loop4): Ending clean mount
[   99.235700][ T5334] XFS (loop4): Quotacheck needed: Please wait.
[   99.246146][ T1168] hfsplus: b-tree write err: -5, ino 25
[   99.287111][ T1168] hfsplus: b-tree write err: -5, ino 4
[   99.326718][ T1168] hfsplus: b-tree write err: -5, ino 2
[   99.392212][ T5334] XFS (loop4): Quotacheck: Done.
[   99.435773][ T5397] loop3: detected capacity change from 0 to 64
[   99.672851][ T4185] XFS (loop4): Unmounting Filesystem
[  100.178586][ T5417] block nbd0: NBD_DISCONNECT
[  100.470800][ T5429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.442'.
[  100.477241][ T5433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'.
[  100.810272][ T5442] Quota error (device loop4): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  100.816612][ T5440] EXT4-fs (loop3): inline encryption not supported
[  100.822448][ T5442] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  100.841387][ T5442] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.447: Failed to acquire dquot type 1
[  100.867365][ T5444] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  100.914053][ T5442] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.447: bg 0: block 495: padding at end of block bitmap is not set
[  100.935207][ T5440] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  100.945783][ T5444] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  100.959577][ T5442] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  100.973739][ T5442] EXT4-fs (loop4): 1 truncate cleaned up
[  100.973854][ T5444] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002]
[  100.999422][ T5444] EXT4-fs (loop0): orphan cleanup on readonly fs
[  101.028308][ T5442] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  101.049384][ T5442] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.078996][ T5444] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  101.089958][ T5440] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters
[  101.103351][ T5410] JBD2: Ignoring recovery information on journal
[  101.117962][ T5444] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  101.126113][ T5444] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.448: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  101.137588][ T5410] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[  101.144071][ T5440] EXT4-fs (loop3): Remounting filesystem read-only
[  101.162090][ T5440] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.446: corrupted inode contents
[  101.178086][ T5410] JBD2: bad block at offset 32
[  101.182706][ T5444] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.448: couldn't read orphan inode 13 (err -117)
[  101.191801][ T5440] EXT4-fs (loop3): Remounting filesystem read-only
[  101.219822][ T5440] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #12: comm syz.3.446: mark_inode_dirty error
[  101.235964][ T5440] EXT4-fs (loop3): Remounting filesystem read-only
[  101.259485][ T5444] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x0000000000000833,nomblk_io_submit,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback.
[  101.273561][ T5440] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.446: corrupted inode contents
[  101.305625][ T5410] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  101.306732][ T5440] EXT4-fs (loop3): Remounting filesystem read-only
[  101.381842][ T5440] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.446: mark_inode_dirty error
[  101.433141][ T5440] EXT4-fs (loop3): Remounting filesystem read-only
[  101.440776][ T5444] EXT4-fs (loop0): shut down requested (0)
[  101.443353][ T5440] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.446: corrupted inode contents
[  101.502566][ T5440] EXT4-fs (loop3): Remounting filesystem read-only
[  101.517697][ T5440] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  101.543353][ T5440] EXT4-fs (loop3): Remounting filesystem read-only
[  101.559436][ T5440] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.446: corrupted inode contents
[  101.577313][ T5440] EXT4-fs (loop3): Remounting filesystem read-only
[  101.584841][ T5440] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.446: mark_inode_dirty error
[  101.604317][ T5440] EXT4-fs (loop3): Remounting filesystem read-only
[  101.626461][ T5440] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  101.663704][ T5440] EXT4-fs (loop3): Remounting filesystem read-only
[  101.667750][ T5457] netlink: 'syz.4.450': attribute type 10 has an invalid length.
[  101.685505][ T5440] EXT4-fs (loop3): 1 truncate cleaned up
[  101.693215][ T5440] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,noblock_validity,resgid=0x0000000000000000,inlinecrypt,errors=remount-ro,noblock_validity,usrjquota=,nodelalloc,resgid=0x00000000000000002. Quota mode: writeback.
[  101.813942][ T4194] ocfs2: Unmounting device (7,1) on (node local)
[  101.843857][ T5440] EXT4-fs (loop3): shut down requested (2)
[  101.850746][ T5457] team0 (unregistering): Port device team_slave_0 removed
[  101.964333][ T5457] team0 (unregistering): Port device team_slave_1 removed
[  102.272847][ T5473] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only
[  102.341343][ T5477] set_capacity_and_notify: 5 callbacks suppressed
[  102.341359][ T5477] loop4: detected capacity change from 0 to 1024
[  102.357589][ T5473] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  102.427945][ T5477] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  102.463910][ T5477] EXT4-fs error (device loop4): ext4_get_journal_inode:5187: inode #32: comm syz.4.459: iget: special inode unallocated
[  102.504363][ T5486] loop1: detected capacity change from 0 to 64
[  102.531714][ T5477] EXT4-fs (loop4): no journal found
[  102.542958][ T5477] EXT4-fs (loop4): can't get journal size
[  102.576742][ T5477] EXT4-fs (loop4): filesystem is read-only
[  102.586929][ T5477] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none.
[  102.620168][ T5493] loop0: detected capacity change from 0 to 64
[  102.697856][ T5486] hfs: request for non-existent node 131072 in B*Tree
[  102.705386][ T5486] hfs: request for non-existent node 131072 in B*Tree
[  102.878444][ T5500] device erspan0 entered promiscuous mode
[  103.152824][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'.
[  103.177657][ T4232] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  103.567125][ T5535] Zero length message leads to an empty skb
[  103.617790][ T4232] usb 3-1: device not accepting address 7, error -71
[  103.784701][ T5539] loop2: detected capacity change from 0 to 2048
[  103.967656][ T5539] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[  104.064774][ T5549] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[  104.189425][ T5553] netlink: 36 bytes leftover after parsing attributes in process `syz.4.493'.
[  104.201057][ T5539] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[  104.249589][ T5553] netlink: 220 bytes leftover after parsing attributes in process `syz.4.493'.
[  104.306461][ T5526] loop1: detected capacity change from 0 to 32768
[  104.451915][ T5526] JBD2: Ignoring recovery information on journal
[  104.455890][ T5564] device batadv0 entered promiscuous mode
[  104.509780][ T5564] device bond0 entered promiscuous mode
[  104.557228][ T5526] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  104.578871][ T5564] device bond_slave_0 entered promiscuous mode
[  104.580582][ T5560] loop2: detected capacity change from 0 to 8192
[  104.585751][ T5564] device bond_slave_1 entered promiscuous mode
[  104.703932][ T5560] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  104.731003][ T5560] REISERFS (device loop2): using ordered data mode
[  104.738467][ T5560] reiserfs: using flush barriers
[  104.753907][ T5560] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  104.772120][ T5564] 8021q: adding VLAN 0 to HW filter on device hsr1
[  104.782860][ T5560] REISERFS (device loop2): checking transaction log (loop2)
[  104.797346][ T5564] device batadv0 left promiscuous mode
[  104.808120][ T5564] device bond0 left promiscuous mode
[  104.813546][ T5564] device bond_slave_0 left promiscuous mode
[  104.822382][ T5564] device bond_slave_1 left promiscuous mode
[  104.832645][ T5560] REISERFS (device loop2): Using r5 hash to sort names
[  104.850127][ T5560] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  104.927686][ T5560] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  105.064506][ T5560] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  105.123355][ T4194] ocfs2: Unmounting device (7,1) on (node local)
[  105.156256][ T5560] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  105.177235][ T5583] loop0: detected capacity change from 0 to 64
[  105.207896][ T5560] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  105.251445][ T5585] IPv6: NLM_F_CREATE should be specified when creating new route
[  105.635975][ T5597] loop1: detected capacity change from 0 to 64
[  105.721430][ T5603] loop2: detected capacity change from 0 to 256
[  105.794249][   T26] audit: type=1800 audit(1777286631.953:10): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.505" name="file1" dev="loop1" ino=5 res=0 errno=0
[  106.192307][ T5628] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  106.246672][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'.
[  106.264198][ T5629] netlink: 3 bytes leftover after parsing attributes in process `syz.4.526'.
[  106.528525][ T5645] device gretap0 entered promiscuous mode
[  106.563704][ T5645] netlink: 31 bytes leftover after parsing attributes in process `syz.1.534'.
[  106.584027][ T5647] netlink: 642 bytes leftover after parsing attributes in process `syz.4.535'.
[  106.637733][ T4232] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  106.797283][ T5658] loop4: detected capacity change from 0 to 64
[  106.889202][ T4232] usb 3-1: Using ep0 maxpacket: 8
[  107.007803][ T4232] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  107.033860][ T4232] usb 3-1: config 179 has no interface number 0
[  107.066416][ T4232] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  107.092149][ T4232] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  107.116300][ T5667] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.545'.
[  107.136057][ T4232] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  107.178238][ T4232] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  107.217536][ T4232] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  107.247677][ T4232] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  107.256897][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.327968][ T5637] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  107.649610][   T21] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input9
[  107.793174][ T5694] loop1: detected capacity change from 0 to 1024
[  107.840331][   T21] usb 3-1: USB disconnect, device number 9
[  107.857481][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  107.866540][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  107.905150][   T21] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  107.916802][ T5694] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  107.937519][ T5694] EXT4-fs (loop1): invalid journal inode
[  107.955142][ T5694] EXT4-fs (loop1): can't get journal size
[  107.989164][ T5694] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 17104912: comm syz.1.554: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  108.026698][ T5694] EXT4-fs (loop1): failed to initialize system zone (-117)
[  108.041057][ T5694] EXT4-fs (loop1): mount failed
[  108.233299][ T5709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.562'.
[  108.531787][ T5723] loop1: detected capacity change from 0 to 256
[  108.635298][ T5723] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d)
[  108.687541][ T5726] loop0: detected capacity change from 0 to 4096
[  108.737640][ T4260] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  108.748490][ T5726] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  108.776231][ T5726] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  108.799936][ T5698] loop3: detected capacity change from 0 to 32768
[  108.804303][ T5726] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  108.866014][ T5726] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  108.909815][ T5726] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  108.956658][ T5726] ntfs: volume version 3.1.
[  108.985348][ T5726] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  109.037699][ T4260] usb 5-1: Using ep0 maxpacket: 16
[  109.046519][ T5726] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  109.072636][ T5736] netlink: del zone limit has 8 unknown bytes
[  109.123265][ T5726] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  109.177830][ T4260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.187555][ T5726] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  109.202547][ T4260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.247456][ T4260] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  109.249163][ T5741] loop2: detected capacity change from 0 to 256
[  109.322874][ T4260] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  109.358988][ T5741] exfat: Deprecated parameter 'utf8'
[  109.359650][ T4260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.364551][ T5741] exfat: Deprecated parameter 'namecase'
[  109.398547][ T4260] usb 5-1: config 0 descriptor??
[  109.399715][ T5741] exfat: Deprecated parameter 'namecase'
[  109.484214][ T5741] exfat: Deprecated parameter 'utf8'
[  109.503364][ T5743] netlink: 140 bytes leftover after parsing attributes in process `syz.0.577'.
[  109.557607][ T1346] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  109.575764][ T5741] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  109.849696][ T1346] usb 2-1: Using ep0 maxpacket: 8
[  109.868760][ T5721] udc-core: couldn't find an available UDC or it's busy
[  109.876008][ T5721] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  109.885071][ T5751] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[  109.901009][ T4260] microsoft 0003:045E:07DA.0006: No inputs registered, leaving
[  109.928198][ T5751] netlink: 'syz.2.580': attribute type 2 has an invalid length.
[  109.946740][ T4260] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  109.983835][ T4260] microsoft 0003:045E:07DA.0006: no inputs found
[  109.993965][ T4260] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway
[  110.014355][ T1346] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  110.039260][ T1346] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  110.073185][ T1346] usb 2-1: config 6 has no interface number 0
[  110.136567][ T1346] usb 2-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  110.150039][ T5762] loop2: detected capacity change from 0 to 512
[  110.227624][ T4260] usb 5-1: USB disconnect, device number 6
[  110.258970][ T5762] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.585: invalid indirect mapped block 256 (level 2)
[  110.308374][ T5760] fido_id[5760]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  110.351031][ T5762] EXT4-fs (loop2): 2 truncates cleaned up
[  110.357743][ T1346] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  110.370112][ T1346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.379147][ T1346] usb 2-1: Product: syz
[  110.383352][ T1346] usb 2-1: Manufacturer: syz
[  110.388144][ T1346] usb 2-1: SerialNumber: syz
[  110.405589][ T5762] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[  110.438709][ T1346] hso 2-1:6.2: Failed to find INT IN ep
[  110.590842][ T5771] syz.3.588 sent an empty control message without MSG_MORE.
[  110.656596][ T5747] loop0: detected capacity change from 0 to 40427
[  110.734764][ T5775] loop3: detected capacity change from 0 to 2048
[  110.751171][ T5747] F2FS-fs (loop0): Found nat_bits in checkpoint
[  110.773161][ T1346] usb 2-1: USB disconnect, device number 7
[  110.818220][ T5780] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.836849][ T5784] loop2: detected capacity change from 0 to 256
[  110.978397][ T5784] exfat: Deprecated parameter 'namecase'
[  110.984261][ T5784] exfat: Deprecated parameter 'utf8'
[  110.989787][ T5747] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  111.057816][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  111.057833][   T26] audit: type=1800 audit(1777286637.223:12): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.581" name="file1" dev="loop0" ino=10 res=0 errno=0
[  111.061718][ T5784] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  111.189897][ T4184] attempt to access beyond end of device
[  111.189897][ T4184] loop0: rw=2049, want=45104, limit=40427
[  111.239628][ T5784] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d)
[  111.775635][ T5807] netlink: 'syz.2.602': attribute type 1 has an invalid length.
[  111.940849][ T5817] loop3: detected capacity change from 0 to 512
[  112.042563][ T5817] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  112.107001][ T5817] EXT4-fs (loop3): shut down requested (2)
[  112.435244][ T5844] netlink: 60 bytes leftover after parsing attributes in process `syz.3.614'.
[  112.475543][ T5844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.614'.
[  113.260230][ T4229] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  113.448410][ T5885] loop4: detected capacity change from 0 to 128
[  113.488274][ T5885] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  113.507593][ T4229] usb 2-1: Using ep0 maxpacket: 32
[  113.525203][ T5890] loop2: detected capacity change from 0 to 512
[  113.568298][ T5885] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nomblk_io_submit,delalloc,,errors=continue. Quota mode: none.
[  113.594058][ T5885] ext4 filesystem being mounted at /136/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.616038][ T5890] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  113.639720][ T4229] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  113.690093][ T4229] usb 2-1: config 0 has no interface number 0
[  113.775387][ T5890] EXT4-fs (loop2): 1 truncate cleaned up
[  113.816391][ T5890] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000101,nolazytime,,errors=continue. Quota mode: none.
[  113.847926][ T4229] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  113.873521][ T5890] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.638: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  113.908399][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.918594][ T5897] loop3: detected capacity change from 0 to 764
[  113.922903][ T4229] usb 2-1: Product: syz
[  113.932419][ T4229] usb 2-1: Manufacturer: syz
[  113.938955][ T5890] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem
[  113.944186][ T4229] usb 2-1: SerialNumber: syz
[  113.957077][ T4229] usb 2-1: config 0 descriptor??
[  114.000185][ T5897] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  114.014489][ T4229] smsc95xx v2.0.0
[  114.036687][ T5899] device gretap0 entered promiscuous mode
[  114.076858][ T5899] device veth1 entered promiscuous mode
[  114.146750][ T5899] device hsr1 entered promiscuous mode
[  114.159566][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  114.289356][ T5903] loop2: detected capacity change from 0 to 2048
[  114.382951][ T5903] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  114.440850][ T5903] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.481819][ T5903] fs-verity (loop2, inode 13): Unknown hash algorithm number: 3
[  114.487461][ T1346] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  114.613466][ T5921] kvm [5920]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x40000007 data 0x4
[  114.687547][ T4229] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  114.702181][ T4229] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  114.737633][ T4229] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  114.762785][ T4229] smsc95xx: probe of 2-1:0.67 failed with error -71
[  114.808291][ T4229] usb 2-1: USB disconnect, device number 8
[  114.996719][ T5937] loop2: detected capacity change from 0 to 2048
[  115.022473][ T5935] Falling back ldisc for ttyS3.
[  115.067901][ T1346] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  115.084904][ T5940] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.106708][ T1346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.146501][ T1346] usb 4-1: Product: syz
[  115.170335][ T1346] usb 4-1: Manufacturer: syz
[  115.198297][ T1346] usb 4-1: SerialNumber: syz
[  115.217287][ T5945] loop0: detected capacity change from 0 to 1024
[  115.245118][ T1346] usb 4-1: config 0 descriptor??
[  115.297727][ T5945] EXT4-fs (loop0): Ignoring removed orlov option
[  115.309372][ T1346] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  115.371261][ T5945] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  115.374941][ T1346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  115.458105][ T1346] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  115.469766][ T1346] usb 4-1: media controller created
[  115.474507][ T5958] netlink: 'syz.1.661': attribute type 5 has an invalid length.
[  115.489547][ T1346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  115.578721][ T5905] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  115.621194][ T5905] dvb-usb: bulk message failed: -22 (7/0)
[  115.654680][ T1346] DVB: Unable to find symbol mt352_attach()
[  115.763046][ T1346] DVB: Unable to find symbol nxt6000_attach()
[  115.777539][ T1346] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  115.830406][ T1346] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11
[  115.887471][ T4600] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  115.927238][ T1346] dvb-usb: schedule remote query interval to 1000 msecs.
[  115.945027][ T1346] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  115.967282][ T1346] dvb-usb: bulk message failed: -22 (7/0)
[  115.988594][ T1346] dvb-usb: bulk message failed: -22 (7/0)
[  116.037806][ T1346] usb 4-1: USB disconnect, device number 5
[  116.182382][ T1346] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  116.297669][ T4600] usb 3-1: unable to get BOS descriptor or descriptor too short
[  116.395188][ T4600] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.416179][ T4600] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  116.454659][ T4600] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  116.497166][ T5964] loop4: detected capacity change from 0 to 32768
[  116.511864][ T4600] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  116.532451][ T5987] pimreg: tun_chr_ioctl cmd 1074812117
[  116.557186][ T4600] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  116.577298][ T4600] usb 3-1: config 1 interface 1 has no altsetting 0
[  116.626958][ T5964] XFS (loop4): Mounting V5 Filesystem
[  116.732336][ T5964] XFS (loop4): Ending clean mount
[  116.817699][ T4600] usb 3-1: string descriptor 0 read error: -22
[  116.834357][ T4600] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  116.845749][ T4600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.959890][ T4185] XFS (loop4): Unmounting Filesystem
[  117.285432][ T4229] kernel read not supported for file /video9 (pid: 4229 comm: kworker/1:4)
[  117.317517][ T4232] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  117.331429][ T6023] netlink: 'syz.1.678': attribute type 1 has an invalid length.
[  117.564455][ T6030] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  117.587493][ T4232] usb 4-1: Using ep0 maxpacket: 8
[  117.667252][ T6034] input: syz1 as /devices/virtual/input/input12
[  117.710465][ T4232] usb 4-1: config 0 has no interfaces?
[  117.721209][ T4232] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  117.764391][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.809198][ T4232] usb 4-1: config 0 descriptor??
[  117.840692][ T4596] usb 3-1: USB disconnect, device number 10
[  117.883846][ T6039] loop4: detected capacity change from 0 to 512
[  117.982566][   T26] audit: type=1800 audit(1777286650.148:13): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.684" name="file1" dev="loop4" ino=1048612 res=0 errno=0
[  118.119578][ T6044] loop1: detected capacity change from 0 to 1024
[  118.315283][ T4209] hfsplus: b-tree write err: -5, ino 25
[  118.322148][ T4209] hfsplus: b-tree write err: -5, ino 4
[  118.341754][ T4209] hfsplus: b-tree write err: -5, ino 2
[  118.357877][ T4209] hfsplus: b-tree write err: -5, ino 20
[  118.613083][ T6046] loop4: detected capacity change from 0 to 32768
[  118.688941][ T6061] loop0: detected capacity change from 0 to 512
[  118.730122][ T6046] XFS (loop4): Mounting V5 Filesystem
[  118.752305][ T6061] EXT4-fs (loop0): Ignoring removed orlov option
[  118.765040][ T6061] EXT4-fs (loop0): Test dummy encryption mode enabled
[  118.841060][ T6061] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  118.888217][ T6080] program syz.1.699 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  118.927933][ T6061] EXT4-fs (loop0): 1 truncate cleaned up
[  118.946579][ T6061] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback.
[  119.013765][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'.
[  119.033140][ T6046] XFS (loop4): Ending clean mount
[  119.038576][ T6085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.701'.
[  119.101361][ T4185] XFS (loop4): Unmounting Filesystem
[  119.421345][ T6061] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  119.632889][ T6111] loop1: detected capacity change from 0 to 16
[  119.726116][ T6111] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 10000)
[  119.909630][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.956628][ T4260] usb 4-1: USB disconnect, device number 6
[  120.317614][ T4232] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  120.388577][ T6143] loop3: detected capacity change from 0 to 2048
[  120.437720][ T6143] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  120.485358][ T6143] NILFS (loop3): mounting unchecked fs
[  120.492043][ T4373] udevd[4373]: incorrect nilfs2 checksum on /dev/loop3
[  120.504347][ T6143] NILFS (loop3): recovery required for readonly filesystem
[  120.512451][ T6143] NILFS (loop3): write access will be enabled during recovery
[  120.551663][ T6143] NILFS (loop3): recovery complete
[  120.567556][ T4232] usb 3-1: Using ep0 maxpacket: 16
[  120.635272][ T6146] loop0: detected capacity change from 0 to 8192
[  120.637613][ T6134] loop4: detected capacity change from 0 to 32768
[  120.686342][ T6146] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  120.700364][ T4232] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.701004][ T6146] REISERFS (device loop0): using ordered data mode
[  120.719228][ T6146] reiserfs: using flush barriers
[  120.726617][ T6146] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  120.766480][ T6149] loop3: detected capacity change from 0 to 128
[  120.794720][ T6151] program syz.1.727 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.805096][ T6146] REISERFS (device loop0): checking transaction log (loop0)
[  120.828568][ T4232] usb 3-1: config 0 interface 0 has no altsetting 0
[  120.868436][ T6149] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  120.886124][ T4232] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  120.913357][ T6149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.934960][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.986467][ T4232] usb 3-1: config 0 descriptor??
[  121.045186][ T6146] REISERFS (device loop0): Using r5 hash to sort names
[  121.072788][ T6146] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  121.155211][ T6146] REISERFS warning (device loop0): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=255, len=3 - odd
[  121.403759][ T6165] loop4: detected capacity change from 0 to 512
[  121.440052][ T6165] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  121.495634][ T6165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  121.510867][ T4232] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  121.520216][ T6165] EXT4-fs (loop4): orphan cleanup on readonly fs
[  121.537669][ T6165] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.735: bad orphan inode 267
[  121.549955][ T6172] program syz.0.734 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  121.585438][ T6165] EXT4-fs (loop4): Remounting filesystem read-only
[  121.643002][ T6170] loop3: detected capacity change from 0 to 4096
[  121.650413][ T6165] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,discard,errors=remount-ro,data_err=ignore. Quota mode: none.
[  121.674705][ T6165] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.735: dx entry: limit 0 != root limit 125
[  121.688660][ T6165] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.735: Corrupt directory, running e2fsck is recommended
[  121.820358][ T6170] ntfs: volume version 3.1.
[  121.924713][ T4600] usb 3-1: USB disconnect, device number 11
[  122.334741][ T6163] loop1: detected capacity change from 0 to 32768
[  122.355884][ T6191] input: syz0 as /devices/virtual/input/input13
[  122.399802][ T6163] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.733 (6163)
[  122.449315][ T6163] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  122.514386][ T6163] BTRFS info (device loop1): metadata ratio 2
[  122.543395][ T6163] BTRFS info (device loop1): force zlib compression, level 3
[  122.572845][ T6163] BTRFS info (device loop1): enabling auto defrag
[  122.594411][ T6163] BTRFS info (device loop1): max_inline at 0
[  122.631160][ T6163] BTRFS info (device loop1): using free space tree
[  122.677452][ T6163] BTRFS info (device loop1): has skinny extents
[  122.814130][ T6204] hfsplus: extend alloc file! (16384,256,150995124)
[  123.253567][ T6193] XFS (loop3): Mounting V5 Filesystem
[  123.369553][ T6193] XFS (loop3): Ending clean mount
[  123.388993][ T6193] XFS (loop3): Quotacheck needed: Please wait.
[  123.570327][ T6193] XFS (loop3): Quotacheck: Done.
[  123.912066][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[  124.128229][ T4192] XFS (loop3): Unmounting Filesystem
[  124.208272][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.770'.
[  124.404254][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.776'.
[  124.494736][ T6278] device bond0 entered promiscuous mode
[  124.500174][ T6284] set_capacity_and_notify: 3 callbacks suppressed
[  124.500189][ T6284] loop4: detected capacity change from 0 to 128
[  124.516420][ T6278] device bond_slave_0 entered promiscuous mode
[  124.540285][ T6278] device bond_slave_1 entered promiscuous mode
[  124.566075][ T6278] device ipvlan0 entered promiscuous mode
[  124.609552][ T6278] device ipvlan0 left promiscuous mode
[  124.625455][ T6278] device bond0 left promiscuous mode
[  124.631016][ T6278] device bond_slave_0 left promiscuous mode
[  124.644398][ T6278] device bond_slave_1 left promiscuous mode
[  124.778230][ T6285] loop1: detected capacity change from 0 to 8192
[  124.851728][ T6285] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  124.893386][ T6285] REISERFS (device loop1): using ordered data mode
[  124.900779][ T6285] reiserfs: using flush barriers
[  124.914524][ T6285] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  124.968427][ T6285] REISERFS (device loop1): checking transaction log (loop1)
[  124.992401][ T6285] REISERFS (device loop1): Using r5 hash to sort names
[  125.001288][ T6285] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  125.032220][ T6285] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  125.108169][ T4260] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  125.128520][ T6285] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  125.170534][ T6285] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  125.229510][ T6285] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  125.320696][ T6308] loop3: detected capacity change from 0 to 8192
[  125.355643][ T6308] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  125.368235][ T6308] REISERFS (device loop3): using ordered data mode
[  125.380653][ T6308] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  125.397760][ T6308] REISERFS (device loop3): checking transaction log (loop3)
[  125.406216][ T6308] REISERFS (device loop3): Using r5 hash to sort names
[  125.414067][ T6308] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  125.451375][ T6308] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  125.461167][ T4602] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  125.512705][ T6308] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  125.558486][ T4260] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 36, changing to 9
[  125.577656][ T4260] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 1281, setting to 1024
[  125.610488][ T4260] usb 1-1: config 0 interface 0 has no altsetting 0
[  125.679473][ T6316] netlink: 'syz.1.792': attribute type 29 has an invalid length.
[  125.698359][ T6316] netlink: 'syz.1.792': attribute type 29 has an invalid length.
[  125.717613][ T4602] usb 3-1: Using ep0 maxpacket: 16
[  125.779346][ T4260] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  125.797493][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.840495][ T4260] usb 1-1: Product: syz
[  125.845006][ T4260] usb 1-1: Manufacturer: syz
[  125.851526][ T4602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.863568][ T4260] usb 1-1: SerialNumber: syz
[  125.872936][ T4602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.898596][ T4602] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  125.906302][ T4260] usb 1-1: config 0 descriptor??
[  125.926169][ T4602] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  125.962553][ T4602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.978531][ T6291] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  125.996429][ T4602] usb 3-1: config 0 descriptor??
[  126.010597][ T4260] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected
[  126.021964][ T4260] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  126.031087][ T4260] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  126.040171][ T4260] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  126.048309][ T4260] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  126.056478][ T4260] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85
[  126.065124][ T4260] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5
[  126.099526][ T4260] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  126.137924][ T4260] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83
[  126.164170][ T4260] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3
[  126.174382][ T4260] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4
[  126.182408][ T4260] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86
[  126.190404][ T4260] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6
[  126.214440][ T4260] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  126.320382][ T6334] option changes via remount are deprecated (pid=6333 comm=syz.4.800)
[  126.351801][ T6336] loop1: detected capacity change from 0 to 1024
[  126.397240][ T6336] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  126.428511][ T6336] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #32: comm syz.1.801: iget: special inode unallocated
[  126.434358][ T4280] usb 1-1: USB disconnect, device number 5
[  126.463587][ T6338] loop4: detected capacity change from 0 to 512
[  126.473322][ T4280] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  126.479430][ T6336] EXT4-fs (loop1): no journal found
[  126.498852][ T4280] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  126.499021][ T4602] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  126.519089][ T4280] keyspan 1-1:0.0: device disconnected
[  126.526089][ T6336] EXT4-fs (loop1): can't get journal size
[  126.544808][ T6336] EXT4-fs (loop1): filesystem is read-only
[  126.552842][ T6336] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none.
[  126.566594][ T6327] loop3: detected capacity change from 0 to 32768
[  126.582642][ T6338] EXT4-fs (loop4): Test dummy encryption mode enabled
[  126.589817][ T6338] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  126.606866][ T6336] EXT4-fs (loop1): shut down requested (1)
[  126.636360][   T26] audit: type=1800 audit(1777286658.798:14): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.797" name="file1" dev="loop3" ino=4 res=0 errno=0
[  126.659026][ T6338] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.802: bad orphan inode 131083
[  126.707663][ T4602] microsoft 0003:045E:07DA.0008: No inputs registered, leaving
[  126.718174][ T4602] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  126.723458][ T6338] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none.
[  126.834205][ T4602] microsoft 0003:045E:07DA.0008: no inputs found
[  126.860729][ T4602] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  126.877059][ T4602] usb 3-1: USB disconnect, device number 12
[  127.100688][ T6342] fido_id[6342]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  127.143051][ T6350] process 'syz.0.806' launched './file0' with NULL argv: empty string added
[  127.357284][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'.
[  127.804774][ T6377] loop0: detected capacity change from 0 to 4096
[  127.908973][ T6377] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  127.965164][   T26] audit: type=1800 audit(1777286660.128:15): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.815" name="file1" dev="loop0" ino=30 res=0 errno=0
[  127.997503][ T4280] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  128.152859][ T6398] loop1: detected capacity change from 0 to 256
[  128.363593][ T6398] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198)
[  128.397745][ T4280] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.428748][ T4280] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.447603][ T6398] FAT-fs (loop1): Filesystem has been set read-only
[  128.506294][ T6398] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198)
[  128.637727][ T4280] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  128.671195][ T4280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.726411][ T4280] usb 4-1: Product: syz
[  128.752492][ T4280] usb 4-1: Manufacturer: syz
[  128.781255][ T4280] usb 4-1: SerialNumber: syz
[  128.845805][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.835'.
[  128.870628][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.835'.
[  128.899223][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.835'.
[  128.928160][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.835'.
[  129.071746][ T6422] loop1: detected capacity change from 0 to 256
[  129.546988][ T4603] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  129.629828][ T6439] loop1: detected capacity change from 0 to 4096
[  129.685959][ T6417] loop2: detected capacity change from 0 to 32768
[  129.702661][ T6439] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  129.748869][ T4280] cdc_ncm 4-1:1.0: SET_CRC_MODE failed
[  129.761193][ T6417] 
[  129.761193][ T6417]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  129.761193][ T6417] 
[  129.773978][   T26] audit: type=1800 audit(1777286661.928:16): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.844" name="file1" dev="loop1" ino=30 res=0 errno=0
[  129.781638][ T4280] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed
[  129.888965][ T4280] cdc_ncm 4-1:1.0: bind() failure
[  129.907704][ T4603] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  129.917048][ T4603] usb 5-1: config 0 has no interface number 0
[  129.931240][ T4280] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  129.958749][ T4280] cdc_ncm 4-1:1.1: bind() failure
[  129.977079][ T4603] usb 5-1: config 0 interface 2 has no altsetting 0
[  130.002474][ T4183] 
[  130.002474][ T4183]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.002474][ T4183] 
[  130.024636][ T4280] usb 4-1: USB disconnect, device number 7
[  130.052412][ T4183] 
[  130.052412][ T4183]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.052412][ T4183] 
[  130.152871][ T4603] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  130.174304][ T4603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.208710][ T4603] usb 5-1: Product: syz
[  130.213040][ T4603] usb 5-1: Manufacturer: syz
[  130.256436][ T4603] usb 5-1: SerialNumber: syz
[  130.277915][ T4603] usb 5-1: config 0 descriptor??
[  130.329076][ T4603] hub 5-1:0.2: bad descriptor, ignoring hub
[  130.335053][ T4603] hub: probe of 5-1:0.2 failed with error -5
[  130.387233][ T4603] f81232 5-1:0.2: f81534a converter detected
[  130.557534][ T4603] f81534a ttyUSB0: f81232_set_register failed status: -71
[  130.565055][ T4603] f81534a: probe of ttyUSB0 failed with error -5
[  130.827449][ T4603] usb 5-1: reset high-speed USB device number 7 using dummy_hcd
[  131.807743][ T1346] usb 5-1: USB disconnect, device number 7
[  131.814521][ T1346] f81232 5-1:0.2: device disconnected
[  131.846805][ T6485] loop3: detected capacity change from 0 to 4096
[  132.009008][ T6495] loop1: detected capacity change from 0 to 256
[  132.209863][ T6485] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  132.270062][   T26] audit: type=1800 audit(1777286664.438:17): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.863" name="file1" dev="loop3" ino=30 res=0 errno=0
[  132.726572][ T6492] loop2: detected capacity change from 0 to 32768
[  132.867328][ T6492] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.868 (6492)
[  132.891902][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.898495][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.948761][ T4603] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  133.003725][ T6492] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  133.016505][ T6514] netlink: 72 bytes leftover after parsing attributes in process `syz.3.876'.
[  133.056873][ T6492] BTRFS info (device loop2): using free space tree
[  133.109539][ T6492] BTRFS info (device loop2): has skinny extents
[  133.235784][ T6532] loop4: detected capacity change from 0 to 128
[  133.250551][ T6527] loop1: detected capacity change from 0 to 128
[  133.322279][ T6539] loop3: detected capacity change from 0 to 4096
[  133.343924][ T6532] attempt to access beyond end of device
[  133.343924][ T6532] loop4: rw=2049, want=250, limit=128
[  133.347726][ T4603] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.371268][ T6539] EXT4-fs (loop3): inline encryption not supported
[  133.380293][ T6539] EXT4-fs (loop3): Test dummy encryption mode enabled
[  133.389653][ T4603] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.408704][ T6539] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003]
[  133.432316][ T6527] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  133.497276][ T6527] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  133.517561][ T6492] BTRFS info (device loop2): enabling ssd optimizations
[  133.537673][ T6539] System zones: 0-5
[  133.567521][ T4603] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  133.578092][ T4603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.586221][ T4603] usb 1-1: Product: syz
[  133.586806][ T6539] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,nodelalloc,barrier,,errors=continue. Quota mode: writeback.
[  133.595760][ T4603] usb 1-1: Manufacturer: syz
[  133.623402][ T4603] usb 1-1: SerialNumber: syz
[  133.973994][ T4374] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4374)
[  134.007824][ T6551] loop4: detected capacity change from 0 to 4096
[  134.260923][ T6551] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  134.401464][   T26] audit: type=1800 audit(1777286666.568:18): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.886" name="file1" dev="loop4" ino=30 res=0 errno=0
[  134.497460][ T6554] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  134.570219][ T4603] cdc_ncm 1-1:1.0: SET_CRC_MODE failed
[  134.573772][ T6562] loop3: detected capacity change from 0 to 512
[  134.587543][ T4603] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed
[  134.627569][ T4603] cdc_ncm 1-1:1.0: bind() failure
[  134.635958][ T4603] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  134.667501][ T4600] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  134.695919][ T4603] cdc_ncm 1-1:1.1: bind() failure
[  134.712096][ T6562] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  134.736294][ T4603] usb 1-1: USB disconnect, device number 6
[  134.757546][ T6554] usb 3-1: Using ep0 maxpacket: 32
[  134.799811][ T6562] EXT4-fs (loop3): 1 truncate cleaned up
[  134.847272][ T6562] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[  134.897811][ T6554] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  134.921028][ T6554] usb 3-1: config 0 interface 0 has no altsetting 0
[  134.927958][ T6554] usb 3-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00
[  134.939111][ T6554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.952121][ T6554] usb 3-1: config 0 descriptor??
[  135.033371][ T6567] loop4: detected capacity change from 0 to 128
[  135.037659][ T4600] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  135.048817][ T4600] usb 2-1: config 0 has no interface number 0
[  135.067517][ T4600] usb 2-1: config 0 interface 2 has no altsetting 0
[  135.138068][ T6567] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  135.166110][ T6567] hpfs: filesystem error: improperly stopped
[  135.227642][ T4600] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  135.236356][ T6567] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  135.244330][ T4600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.275056][ T6567] hpfs: You really don't want any checks? You are crazy...
[  135.285633][ T4600] usb 2-1: Product: syz
[  135.300401][ T4600] usb 2-1: Manufacturer: syz
[  135.305067][ T4600] usb 2-1: SerialNumber: syz
[  135.308570][ T6567] hpfs: hpfs_map_sector(): read error
[  135.328266][ T4600] usb 2-1: config 0 descriptor??
[  135.337431][ T6567] hpfs: code page support is disabled
[  135.353626][ T6567] hpfs: hpfs_map_4sectors(): unaligned read
[  135.367102][ T6567] hpfs: hpfs_map_4sectors(): unaligned read
[  135.385653][ T4600] hub 2-1:0.2: bad descriptor, ignoring hub
[  135.391717][ T6567] hpfs: filesystem error: unable to find root dir
[  135.433231][ T6554] wacom 0003:056A:0343.0009: ignoring exceeding usage max
[  135.433428][ T4600] hub: probe of 2-1:0.2 failed with error -5
[  135.473558][ T4600] f81232 2-1:0.2: f81534a converter detected
[  135.473669][ T6554] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  135.516406][ T6554] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  135.540722][ T6554] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  135.557670][ T6554] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  135.574223][ T6554] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  135.597539][ T4600] f81534a ttyUSB0: f81232_set_register failed status: -71
[  135.604086][ T6554] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  135.604957][ T4600] f81534a: probe of ttyUSB0 failed with error -5
[  135.619488][ T6554] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  135.652668][ T6582] netlink: 56 bytes leftover after parsing attributes in process `syz.4.897'.
[  135.662560][ T6554] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  135.711563][ T6554] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  135.730423][ T6554] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  135.737705][ T6554] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  135.744766][ T6554] wacom 0003:056A:0343.0009: unknown main item tag 0x0
[  135.807802][ T6554] wacom 0003:056A:0343.0009: hidraw0: USB HID v0.0a Device [HID 056a:0343] on usb-dummy_hcd.2-1/input0
[  135.855719][ T6554] usb 3-1: USB disconnect, device number 13
[  135.877872][ T4600] usb 2-1: reset high-speed USB device number 9 using dummy_hcd
[  135.902459][   T26] audit: type=1326 audit(1777286668.068:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.4.901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60a2f65dd9 code=0x0
[  135.985187][ T6590] loop4: detected capacity change from 0 to 2048
[  136.027733][ T6590] UDF-fs: warning (device loop4): udf_verify_domain_identifier: Possibly not OSTA UDF compliant logical volume descriptor.
[  136.071575][ T6590] UDF-fs: error (device loop4): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (148 > 10)
[  136.086038][ T4231] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  136.087207][ T6591] fido_id[6591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  136.207685][ T6590] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  136.257685][ T6590] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  136.330467][ T6590] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  136.347443][ T4231] usb 1-1: Using ep0 maxpacket: 32
[  136.356182][ T6590] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  136.500202][ T4231] usb 1-1: config 4 has an invalid interface number: 228 but max is 0
[  136.526160][ T6600] sp0: Synchronizing with TNC
[  136.552519][ T4231] usb 1-1: config 4 has no interface number 0
[  136.566794][ T6601] sp0: Found TNC
[  136.569071][ T4231] usb 1-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30
[  136.571618][ T6603] loop2: detected capacity change from 0 to 512
[  136.622789][ T4231] usb 1-1: config 4 interface 228 altsetting 12 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  136.636416][ T4231] usb 1-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0
[  136.653096][ T4231] usb 1-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  136.667180][ T4231] usb 1-1: config 4 interface 228 has no altsetting 0
[  136.678246][ T6603] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  136.690684][ T6603] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  136.714718][ T6603] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  136.725963][ T6603] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  136.783527][ T6603] EXT4-fs (loop2): 1 truncate cleaned up
[  136.789589][ T6603] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  136.845357][ T6603] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  136.864202][ T4231] usb 1-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  136.873777][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.885674][ T6603] EXT4-fs (loop2): Remounting filesystem read-only
[  136.895902][ T4231] usb 1-1: Product: syz
[  136.900337][ T4231] usb 1-1: Manufacturer: syz
[  136.911110][ T6608] loop3: detected capacity change from 0 to 128
[  136.917197][ T4231] usb 1-1: SerialNumber: syz
[  137.049126][ T6554] usb 2-1: USB disconnect, device number 9
[  137.063580][ T6554] f81232 2-1:0.2: device disconnected
[  137.414356][ T4231] snd-usb-audio: probe of 1-1:4.228 failed with error -12
[  137.427619][ T4603] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  137.474392][ T4231] usb 1-1: USB disconnect, device number 7
[  137.574476][ T6626] loop1: detected capacity change from 0 to 128
[  137.677459][ T4603] usb 4-1: Using ep0 maxpacket: 16
[  137.689285][ T6626] attempt to access beyond end of device
[  137.689285][ T6626] loop1: rw=2049, want=250, limit=128
[  137.769388][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  137.797632][ T4603] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.828069][ T4603] usb 4-1: config 0 interface 0 has no altsetting 0
[  137.840431][ T4603] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  137.850184][ T4603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.882341][ T4603] usb 4-1: config 0 descriptor??
[  138.071910][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  138.123861][ T6643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  138.390813][ T4603] mcp2221 0003:04D8:00DD.000A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  138.834992][ T6667] loop0: detected capacity change from 0 to 4096
[  138.864308][ T4600] usb 4-1: USB disconnect, device number 8
[  138.954283][ T6667] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  139.027455][   T26] audit: type=1800 audit(1777286671.188:20): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.931" name="file1" dev="loop0" ino=30 res=0 errno=0
[  139.226465][ T6664] loop2: detected capacity change from 0 to 32768
[  139.308195][ T6664] 
[  139.308195][ T6664]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.308195][ T6664] 
[  139.357295][   T26] audit: type=1800 audit(1777286671.518:21): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.942" name="file1" dev="loop2" ino=4 res=0 errno=0
[  139.389924][ T6664] 
[  139.389924][ T6664]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.389924][ T6664] 
[  139.477908][ T6664] 
[  139.477908][ T6664]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.477908][ T6664] 
[  139.572318][  T277] 
[  139.572318][  T277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.572318][  T277] 
[  139.626298][ T6680] loop0: detected capacity change from 0 to 128
[  139.707493][ T4183] 
[  139.707493][ T4183]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.707493][ T4183] 
[  139.713026][ T6683] loop1: detected capacity change from 0 to 1024
[  139.763020][ T6680] attempt to access beyond end of device
[  139.763020][ T6680] loop0: rw=2049, want=250, limit=128
[  139.785933][ T4183] 
[  139.785933][ T4183]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.785933][ T4183] 
[  140.463380][ T6701] loop2: detected capacity change from 0 to 4096
[  140.571788][ T6701] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  140.641914][   T26] audit: type=1800 audit(1777286672.808:22): pid=6701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.948" name="file1" dev="loop2" ino=30 res=0 errno=0
[  140.657458][ T4600] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  140.821537][ T6685] loop3: detected capacity change from 0 to 32768
[  140.937484][ T4600] usb 1-1: Using ep0 maxpacket: 32
[  141.058025][ T4600] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  141.067315][ T4600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.155940][ T6710] nbd: socks must be embedded in a SOCK_ITEM attr
[  141.188103][ T4600] gspca_main: nw80x-2.14.0 probing 055f:d001
[  141.258951][ T4231] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  141.522683][ T6725] loop3: detected capacity change from 0 to 1024
[  141.587966][ T4231] usb 2-1: Using ep0 maxpacket: 16
[  141.615164][ T6725] hfsplus: bad catalog entry type
[  141.679325][  T154] hfsplus: b-tree write err: -5, ino 25
[  141.685370][  T154] hfsplus: b-tree write err: -5, ino 4
[  141.719614][ T4231] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.720000][  T154] hfsplus: b-tree write err: -5, ino 2
[  141.744498][ T4231] usb 2-1: config 0 interface 0 has no altsetting 0
[  141.747611][ T6731] loop2: detected capacity change from 0 to 256
[  141.759346][ T4231] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  141.763874][  T154] hfsplus: b-tree write err: -5, ino 26
[  141.779504][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.804970][ T4231] usb 2-1: config 0 descriptor??
[  141.822757][ T6731] exfat: Deprecated parameter 'utf8'
[  141.858216][ T6731] exfat: Deprecated parameter 'utf8'
[  141.922153][ T6731] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  141.933705][ T6733] loop3: detected capacity change from 0 to 512
[  142.017130][ T6733] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  142.038312][ T6733] ext4 filesystem being mounted at /178/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.049144][ T4600] gspca_nw80x: reg_r err -71
[  142.053808][ T4600] nw80x: probe of 1-1:3.0 failed with error -71
[  142.072445][ T4600] usb 1-1: USB disconnect, device number 8
[  142.200719][ T6733] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  142.216901][ T6733] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  142.258143][ T6733] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.962: Failed to acquire dquot type 0
[  142.271767][ T6740] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  142.278433][ T6740] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  142.304281][ T6740] vhci_hcd vhci_hcd.0: Device attached
[  142.321483][ T4231] mcp2221 0003:04D8:00DD.000B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  142.423612][ T6745] loop4: detected capacity change from 0 to 4096
[  142.575270][ T4603] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  142.587540][ T4600] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  142.641947][ T6745] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  142.710803][   T26] audit: type=1800 audit(1777286674.878:23): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.965" name="file1" dev="loop4" ino=30 res=0 errno=0
[  142.748541][ T4601] usb 2-1: USB disconnect, device number 10
[  142.947759][ T4600] usb 3-1: config 0 has no interfaces?
[  142.953952][ T4600] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  142.993957][ T4600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.019479][ T4600] usb 3-1: config 0 descriptor??
[  143.104240][ T6747] loop3: detected capacity change from 0 to 32768
[  143.165667][ T6747] XFS (loop3): Mounting V5 Filesystem
[  143.302871][ T6741] usb 37-1: recv xbuf, 0
[  143.304044][ T4280] usb 3-1: USB disconnect, device number 14
[  143.317307][  T154] vhci_hcd: stop threads
[  143.321759][  T154] vhci_hcd: release socket
[  143.326354][  T154] vhci_hcd: disconnect device
[  143.331338][ T4231] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  143.387623][ T4603] vhci_hcd: vhci_device speed not set
[  143.403700][ T6747] XFS (loop3): Ending clean mount
[  143.539625][ T4192] XFS (loop3): Unmounting Filesystem
[  143.615590][ T6774] loop1: detected capacity change from 0 to 4096
[  143.632460][ T6776] loop4: detected capacity change from 0 to 512
[  143.719590][ T6776] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  143.733740][ T4231] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  143.742958][ T6774] ntfs: (device loop1): parse_options(): NLS character set is not found. Using previous one default.
[  143.779788][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.788585][ T6774] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  143.847742][ T6776] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  143.870720][ T4231] usb 1-1: config 0 descriptor??
[  143.965624][ T6774] ntfs: volume version 3.1.
[  144.016753][ T6780] loop2: detected capacity change from 0 to 1024
[  144.139436][ T4231] [drm] vendor descriptor length:6 data:06 5f 01 2f 66 73 00 00 00 00 00
[  144.170043][ T4231] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  144.189176][ T6780] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,noquota,journal_ioprio=0x0000000000000003,errors=remount-ro,nodioread_nolock,. Quota mode: none.
[  144.231573][ T6780] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.357498][ T4231] [drm:udl_init] *ERROR* Selecting channel failed
[  144.421850][ T6780] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.978: lblock 0 mapped to illegal pblock 0 (length 1)
[  144.443056][ T4231] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  144.458989][ T6789] netlink: 'syz.3.976': attribute type 1 has an invalid length.
[  144.467455][ T4231] [drm] Initialized udl on minor 2
[  144.487571][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.976'.
[  144.507618][ T4231] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  144.540300][ T4231] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  144.548134][ T6780] EXT4-fs (loop2): Remounting filesystem read-only
[  144.577318][ T6790] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.978: lblock 0 mapped to illegal pblock 0 (length 1)
[  144.597559][ T4773] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  144.607959][ T4231] usb 1-1: USB disconnect, device number 9
[  144.632177][ T6790] EXT4-fs (loop2): Remounting filesystem read-only
[  144.650556][ T4773] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  144.665014][ T6790] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.978: lblock 0 mapped to illegal pblock 0 (length 1)
[  144.698290][ T4773] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  144.737562][ T6790] EXT4-fs (loop2): Remounting filesystem read-only
[  144.744241][ T6790] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.978: lblock 0 mapped to illegal pblock 0 (length 1)
[  144.807945][ T6790] EXT4-fs (loop2): Remounting filesystem read-only
[  145.154927][ T6798] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  145.274341][   T26] audit: type=1800 audit(1777286677.438:24): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.982" name="file1" dev="loop1" ino=30 res=0 errno=0
[  145.418976][ T6784] XFS (loop4): Mounting V5 Filesystem
[  145.481536][ T6813] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  145.562762][ T6813] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.576747][ T6784] XFS (loop4): Ending clean mount
[  145.587810][ T6828] netlink: 'syz.1.992': attribute type 1 has an invalid length.
[  145.635511][ T6813] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.988: corrupted xattr block 33
[  145.668241][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'.
[  145.787519][ T6813] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.988: corrupted xattr block 33
[  145.909305][ T6813] fscrypt (loop2, inode 15): Error -117 getting encryption context
[  146.069117][ T4185] XFS (loop4): Unmounting Filesystem
[  146.147614][ T4601] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  146.265774][ T6849] set_capacity_and_notify: 3 callbacks suppressed
[  146.265803][ T6849] loop2: detected capacity change from 0 to 1024
[  146.383916][   T26] audit: type=1800 audit(1777286678.548:25): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.999" name="file1" dev="loop2" ino=20 res=0 errno=0
[  146.385007][ T6849] hfsplus: can't free extent
[  146.431493][ T4601] usb 1-1: Using ep0 maxpacket: 8
[  146.547649][ T4601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  146.583401][ T4601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  146.603587][ T4601] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  146.634687][ T4601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  146.664860][ T4601] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  146.685383][ T4601] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  146.708037][ T4601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.735132][ T4601] usb 1-1: config 0 descriptor??
[  146.757203][ T6855] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1014'.
[  146.757950][ T6836] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  146.773587][ T6846] loop3: detected capacity change from 0 to 32768
[  147.166718][ T6868] loop2: detected capacity change from 0 to 1024
[  147.180002][ T6870] netlink: 'syz.1.1009': attribute type 1 has an invalid length.
[  147.252366][ T6870] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1009'.
[  147.261811][ T6868] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.1007: lblock 2 mapped to illegal pblock 2 (length 1)
[  147.298961][ T6868] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  147.373328][ T6875] loop3: detected capacity change from 0 to 128
[  147.392906][ T4231] usb 1-1: USB disconnect, device number 10
[  147.401133][ T6868] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.1007: lblock 0 mapped to illegal pblock 48 (length 1)
[  147.433802][ T6868] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  147.472063][ T6868] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1007: Failed to acquire dquot type 0
[  147.510108][ T6875] FAT-fs (loop3): error, clusters badly computed (4 != 3)
[  147.527844][ T6875] FAT-fs (loop3): Filesystem has been set read-only
[  147.538155][ T6868] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  147.557902][ T6875] FAT-fs (loop3): error, clusters badly computed (5 != 4)
[  147.589832][ T6875] FAT-fs (loop3): error, clusters badly computed (6 != 5)
[  147.605313][ T6868] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.1007: mark_inode_dirty error
[  147.649716][ T6868] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  147.675864][ T6882] netlink: 'syz.1.1012': attribute type 1 has an invalid length.
[  147.677538][ T6868] EXT4-fs (loop2): 1 orphan inode deleted
[  147.689813][ T6868] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none.
[  147.713591][  T144] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  147.777786][  T144] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  147.857834][  T144] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0
[  147.893852][ T6868] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm syz.2.1007: lblock 1 mapped to illegal pblock 1 (length 1)
[  147.916183][ T6888] loop1: detected capacity change from 0 to 512
[  147.966002][ T6868] Quota error (device loop2): find_next_id: Can't read quota tree block 1
[  148.033573][ T4183] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  148.062195][ T6888] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback.
[  148.092701][ T6888] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  148.142839][ T6897] loop3: detected capacity change from 0 to 4096
[  148.183424][ T4183] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  148.197914][ T4183] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  148.201950][ T6897] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  148.520335][ T6903] loop2: detected capacity change from 0 to 2048
[  148.594378][ T6903] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  148.646284][ T6904] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.652401][ T6901] loop4: detected capacity change from 0 to 8192
[  148.795332][ T6906] loop1: detected capacity change from 0 to 1764
[  148.804074][ T6901] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  148.917547][ T6901] REISERFS (device loop4): using ordered data mode
[  148.924212][ T6901] reiserfs: using flush barriers
[  148.951654][ T6901] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  149.037780][ T6901] REISERFS (device loop4): checking transaction log (loop4)
[  149.102467][ T6901] REISERFS (device loop4): Using rupasov hash to sort names
[  149.117882][ T6919] loop1: detected capacity change from 0 to 128
[  149.124261][ T6901] REISERFS (device loop4): using 3.5.x disk format
[  149.147674][ T6901] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  149.227494][ T6901] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  149.266815][ T6919] FAT-fs (loop1): error, clusters badly computed (4 != 3)
[  149.305641][   T26] audit: type=1800 audit(1777286681.468:26): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1029" name="file1" dev="loop0" ino=20 res=0 errno=0
[  149.317665][ T6901] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  149.329471][ T6919] FAT-fs (loop1): Filesystem has been set read-only
[  149.339908][ T6922] hfsplus: can't free extent
[  149.406065][ T6919] FAT-fs (loop1): error, clusters badly computed (5 != 4)
[  149.433446][ T6919] FAT-fs (loop1): error, clusters badly computed (6 != 5)
[  149.437544][ T6901] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  149.525486][ T6901] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  149.592571][ T6924] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  149.613739][ T6924] hfsplus: xattr search failed
[  149.623363][ T6901] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  149.668074][ T6901] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  149.720962][ T6909] hfsplus: b-tree write err: -5, ino 25
[  149.729280][ T6909] hfsplus: b-tree write err: -5, ino 4
[  149.735405][ T6909] hfsplus: b-tree write err: -5, ino 2
[  149.775169][ T6929] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  149.792510][ T6909] hfsplus: b-tree write err: -5, ino 28
[  149.810252][ T6928] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  149.837691][ T6929] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  149.906025][ T6929] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  150.097582][ T4605] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  150.367590][ T4605] usb 2-1: Using ep0 maxpacket: 8
[  150.409705][ T6952] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1038'.
[  150.473944][ T6946] iso9660: Corrupted directory entry in block 4 of inode 1792
[  150.488008][ T4605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  150.517559][ T4605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  150.540562][ T6957] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1045'.
[  150.553386][ T4605] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  150.580481][ T4605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  150.603402][ T6954] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  150.639976][ T4605] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  150.687407][ T6954] hpfs: filesystem error: improperly stopped
[  150.693483][ T6954] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  150.708251][ T4605] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  150.725330][ T4605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.734470][ T6954] hpfs: You really don't want any checks? You are crazy...
[  150.762420][ T4605] usb 2-1: config 0 descriptor??
[  150.785578][ T6954] hpfs: hpfs_map_sector(): read error
[  150.795011][ T6954] hpfs: code page support is disabled
[  150.809866][ T6932] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  150.817664][ T6954] hpfs: filesystem error: map_dirent: not a directory
[  150.825117][ T6954] 
[  150.837491][ T6954] hpfs: hpfs_map_4sectors(): unaligned read
[  150.848206][ T6954] hpfs: filesystem error: unable to find root dir
[  150.870833][ T6967] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0)
[  151.295251][ T6973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.299756][ T4280] usb 2-1: USB disconnect, device number 11
[  151.387071][   T26] audit: type=1800 audit(1777286683.548:27): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1053" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  151.693974][ T6992] tipc: Started in network mode
[  151.723701][ T6992] tipc: Node identity ac14140f, cluster identity 4711
[  151.777846][ T6992] tipc: New replicast peer: 255.255.255.255
[  151.794314][ T6992] tipc: Enabled bearer <udp:syz2>, priority 10
[  151.947435][ T4773] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  152.162956][ T7000] set_capacity_and_notify: 7 callbacks suppressed
[  152.162973][ T7000] loop1: detected capacity change from 0 to 1024
[  152.211340][ T6969] loop3: detected capacity change from 0 to 40427
[  152.217670][ T4773] usb 5-1: Using ep0 maxpacket: 32
[  152.289917][ T6969] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  152.296676][ T6969] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  152.367715][ T4773] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  152.398702][ T4773] usb 5-1: config 0 has no interface number 0
[  152.439836][  T154] hfsplus: b-tree write err: -5, ino 25
[  152.450513][ T6969] F2FS-fs (loop3): Found nat_bits in checkpoint
[  152.457189][  T154] hfsplus: b-tree write err: -5, ino 4
[  152.494552][  T154] hfsplus: b-tree write err: -5, ino 2
[  152.597754][ T4773] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  152.611709][ T6969] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  152.617501][ T4773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.627111][ T4773] usb 5-1: Product: syz
[  152.633902][ T6969] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  152.662465][ T4773] usb 5-1: Manufacturer: syz
[  152.687415][ T4773] usb 5-1: SerialNumber: syz
[  152.734707][ T4773] usb 5-1: config 0 descriptor??
[  152.742368][ T6988] loop0: detected capacity change from 0 to 32768
[  152.809161][ T4773] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  152.832467][ T4192] attempt to access beyond end of device
[  152.832467][ T4192] loop3: rw=2049, want=45104, limit=40427
[  152.919502][ T6554] tipc: Node number set to 2886997007
[  152.936063][ T6988] XFS (loop0): Mounting V5 Filesystem
[  153.013085][ T7002] loop2: detected capacity change from 0 to 32768
[  153.039747][ T4773] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  153.068471][ T4773] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  153.102255][ T7002] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  153.127257][ T7002] JBD2: Ignoring recovery information on journal
[  153.296460][ T7002] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  153.341516][ T6988] XFS (loop0): Ending clean mount
[  153.381646][ T6988] XFS (loop0): Quotacheck needed: Please wait.
[  153.473164][ T6988] XFS (loop0): Quotacheck: Done.
[  153.486376][ T7024] loop1: detected capacity change from 0 to 512
[  153.488477][ T7002] (syz.2.1065,7002,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  153.492876][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  153.517951][ T4773] usb 5-1: USB disconnect, device number 8
[  153.533366][ T4773] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  153.569662][ T7002] (syz.2.1065,7002,1):ocfs2_get_suballoc_slot_bit:2719 ERROR: read block 8589934594 failed -12
[  153.575743][ T4773] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  153.600971][ T7024] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  153.625966][ T4773] quatech2 5-1:0.51: device disconnected
[  153.631967][ T7002] (syz.2.1065,7002,0):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -12
[  153.708218][ T7002] (syz.2.1065,7002,1):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -12
[  153.718429][ T7024] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1072: casefold flag without casefold feature
[  153.735650][ T4184] XFS (loop0): Unmounting Filesystem
[  153.758761][ T7002] (syz.2.1065,7002,1):ocfs2_test_inode_bit:2874 ERROR: status = -12
[  153.762547][ T7024] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1072: couldn't read orphan inode 15 (err -117)
[  153.777517][ T7002] (syz.2.1065,7002,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  153.798052][ T7024] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none.
[  153.892867][ T4183] ocfs2: Unmounting device (7,2) on (node local)
[  153.907903][ T7024] EXT4-fs (loop1): shut down requested (2)
[  154.467292][ T7044] loop1: detected capacity change from 0 to 64
[  154.765032][ T7056] Set syz1 is full, maxelem 0 reached
[  154.772988][ T7055] loop0: detected capacity change from 0 to 512
[  154.913304][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'.
[  155.132670][ T7073] loop1: detected capacity change from 0 to 136
[  155.273622][ T7073] Attempt to read inode for relocated directory
[  155.976891][ T7096] loop2: detected capacity change from 0 to 512
[  156.115384][ T7099] loop0: detected capacity change from 0 to 64
[  156.145324][ T7096] EXT4-fs (loop2): inline encryption not supported
[  156.178092][ T7096] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  156.351720][ T7096] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters
[  156.436838][ T7096] EXT4-fs (loop2): Remounting filesystem read-only
[  156.533819][ T7096] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.1104: corrupted inode contents
[  156.623441][ T7080] XFS (loop3): Mounting V5 Filesystem
[  156.668352][ T7096] EXT4-fs (loop2): Remounting filesystem read-only
[  156.675278][ T7096] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #12: comm syz.2.1104: mark_inode_dirty error
[  156.677677][ T7080] XFS (loop3): Ending clean mount
[  156.807945][ T7080] XFS (loop3): Quotacheck needed: Please wait.
[  156.887493][ T7096] EXT4-fs (loop2): Remounting filesystem read-only
[  156.913529][ T7096] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.1104: corrupted inode contents
[  156.960803][ T7080] XFS (loop3): Quotacheck: Done.
[  157.065020][ T7096] EXT4-fs (loop2): Remounting filesystem read-only
[  157.070437][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'.
[  157.088900][ T7125] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  157.119878][ T7126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1113'.
[  157.147435][ T7096] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.1104: mark_inode_dirty error
[  157.248754][ T7096] EXT4-fs (loop2): Remounting filesystem read-only
[  157.284935][ T4192] XFS (loop3): Unmounting Filesystem
[  157.292096][ T7096] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.1104: corrupted inode contents
[  157.380960][ T7096] EXT4-fs (loop2): Remounting filesystem read-only
[  157.420839][ T7096] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  157.520670][ T7130] set_capacity_and_notify: 2 callbacks suppressed
[  157.520687][ T7130] loop1: detected capacity change from 0 to 64
[  157.546624][ T7096] EXT4-fs (loop2): Remounting filesystem read-only
[  157.599332][ T7096] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.1104: corrupted inode contents
[  157.615260][ T7132] loop0: detected capacity change from 0 to 256
[  157.662180][ T7132] exfat: Deprecated parameter 'namecase'
[  157.741538][ T7132] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  157.772442][ T7096] EXT4-fs (loop2): Remounting filesystem read-only
[  157.912760][ T7096] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.1104: mark_inode_dirty error
[  157.957948][ T7096] EXT4-fs (loop2): Remounting filesystem read-only
[  157.964645][ T7096] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  158.055337][ T7138] device erspan0 entered promiscuous mode
[  158.080284][ T7096] EXT4-fs (loop2): Remounting filesystem read-only
[  158.105263][ T7142] program syz.0.1119 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  158.185316][ T7096] EXT4-fs (loop2): 1 truncate cleaned up
[  158.224172][ T7096] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,noblock_validity,resgid=0x0000000000000000,inlinecrypt,errors=remount-ro,noblock_validity,usrjquota=,nodelalloc,resgid=0x00000000000000002. Quota mode: writeback.
[  158.253762][ T7149] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  158.396021][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'.
[  158.581120][ T4232] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  158.635870][ T7096] EXT4-fs (loop2): shut down requested (2)
[  158.687895][ T7167] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz.2.1104: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  158.793345][ T7167] EXT4-fs (loop2): Remounting filesystem read-only
[  158.867635][ T4231] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  158.972627][ T4232] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  158.996116][ T4232] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  159.006008][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.109653][ T4232] gspca_main: stv0680-2.14.0 probing 041e:4007
[  159.275269][ T4231] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  159.296725][ T4231] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  159.313654][ T4231] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  159.326702][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.367916][ T7166] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  159.537441][ T4769] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  159.650742][ T4773] usb 5-1: USB disconnect, device number 9
[  159.957663][ T4769] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  159.973610][ T4769] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  160.001704][ T4769] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  160.037291][ T4769] usb 1-1: config 220 has no interface number 2
[  160.058199][ T4769] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  160.165323][ T4769] usb 1-1: config 220 interface 0 has no altsetting 0
[  160.173038][ T4769] usb 1-1: config 220 interface 76 has no altsetting 0
[  160.180897][ T4769] usb 1-1: config 220 interface 1 has no altsetting 0
[  160.287701][ T4232] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  160.313495][ T4232] stv0680 4-1:4.0: last error: 2,  command = 0x5
[  160.367741][ T4769] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  160.380788][ T4769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.396158][ T4769] usb 1-1: Product: syz
[  160.402162][ T4769] usb 1-1: Manufacturer: syz
[  160.406893][ T4769] usb 1-1: SerialNumber: syz
[  160.449912][ T4256] usb 4-1: USB disconnect, device number 9
[  160.489727][ T7208] loop4: detected capacity change from 0 to 2048
[  160.593440][ T7208] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[  160.647559][ T7208] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[  160.681601][ T7208] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255
[  160.817989][ T4769] usb 1-1: selecting invalid altsetting 0
[  160.824548][ T4769] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  160.832186][ T4769] usb 1-1: No valid video chain found.
[  160.860668][ T7209] loop2: detected capacity change from 0 to 32768
[  160.938619][ T4769] usb 1-1: selecting invalid altsetting 0
[  160.949135][ T4769] usbtest: probe of 1-1:220.1 failed with error -22
[  160.953465][ T7209] JBD2: Ignoring recovery information on journal
[  160.959502][ T4769] usb 1-1: USB disconnect, device number 11
[  161.090735][ T7213] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1151'.
[  161.110481][ T7209] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  161.114470][ T7213] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1151'.
[  161.206617][ T7209] 
[  161.209035][ T7209] ======================================================
[  161.216357][ T7209] WARNING: possible circular locking dependency detected
[  161.223839][ T7209] syzkaller #0 Not tainted
[  161.228475][ T7209] ------------------------------------------------------
[  161.235779][ T7209] syz.2.1160/7209 is trying to acquire lock:
[  161.241897][ T7209] ffff8880598742c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0
[  161.255271][ T7209] 
[  161.255271][ T7209] but task is already holding lock:
[  161.262672][ T7209] ffff888060012378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0
[  161.272220][ T7209] 
[  161.272220][ T7209] which lock already depends on the new lock.
[  161.272220][ T7209] 
[  161.283004][ T7209] 
[  161.283004][ T7209] the existing dependency chain (in reverse order) is:
[  161.292048][ T7209] 
[  161.292048][ T7209] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  161.300011][ T7209]        down_read+0x44/0x2e0
[  161.304840][ T7209]        ocfs2_init_acl+0x307/0x770
[  161.310068][ T7209]        ocfs2_mknod+0x15cb/0x2510
[  161.315814][ T7209]        ocfs2_create+0x192/0x420
[  161.320896][ T7209]        path_openat+0x11db/0x2fa0
[  161.326488][ T7209]        do_filp_open+0x1e2/0x410
[  161.332432][ T7209]        do_sys_openat2+0x150/0x4b0
[  161.338108][ T7209]        __x64_sys_open+0x11b/0x140
[  161.343441][ T7209]        do_syscall_64+0x4c/0xa0
[  161.348511][ T7209]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  161.354957][ T7209] 
[  161.354957][ T7209] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  161.363549][ T7209]        down_read+0x44/0x2e0
[  161.368262][ T7209]        ocfs2_start_trans+0x3a6/0x6f0
[  161.373849][ T7209]        ocfs2_mknod+0xf5a/0x2510
[  161.379093][ T7209]        ocfs2_create+0x192/0x420
[  161.384327][ T7209]        path_openat+0x11db/0x2fa0
[  161.389470][ T7209]        do_filp_open+0x1e2/0x410
[  161.394823][ T7209]        do_sys_openat2+0x150/0x4b0
[  161.400315][ T7209]        __x64_sys_open+0x11b/0x140
[  161.405546][ T7209]        do_syscall_64+0x4c/0xa0
[  161.410518][ T7209]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  161.417139][ T7209] 
[  161.417139][ T7209] -> #2 (sb_internal#6){.+.+}-{0:0}:
[  161.424654][ T7209]        ocfs2_start_trans+0x2a7/0x6f0
[  161.430420][ T7209]        ocfs2_mknod+0xf5a/0x2510
[  161.435673][ T7209]        ocfs2_create+0x192/0x420
[  161.441368][ T7209]        path_openat+0x11db/0x2fa0
[  161.446675][ T7209]        do_filp_open+0x1e2/0x410
[  161.451923][ T7209]        do_sys_openat2+0x150/0x4b0
[  161.457283][ T7209]        __x64_sys_open+0x11b/0x140
[  161.462862][ T7209]        do_syscall_64+0x4c/0xa0
[  161.467834][ T7209]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  161.474284][ T7209] 
[  161.474284][ T7209] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}:
[  161.485187][ T7209]        down_write+0x38/0x60
[  161.490115][ T7209]        ocfs2_reserve_suballoc_bits+0x16a/0x44d0
[  161.497172][ T7209]        ocfs2_reserve_clusters_with_limit+0x3b9/0xc10
[  161.504162][ T7209]        ocfs2_mknod+0xef8/0x2510
[  161.509227][ T7209]        ocfs2_create+0x192/0x420
[  161.514541][ T7209]        path_openat+0x11db/0x2fa0
[  161.519767][ T7209]        do_filp_open+0x1e2/0x410
[  161.524821][ T7209]        do_sys_openat2+0x150/0x4b0
[  161.530066][ T7209]        __x64_sys_open+0x11b/0x140
[  161.535831][ T7209]        do_syscall_64+0x4c/0xa0
[  161.540806][ T7209]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  161.547250][ T7209] 
[  161.547250][ T7209] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  161.558113][ T7209]        __lock_acquire+0x2c42/0x7d10
[  161.563610][ T7209]        lock_acquire+0x19e/0x400
[  161.568720][ T7209]        down_write+0x38/0x60
[  161.573539][ T7209]        ocfs2_reserve_suballoc_bits+0x16a/0x44d0
[  161.579979][ T7209]        ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  161.587056][ T7209]        ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0
[  161.593244][ T7209]        ocfs2_xattr_set+0xc38/0x13e0
[  161.598728][ T7209]        __vfs_setxattr+0x3e0/0x420
[  161.604038][ T7209]        __vfs_setxattr_noperm+0x129/0x5e0
[  161.610043][ T7209]        vfs_setxattr+0x167/0x2e0
[  161.615439][ T7209]        setxattr+0x36c/0x390
[  161.620137][ T7209]        path_setxattr+0x147/0x290
[  161.625371][ T7209]        __x64_sys_setxattr+0xb7/0xd0
[  161.630860][ T7209]        do_syscall_64+0x4c/0xa0
[  161.636258][ T7209]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  161.643076][ T7209] 
[  161.643076][ T7209] other info that might help us debug this:
[  161.643076][ T7209] 
[  161.653396][ T7209] Chain exists of:
[  161.653396][ T7209]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  161.653396][ T7209] 
[  161.670746][ T7209]  Possible unsafe locking scenario:
[  161.670746][ T7209] 
[  161.678291][ T7209]        CPU0                    CPU1
[  161.683759][ T7209]        ----                    ----
[  161.689260][ T7209]   lock(&oi->ip_xattr_sem);
[  161.693938][ T7209]                                lock(&journal->j_trans_barrier);
[  161.701744][ T7209]                                lock(&oi->ip_xattr_sem);
[  161.708852][ T7209]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3);
[  161.716407][ T7209] 
[  161.716407][ T7209]  *** DEADLOCK ***
[  161.716407][ T7209] 
[  161.724545][ T7209] 3 locks held by syz.2.1160/7209:
[  161.729671][ T7209]  #0: ffff88805c93c460 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  161.739353][ T7209]  #1: ffff888060012648 (&sb->s_type->i_mutex_key#35){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0
[  161.749921][ T7209]  #2: ffff888060012378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0
[  161.760044][ T7209] 
[  161.760044][ T7209] stack backtrace:
[  161.765923][ T7209] CPU: 0 PID: 7209 Comm: syz.2.1160 Not tainted syzkaller #0
[  161.773298][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  161.783471][ T7209] Call Trace:
[  161.786769][ T7209]  <TASK>
[  161.789697][ T7209]  dump_stack_lvl+0x188/0x250
[  161.794555][ T7209]  ? load_image+0x400/0x400
[  161.799073][ T7209]  ? show_regs_print_info+0x20/0x20
[  161.804522][ T7209]  ? print_circular_bug+0x12b/0x1a0
[  161.809743][ T7209]  check_noncircular+0x296/0x330
[  161.814690][ T7209]  ? add_chain_block+0x940/0x940
[  161.819714][ T7209]  ? lockdep_lock+0xf1/0x1f0
[  161.824309][ T7209]  ? mark_lock+0x94/0x320
[  161.828668][ T7209]  ? _find_first_zero_bit+0xce/0xf0
[  161.833889][ T7209]  __lock_acquire+0x2c42/0x7d10
[  161.838756][ T7209]  ? verify_lock_unused+0x140/0x140
[  161.843960][ T7209]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  161.849600][ T7209]  ? do_raw_spin_lock+0x128/0x2f0
[  161.854656][ T7209]  ? mutex_unlock+0x10/0x10
[  161.859453][ T7209]  ? __rwlock_init+0x140/0x140
[  161.864768][ T7209]  ? do_raw_spin_unlock+0x11d/0x230
[  161.870091][ T7209]  lock_acquire+0x19e/0x400
[  161.874793][ T7209]  ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0
[  161.881096][ T7209]  ? __bfs+0x2a3/0x5c0
[  161.885255][ T7209]  ? __might_sleep+0xf0/0xf0
[  161.889852][ T7209]  ? read_lock_is_recursive+0x10/0x10
[  161.895340][ T7209]  ? verify_lock_unused+0x140/0x140
[  161.900764][ T7209]  down_write+0x38/0x60
[  161.905183][ T7209]  ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0
[  161.911473][ T7209]  ocfs2_reserve_suballoc_bits+0x16a/0x44d0
[  161.917752][ T7209]  ? mark_lock+0x94/0x320
[  161.922245][ T7209]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  161.929682][ T7209]  ? lock_chain_count+0x20/0x20
[  161.934589][ T7209]  ? __rwlock_init+0x140/0x140
[  161.940084][ T7209]  ? ocfs2_block_group_search+0x470/0x470
[  161.945933][ T7209]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  161.951855][ T7209]  ? lockdep_hardirqs_on+0x94/0x140
[  161.957083][ T7209]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  161.962988][ T7209]  ? _raw_spin_unlock+0x40/0x40
[  161.967979][ T7209]  ? stack_trace_save+0xa6/0xf0
[  161.972829][ T7209]  ? stack_trace_snprint+0xf0/0xf0
[  161.977948][ T7209]  ? stack_depot_save+0x404/0x440
[  161.983007][ T7209]  ? __kasan_kmalloc+0xcc/0xf0
[  161.987992][ T7209]  ? __kasan_kmalloc+0xb5/0xf0
[  161.992881][ T7209]  ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0
[  161.999539][ T7209]  ? ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0
[  162.005362][ T7209]  ? ocfs2_xattr_set+0xc38/0x13e0
[  162.010560][ T7209]  ? __vfs_setxattr+0x3e0/0x420
[  162.015415][ T7209]  ? __vfs_setxattr_noperm+0x129/0x5e0
[  162.021107][ T7209]  ? vfs_setxattr+0x167/0x2e0
[  162.025892][ T7209]  ? setxattr+0x36c/0x390
[  162.030313][ T7209]  ? path_setxattr+0x147/0x290
[  162.035081][ T7209]  ? __x64_sys_setxattr+0xb7/0xd0
[  162.040364][ T7209]  ? do_syscall_64+0x4c/0xa0
[  162.045205][ T7209]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  162.051393][ T7209]  ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  162.057865][ T7209]  ? ocfs2_init_steal_slots+0x150/0x150
[  162.063536][ T7209]  ? ocfs2_xattr_block_set+0x2e10/0x2e10
[  162.069182][ T7209]  ? do_raw_spin_lock+0x128/0x2f0
[  162.074314][ T7209]  ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0
[  162.079955][ T7209]  ? _raw_spin_unlock+0x24/0x40
[  162.085195][ T7209]  ? ocfs2_prepare_refcount_xattr+0xff0/0xff0
[  162.091409][ T7209]  ? ocfs2_truncate_log_needs_flush+0x12c/0x300
[  162.097895][ T7209]  ? ocfs2_remove_btree_range+0x15e0/0x15e0
[  162.103921][ T7209]  ? up_write+0x1bb/0x420
[  162.108375][ T7209]  ocfs2_xattr_set+0xc38/0x13e0
[  162.113361][ T7209]  ? __ocfs2_xattr_set_handle+0xf30/0xf30
[  162.119368][ T7209]  ? aa_get_newest_label+0xf5/0x5a0
[  162.125149][ T7209]  ? posix_xattr_acl+0x8f/0xb0
[  162.130080][ T7209]  ? evm_protect_xattr+0x33c/0x9b0
[  162.135309][ T7209]  ? ocfs2_xattr_trusted_get+0x40/0x40
[  162.141203][ T7209]  __vfs_setxattr+0x3e0/0x420
[  162.145972][ T7209]  __vfs_setxattr_noperm+0x129/0x5e0
[  162.151263][ T7209]  vfs_setxattr+0x167/0x2e0
[  162.155864][ T7209]  ? xattr_permission+0x500/0x500
[  162.161012][ T7209]  ? _copy_from_user+0x111/0x170
[  162.165988][ T7209]  ? setxattr+0x2cc/0x390
[  162.170606][ T7209]  setxattr+0x36c/0x390
[  162.174792][ T7209]  ? path_setxattr+0x290/0x290
[  162.179572][ T7209]  ? __mnt_want_write+0x1e2/0x260
[  162.184960][ T7209]  path_setxattr+0x147/0x290
[  162.189727][ T7209]  ? simple_xattr_list_add+0xf0/0xf0
[  162.195098][ T7209]  ? lock_chain_count+0x20/0x20
[  162.200139][ T7209]  ? vtime_user_exit+0x2c8/0x3e0
[  162.205348][ T7209]  __x64_sys_setxattr+0xb7/0xd0
[  162.210205][ T7209]  do_syscall_64+0x4c/0xa0
[  162.214630][ T7209]  ? clear_bhb_loop+0x30/0x80
[  162.219319][ T7209]  ? clear_bhb_loop+0x30/0x80
[  162.224003][ T7209]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  162.230077][ T7209] RIP: 0033:0x7f8948d6fdd9
[  162.234503][ T7209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.254521][ T7209] RSP: 002b:00007f8946fc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  162.263378][ T7209] RAX: ffffffffffffffda RBX: 00007f8948fe8fa0 RCX: 00007f8948d6fdd9
[  162.271514][ T7209] RDX: 0000200000000400 RSI: 0000200000000000 RDI: 0000200000000340
[  162.279534][ T7209] RBP: 00007f8948e05d69 R08: 0000000000000000 R09: 0000000000000000
[  162.287774][ T7209] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000
[  162.295755][ T7209] R13: 00007f8948fe9038 R14: 00007f8948fe8fa0 R15: 00007ffe772c4e38
[  162.303735][ T7209]  </TASK>
[  162.378420][ T4183] ocfs2: Unmounting device (7,2) on (node local)