last executing test programs:

2.245861205s ago: executing program 1 (id=739):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0x200, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.136603723s ago: executing program 1 (id=740):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setpriority(0x0, 0x0, 0xfff)

2.136188188s ago: executing program 1 (id=742):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa31, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x440}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)

1.57107046s ago: executing program 2 (id=748):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)

1.511028271s ago: executing program 2 (id=749):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
fallocate(r0, 0x3, 0x9, 0x10000)

1.373494378s ago: executing program 2 (id=750):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={<r1=>r0})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000)

1.22131512s ago: executing program 2 (id=751):
syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff02000000000000000000000000000100000800fcff"], 0x0)

1.140123707s ago: executing program 2 (id=752):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4)

1.060881716s ago: executing program 2 (id=753):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x20, 0x11, 0x96, {0x96, 0x10, "82616faab7e983055ec0a8202aef9453b14709a6ea164c27aec68ca5c4bcf2a18537fa00000000000000009395b47e21fbab2a529005fc606ef2790b01df91964682860c1fddb03c7ff8e2e098f9340a8642c235441d4ed527706746aa952f0808f53d1b691c59f0e6cd6fb9a1218bbc8bf2ab2a6c567c1be0fd66853f8243264853c7bfcea1203a8fef2f93bd575e5afadcf9ca"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

668.761332ms ago: executing program 0 (id=754):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
shutdown(r0, 0x1)

590.491073ms ago: executing program 0 (id=755):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f00000003c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)

531.808099ms ago: executing program 1 (id=756):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0x76, 0x682, &(0x7f0000000640)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

377.11488ms ago: executing program 1 (id=757):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup3(r0, r1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0xfffffffe, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800)

270.427418ms ago: executing program 1 (id=758):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
unshare(0x28000600)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x4000, 0x0, 0x2100000})

201.269151ms ago: executing program 0 (id=759):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x1000}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x52}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x88}}, 0x0)

49.13632ms ago: executing program 0 (id=760):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000003c0)={0x18})

48.944857ms ago: executing program 0 (id=761):
r0 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000032b00)={0x0, @reserved})

0s ago: executing program 0 (id=762):
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = epoll_create(0x10001)
mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

kernel console output (not intermixed with test programs):

3-1:1.0: could not read from device
[   71.318250][ T5919] udevd[5919]: Error opening device "/dev/input/event3": No such file or directory
[   71.335564][ T5919] udevd[5919]: Unable to EVIOCGABS device "/dev/input/event3"
[   71.338610][ T5919] udevd[5919]: Unable to EVIOCGABS device "/dev/input/event3"
[   71.352696][ T5919] udevd[5919]: Unable to EVIOCGABS device "/dev/input/event3"
[   71.360462][ T5919] udevd[5919]: Unable to EVIOCGABS device "/dev/input/event3"
[   71.518909][ T5942] vivid-001: disconnect
[   71.569377][   T10] vivid-001: reconnect
[   71.579500][ T5898] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   71.730883][ T5948] loop0: detected capacity change from 0 to 4096
[   71.761281][ T5898] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   71.764494][ T5898] usb 2-1: config 0 has no interface number 0
[   71.766835][ T5898] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.776693][ T5898] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.802364][ T5898] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   71.807412][ T5898] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[   71.816673][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.831079][ T5898] usb 2-1: config 0 descriptor??
[   71.837219][ T5948] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   71.851036][ T5948] ntfs3(loop0): Failed to load $Extend (-22).
[   71.853096][ T5948] ntfs3(loop0): Failed to initialize $Extend.
[   72.112772][ T5955] loop0: detected capacity change from 0 to 32768
[   72.119541][ T5955] =======================================================
[   72.119541][ T5955] WARNING: The mand mount option has been deprecated and
[   72.119541][ T5955]          and is ignored by this kernel. Remove the mand
[   72.119541][ T5955]          option from the mount to silence this warning.
[   72.119541][ T5955] =======================================================
[   72.299110][   T55] Bluetooth: hci0: command tx timeout
[   72.447505][ T5898] uclogic 0003:28BD:0042.0001: failed retrieving string descriptor #100: -71
[   72.459128][   T55] Bluetooth: hci2: command tx timeout
[   72.461326][ T5848] Bluetooth: hci1: command tx timeout
[   72.469368][ T5898] uclogic 0003:28BD:0042.0001: failed retrieving pen parameters: -71
[   72.489575][ T5898] uclogic 0003:28BD:0042.0001: pen probing failed: -71
[   72.509294][ T5898] uclogic 0003:28BD:0042.0001: failed probing parameters: -71
[   72.527537][ T5898] uclogic 0003:28BD:0042.0001: probe with driver uclogic failed with error -71
[   72.613434][ T5898] usb 2-1: USB disconnect, device number 3
[   72.843627][ T5965] comedi comedi3: 8255: I/O port conflict (0x2,4)
[   72.845806][ T5965] comedi comedi3: 8255: I/O port conflict (0x8000006,4)
[   72.848293][ T5965] comedi comedi3: 8255: I/O port conflict (0x2,4)
[   72.850951][ T5965] comedi comedi3: 8255: I/O port conflict (0x8,4)
[   72.853384][ T5965] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   72.856079][ T5965] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[   72.858466][ T5965] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[   72.866318][ T5965] comedi comedi3: 8255: I/O port conflict (0x3000000,4)
[   72.917395][ T5967] sp0: Synchronizing with TNC
[   73.219118][   T33] audit: type=1326 audit(1758566015.928:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.0.28" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd78ec29 code=0x7ffc0000
[   73.231117][   T33] audit: type=1326 audit(1758566015.928:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.0.28" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd78ec29 code=0x7ffc0000
[   73.249201][   T33] audit: type=1326 audit(1758566015.928:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.0.28" exe="/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f92fd78ec29 code=0x7ffc0000
[   73.255518][   T33] audit: type=1326 audit(1758566015.928:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.0.28" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd78ec29 code=0x7ffc0000
[   73.303370][   T33] audit: type=1326 audit(1758566015.928:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.0.28" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd78ec29 code=0x7ffc0000
[   73.351286][ T5983] loop0: detected capacity change from 0 to 512
[   73.382575][ T5983] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   73.385676][ T5983] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   73.401956][ T5983] System zones: 0-1, 15-15, 18-18, 34-34
[   73.404504][ T5983] EXT4-fs (loop0): orphan cleanup on readonly fs
[   73.407217][ T5983] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[   73.422810][ T5983] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   73.428434][ T5983] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   73.441793][ T5983] EXT4-fs (loop0): 1 truncate cleaned up
[   73.451467][ T5983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   73.474422][ T5971] loop2: detected capacity change from 0 to 32768
[   73.487673][ T5983] fscrypt (loop0, inode 16): Error -61 getting encryption context
[   73.506556][ T5971] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   73.526031][ T5985] loop1: detected capacity change from 0 to 32768
[   73.534596][ T5971] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   73.543801][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.587377][ T5853] ocfs2: Unmounting device (7,2) on (node local)
[   73.721744][ T5985] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,promote_target=invalid device 15,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[   73.721773][ T5985]   allowing incompatible features above 0.0: (unknown version)
[   73.721784][ T5985]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   73.775254][ T5985] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   73.793190][ T5985] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[   73.807555][ T5985] bcachefs (loop1): Version upgrade required:
[   73.807555][ T5985] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   73.807555][ T5985] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   73.807555][ T5985]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   73.854720][ T5985] bcachefs (loop1): dropping and reconstructing all alloc info
[   73.872376][ T5985] bcachefs (loop1): accounting_read... done
[   73.876028][ T5985] bcachefs (loop1): alloc_read... done
[   73.878150][ T5985] bcachefs (loop1): snapshots_read... done
[   73.881452][ T5985] bcachefs (loop1): done starting filesystem
[   73.891162][ T6003] loop2: detected capacity change from 0 to 128
[   73.994059][ T5851] bcachefs (loop1): shutting down
[   74.026276][ T5851] bcachefs (loop1): shutdown complete
[   74.315756][ T6011] loop2: detected capacity change from 0 to 32768
[   74.320600][ T6011] (syz.2.40,6011,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb6731743. Applying ECC.
[   74.326587][ T6011] (syz.2.40,6011,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   74.333104][ T6011] (syz.2.40,6011,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   74.339953][ T6011] (syz.2.40,6011,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xa7efa3e4. Applying ECC.
[   74.348923][ T6011] (syz.2.40,6011,1):ocfs2_verify_heartbeat:818 ERROR: Cannot heartbeat on a locally mounted device.
[   74.360194][ T6011] (syz.2.40,6011,1):ocfs2_fill_super:1177 ERROR: status = -22
[   74.379803][   T55] Bluetooth: hci0: command tx timeout
[   74.539989][   T55] Bluetooth: hci2: command tx timeout
[   74.540218][ T5848] Bluetooth: hci1: command tx timeout
[   74.574733][ T6020] loop0: detected capacity change from 0 to 64
[   74.601751][ T6020] Trying to free block not in datazone
[   74.604095][ T6020] Trying to free block not in datazone
[   74.605922][ T6020] Trying to free block not in datazone
[   74.607692][ T6020] Trying to free block not in datazone
[   74.610862][ T6020] Trying to free block not in datazone
[   74.612738][ T6020] Trying to free block not in datazone
[   74.614442][ T6020] Trying to free block not in datazone
[   74.616198][ T6020] Trying to free block not in datazone
[   74.618330][ T6020] Trying to free block not in datazone
[   74.621333][ T6020] Trying to free block not in datazone
[   74.623590][ T6020] Trying to free block not in datazone
[   74.625850][ T6020] Trying to free block not in datazone
[   74.628002][ T6020] Trying to free block not in datazone
[   74.633584][ T6020] Trying to free block not in datazone
[   74.635962][ T6020] Trying to free block not in datazone
[   74.637673][ T6020] Trying to free block not in datazone
[   74.640816][ T6020] Trying to free block not in datazone
[   74.642549][ T6020] Trying to free block not in datazone
[   74.644669][ T6020] Trying to free block not in datazone
[   74.646620][ T6020] Trying to free block not in datazone
[   74.648309][ T6020] Trying to free block not in datazone
[   74.650668][ T6020] Trying to free block not in datazone
[   74.652890][ T6020] Trying to free block not in datazone
[   74.655115][ T6020] Trying to free block not in datazone
[   74.657348][ T6020] Trying to free block not in datazone
[   74.659838][ T6020] Trying to free block not in datazone
[   74.662073][ T6020] Trying to free block not in datazone
[   74.664095][ T6020] Trying to free block not in datazone
[   74.665974][ T6020] Trying to free block not in datazone
[   74.668209][ T6020] Trying to free block not in datazone
[   74.670875][ T6020] Trying to free block not in datazone
[   74.672642][ T6020] Trying to free block not in datazone
[   74.674459][ T6020] Trying to free block not in datazone
[   74.676615][ T6020] Trying to free block not in datazone
[   74.678332][ T6020] Trying to free block not in datazone
[   74.680183][ T6020] Trying to free block not in datazone
[   74.681883][ T6020] Trying to free block not in datazone
[   74.683566][ T6020] Trying to free block not in datazone
[   74.685428][ T6020] Trying to free block not in datazone
[   74.687282][ T6020] Trying to free block not in datazone
[   74.689202][ T6020] Trying to free block not in datazone
[   74.691172][ T6020] Trying to free block not in datazone
[   74.693260][ T6020] Trying to free block not in datazone
[   74.695345][ T6020] Trying to free block not in datazone
[   74.697533][ T6020] Trying to free block not in datazone
[   74.700209][ T6020] Trying to free block not in datazone
[   74.702036][ T6020] Trying to free block not in datazone
[   74.703743][ T6020] Trying to free block not in datazone
[   74.705332][ T6020] Trying to free block not in datazone
[   74.708113][ T6020] Trying to free block not in datazone
[   74.710186][ T6020] Trying to free block not in datazone
[   74.711918][ T6020] Trying to free block not in datazone
[   74.713621][ T6020] Trying to free block not in datazone
[   74.715302][ T6020] Trying to free block not in datazone
[   74.717000][ T6020] Trying to free block not in datazone
[   74.718701][ T6020] Trying to free block not in datazone
[   74.720979][ T6020] Trying to free block not in datazone
[   74.723193][ T6020] Trying to free block not in datazone
[   74.725222][ T6020] Trying to free block not in datazone
[   74.726947][ T6020] Trying to free block not in datazone
[   74.728859][ T6020] Trying to free block not in datazone
[   74.731096][ T6020] Trying to free block not in datazone
[   74.733174][ T6020] Trying to free block not in datazone
[   74.737672][ T6020] Trying to free block not in datazone
[   74.741248][ T6020] Trying to free block not in datazone
[   74.743353][ T6020] Trying to free block not in datazone
[   74.745109][ T6020] Trying to free block not in datazone
[   74.746910][ T6020] Trying to free block not in datazone
[   74.748726][ T6020] Trying to free block not in datazone
[   74.769572][ T6020] Trying to free block not in datazone
[   74.771769][ T6020] Trying to free block not in datazone
[   74.773869][ T6020] Trying to free block not in datazone
[   74.775890][ T6020] Trying to free block not in datazone
[   74.777991][ T6020] Trying to free block not in datazone
[   74.780677][ T6020] Trying to free block not in datazone
[   74.782752][ T6020] Trying to free block not in datazone
[   74.784813][ T6020] Trying to free block not in datazone
[   74.786632][ T6020] Trying to free block not in datazone
[   74.788243][ T6020] Trying to free block not in datazone
[   74.790034][ T6020] Trying to free block not in datazone
[   74.791719][ T6020] Trying to free block not in datazone
[   74.793355][ T6020] Trying to free block not in datazone
[   74.795070][ T6020] Trying to free block not in datazone
[   74.796754][ T6020] Trying to free block not in datazone
[   74.798424][ T6020] Trying to free block not in datazone
[   74.800325][ T6020] Trying to free block not in datazone
[   74.802117][ T6020] Trying to free block not in datazone
[   74.804017][ T6020] Trying to free block not in datazone
[   74.805838][ T6020] Trying to free block not in datazone
[   74.807478][ T6020] Trying to free block not in datazone
[   74.815775][ T6020] Trying to free block not in datazone
[   74.817528][ T6020] Trying to free block not in datazone
[   74.824643][ T6020] Trying to free block not in datazone
[   74.828091][ T6020] Trying to free block not in datazone
[   74.833731][ T6020] Trying to free block not in datazone
[   74.835442][ T6020] Trying to free block not in datazone
[   74.837308][ T6020] Trying to free block not in datazone
[   74.849304][ T6020] Trying to free block not in datazone
[   74.851079][ T6020] Trying to free block not in datazone
[   74.852767][ T6020] Trying to free block not in datazone
[   74.854523][ T6020] Trying to free block not in datazone
[   74.856233][ T6020] Trying to free block not in datazone
[   74.857913][ T6020] Trying to free block not in datazone
[   74.862566][ T6020] Trying to free block not in datazone
[   74.864698][ T6020] Trying to free block not in datazone
[   74.866379][ T6020] Trying to free block not in datazone
[   74.868388][ T6020] Trying to free block not in datazone
[   74.872714][ T6020] Trying to free block not in datazone
[   74.874652][ T6020] Trying to free block not in datazone
[   74.876885][ T6020] Trying to free block not in datazone
[   74.878872][ T6020] Trying to free block not in datazone
[   74.881101][ T6020] Trying to free block not in datazone
[   74.883229][ T6020] Trying to free block not in datazone
[   74.889081][ T6020] Trying to free block not in datazone
[   74.891199][ T6020] Trying to free block not in datazone
[   74.893253][ T6020] Trying to free block not in datazone
[   74.899172][ T6020] Trying to free block not in datazone
[   74.901158][ T6020] Trying to free block not in datazone
[   74.903268][ T6020] Trying to free block not in datazone
[   74.905150][ T6020] Trying to free block not in datazone
[   74.907245][ T6020] Trying to free block not in datazone
[   74.909588][ T6020] Trying to free block not in datazone
[   74.911680][ T6020] Trying to free block not in datazone
[   74.913817][ T6020] Trying to free block not in datazone
[   74.915853][ T6020] Trying to free block not in datazone
[   74.917726][ T6020] Trying to free block not in datazone
[   74.919752][ T6020] Trying to free block not in datazone
[   74.921731][ T6020] Trying to free block not in datazone
[   74.923511][ T6020] Trying to free block not in datazone
[   74.925260][ T6020] Trying to free block not in datazone
[   74.927128][ T6020] Trying to free block not in datazone
[   74.929419][ T6020] Trying to free block not in datazone
[   74.931484][ T6020] Trying to free block not in datazone
[   74.933519][ T6020] Trying to free block not in datazone
[   74.935349][ T6020] Trying to free block not in datazone
[   74.936971][ T6020] Trying to free block not in datazone
[   74.941918][ T6020] Trying to free block not in datazone
[   74.944087][ T6020] Trying to free block not in datazone
[   74.945901][ T6020] Trying to free block not in datazone
[   74.947619][ T6020] Trying to free block not in datazone
[   74.950697][ T6025] loop2: detected capacity change from 0 to 8
[   74.960685][ T6025] SQUASHFS error: Failed to read block 0x34e: -5
[   74.962953][ T6025] SQUASHFS error: Unable to read metadata cache entry [34c]
[   74.969102][ T6020] Trying to free block not in datazone
[   74.971499][ T6020] Trying to free block not in datazone
[   74.973243][ T6020] Trying to free block not in datazone
[   74.974957][ T6020] Trying to free block not in datazone
[   74.977022][ T6020] Trying to free block not in datazone
[   74.982725][   T33] audit: type=1800 audit(1758566017.698:7): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="file1" dev="loop2" ino=5 res=0 errno=0
[   75.001289][ T6020] Trying to free block not in datazone
[   75.003204][ T6020] Trying to free block not in datazone
[   75.005366][ T6020] Trying to free block not in datazone
[   75.007125][ T6020] Trying to free block not in datazone
[   75.009297][ T6020] Trying to free block not in datazone
[   75.011514][ T6020] Trying to free block not in datazone
[   75.014420][ T6020] Trying to free block not in datazone
[   75.016633][ T6020] Trying to free block not in datazone
[   75.018756][ T6020] Trying to free block not in datazone
[   75.036359][ T6020] Trying to free block not in datazone
[   75.038530][ T6020] Trying to free block not in datazone
[   75.045269][ T6020] Trying to free block not in datazone
[   75.047410][ T6020] Trying to free block not in datazone
[   75.054510][ T6020] Trying to free block not in datazone
[   75.056515][ T6020] Trying to free block not in datazone
[   75.058831][ T6020] Trying to free block not in datazone
[   75.063481][ T6020] Trying to free block not in datazone
[   75.065251][ T6020] Trying to free block not in datazone
[   75.066941][ T6020] Trying to free block not in datazone
[   75.068617][ T6020] Trying to free block not in datazone
[   75.093877][ T6020] Trying to free block not in datazone
[   75.095671][ T6020] Trying to free block not in datazone
[   75.097499][ T6020] Trying to free block not in datazone
[   75.118310][ T6020] Trying to free block not in datazone
[   75.130087][ T6020] Trying to free block not in datazone
[   75.131956][ T6020] Trying to free block not in datazone
[   75.139173][ T6020] Trying to free block not in datazone
[   75.144355][ T6020] Trying to free block not in datazone
[   75.149351][ T6020] Trying to free block not in datazone
[   75.151401][ T6020] Trying to free block not in datazone
[   75.153223][ T6020] Trying to free block not in datazone
[   75.171534][ T6020] Trying to free block not in datazone
[   75.173519][ T6020] Trying to free block not in datazone
[   75.175340][ T6020] Trying to free block not in datazone
[   75.177670][ T6020] Trying to free block not in datazone
[   75.180291][ T6020] Trying to free block not in datazone
[   75.182667][ T6020] Trying to free block not in datazone
[   75.184658][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.185116][ T6020] Trying to free block not in datazone
[   75.193087][ T6020] Trying to free block not in datazone
[   75.194036][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'.
[   75.195382][ T6020] Trying to free block not in datazone
[   75.203979][ T6020] Trying to free block not in datazone
[   75.206271][ T6020] Trying to free block not in datazone
[   75.208574][ T6020] Trying to free block not in datazone
[   75.210917][ T6020] Trying to free block not in datazone
[   75.213181][ T6020] Trying to free block not in datazone
[   75.215659][ T6020] Trying to free block not in datazone
[   75.217958][ T6020] Trying to free block not in datazone
[   75.220423][ T6020] Trying to free block not in datazone
[   75.222883][ T6020] Trying to free block not in datazone
[   75.225150][ T6020] Trying to free block not in datazone
[   75.227473][ T6020] Trying to free block not in datazone
[   75.229810][ T6020] Trying to free block not in datazone
[   75.232157][ T6020] Trying to free block not in datazone
[   75.234470][ T6020] Trying to free block not in datazone
[   75.236751][ T6020] Trying to free block not in datazone
[   75.239112][ T6020] Trying to free block not in datazone
[   75.241443][ T6020] Trying to free block not in datazone
[   75.243768][ T6020] Trying to free block not in datazone
[   75.246055][ T6020] Trying to free block not in datazone
[   75.248585][ T6020] Trying to free block not in datazone
[   75.252591][ T6020] Trying to free block not in datazone
[   75.254927][ T6020] Trying to free block not in datazone
[   75.257808][ T6020] Trying to free block not in datazone
[   75.261171][ T6020] Trying to free block not in datazone
[   75.264132][ T6020] Trying to free block not in datazone
[   75.266422][ T6020] Trying to free block not in datazone
[   75.268908][ T6020] Trying to free block not in datazone
[   75.273405][ T6020] Trying to free block not in datazone
[   75.275772][ T6020] Trying to free block not in datazone
[   75.278039][ T6020] Trying to free block not in datazone
[   75.282193][ T6020] Trying to free block not in datazone
[   75.284555][ T6020] Trying to free block not in datazone
[   75.286930][ T6020] Trying to free block not in datazone
[   75.291294][ T6020] Trying to free block not in datazone
[   75.293593][ T6020] Trying to free block not in datazone
[   75.295891][ T6020] Trying to free block not in datazone
[   75.298222][ T6020] Trying to free block not in datazone
[   75.300864][ T6020] Trying to free block not in datazone
[   75.302987][ T6020] Trying to free block not in datazone
[   75.305024][ T6020] Trying to free block not in datazone
[   75.307187][ T6020] Trying to free block not in datazone
[   75.311120][ T6020] Trying to free block not in datazone
[   75.313129][ T6020] Trying to free block not in datazone
[   75.314992][ T6020] Trying to free block not in datazone
[   75.316802][ T6020] Trying to free block not in datazone
[   75.318609][ T6020] Trying to free block not in datazone
[   75.321850][ T6020] Trying to free block not in datazone
[   75.324141][ T6020] Trying to free block not in datazone
[   75.325962][ T6020] Trying to free block not in datazone
[   75.327703][ T6020] Trying to free block not in datazone
[   75.330332][ T6020] Trying to free block not in datazone
[   75.332351][ T6020] Trying to free block not in datazone
[   75.334047][ T6020] Trying to free block not in datazone
[   75.336039][ T6020] Trying to free block not in datazone
[   75.337761][ T6020] Trying to free block not in datazone
[   75.339550][ T6020] Trying to free block not in datazone
[   75.341542][ T6020] Trying to free block not in datazone
[   75.343682][ T6020] Trying to free block not in datazone
[   75.345714][ T6020] Trying to free block not in datazone
[   75.347971][ T6020] Trying to free block not in datazone
[   75.351199][ T6020] Trying to free block not in datazone
[   75.352984][ T6020] Trying to free block not in datazone
[   75.354692][ T6020] Trying to free block not in datazone
[   75.356383][ T6020] Trying to free block not in datazone
[   75.358185][ T6020] Trying to free block not in datazone
[   75.360277][ T6020] Trying to free block not in datazone
[   75.362409][ T6020] Trying to free block not in datazone
[   75.364484][ T6020] Trying to free block not in datazone
[   75.366395][ T6020] Trying to free block not in datazone
[   75.368438][ T6020] Trying to free block not in datazone
[   75.370474][ T6020] Trying to free block not in datazone
[   75.511728][ T5314] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   75.529121][ T2204] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   75.662565][ T5314] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[   75.669069][ T5314] usb 3-1: config 0 has no interface number 0
[   75.674035][ T5314] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   75.680806][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.683934][ T5314] usb 3-1: Product: syz
[   75.685651][ T5314] usb 3-1: Manufacturer: syz
[   75.687409][ T5314] usb 3-1: SerialNumber: syz
[   75.690575][ T2204] usb 2-1: unable to get BOS descriptor or descriptor too short
[   75.691260][ T6039] loop0: detected capacity change from 0 to 32768
[   75.697442][ T2204] usb 2-1: not running at top speed; connect to a high speed hub
[   75.697939][ T6039] bcachefs (/dev/loop0): error validating superblock: Invalid option errors: too big (max 4)
[   75.701636][ T5314] usb 3-1: config 0 descriptor??
[   75.712656][ T6039] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big
[   75.719693][ T2204] usb 2-1: config 4 has an invalid interface number: 111 but max is 0
[   75.722925][ T2204] usb 2-1: config 4 has no interface number 0
[   75.725372][ T2204] usb 2-1: config 4 interface 111 has no altsetting 0
[   75.753375][ T2204] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99
[   75.756944][ T2204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.769928][ T2204] usb 2-1: Product: syz
[   75.771663][ T2204] usb 2-1: Manufacturer: syz
[   75.773474][ T2204] usb 2-1: SerialNumber: syz
[   75.804087][ T6041] loop0: detected capacity change from 0 to 4096
[   75.856064][ T6041] ntfs3(loop0): ino=5, "/" indx_read
[   75.858620][ T6041] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   75.866592][ T6041] ntfs3(loop0): ino=5, "/" ntfs_readdir
[   76.007014][ T2204] pvrusb2: Hardware description: Terratec Grabster AV400
[   76.020970][ T2204] pvrusb2: **********
[   76.022714][ T2204] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   76.026796][ T2204] pvrusb2: Important functionality might not be entirely working.
[   76.031523][ T2204] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   76.035836][ T2204] pvrusb2: **********
[   76.042102][ T2204] usb 2-1: selecting invalid altsetting 0
[   76.047588][ T2395] pvrusb2: control-write URB failure, status=-71
[   76.052145][ T2395] pvrusb2: Device being rendered inoperable
[   76.056152][ T2204] usb 2-1: USB disconnect, device number 4
[   76.058746][ T2395] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   76.072248][ T2395] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   76.345629][ T5314] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   76.350374][ T5314] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[   76.355547][ T5314] asix 3-1:0.251: probe with driver asix failed with error -71
[   76.364816][ T5314] usb 3-1: USB disconnect, device number 4
[   76.556647][ T6050] loop1: detected capacity change from 0 to 2048
[   76.567567][ T6050] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   76.572252][ T6050] NILFS (loop1): mounting unchecked fs
[   76.574465][ T6050] NILFS (loop1): recovery required for readonly filesystem
[   76.576000][ T5919] udevd[5919]: incorrect nilfs2 checksum on /dev/loop1
[   76.577427][ T6050] NILFS (loop1): write access will be enabled during recovery
[   76.588076][ T6050] NILFS (loop1): norecovery option specified, skipping roll-forward recovery
[   76.597767][ T5919] udevd[5919]: incorrect nilfs2 checksum on /dev/loop1
[   76.602708][ T6050] NILFS (loop1): couldn't remount because the filesystem is in an incomplete recovery state
[   76.708140][ T6054] loop1: detected capacity change from 0 to 512
[   76.712273][ T6054] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   76.717318][ T6054] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   76.736050][ T6054] EXT4-fs (loop1): 1 truncate cleaned up
[   76.742958][ T6054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.786111][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.943142][   T12] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96
[   77.067192][ T6068] loop0: detected capacity change from 0 to 16
[   77.077167][ T6068] erofs (device loop0): mounted with root inode @ nid 36.
[   77.552766][ T6075] loop2: detected capacity change from 0 to 32768
[   77.559280][ T6075] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[   77.820251][ T6077] loop2: detected capacity change from 0 to 1764
[   77.996622][ T6086] netlink: 84 bytes leftover after parsing attributes in process `syz.1.72'.
[   78.250588][ T6102] loop0: detected capacity change from 0 to 1764
[   78.257704][ T6102] iso9660: Corrupted directory entry in block 2 of inode 1920
[   78.279368][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   78.349648][ T5314] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   78.432411][   T10] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[   78.436513][   T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   78.456743][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   78.463368][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.466560][   T10] usb 3-1: Product: syz
[   78.468236][   T10] usb 3-1: Manufacturer: syz
[   78.471032][   T10] usb 3-1: SerialNumber: syz
[   78.499307][ T5314] usb 2-1: Using ep0 maxpacket: 16
[   78.503825][ T5314] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.508511][ T5314] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   78.515913][ T5314] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   78.521238][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.524832][ T5314] usb 2-1: Product: syz
[   78.526808][ T5314] usb 2-1: Manufacturer: syz
[   78.528939][ T5314] usb 2-1: SerialNumber: syz
[   78.682595][   T10] usb 3-1: 0:2 : does not exist
[   78.743692][ T5314] usb 2-1: 0:2 : does not exist
[   78.767578][   T10] usb 3-1: Audio class v2/v3 interfaces need an interface association
[   78.769234][ T5314] usb 2-1: USB disconnect, device number 5
[   78.790232][   T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[   78.795767][   T10] usb 3-1: USB disconnect, device number 5
[   78.818614][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[   78.832849][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   79.253071][ T6115] syz.2.85 uses obsolete (PF_INET,SOCK_PACKET)
[   79.556459][ T6128] loop2: detected capacity change from 0 to 4096
[   79.565302][ T6128] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   79.589163][ T6129] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   79.599174][ T5314] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   79.759312][ T5314] usb 2-1: Using ep0 maxpacket: 16
[   79.781876][ T5314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.788812][ T5314] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   79.799470][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.807452][ T5314] usb 2-1: config 0 descriptor??
[   80.140704][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   80.243904][ T5314] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[   80.299353][   T10] usb 3-1: Using ep0 maxpacket: 32
[   80.315623][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.320478][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.324100][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   80.337375][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.353412][   T10] usb 3-1: config 0 descriptor??
[   80.361808][   T10] hub 3-1:0.0: USB hub found
[   80.581636][   T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -90)
[   80.623273][ T2204] usb 2-1: USB disconnect, device number 6
[   80.794427][   T10] usbhid 3-1:0.0: can't add hid device: -71
[   80.801738][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   80.832865][   T10] usb 3-1: USB disconnect, device number 6
[   80.985511][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'.
[   81.317371][ T6168] loop0: detected capacity change from 0 to 256
[   81.327969][ T6168] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   81.332852][ T6168] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   81.687707][ T6168] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d)
[   82.617231][ T6197] netlink: 165 bytes leftover after parsing attributes in process `syz.1.120'.
[   83.097479][   T33] audit: type=1107 audit(1758566025.808:8): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   83.751323][   T33] audit: type=1326 audit(1758566026.468:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.2.127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7ffc0000
[   83.759355][   T33] audit: type=1326 audit(1758566026.468:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.2.127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7ffc0000
[   83.768381][   T33] audit: type=1326 audit(1758566026.478:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.2.127" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f8d52d8ec29 code=0x7ffc0000
[   83.787788][   T33] audit: type=1326 audit(1758566026.478:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.2.127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7ffc0000
[   83.799587][   T33] audit: type=1326 audit(1758566026.478:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.2.127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7ffc0000
[   84.139280][ T5898] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   84.317458][ T5898] usb 3-1: config 1 has an invalid interface number: 236 but max is 1
[   84.321054][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.325059][ T5898] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[   84.328641][ T5898] usb 3-1: config 1 has no interface number 2
[   84.354939][ T5898] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   84.376383][ T5898] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   84.396327][ T5898] usb 3-1: config 1 interface 1 has no altsetting 0
[   84.401563][ T5898] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   84.404652][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.408002][ T5898] usb 3-1: Product: syz
[   84.411838][ T5898] usb 3-1: Manufacturer: syz
[   84.413593][ T5898] usb 3-1: SerialNumber: syz
[   84.430820][ T6217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   84.795683][ T5898] cdc_ncm 3-1:1.0: skipping garbage
[   84.797761][ T5898] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing
[   84.809110][ T5898] cdc_ncm 3-1:1.0: bind() failure
[   84.831093][ T5898] cdc_ncm 3-1:1.236: CDC Union missing and no IAD found
[   84.833901][ T5898] cdc_ncm 3-1:1.236: bind() failure
[   84.853511][ T6235] warning: `syz.1.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.938053][ T6237] pim6reg: entered allmulticast mode
[   84.943098][ T6237] pim6reg: left allmulticast mode
[   85.081671][ T5898] usb 3-1: USB disconnect, device number 7
[   85.372303][ T6242] loop0: detected capacity change from 0 to 32768
[   85.394072][ T6242] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   85.488204][ T5846] (syz-executor,5846,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[   85.495874][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[   85.708419][ T6257] loop1: detected capacity change from 0 to 4096
[   85.723040][ T6257] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   85.774739][ T6257] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   85.777773][ T6257] ntfs3(loop1): Failed to initialize $Secure::$SII (-22).
[   85.785502][ T6257] ntfs3(loop1): Failed to initialize $Secure (-22).
[   86.022017][   T33] audit: type=1326 audit(1758566028.728:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.0.154" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd78ec29 code=0x7ffc0000
[   86.038853][ T6279] nvme_fabrics: missing parameter 'transport=%s'
[   86.041979][ T6279] nvme_fabrics: missing parameter 'nqn=%s'
[   86.046181][   T33] audit: type=1326 audit(1758566028.728:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.0.154" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd78ec29 code=0x7ffc0000
[   86.058475][   T33] audit: type=1326 audit(1758566028.738:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.0.154" exe="/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f92fd78ec29 code=0x7ffc0000
[   86.076741][   T33] audit: type=1326 audit(1758566028.738:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.0.154" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fd78ec29 code=0x7ffc0000
[   86.132330][ T6288] loop1: detected capacity change from 0 to 256
[   86.287237][ T6300] loop0: detected capacity change from 0 to 8
[   86.349952][ T6300] SQUASHFS error: xz decompression failed, data probably corrupt
[   86.352638][ T6300] SQUASHFS error: Failed to read block 0x108: -5
[   86.354600][ T6300] SQUASHFS error: Unable to read metadata cache entry [106]
[   86.356820][ T6300] SQUASHFS error: Unable to read inode 0x2000
[   86.451930][ T6305] loop1: detected capacity change from 0 to 128
[   86.468109][ T6305] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   86.479606][ T5848] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11
[   86.710571][   T47] cfg80211: failed to load regulatory.db
[   86.978416][ T6320] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.048648][ T6324] loop2: detected capacity change from 0 to 1024
[   87.088775][ T6324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.106990][ T6310] loop0: detected capacity change from 0 to 32768
[   87.155453][ T6310] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   87.235273][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[   87.278490][ T6324] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.171: Allocating blocks 497-513 which overlap fs metadata
[   87.467795][ T6323] loop1: detected capacity change from 0 to 32768
[   87.489746][ T6323] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.170 (6323)
[   87.645800][ T6334] loop0: detected capacity change from 0 to 32768
[   87.654368][ T6334] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   87.673658][ T6334] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   87.682874][ T6323] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   87.726549][ T6323] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   87.737159][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[   87.911302][ T6323] BTRFS info (device loop1): enabling ssd optimizations
[   87.914055][ T6323] BTRFS info (device loop1): enabling free space tree
[   88.002087][ T5851] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   88.038174][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'.
[   88.179787][ T6330] EXT4-fs (loop2): pa ffff8881035d0910: logic 32, phys. 161, len 22
[   88.183513][ T6330] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   88.289720][ T6360] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[   88.342665][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.686372][ T6362] loop0: detected capacity change from 0 to 40427
[   88.700026][ T6362] F2FS-fs (loop0): Image doesn't support compression
[   88.702879][ T6362] F2FS-fs (loop0): build fault injection rate: 690
[   88.717527][ T6362] F2FS-fs (loop0): invalid crc value
[   88.784782][ T6362] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   88.793277][ T6362] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   88.806742][ T6362] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[   89.085277][ T6391] loop0: detected capacity change from 0 to 136
[   89.332805][ T6401] loop2: detected capacity change from 0 to 4096
[   89.340874][ T6401] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   89.354623][ T6401] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096)
[   89.358356][ T6401] NILFS (loop2): mounting unchecked fs
[   89.367384][ T6401] NILFS (loop2): invalid segment: Checksum error in super root
[   89.372517][ T6401] NILFS (loop2): error -22 while loading super root
[   89.496051][ T6405] loop2: detected capacity change from 0 to 1764
[   89.820484][ T6413] loop2: detected capacity change from 0 to 32768
[   89.824225][ T6413] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.195 (6413)
[   89.840135][ T6413] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[   89.845591][ T6413] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   89.872614][ T6413] BTRFS info (device loop2): enabling ssd optimizations
[   89.875623][ T6413] BTRFS info (device loop2): enabling free space tree
[   89.878214][ T6413] BTRFS info (device loop2): use lzo compression, level 1
[   89.930578][   T61] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   90.084349][ T5853] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[   90.086315][   T61] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   90.093871][   T61] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.097206][   T61] usb 1-1: Product: syz
[   90.102211][   T61] usb 1-1: Manufacturer: syz
[   90.104127][   T61] usb 1-1: SerialNumber: syz
[   90.134287][   T61] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   90.209933][ T5883] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   90.474157][ T6445] loop2: detected capacity change from 0 to 128
[   90.617536][ T5314] usb 1-1: USB disconnect, device number 3
[   90.646808][ T6449] input: syz0 as /devices/virtual/input/input5
[   91.280357][ T6466] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   91.420144][ T5883] usb 1-1: Service connection timeout for: 256
[   91.422705][ T5883] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[   91.429578][ T5883] ath9k_htc: Failed to initialize the device
[   91.434458][ T5314] usb 1-1: ath9k_htc: USB layer deinitialized
[   91.516910][ T6470] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   92.339173][ T5314] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   92.494375][ T5314] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.536321][ T5314] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.551650][ T5314] usb 1-1: config 0 interface 0 has no altsetting 0
[   92.554593][ T5314] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   92.562144][ T5314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.587551][ T5314] usb 1-1: config 0 descriptor??
[   92.923285][ T6478] syz.2.215 (6478): drop_caches: 2
[   93.258902][ T5314] usb 1-1: string descriptor 0 read error: -22
[   93.429595][ T6496] loop2: detected capacity change from 0 to 1024
[   93.444444][ T6496] hfsplus: failed to load root directory
[   93.481081][ T5314] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input6
[   93.516390][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'.
[   93.520340][ T6499] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   93.585838][ T5314] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[   93.655278][ T6505] loop2: detected capacity change from 0 to 1024
[   93.686078][ T5314] usb 1-1: USB disconnect, device number 4
[   94.245073][ T6509] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   94.406109][ T6519] loop0: detected capacity change from 0 to 8192
[   94.473284][ T5919]  loop0: p1 p2[DM] p4
[   94.475375][ T5919] loop0: p1 size 196608 extends beyond EOD, truncated
[   94.481089][ T5919] loop0: p2 start 4292936063 is beyond EOD, truncated
[   94.483840][ T5919] loop0: p4 size 50331648 extends beyond EOD, truncated
[   94.499303][ T6519]  loop0: p1 p2[DM] p4
[   94.501118][ T6519] loop0: p1 size 196608 extends beyond EOD, truncated
[   94.505498][ T6519] loop0: p2 start 4292936063 is beyond EOD, truncated
[   94.508076][ T6519] loop0: p4 size 50331648 extends beyond EOD, truncated
[   94.643369][ T6521] loop0: detected capacity change from 0 to 2048
[   94.671740][ T6521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.706770][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   94.710024][ T6521] EXT4-fs (loop0): shut down requested (2)
[   94.715467][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   94.726629][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.792519][ T6532] capability: warning: `syz.2.240' uses deprecated v2 capabilities in a way that may be insecure
[   95.757498][ T6545] loop1: detected capacity change from 0 to 512
[   95.763138][ T6545] EXT4-fs: Ignoring removed i_version option
[   95.765481][ T6545] EXT4-fs: Ignoring removed nobh option
[   95.770419][ T6545] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   95.782805][ T6545] EXT4-fs (loop1): 1 truncate cleaned up
[   95.790819][ T6545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.867707][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.139123][ T6574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.258'.
[   96.149198][ T5898] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   96.315200][ T5898] usb 1-1: Using ep0 maxpacket: 16
[   96.315902][ T5883] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   96.330903][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.336766][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   96.342029][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   96.342212][ T6580] loop1: detected capacity change from 0 to 256
[   96.345731][ T5898] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   96.352717][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   96.359341][ T6580] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   96.365919][ T5898] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   96.371249][ T5898] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   96.378338][ T5898] usb 1-1: Manufacturer: syz
[   96.384939][ T5898] usb 1-1: config 0 descriptor??
[   96.385531][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.393924][ T6580] FAT-fs (loop1): Filesystem has been set read-only
[   96.396627][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.400022][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.402890][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.406253][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.411110][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.414488][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.417794][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.421612][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.424364][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.427737][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.432897][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.436407][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.439316][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.442070][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.444646][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.447834][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.451105][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.453938][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.456544][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.459137][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.463283][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.466773][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.473151][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.476320][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.480682][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.484139][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.487426][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.490941][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.494529][ T5883] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   96.497634][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.502632][ T5883] usb 3-1: config 0 descriptor??
[   96.511244][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.514750][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.518701][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.522187][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.525615][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.528289][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.531396][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.534704][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.537952][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.541623][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.544614][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.547646][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.550797][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.553617][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.556381][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.559587][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.562681][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.565312][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.568239][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.571218][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.573907][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.577039][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.580001][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.583205][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.586437][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.589254][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.591946][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.594612][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.597706][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.600868][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.603768][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.606672][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.609700][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.612408][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.615121][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.618245][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.622285][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.625706][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.628660][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.631438][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.634525][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.637485][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.640634][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.643934][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.647128][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.650639][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.653864][ T6580] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   96.657469][   T33] kauditd_printk_skb: 3 callbacks suppressed
[   96.657524][   T33] audit: type=1800 audit(1758566039.378:21): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.261" name="file1" dev="loop1" ino=1048597 res=0 errno=0
[   96.669188][ T5898] rc_core: IR keymap rc-hauppauge not found
[   96.671545][ T5898] Registered IR keymap rc-empty
[   96.673842][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   96.689192][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   96.713168][ T5883] usbhid 3-1:0.0: can't add hid device: -71
[   96.715227][ T5883] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   96.720692][ T5883] usb 3-1: USB disconnect, device number 8
[   96.730514][ T5898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   96.736918][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9
[   96.744415][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   96.769405][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   96.799304][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   96.831487][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   96.861116][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   96.890257][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   96.909686][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   96.929272][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   96.960260][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   96.979708][ T5898] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   97.013238][ T5898] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   97.017187][ T5898] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   97.085000][ T5898] usb 1-1: USB disconnect, device number 5
[   97.509068][   T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   97.669959][   T47] usb 3-1: Using ep0 maxpacket: 8
[   97.673537][   T47] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[   97.676770][   T47] usb 3-1: config 2 has no interface number 0
[   97.680984][   T47] usb 3-1: config 2 interface 31 has no altsetting 0
[   97.685864][   T47] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[   97.691667][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.694956][   T47] usb 3-1: Product: syz
[   97.696761][   T47] usb 3-1: Manufacturer: syz
[   97.698702][   T47] usb 3-1: SerialNumber: syz
[   98.397380][   T47] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22
[   98.413516][   T47] usb 3-1: USB disconnect, device number 9
[   98.730177][ T5898] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   98.815521][ T6608] netlink: 5 bytes leftover after parsing attributes in process `syz.0.273'.
[   98.881817][ T5898] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[   98.886107][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   98.902522][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.916649][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[   98.926844][ T5898] usb 2-1: New USB device found, idVendor=056a, idProduct=48de, bcdDevice= 0.2e
[   98.932049][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.943395][ T5898] usb 2-1: config 0 descriptor??
[   99.283504][ T6627] loop2: detected capacity change from 0 to 256
[   99.343717][ T6632] loop2: detected capacity change from 0 to 64
[   99.366946][ T5898] wacom 0003:056A:48DE.0004: unknown main item tag 0x0
[   99.380629][ T5898] wacom 0003:056A:48DE.0004: unknown main item tag 0x0
[   99.391255][ T5898] wacom 0003:056A:48DE.0004: Unknown device_type for 'HID 056a:48de'. Ignoring.
[   99.525239][ T6643] loop0: detected capacity change from 0 to 256
[   99.567408][ T5898] usb 2-1: USB disconnect, device number 7
[   99.642896][ T6649] binder: 6648:6649 ioctl c018620c 200000000000 returned -22
[  100.301537][ T5883] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  100.459754][ T5883] usb 3-1: Using ep0 maxpacket: 16
[  100.463980][ T5883] usb 3-1: config 0 has an invalid interface number: 142 but max is 0
[  100.467411][ T5883] usb 3-1: config 0 has no interface number 0
[  100.476039][ T5883] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1
[  100.483388][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.487093][ T5883] usb 3-1: Product: syz
[  100.488887][ T5883] usb 3-1: Manufacturer: syz
[  100.491502][ T5883] usb 3-1: SerialNumber: syz
[  100.502754][ T5883] usb 3-1: config 0 descriptor??
[  100.763900][ T5883] usb 3-1: Found UVC 0.00 device syz (1bcf:0b40)
[  100.766421][ T5883] usb 3-1: Forcing UVC version to 1.0a
[  100.768590][ T5883] usb 3-1: No valid video chain found.
[  100.789382][ T6678] loop1: detected capacity change from 0 to 256
[  100.793079][ T5883] usb 3-1: USB disconnect, device number 10
[  100.850488][ T6678] FAT-fs (loop1): Directory bread(block 64) failed
[  100.853053][ T6678] FAT-fs (loop1): Directory bread(block 65) failed
[  100.855625][ T6678] FAT-fs (loop1): Directory bread(block 66) failed
[  100.887832][ T6678] FAT-fs (loop1): Directory bread(block 67) failed
[  100.891411][ T6678] FAT-fs (loop1): Directory bread(block 68) failed
[  100.894847][ T6678] FAT-fs (loop1): Directory bread(block 69) failed
[  100.897535][ T6678] FAT-fs (loop1): Directory bread(block 70) failed
[  100.904624][ T6678] FAT-fs (loop1): Directory bread(block 71) failed
[  100.909862][ T6678] FAT-fs (loop1): Directory bread(block 72) failed
[  100.912466][ T6678] FAT-fs (loop1): Directory bread(block 73) failed
[  100.931268][ T6680] Dead loop on virtual device ip6_vti0, fix it urgently!
[  100.934635][ T6680] Dead loop on virtual device ip6_vti0, fix it urgently!
[  100.950254][ T6680] Dead loop on virtual device ip6_vti0, fix it urgently!
[  100.953684][ T6680] Dead loop on virtual device ip6_vti0, fix it urgently!
[  100.956698][ T6680] Dead loop on virtual device ip6_vti0, fix it urgently!
[  100.961460][ T6680] Dead loop on virtual device ip6_vti0, fix it urgently!
[  101.125080][ T6688] program syz.0.310 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  101.166455][ T6686] loop1: detected capacity change from 0 to 4096
[  101.235078][ T6692] loop0: detected capacity change from 0 to 512
[  101.238812][ T6692] EXT4-fs: Ignoring removed bh option
[  101.247843][ T6692] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  101.257665][ T6692] EXT4-fs (loop0): 1 truncate cleaned up
[  101.264349][ T6692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.440089][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.478645][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  101.515120][ T6706] loop0: detected capacity change from 0 to 1024
[  101.538684][ T6706] hfsplus: bad catalog entry type
[  101.622356][ T6708] loop1: detected capacity change from 0 to 512
[  101.626007][ T6708] EXT4-fs: Ignoring removed bh option
[  101.644812][ T6708] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  101.662027][ T6708] EXT4-fs (loop1): 1 truncate cleaned up
[  101.669791][ T6708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.796575][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.853666][ T6722] loop2: detected capacity change from 0 to 1024
[  101.867046][   T33] audit: type=1800 audit(1758566044.578:22): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.323" name="file1" dev="loop2" ino=20 res=0 errno=0
[  101.884024][ T6722] syz.2.323: attempt to access beyond end of device
[  101.884024][ T6722] loop2: rw=34817, sector=5778, nr_sectors = 2 limit=1024
[  102.007064][ T5314] kernel write not supported for file bpf-prog (pid: 5314 comm: kworker/1:3)
[  102.139362][ T5314] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  102.176630][ T6737] loop2: detected capacity change from 0 to 1024
[  102.291160][ T5314] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.312856][ T5314] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  102.317546][ T5314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.325605][ T5314] usb 1-1: Product: syz
[  102.328513][ T5314] usb 1-1: Manufacturer: syz
[  102.332611][ T5314] usb 1-1: SerialNumber: syz
[  102.575830][ T5314] usbhid 1-1:1.0: can't add hid device: -71
[  102.578534][ T5314] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  102.585979][ T5314] usb 1-1: USB disconnect, device number 6
[  103.059893][ T6764] loop2: detected capacity change from 0 to 40427
[  103.062612][ T6764] F2FS-fs: heap/no_heap options were deprecated
[  103.072073][ T6764] F2FS-fs (loop2): invalid crc value
[  103.161949][ T6769] process 'syz.1.343' launched '/dev/fd/4' with NULL argv: empty string added
[  103.201591][ T6764] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  103.207858][ T6764] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  103.341301][ T5853] syz-executor: attempt to access beyond end of device
[  103.341301][ T5853] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  103.360400][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  103.360421][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.360429][ T5853] Call Trace:
[  103.360435][ T5853]  <TASK>
[  103.360442][ T5853]  dump_stack_lvl+0x189/0x250
[  103.360474][ T5853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.360485][ T5853]  ? __pfx_queue_work_on+0x10/0x10
[  103.360493][ T5853]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  103.360506][ T5853]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.360521][ T5853]  f2fs_handle_critical_error+0x37c/0x540
[  103.360540][ T5853]  f2fs_write_end_io+0x886/0xb60
[  103.360557][ T5853]  __submit_merged_bio+0x27a/0x6a0
[  103.360570][ T5853]  __submit_merged_write_cond+0x255/0x530
[  103.360583][ T5853]  f2fs_write_data_pages+0x261d/0x3000
[  103.360606][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  103.360644][ T5853]  ? __lock_acquire+0xab9/0xd20
[  103.360684][ T5853]  ? do_raw_spin_lock+0x121/0x290
[  103.360701][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[  103.360709][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  103.360717][ T5853]  do_writepages+0x32e/0x550
[  103.360733][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[  103.360743][ T5853]  filemap_fdatawrite+0x199/0x240
[  103.360754][ T5853]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  103.360784][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[  103.360797][ T5853]  f2fs_sync_dirty_inodes+0x31f/0x830
[  103.360812][ T5853]  f2fs_write_checkpoint+0x95a/0x1df0
[  103.360830][ T5853]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  103.360856][ T5853]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  103.360864][ T5853]  ? kfree+0x18e/0x440
[  103.360874][ T5853]  ? kill_f2fs_super+0x298/0x6c0
[  103.360884][ T5853]  kill_f2fs_super+0x2c3/0x6c0
[  103.360894][ T5853]  ? __pfx_kill_f2fs_super+0x10/0x10
[  103.360901][ T5853]  ? radix_tree_delete_item+0x2b6/0x400
[  103.360912][ T5853]  ? shrinker_free+0x2ce/0x3e0
[  103.360921][ T5853]  deactivate_locked_super+0xbc/0x130
[  103.360931][ T5853]  cleanup_mnt+0x425/0x4c0
[  103.360940][ T5853]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.360949][ T5853]  task_work_run+0x1d4/0x260
[  103.360961][ T5853]  ? __pfx_task_work_run+0x10/0x10
[  103.360970][ T5853]  ? __x64_sys_umount+0x122/0x160
[  103.360982][ T5853]  ? exit_to_user_mode_loop+0x40/0x110
[  103.360995][ T5853]  exit_to_user_mode_loop+0xec/0x110
[  103.361005][ T5853]  do_syscall_64+0x2bd/0x3b0
[  103.361013][ T5853]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.361020][ T5853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.361027][ T5853]  ? exc_page_fault+0x9f/0xf0
[  103.361035][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.361042][ T5853] RIP: 0033:0x7f8d52d8ff57
[  103.361051][ T5853] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  103.361058][ T5853] RSP: 002b:00007ffc71402b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  103.361066][ T5853] RAX: 0000000000000000 RBX: 00007f8d52e11c2d RCX: 00007f8d52d8ff57
[  103.361071][ T5853] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc71402c40
[  103.361076][ T5853] RBP: 00007ffc71402c40 R08: 0000000000000000 R09: 0000000000000000
[  103.361080][ T5853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc71403cd0
[  103.361085][ T5853] R13: 00007f8d52e11c2d R14: 00000000000192f0 R15: 00007ffc71403d10
[  103.361097][ T5853]  </TASK>
[  103.361101][ T5853] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  103.436311][ T6775] loop1: detected capacity change from 0 to 32768
[  103.529931][ T6773] loop0: detected capacity change from 0 to 32768
[  103.530099][ T6775] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  103.551494][ T6775] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1141 dinode
[  103.555322][ T6775] XFS (loop1): Unmount and run xfs_repair
[  103.557428][ T6775] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  103.561526][ T6775] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  103.564730][ T6775] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  103.567589][ T6775] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 80 1f e2 68  ..e.....4.Xh...h
[  103.571175][ T6775] 00000030: 34 f7 58 68 80 1f e2 68 00 00 00 00 00 00 00 00  4.Xh...h........
[  103.574259][ T6773] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  103.574365][ T6775] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  103.580366][ T6775] 00000050: 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 00  ................
[  103.585165][ T6775] 00000060: ff ff ff ff 22 b5 cb 17 00 00 00 00 00 00 00 02  ...."...........
[  103.588681][ T6775] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08  ................
[  103.592285][ T6775] XFS (loop1): metadata inode 0x1141 type 5 is corrupt
[  103.595380][ T6775] XFS (loop1): failed to read RT inodes
[  103.599795][ T6775] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  103.608098][ T6773] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  103.721303][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[  103.944403][ T6795] loop1: detected capacity change from 0 to 512
[  103.952303][ T6795] EXT4-fs: Ignoring removed oldalloc option
[  104.013931][ T6795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.018675][ T6795] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.034534][ T6795] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full
[  104.068618][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.112972][ T6806] loop1: detected capacity change from 0 to 512
[  104.118309][ T6806] EXT4-fs: Ignoring removed bh option
[  104.128367][ T6806] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  104.138310][ T6806] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  104.160744][ T6806] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  104.175519][ T6806] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  104.199292][ T6806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.479095][ T2204] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  104.639088][ T2204] usb 2-1: Using ep0 maxpacket: 16
[  104.645900][ T2204] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  104.649590][ T2204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.653015][ T2204] usb 2-1: Product: syz
[  104.654683][ T2204] usb 2-1: Manufacturer: syz
[  104.656662][ T2204] usb 2-1: SerialNumber: syz
[  104.663325][ T2204] usb 2-1: config 0 descriptor??
[  104.668320][ T2204] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[  104.873813][   T10] usb 2-1: USB disconnect, device number 8
[  104.988478][ T6818] netlink: 56 bytes leftover after parsing attributes in process `syz.2.356'.
[  104.994297][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.356'.
[  105.445580][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.814846][ T5848] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  105.818741][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) 
[  105.818778][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.818788][ T5848] Workqueue: hci0 hci_rx_work
[  105.818813][ T5848] Call Trace:
[  105.818819][ T5848]  <TASK>
[  105.818826][ T5848]  dump_stack_lvl+0x189/0x250
[  105.818850][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.818867][ T5848]  ? __pfx__printk+0x10/0x10
[  105.818891][ T5848]  ? kernfs_path_from_node+0x250/0x290
[  105.818907][ T5848]  ? kernfs_path_from_node+0x2f/0x290
[  105.818925][ T5848]  sysfs_create_dir_ns+0x259/0x280
[  105.818959][ T5848]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  105.818978][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  105.819000][ T5848]  kobject_add_internal+0x59f/0xb40
[  105.819026][ T5848]  kobject_add+0x155/0x220
[  105.819048][ T5848]  ? __pfx_kobject_add+0x10/0x10
[  105.819066][ T5848]  ? _raw_spin_unlock+0x28/0x50
[  105.819090][ T5848]  ? get_device_parent+0x366/0x3a0
[  105.819111][ T5848]  device_add+0x408/0xb50
[  105.819131][ T5848]  hci_conn_add_sysfs+0xd5/0x1e0
[  105.819153][ T5848]  le_conn_complete_evt+0xc3a/0x1220
[  105.819180][ T5848]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  105.819199][ T5848]  ? irqentry_exit+0x74/0x90
[  105.819213][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.819226][ T5848]  ? skb_pull_data+0xfb/0x200
[  105.819246][ T5848]  hci_le_conn_complete_evt+0x187/0x450
[  105.819267][ T5848]  hci_event_packet+0x78f/0x1200
[  105.819291][ T5848]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  105.819306][ T5848]  ? __pfx_hci_event_packet+0x10/0x10
[  105.819325][ T5848]  ? kcov_remote_start+0x4d3/0x7f0
[  105.819344][ T5848]  ? lockdep_hardirqs_on+0x50/0x150
[  105.819360][ T5848]  ? hci_send_to_monitor+0xe2/0x570
[  105.819379][ T5848]  hci_rx_work+0x46a/0xe80
[  105.819405][ T5848]  ? process_scheduled_works+0x9ef/0x17b0
[  105.819451][ T5848]  process_scheduled_works+0xae1/0x17b0
[  105.819495][ T5848]  ? __pfx_process_scheduled_works+0x10/0x10
[  105.819524][ T5848]  worker_thread+0x8a0/0xda0
[  105.819561][ T5848]  kthread+0x711/0x8a0
[  105.819582][ T5848]  ? __pfx_worker_thread+0x10/0x10
[  105.819595][ T5848]  ? __pfx_kthread+0x10/0x10
[  105.819614][ T5848]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.819634][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.819646][ T5848]  ? __pfx_kthread+0x10/0x10
[  105.819662][ T5848]  ret_from_fork+0x439/0x7d0
[  105.819679][ T5848]  ? __pfx_ret_from_fork+0x10/0x10
[  105.819697][ T5848]  ? __switch_to_asm+0x39/0x70
[  105.819714][ T5848]  ? __switch_to_asm+0x33/0x70
[  105.819729][ T5848]  ? __pfx_kthread+0x10/0x10
[  105.819747][ T5848]  ret_from_fork_asm+0x1a/0x30
[  105.819777][ T5848]  </TASK>
[  105.930041][ T5848] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  105.942901][ T5848] Bluetooth: hci0: failed to register connection device
[  106.424599][ T6840] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  106.529079][ T5883] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  106.679534][ T5883] usb 2-1: Using ep0 maxpacket: 8
[  106.694960][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short
[  106.707203][ T5883] usb 2-1: config 4 has an invalid interface number: 147 but max is 0
[  106.710985][ T5883] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  106.714438][ T5883] usb 2-1: config 4 has no interface number 0
[  106.725840][ T5883] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  106.731895][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.735165][ T5883] usb 2-1: Product: syz
[  106.736892][ T5883] usb 2-1: Manufacturer: syz
[  106.738805][ T5883] usb 2-1: SerialNumber: syz
[  107.005579][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.040256][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.095842][ T5883] usb 2-1: Found UVC 0.02 device syz (04f2:b746)
[  107.098594][ T5883] usb 2-1: No valid video chain found.
[  107.121034][ T5883] usb 2-1: USB disconnect, device number 9
[  107.521866][ T6842] loop2: detected capacity change from 0 to 32768
[  107.525645][ T6842] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.367 (6842)
[  107.550431][ T6842] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  107.554414][ T6842] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  107.674595][ T6842] BTRFS info (device loop2): enabling ssd optimizations
[  107.677418][ T6842] BTRFS info (device loop2): enabling free space tree
[  107.855522][ T5853] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  107.954568][ T5883] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  108.156707][ T5883] usb 2-1: not running at top speed; connect to a high speed hub
[  108.226894][ T5883] usb 2-1: config 2 has an invalid interface number: 33 but max is 0
[  108.235794][ T5883] usb 2-1: config 2 has no interface number 0
[  108.244128][ T5883] usb 2-1: config 2 interface 33 has no altsetting 0
[  108.255265][ T5883] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02
[  108.259881][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.265136][ T5883] usb 2-1: Product: syz
[  108.266952][ T5883] usb 2-1: Manufacturer: syz
[  108.268876][ T5883] usb 2-1: SerialNumber: syz
[  108.490680][ T5883] go7007 2-1:2.33: probe with driver go7007 failed with error -12
[  108.503168][ T5883] usb 2-1: USB disconnect, device number 10
[  108.583420][ T6882] loop2: detected capacity change from 0 to 1024
[  108.620570][ T6882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.652428][ T6887] loop0: detected capacity change from 0 to 8
[  108.655837][ T6887] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  108.672755][   T33] audit: type=1800 audit(1758566051.388:23): pid=6882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.377" name="bus" dev="loop2" ino=18 res=0 errno=0
[  108.674263][ T6882] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.377: Allocating blocks 385-513 which overlap fs metadata
[  108.695417][ T6887] cramfs: bad data blocksize 4294934200
[  108.701655][ T6887] cramfs: bad data blocksize 4294934200
[  108.705969][   T33] audit: type=1800 audit(1758566051.418:24): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.378" name="file1" dev="loop0" ino=33092 res=0 errno=0
[  108.717021][ T6882] EXT4-fs (loop2): pa ffff8881035d0bc8: logic 0, phys. 113, len 25
[  108.720487][ T6882] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 1, pa_free 9
[  108.727409][ T6882] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[  108.766159][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.819252][ T6889] loop0: detected capacity change from 0 to 1024
[  108.918854][ T6893] loop0: detected capacity change from 0 to 1024
[  108.965667][ T6893] hfsplus: b-tree write err: -5, ino 4
[  109.085796][ T6902] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  109.290980][ T6910] loop1: detected capacity change from 0 to 256
[  109.329191][   T47] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  109.415522][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'.
[  109.421575][ T6914] netlink: 36 bytes leftover after parsing attributes in process `syz.1.391'.
[  109.480882][   T47] usb 1-1: config 0 descriptor has 1 excess byte, ignoring
[  109.483914][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  109.487613][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  109.495901][   T47] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  109.499743][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.502790][   T47] usb 1-1: Product: syz
[  109.504492][   T47] usb 1-1: Manufacturer: syz
[  109.506418][   T47] usb 1-1: SerialNumber: syz
[  109.510840][   T47] usb 1-1: config 0 descriptor??
[  109.517788][   T47] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8
[  109.827380][   T47] usb 1-1: USB disconnect, device number 7
[  110.132632][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.204660][ T6931] loop1: detected capacity change from 0 to 764
[  110.665825][ T6935] loop0: detected capacity change from 0 to 8192
[  110.680759][ T6935] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.703456][   T33] audit: type=1326 audit(1758566053.408:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7fc00000
[  110.749145][   T33] audit: type=1326 audit(1758566053.408:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.395" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8d52d8ec29 code=0x7fc00000
[  110.761851][   T33] audit: type=1326 audit(1758566053.418:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7fc00000
[  110.798415][   T33] audit: type=1326 audit(1758566053.418:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7fc00000
[  110.806960][ T6935] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1050)
[  110.811842][ T6935] FAT-fs (loop0): Filesystem has been set read-only
[  110.814549][   T33] audit: type=1326 audit(1758566053.418:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7fc00000
[  110.824622][ T6935] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1050)
[  110.828708][ T6935] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1050)
[  110.832637][   T33] audit: type=1326 audit(1758566053.418:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7fc00000
[  110.841940][   T33] audit: type=1326 audit(1758566053.418:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7fc00000
[  110.859401][   T33] audit: type=1326 audit(1758566053.418:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.2.395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7fc00000
[  111.220127][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  111.383122][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  111.391023][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  111.404562][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  111.422772][   T10] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  111.425930][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.428666][   T10] usb 1-1: Product: syz
[  111.432216][ T6940] loop1: detected capacity change from 0 to 32768
[  111.443181][   T10] usb 1-1: Manufacturer: syz
[  111.444860][   T10] usb 1-1: SerialNumber: syz
[  111.468938][   T10] usb 1-1: config 0 descriptor??
[  111.500766][ T6940] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.506226][   T10] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  111.547705][ T6940] XFS (loop1): Ending clean mount
[  111.581903][ T6940] XFS (loop1): Quotacheck needed: Please wait.
[  111.632906][ T6940] XFS (loop1): Quotacheck: Done.
[  111.705636][   T10] usb 1-1: USB disconnect, device number 8
[  111.750091][ T5851] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  112.059486][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  112.854654][ T6972] loop1: detected capacity change from 0 to 256
[  112.889850][   T61] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  113.051355][   T61] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.059417][   T61] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  113.063039][   T61] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  113.077472][   T61] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.083008][   T61] usb 1-1: config 0 descriptor??
[  113.288462][   T61] usb 1-1: USB disconnect, device number 9
[  113.710028][ T6995] loop1: detected capacity change from 0 to 1024
[  114.089052][ T2204] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  114.239054][ T2204] usb 1-1: Using ep0 maxpacket: 8
[  114.244084][ T2204] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  114.247444][ T2204] usb 1-1: config 0 has no interface number 0
[  114.250034][ T2204] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  114.254236][ T2204] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  114.258754][ T2204] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  114.263785][ T2204] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  114.269237][ T2204] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  114.272867][ T2204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.280398][ T2204] usb 1-1: config 0 descriptor??
[  114.294745][ T2204] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  114.459862][   T53] hfsplus: b-tree write err: -5, ino 4
[  114.513961][ T2204] usb 1-1: USB disconnect, device number 10
[  114.523407][ T2204] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  114.744432][ T7012] loop2: detected capacity change from 0 to 4096
[  114.784466][ T7012] ntfs3(loop2): ino=21, "file1" fiemap is not supported for compressed file (cp -r)
[  114.883384][ T7016] loop2: detected capacity change from 0 to 1024
[  114.886137][ T7016] EXT4-fs: Ignoring removed bh option
[  114.903379][ T7016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.929642][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.412320][ T7039] loop0: detected capacity change from 0 to 16384
[  115.544865][ T7039] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,prjquota,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none
[  115.544884][ T7039]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  115.567564][ T7039] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  115.574578][ T7039] bcachefs (loop0): recovering from clean shutdown, journal seq 18
[  115.578882][ T7039] bcachefs (loop0): dropping and reconstructing all alloc info
[  115.653492][ T7039] bcachefs (loop0): accounting_read... done
[  115.658552][ T7039] bcachefs (loop0): alloc_read... done
[  115.663185][ T7039] bcachefs (loop0): snapshots_read... done
[  115.665887][ T7039] bcachefs (loop0): reading quotas
[  115.671832][ T7039] bcachefs (loop0): quotas done
[  115.677358][ T7039] bcachefs (loop0): done starting filesystem
[  115.758822][ T5846] bcachefs (loop0): shutting down
[  115.773615][ T7070] loop2: detected capacity change from 0 to 256
[  115.791892][ T7070] exfat: Deprecated parameter 'utf8'
[  115.798920][ T5846] bcachefs (loop0): shutdown complete
[  115.880776][ T7072] Driver unsupported XDP return value 0 on prog  (id 52) dev N/A, expect packet loss!
[  115.964232][ T7078] loop1: detected capacity change from 0 to 16
[  115.994513][ T7078] erofs (device loop1): mounted with root inode @ nid 36.
[  116.295003][ T7083] loop1: detected capacity change from 0 to 256
[  116.298884][ T7083] exfat: Deprecated parameter 'utf8'
[  116.301443][ T7083] exfat: Deprecated parameter 'utf8'
[  116.303449][ T7083] exfat: Deprecated parameter 'utf8'
[  116.317372][ T7083] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  117.293066][ T7099] loop2: detected capacity change from 0 to 256
[  117.296209][ T7099] udf: Unknown parameter 'qsv'
[  118.576519][ T7126] loop0: detected capacity change from 0 to 512
[  118.582932][ T7126] EXT4-fs: Ignoring removed bh option
[  118.590887][ T7126] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  118.600769][ T7126] EXT4-fs (loop0): 1 truncate cleaned up
[  118.605695][ T7126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.655585][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.729228][   T61] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  118.893197][   T61] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  118.899187][   T61] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.902135][   T61] usb 2-1: Product: syz
[  118.904262][   T61] usb 2-1: Manufacturer: syz
[  118.906052][   T61] usb 2-1: SerialNumber: syz
[  118.913845][   T61] usb 2-1: config 0 descriptor??
[  119.023379][ T7143] netlink: 152 bytes leftover after parsing attributes in process `syz.0.481'.
[  119.027622][ T7143] tipc: Started in network mode
[  119.030860][ T7143] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711
[  119.038304][ T7143] tipc: Enabled bearer <udp:syz0>, priority 10
[  119.462761][ T7165] loop2: detected capacity change from 0 to 256
[  119.565823][   T61] mos7840 2-1:0.0: required endpoints missing
[  119.576762][   T61] usb 2-1: USB disconnect, device number 11
[  119.652741][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[  119.813938][ T7169] loop0: detected capacity change from 0 to 32768
[  119.837459][ T7169] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  119.854333][ T7169] XFS (loop0): Ending clean mount
[  119.900662][ T5846] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  119.918452][ T7185] netlink: 'syz.2.499': attribute type 1 has an invalid length.
[  119.921277][ T7185] nbd: illegal input index -2147418100
[  120.150384][ T2204] tipc: Node number set to 4269801514
[  120.212857][ T7198] loop0: detected capacity change from 0 to 256
[  120.248538][ T7198] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  120.309350][ T5314] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  120.343958][ T7204] loop0: detected capacity change from 0 to 512
[  120.489228][ T5314] usb 3-1: Using ep0 maxpacket: 32
[  120.494209][ T5314] usb 3-1: config 4 has an invalid interface number: 128 but max is 0
[  120.500710][ T5314] usb 3-1: config 4 has no interface number 0
[  120.503134][ T5314] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.507290][ T5314] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.513932][ T5314] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  120.517284][ T5314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.533480][ T5314] hub 3-1:4.128: USB hub found
[  120.663526][ T7222] netlink: 48 bytes leftover after parsing attributes in process `syz.1.516'.
[  120.714398][ T7220] loop0: detected capacity change from 0 to 4096
[  120.732672][ T7220] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  120.747132][ T7220] ntfs3(loop0): ino=1a, mi_enum_attr
[  120.748874][ T7220] ntfs3(loop0): ino=1a, mi_enum_attr
[  120.750163][ T5314] hub 3-1:4.128: 2 ports detected
[  120.752953][ T5314] hub 3-1:4.128: Using single TT (err -22)
[  120.756338][ T7220] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  120.767116][ T5883] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  120.779442][ T5883] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  120.782139][ T5883] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  120.793780][ T5883] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  120.799509][ T5883] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  120.808408][ T5883] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  120.814868][ T5883] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  120.817810][ T5883] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  120.823506][ T5883] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  120.826271][ T5883] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0
[  120.843032][ T5883] hid-generic 0006:0004:0009.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  120.951504][ T5314] hub 3-1:4.128: hub_hub_status failed (err = -71)
[  120.955502][ T5314] hub 3-1:4.128: config failed, can't get hub status (err -71)
[  120.989740][ T5314] usb 3-1: USB disconnect, device number 11
[  121.065112][   T61] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  121.219301][   T61] usb 2-1: Using ep0 maxpacket: 32
[  121.234299][   T61] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.241936][   T61] usb 2-1: config 0 has no interfaces?
[  121.264357][   T61] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  121.268020][   T61] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.276802][   T61] usb 2-1: Product: syz
[  121.278595][   T61] usb 2-1: Manufacturer: syz
[  121.280480][   T61] usb 2-1: SerialNumber: syz
[  121.287743][   T61] usb 2-1: config 0 descriptor??
[  121.510988][   T61] usb 2-1: USB disconnect, device number 12
[  121.801432][   T55] Bluetooth: hci2: unknown advertising packet type: 0x82
[  121.801610][   T55] Bluetooth: hci2: Malformed LE Event: 0x02
[  122.081415][ T7241] loop2: detected capacity change from 0 to 2048
[  122.122677][ T5919]  loop2: p1 < >
[  122.123915][ T5919] loop2: partition table partially beyond EOD, truncated
[  122.126459][ T5919] loop2: p1 start 524289 is beyond EOD, truncated
[  122.134288][ T7241]  loop2: p1 < >
[  122.135595][ T7241] loop2: partition table partially beyond EOD, truncated
[  122.138337][ T7241] loop2: p1 start 524289 is beyond EOD, truncated
[  122.388083][ T7252] Falling back ldisc for ttyS3.
[  122.395363][ T7253] netlink: 'syz.2.530': attribute type 1 has an invalid length.
[  122.398779][ T7253] netlink: 'syz.2.530': attribute type 4 has an invalid length.
[  122.404583][ T7253] netlink: 212 bytes leftover after parsing attributes in process `syz.2.530'.
[  122.519099][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  122.627443][ T7265] loop0: detected capacity change from 0 to 512
[  122.664447][ T7265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.672076][ T7265] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.712543][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.717519][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.723055][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  122.730376][   T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  122.734536][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.741015][   T10] usb 2-1: config 0 descriptor??
[  122.754438][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.836252][ T7274] loop0: detected capacity change from 0 to 64
[  122.860447][ T7274] Trying to free block not in datazone
[  123.188093][   T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  123.447958][   T10] usb 2-1: USB disconnect, device number 13
[  123.906879][ T7298] loop0: detected capacity change from 0 to 256
[  123.923278][ T7298] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  123.987209][ T7298] exFAT-fs (loop0): IO charset iso8859- not found
[  124.115161][ T7311] Unsupported ieee802154 address type: 0
[  124.484684][ T7333] loop1: detected capacity change from 0 to 8192
[  124.625562][ T7341] netlink: 'syz.1.569': attribute type 1 has an invalid length.
[  124.656018][ T7341] 8021q: adding VLAN 0 to HW filter on device bond1
[  124.667205][ T7341] bond1: (slave geneve2): making interface the new active one
[  124.671324][ T7341] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  124.688346][ T7341] syz.1.569 (7341) used greatest stack depth: 18392 bytes left
[  124.770668][ T7348] loop0: detected capacity change from 0 to 128
[  124.776126][ T7348] vfat: Unknown parameter '0xffffffffffffffff01777777777777777777777'
[  125.251673][ T7353] input: syz0 as /devices/virtual/input/input14
[  126.027865][ T7357] loop0: detected capacity change from 0 to 32768
[  126.030924][ T7357] XFS: ikeep mount option is deprecated.
[  126.318495][ T7357] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  126.625798][ T7357] XFS (loop0): Ending clean mount
[  126.631532][ T7357] XFS (loop0): Quotacheck needed: Please wait.
[  126.685207][ T7357] XFS (loop0): Quotacheck: Done.
[  127.268682][ T5846] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.439987][   T61] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  127.577981][ T7386] loop1: detected capacity change from 0 to 32768
[  127.591968][   T61] usb 3-1: config 0 has no interfaces?
[  127.594240][   T61] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  127.603497][ T7392] binder: 7391:7392 ioctl c0306201 200000000080 returned -14
[  127.610604][   T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.630827][   T61] usb 3-1: config 0 descriptor??
[  128.282839][   T61] usb 3-1: USB disconnect, device number 12
[  128.445669][ T7400] netlink: 40 bytes leftover after parsing attributes in process `syz.1.590'.
[  129.214158][ T7418] loop2: detected capacity change from 0 to 128
[  129.228828][ T7418] syz.2.598: attempt to access beyond end of device
[  129.228828][ T7418] loop2: rw=2051, sector=128, nr_sectors = 913 limit=128
[  130.062389][ T7433] loop0: detected capacity change from 0 to 256
[  130.066767][ T7433] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  130.078315][ T7433] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  130.086872][ T7433] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[  131.810795][ T7461] input: syz1 as /devices/virtual/input/input15
[  132.256105][ T7477] loop0: detected capacity change from 0 to 22
[  132.264848][ T7477] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  132.281793][ T7477] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  132.624049][ T7491] binder: 7490:7491 ioctl c0306201 200000000640 returned -22
[  132.708619][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.708704][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.843518][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'.
[  133.199828][ T2204] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  133.361165][ T2204] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  133.374986][ T2204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.384632][ T2204] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  133.388421][ T2204] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  133.392499][ T2204] usb 3-1: Manufacturer: syz
[  133.396667][ T2204] usb 3-1: config 0 descriptor??
[  133.459146][ T2204] rc_core: IR keymap rc-hauppauge not found
[  133.461450][ T2204] Registered IR keymap rc-empty
[  133.466934][ T2204] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  133.477428][ T2204] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16
[  133.603802][ T7515] loop1: detected capacity change from 0 to 32768
[  133.615864][    C1] igorplugusb 3-1:0.0: Error: urb status = -32
[  133.623368][   T10] usb 3-1: USB disconnect, device number 13
[  133.675875][   T33] kauditd_printk_skb: 24 callbacks suppressed
[  133.675889][   T33] audit: type=1800 audit(1758566076.388:57): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.641" name="bus" dev="loop1" ino=7 res=0 errno=0
[  133.925799][ T7524] loop0: detected capacity change from 0 to 128
[  133.935407][ T7524] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  133.954299][ T7524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.397585][ T7527] loop1: detected capacity change from 0 to 32768
[  134.434550][ T7527] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.474724][ T7527] XFS (loop1): Ending clean mount
[  134.489574][ T7527] XFS (loop1): Quotacheck needed: Please wait.
[  134.547810][ T7527] XFS (loop1): Quotacheck: Done.
[  134.560575][ T7537] loop0: detected capacity change from 0 to 32768
[  134.572686][ T7537] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.651 (7537)
[  134.594675][ T7537] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  134.600918][ T7537] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  134.615848][ T5851] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.843222][ T7537] BTRFS info (device loop0): enabling ssd optimizations
[  134.845999][ T7537] BTRFS info (device loop0): enabling free space tree
[  134.893920][   T33] audit: type=1800 audit(1758566077.598:58): pid=7537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.651" name="file1" dev="loop0" ino=260 res=0 errno=0
[  134.956096][ T5846] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  135.140156][ T2204] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  135.143647][ T7581] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  135.299108][ T2204] usb 3-1: Using ep0 maxpacket: 16
[  135.307913][ T2204] usb 3-1: config 8 has an invalid interface number: 206 but max is 0
[  135.321812][ T2204] usb 3-1: config 8 has no interface number 0
[  135.326278][ T2204] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  135.335567][ T2204] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  135.344465][ T2204] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  135.357434][ T2204] usb 3-1: config 8 interface 206 has no altsetting 0
[  135.370903][ T2204] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  135.379548][ T2204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.386465][ T2204] usb 3-1: Product: syz
[  135.390285][ T2204] usb 3-1: Manufacturer: syz
[  135.394059][ T2204] usb 3-1: SerialNumber: syz
[  135.655278][ T2204] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected
[  135.697809][ T2204] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  135.744828][ T2204] usb 3-1: USB disconnect, device number 14
[  135.777830][ T2204] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  135.791985][ T2204] garmin_gps 3-1:8.206: device disconnected
[  136.189644][ T7587] netlink: 56 bytes leftover after parsing attributes in process `syz.1.662'.
[  136.647253][ T7603] binder: 7600:7603 ioctl c0306201 0 returned -14
[  137.457898][ T7611] loop0: detected capacity change from 0 to 32768
[  137.807302][ T7632] loop1: detected capacity change from 0 to 256
[  137.962831][ T7638] loop1: detected capacity change from 0 to 4096
[  137.978612][ T7638] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  137.981353][ T5919] udevd[5919]: incorrect nilfs2 checksum on /dev/loop1
[  137.982732][ T7638] NILFS (loop1): mounting unchecked fs
[  137.987388][ T7638] NILFS (loop1): recovery required for readonly filesystem
[  137.991292][ T7638] NILFS (loop1): write access will be enabled during recovery
[  138.000912][ T7638] NILFS (loop1): invalid segment: Inconsistency found
[  138.003630][ T7638] NILFS (loop1): unable to fall back to spare super block
[  138.004114][ T5919] udevd[5919]: incorrect nilfs2 checksum on /dev/loop1
[  138.006493][ T7638] NILFS (loop1): error -22 while searching super root
[  138.068213][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'.
[  138.073744][   T61] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  138.229635][   T61] usb 3-1: Using ep0 maxpacket: 8
[  138.233173][   T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  138.236831][   T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  138.240381][   T61] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  138.243574][   T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  138.247556][   T61] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  138.251351][   T61] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  138.254447][   T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.258772][   T61] usb 3-1: config 0 descriptor??
[  138.262292][ T7634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  138.359157][ T5883] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  138.485031][ T5848] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  138.487786][ T5848] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  138.491304][ T5848] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  138.493987][ T5848] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  138.496826][ T5848] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  138.500146][ T5848] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  138.505052][ T5848] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  138.529719][ T5883] usb 2-1: Using ep0 maxpacket: 16
[  138.533478][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.536788][ T5883] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  138.541340][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.547569][ T5883] usb 2-1: config 0 descriptor??
[  138.554803][ T5883] pxrc 2-1:0.0: Could not find endpoint
[  138.683671][   T55] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  138.683787][ T5314] usb 3-1: USB disconnect, device number 15
[  139.134850][ T2204] usb 2-1: USB disconnect, device number 14
[  139.396918][ T7652] loop2: detected capacity change from 0 to 4096
[  139.419299][ T7652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.463061][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.153297][ T7670] netlink: 'syz.0.698': attribute type 10 has an invalid length.
[  140.194500][ T7670] 8021q: adding VLAN 0 to HW filter on device team0
[  140.198647][ T7670] bond0: (slave team0): Enslaving as an active interface with an up link
[  140.319069][ T2204] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  140.479261][ T2204] usb 2-1: Using ep0 maxpacket: 8
[  140.504946][ T2204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  140.519276][ T2204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  140.532936][ T2204] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  140.540539][ T2204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  140.544643][ T2204] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  140.554697][ T2204] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  140.558042][ T2204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.572829][ T2204] usb 2-1: config 0 descriptor??
[  140.578074][ T7665] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  140.593209][   T33] audit: type=1326 audit(1758566083.308:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.2.703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7ffc0000
[  140.619809][   T33] audit: type=1326 audit(1758566083.308:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.2.703" exe="/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f8d52d8ec29 code=0x7ffc0000
[  140.628298][   T33] audit: type=1326 audit(1758566083.308:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.2.703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d52d8ec29 code=0x7ffc0000
[  140.809166][ T5920] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  140.859397][ T2204] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  140.962375][ T5920] usb 1-1: config 0 has an invalid interface number: 217 but max is 0
[  140.965896][ T5920] usb 1-1: config 0 has no interface number 0
[  140.975151][ T5920] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  140.979032][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.982136][ T5920] usb 1-1: Product: syz
[  140.983813][ T5920] usb 1-1: Manufacturer: syz
[  140.985688][ T5920] usb 1-1: SerialNumber: syz
[  140.995341][ T5920] usb 1-1: config 0 descriptor??
[  141.000180][ T5920] hub 1-1:0.217: bad descriptor, ignoring hub
[  141.009198][ T5920] hub 1-1:0.217: probe with driver hub failed with error -5
[  141.012228][ T5883] usb 2-1: USB disconnect, device number 15
[  141.013932][ T2204] usb 3-1: Using ep0 maxpacket: 16
[  141.014932][   T55] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  141.024771][ T2204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  141.048526][ T2204] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  141.054791][ T2204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.058078][ T2204] usb 3-1: Product: syz
[  141.060310][ T2204] usb 3-1: Manufacturer: syz
[  141.063470][ T2204] usb 3-1: SerialNumber: syz
[  141.069927][ T2204] usb 3-1: config 0 descriptor??
[  141.093249][ T2204] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  141.202709][ T5920] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  141.216412][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  141.221394][ T5920] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  141.224909][ T5920] usb 1-1: media controller created
[  141.254272][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  141.281653][ T5314] usb 3-1: USB disconnect, device number 16
[  141.285370][ T5897] usb 3-1: Failed to submit usb control message: -71
[  141.288299][ T5897] usb 3-1: unable to send the bmi data to the device: -71
[  141.294455][ T5897] usb 3-1: unable to get target info from device
[  141.298079][ T5897] usb 3-1: could not get target info (-71)
[  141.301838][ T5897] usb 3-1: could not probe fw (-71)
[  141.337839][ T5920] DVB: Unable to find symbol dib7000p_attach()
[  141.341302][ T5920] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  141.390725][ T5920] rc_core: IR keymap rc-dib0700-rc5 not found
[  141.393249][ T5920] Registered IR keymap rc-empty
[  141.395768][ T5920] dvb-usb: could not initialize remote control.
[  141.398322][ T5920] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  141.415936][ T5920] usb 1-1: USB disconnect, device number 11
[  141.457126][ T5920] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  141.591269][ T7702] loop1: detected capacity change from 0 to 8
[  141.703340][ T7708] program syz.1.709 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  142.780152][ T7723] loop1: detected capacity change from 0 to 32768
[  142.799214][ T7723] JBD2: Ignoring recovery information on journal
[  142.804408][   T61] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  142.837613][ T7723] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  142.881292][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[  142.972097][   T61] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.975647][   T61] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  142.991456][   T61] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  142.994300][   T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  142.996802][   T61] usb 3-1: SerialNumber: syz
[  143.226294][   T61] usb 3-1: 0:2 : does not exist
[  143.256400][   T61] usb 3-1: USB disconnect, device number 17
[  143.300540][ T5920] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  143.300812][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  143.489770][ T5920] usb 1-1: Using ep0 maxpacket: 16
[  143.516456][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.539524][ T5920] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  143.562552][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  143.566102][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.570419][ T5920] usb 1-1: Product: syz
[  143.572040][ T5920] usb 1-1: Manufacturer: syz
[  143.573952][ T5920] usb 1-1: SerialNumber: syz
[  143.812385][ T5920] usb 1-1: 0:2 : does not exist
[  143.916950][ T5920] usb 1-1: USB disconnect, device number 12
[  144.030298][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.483326][ T7748] loop1: detected capacity change from 0 to 128
[  144.591386][ T7748] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  144.624727][ T7748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.661967][ T7753] loop2: detected capacity change from 0 to 128
[  145.674517][ T7753] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  145.876173][ T7746] loop0: detected capacity change from 0 to 262144
[  145.888517][ T7751] use of bytesused == 0 is deprecated and will be removed in the future,
[  145.892132][ T7751] use the actual size instead.
[  146.038184][ T7746] F2FS-fs (loop0): invalid crc value
[  146.053153][ T7753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.097322][ T7746] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  146.103886][ T7746] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  146.579158][   T61] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  146.739107][   T61] usb 2-1: Using ep0 maxpacket: 32
[  146.745193][   T61] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8
[  146.747933][   T61] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.751895][   T61] usb 2-1: Product: syz
[  146.753568][   T61] usb 2-1: Manufacturer: syz
[  146.755021][   T61] usb 2-1: SerialNumber: syz
[  146.774796][   T61] empeg 2-1:1.0: empeg converter detected
[  146.922518][ T7774] loop2: detected capacity change from 0 to 512
[  146.925862][ T7774] EXT4-fs: Ignoring removed orlov option
[  146.941255][ T7774] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  146.961025][ T7774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  146.970526][ T7774] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.734: corrupted in-inode xattr: e_value size too large
[  146.987411][   T61] empeg 2-1:1.0: probe with driver empeg failed with error -71
[  146.994276][ T7774] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.734: couldn't read orphan inode 15 (err -117)
[  147.005482][ T7774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.010798][   T61] usb 2-1: USB disconnect, device number 16
[  147.040908][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.063252][ T7802] loop0: detected capacity change from 0 to 1024
[  148.085636][ T7804] hpfs: Bad magic ... probably not HPFS
[  148.109692][ T2204] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  148.162621][ T7806] loop2: detected capacity change from 0 to 2048
[  148.174516][ T7806] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  148.179753][ T5919] udevd[5919]: incorrect nilfs2 checksum on /dev/loop2
[  148.187605][ T5919] udevd[5919]: incorrect nilfs2 checksum on /dev/loop2
[  148.196332][ T7807] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.213214][ T7806] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=152, inode=18446462598732840977, rec_len=65535, name_len=254
[  148.225042][ T7806] Remounting filesystem read-only
[  148.228248][ T7806] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=152, inode=18446462598732840977, rec_len=65535, name_len=254
[  148.237021][ T7806] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=152, inode=18446462598732840977, rec_len=65535, name_len=254
[  148.244338][ T7806] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=152, inode=18446462598732840977, rec_len=65535, name_len=254
[  148.252889][ T7806] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=152, inode=18446462598732840977, rec_len=65535, name_len=254
[  148.263679][ T2204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.267851][ T2204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 1024
[  148.272929][ T2204] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00
[  148.286447][ T2204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.293800][ T2204] usb 2-1: config 0 descriptor??
[  148.298615][ T7796] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  148.342015][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  148.464563][ T7813] loop2: detected capacity change from 0 to 1024
[  148.469880][ T7813] EXT4-fs: Ignoring removed nobh option
[  148.472410][ T7813] EXT4-fs: Ignoring removed bh option
[  148.504492][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.510001][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  148.515410][   T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  148.518926][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  148.522773][ T7813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.523868][   T10] usb 1-1: SerialNumber: syz
[  148.579493][ T7813] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  148.612500][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.732993][ T2204] hid-corsair-void 0003:1B1C:0A31.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:0a31] on usb-dummy_hcd.1-1/input0
[  148.744150][   T10] usb 1-1: 0:2 : does not exist
[  148.773564][   T10] usb 1-1: USB disconnect, device number 13
[  148.817060][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.925378][ T2204] hid-corsair-void 0003:1B1C:0A31.0007: failed to request firmware (reason: -71)
[  148.929581][ T5314] hid-corsair-void 0003:1B1C:0A31.0007: failed to request battery (reason: -71)
[  148.934882][ T2204] usb 2-1: USB disconnect, device number 17
[  149.129471][ T5883] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  149.284475][ T5883] usb 3-1: Using ep0 maxpacket: 16
[  149.293070][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.297258][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.304744][ T5883] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  149.312197][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.318050][ T5883] usb 3-1: config 0 descriptor??
[  149.493249][ T7830] loop1: detected capacity change from 0 to 1024
[  149.614839][ T7828] loop0: detected capacity change from 0 to 32768
[  149.672188][   T33] audit: type=1800 audit(1758566092.388:62): pid=7828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.755" name="file1" dev="loop0" ino=4 res=0 errno=0
[  149.752125][ T5883] hid-multitouch 0003:1FD2:6007.0008: invalid report_count 33296
[  149.755093][ T5883] hid-multitouch 0003:1FD2:6007.0008: item 0 2 1 9 parsing failed
[  149.758621][ T5883] hid-multitouch 0003:1FD2:6007.0008: probe with driver hid-multitouch failed with error -22
[  149.863102][ T7836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.759'.
[  149.865651][ T7836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.759'.
[  149.950080][ T5883] usb 3-1: USB disconnect, device number 18
[  150.000070][ T7834] loop1: detected capacity change from 0 to 32768
[  150.013019][ T7834] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  150.025735][ T7834] 
[  150.026521][ T7834] ======================================================
[  150.028583][ T7834] WARNING: possible circular locking dependency detected
[  150.030636][ T7834] syzkaller #0 Not tainted
[  150.032214][ T7834] ------------------------------------------------------
[  150.035399][ T7834] syz.1.758/7834 is trying to acquire lock:
[  150.037761][ T7834] ffff888111ac1578 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  150.041272][ T7834] 
[  150.041272][ T7834] but task is already holding lock:
[  150.044014][ T7834] ffff88810a256950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  150.047632][ T7834] 
[  150.047632][ T7834] which lock already depends on the new lock.
[  150.047632][ T7834] 
[  150.051626][ T7834] 
[  150.051626][ T7834] the existing dependency chain (in reverse order) is:
[  150.055018][ T7834] 
[  150.055018][ T7834] -> #4 (jbd2_handle){++++}-{0:0}:
[  150.057918][ T7834]        lock_acquire+0x120/0x360
[  150.059926][ T7834]        start_this_handle+0x1fa7/0x21c0
[  150.062127][ T7834]        jbd2__journal_start+0x2c1/0x5b0
[  150.064355][ T7834]        jbd2_journal_start+0x2a/0x40
[  150.066506][ T7834]        ocfs2_start_trans+0x376/0x6d0
[  150.068661][ T7834]        ocfs2_reserve_local_alloc_bits+0xb04/0x24e0
[  150.071281][ T7834]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  150.073977][ T7834]        ocfs2_symlink+0xf78/0x23e0
[  150.076017][ T7834]        vfs_symlink+0x143/0x2f0
[  150.077984][ T7834]        do_symlinkat+0x1b1/0x3f0
[  150.079915][ T7834]        __x64_sys_symlinkat+0x95/0xb0
[  150.082053][ T7834]        do_syscall_64+0xfa/0x3b0
[  150.084059][ T7834]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.086562][ T7834] 
[  150.086562][ T7834] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  150.089911][ T7834]        lock_acquire+0x120/0x360
[  150.091916][ T7834]        down_read+0x46/0x2e0
[  150.093764][ T7834]        ocfs2_start_trans+0x36a/0x6d0
[  150.095927][ T7834]        ocfs2_reserve_local_alloc_bits+0xb04/0x24e0
[  150.098469][ T7834]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  150.101100][ T7834]        ocfs2_symlink+0xf78/0x23e0
[  150.103159][ T7834]        vfs_symlink+0x143/0x2f0
[  150.105109][ T7834]        do_symlinkat+0x1b1/0x3f0
[  150.107021][ T7834]        __x64_sys_symlinkat+0x95/0xb0
[  150.109126][ T7834]        do_syscall_64+0xfa/0x3b0
[  150.111105][ T7834]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.113625][ T7834] 
[  150.113625][ T7834] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  150.116574][ T7834]        lock_acquire+0x120/0x360
[  150.118600][ T7834]        ocfs2_start_trans+0x26b/0x6d0
[  150.120757][ T7834]        ocfs2_truncate_file+0x643/0x1420
[  150.123044][ T7834]        ocfs2_setattr+0x1520/0x1b40
[  150.125059][ T7834]        notify_change+0xb36/0xe40
[  150.126675][ T7834]        do_truncate+0x1a4/0x220
[  150.128148][ T7834]        path_openat+0x306c/0x3830
[  150.130012][ T7834]        do_filp_open+0x1fa/0x410
[  150.131958][ T7834]        do_sys_openat2+0x121/0x1c0
[  150.133941][ T7834]        __x64_sys_open+0x11e/0x150
[  150.135959][ T7834]        do_syscall_64+0xfa/0x3b0
[  150.137796][ T7834]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.140295][ T7834] 
[  150.140295][ T7834] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  150.143603][ T7834]        lock_acquire+0x120/0x360
[  150.145513][ T7834]        down_write+0x96/0x1f0
[  150.147371][ T7834]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  150.149787][ T7834]        ocfs2_truncate_file+0xda0/0x1420
[  150.151919][ T7834]        ocfs2_setattr+0x1520/0x1b40
[  150.153878][ T7834]        notify_change+0xb36/0xe40
[  150.155907][ T7834]        do_truncate+0x1a4/0x220
[  150.157821][ T7834]        path_openat+0x306c/0x3830
[  150.159841][ T7834]        do_filp_open+0x1fa/0x410
[  150.161804][ T7834]        do_sys_openat2+0x121/0x1c0
[  150.163904][ T7834]        __x64_sys_open+0x11e/0x150
[  150.165932][ T7834]        do_syscall_64+0xfa/0x3b0
[  150.167839][ T7834]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.170273][ T7834] 
[  150.170273][ T7834] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  150.173229][ T7834]        validate_chain+0xb9b/0x2140
[  150.175168][ T7834]        __lock_acquire+0xab9/0xd20
[  150.177097][ T7834]        lock_acquire+0x120/0x360
[  150.178876][ T7834]        down_read+0x46/0x2e0
[  150.180745][ T7834]        ocfs2_init_acl+0x2f9/0x720
[  150.182501][ T7834]        ocfs2_mknod+0x1321/0x2050
[  150.184130][ T7834]        ocfs2_create+0x1a5/0x440
[  150.185645][ T7834]        path_openat+0x14f4/0x3830
[  150.187180][ T7834]        do_filp_open+0x1fa/0x410
[  150.189109][ T7834]        do_sys_openat2+0x121/0x1c0
[  150.191080][ T7834]        __x64_sys_openat+0x138/0x170
[  150.192994][ T7834]        do_syscall_64+0xfa/0x3b0
[  150.194629][ T7834]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.196764][ T7834] 
[  150.196764][ T7834] other info that might help us debug this:
[  150.196764][ T7834] 
[  150.200083][ T7834] Chain exists of:
[  150.200083][ T7834]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  150.200083][ T7834] 
[  150.204968][ T7834]  Possible unsafe locking scenario:
[  150.204968][ T7834] 
[  150.207421][ T7834]        CPU0                    CPU1
[  150.209321][ T7834]        ----                    ----
[  150.211064][ T7834]   rlock(jbd2_handle);
[  150.212492][ T7834]                                lock(&journal->j_trans_barrier);
[  150.215064][ T7834]                                lock(jbd2_handle);
[  150.217591][ T7834]   rlock(&oi->ip_xattr_sem);
[  150.219413][ T7834] 
[  150.219413][ T7834]  *** DEADLOCK ***
[  150.219413][ T7834] 
[  150.222505][ T7834] 8 locks held by syz.1.758/7834:
[  150.224499][ T7834]  #0: ffff888031e7e428 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  150.228042][ T7834]  #1: ffff888111ac1840 (&type->i_mutex_dir_key#16){++++}-{4:4}, at: path_openat+0x8da/0x3830
[  150.231811][ T7834]  #2: ffff888111ae26c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  150.236453][ T7834]  #3: ffff888111ac6f40 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  150.241193][ T7834]  #4: ffff888111ae6f40 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  150.246405][ T7834]  #5: ffff888031e7e618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  150.249944][ T7834]  #6: ffff88803051b0e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  150.253971][ T7834]  #7: ffff88810a256950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  150.257619][ T7834] 
[  150.257619][ T7834] stack backtrace:
[  150.259844][ T7834] CPU: 0 UID: 0 PID: 7834 Comm: syz.1.758 Not tainted syzkaller #0 PREEMPT(full) 
[  150.259862][ T7834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.259895][ T7834] Call Trace:
[  150.259904][ T7834]  <TASK>
[  150.259912][ T7834]  dump_stack_lvl+0x189/0x250
[  150.259933][ T7834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.259944][ T7834]  ? __pfx__printk+0x10/0x10
[  150.259955][ T7834]  ? stack_trace_save+0x9c/0xe0
[  150.259972][ T7834]  print_circular_bug+0x2ee/0x310
[  150.259982][ T7834]  check_noncircular+0x134/0x160
[  150.259991][ T7834]  validate_chain+0xb9b/0x2140
[  150.260003][ T7834]  __lock_acquire+0xab9/0xd20
[  150.260016][ T7834]  ? ocfs2_init_acl+0x2f9/0x720
[  150.260025][ T7834]  lock_acquire+0x120/0x360
[  150.260035][ T7834]  ? ocfs2_init_acl+0x2f9/0x720
[  150.260045][ T7834]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  150.260057][ T7834]  down_read+0x46/0x2e0
[  150.260065][ T7834]  ? ocfs2_init_acl+0x2f9/0x720
[  150.260075][ T7834]  ocfs2_init_acl+0x2f9/0x720
[  150.260083][ T7834]  ? ocfs2_mknod_locked+0x148/0x250
[  150.260093][ T7834]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  150.260102][ T7834]  ? dquot_alloc_inode+0x216/0xa50
[  150.260110][ T7834]  ? ocfs2_block_signals+0x94/0xe0
[  150.260117][ T7834]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  150.260125][ T7834]  ? ocfs2_init_security_get+0x139/0x1a0
[  150.260135][ T7834]  ocfs2_mknod+0x1321/0x2050
[  150.260146][ T7834]  ? __pfx_ocfs2_mknod+0x10/0x10
[  150.260153][ T7834]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  150.260163][ T7834]  ? __lock_acquire+0xab9/0xd20
[  150.260178][ T7834]  ? look_up_lock_class+0x74/0x170
[  150.260186][ T7834]  ? register_lock_class+0x51/0x320
[  150.260197][ T7834]  ? __lock_acquire+0xab9/0xd20
[  150.260209][ T7834]  ? __lock_acquire+0xab9/0xd20
[  150.260220][ T7834]  ? do_raw_spin_lock+0x121/0x290
[  150.260230][ T7834]  ? do_raw_spin_unlock+0x4d/0x240
[  150.260240][ T7834]  ? rcu_is_watching+0x15/0xb0
[  150.260247][ T7834]  ? ocfs2_lookup+0x5b9/0x9b0
[  150.260255][ T7834]  ocfs2_create+0x1a5/0x440
[  150.260262][ T7834]  ? __pfx_ocfs2_lookup+0x10/0x10
[  150.260269][ T7834]  ? from_kgid+0x1b0/0x650
[  150.260279][ T7834]  ? __pfx_ocfs2_create+0x10/0x10
[  150.260286][ T7834]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  150.260297][ T7834]  ? inode_permission+0x149/0x470
[  150.260311][ T7834]  ? __pfx_ocfs2_permission+0x10/0x10
[  150.260322][ T7834]  ? bpf_lsm_inode_create+0x9/0x20
[  150.260332][ T7834]  ? __pfx_ocfs2_create+0x10/0x10
[  150.260339][ T7834]  path_openat+0x14f4/0x3830
[  150.260349][ T7834]  ? arch_stack_walk+0xfc/0x150
[  150.260365][ T7834]  ? __pfx_path_openat+0x10/0x10
[  150.260373][ T7834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.260386][ T7834]  do_filp_open+0x1fa/0x410
[  150.260400][ T7834]  ? __lock_acquire+0xab9/0xd20
[  150.260419][ T7834]  ? __pfx_do_filp_open+0x10/0x10
[  150.260431][ T7834]  ? _raw_spin_unlock+0x28/0x50
[  150.260442][ T7834]  ? alloc_fd+0x64c/0x6c0
[  150.260454][ T7834]  do_sys_openat2+0x121/0x1c0
[  150.260462][ T7834]  ? __se_sys_futex+0x36f/0x400
[  150.260471][ T7834]  ? __pfx_do_sys_openat2+0x10/0x10
[  150.260480][ T7834]  ? rcu_is_watching+0x15/0xb0
[  150.260488][ T7834]  __x64_sys_openat+0x138/0x170
[  150.260496][ T7834]  do_syscall_64+0xfa/0x3b0
[  150.260505][ T7834]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.260512][ T7834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.260519][ T7834]  ? exc_page_fault+0x9f/0xf0
[  150.260526][ T7834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.260534][ T7834] RIP: 0033:0x7f14a178ec29
[  150.260543][ T7834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.260551][ T7834] RSP: 002b:00007f14a2556038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  150.260559][ T7834] RAX: ffffffffffffffda RBX: 00007f14a19d5fa0 RCX: 00007f14a178ec29
[  150.260565][ T7834] RDX: 0000000000143042 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  150.260571][ T7834] RBP: 00007f14a1811e41 R08: 0000000000000000 R09: 0000000000000000
[  150.260575][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.260580][ T7834] R13: 00007f14a19d6038 R14: 00007f14a19d5fa0 R15: 00007ffcd46d1e28
[  150.260589][ T7834]  </TASK>
[  150.436213][ T5851] ocfs2: Unmounting device (7,1) on (node local)

VM DIAGNOSIS:
18:34:52  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002494 RDI=0000000000002495 RBP=00000000000003f8 RSP=ffffc900040968f0
R8 =ffff888020d88237 R9 =1ffff110041b1046 R10=dffffc0000000000 R11=ffffffff855006f0
R12=dffffc0000000000 R13=ffffffff99b048dd R14=ffffffff99df9460 R15=0000000000000000
RIP=ffffffff8550076c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f14a25566c0 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558cd59e5000 CR3=000000002388c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 0000000000000000 XMM01=7973003273666724 6567616d695f746e
XMM02=0000010000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=1360034e5d53002c 74696d6d6f635f63 XMM05=5cf3945eb98408b4 4938eecd7e6e9eec
XMM06=0000000000000000 00b0be19cd0096ec XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00001b7d1475bf98 XMM09=0000000000000000 00007f14a1812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=94a2a37387b19f00 RBX=ffffffff81969568 RCX=94a2a37387b19f00 RDX=0000000000000001
RSI=ffffffff8be33f60 RDI=ffffffff81969568 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a730 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7b2433 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32423ffc CR3=000000002388c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f14a19a7498 00007f14a19a7470 XMM03=00007f14a19a74a8 00007f14a19a74a0
XMM04=00007f14a250d100 00007f14a19a7460 XMM05=00007f14a19a7478 00007f14a19a74c0
XMM06=00007f14a19a74b8 00007f14a19a74b0 XMM07=00007f14a19a74a8 00007f14a19a74a0
XMM08=0000000000000000 00001b7d1475bf98 XMM09=0000000000000000 00007f14a1812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
