last executing test programs: 4.62632441s ago: executing program 1 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000000b00), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000180)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c6e6f61636c2c6572726f72733d636f6e74696e75652c00edc97523793b5022d016bb24c65ba594abbd38fd9c301bfa101e61d574eb5cc84215aa20846b6f33df6281eaedb4b4afaaacd321e4df0d16b4f5a8a992efe2554b52ec9c980e5544cd4b8df3e1ba594d07e0bfe3471c164430a36b7ebddc35caf2959224d8330f1807117fc520d8ff5660c5691afd66a8e397bb802ed69df198008fb799cc37"], 0x1, 0x473c, &(0x7f00000047c0)="$eJzs222IHGcBB/BnNmdzSZP0XtImafqySQQPLceln6r1QzyrNpo2L9pWU+Xcu1wvp3u3592eFgxSgyAKghIEFV+oCqVfakEM5EstQsEXpFUoFUXjF5FCFfxg0AZ6sjszdztze53NbdJi8vtBOzfPzPPM7P1vnplnnk0pUT85vVCeXihXZsu1iUcW7ix/tlZdnJkMpTfIm318OnMlcpL9m+fwe9//4QfvDOH3R7/6waWlpaXQ0Bfa2t/y84V/nZpoXaZKuTqNdtu3FvvD4pOv/uwtr7dHkeMhhO2rzqthQwjhoz8PYWMIoT8pG0iWm0IIW0IIUQjhqV//80e93ZxCizMPvfzS0dOH9p4ePff0Cxenjqy5YxTCd6q77piaeWXfhrvPv/0yHR4AAF7XB44dfuDIyP7wbBS2ne1Z/by+I1mmz8f3vfWT9z/Rs7J9ic5seANDBQAAgJyV8X9f9Fqb+bp0Zi2dEnzm0eMPPBetbDew/f928P7D97xvZH8y/xut2n5XUvSP92xozqHm533z87/9ufrt539XjvPEV178xex18c/5ueNOpOeXHrcvRKXhzHqpNDwcwtHReH1ntLlUrS3U3/FIbXH2xDoOeJXJ5t8mgaSo0/wHctWL5v93ffxzP93U080nGAz5v9rGenn1nzJtZPNfuy//8RejjvIfzNUryv/e57de+OXGbj5B/ohcimz+8YW4t3WHctwBNPL/Rk9x/ttz7Rfl/73Rs08dX8f3fxr9TF/UONfeTA/wWlK+xleYyMnmHweR6TqTX+Ra1/9/c/nfmGu/KP/7an//7V+v6+YTtO//h0a7afPakc0/DqKc2WPl+u8vFV//N+XaL8r/Nyf/9OInurpXr86/cf5D7v8dyeaf3IiznWfzN9lp/78j135R/jsHH358eh3n/aFNyXlui8Jgy8jhbOMWtm1lvro5pGlsnlvHQa4B2fzj31rm0tkWL5rXf19x/78z135R/o/v/tq7T3X1/d/2/f9I2/7/3PlujnQ1yua/qVl2Kfm/mst/V679ovx/cOpvf374Mvf/jfUD7v8dyea/edX2lfc/pY7Gfzfn6he9/9k78NyTf+li/J+eX3rc9P1P+h5iKIrf/9BeM/8tQ/HK0vVr7tfp/X93rl7R9f/Nf59/fl83/X/Uu+oNgEe/zmWv/y1xYZsBYKf535JrP5N/m3He5x/80sf+uI7xX/OJrzfNv2X8vzEuP6L/70g2/61xYeYfQz3W/H/z/h+tzv0/ufxvzbVfdP1fPDjc8+XLfP9vnP/QeiYTrkHZ/LetuV8j/991cP+/LVevKP8v7PnJK3d09fwfwogOf92y+d+w5n7N67+3OP/bc/WK8v/213/1zGNdnP/buqhLPv/4Xp+5nJJn807H/+Vc+0X5/3Dowpl9V2D8d5f7f0ey+cez5peSf378vyfXflH+3z38/fmeK/D+5175AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArMvGZNkXotJwCGFgeb1UGh4OYTBZ3xk2R+OVE2Pj1drEpxdC2J6Ul8NANFWtjVeqY9OztROTY5VqtTYRwo3J9u2hN1qo1upjM5W5m5bb2hSdnKzM18cnK/UQwo6k/JawNW1rfLo+U5lr7pvWuT6qfGaxVq8MLy5Mzoddy+Vb0vKp+dri3M3Lbd1Qqs3PnazMjp2Ynn/XyMjISNi9fM790eSj9cnZeny28dZGnbRuX9TyYZqbb2053qdqi/OzlWqz/LaWOtXaRKXaUuf2luPV5xdnJyr1ybFqbSo9Xrmlbstna27ek2wbCv2Zz5fWzTuQLO85eOwjxw7tX7W9HMXLNN/ZxZnJka3t/yYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuHo9e/c7vxVC6InXSiGEA+kPUfJfxpmHXn7p6OlDe0+Pnnv6hYtTR9rtAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqws79vETxxnEAf2b87lcFKaWLkMfAEBG9iVjQLyKp1MiOXToHdUrIwCgwjOhYEARB3aKCoFNQ+RdEHTx2qi516GAQQcXoTNqOYO2KozuvFyzPDLP7zAdmd3jmec8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOZxbtdCW9JOD7WG6aGW0N4dQnO67f8QwmC0tPx5X1PoCCF8/TJ1JqzSZjqq+n8zPjuS32v0e+nAyMPrg1Ht9WefzfbbHqK4b8X67iiO+/pq779R3el9NtkbhRDX3kXbetbDxpoffnK2EkJoKroQCvHz49yl5Pz+X9GFUKfafsHdH+62Jce/su71sBVs3/Opq5KO8WgEzf/07gtjF3tXnjnWGoLXMURnE3p76sq72EEtvZfp9X+Uvuq4HmQLmTl59P3zoougMDOzE8eKrgEAANhY5//I/1tz+X/YtrR8/3IUOtrzuf+3qvy/s6r/1fP/Zfd23hieqiuE2JGbm0zW+/fX02fjO91z9fbrivmespL/l5v8v9zk/+Um/y+tbLgs/y8x+T+JV/L/Unp8c+/Ci6KLoDDyfwAAKJ/DJ0YnxvoHkov/lh/N+by+K23H0jz9wa3Jnkcr5o3kh1vbkeOjBw/1D6THPT8huPz8h3hx6/f0fo/qNjNedd/FWs9/6Hw6P3dtlb+uLX7f/mJ+Mqsv26/nPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J1jEwbBIACj/yVVJsgayRSBNImCeziDpQM4irUzOIeVC2ghoo2ljbzX3MEHxwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1/fJf8X/9U5dpNsUkfqs/u77c13KZQxN1Y73rcfB3cdJ/wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzOzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwUAAD//xLwyIw=") r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 3.967917912s ago: executing program 1 (id=1051): syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000001380)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x4) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 3.905717463s ago: executing program 1 (id=1052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 3.864909353s ago: executing program 0 (id=1053): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.762534355s ago: executing program 1 (id=1054): syz_emit_vhci(0x0, 0x0) 3.675884667s ago: executing program 1 (id=1055): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000), 0x0) r2 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x45c, 0x40103) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000180)=0x76, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) ftruncate(r5, 0xf) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) 2.465819098s ago: executing program 2 (id=1062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffff, 0xa000, @dev={0xfe, 0x80, '\x00', 0xff}, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 2.33710015s ago: executing program 2 (id=1063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 2.183187592s ago: executing program 2 (id=1064): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x7, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) 1.422616835s ago: executing program 2 (id=1065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000c000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa08}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000340)={0x1, 0x0, 0x1ff, 0x56f39c1abc6ba11f, 0x37d8}) keyctl$session_to_parent(0x12) 1.371691107s ago: executing program 2 (id=1066): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 993.749143ms ago: executing program 3 (id=1067): ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000080)={0x2, 0x9, 0x0, 0x5, 0x5, 0x16, 0x2, 0x6, 0x0, 0x46, 0x2, "46510f4524410444959e0c520361a47e37cc7e305d8fe231939a4b81ffd8baea"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 938.543604ms ago: executing program 3 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x3, 0x1e21, 0xfffffff7, 0x1, 0x0, 0x7cce8c743ee810df, 0x7}) read(0xffffffffffffffff, &(0x7f0000000840)=""/40, 0x28) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xfef85154c7902b6e) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 843.862116ms ago: executing program 3 (id=1069): syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000001380)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x4) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 827.058105ms ago: executing program 3 (id=1070): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$eJzs28tO4nAUx/FfoVyGuTHDXJLJLGY1mc1QwAR1h49CoBJiUSJuICbqe7hx58PJwp0rMZS2SmWFtEX5fjacHydND4s/nBAQgI3V0B8ZMpSdht/54lnJSHokADGZeI/3EwCbJ32X9AQAkjHek/qSbm5PW0pn/bXgp19M+w2/n8o92x/GF9Iv0+sbeb0L7xdX0l//eqOw8PpC0H+/sP9PRe/+H/RRn/RZRX3RV5W8fju4/scLtyEAADaDoXI4zz2R0n7XsStBzri5qoI5y1k314L+LG8FOefmcuvIaUf4KgAsI6Xy9dMcPv/p0Pk3vfMP4PUbDEcHTcexj2Mq/O8HYr3pagqdr8UYKykyWosxKBYUptZijITfmABEzjrp9a3BcPS/22t27I59WK/V67uVne2q5S7+1vz6D+ANefzQT3oSAAAAAAAAAAAAAACwrG/6nvQIAAAAAGIS2b+IDEmX4pfFAAAAAAAAAAAAAAAAAABE4CEAAP//gNgaag==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8979) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x21, &(0x7f0000000600)=ANY=[], 0x2, 0x1511, &(0x7f0000001a40)="$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") fdatasync(r0) 759.090637ms ago: executing program 0 (id=1071): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x9e, &(0x7f0000000140)="$eJzszr2JAkEABeB3Gxx7yTZwwXVwNWgRVmBoaKQI2pCtWIKpkYGpyYjsCrKggYE/8H0wDG8eA29zXP+mScoyKaWs0ipn09l88p3b7nV8hqq76yR/TZv3w2SQ5Kvrt4fF+HJ630f1CzYDAACPqfLfz1cPu5/nLwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4L6cAAAD//6LYGgE=") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44042, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 739.058097ms ago: executing program 3 (id=1072): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0x4f27, 0x4, 0x10000, 0x4, 0x200005, 0x8, 0x4, 0x7, 0x54c6cff3, 0x2, 0x800000, 0x1, 0x1, 0x9, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x85, 0xcaa3, 0x0, 0x20001e58, 0x2, 0xe66, 0x3, 0x8, 0x20004086, 0x0, 0xfffffff8]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[], 0x2, 0x1b7, &(0x7f0000000940)="$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") r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x400008bf) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x189800, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000000c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) bind$x25(r4, &(0x7f0000000040), 0x12) 533.296031ms ago: executing program 1 (id=1073): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0x5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 531.208491ms ago: executing program 0 (id=1074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000c000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa08}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000340)={0x1, 0x0, 0x1ff, 0x56f39c1abc6ba11f, 0x37d8}) keyctl$session_to_parent(0x12) 391.866673ms ago: executing program 2 (id=1075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2804440, &(0x7f0000004680)=ANY=[@ANYBLOB="61636c2c6e6f696e74722c6174696d655f7175616e74756d3d30303030303030303030303030303030303030372c6c6f63616c666c6f636b732c6c6f63616c616c6c6f633d30303030303030303030303030303030303030332c6c6f63616c666c6f636b732c696e74722c6865617274626561743d6e6f6e652c0024855616ead4c7dc9e9da093713b0e6a6e67e1af8e4f5d7cbff1185218b41bcefa2f4f41b8212051258a0a6168526c8eef9d759bbb36a4b49ff8042320899ca9b6e9fa68a0abe364e0e2d46408f18da37d557aa1ebb8aa29451a584f1980dc477bd97f6a0446b8957872e51c2adf98e1acff806babdc9d58bc06d6d0b19476862cebe64cafa5a069852602786f40bf6a1bf7594e171d16ced9409b168ef591c2f5b676a2eb18e8a3b91275fd4467aea2037bd9790e240137bc7c80cc99e9dd662a5f"], 0x7, 0x4435, &(0x7f0000008c80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x818808, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 391.620783ms ago: executing program 3 (id=1076): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)={0x20, 0x18, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 234.772886ms ago: executing program 0 (id=1077): ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000080)={0x2, 0x9, 0x0, 0x5, 0x5, 0x16, 0x2, 0x6, 0x0, 0x46, 0x2, "46510f4524410444959e0c520361a47e37cc7e305d8fe231939a4b81ffd8baea"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 162.511797ms ago: executing program 0 (id=1078): syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000001380)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x4) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 0s ago: executing program 0 (id=1079): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): r 22 using dummy_hcd [ 210.476106][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.489933][ T5904] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 210.514374][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 210.543589][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.589631][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 210.614295][ T23] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 210.630559][ T23] usb 1-1: Manufacturer: syz [ 210.709915][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 210.722805][ T23] usb 1-1: config 0 descriptor?? [ 210.747575][ T5904] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 210.788590][ T23] smsusb:smsusb_probe: board id=9, interface number 0 [ 210.813560][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 210.825343][ T23] smsusb:smsusb_probe: Device initialized with return code -19 [ 210.856891][ T5904] usb 3-1: can't read configurations, error -61 [ 211.070062][ T5904] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 211.284327][ T55] usb 4-1: USB disconnect, device number 32 [ 211.340001][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 211.347644][ T5904] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 211.455709][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 211.520634][ T5904] usb 3-1: can't read configurations, error -61 [ 211.596384][ T23] usb 1-1: USB disconnect, device number 22 [ 211.631260][ T5904] usb usb3-port1: attempt power cycle [ 211.719017][ T8] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 212.140598][ T5904] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 212.242410][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 212.295068][ T5904] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 212.375768][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 212.441132][ T5904] usb 3-1: can't read configurations, error -61 [ 213.393714][ T8] usb 2-1: config 0 has no interface number 0 [ 213.889182][ T8] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 213.899385][ T8] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 214.007954][ T7443] loop0: detected capacity change from 0 to 65536 [ 214.016127][ T7443] XFS: noikeep mount option is deprecated. [ 214.050719][ T7443] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 214.085015][ T8] usb 2-1: string descriptor 0 read error: -71 [ 214.099947][ T5904] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 214.114241][ T7443] XFS (loop0): Ending clean mount [ 214.119689][ T8] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 214.148712][ T7443] XFS (loop0): Quotacheck needed: Please wait. [ 214.171763][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 214.193883][ T5904] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 214.211295][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 214.215687][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.259911][ T5904] usb 3-1: can't read configurations, error -61 [ 214.287695][ T5904] usb usb3-port1: unable to enumerate USB device [ 214.299165][ T7443] XFS (loop0): Quotacheck: Done. [ 214.312034][ T8] usb 2-1: config 0 descriptor?? [ 214.340850][ T8] usb 2-1: can't set config #0, error -71 [ 214.390704][ T8] usb 2-1: USB disconnect, device number 33 [ 214.465678][ T5792] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 214.660298][ T5904] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 214.672676][ T7463] loop1: detected capacity change from 0 to 1024 [ 214.696149][ T7463] EXT4-fs: Ignoring removed oldalloc option [ 214.729398][ T7463] EXT4-fs: Ignoring removed orlov option [ 214.740639][ T7463] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 214.791955][ T7463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.849935][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 214.863926][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.878259][ T5904] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.898566][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.909076][ T5904] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.921721][ T5904] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 214.950091][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 214.966645][ T5904] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 214.992809][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.049215][ T5904] usb 4-1: config 0 descriptor?? [ 215.390306][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 215.469875][ T5837] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 215.610253][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 215.643108][ T8] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 215.682374][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.736621][ T8] usb 2-1: config 0 descriptor?? [ 215.748305][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.848482][ T5837] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 215.908206][ T5837] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.918166][ T5904] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 215.923853][ T5837] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 215.933669][ T5904] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 215.939121][ T5837] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 215.946226][ T5904] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 215.957067][ T5837] usb 3-1: Manufacturer: syz [ 215.966959][ T5904] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 215.975729][ T5904] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 216.020533][ T5837] usb 3-1: config 0 descriptor?? [ 216.033971][ T5837] smsusb:smsusb_probe: board id=9, interface number 0 [ 216.048282][ T5904] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 216.059897][ T8] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 216.065138][ T5904] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 216.079534][ C1] hid-thrustmaster 0003:044F:B65D.0006: Unknown packet type 0x0, unable to proceed further with wheel init [ 216.084380][ T5837] smsusb:smsusb_probe: Device initialized with return code -19 [ 216.244163][ T5837] usb 3-1: USB disconnect, device number 36 [ 216.285273][ T8] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 216.295617][ T8] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 216.296511][ T55] usb 4-1: USB disconnect, device number 33 [ 216.313581][ T8] asix: probe of 2-1:0.0 failed with error -32 [ 216.399963][ T5904] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 216.599943][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 216.607278][ T5904] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 216.616127][ T5904] usb 1-1: config 0 has no interface number 0 [ 216.622335][ T5904] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 216.632278][ T5904] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 216.644559][ T5904] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 216.653681][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.661770][ T5904] usb 1-1: Product: syz [ 216.665940][ T5904] usb 1-1: Manufacturer: syz [ 216.670602][ T5904] usb 1-1: SerialNumber: syz [ 216.677034][ T5904] usb 1-1: config 0 descriptor?? [ 216.683832][ T7480] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 216.691198][ T7480] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 216.811551][ T7483] bio_check_eod: 2 callbacks suppressed [ 216.811563][ T7483] syz.2.475: attempt to access beyond end of device [ 216.811563][ T7483] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 216.831181][ T7483] syz.2.475: attempt to access beyond end of device [ 216.831181][ T7483] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 216.848695][ T7483] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 216.858919][ T7483] syz.2.475: attempt to access beyond end of device [ 216.858919][ T7483] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 216.895757][ T7483] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 216.907969][ T7480] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 216.913348][ T7483] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 216.919308][ T7480] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 216.926102][ T7483] UDF-fs: Scanning with blocksize 1024 failed [ 216.936700][ T7483] syz.2.475: attempt to access beyond end of device [ 216.936700][ T7483] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 216.950759][ T7483] syz.2.475: attempt to access beyond end of device [ 216.950759][ T7483] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 216.963921][ T7483] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 216.974330][ T7483] syz.2.475: attempt to access beyond end of device [ 216.974330][ T7483] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 216.987445][ T7483] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 216.997580][ T7483] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 217.005223][ T7483] UDF-fs: Scanning with blocksize 2048 failed [ 217.014263][ T7483] syz.2.475: attempt to access beyond end of device [ 217.014263][ T7483] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 217.028128][ T7483] syz.2.475: attempt to access beyond end of device [ 217.028128][ T7483] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 217.046373][ T7483] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 217.056709][ T7483] syz.2.475: attempt to access beyond end of device [ 217.056709][ T7483] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 217.070297][ T7483] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 217.079864][ T7483] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 217.087615][ T7483] UDF-fs: Scanning with blocksize 4096 failed [ 217.093773][ T7483] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 217.142796][ T5904] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 217.159502][ T5904] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 217.170307][ T5904] asix: probe of 1-1:0.251 failed with error -5 [ 217.186602][ T7490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.477'. [ 217.589893][ T5904] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 217.772042][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 217.778667][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.789668][ T5904] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.798900][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.809377][ T5904] usb 3-1: config 0 descriptor?? [ 218.024810][ T5904] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 218.064377][ T5904] usb 2-1: USB disconnect, device number 34 [ 218.118462][ T7501] loop1: detected capacity change from 0 to 1024 [ 218.130611][ T7501] EXT4-fs: Ignoring removed oldalloc option [ 218.139982][ T7501] EXT4-fs: Ignoring removed orlov option [ 218.151077][ T7501] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 218.175613][ T7501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.218538][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.441477][ T1203] usb 3-1: USB disconnect, device number 37 [ 219.155838][ T5904] usb 1-1: USB disconnect, device number 23 [ 219.348110][ T7518] syz.1.485: attempt to access beyond end of device [ 219.348110][ T7518] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 219.362550][ T7518] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 219.372905][ T7518] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 219.383557][ T7518] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 219.391416][ T7518] UDF-fs: Scanning with blocksize 1024 failed [ 219.398435][ T7518] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 219.418451][ T7518] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 219.435635][ T7518] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 219.443507][ T7518] UDF-fs: Scanning with blocksize 2048 failed [ 219.454694][ T7518] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 219.465336][ T7518] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 219.496602][ T7518] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 219.508656][ T7518] UDF-fs: Scanning with blocksize 4096 failed [ 219.515543][ T7518] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 219.528249][ T7517] block nbd1: shutting down sockets [ 219.593849][ T7526] loop1: detected capacity change from 0 to 1024 [ 219.606998][ T7526] EXT4-fs: Ignoring removed oldalloc option [ 219.610165][ T5904] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 219.619211][ T7526] EXT4-fs: Ignoring removed orlov option [ 219.627599][ T7526] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 219.653642][ T7526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.696186][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.789865][ T1203] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 219.808424][ T7533] netlink: 52 bytes leftover after parsing attributes in process `syz.1.491'. [ 219.820338][ T7533] netlink: 52 bytes leftover after parsing attributes in process `syz.1.491'. [ 219.826234][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.839614][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 219.855776][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.870725][ T5904] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 219.884328][ T5904] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 219.894213][ T5904] usb 1-1: Manufacturer: syz [ 219.912324][ T5904] usb 1-1: config 0 descriptor?? [ 219.926485][ T5904] smsusb:smsusb_probe: board id=9, interface number 0 [ 219.935820][ T5904] smsusb:smsusb_probe: Device initialized with return code -19 [ 219.982228][ T1203] usb 3-1: Using ep0 maxpacket: 8 [ 219.996064][ T1203] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 220.009083][ T1203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.023942][ T1203] usb 3-1: config 0 descriptor?? [ 220.249905][ T6349] usb 1-1: USB disconnect, device number 24 [ 220.815837][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 220.825305][ T1203] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 220.888288][ T1203] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 220.906729][ T1203] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 220.918415][ T1203] asix: probe of 3-1:0.0 failed with error -32 [ 221.050298][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 221.057637][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.068738][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 221.078950][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.090617][ T8] usb 2-1: config 0 descriptor?? [ 221.224156][ T6349] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 221.308647][ T8] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 221.432302][ T6349] usb 1-1: Using ep0 maxpacket: 16 [ 221.492761][ T6349] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 221.608645][ T6349] usb 1-1: config 0 has no interface number 0 [ 221.687900][ T6349] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 221.748687][ T6349] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 221.824380][ T6349] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 221.862156][ T5904] usb 2-1: USB disconnect, device number 35 [ 221.899611][ T6349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.948431][ T6349] usb 1-1: Product: syz [ 221.955652][ T6349] usb 1-1: Manufacturer: syz [ 221.963920][ T6349] usb 1-1: SerialNumber: syz [ 221.971511][ T6349] usb 1-1: config 0 descriptor?? [ 221.984519][ T7544] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 221.993655][ T7544] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 222.217757][ T7544] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 222.226040][ T7544] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 222.357831][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.502'. [ 222.404315][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.502'. [ 222.439482][ T6349] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 222.468658][ T6349] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 222.482438][ T6349] asix: probe of 1-1:0.251 failed with error -5 [ 223.122626][ T1203] usb 3-1: USB disconnect, device number 38 [ 223.621537][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 224.377312][ T8] usb 1-1: USB disconnect, device number 25 [ 224.790876][ T7601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.514'. [ 224.837700][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.514'. [ 224.980001][ T5882] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 225.360080][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 225.436608][ T5882] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 225.566402][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.669571][ T5882] usb 1-1: config 0 descriptor?? [ 225.894612][ T5882] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 226.144624][ T5882] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 226.185891][ T1203] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 226.244085][ T5882] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 226.347424][ T5882] asix: probe of 1-1:0.0 failed with error -32 [ 226.450224][ T1203] usb 2-1: Using ep0 maxpacket: 16 [ 226.520703][ T1203] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 226.544506][ T1203] usb 2-1: config 0 has no interface number 0 [ 226.657650][ T1203] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 226.671866][ T1203] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 226.685580][ T1203] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 226.698334][ T1203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.706474][ T1203] usb 2-1: Product: syz [ 226.716850][ T1203] usb 2-1: Manufacturer: syz [ 226.721744][ T1203] usb 2-1: SerialNumber: syz [ 226.732111][ T1203] usb 2-1: config 0 descriptor?? [ 226.740022][ T7621] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 226.752977][ T7621] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 226.956072][ T7641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.528'. [ 226.967752][ T7621] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 227.000202][ T7621] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 227.138187][ T7646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.528'. [ 227.328390][ T1203] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 227.470581][ T1203] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 227.597762][ T1203] asix: probe of 2-1:0.251 failed with error -5 [ 227.746434][ T23] usb 1-1: USB disconnect, device number 26 [ 227.986547][ T7655] loop2: detected capacity change from 0 to 256 [ 228.569477][ T7657] loop0: detected capacity change from 0 to 1024 [ 228.582533][ T7657] EXT4-fs: Ignoring removed oldalloc option [ 228.659894][ T7657] EXT4-fs: Ignoring removed orlov option [ 228.714027][ T7657] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 228.994903][ T7657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.250034][ T968] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 229.528574][ T1203] usb 2-1: USB disconnect, device number 36 [ 229.600359][ T968] usb 3-1: Using ep0 maxpacket: 16 [ 229.732430][ T968] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 229.914616][ T968] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 230.043732][ T968] usb 3-1: can't read configurations, error -61 [ 230.317746][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.349263][ T968] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 230.660079][ T968] usb 3-1: Using ep0 maxpacket: 16 [ 230.765421][ T968] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 231.913499][ T968] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 232.030069][ T968] usb 3-1: can't read configurations, error -71 [ 232.036707][ T968] usb usb3-port1: attempt power cycle [ 232.145829][ T7681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.538'. [ 232.209157][ T7687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.538'. [ 233.360958][ T7681] Can't find ip_set type hash:ip,port,i [ 233.372175][ T7687] Can't find ip_set type hash:ip,port,i [ 233.535511][ T7703] loop3: detected capacity change from 0 to 1024 [ 233.565493][ T7703] EXT4-fs: Ignoring removed oldalloc option [ 233.585251][ T7703] EXT4-fs: Ignoring removed orlov option [ 233.611333][ T7703] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 233.654475][ T7703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.750052][ T7714] loop2: detected capacity change from 0 to 256 [ 233.793180][ T968] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 233.802741][ T5785] blk_print_req_error: 126 callbacks suppressed [ 233.802756][ T5785] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.804321][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.130128][ T968] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 234.179998][ T23] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 234.471135][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 234.547660][ T23] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 234.663905][ T23] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 234.761433][ T23] usb 3-1: can't read configurations, error -61 [ 235.002010][ T23] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 236.604540][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 236.706357][ T23] usb 3-1: too many configurations: 223, using maximum allowed: 8 [ 236.749887][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.760996][ T968] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 236.774253][ T968] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 236.784049][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.820987][ T968] usb 2-1: config 0 descriptor?? [ 236.842380][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 236.864767][ T23] usb 3-1: can't read configurations, error -71 [ 236.887547][ T968] usb 2-1: can't set config #0, error -71 [ 236.914795][ T968] usb 2-1: USB disconnect, device number 37 [ 236.936467][ T23] usb usb3-port1: attempt power cycle [ 237.154357][ T7736] nbd2: detected capacity change from 0 to 10 [ 237.736035][ T24] block nbd2: Send control failed (result -89) [ 237.742366][ T24] block nbd2: Request send failed, requeueing [ 237.748608][ T24] block nbd2: Dead connection, failed to find a fallback [ 237.755740][ T24] block nbd2: shutting down sockets [ 237.761013][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.770104][ T24] buffer_io_error: 128 callbacks suppressed [ 237.770116][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 237.785482][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.809490][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 237.839814][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.850688][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 237.858639][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.871222][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 237.880210][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 237.888185][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.897789][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 237.906177][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.915585][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 237.925929][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.935206][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 237.943251][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.952387][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 237.960299][ T5903] ldm_validate_partition_table(): Disk read failed. [ 237.967087][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.969633][ T7745] loop3: detected capacity change from 0 to 1024 [ 237.976443][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 237.976716][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 237.999262][ T5903] Dev nbd2: unable to read RDB block 0 [ 238.005224][ T5903] nbd2: unable to read partition table [ 238.011713][ T5903] nbd2: partition table beyond EOD, truncated [ 238.032573][ T5903] ldm_validate_partition_table(): Disk read failed. [ 238.039701][ T5903] Dev nbd2: unable to read RDB block 0 [ 238.045614][ T5903] nbd2: unable to read partition table [ 238.051412][ T5903] nbd2: partition table beyond EOD, truncated [ 238.083693][ T7745] EXT4-fs: Ignoring removed oldalloc option [ 238.089722][ T7745] EXT4-fs: Ignoring removed orlov option [ 238.125499][ T7745] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 238.193190][ T7750] loop1: detected capacity change from 0 to 256 [ 238.261035][ T7745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.790422][ T23] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 238.952796][ T6349] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 239.090899][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 239.141168][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.175934][ T23] usb 2-1: too many configurations: 223, using maximum allowed: 8 [ 239.252022][ T6349] usb 1-1: no configurations [ 239.269731][ T23] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 239.299446][ T6349] usb 1-1: can't read configurations, error -22 [ 239.351542][ T23] usb 2-1: can't read configurations, error -61 [ 239.527163][ T6349] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 239.573865][ T23] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 239.771823][ T6349] usb 1-1: no configurations [ 239.782802][ T6349] usb 1-1: can't read configurations, error -22 [ 239.802696][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 239.826609][ T6349] usb usb1-port1: attempt power cycle [ 239.838376][ T23] usb 2-1: too many configurations: 223, using maximum allowed: 8 [ 239.890920][ T23] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 239.926674][ T23] usb 2-1: can't read configurations, error -61 [ 239.970700][ T23] usb usb2-port1: attempt power cycle [ 240.290058][ T6349] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 240.406855][ T6349] usb 1-1: no configurations [ 240.421189][ T23] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 240.454410][ T6349] usb 1-1: can't read configurations, error -22 [ 240.520982][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 240.553398][ T23] usb 2-1: too many configurations: 223, using maximum allowed: 8 [ 240.634824][ T23] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 240.677537][ T6349] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 240.710498][ T23] usb 2-1: can't read configurations, error -61 [ 240.774313][ T6349] usb 1-1: no configurations [ 240.827840][ T6349] usb 1-1: can't read configurations, error -22 [ 240.888438][ T6349] usb usb1-port1: unable to enumerate USB device [ 240.920090][ T23] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 241.003015][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 241.030087][ T5796] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 241.044075][ T23] usb 2-1: too many configurations: 223, using maximum allowed: 8 [ 241.090393][ T23] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 241.129698][ T23] usb 2-1: can't read configurations, error -61 [ 241.228889][ T23] usb usb2-port1: unable to enumerate USB device [ 241.256206][ T7757] loop2: detected capacity change from 0 to 32768 [ 241.276825][ T7757] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 241.277084][ T7757] (syz.2.561,7757,0):ocfs2_initialize_super:2287 ERROR: status = -12 [ 241.299385][ T7757] (syz.2.561,7757,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 241.318392][ T5796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.402025][ T5796] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 241.450508][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.487499][ T5796] usb 4-1: config 0 descriptor?? [ 241.533676][ T5796] pwc: Askey VC010 type 2 USB webcam detected. [ 241.984654][ T5796] pwc: recv_control_msg error -32 req 02 val 2b00 [ 242.074467][ T5796] pwc: recv_control_msg error -32 req 02 val 2700 [ 242.174102][ T5796] pwc: recv_control_msg error -32 req 02 val 2c00 [ 242.248696][ T5796] pwc: recv_control_msg error -32 req 04 val 1000 [ 242.280905][ T5796] pwc: recv_control_msg error -32 req 04 val 1300 [ 242.299597][ T5796] pwc: recv_control_msg error -32 req 04 val 1400 [ 242.321951][ T5796] pwc: recv_control_msg error -32 req 02 val 2000 [ 242.357414][ T5796] pwc: recv_control_msg error -32 req 02 val 2100 [ 242.364806][ T5796] pwc: recv_control_msg error -71 req 04 val 1500 [ 242.373500][ T5796] pwc: recv_control_msg error -71 req 02 val 2500 [ 242.390060][ T5796] pwc: recv_control_msg error -71 req 02 val 2400 [ 242.413200][ T5796] pwc: recv_control_msg error -71 req 02 val 2600 [ 242.419982][ T1203] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 242.464431][ T5796] pwc: recv_control_msg error -71 req 02 val 2900 [ 242.485625][ T5796] pwc: recv_control_msg error -71 req 02 val 2800 [ 242.496238][ T5796] pwc: recv_control_msg error -71 req 04 val 1100 [ 242.517110][ T5796] pwc: recv_control_msg error -71 req 04 val 1200 [ 242.536157][ T5796] pwc: Registered as video103. [ 242.552170][ T5796] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 242.584050][ T5796] usb 4-1: USB disconnect, device number 34 [ 242.619890][ T1203] usb 1-1: Using ep0 maxpacket: 16 [ 242.635178][ T1203] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 242.649020][ T1203] usb 1-1: config 0 has no interface number 0 [ 242.675209][ T1203] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 242.695611][ T1203] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 242.707771][ T8] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 242.719146][ T1203] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 242.732787][ T1203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.741393][ T1203] usb 1-1: Product: syz [ 242.745632][ T1203] usb 1-1: Manufacturer: syz [ 242.750367][ T1203] usb 1-1: SerialNumber: syz [ 242.757670][ T1203] usb 1-1: config 0 descriptor?? [ 242.763827][ T7770] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 242.771863][ T7770] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 242.909867][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 242.916956][ T8] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 242.939570][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.966390][ T8] usb 3-1: config 0 descriptor?? [ 242.991651][ T7770] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 242.998981][ T7770] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.137756][ T7789] loop1: detected capacity change from 0 to 32768 [ 243.160705][ T7789] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 243.184505][ T27] audit: type=1800 audit(1753388868.342:17): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.572" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 243.201106][ T5796] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 243.213043][ T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 243.226550][ T27] audit: type=1800 audit(1753388868.382:18): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.572" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 243.403954][ T5796] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 243.415193][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.427343][ T1203] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 243.427812][ T5796] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 243.439035][ T1203] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 243.462876][ T1203] asix: probe of 1-1:0.251 failed with error -32 [ 243.478502][ T5796] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 243.490369][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.516968][ T5796] usb 4-1: config 0 descriptor?? [ 243.534516][ T7789] (syz.1.572,7789,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 243.596667][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 243.663637][ T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 243.675198][ T8] asix: probe of 3-1:0.0 failed with error -32 [ 243.772930][ T7797] loop1: detected capacity change from 0 to 256 [ 244.144204][ T5796] usbhid 4-1:0.0: can't add hid device: -71 [ 244.195942][ T5904] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 244.212832][ T5796] usbhid: probe of 4-1:0.0 failed with error -71 [ 244.318247][ T5796] usb 4-1: USB disconnect, device number 35 [ 244.450466][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 244.512965][ T5904] usb 2-1: too many configurations: 223, using maximum allowed: 8 [ 244.587202][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 244.626566][ T5904] usb 2-1: can't read configurations, error -61 [ 244.757382][ T5796] usb 1-1: USB disconnect, device number 31 [ 244.821718][ T5904] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 245.110298][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 245.184848][ T5904] usb 2-1: too many configurations: 223, using maximum allowed: 8 [ 245.304383][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 245.404914][ T5904] usb 2-1: can't read configurations, error -61 [ 245.491113][ T5904] usb usb2-port1: attempt power cycle [ 245.841137][ T5796] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 245.970138][ T5904] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 246.025772][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.576'. [ 246.055140][ T6349] usb 3-1: USB disconnect, device number 45 [ 246.080853][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 246.122990][ T5796] usb 1-1: no configurations [ 246.145566][ T5904] usb 2-1: too many configurations: 223, using maximum allowed: 8 [ 246.184778][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.576'. [ 246.195415][ T5796] usb 1-1: can't read configurations, error -22 [ 246.282373][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 246.376050][ T5904] usb 2-1: can't read configurations, error -61 [ 246.470226][ T5796] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 246.650196][ T5904] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 246.770980][ T5796] usb 1-1: no configurations [ 246.804807][ T7807] Can't find ip_set type hash:ip,port,i [ 246.833442][ T5796] usb 1-1: can't read configurations, error -22 [ 246.862710][ T7809] Can't find ip_set type hash:ip,port,i [ 246.962958][ T5796] usb usb1-port1: attempt power cycle [ 246.972013][ T5904] usb 2-1: device descriptor read/8, error -71 [ 247.120790][ T5904] usb usb2-port1: unable to enumerate USB device [ 247.390139][ T5796] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 247.441595][ T5796] usb 1-1: no configurations [ 247.458806][ T5796] usb 1-1: can't read configurations, error -22 [ 247.675824][ T5796] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 247.825371][ T5796] usb 1-1: no configurations [ 247.845459][ T5796] usb 1-1: can't read configurations, error -22 [ 247.900079][ T5796] usb usb1-port1: unable to enumerate USB device [ 248.849925][ T5796] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 248.953129][ T7829] loop3: detected capacity change from 0 to 32768 [ 248.977672][ T7829] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 248.997381][ T27] audit: type=1800 audit(1753388874.152:19): pid=7829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.582" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 249.020893][ T27] audit: type=1800 audit(1753388874.182:20): pid=7829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.582" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 249.083720][ T5796] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 249.095122][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.107504][ T5796] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 249.120698][ T5796] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 249.129975][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.141117][ T5796] usb 3-1: config 0 descriptor?? [ 249.190875][ T1203] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 249.245997][ T7829] syz.3.582 (7829) used greatest stack depth: 18128 bytes left [ 249.269553][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 249.380130][ T1203] usb 2-1: Using ep0 maxpacket: 8 [ 249.396823][ T1203] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 249.418588][ T1203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.458712][ T1203] usb 2-1: config 0 descriptor?? [ 249.678129][ T1203] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 249.768324][ T5796] usbhid 3-1:0.0: can't add hid device: -71 [ 249.776369][ T5796] usbhid: probe of 3-1:0.0 failed with error -71 [ 249.796219][ T5796] usb 3-1: USB disconnect, device number 46 [ 250.090657][ T7861] loop0: detected capacity change from 0 to 4096 [ 250.091803][ T1203] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 250.110196][ T1203] asix: probe of 2-1:0.0 failed with error -32 [ 250.126599][ T6349] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 251.053241][ T6349] usb 4-1: Using ep0 maxpacket: 8 [ 251.060589][ T6349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.073444][ T6349] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 251.125896][ T6349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.137542][ T6349] usb 4-1: config 0 descriptor?? [ 251.356003][ T6349] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 251.433909][ T7870] loop2: detected capacity change from 0 to 32768 [ 251.457801][ T7870] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 251.477546][ T27] audit: type=1800 audit(1753388876.632:21): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.595" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 251.504731][ T27] audit: type=1800 audit(1753388876.662:22): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.595" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 251.599869][ T8] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 251.679228][ T7870] (syz.2.595,7870,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 251.718567][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 251.758719][ T5882] usb 4-1: USB disconnect, device number 36 [ 251.791019][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.807869][ T8] usb 1-1: config 0 has no interfaces? [ 251.822768][ T8] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 251.836460][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.852110][ T8] usb 1-1: config 0 descriptor?? [ 251.936071][ T8] usb 2-1: USB disconnect, device number 46 [ 252.219698][ T7885] loop1: detected capacity change from 0 to 32768 [ 252.554143][ T7895] loop1: detected capacity change from 0 to 4096 [ 254.488785][ T5796] usb 1-1: USB disconnect, device number 36 [ 254.608745][ T7910] loop2: detected capacity change from 0 to 32768 [ 254.693115][ T7910] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 254.746799][ T27] audit: type=1800 audit(1753388879.902:23): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.606" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 254.777075][ T27] audit: type=1800 audit(1753388879.932:24): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.606" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 254.974944][ T5796] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 255.037633][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 255.169865][ T5796] usb 1-1: Using ep0 maxpacket: 8 [ 255.207411][ T5796] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 255.217565][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.232569][ T5796] usb 1-1: config 0 descriptor?? [ 255.451515][ T5796] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 255.622319][ T7927] loop2: detected capacity change from 0 to 32768 [ 255.866405][ T5796] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 255.883747][ T5796] asix: probe of 1-1:0.0 failed with error -32 [ 256.085589][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.092262][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.786632][ T7940] loop2: detected capacity change from 0 to 64 [ 256.800824][ T7940] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 256.842973][ T7938] loop1: detected capacity change from 0 to 4096 [ 256.973290][ T7945] loop3: detected capacity change from 0 to 64 [ 257.017098][ T7945] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 257.219876][ T8] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 257.409921][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 257.431651][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.449841][ T8] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.469844][ T8] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.481757][ T7947] loop1: detected capacity change from 0 to 32768 [ 257.488365][ T8] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 257.515430][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 257.524295][ T8] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 257.534462][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.554249][ T8] usb 3-1: config 0 descriptor?? [ 257.583600][ T7947] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 257.642128][ T5882] usb 1-1: USB disconnect, device number 37 [ 257.648624][ T27] audit: type=1800 audit(1753388882.802:25): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.617" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 257.716267][ T7949] loop3: detected capacity change from 0 to 32768 [ 257.755208][ T27] audit: type=1800 audit(1753388882.842:26): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.617" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 257.999601][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 258.029934][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 258.050383][ T8] usb 3-1: USB disconnect, device number 47 [ 258.113689][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 259.530188][ T5796] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 260.388272][ T7993] loop3: detected capacity change from 0 to 64 [ 260.399850][ T5796] usb 3-1: Using ep0 maxpacket: 8 [ 260.420425][ T5796] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 260.430346][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.447236][ T7993] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 260.456580][ T7982] loop0: detected capacity change from 0 to 32768 [ 260.475819][ T5796] usb 3-1: config 0 descriptor?? [ 260.536923][ T7982] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 260.612866][ T7999] loop3: detected capacity change from 0 to 512 [ 260.630592][ T27] audit: type=1800 audit(1753388885.782:27): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.630" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 260.669666][ T27] audit: type=1800 audit(1753388885.792:28): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.630" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 260.689023][ T7999] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 260.709203][ T7999] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.636: bg 0: block 384: padding at end of block bitmap is not set [ 260.739863][ T7999] EXT4-fs (loop3): Remounting filesystem read-only [ 260.749113][ T7999] EXT4-fs (loop3): 1 truncate cleaned up [ 260.755403][ T5796] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 260.766328][ T7999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.077164][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 261.204469][ T5796] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 261.256075][ T5796] asix: probe of 3-1:0.0 failed with error -32 [ 261.347698][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.653661][ T8020] loop1: detected capacity change from 0 to 64 [ 261.683893][ T8020] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 262.213735][ T8039] nbd1: detected capacity change from 0 to 10 [ 262.241668][ T24] block nbd1: Send control failed (result -89) [ 262.248313][ T24] block nbd1: Request send failed, requeueing [ 262.254711][ T24] block nbd1: Dead connection, failed to find a fallback [ 262.261950][ T5109] block nbd1: Receive control failed (result -32) [ 262.270183][ T24] block nbd1: shutting down sockets [ 262.275471][ T24] blk_print_req_error: 26 callbacks suppressed [ 262.275485][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.292716][ T24] buffer_io_error: 25 callbacks suppressed [ 262.292731][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.306948][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.316127][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.324116][ T24] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.333239][ T24] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.342063][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.351434][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.359432][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.368991][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.369273][ T8025] loop0: detected capacity change from 0 to 32768 [ 262.384168][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.393512][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.401944][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.411178][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.419116][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.428336][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.436757][ T5903] ldm_validate_partition_table(): Disk read failed. [ 262.447927][ T1203] usb 3-1: USB disconnect, device number 48 [ 262.454643][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.463821][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.471883][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.480806][ T8025] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 262.481006][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.505895][ T5903] Dev nbd1: unable to read RDB block 0 [ 262.547194][ T5903] nbd1: unable to read partition table [ 262.564500][ T27] audit: type=1800 audit(1753388887.712:29): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.646" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 262.578971][ T5903] nbd1: partition table beyond EOD, truncated [ 262.598869][ T5903] ldm_validate_partition_table(): Disk read failed. [ 262.607889][ T5903] Dev nbd1: unable to read RDB block 0 [ 262.619010][ T5903] nbd1: unable to read partition table [ 262.638573][ T5903] nbd1: partition table beyond EOD, truncated [ 262.655052][ T27] audit: type=1800 audit(1753388887.772:30): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.646" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 262.771479][ T8051] loop1: detected capacity change from 0 to 64 [ 262.804911][ T8051] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 262.814360][ T8053] loop2: detected capacity change from 0 to 64 [ 262.830886][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 262.840864][ T8053] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 262.947293][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 263.039827][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 263.066754][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.089220][ T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.113824][ T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.134336][ T8] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 263.184909][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.219925][ T8] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 263.235506][ T8059] can0: slcan on ttyS3. [ 263.267167][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.313830][ T8] usb 4-1: config 0 descriptor?? [ 263.329043][ T8062] capability: warning: `syz.0.658' uses 32-bit capabilities (legacy support in use) [ 263.382412][ T8059] can0 (unregistered): slcan off ttyS3. [ 263.396495][ T8067] loop1: detected capacity change from 0 to 64 [ 263.414443][ T8067] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 263.439850][ T8065] can0: slcan on ttyS3. [ 263.580036][ T8058] can0 (unregistered): slcan off ttyS3. [ 263.619953][ T5882] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 263.687730][ T8074] nbd1: detected capacity change from 0 to 10 [ 263.712413][ T96] block nbd1: Send control failed (result -89) [ 263.719456][ T96] block nbd1: Request send failed, requeueing [ 263.725982][ T5109] block nbd1: Receive control failed (result -32) [ 263.726075][ T96] block nbd1: Dead connection, failed to find a fallback [ 263.739787][ T96] block nbd1: shutting down sockets [ 263.748201][ T5903] ldm_validate_partition_table(): Disk read failed. [ 263.763119][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 263.769154][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 263.776614][ T5903] Dev nbd1: unable to read RDB block 0 [ 263.782611][ T5903] nbd1: unable to read partition table [ 263.788371][ T5903] nbd1: partition table beyond EOD, truncated [ 263.797794][ T8] usb 4-1: USB disconnect, device number 37 [ 263.819938][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 263.833025][ T5903] ldm_validate_partition_table(): Disk read failed. [ 263.866021][ T5882] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 263.866627][ T5903] Dev nbd1: unable to read RDB block 0 [ 263.879844][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.898100][ T5903] nbd1: unable to read partition table [ 263.903927][ T5882] usb 3-1: config 0 descriptor?? [ 263.913119][ T5903] nbd1: partition table beyond EOD, truncated [ 264.221122][ T5882] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 264.653453][ T5882] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 264.753578][ T5882] asix: probe of 3-1:0.0 failed with error -32 [ 264.828840][ T8090] loop1: detected capacity change from 0 to 64 [ 264.854955][ T8090] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 265.382753][ T8119] nbd0: detected capacity change from 0 to 10 [ 265.392712][ T96] block nbd0: Send control failed (result -89) [ 265.398996][ T96] block nbd0: Request send failed, requeueing [ 265.405380][ T5109] block nbd0: Receive control failed (result -32) [ 265.405418][ T96] block nbd0: Dead connection, failed to find a fallback [ 265.412407][ T5796] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 265.419323][ T96] block nbd0: shutting down sockets [ 265.452933][ T5903] ldm_validate_partition_table(): Disk read failed. [ 265.465585][ T5903] Dev nbd0: unable to read RDB block 0 [ 265.474324][ T5903] nbd0: unable to read partition table [ 265.483000][ T5903] nbd0: partition table beyond EOD, truncated [ 265.494625][ T5903] ldm_validate_partition_table(): Disk read failed. [ 265.505200][ T5903] Dev nbd0: unable to read RDB block 0 [ 265.511832][ T5903] nbd0: unable to read partition table [ 265.517568][ T5903] nbd0: partition table beyond EOD, truncated [ 265.663590][ T5796] usb 4-1: Using ep0 maxpacket: 16 [ 265.677247][ T5796] usb 4-1: config 0 has no interfaces? [ 265.688383][ T5796] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.698803][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.708572][ T5796] usb 4-1: Product: syz [ 265.714834][ T5796] usb 4-1: Manufacturer: syz [ 265.720404][ T5796] usb 4-1: SerialNumber: syz [ 265.727657][ T5796] usb 4-1: config 0 descriptor?? [ 266.586532][ T5796] usb 4-1: USB disconnect, device number 38 [ 266.714971][ T5874] usb 3-1: USB disconnect, device number 49 [ 266.871704][ T8145] loop1: detected capacity change from 0 to 256 [ 266.879157][ T8145] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.978803][ T8145] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.326949][ T8156] nbd0: detected capacity change from 0 to 10 [ 267.381907][ T96] block nbd0: Send control failed (result -89) [ 267.388181][ T96] block nbd0: Request send failed, requeueing [ 267.394869][ T5109] block nbd0: Receive control failed (result -32) [ 267.394924][ T96] block nbd0: Dead connection, failed to find a fallback [ 267.409359][ T96] block nbd0: shutting down sockets [ 267.414973][ T96] blk_print_req_error: 96 callbacks suppressed [ 267.414985][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.430693][ T96] buffer_io_error: 95 callbacks suppressed [ 267.430706][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 267.444886][ T6503] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.454060][ T6503] Buffer I/O error on dev nbd0, logical block 0, async page read [ 267.462081][ T6503] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.475702][ T6503] Buffer I/O error on dev nbd0, logical block 0, async page read [ 267.490050][ T6503] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.499129][ T6503] Buffer I/O error on dev nbd0, logical block 0, async page read [ 267.508078][ T6503] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.517490][ T6503] Buffer I/O error on dev nbd0, logical block 0, async page read [ 267.525535][ T6503] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.534675][ T6503] Buffer I/O error on dev nbd0, logical block 0, async page read [ 267.542717][ T6503] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.551863][ T6503] Buffer I/O error on dev nbd0, logical block 0, async page read [ 267.571115][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.583255][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 267.591910][ T5785] ldm_validate_partition_table(): Disk read failed. [ 267.636603][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.646112][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 267.670204][ T6503] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.679281][ T6503] Buffer I/O error on dev nbd0, logical block 0, async page read [ 267.687863][ T5785] Dev nbd0: unable to read RDB block 0 [ 267.717404][ T5785] nbd0: unable to read partition table [ 267.748055][ T5785] nbd0: partition table beyond EOD, truncated [ 267.840213][ T5785] ldm_validate_partition_table(): Disk read failed. [ 267.866600][ T5785] Dev nbd0: unable to read RDB block 0 [ 267.890344][ T5785] nbd0: unable to read partition table [ 267.897134][ T5785] nbd0: partition table beyond EOD, truncated [ 267.999952][ T5796] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 268.189921][ T5796] usb 4-1: Using ep0 maxpacket: 8 [ 268.211459][ T5796] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 268.245228][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.292486][ T5796] usb 4-1: config 0 descriptor?? [ 268.519692][ T5796] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 268.685988][ T8189] loop1: detected capacity change from 0 to 64 [ 268.731576][ T8189] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 268.889969][ T968] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 268.933259][ T5796] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 268.949970][ T5796] asix: probe of 4-1:0.0 failed with error -61 [ 269.079875][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 269.088064][ T968] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 269.101518][ T968] usb 1-1: config 179 has no interface number 0 [ 269.108044][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 269.121683][ T8194] nbd2: detected capacity change from 0 to 10 [ 269.126199][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 269.139414][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 269.159310][ T6503] block nbd2: Send control failed (result -89) [ 269.165692][ T6503] block nbd2: Request send failed, requeueing [ 269.172154][ T5109] block nbd2: Receive control failed (result -32) [ 269.172208][ T6503] block nbd2: Dead connection, failed to find a fallback [ 269.172223][ T6503] block nbd2: shutting down sockets [ 269.192274][ T5903] ldm_validate_partition_table(): Disk read failed. [ 269.199892][ T5903] Dev nbd2: unable to read RDB block 0 [ 269.205768][ T5903] nbd2: unable to read partition table [ 269.211400][ T968] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 269.220013][ T5903] nbd2: partition table beyond EOD, [ 269.222832][ T968] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 269.223866][ T5903] truncated [ 269.228146][ T968] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 269.228168][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.261405][ T8187] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 269.294560][ T5903] ldm_validate_partition_table(): Disk read failed. [ 269.310672][ T5903] Dev nbd2: unable to read RDB block 0 [ 269.330305][ T5903] nbd2: unable to read partition table [ 269.336106][ T5903] nbd2: partition table beyond EOD, truncated [ 269.556562][ T968] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input11 [ 269.738021][ T5796] usb 1-1: USB disconnect, device number 38 [ 269.738106][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 269.753194][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 269.760199][ T5796] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 269.843135][ T5874] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 269.875132][ T8191] loop1: detected capacity change from 0 to 65536 [ 269.885270][ T8191] XFS: noikeep mount option is deprecated. [ 269.904049][ T8191] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 269.931437][ T8191] XFS (loop1): Ending clean mount [ 269.948476][ T8191] XFS (loop1): Quotacheck needed: Please wait. [ 269.978458][ T8191] XFS (loop1): Quotacheck: Done. [ 270.024146][ T5791] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 270.037318][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.059094][ T5874] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 270.075787][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.095030][ T5874] usb 3-1: config 0 descriptor?? [ 270.119211][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 270.356103][ T8212] tipc: Started in network mode [ 270.361327][ T8212] tipc: Node identity ae4f4336be04, cluster identity 4711 [ 270.371002][ T8212] tipc: Enabled bearer , priority 0 [ 270.378984][ T8212] syzkaller0: entered promiscuous mode [ 270.388879][ T8212] syzkaller0: entered allmulticast mode [ 270.504151][ T8211] tipc: Resetting bearer [ 270.523811][ T5874] pwc: recv_control_msg error -32 req 02 val 2b00 [ 270.543131][ T5874] pwc: recv_control_msg error -32 req 02 val 2700 [ 270.560192][ T5874] pwc: recv_control_msg error -32 req 02 val 2c00 [ 270.578200][ T8211] tipc: Disabling bearer [ 270.585394][ T5874] pwc: recv_control_msg error -32 req 04 val 1000 [ 270.601295][ T5874] pwc: recv_control_msg error -32 req 04 val 1300 [ 270.620808][ T5874] pwc: recv_control_msg error -32 req 04 val 1400 [ 270.628297][ T5874] pwc: recv_control_msg error -32 req 02 val 2000 [ 270.718044][ T5796] usb 4-1: USB disconnect, device number 39 [ 270.843510][ T5874] pwc: recv_control_msg error -71 req 04 val 1500 [ 270.856203][ T5874] pwc: recv_control_msg error -71 req 02 val 2500 [ 270.869277][ T5874] pwc: recv_control_msg error -71 req 02 val 2400 [ 270.882854][ T5874] pwc: recv_control_msg error -71 req 02 val 2600 [ 270.900314][ T5874] pwc: recv_control_msg error -71 req 02 val 2900 [ 270.915480][ T5874] pwc: recv_control_msg error -71 req 02 val 2800 [ 270.923476][ T5874] pwc: recv_control_msg error -71 req 04 val 1100 [ 270.930751][ T8222] loop3: detected capacity change from 0 to 64 [ 270.935072][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 270.946110][ T8222] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 270.953667][ T5874] pwc: Registered as video103. [ 270.972551][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 271.025390][ T5874] usb 3-1: USB disconnect, device number 50 [ 271.031548][ T6349] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 271.929846][ T6349] usb 1-1: Using ep0 maxpacket: 16 [ 271.938421][ T6349] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 271.980743][ T6349] usb 1-1: config 0 has no interface number 0 [ 271.986891][ T6349] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 272.019836][ T6349] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 272.051055][ T8232] loop2: detected capacity change from 0 to 128 [ 272.061965][ T8232] FAT-fs (loop2): Directory bread(block 162) failed [ 272.068625][ T8232] FAT-fs (loop2): Directory bread(block 163) failed [ 272.077816][ T8233] loop1: detected capacity change from 0 to 64 [ 272.078359][ T6349] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 272.093799][ T8232] FAT-fs (loop2): Directory bread(block 164) failed [ 272.093861][ T8232] FAT-fs (loop2): Directory bread(block 165) failed [ 272.093885][ T8232] FAT-fs (loop2): Directory bread(block 166) failed [ 272.093907][ T8232] FAT-fs (loop2): Directory bread(block 167) failed [ 272.129971][ T8233] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 272.130206][ T8232] FAT-fs (loop2): Directory bread(block 168) failed [ 272.158370][ T6349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.183927][ T6349] usb 1-1: Product: syz [ 272.188538][ T6349] usb 1-1: Manufacturer: syz [ 272.193311][ T6349] usb 1-1: SerialNumber: syz [ 272.199067][ T8232] FAT-fs (loop2): Directory bread(block 169) failed [ 272.215246][ T6349] usb 1-1: config 0 descriptor?? [ 272.233990][ T8218] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.260009][ T8218] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.279643][ T8232] FAT-fs (loop2): Directory bread(block 162) failed [ 272.343378][ T8232] FAT-fs (loop2): Directory bread(block 163) failed [ 272.381211][ T8232] bio_check_eod: 8 callbacks suppressed [ 272.381226][ T8232] syz.2.711: attempt to access beyond end of device [ 272.381226][ T8232] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 272.423016][ T8232] syz.2.711: attempt to access beyond end of device [ 272.423016][ T8232] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 272.493769][ T8218] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.515503][ T8218] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.780021][ T5904] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 272.935668][ T6349] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 272.946324][ T6349] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 272.959115][ T6349] asix: probe of 1-1:0.251 failed with error -61 [ 273.730084][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 273.739586][ T5904] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 273.747283][ T8262] loop1: detected capacity change from 0 to 64 [ 273.751862][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.763110][ T8262] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 273.767269][ T5904] usb 4-1: config 0 descriptor?? [ 273.851026][ T8266] loop1: detected capacity change from 0 to 64 [ 273.865697][ T8266] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 274.002282][ T5904] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 274.135147][ T8276] bridge_slave_0: left allmulticast mode [ 274.141123][ T8276] bridge_slave_0: left promiscuous mode [ 274.148314][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.198878][ T8] usb 1-1: USB disconnect, device number 39 [ 274.266306][ T8276] bridge_slave_1: left allmulticast mode [ 274.300636][ T8276] bridge_slave_1: left promiscuous mode [ 274.308114][ T8281] loop0: detected capacity change from 0 to 64 [ 274.317243][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.333762][ T8281] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 274.371783][ T8276] bond0: (slave bond_slave_0): Releasing backup interface [ 274.409893][ T5904] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 274.430239][ T5904] asix: probe of 4-1:0.0 failed with error -61 [ 274.437731][ T8276] bond0: (slave bond_slave_1): Releasing backup interface [ 274.525808][ T8276] team0: Port device team_slave_0 removed [ 274.541900][ T8276] team0: Port device team_slave_1 removed [ 274.548272][ T8276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.562933][ T8276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.573615][ T8276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.582274][ T8276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.833651][ T8279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.728'. [ 275.595203][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 275.604406][ T8301] program syz.2.735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.725860][ T8308] loop2: detected capacity change from 0 to 64 [ 275.746830][ T8308] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 275.847254][ T5904] usb 4-1: USB disconnect, device number 40 [ 275.930500][ T968] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 275.962519][ T8312] loop3: detected capacity change from 0 to 256 [ 275.981146][ T8312] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 276.015532][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 276.039225][ T8312] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 276.149911][ T968] usb 2-1: Using ep0 maxpacket: 16 [ 276.157182][ T968] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 276.174125][ T968] usb 2-1: config 0 has no interface number 0 [ 276.186611][ T968] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 276.198297][ T968] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 276.232556][ T968] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 276.250646][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.260276][ T968] usb 2-1: Product: syz [ 276.264477][ T968] usb 2-1: Manufacturer: syz [ 276.269084][ T968] usb 2-1: SerialNumber: syz [ 276.326477][ T968] usb 2-1: config 0 descriptor?? [ 276.347771][ T8304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 276.370023][ T8304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 276.378842][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'. [ 276.591199][ T8304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 276.598546][ T8304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 276.803247][ T5904] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 276.869953][ T5882] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 276.989934][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 276.996697][ T5904] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 277.006202][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.016311][ T968] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 277.017037][ T5904] usb 4-1: config 0 descriptor?? [ 277.042035][ T968] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 277.056178][ T968] asix: probe of 2-1:0.251 failed with error -61 [ 277.066396][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.083415][ T5882] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 277.092650][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.103233][ T5882] usb 3-1: config 0 descriptor?? [ 277.111825][ T5882] pwc: Askey VC010 type 2 USB webcam detected. [ 277.255136][ T5904] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 277.516377][ T5882] pwc: recv_control_msg error -32 req 02 val 2b00 [ 277.529551][ T5882] pwc: recv_control_msg error -32 req 02 val 2700 [ 277.539710][ T5882] pwc: recv_control_msg error -32 req 02 val 2c00 [ 277.552902][ T5882] pwc: recv_control_msg error -32 req 04 val 1000 [ 277.561112][ T5882] pwc: recv_control_msg error -32 req 04 val 1300 [ 277.568854][ T5882] pwc: recv_control_msg error -32 req 04 val 1400 [ 277.583447][ T5882] pwc: recv_control_msg error -32 req 02 val 2000 [ 277.660877][ T5904] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 277.679938][ T5904] asix: probe of 4-1:0.0 failed with error -61 [ 277.794255][ T5882] pwc: recv_control_msg error -71 req 04 val 1500 [ 277.804639][ T5882] pwc: recv_control_msg error -71 req 02 val 2500 [ 277.806486][ T8341] loop0: detected capacity change from 0 to 64 [ 277.820890][ T8341] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 277.826669][ T5882] pwc: recv_control_msg error -71 req 02 val 2400 [ 277.851651][ T5882] pwc: recv_control_msg error -71 req 02 val 2600 [ 277.870279][ T5882] pwc: recv_control_msg error -71 req 02 val 2900 [ 277.890724][ T5882] pwc: recv_control_msg error -71 req 02 val 2800 [ 277.908511][ T5882] pwc: recv_control_msg error -71 req 04 val 1100 [ 277.917093][ T5882] pwc: recv_control_msg error -71 req 04 val 1200 [ 277.927495][ T5882] pwc: Registered as video103. [ 277.938462][ T5882] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 277.981441][ T5882] usb 3-1: USB disconnect, device number 51 [ 278.169988][ T5904] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 278.362106][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.374548][ T8349] loop2: detected capacity change from 0 to 256 [ 278.377543][ T5904] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 278.390258][ T5904] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 278.399340][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.419084][ T5904] usb 1-1: config 0 descriptor?? [ 278.428990][ T8349] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 278.444902][ T8349] FAT-fs (loop2): Filesystem has been set read-only [ 278.583008][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 278.677359][ T5882] usb 2-1: USB disconnect, device number 47 [ 278.778526][ T8361] loop2: detected capacity change from 0 to 1024 [ 278.787648][ T8361] hfsplus: invalid gid specified [ 278.793562][ T8361] hfsplus: unable to parse mount options [ 278.872504][ T8364] netlink: 'syz.2.762': attribute type 32 has an invalid length. [ 278.880898][ T8364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.762'. [ 279.142248][ T5882] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 279.260053][ T5904] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 279.330074][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 279.338219][ T5882] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 279.347421][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.355578][ T5882] usb 2-1: Product: syz [ 279.359883][ T5882] usb 2-1: Manufacturer: syz [ 279.364491][ T5882] usb 2-1: SerialNumber: syz [ 279.370869][ T5882] r8152-cfgselector 2-1: config 0 descriptor?? [ 279.459909][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 279.467478][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 279.476756][ T5904] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 279.490379][ T5904] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 279.499588][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.507683][ T5904] usb 3-1: Product: syz [ 279.511898][ T5904] usb 3-1: Manufacturer: syz [ 279.516492][ T5904] usb 3-1: SerialNumber: syz [ 279.556163][ T5874] usb 4-1: USB disconnect, device number 41 [ 279.734163][ T5904] usb 3-1: Limiting number of CPorts to U8_MAX [ 279.744224][ T5904] usb 3-1: Not enough endpoints found in device, aborting! [ 279.807198][ T5882] r8152-cfgselector 2-1: Unknown version 0x0000 [ 279.819064][ T5882] r8152-cfgselector 2-1: USB disconnect, device number 48 [ 279.946014][ T5874] usb 3-1: USB disconnect, device number 52 [ 280.639942][ T6349] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 280.839864][ T6349] usb 4-1: Using ep0 maxpacket: 16 [ 280.848114][ T6349] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 280.857612][ T6349] usb 4-1: config 0 has no interface number 0 [ 280.864059][ T6349] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 280.875376][ T6349] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 280.888059][ T6349] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 280.919804][ T6349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.927840][ T6349] usb 4-1: Product: syz [ 280.941913][ T6349] usb 4-1: Manufacturer: syz [ 280.946560][ T6349] usb 4-1: SerialNumber: syz [ 280.962807][ T6349] usb 4-1: config 0 descriptor?? [ 280.968497][ T8386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.992635][ T8386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.995234][ T8408] Lens A: ================= START STATUS ================= [ 281.005123][ T5874] usb 1-1: USB disconnect, device number 40 [ 281.082736][ T8412] netlink: 'syz.0.780': attribute type 10 has an invalid length. [ 281.090701][ T8408] Lens A: Focus, Absolute: 0 [ 281.095500][ T8408] Lens A: ================== END STATUS ================== [ 281.103493][ T8412] syz_tun: entered promiscuous mode [ 281.108749][ T8412] syz_tun: left allmulticast mode [ 281.244293][ T8386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.265235][ T8386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.708458][ T6349] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 281.719442][ T6349] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 281.757748][ T6349] asix: probe of 4-1:0.251 failed with error -61 [ 283.430360][ T968] usb 4-1: USB disconnect, device number 42 [ 283.841983][ T8445] loop2: detected capacity change from 0 to 8 [ 283.851696][ T8445] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 283.892876][ T5903] udevd[5903]: incorrect cramfs checksum on /dev/loop2 [ 283.918685][ T8445] cramfs: Error -3 while decompressing! [ 283.942863][ T8445] cramfs: ffffffff96fdc308(26)->ffff8880749bf000(4096) [ 283.947714][ T5903] udevd[5903]: incorrect cramfs checksum on /dev/loop2 [ 283.964735][ T8445] cramfs: Error -3 while decompressing! [ 283.988708][ T8445] cramfs: ffffffff96fdc322(26)->ffff888057379000(4096) [ 284.010392][ T8445] cramfs: Error -3 while decompressing! [ 284.029176][ T8445] cramfs: ffffffff96fdc33c(16)->ffff88807460a000(4096) [ 284.039359][ T8445] cramfs: Error -3 while decompressing! [ 284.049986][ T968] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 284.052778][ T8445] cramfs: ffffffff96fdc308(26)->ffff8880749bf000(4096) [ 284.070908][ T27] audit: type=1800 audit(1753388909.232:31): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.790" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 284.252115][ T968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.262924][ T968] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 284.272030][ T968] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 284.285343][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.311411][ T968] usb 1-1: config 0 descriptor?? [ 284.522824][ T8455] loop1: detected capacity change from 0 to 32768 [ 284.555687][ T8455] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 284.611116][ T8455] XFS (loop1): Ending clean mount [ 284.627664][ T8455] XFS (loop1): Quotacheck needed: Please wait. [ 284.690276][ T5874] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 284.698527][ T8455] XFS (loop1): Quotacheck: Done. [ 284.826845][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 284.847018][ T8474] loop3: detected capacity change from 0 to 64 [ 284.859459][ T8474] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 284.900322][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 284.920972][ T5874] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 284.929212][ T5874] usb 3-1: config 0 has no interface number 0 [ 284.936373][ T5874] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 284.946773][ T5874] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 284.964969][ T5874] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 284.981070][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.989190][ T5874] usb 3-1: Product: syz [ 284.994162][ T5874] usb 3-1: Manufacturer: syz [ 284.998784][ T5874] usb 3-1: SerialNumber: syz [ 285.015945][ T5874] usb 3-1: config 0 descriptor?? [ 285.030543][ T8453] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 285.047873][ T8453] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 285.263932][ T8453] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 285.271601][ T8453] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 285.469723][ T8492] loop3: detected capacity change from 0 to 64 [ 285.481042][ T8492] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 285.593714][ T8494] netlink: 'syz.3.808': attribute type 4 has an invalid length. [ 285.707934][ T8498] loop3: detected capacity change from 0 to 256 [ 285.899969][ T5874] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 287.364397][ T968] usb 1-1: USB disconnect, device number 41 [ 288.176677][ T5874] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 288.375646][ T8507] program syz.0.810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.732252][ T5874] asix: probe of 3-1:0.251 failed with error -32 [ 288.743468][ T5874] usb 3-1: USB disconnect, device number 53 [ 288.883487][ T8515] Lens A: ================= START STATUS ================= [ 288.891168][ T8515] Lens A: Focus, Absolute: 0 [ 288.895973][ T8515] Lens A: ================== END STATUS ================== [ 289.062555][ T8519] loop0: detected capacity change from 0 to 1024 [ 289.301040][ T8528] loop2: detected capacity change from 0 to 64 [ 289.344895][ T8528] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 289.347774][ T127] hfsplus: b-tree write err: -5, ino 4 [ 289.525751][ T8534] program syz.2.820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.606884][ T8536] tipc: Started in network mode [ 289.616318][ T8536] tipc: Node identity 262e5ba9a511, cluster identity 4711 [ 289.626464][ T8536] tipc: Enabled bearer , priority 0 [ 289.638062][ T8536] syzkaller0: entered promiscuous mode [ 289.644053][ T8536] syzkaller0: entered allmulticast mode [ 289.690015][ T5874] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 289.756155][ T8535] tipc: Resetting bearer [ 289.762156][ T6349] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 289.802229][ T8535] tipc: Disabling bearer [ 289.882084][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.896360][ T5874] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.906583][ T5874] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 289.917929][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.934043][ T5874] usb 4-1: config 0 descriptor?? [ 289.950006][ T6349] usb 1-1: Using ep0 maxpacket: 16 [ 289.966092][ T6349] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 289.992439][ T6349] usb 1-1: config 0 has no interface number 0 [ 290.022625][ T6349] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 290.036295][ T6349] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 290.054581][ T6349] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 290.073887][ T6349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.084362][ T6349] usb 1-1: Product: syz [ 290.089628][ T6349] usb 1-1: Manufacturer: syz [ 290.104092][ T6349] usb 1-1: SerialNumber: syz [ 290.116047][ T6349] usb 1-1: config 0 descriptor?? [ 290.123450][ T8532] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 290.133684][ T8532] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 290.174162][ T8540] loop2: detected capacity change from 0 to 256 [ 292.603166][ T6349] asix: probe of 1-1:0.251 failed with error -71 [ 292.632188][ T6349] usb 1-1: USB disconnect, device number 42 [ 292.638217][ T5882] usb 4-1: USB disconnect, device number 43 [ 292.971792][ T8556] loop3: detected capacity change from 0 to 64 [ 293.008728][ T8556] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 293.127489][ T8558] program syz.3.830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.240516][ T6349] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 293.443193][ T6349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.457786][ T6349] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 293.479865][ T6349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.495433][ T8566] loop2: detected capacity change from 0 to 4096 [ 293.525694][ T6349] usb 1-1: config 0 descriptor?? [ 293.544599][ T6349] pwc: Askey VC010 type 2 USB webcam detected. [ 293.600434][ T8572] loop1: detected capacity change from 0 to 64 [ 293.886553][ T8576] program syz.1.839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.960975][ T6349] pwc: recv_control_msg error -32 req 02 val 2b00 [ 293.993413][ T6349] pwc: recv_control_msg error -32 req 02 val 2700 [ 294.018595][ T8582] loop1: detected capacity change from 0 to 256 [ 296.422828][ T8587] Lens A: ================= START STATUS ================= [ 296.430610][ T8587] Lens A: Focus, Absolute: 0 [ 296.435541][ T8587] Lens A: ================== END STATUS ================== [ 296.473334][ T6349] pwc: recv_control_msg error -71 req 04 val 1000 [ 296.494295][ T6349] pwc: recv_control_msg error -71 req 04 val 1300 [ 296.510942][ T6349] pwc: recv_control_msg error -71 req 04 val 1400 [ 296.528196][ T6349] pwc: recv_control_msg error -71 req 02 val 2000 [ 296.539621][ T6349] pwc: recv_control_msg error -71 req 02 val 2100 [ 296.573979][ T6349] pwc: recv_control_msg error -71 req 04 val 1500 [ 296.598348][ T6349] pwc: recv_control_msg error -71 req 02 val 2500 [ 296.627301][ T6349] pwc: recv_control_msg error -71 req 02 val 2400 [ 296.650401][ T6349] pwc: recv_control_msg error -71 req 02 val 2600 [ 296.665085][ T6349] pwc: recv_control_msg error -71 req 02 val 2900 [ 296.709831][ T6349] pwc: recv_control_msg error -71 req 02 val 2800 [ 296.733188][ T6349] pwc: recv_control_msg error -71 req 04 val 1100 [ 296.742038][ T6349] pwc: recv_control_msg error -71 req 04 val 1200 [ 296.755423][ T6349] pwc: Registered as video103. [ 296.781729][ T6349] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 296.824281][ T6349] usb 1-1: USB disconnect, device number 43 [ 297.018332][ T27] audit: type=1326 audit(1753388922.172:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8598 comm="syz.0.847" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f455c78e9a9 code=0x0 [ 297.216342][ T8601] loop3: detected capacity change from 0 to 32768 [ 297.244651][ T8601] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.848 (8601) [ 297.295581][ T8601] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.306278][ T8601] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 297.315126][ T8601] BTRFS info (device loop3): metadata ratio 2 [ 297.321294][ T8601] BTRFS info (device loop3): allowing degraded mounts [ 297.328063][ T8601] BTRFS info (device loop3): force zlib compression, level 3 [ 297.335501][ T8601] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 297.345439][ T8601] BTRFS info (device loop3): use zstd compression, level 3 [ 297.352698][ T8601] BTRFS info (device loop3): force clearing of disk cache [ 297.359917][ T8601] BTRFS info (device loop3): max_inline at 0 [ 297.365885][ T8601] BTRFS info (device loop3): using free space tree [ 297.443286][ T8601] BTRFS info (device loop3): enabling ssd optimizations [ 297.453350][ T8601] BTRFS info (device loop3): rebuilding free space tree [ 297.674293][ T8621] program syz.1.850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.831889][ T5790] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.360250][ T5882] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 299.040172][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 299.064813][ T5882] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 299.086091][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.103912][ T5882] usb 1-1: Product: syz [ 299.118319][ T5882] usb 1-1: Manufacturer: syz [ 299.135255][ T5882] usb 1-1: SerialNumber: syz [ 299.150757][ T5882] r8152-cfgselector 1-1: config 0 descriptor?? [ 299.167172][ T8645] loop1: detected capacity change from 0 to 64 [ 299.177409][ T8645] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 299.321227][ T8647] loop1: detected capacity change from 0 to 8 [ 299.334417][ T8647] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 299.346710][ T5785] udevd[5785]: incorrect cramfs checksum on /dev/loop1 [ 299.366909][ T5882] r8152-cfgselector 1-1: Unknown version 0x0000 [ 299.376973][ T8649] program syz.2.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.380101][ T5882] r8152-cfgselector 1-1: bad CDC descriptors [ 299.399998][ T8] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 299.423292][ T5882] r8152-cfgselector 1-1: Unknown version 0x0000 [ 299.440932][ T5882] r8152-cfgselector 1-1: USB disconnect, device number 44 [ 299.621693][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.636340][ T8655] Lens A: ================= START STATUS ================= [ 299.644015][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 299.653294][ T8655] Lens A: Focus, Absolute: 0 [ 299.659273][ T8655] Lens A: ================== END STATUS ================== [ 299.670841][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 299.680186][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.694189][ T8] usb 4-1: config 0 descriptor?? [ 300.068523][ T8658] loop0: detected capacity change from 0 to 4096 [ 300.546179][ T8670] loop2: detected capacity change from 0 to 64 [ 300.559433][ T8670] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 301.051457][ T8683] loop2: detected capacity change from 0 to 4096 [ 301.697967][ T8700] loop0: detected capacity change from 0 to 64 [ 301.710254][ T8700] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 302.000684][ T8710] loop0: detected capacity change from 0 to 4096 [ 302.196034][ T8] usb 4-1: USB disconnect, device number 44 [ 302.705361][ T8731] loop1: detected capacity change from 0 to 64 [ 302.718140][ T8731] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 302.843954][ T8737] loop1: detected capacity change from 0 to 64 [ 302.855764][ T8737] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 302.856132][ T8733] loop2: detected capacity change from 0 to 4096 [ 302.979874][ T6349] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 303.214104][ T6349] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.234712][ T6349] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 303.261003][ T6349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.281969][ T6349] usb 4-1: config 0 descriptor?? [ 303.292277][ T6349] pwc: Askey VC010 type 2 USB webcam detected. [ 303.315477][ T8751] Lens A: ================= START STATUS ================= [ 303.325711][ T8751] Lens A: Focus, Absolute: 0 [ 303.336495][ T8751] Lens A: ================== END STATUS ================== [ 303.405107][ T8753] netlink: 2980 bytes leftover after parsing attributes in process `syz.1.902'. [ 303.684153][ T8759] loop1: detected capacity change from 0 to 64 [ 303.695007][ T6349] pwc: recv_control_msg error -32 req 02 val 2b00 [ 303.703069][ T8759] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 303.724633][ T6349] pwc: recv_control_msg error -32 req 02 val 2700 [ 303.745391][ T6349] pwc: recv_control_msg error -32 req 02 val 2c00 [ 303.757289][ T6349] pwc: recv_control_msg error -32 req 04 val 1000 [ 303.767999][ T6349] pwc: recv_control_msg error -32 req 04 val 1300 [ 303.793255][ T6349] pwc: recv_control_msg error -32 req 04 val 1400 [ 303.805249][ T6349] pwc: recv_control_msg error -32 req 02 val 2000 [ 303.843140][ T6349] pwc: recv_control_msg error -32 req 02 val 2100 [ 303.877554][ T6349] pwc: recv_control_msg error -32 req 04 val 1500 [ 303.893897][ T6349] pwc: recv_control_msg error -32 req 02 val 2500 [ 303.904267][ T6349] pwc: recv_control_msg error -32 req 02 val 2400 [ 303.910839][ T8761] loop1: detected capacity change from 0 to 64 [ 303.918977][ T8761] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 303.919613][ T6349] pwc: recv_control_msg error -32 req 02 val 2600 [ 303.958294][ T6349] pwc: recv_control_msg error -32 req 02 val 2900 [ 303.974728][ T6349] pwc: recv_control_msg error -32 req 02 val 2800 [ 303.995905][ T6349] pwc: recv_control_msg error -71 req 04 val 1100 [ 304.026023][ T6349] pwc: recv_control_msg error -71 req 04 val 1200 [ 304.034926][ T6349] pwc: Registered as video103. [ 304.051216][ T6349] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 304.076880][ T6349] usb 4-1: USB disconnect, device number 45 [ 304.746080][ T8779] loop1: detected capacity change from 0 to 64 [ 304.764941][ T8779] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 304.799021][ T8782] loop3: detected capacity change from 0 to 64 [ 304.820206][ T8783] loop0: detected capacity change from 0 to 256 [ 304.865569][ T8783] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.893633][ T8782] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 305.041275][ T8783] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.165297][ T8787] tipc: Started in network mode [ 305.219843][ T8787] tipc: Node identity 1ec8e3d6f404, cluster identity 4711 [ 305.300118][ T8787] tipc: Enabled bearer , priority 0 [ 305.322741][ T8790] syzkaller0: entered promiscuous mode [ 305.332424][ T8790] syzkaller0: entered allmulticast mode [ 305.383415][ T8785] tipc: Resetting bearer [ 305.428264][ T8785] tipc: Disabling bearer [ 305.640095][ T1203] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 305.664308][ T8805] loop3: detected capacity change from 0 to 64 [ 305.677416][ T8805] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 305.756202][ T8807] loop3: detected capacity change from 0 to 64 [ 305.767624][ T8807] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 305.831246][ T1203] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.851485][ T1203] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 305.867059][ T1203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.879411][ T1203] usb 1-1: config 0 descriptor?? [ 305.890563][ T1203] pwc: Askey VC010 type 2 USB webcam detected. [ 306.301456][ T1203] pwc: recv_control_msg error -32 req 02 val 2b00 [ 306.395574][ T1203] pwc: recv_control_msg error -32 req 02 val 2700 [ 306.410342][ T1203] pwc: recv_control_msg error -32 req 02 val 2c00 [ 306.422098][ T1203] pwc: recv_control_msg error -32 req 04 val 1000 [ 306.434957][ T8822] tipc: Started in network mode [ 306.443044][ T1203] pwc: recv_control_msg error -32 req 04 val 1300 [ 306.457441][ T8825] loop2: detected capacity change from 0 to 64 [ 306.459884][ T1203] pwc: recv_control_msg error -32 req 04 val 1400 [ 306.470435][ T8822] tipc: Node identity febe71190c32, cluster identity 4711 [ 306.475862][ T8825] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 306.478549][ T8822] tipc: Enabled bearer , priority 0 [ 306.500537][ T1203] pwc: recv_control_msg error -32 req 02 val 2000 [ 306.509904][ T1203] pwc: recv_control_msg error -32 req 02 val 2100 [ 306.524477][ T1203] pwc: recv_control_msg error -32 req 04 val 1500 [ 306.541126][ T8826] syzkaller0: entered promiscuous mode [ 306.546632][ T8826] syzkaller0: entered allmulticast mode [ 306.556918][ T1203] pwc: recv_control_msg error -32 req 02 val 2500 [ 306.577442][ T1203] pwc: recv_control_msg error -32 req 02 val 2400 [ 306.601216][ T1203] pwc: recv_control_msg error -32 req 02 val 2600 [ 306.611260][ T1203] pwc: recv_control_msg error -32 req 02 val 2900 [ 306.617957][ T8820] tipc: Resetting bearer [ 306.625275][ T1203] pwc: recv_control_msg error -32 req 02 val 2800 [ 306.638105][ T1203] pwc: recv_control_msg error -71 req 04 val 1100 [ 306.647364][ T1203] pwc: recv_control_msg error -71 req 04 val 1200 [ 306.668695][ T1203] pwc: Registered as video103. [ 306.676765][ T1203] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 306.728250][ T8820] tipc: Disabling bearer [ 306.736840][ T1203] usb 1-1: USB disconnect, device number 45 [ 307.267660][ T8839] loop3: detected capacity change from 0 to 32768 [ 307.332233][ T8839] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 307.377584][ T8852] Lens A: ================= START STATUS ================= [ 307.390619][ T8857] loop0: detected capacity change from 0 to 64 [ 307.399509][ T8852] Lens A: Focus, Absolute: 0 [ 307.411157][ T8839] XFS (loop3): Ending clean mount [ 307.416954][ T8852] Lens A: ================== END STATUS ================== [ 307.432211][ T8839] XFS (loop3): Quotacheck needed: Please wait. [ 307.441785][ T8857] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 307.593718][ T8839] XFS (loop3): Quotacheck: Done. [ 307.704141][ T8860] loop0: detected capacity change from 0 to 256 [ 307.715722][ T8860] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 307.778649][ T8864] tipc: Enabled bearer , priority 0 [ 307.793953][ T8864] syzkaller0: entered promiscuous mode [ 307.813481][ T8864] syzkaller0: entered allmulticast mode [ 307.845573][ T8863] tipc: Resetting bearer [ 307.857764][ T8860] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 307.885822][ T5790] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 307.921879][ T8863] tipc: Disabling bearer [ 308.517346][ T8876] loop2: detected capacity change from 0 to 32768 [ 308.610708][ T8876] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 308.632206][ T27] audit: type=1800 audit(1753388933.792:33): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.954" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 308.680058][ T8] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 308.770080][ T8881] loop3: detected capacity change from 0 to 1024 [ 308.795669][ T8881] EXT4-fs: inline encryption not supported [ 308.839126][ T8881] EXT4-fs: Ignoring removed i_version option [ 308.897201][ T8881] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 308.897793][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.923223][ T8] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 308.935580][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.949833][ T8] usb 1-1: config 0 descriptor?? [ 308.957192][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 309.022928][ T8876] (syz.2.954,8876,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 309.067445][ T8881] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.955: lblock 2 mapped to illegal pblock 2 (length 1) [ 309.146399][ T8881] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 309.185451][ T8881] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.955: lblock 0 mapped to illegal pblock 48 (length 1) [ 309.256198][ T8881] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 309.267977][ T8881] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.955: Failed to acquire dquot type 0 [ 309.280478][ T8881] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 309.307856][ T8881] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.955: mark_inode_dirty error [ 309.321293][ T8881] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 309.333390][ T8881] EXT4-fs (loop3): 1 orphan inode deleted [ 309.340880][ T8881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.353573][ T42] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 309.359634][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 309.388212][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 309.400248][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 309.412210][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 309.424179][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 309.424533][ T42] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 309.454182][ T8881] EXT4-fs (loop3): shut down requested (2) [ 309.472059][ T42] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 0 [ 309.475811][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 309.505410][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 309.526212][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 309.536939][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 309.544916][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 309.557425][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.568096][ T8] pwc: recv_control_msg error -32 req 02 val 2400 [ 309.577918][ T8] pwc: recv_control_msg error -32 req 02 val 2600 [ 309.585208][ T8] pwc: recv_control_msg error -32 req 02 val 2900 [ 309.616835][ T8] pwc: recv_control_msg error -32 req 02 val 2800 [ 309.624581][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 309.640650][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 309.650125][ T8] pwc: Registered as video103. [ 309.671559][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 309.731526][ T8] usb 1-1: USB disconnect, device number 46 [ 309.850612][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 310.017516][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 310.156625][ T8891] tipc: Enabled bearer , priority 0 [ 310.214153][ T8894] syzkaller0: entered promiscuous mode [ 310.236162][ T8894] syzkaller0: entered allmulticast mode [ 310.252164][ T8893] loop0: detected capacity change from 0 to 4096 [ 310.301797][ T8890] tipc: Resetting bearer [ 310.399541][ T8895] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.421325][ T8890] tipc: Disabling bearer [ 310.554238][ T27] audit: type=1804 audit(1753388935.712:34): pid=8898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.959" name="/newroot/229/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 310.725607][ T8904] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.963'. [ 310.945692][ T8913] program syz.0.964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.069886][ T8] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 311.138169][ T8919] Lens A: ================= START STATUS ================= [ 311.145754][ T8919] Lens A: Focus, Absolute: 0 [ 311.150774][ T8919] Lens A: ================== END STATUS ================== [ 311.169992][ T5882] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 311.249864][ T968] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 311.272424][ T8] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 311.282207][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.294839][ T8] usb 2-1: config 0 descriptor?? [ 311.369939][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 311.383963][ T5882] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 311.392786][ T5882] usb 4-1: config 0 has no interface number 0 [ 311.399064][ T5882] usb 4-1: config 0 interface 182 has no altsetting 0 [ 311.409454][ T5882] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=2a.74 [ 311.418952][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.427117][ T5882] usb 4-1: Product: syz [ 311.432042][ T968] usb 3-1: Using ep0 maxpacket: 16 [ 311.446399][ T5882] usb 4-1: Manufacturer: syz [ 311.452265][ T968] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 311.465604][ T5882] usb 4-1: SerialNumber: syz [ 311.470369][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.480603][ T5882] usb 4-1: config 0 descriptor?? [ 311.488447][ T968] usb 3-1: Product: syz [ 311.496063][ T5882] gspca_main: spca500-2.14.0 probing 046d:0900 [ 311.509043][ T8] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 311.517947][ T968] usb 3-1: Manufacturer: syz [ 311.527749][ T968] usb 3-1: SerialNumber: syz [ 311.532615][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 311.548064][ T968] r8152-cfgselector 3-1: config 0 descriptor?? [ 311.706006][ T5882] gspca_spca500: reg write: error -71 [ 311.711602][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 311.728034][ T5882] gspca_spca500: reg write: error -71 [ 311.740963][ T5882] gspca_spca500: reg write: error -71 [ 311.777233][ T5882] gspca_spca500: reg write: error -71 [ 311.783224][ T8] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 311.799562][ T5882] gspca_spca500: reg write: error -71 [ 311.805163][ T968] r8152-cfgselector 3-1: Unknown version 0x0000 [ 311.811676][ T8] [drm] Initialized udl on minor 2 [ 311.816930][ T968] r8152-cfgselector 3-1: bad CDC descriptors [ 311.823074][ T5882] gspca_spca500: reg write: error -71 [ 311.833208][ T5882] gspca_spca500: reg write: error -71 [ 311.838705][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 311.849576][ T968] r8152-cfgselector 3-1: Unknown version 0x0000 [ 311.855971][ T5882] gspca_spca500: reg write: error -71 [ 311.866688][ T5882] gspca_spca500: reg write: error -71 [ 311.874617][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 311.883644][ T968] r8152-cfgselector 3-1: USB disconnect, device number 54 [ 311.891517][ T5882] gspca_spca500: reg write: error -71 [ 311.908118][ T5837] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 311.918535][ T5882] gspca_spca500: reg write: error -71 [ 311.924178][ T8] usb 2-1: USB disconnect, device number 49 [ 311.930783][ T5882] gspca_spca500: reg write: error -71 [ 311.948468][ T5837] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 311.957395][ T5882] gspca_spca500: reg write: error -71 [ 311.965952][ T5882] gspca_spca500: reg write: error -71 [ 312.001304][ T5882] usb 4-1: USB disconnect, device number 46 [ 312.459625][ T8926] tipc: Enabled bearer , priority 0 [ 312.488890][ T8926] syzkaller0: entered promiscuous mode [ 312.514360][ T8926] syzkaller0: entered allmulticast mode [ 312.558853][ T8932] loop1: detected capacity change from 0 to 64 [ 312.582590][ T8932] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 312.594832][ T8925] tipc: Resetting bearer [ 312.643936][ T8925] tipc: Disabling bearer [ 312.795266][ T8938] netlink: 128 bytes leftover after parsing attributes in process `syz.1.975'. [ 312.883304][ T8941] loop3: detected capacity change from 0 to 64 [ 312.975862][ T8943] loop1: detected capacity change from 0 to 512 [ 313.029421][ T8943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 313.047967][ T8943] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.178560][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 313.439867][ T968] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 313.521160][ T8] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 313.571089][ T5882] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 313.620782][ T968] usb 4-1: Using ep0 maxpacket: 16 [ 313.630136][ T968] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 313.639200][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.647291][ T968] usb 4-1: Product: syz [ 313.651525][ T968] usb 4-1: Manufacturer: syz [ 313.656150][ T968] usb 4-1: SerialNumber: syz [ 313.662589][ T968] r8152-cfgselector 4-1: config 0 descriptor?? [ 313.724182][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 313.733742][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.742096][ T8] usb 2-1: Product: syz [ 313.746353][ T8] usb 2-1: Manufacturer: syz [ 313.754311][ T8] usb 2-1: SerialNumber: syz [ 313.767150][ T8] usb 2-1: config 0 descriptor?? [ 313.772296][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 313.787610][ T5882] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 313.799102][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 313.808401][ T5882] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 313.816765][ T5882] usb 3-1: Product: syz [ 313.820992][ T5882] usb 3-1: Manufacturer: syz [ 313.825644][ T5882] usb 3-1: SerialNumber: syz [ 313.836665][ T5882] usb 3-1: config 0 descriptor?? [ 313.847030][ T5882] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 313.875774][ T968] r8152-cfgselector 4-1: Unknown version 0x0000 [ 313.882397][ T968] r8152-cfgselector 4-1: bad CDC descriptors [ 313.892351][ T968] r8152-cfgselector 4-1: Unknown version 0x0000 [ 313.901767][ T968] r8152-cfgselector 4-1: USB disconnect, device number 47 [ 313.984376][ T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 314.445724][ T8958] loop3: detected capacity change from 0 to 64 [ 314.458286][ T8958] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 314.541115][ T8960] loop3: detected capacity change from 0 to 256 [ 314.548950][ T8960] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.570547][ T8960] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.672986][ T8962] tipc: Enabled bearer , priority 0 [ 314.681047][ T8962] syzkaller0: entered promiscuous mode [ 314.686547][ T8962] syzkaller0: entered allmulticast mode [ 314.813108][ T8961] tipc: Resetting bearer [ 314.849564][ T8961] tipc: Disabling bearer [ 314.897834][ T8964] netlink: 128 bytes leftover after parsing attributes in process `syz.0.987'. [ 315.024934][ T8969] loop3: detected capacity change from 0 to 64 [ 315.225735][ T8972] loop0: detected capacity change from 0 to 64 [ 315.238990][ T8972] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 315.435988][ T8] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 315.453042][ T8979] loop0: detected capacity change from 0 to 64 [ 315.457915][ T8] usb 2-1: USB disconnect, device number 50 [ 315.470535][ T8979] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 315.577841][ T8981] loop3: detected capacity change from 0 to 256 [ 315.587432][ T8981] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 315.620215][ T8981] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 315.673271][ T5882] gspca_zc3xx: reg_w_i err -71 [ 315.773752][ T8985] tipc: Enabled bearer , priority 0 [ 316.007874][ T8987] loop1: detected capacity change from 0 to 64 [ 316.164457][ T8991] loop1: detected capacity change from 0 to 64 [ 316.175704][ T8991] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 316.319937][ T5882] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 316.326332][ T5882] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 316.340114][ T5882] usb 3-1: USB disconnect, device number 55 [ 316.604678][ T8985] tipc: Disabling bearer [ 316.674675][ T9001] loop2: detected capacity change from 0 to 4096 [ 316.722632][ T9003] loop3: detected capacity change from 0 to 256 [ 316.733863][ T9003] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.790104][ T9003] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.418580][ T9023] tipc: Enabled bearer , priority 0 [ 317.513466][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.522802][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.701651][ T9027] loop1: detected capacity change from 0 to 4096 [ 317.912467][ T9031] program syz.1.1017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.106220][ T968] kernel write not supported for file /700/attr/sockcreate (pid: 968 comm: kworker/0:2) [ 318.236315][ T9023] tipc: Disabling bearer [ 318.379608][ T9046] loop0: detected capacity change from 0 to 4096 [ 318.564105][ T9052] program syz.0.1027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.741128][ T9058] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 318.748051][ T9058] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 318.761957][ T9058] vhci_hcd vhci_hcd.0: Device attached [ 318.798966][ T9059] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 318.815188][ T11] vhci_hcd: stop threads [ 318.837162][ T11] vhci_hcd: release socket [ 318.848692][ T11] vhci_hcd: disconnect device [ 318.958266][ T9066] tipc: Enabled bearer , priority 0 [ 319.337542][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1037'. [ 319.351838][ T9074] macvtap0: refused to change device tx_queue_len [ 319.770462][ T9066] tipc: Disabling bearer [ 320.008113][ T9095] kvm: user requested TSC rate below hardware speed [ 320.092391][ T9093] loop1: detected capacity change from 0 to 32768 [ 320.108149][ T9093] (syz.1.1046,9093,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xc046627b. Applying ECC. [ 320.123542][ T9093] (syz.1.1046,9093,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 320.140428][ T9093] (syz.1.1046,9093,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 320.158020][ T9093] (syz.1.1046,9093,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xe8887627. Applying ECC. [ 320.171959][ T9093] (syz.1.1046,9093,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0xbcd8cf6a [ 320.184594][ T9093] (syz.1.1046,9093,0):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 288 [ 320.194529][ T9093] (syz.1.1046,9093,0):ocfs2_read_virt_blocks:1019 ERROR: status = -5 [ 320.203666][ T9093] (syz.1.1046,9093,0):ocfs2_read_dir_block:511 ERROR: status = -5 [ 320.211645][ T9093] (syz.1.1046,9093,0):ocfs2_find_entry_el:728 ERROR: reading directory 18, offset 0 [ 320.221325][ T9093] (syz.1.1046,9093,0):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 320.230537][ T9093] (syz.1.1046,9093,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 320.230566][ T9093] (syz.1.1046,9093,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 320.252473][ T9093] (syz.1.1046,9093,0):ocfs2_initialize_super:2256 ERROR: status = -22 [ 320.260883][ T9093] (syz.1.1046,9093,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 320.689940][ T8] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 320.858537][ T9114] Lens A: ================= START STATUS ================= [ 320.866363][ T9114] Lens A: Focus, Absolute: 0 [ 320.870093][ T6349] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 320.876355][ T9114] Lens A: ================== END STATUS ================== [ 320.899919][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 320.912757][ T8] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 320.932319][ T8] usb 4-1: config 0 has no interface number 0 [ 320.938431][ T8] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 320.955463][ T8] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 320.967898][ T8] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 320.977347][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.985536][ T8] usb 4-1: Product: syz [ 320.989917][ T8] usb 4-1: Manufacturer: syz [ 320.997739][ T8] usb 4-1: SerialNumber: syz [ 321.009700][ T8] usb 4-1: config 0 descriptor?? [ 321.022064][ T9101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 321.039482][ T9101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 321.060030][ T6349] usb 1-1: device descriptor read/64, error -71 [ 321.300262][ T9101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 321.314409][ T9101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 321.336397][ T9119] loop2: detected capacity change from 0 to 128 [ 321.350164][ T6349] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 321.519355][ T6349] usb 1-1: device descriptor read/64, error -71 [ 321.690163][ T6349] usb usb1-port1: attempt power cycle [ 321.888018][ T9128] loop2: detected capacity change from 0 to 64 [ 321.896493][ T9128] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 321.946982][ T8] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 322.002557][ T8] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 322.043562][ T8] asix: probe of 4-1:0.251 failed with error -61 [ 322.139839][ T6349] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 322.190648][ T6349] usb 1-1: device descriptor read/8, error -71 [ 322.469881][ T6349] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 322.500365][ T6349] usb 1-1: device descriptor read/8, error -71 [ 322.621243][ T6349] usb usb1-port1: unable to enumerate USB device [ 323.427620][ T6349] usb 4-1: USB disconnect, device number 48 [ 323.646036][ T9149] loop3: detected capacity change from 0 to 64 [ 323.772903][ T9153] loop0: detected capacity change from 0 to 64 [ 323.790836][ T9153] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 323.857497][ T9152] loop3: detected capacity change from 0 to 128 [ 324.349868][ T5904] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 324.388627][ T9161] loop2: detected capacity change from 0 to 32768 [ 324.409384][ T9161] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 324.452254][ T9161] [ 324.454625][ T9161] ====================================================== [ 324.461647][ T9161] WARNING: possible circular locking dependency detected [ 324.468683][ T9161] 6.6.100-syzkaller #0 Not tainted [ 324.473801][ T9161] ------------------------------------------------------ [ 324.480826][ T9161] syz.2.1075/9161 is trying to acquire lock: [ 324.486811][ T9161] ffff88805de88660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 324.498410][ T9161] [ 324.498410][ T9161] but task is already holding lock: [ 324.505789][ T9161] ffff88805de886f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 324.516443][ T9161] [ 324.516443][ T9161] which lock already depends on the new lock. [ 324.516443][ T9161] [ 324.526857][ T9161] [ 324.526857][ T9161] the existing dependency chain (in reverse order) is: [ 324.535880][ T9161] [ 324.535880][ T9161] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 324.543770][ T9161] down_read+0x46/0x2e0 [ 324.548472][ T9161] ocfs2_init_acl+0x2fa/0x720 [ 324.553693][ T9161] ocfs2_mknod+0x12e5/0x20f0 [ 324.558818][ T9161] ocfs2_create+0x196/0x410 [ 324.563850][ T9161] path_openat+0x1277/0x3190 [ 324.568957][ T9161] do_filp_open+0x1c5/0x3d0 [ 324.573968][ T9161] do_sys_openat2+0x12c/0x1c0 [ 324.579159][ T9161] __x64_sys_openat+0x139/0x160 [ 324.584525][ T9161] do_syscall_64+0x55/0xb0 [ 324.589450][ T9161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.595851][ T9161] [ 324.595851][ T9161] -> #3 (jbd2_handle){++++}-{0:0}: [ 324.603134][ T9161] start_this_handle+0x1e9d/0x20c0 [ 324.608767][ T9161] jbd2__journal_start+0x2bb/0x5b0 [ 324.610280][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 324.614377][ T9161] jbd2_journal_start+0x2a/0x40 [ 324.614398][ T9161] ocfs2_start_trans+0x376/0x6c0 [ 324.614425][ T9161] ocfs2_mknod+0xe47/0x20f0 [ 324.622730][ T5904] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 324.624866][ T9161] ocfs2_create+0x196/0x410 [ 324.624889][ T9161] path_openat+0x1277/0x3190 [ 324.630446][ T5904] usb 4-1: config 0 has no interface number 0 [ 324.635324][ T9161] do_filp_open+0x1c5/0x3d0 [ 324.635349][ T9161] do_sys_openat2+0x12c/0x1c0 [ 324.635366][ T9161] __x64_sys_openat+0x139/0x160 [ 324.635381][ T9161] do_syscall_64+0x55/0xb0 [ 324.644593][ T5904] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 324.648522][ T9161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.648549][ T9161] [ 324.648549][ T9161] -> #2 ( [ 324.653745][ T5904] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 324.659680][ T9161] &journal->j_trans_barrier){.+.+}-{3:3}: [ 324.659701][ T9161] down_read+0x46/0x2e0 [ 324.659722][ T9161] ocfs2_start_trans+0x36a/0x6c0 [ 324.659742][ T9161] ocfs2_mknod+0xe47/0x20f0 [ 324.659755][ T9161] ocfs2_create+0x196/0x410 [ 324.659767][ T9161] path_openat+0x1277/0x3190 [ 324.659785][ T9161] do_filp_open+0x1c5/0x3d0 [ 324.659802][ T9161] do_sys_openat2+0x12c/0x1c0 [ 324.659817][ T9161] __x64_sys_openat+0x139/0x160 [ 324.659832][ T9161] do_syscall_64+0x55/0xb0 [ 324.659848][ T9161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.659869][ T9161] [ 324.659869][ T9161] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 324.659897][ T9161] lock_release+0x32b/0x8b0 [ 324.659913][ T9161] up_write+0x2d/0x410 [ 324.659925][ T9161] ocfs2_free_alloc_context+0x97/0x1a0 [ 324.659944][ T9161] ocfs2_write_begin_nolock+0x4105/0x4190 [ 324.659961][ T9161] ocfs2_dio_wr_get_block+0xb71/0x17a0 [ 324.659977][ T9161] __blockdev_direct_IO+0x1679/0x3420 [ 324.659991][ T9161] ocfs2_direct_IO+0x240/0x2b0 [ 324.669132][ T5904] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 324.670173][ T9161] generic_file_direct_write+0x1d4/0x3e0 [ 324.670194][ T9161] __generic_file_write_iter+0x11b/0x230 [ 324.670209][ T9161] ocfs2_file_write_iter+0x1582/0x1d00 [ 324.670226][ T9161] do_iter_write+0x79a/0xc70 [ 324.675648][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.680497][ T9161] iter_file_splice_write+0x66f/0xc50 [ 324.680523][ T9161] direct_splice_actor+0xe8/0x130 [ 324.680541][ T9161] splice_direct_to_actor+0x2f0/0x870 [ 324.680558][ T9161] do_splice_direct+0x1b7/0x2c0 [ 324.680575][ T9161] do_sendfile+0x5dc/0xf70 [ 324.690619][ T5904] usb 4-1: Product: syz [ 324.696817][ T9161] __se_sys_sendfile64+0x13f/0x190 [ 324.696839][ T9161] do_syscall_64+0x55/0xb0 [ 324.702093][ T5904] usb 4-1: Manufacturer: syz [ 324.711868][ T9161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.711893][ T9161] [ 324.711893][ T9161] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 324.711917][ T9161] __lock_acquire+0x2ddb/0x7c80 [ 324.711933][ T9161] lock_acquire+0x197/0x410 [ 324.711946][ T9161] down_write+0x97/0x1f0 [ 324.711962][ T9161] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 324.711979][ T9161] ocfs2_xattr_set+0x596/0x11f0 [ 324.711995][ T9161] ocfs2_set_acl+0x4e1/0x590 [ 324.712014][ T9161] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 324.712033][ T9161] vfs_remove_acl+0x4e3/0x740 [ 324.712053][ T9161] ovl_workdir_create+0x409/0x760 [ 324.712068][ T9161] ovl_get_workdir+0x300/0x1740 [ 324.712082][ T9161] ovl_fill_super+0x1345/0x3560 [ 324.712095][ T9161] get_tree_nodev+0xb5/0x140 [ 324.712108][ T9161] vfs_get_tree+0x8c/0x280 [ 324.712121][ T9161] do_new_mount+0x24b/0xa40 [ 324.712132][ T9161] __se_sys_mount+0x2da/0x3c0 [ 324.712143][ T9161] do_syscall_64+0x55/0xb0 [ 324.712159][ T9161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.727235][ T5904] usb 4-1: SerialNumber: syz [ 324.727956][ T9161] [ 324.727956][ T9161] other info that might help us debug this: [ 324.727956][ T9161] [ 324.727964][ T9161] Chain exists of: [ 324.727964][ T9161] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 324.727964][ T9161] [ 324.736144][ T5904] usb 4-1: config 0 descriptor?? [ 324.737982][ T9161] Possible unsafe locking scenario: [ 324.737982][ T9161] [ 324.737987][ T9161] CPU0 CPU1 [ 324.737992][ T9161] ---- ---- [ 324.737997][ T9161] lock(&oi->ip_xattr_sem); [ 324.747552][ T9159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.748086][ T9161] lock(jbd2_handle [ 324.753724][ T9159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.758604][ T9161] ); [ 324.758610][ T9161] lock( [ 324.810027][ T23] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 324.810906][ T9161] &oi->ip_xattr_sem); [ 324.810918][ T9161] lock(&ocfs2_file_ip_alloc_sem_key); [ 324.810932][ T9161] [ 324.810932][ T9161] *** DEADLOCK *** [ 324.810932][ T9161] [ 324.810937][ T9161] 5 locks held by syz.2.1075/9161: [ 324.810946][ T9161] #0: [ 324.971908][ T9159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.972194][ T9161] ffff88802376e0e0 [ 324.977735][ T9159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 324.982636][ T9161] (&type->s_umount_key [ 325.010013][ T23] usb 1-1: device descriptor read/64, error -71 [ 325.013702][ T9161] #73/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x920 [ 325.013742][ T9161] #1: ffff8880257c2418 (sb_writers#15){.+.+}-{0:0} [ 325.110053][ T5109] Bluetooth: hci3: command 0x0406 tx timeout [ 325.111300][ T9161] , at: mnt_want_write+0x41/0x90 [ 325.111329][ T9161] #2: ffff88805a103498 (&sb->s_type->i_mutex_key#21/1){+.+.}-{3:3}, at: ovl_workdir_create+0x150/0x760 [ 325.190843][ T9161] #3: ffff88805de889d8 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_remove_acl+0xf4/0x740 [ 325.201408][ T9161] #4: ffff88805de886f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 325.212459][ T9161] [ 325.212459][ T9161] stack backtrace: [ 325.218348][ T9161] CPU: 0 PID: 9161 Comm: syz.2.1075 Not tainted 6.6.100-syzkaller #0 [ 325.226422][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.236489][ T9161] Call Trace: [ 325.239764][ T9161] [ 325.242703][ T9161] dump_stack_lvl+0x16c/0x230 [ 325.247403][ T9161] ? load_image+0x3b0/0x3b0 [ 325.251921][ T9161] ? show_regs_print_info+0x20/0x20 [ 325.257130][ T9161] ? print_circular_bug+0x12b/0x1a0 [ 325.262346][ T9161] check_noncircular+0x2bd/0x3c0 [ 325.267291][ T9161] ? hlock_conflict+0x5d/0x1f0 [ 325.272060][ T9161] ? print_deadlock_bug+0x5d0/0x5d0 [ 325.277254][ T9161] ? lockdep_lock+0xe0/0x220 [ 325.281842][ T9161] ? _find_first_zero_bit+0xd3/0x100 [ 325.287119][ T9161] __lock_acquire+0x2ddb/0x7c80 [ 325.291988][ T9161] ? verify_lock_unused+0x140/0x140 [ 325.297202][ T9161] ? verify_lock_unused+0x140/0x140 [ 325.302401][ T9161] lock_acquire+0x197/0x410 [ 325.306895][ T9161] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 325.313227][ T9161] ? __might_sleep+0xe0/0xe0 [ 325.317824][ T9161] ? read_lock_is_recursive+0x20/0x20 [ 325.323220][ T9161] down_write+0x97/0x1f0 [ 325.327460][ T9161] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 325.333625][ T9161] ? down_read_killable+0x340/0x340 [ 325.338835][ T9161] ? ocfs2_xattr_set+0x56f/0x11f0 [ 325.343870][ T9161] ? __lock_acquire+0x7c80/0x7c80 [ 325.348900][ T9161] ? ocfs2_xattr_block_find+0x154/0x4c0 [ 325.354447][ T9161] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 325.359998][ T23] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 325.360430][ T9161] ? ocfs2_remove_refcount_tree+0xd50/0xd50 [ 325.373852][ T9161] ? up_write+0x1c3/0x410 [ 325.378199][ T9161] ocfs2_xattr_set+0x596/0x11f0 [ 325.383066][ T9161] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 325.388784][ T9161] ? add_lock_to_list+0x191/0x280 [ 325.393809][ T9161] ? __lock_acquire+0x2b6b/0x7c80 [ 325.398834][ T9161] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 325.404551][ T9161] ? do_raw_spin_lock+0x121/0x2c0 [ 325.409573][ T9161] ? __rwlock_init+0x150/0x150 [ 325.414350][ T9161] ? do_raw_spin_unlock+0x121/0x230 [ 325.419556][ T9161] ? _raw_spin_unlock+0x28/0x40 [ 325.424408][ T9161] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 325.430137][ T9161] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 325.435678][ T9161] ocfs2_set_acl+0x4e1/0x590 [ 325.440261][ T9161] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 325.445205][ T9161] ? read_lock_is_recursive+0x20/0x20 [ 325.450578][ T9161] ? ocfs2_xattr_get+0x220/0x220 [ 325.455514][ T9161] ? evm_inode_set_acl+0xbb/0x410 [ 325.460543][ T9161] ? down_write+0x162/0x1f0 [ 325.465060][ T9161] ? down_read_killable+0x340/0x340 [ 325.470267][ T9161] ? evm_revalidate_status+0x4f/0xb0 [ 325.475564][ T9161] ? make_vfsuid+0x51/0xb0 [ 325.479979][ T9161] ? inode_owner_or_capable+0xf0/0x1c0 [ 325.485426][ T9161] vfs_remove_acl+0x4e3/0x740 [ 325.490198][ T9161] ovl_workdir_create+0x409/0x760 [ 325.495218][ T9161] ? ovl_statfs+0x2f0/0x2f0 [ 325.499757][ T9161] ? rcu_read_lock_any_held+0xb4/0x120 [ 325.505223][ T9161] ? __mnt_want_write+0x223/0x2a0 [ 325.510254][ T9161] ovl_get_workdir+0x300/0x1740 [ 325.515124][ T9161] ? ovl_fill_super+0x3560/0x3560 [ 325.520153][ T9161] ? ovl_inuse_trylock+0xbd/0xd0 [ 325.525079][ T9161] ? __lock_acquire+0x7c80/0x7c80 [ 325.530108][ T9161] ? __rwlock_init+0x150/0x150 [ 325.534879][ T9161] ? clone_mnt+0xa10/0xc60 [ 325.539304][ T9161] ? do_raw_spin_unlock+0x121/0x230 [ 325.544500][ T9161] ? _raw_spin_unlock+0x28/0x40 [ 325.549405][ T9161] ? ovl_inuse_trylock+0xbd/0xd0 [ 325.554369][ T9161] ovl_fill_super+0x1345/0x3560 [ 325.559218][ T9161] ? ida_alloc_range+0x79e/0x830 [ 325.560026][ T23] usb 1-1: device descriptor read/64, error -71 [ 325.564152][ T9161] ? virtio_fs_zero_page_range+0x140/0x140 [ 325.564176][ T9161] ? sget_fc+0x7f0/0x8d0 [ 325.564197][ T9161] ? __lock_acquire+0x7c80/0x7c80 [ 325.564213][ T9161] ? down_write+0x162/0x1f0 [ 325.564230][ T9161] ? down_read_killable+0x340/0x340 [ 325.564255][ T9161] ? sget_fc+0x7f0/0x8d0 [ 325.564274][ T9161] ? kill_litter_super+0xb0/0xb0 [ 325.564289][ T9161] ? virtio_fs_zero_page_range+0x140/0x140 [ 325.564306][ T9161] get_tree_nodev+0xb5/0x140 [ 325.564322][ T9161] vfs_get_tree+0x8c/0x280 [ 325.564338][ T9161] do_new_mount+0x24b/0xa40 [ 325.564358][ T9161] __se_sys_mount+0x2da/0x3c0 [ 325.564374][ T9161] ? __x64_sys_mount+0xc0/0xc0 [ 325.564391][ T9161] ? lockdep_hardirqs_on+0x98/0x150 [ 325.564408][ T9161] ? __x64_sys_mount+0x20/0xc0 [ 325.564424][ T9161] do_syscall_64+0x55/0xb0 [ 325.564441][ T9161] ? clear_bhb_loop+0x40/0x90 [ 325.564456][ T9161] ? clear_bhb_loop+0x40/0x90 [ 325.564472][ T9161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.564494][ T9161] RIP: 0033:0x7f8fd4b8e9a9 [ 325.564522][ T9161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.564536][ T9161] RSP: 002b:00007f8fd5ac2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 325.564555][ T9161] RAX: ffffffffffffffda RBX: 00007f8fd4db5fa0 RCX: 00007f8fd4b8e9a9 [ 325.564567][ T9161] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 325.564579][ T9161] RBP: 00007f8fd4c10d69 R08: 0000200000000280 R09: 0000000000000000 [ 325.564590][ T9161] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 325.564600][ T9161] R13: 0000000000000000 R14: 00007f8fd4db5fa0 R15: 00007fffcc6ab378 [ 325.564618][ T9161] [ 325.564656][ C0] sched: RT throttling activated [ 325.566697][ T9161] overlayfs: upper fs does not support tmpfile. [ 325.600424][ T5904] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 325.605627][ T9161] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 325.615376][ T5904] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 325.630849][ T9161] overlayfs: upper fs missing required features. [ 325.643837][ T5904] asix: probe of 4-1:0.251 failed with error -61 [ 325.793067][ T23] usb usb1-port1: attempt power cycle [ 325.811320][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 326.069818][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 326.069939][ T5109] Bluetooth: hci4: command 0x1003 tx timeout [ 326.199884][ T23] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 326.231323][ T23] usb 1-1: device descriptor read/8, error -71 [ 326.499822][ T23] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 326.530254][ T23] usb 1-1: device descriptor read/8, error -71 [ 326.651027][ T23] usb usb1-port1: unable to enumerate USB device [ 327.092316][ T8] usb 4-1: USB disconnect, device number 49