last executing test programs: 4.189359675s ago: executing program 0 (id=11009): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 4.128971776s ago: executing program 0 (id=11010): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x8, 0x2, 0x5}) 4.025484578s ago: executing program 0 (id=11012): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 4.003937968s ago: executing program 0 (id=11013): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) 3.422063697s ago: executing program 0 (id=11025): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f00000002c0)='./file1\x00', 0x808050, &(0x7f00000000c0)={[{@pquota}, {@usrquota}, {@noalign}, {@lazytime}, {@ikeep}, {@noalign}, {@noalign}]}, 0x1, 0x9925, &(0x7f000001ca40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) 1.839176091s ago: executing program 2 (id=11043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x1, 0x9, 0x3}, 0x14}}, 0x0) 1.716509603s ago: executing program 2 (id=11047): mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 1.594408125s ago: executing program 2 (id=11049): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0x39, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x40}}, 0x0) 1.539111806s ago: executing program 4 (id=11050): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) lseek(r0, 0x20000000000f7, 0x1) 1.383806748s ago: executing program 2 (id=11054): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000240)=0x2) 1.383413958s ago: executing program 4 (id=11055): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='trusted.']) 1.181508841s ago: executing program 2 (id=11056): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@nouser_xattr}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) 1.181437032s ago: executing program 3 (id=11057): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x110, 0xc, 'p'}, {0x10}], 0x28}, 0x0) 1.048081863s ago: executing program 4 (id=11058): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000c14010000000000000000fd07003d"], 0x20}}, 0x0) 975.257714ms ago: executing program 3 (id=11059): r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x20802, 0x0) write$damon_contexts(r0, 0x0, 0x0) 974.687675ms ago: executing program 4 (id=11060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x9a0, 0x4020}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffffffd, 0x3bd, 0x4, 0x88a8}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 921.633955ms ago: executing program 1 (id=11061): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0405602, &(0x7f00000001c0)=@fd={0x6b8, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x82, ';\'S;'}}) 906.605806ms ago: executing program 3 (id=11062): capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x29) 868.369897ms ago: executing program 4 (id=11063): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x181000, 0x0) read$FUSE(r0, &(0x7f0000000c00)={0x2020}, 0x2020) 813.839337ms ago: executing program 3 (id=11064): r0 = socket(0x28, 0x5, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 758.892138ms ago: executing program 1 (id=11065): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x6b, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 731.624788ms ago: executing program 4 (id=11066): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 721.238958ms ago: executing program 3 (id=11067): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f01b, 0x1}) 629.62014ms ago: executing program 1 (id=11068): r0 = socket$packet(0x11, 0x2, 0x300) sendto(r0, 0x0, 0x0, 0x4000011, &(0x7f0000000300)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80) 579.025161ms ago: executing program 3 (id=11069): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 536.812791ms ago: executing program 1 (id=11070): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_vs\x00') lseek(r0, 0x8f, 0x0) 384.694764ms ago: executing program 1 (id=11071): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4c) 273.235035ms ago: executing program 1 (id=11072): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f0000000800)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@minixdf}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$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") fcntl$setstatus(r0, 0x4, 0x4400) 221.712276ms ago: executing program 0 (id=11073): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x80) 0s ago: executing program 2 (id=11074): r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x4) kernel console output (not intermixed with test programs): t 0xE has an invalid bInterval 0, changing to 7 [ 912.016809][T18110] usb 3-1: config 4 has an invalid interface number: 92 but max is 0 [ 912.023309][ T4307] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 912.044897][T18110] usb 3-1: config 4 has no interface number 0 [ 912.062444][T18110] usb 3-1: config 4 interface 92 has no altsetting 0 [ 912.152678][T25520] loop4: detected capacity change from 0 to 32768 [ 912.226835][T25520] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.9207 (25520) [ 912.250346][ T4307] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 912.259479][ T4307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.269733][ T4307] usb 2-1: Product: syz [ 912.274104][ T4307] usb 2-1: Manufacturer: syz [ 912.279528][ T4307] usb 2-1: SerialNumber: syz [ 912.282023][T18110] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 1.4f [ 912.295916][ T4307] usb 2-1: config 0 descriptor?? [ 912.324003][T18110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.332998][T18110] usb 3-1: Product: syz [ 912.343811][T18110] usb 3-1: Manufacturer: syz [ 912.347509][ T4307] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 912.349396][T18110] usb 3-1: SerialNumber: syz [ 912.373420][T25520] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 912.391571][T25520] BTRFS info (device loop4): force zlib compression, level 3 [ 912.405586][T25520] BTRFS info (device loop4): force clearing of disk cache [ 912.416035][T25520] BTRFS info (device loop4): setting nodatasum [ 912.426505][T25520] BTRFS info (device loop4): doing ref verification [ 912.436365][T25520] BTRFS info (device loop4): allowing degraded mounts [ 912.447284][T25520] BTRFS info (device loop4): enabling disk space caching [ 912.457454][T25520] BTRFS info (device loop4): disk space caching is enabled [ 912.468787][T25520] BTRFS info (device loop4): has skinny extents [ 912.578549][T25520] BTRFS info (device loop4): enabling ssd optimizations [ 912.587305][T25520] BTRFS info (device loop4): clearing free space tree [ 912.594798][ T4307] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 912.595442][T25520] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 912.616385][ T4307] usb 2-1: USB disconnect, device number 35 [ 912.622381][T25520] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 912.665490][ T4307] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 912.699864][ T4307] cypress_m8 2-1:0.35: device disconnected [ 912.718178][T18110] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.92/input/input59 [ 912.773723][ T3532] bcm5974 3-1:4.92: could not read from device [ 912.966386][ T3532] bcm5974 3-1:4.92: could not read from device [ 912.991663][T18110] usb 3-1: USB disconnect, device number 114 [ 913.144441][T25567] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 913.595344][T25597] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 913.671644][T18110] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 913.860463][T25611] loop4: detected capacity change from 0 to 512 [ 913.938926][T18110] usb 1-1: Using ep0 maxpacket: 8 [ 913.963209][T25611] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 913.982141][T25611] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 914.000019][T25611] EXT4-fs (loop4): 1 truncate cleaned up [ 914.006564][T25611] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 914.067464][T18110] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 914.075600][T18110] usb 1-1: config 2 has no interface number 0 [ 914.114463][T25623] loop1: detected capacity change from 0 to 256 [ 914.123966][T25625] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 914.130072][T18110] usb 1-1: config 2 interface 31 has no altsetting 0 [ 914.185772][T25623] exfat: Deprecated parameter 'namecase' [ 914.266500][T25623] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 914.302780][T18110] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 914.311908][T18110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.348245][T25623] overlayfs: filesystem on './file0' not supported [ 914.356675][T18110] usb 1-1: Product: syz [ 914.361629][T18110] usb 1-1: Manufacturer: syz [ 914.387799][T18110] usb 1-1: SerialNumber: syz [ 914.566430][T25644] SET target dimension over the limit! [ 914.868713][T25666] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9270'. [ 914.920409][T25668] sctp: [Deprecated]: syz.4.9272 (pid 25668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 914.920409][T25668] Use struct sctp_sack_info instead [ 915.104401][T18110] ch9200: probe of 1-1:2.31 failed with error -22 [ 915.118384][T18110] usb 1-1: USB disconnect, device number 35 [ 915.589143][T25696] sctp: [Deprecated]: syz.0.9284 (pid 25696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 915.589143][T25696] Use struct sctp_sack_info instead [ 915.826595][T25672] loop1: detected capacity change from 0 to 32768 [ 915.899952][T25672] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.9281 (25672) [ 915.968033][T25672] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 915.978081][T25672] BTRFS info (device loop1): force zlib compression, level 3 [ 915.987648][T25672] BTRFS info (device loop1): force clearing of disk cache [ 916.005227][T25672] BTRFS info (device loop1): setting nodatasum [ 916.011688][T25672] BTRFS info (device loop1): doing ref verification [ 916.018521][T25672] BTRFS info (device loop1): allowing degraded mounts [ 916.025483][T25672] BTRFS info (device loop1): enabling disk space caching [ 916.032880][T25672] BTRFS info (device loop1): disk space caching is enabled [ 916.059332][T15019] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 916.065017][T25726] sctp: [Deprecated]: syz.2.9300 (pid 25726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 916.065017][T25726] Use struct sctp_sack_info instead [ 916.129056][T25672] BTRFS info (device loop1): has skinny extents [ 916.354972][T15019] usb 5-1: Using ep0 maxpacket: 16 [ 916.412592][T25672] BTRFS info (device loop1): enabling ssd optimizations [ 916.426054][T25672] BTRFS info (device loop1): clearing free space tree [ 916.441635][T25672] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 916.453587][T25672] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 916.517445][T25759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9307'. [ 916.526903][T25759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9307'. [ 916.533890][T15019] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 916.535996][T25759] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9307'. [ 916.554019][T25759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9307'. [ 916.567804][T15019] usb 5-1: config 0 has no interface number 0 [ 916.618794][T15019] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 916.662648][T15019] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 916.864537][T25770] loop3: detected capacity change from 0 to 512 [ 916.916872][T15019] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 916.928080][T15019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.942166][T15019] usb 5-1: Product: syz [ 916.946986][T15019] usb 5-1: Manufacturer: syz [ 916.951591][T15019] usb 5-1: SerialNumber: syz [ 917.009132][T15019] usb 5-1: config 0 descriptor?? [ 917.058370][T25770] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 917.066974][T15019] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 917.082223][T25770] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 917.114555][T25770] EXT4-fs (loop3): 1 truncate cleaned up [ 917.120427][T25770] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 917.322937][T15019] usb 5-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 917.340651][T15019] usb 5-1: USB disconnect, device number 20 [ 917.350074][T15019] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 917.407849][T15019] cypress_m8 5-1:0.35: device disconnected [ 917.742852][T25802] loop1: detected capacity change from 0 to 2048 [ 917.766165][T15023] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 917.873528][T25802] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 917.933713][T25815] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 917.966852][T25818] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 918.189960][T25827] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9339'. [ 918.226085][T15023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 918.243508][T15023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 918.341515][T15023] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 918.374143][T15023] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.426037][T15023] usb 4-1: config 0 descriptor?? [ 918.453092][T25843] loop0: detected capacity change from 0 to 256 [ 918.537481][T25843] exfat: Deprecated parameter 'utf8' [ 918.549928][T25843] exfat: Deprecated parameter 'utf8' [ 918.574590][T25843] exfat: Deprecated parameter 'namecase' [ 918.684743][T25843] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 918.732787][T25784] udc-core: couldn't find an available UDC or it's busy [ 918.776306][T25784] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 918.803139][T15023] ath6kl: Failed to submit usb control message: -71 [ 918.809929][T15023] ath6kl: unable to send the bmi data to the device: -71 [ 918.853783][T15023] ath6kl: Unable to send get target info: -71 [ 918.878617][T15023] ath6kl: Failed to init ath6kl core: -71 [ 918.968516][T15023] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 919.005219][T15023] usb 4-1: USB disconnect, device number 23 [ 919.276640][T25882] netlink: 'syz.1.9373': attribute type 1 has an invalid length. [ 919.502233][T25892] loop1: detected capacity change from 0 to 256 [ 919.592816][T25895] loop4: detected capacity change from 0 to 2048 [ 919.638562][T25892] exfat: Deprecated parameter 'utf8' [ 919.643950][T25892] exfat: Deprecated parameter 'utf8' [ 919.665230][T25895] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 919.702908][T25892] exfat: Deprecated parameter 'namecase' [ 919.731661][T25904] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 919.781467][T25892] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 919.861563][T18110] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 919.921738][T25912] netlink: 'syz.2.9381': attribute type 1 has an invalid length. [ 920.014032][T25918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9379'. [ 920.066947][T25922] dlm: plock device version mismatch: kernel (1.2.0), user (1952804395.1769107551.1915428975) [ 920.246532][T18110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 920.274444][T18110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 920.295410][T18110] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 920.330261][T18110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.351427][T18110] usb 1-1: config 0 descriptor?? [ 920.361166][T25936] loop2: detected capacity change from 0 to 2048 [ 920.460196][T25936] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 920.467325][T25943] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 920.569857][ T4392] udevd[4392]: incorrect nilfs2 checksum on /dev/loop2 [ 920.622761][T25948] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 920.628557][T25896] udc-core: couldn't find an available UDC or it's busy [ 920.693236][T25896] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 920.770280][T18110] ath6kl: Failed to submit usb control message: -71 [ 920.820847][T18110] ath6kl: unable to send the bmi data to the device: -71 [ 920.834822][T25956] netlink: 'syz.4.9397': attribute type 1 has an invalid length. [ 920.850263][T18110] ath6kl: Unable to send get target info: -71 [ 920.881442][T18110] ath6kl: Failed to init ath6kl core: -71 [ 921.025779][T18110] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 921.055728][T18110] usb 1-1: USB disconnect, device number 36 [ 921.495509][T25994] loop3: detected capacity change from 0 to 256 [ 921.513706][T25994] exfat: Deprecated parameter 'utf8' [ 921.636810][T25994] cifs: Unknown parameter '\µSñ¦bšX1o‘ÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 921.636810][T25994] SÃȘØÈžZ§6ŸÂ' [ 921.668283][T15023] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 921.775356][T26010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9424'. [ 921.846661][T26013] dlm: plock device version mismatch: kernel (1.2.0), user (1952804395.1769107551.1915428975) [ 922.095996][T15023] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 922.112979][T15023] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 922.165751][T15019] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 922.216263][T26034] loop4: detected capacity change from 0 to 1024 [ 922.272370][T26042] netlink: 'syz.0.9441': attribute type 1 has an invalid length. [ 922.293177][T26042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9441'. [ 922.352638][T15023] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 922.395856][T15023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.403944][T15023] usb 3-1: Product: syz [ 922.421843][T15023] usb 3-1: Manufacturer: syz [ 922.426493][T15023] usb 3-1: SerialNumber: syz [ 922.503441][T15023] cdc_ncm 3-1:1.0: skipping garbage [ 922.509444][T15023] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 922.534875][T15023] cdc_ncm 3-1:1.0: bind() failure [ 922.630632][T15019] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 922.652018][T15019] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 922.683658][T15019] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 922.701061][T26061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9451'. [ 922.711011][T15019] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.743166][T26064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9452'. [ 922.749167][T15019] usb 2-1: config 0 descriptor?? [ 922.784148][T18110] usb 3-1: USB disconnect, device number 115 [ 922.981384][T26076] netlink: 'syz.0.9458': attribute type 13 has an invalid length. [ 923.048654][T26015] udc-core: couldn't find an available UDC or it's busy [ 923.068077][T26015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 923.101135][T26083] xt_l2tp: invalid flags combination: 0 [ 923.123803][T15019] ath6kl: Failed to submit usb control message: -71 [ 923.141371][T15019] ath6kl: unable to send the bmi data to the device: -71 [ 923.173714][T15019] ath6kl: Unable to send get target info: -71 [ 923.196126][T15019] ath6kl: Failed to init ath6kl core: -71 [ 923.261220][T15019] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 923.278568][T15019] usb 2-1: USB disconnect, device number 36 [ 923.412011][T26103] netlink: 'syz.2.9469': attribute type 1 has an invalid length. [ 923.419951][T26103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9469'. [ 923.481475][T26107] netlink: 'syz.3.9473': attribute type 13 has an invalid length. [ 923.830214][T26123] xt_l2tp: invalid flags combination: 0 [ 923.974183][T26107] gretap0: refused to change device tx_queue_len [ 923.992549][T26107] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 924.230576][T26136] netlink: 'syz.3.9487': attribute type 1 has an invalid length. [ 924.233894][ T4212] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 924.246894][T26136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9487'. [ 924.603014][T26153] loop4: detected capacity change from 0 to 2048 [ 924.634317][T26155] loop0: detected capacity change from 0 to 1024 [ 924.651920][ T4212] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 924.660874][ T4212] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 924.713351][T26153] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 924.761062][T26153] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh [ 924.843535][ T4212] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 924.867966][ T4212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.893775][ T4212] usb 2-1: Product: syz [ 924.905273][ T4212] usb 2-1: Manufacturer: syz [ 924.910595][ T4212] usb 2-1: SerialNumber: syz [ 924.972899][ T4212] cdc_ncm 2-1:1.0: skipping garbage [ 924.978175][ T4212] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 924.987083][ T4212] cdc_ncm 2-1:1.0: bind() failure [ 925.046670][T26160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9509'. [ 925.239376][T14683] usb 2-1: USB disconnect, device number 37 [ 925.602507][T15023] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 925.646857][T26197] netlink: 'syz.2.9519': attribute type 9 has an invalid length. [ 925.672525][T26197] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.9519'. [ 925.896837][T15023] usb 5-1: Using ep0 maxpacket: 8 [ 925.908372][T26211] netlink: 'syz.0.9526': attribute type 10 has an invalid length. [ 925.998188][T26217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9528'. [ 925.999737][T26211] team0: Device hsr_slave_0 failed to register rx_handler [ 926.053284][T15023] usb 5-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 926.173341][T15023] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 926.206508][T15023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 926.232925][T15023] usb 5-1: SerialNumber: syz [ 926.287706][T15023] usb 5-1: bad CDC descriptors [ 926.471282][T26239] netlink: 'syz.1.9540': attribute type 1 has an invalid length. [ 926.500238][T26239] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9540'. [ 926.524295][T15023] usb 5-1: USB disconnect, device number 21 [ 927.053983][T26225] loop3: detected capacity change from 0 to 32768 [ 927.155902][T26225] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.9533 (26225) [ 927.246952][T26225] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 927.264296][T26225] BTRFS info (device loop3): using free space tree [ 927.290217][T26225] BTRFS info (device loop3): has skinny extents [ 927.314739][T26280] Unknown options in mask 5 [ 927.759730][T26225] BTRFS info (device loop3): enabling ssd optimizations [ 927.791902][T26225] BTRFS warning (device loop3): can't clear the compress_lzo,compress_zstd feature bits while mounted [ 928.436766][T26358] CIFS mount error: No usable UNC path provided in device string! [ 928.436766][T26358] [ 928.484675][T26358] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 928.781537][T26366] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.9594'. [ 929.147285][T26348] loop2: detected capacity change from 0 to 32768 [ 929.237588][T26348] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.9584 (26348) [ 929.296567][T26348] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 929.334983][T26348] BTRFS info (device loop2): using free space tree [ 929.365396][T26348] BTRFS info (device loop2): has skinny extents [ 929.494395][T26404] xt_CT: You must specify a L4 protocol and not use inversions on it [ 929.771721][T26348] BTRFS info (device loop2): enabling ssd optimizations [ 929.784391][T26441] loop3: detected capacity change from 0 to 2048 [ 929.830202][T14683] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 929.885162][T26441] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 930.153841][T14683] usb 2-1: Using ep0 maxpacket: 8 [ 930.211606][T14683] usb 2-1: too many configurations: 173, using maximum allowed: 8 [ 930.493047][T18110] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 930.584991][T26467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9625'. [ 930.626641][T26467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9625'. [ 930.637039][T26467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9625'. [ 930.654328][T26467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9625'. [ 930.867024][T26481] netlink: 'syz.2.9639': attribute type 21 has an invalid length. [ 930.889723][T26481] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9639'. [ 930.894452][T18110] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.053484][T26491] loop2: detected capacity change from 0 to 256 [ 931.114813][T18110] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 931.158475][T18110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.176731][T26491] FAT-fs (loop2): Directory bread(block 64) failed [ 931.188527][T18110] usb 5-1: Product: syz [ 931.194059][T14683] usb 2-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 931.200503][T18110] usb 5-1: Manufacturer: syz [ 931.214323][T14683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=66 [ 931.214623][T26491] FAT-fs (loop2): Directory bread(block 65) failed [ 931.232002][T18110] usb 5-1: SerialNumber: syz [ 931.240194][T18110] usb 5-1: config 0 descriptor?? [ 931.245512][T26491] FAT-fs (loop2): Directory bread(block 66) failed [ 931.255794][T26491] FAT-fs (loop2): Directory bread(block 67) failed [ 931.265256][T14683] usb 2-1: Product: syz [ 931.266506][T26491] FAT-fs (loop2): Directory bread(block 68) failed [ 931.280787][T14683] usb 2-1: Manufacturer: syz [ 931.289634][T14683] usb 2-1: SerialNumber: syz [ 931.306385][T14683] usb 2-1: config 0 descriptor?? [ 931.308071][T26491] FAT-fs (loop2): Directory bread(block 69) failed [ 931.335116][T26491] FAT-fs (loop2): Directory bread(block 70) failed [ 931.375174][T26491] FAT-fs (loop2): Directory bread(block 71) failed [ 931.385603][T26491] FAT-fs (loop2): Directory bread(block 72) failed [ 931.407486][T26491] FAT-fs (loop2): Directory bread(block 73) failed [ 931.545853][T26511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9654'. [ 931.623557][T14683] gspca_main: 0c45:613b too many config [ 931.641050][T14683] usb 2-1: USB disconnect, device number 38 [ 931.760348][T18110] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 931.781396][T18110] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 931.819586][T18110] asix: probe of 5-1:0.0 failed with error -71 [ 931.861790][T18110] usb 5-1: USB disconnect, device number 22 [ 931.902008][T26521] loop2: detected capacity change from 0 to 4096 [ 931.960326][T26521] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 932.035895][T26521] ntfs3: loop2: failed to convert "c46c" to cp861 [ 932.177247][T19554] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 932.219852][ T4318] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 932.444652][T19554] usb 4-1: Using ep0 maxpacket: 16 [ 932.480861][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 932.487072][T14683] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 932.572930][T19554] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 932.590111][T19554] usb 4-1: config 0 has no interface number 0 [ 932.603538][T26554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9675'. [ 932.615895][ T4318] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 932.623931][ T4318] usb 1-1: config 0 has no interface number 0 [ 932.630376][ T4318] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 932.642677][ T4318] usb 1-1: config 0 interface 1 has no altsetting 0 [ 932.709733][T26558] loop2: detected capacity change from 0 to 128 [ 932.765179][T19554] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=52.9a [ 932.770575][T26558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 932.781867][T19554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.790154][T26558] System zones: 1-3, 19-19, 35-36 [ 932.797624][T26558] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 932.798180][T19554] usb 4-1: Product: syz [ 932.813294][T19554] usb 4-1: Manufacturer: syz [ 932.817922][T19554] usb 4-1: SerialNumber: syz [ 932.818053][T26558] ext4 filesystem being mounted at /1919/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 932.835593][T19554] usb 4-1: config 0 descriptor?? [ 932.850768][ T4318] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 932.864732][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.874669][ T4318] usb 1-1: Product: syz [ 932.878864][ T4318] usb 1-1: Manufacturer: syz [ 932.878885][ T4318] usb 1-1: SerialNumber: syz [ 932.881480][ T4318] usb 1-1: config 0 descriptor?? [ 932.894621][T26558] EXT4-fs warning (device loop2): ext4_group_extend:1852: can't read last block, resize aborted [ 932.906980][T19554] usbhid 4-1:0.16: couldn't find an input interrupt endpoint [ 932.948515][T14683] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 932.958058][T14683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.981063][T14683] usb 2-1: config 0 descriptor?? [ 933.177302][T19554] usb 4-1: USB disconnect, device number 24 [ 933.195386][ T4318] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 933.248827][ T4318] cx231xx 1-1:0.1: Failed to read PCB config [ 933.252945][T26571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9683'. [ 933.255025][ T4318] cx231xx: probe of 1-1:0.1 failed with error -71 [ 933.297946][ T4318] usb 1-1: USB disconnect, device number 37 [ 933.447151][T26579] netlink: 'syz.2.9687': attribute type 1 has an invalid length. [ 933.466911][T26579] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9687'. [ 933.502795][T14683] mxuport 2-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 933.535093][T14683] mxuport: probe of 2-1:0.0 failed with error -5 [ 933.563667][T14683] usb 2-1: USB disconnect, device number 39 [ 933.592976][T26587] loop4: detected capacity change from 0 to 256 [ 933.645887][T26589] loop2: detected capacity change from 0 to 512 [ 933.653273][T26587] exfat: Deprecated parameter 'namecase' [ 933.658999][T26587] exfat: Deprecated parameter 'utf8' [ 933.719739][T26589] EXT4-fs (loop2): Ignoring removed nobh option [ 933.720248][T26587] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 933.792796][T26589] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 933.817416][T26589] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,noinit_itable,grpid,nobh,,errors=continue. Quota mode: writeback. [ 933.912287][T26589] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 934.403780][T26622] delete_channel: no stack [ 934.499984][T26630] loop4: detected capacity change from 0 to 256 [ 934.634490][T26638] device bond1 entered promiscuous mode [ 934.657589][T26638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 934.810462][T26652] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 934.903129][T26656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9725'. [ 934.971067][T26646] loop1: detected capacity change from 0 to 4096 [ 935.015412][T26662] xt_limit: Overflow, try lower: 65536/2147483648 [ 935.039358][T26646] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 935.083610][T26646] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 935.105255][T26646] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 935.145227][T26646] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 935.253801][T26646] ntfs: volume version 3.1. [ 935.352066][T18110] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 935.370544][T26646] ntfs: (device loop1): ntfs_nlstoucs(): Name using character set cp950 contains characters that cannot be converted to Unicode. [ 935.442867][T26646] ntfs: (device loop1): ntfs_lookup(): Failed to convert name to Unicode. [ 935.502373][T26686] loop0: detected capacity change from 0 to 16 [ 935.520251][T26685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9739'. [ 935.534526][T26686] erofs: (device loop0): mounted with root inode @ nid 36. [ 935.555279][T26685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9739'. [ 935.633000][T18110] usb 4-1: Using ep0 maxpacket: 16 [ 935.758410][T18110] usb 4-1: config 0 has no interfaces? [ 935.806841][T26691] loop0: detected capacity change from 0 to 16 [ 935.851041][T26691] erofs: (device loop0): mounted with root inode @ nid 36. [ 935.914741][T26691] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 935.929718][T18110] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.e3 [ 935.940831][T26691] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -57 in[61, 4035] out[1851] [ 935.962382][T18110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.975607][T26691] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 936.013970][T18110] usb 4-1: Product: syz [ 936.031765][T18110] usb 4-1: Manufacturer: syz [ 936.048761][T18110] usb 4-1: SerialNumber: syz [ 936.062855][T18110] r8152-cfgselector 4-1: config 0 descriptor?? [ 936.248268][T26708] xt_TPROXY: Can be used only with -p tcp or -p udp [ 936.335732][ T4307] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 936.362389][T18110] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 936.385187][T26679] loop2: detected capacity change from 0 to 32768 [ 936.443865][T26679] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 936.452920][T26679] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 936.477423][T26679] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 936.489076][T18110] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 936.496349][T18110] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 936.528181][T15019] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 936.547141][T18110] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms [ 936.556722][T18110] gfs2: fsid=syz:syz.0: jid=0: Done [ 936.562391][T26679] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 936.584104][ T4308] usb 4-1: USB disconnect, device number 25 [ 936.635144][ T4307] usb 5-1: Using ep0 maxpacket: 32 [ 936.785017][ T4307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 936.795262][T15019] usb 2-1: Using ep0 maxpacket: 8 [ 936.801630][ T4307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 936.818410][ T4307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 936.830591][ T4307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 937.030785][T15019] usb 2-1: unable to get BOS descriptor or descriptor too short [ 937.052029][ T4307] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 937.065978][ T4307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.076995][ T4307] usb 5-1: Product: syz [ 937.081275][ T4307] usb 5-1: Manufacturer: syz [ 937.090562][ T4307] usb 5-1: SerialNumber: syz [ 937.100562][ T4307] usb 5-1: config 0 descriptor?? [ 937.126231][T26716] loop2: detected capacity change from 0 to 32768 [ 937.137892][T15019] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 937.157381][T15019] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 937.170026][ T4307] usb 5-1: no audio or video endpoints found [ 937.181025][T15019] usb 2-1: config 4 has no interface number 0 [ 937.265039][T26725] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9756'. [ 937.335616][T26716] XFS (loop2): Mounting V5 Filesystem [ 937.392327][T15019] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 937.405370][T15019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.421226][T15019] usb 2-1: Product: syz [ 937.426016][T15019] usb 2-1: Manufacturer: syz [ 937.430650][T15019] usb 2-1: SerialNumber: syz [ 937.435909][ T4307] usb 5-1: USB disconnect, device number 23 [ 937.540032][T26716] XFS (loop2): Ending clean mount [ 937.562589][T26716] XFS (loop2): Quotacheck needed: Please wait. [ 937.719973][T26716] XFS (loop2): Quotacheck: Done. [ 937.745381][T26750] loop0: detected capacity change from 0 to 256 [ 937.790173][ T4169] XFS (loop2): Unmounting Filesystem [ 938.025436][T15019] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 938.031916][T15019] usb 2-1: No valid video chain found. [ 938.083829][T15019] usb 2-1: USB disconnect, device number 40 [ 938.477668][T26780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9783'. [ 938.514470][T26780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9783'. [ 938.527761][T18110] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 938.579660][T26783] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 938.586602][T26784] dlm: no locking on control device [ 938.611616][T26783] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 938.671590][T26787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9786'. [ 938.780217][T26795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9790'. [ 939.094041][T18110] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 939.108806][T26816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9799'. [ 939.117612][T18110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.136651][T18110] usb 5-1: Product: syz [ 939.141111][T18110] usb 5-1: Manufacturer: syz [ 939.145995][T18110] usb 5-1: SerialNumber: syz [ 939.201636][T18110] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 939.367065][T26830] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 939.495423][T26842] netlink: 236 bytes leftover after parsing attributes in process `syz.3.9811'. [ 939.605835][T26846] netlink: 'syz.1.9815': attribute type 2 has an invalid length. [ 939.705233][T26844] loop2: detected capacity change from 0 to 4096 [ 939.811261][T26844] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 939.840878][T26844] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 939.865683][T26844] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 939.906312][T26844] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 939.917090][T18110] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 939.958635][T26858] loop3: detected capacity change from 0 to 8192 [ 939.971550][T26864] x_tables: unsorted underflow at hook 1 [ 939.996485][T26844] ntfs: volume version 3.1. [ 940.129819][T26858] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 940.189319][T26858] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 940.208992][T26858] FAT-fs (loop3): Filesystem has been set read-only [ 940.249963][T26880] loop2: detected capacity change from 0 to 512 [ 940.357075][T26880] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 940.394083][ T4307] usb 5-1: USB disconnect, device number 24 [ 940.402904][T26880] ext4 filesystem being mounted at /1954/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.459023][T26880] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:338: inode #15: comm syz.2.9827: verity file corrupted; can't find descriptor [ 940.478826][T26880] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 940.652525][T26897] loop3: detected capacity change from 0 to 1024 [ 940.682442][T26901] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (3) [ 940.857802][ T4318] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 941.050616][T18110] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 941.065603][T18110] ath9k_htc: Failed to initialize the device [ 941.098686][ T4307] usb 5-1: ath9k_htc: USB layer deinitialized [ 941.114860][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 941.197438][T26921] netlink: 'syz.3.9849': attribute type 11 has an invalid length. [ 941.414044][ T4318] usb 2-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 941.441905][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.478161][ T4318] usb 2-1: Product: syz [ 941.489198][ T4318] usb 2-1: Manufacturer: syz [ 941.500145][ T4318] usb 2-1: SerialNumber: syz [ 941.526988][ T4318] usb 2-1: config 0 descriptor?? [ 941.595003][ T4318] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 941.672013][T26939] loop0: detected capacity change from 0 to 4096 [ 941.732596][T26939] __ntfs_error: 2 callbacks suppressed [ 941.732622][T26939] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 941.740352][T26956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9867'. [ 941.778315][T26939] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 941.782058][T26957] netlink: 'syz.4.9868': attribute type 1 has an invalid length. [ 941.787343][T26939] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 941.954453][T26939] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 942.021197][T26939] ntfs: volume version 3.1. [ 942.055258][ T4318] gspca_sunplus: reg_w_riv err -71 [ 942.060694][ T4318] sunplus: probe of 2-1:0.0 failed with error -71 [ 942.098900][ T4318] usb 2-1: USB disconnect, device number 41 [ 942.137330][T26939] ntfs: (device loop0): ntfs_nlstoucs(): Name using character set cp950 contains characters that cannot be converted to Unicode. [ 942.202025][T26939] ntfs: (device loop0): ntfs_lookup(): Failed to convert name to Unicode. [ 942.296408][T26982] Unknown options in mask 5 [ 942.468068][T26991] loop2: detected capacity change from 0 to 64 [ 942.568331][T19553] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 942.835558][T19553] usb 4-1: Using ep0 maxpacket: 32 [ 942.964062][T19553] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 942.974299][T19553] usb 4-1: config 0 has no interface number 0 [ 943.009031][T19553] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 943.021925][T19553] usb 4-1: config 0 interface 1 has no altsetting 0 [ 943.204568][T19553] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 943.218637][T27013] loop4: detected capacity change from 0 to 8192 [ 943.224879][T19553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.254968][T19553] usb 4-1: Product: syz [ 943.269494][T19553] usb 4-1: Manufacturer: syz [ 943.281996][T27013] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 943.291085][T19553] usb 4-1: SerialNumber: syz [ 943.344028][T27013] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 943.344986][T19553] usb 4-1: config 0 descriptor?? [ 943.392682][T27013] FAT-fs (loop4): Filesystem has been set read-only [ 943.416331][T26997] loop0: detected capacity change from 0 to 32768 [ 943.672696][T19553] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 943.692900][T26997] XFS (loop0): Mounting V5 Filesystem [ 943.755390][T19553] cx231xx 4-1:0.1: Failed to read PCB config [ 943.775348][T19553] cx231xx: probe of 4-1:0.1 failed with error -71 [ 943.856481][T19553] usb 4-1: USB disconnect, device number 26 [ 943.920723][T27029] infiniband syz1: set down [ 943.925355][T27029] infiniband syz1: added ipvlan0 [ 943.938620][T26997] XFS (loop0): Ending clean mount [ 943.946266][T26997] XFS (loop0): Quotacheck needed: Please wait. [ 943.974871][T27023] loop1: detected capacity change from 0 to 32768 [ 944.040450][T27023] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 944.059922][T26997] XFS (loop0): Quotacheck: Done. [ 944.076203][T27023] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 944.111164][T27023] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 944.121308][ T4167] XFS (loop0): Unmounting Filesystem [ 944.136751][T18110] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 944.144320][T18110] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 944.175436][T27029] RDS/IB: syz1: added [ 944.218009][T27029] smc: adding ib device syz1 with port count 1 [ 944.224355][T27029] smc: ib device syz1 port 1 has pnetid [ 944.281584][T18110] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 128ms [ 944.324680][T18110] gfs2: fsid=syz:syz.0: jid=0: Done [ 944.330056][T27023] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 944.558740][T27056] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.9913'. [ 944.896360][T27062] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9924'. [ 945.197213][T27074] SET target dimension over the limit! [ 945.563203][T27059] loop3: detected capacity change from 0 to 32768 [ 945.607926][T27092] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 945.638905][T27092] overlayfs: conflicting options: userxattr,metacopy=on [ 945.653893][T27059] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.9915 (27059) [ 945.724487][T19553] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 945.744119][T27059] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 945.752815][T27059] BTRFS info (device loop3): using free space tree [ 945.823855][T27059] BTRFS info (device loop3): has skinny extents [ 945.972482][T27106] netlink: 'syz.1.9935': attribute type 1 has an invalid length. [ 946.021452][T27106] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9935'. [ 946.117760][T19553] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 946.138020][T19553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.153286][T19553] usb 5-1: config 0 descriptor?? [ 946.171455][T27059] BTRFS info (device loop3): enabling ssd optimizations [ 946.194638][T19553] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 946.258931][T27131] loop1: detected capacity change from 0 to 4096 [ 946.316977][T27131] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 946.358461][T27135] netlink: 'syz.0.9944': attribute type 8 has an invalid length. [ 946.396026][T27131] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 946.467209][T27131] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 946.507563][T27131] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 946.529360][T27131] ntfs: volume version 3.1. [ 946.665992][T19553] gspca_sn9c2028: read1 error -71 [ 946.691689][T19553] gspca_sn9c2028: read1 error -71 [ 946.708191][T19553] sn9c2028: probe of 5-1:0.0 failed with error -71 [ 946.772524][T27142] loop0: detected capacity change from 0 to 4096 [ 946.781933][T19553] usb 5-1: USB disconnect, device number 25 [ 946.822967][ C1] vkms_vblank_simulate: vblank timer overrun [ 946.893715][T27142] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 947.026574][T19554] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 947.044125][T27142] ntfs3: loop0: failed to convert "c46c" to cp861 [ 947.193935][T27152] loop1: detected capacity change from 0 to 128 [ 947.417062][T27164] delete_channel: no stack [ 947.419664][T27152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 947.422749][T19554] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 947.442361][T27165] tmpfs: Bad value for 'mpol' [ 947.452928][T27152] System zones: 1-3, 19-19, 35-36 [ 947.517559][T27152] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 947.562129][T27173] device bond2 entered promiscuous mode [ 947.579367][T27152] ext4 filesystem being mounted at /1918/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 947.580010][T27173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 947.632338][T27152] EXT4-fs warning (device loop1): ext4_group_extend:1852: can't read last block, resize aborted [ 947.644083][T19554] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 947.653499][T19554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.662846][T19554] usb 3-1: Product: syz [ 947.698189][T19554] usb 3-1: Manufacturer: syz [ 947.704434][T19554] usb 3-1: SerialNumber: syz [ 947.928531][T27189] loop0: detected capacity change from 0 to 256 [ 947.982427][T27194] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 947.992111][T27195] CIFS: iocharset name too long [ 947.999545][T27197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9970'. [ 948.022053][T19554] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 116 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 948.053111][T19554] usb 3-1: USB disconnect, device number 116 [ 948.071402][T27189] FAT-fs (loop0): Directory bread(block 64) failed [ 948.082587][T27189] FAT-fs (loop0): Directory bread(block 65) failed [ 948.090111][T19554] usblp0: removed [ 948.119409][T27189] FAT-fs (loop0): Directory bread(block 66) failed [ 948.126042][T27189] FAT-fs (loop0): Directory bread(block 67) failed [ 948.133096][T27199] loop3: detected capacity change from 0 to 16 [ 948.154837][T27189] FAT-fs (loop0): Directory bread(block 68) failed [ 948.173743][T27189] FAT-fs (loop0): Directory bread(block 69) failed [ 948.198779][T27189] FAT-fs (loop0): Directory bread(block 70) failed [ 948.205825][T27189] FAT-fs (loop0): Directory bread(block 71) failed [ 948.216957][T27189] FAT-fs (loop0): Directory bread(block 72) failed [ 948.225352][T27189] FAT-fs (loop0): Directory bread(block 73) failed [ 948.254921][T27199] erofs: (device loop3): mounted with root inode @ nid 36. [ 948.561111][T27225] tmpfs: Bad value for 'mpol' [ 948.671026][ T150] block nbd0: Attempted send on invalid socket [ 948.677591][ T150] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 948.689057][T27232] EXT4-fs (nbd0): unable to read superblock [ 949.099896][T27262] overlayfs: missing 'lowerdir' [ 949.249100][T27274] loop4: detected capacity change from 0 to 128 [ 949.324845][T19553] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 949.586986][T19553] usb 4-1: Using ep0 maxpacket: 32 [ 949.726321][T19553] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.794685][T27311] loop1: detected capacity change from 0 to 512 [ 949.825218][T27313] loop2: detected capacity change from 0 to 256 [ 949.835209][T27311] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 949.900341][T27311] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,noinit_itable,errors=remount-ro,grpjquota=.,stripe=0x0000000000000000,init_itable,. Quota mode: writeback. [ 949.929321][T27311] ext4 filesystem being mounted at /1935/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.935370][T27313] exfat: Unknown parameter 'ißGýªÜµÚU<ÉocharŸÙýåŠduj«10sîûN•€(—ƒp•…SÔ€/×éØEËcÃ)Ô°üU³t¿þûgèSó#jÉjÁIJaçá‚¡|ÉÌðâŒ3Û‹…y#Oø¼žôÝÌIÅql˜>¥UèŒÌ´P9…¶Fc0\ª^¬' [ 949.944825][T19553] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 949.970162][T19553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.978603][T19553] usb 4-1: Product: syz [ 949.983258][T19553] usb 4-1: Manufacturer: syz [ 949.987957][T19553] usb 4-1: SerialNumber: syz [ 949.994542][T19553] usb 4-1: config 0 descriptor?? [ 950.000412][T27322] overlayfs: empty lowerdir [ 950.088742][T27326] loop0: detected capacity change from 0 to 128 [ 950.153846][T27326] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 950.227055][ T4167] sysv_free_block: flc_count > flc_size [ 950.243655][ T4167] sysv_free_block: flc_count > flc_size [ 950.262981][ T4167] sysv_free_block: flc_count > flc_size [ 950.271535][ T4167] sysv_free_block: flc_count > flc_size [ 950.276821][T19553] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 950.295390][ T4167] sysv_free_block: flc_count > flc_size [ 950.329739][T19554] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 950.337484][ T4167] sysv_free_block: flc_count > flc_size [ 950.367946][ T4167] sysv_free_block: flc_count > flc_size [ 950.400032][ T4167] sysv_free_block: flc_count > flc_size [ 950.412208][ T4167] sysv_free_block: flc_count > flc_size [ 950.422259][ T4167] sysv_free_block: flc_count > flc_size [ 950.437321][ T4167] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 950.495345][T19553] usb 4-1: USB disconnect, device number 27 [ 950.597808][T19554] usb 5-1: Using ep0 maxpacket: 8 [ 950.725501][T19554] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 950.737070][T19554] usb 5-1: config 0 has no interface number 0 [ 950.805257][T27342] loop0: detected capacity change from 0 to 4096 [ 950.902852][T27342] __ntfs_error: 12 callbacks suppressed [ 950.902872][T27342] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 950.907229][T19554] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=9f.8c [ 950.922322][T27342] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 950.992174][T19554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.000619][T27342] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 951.023349][T19554] usb 5-1: Product: syz [ 951.037139][T19554] usb 5-1: Manufacturer: syz [ 951.041822][T19554] usb 5-1: SerialNumber: syz [ 951.057375][T27342] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 951.101088][T19554] usb 5-1: config 0 descriptor?? [ 951.171169][T19554] flexcop_usb: set interface failed. [ 951.184970][T19554] b2c2_flexcop_usb: probe of 5-1:0.204 failed with error -22 [ 951.185094][T27342] ntfs: volume version 3.1. [ 951.277751][T27342] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 951.301497][T27342] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 951.319554][T27366] device bridge3 entered promiscuous mode [ 951.376300][T27342] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 951.389590][T19553] usb 5-1: USB disconnect, device number 26 [ 951.391405][T27342] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 951.469541][T27342] ntfs: (device loop0): ntfs_check_logfile(): Error mapping $LogFile page (index 0). [ 951.505770][T27342] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 951.807261][T27383] loop0: detected capacity change from 0 to 1764 [ 951.884169][T27383] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 952.063827][T27394] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 952.131846][T27394] overlayfs: missing 'lowerdir' [ 952.214462][T27357] loop1: detected capacity change from 0 to 40427 [ 952.341246][T27409] loop0: detected capacity change from 0 to 8 [ 952.363492][T27357] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 952.366330][T27412] netlink: 428 bytes leftover after parsing attributes in process `syz.3.10075'. [ 952.397705][T27413] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10074'. [ 952.422341][T27357] F2FS-fs (loop1): Found nat_bits in checkpoint [ 952.635988][T27357] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 952.689898][T27357] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 952.708886][T27357] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 952.727043][T27357] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 953.341970][T27464] loop1: detected capacity change from 0 to 47 [ 953.546429][T27468] ieee802154 phy0 wpan0: encryption failed: -22 [ 953.677826][T27421] loop4: detected capacity change from 0 to 32768 [ 953.783491][T27421] XFS (loop4): Mounting V5 Filesystem [ 953.956487][T27421] XFS (loop4): Ending clean mount [ 954.131656][ T4180] XFS (loop4): Unmounting Filesystem [ 954.537649][T27517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 954.720205][T27524] netlink: 'syz.2.10124': attribute type 1 has an invalid length. [ 954.745236][T27524] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.10124'. [ 954.788051][T27524] netlink: 'syz.2.10124': attribute type 1 has an invalid length. [ 955.419872][T27518] loop0: detected capacity change from 0 to 32768 [ 955.470321][T27545] loop1: detected capacity change from 0 to 4096 [ 955.505103][T27545] EXT4-fs (loop1): Ignoring removed orlov option [ 955.511775][T27545] EXT4-fs (loop1): Test dummy encryption mode enabled [ 955.564457][T27518] read_mapping_page failed! [ 955.576318][T27520] loop3: detected capacity change from 0 to 32768 [ 955.589890][T27518] ialloc: diAlloc returned -5! [ 955.662349][T27545] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,noauto_da_alloc,nolazytime,orlov,data_err=abort,test_dummy_encryption,nobarrier,quota,max_batch_time=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 955.702353][T27556] loop4: detected capacity change from 0 to 4096 [ 955.775072][T27520] XFS (loop3): Mounting V5 Filesystem [ 955.931910][T27545] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz.1.10134: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 955.996112][T27545] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.10134: directory missing '..' [ 956.040662][T27520] XFS (loop3): Ending clean mount [ 956.163908][ T4174] XFS (loop3): Unmounting Filesystem [ 956.164314][T27580] netlink: 'syz.0.10146': attribute type 21 has an invalid length. [ 956.217398][T27580] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10146'. [ 956.227915][T27580] netlink: 'syz.0.10146': attribute type 1 has an invalid length. [ 956.437217][T27593] loop2: detected capacity change from 0 to 164 [ 956.561339][T27593] rock: directory entry would overflow storage [ 956.573500][T27593] rock: sig=0x4543, size=28, remaining=18 [ 956.639856][T27593] ISOFS: unable to read i-node block [ 957.238047][T27636] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10172'. [ 957.263545][T27636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10172'. [ 957.292548][T27636] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 957.364101][T27644] mmap: syz.4.10176 (27644): VmData 37474304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 957.408409][T27646] loop1: detected capacity change from 0 to 512 [ 957.426560][T27649] loop0: detected capacity change from 0 to 128 [ 957.427158][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 957.427174][ T26] audit: type=1400 audit(1743476838.920:44): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=27648 comm="syz.2.10179" [ 957.507132][T27649] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 957.527978][T27646] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 957.570395][T27662] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10184'. [ 957.576033][T27660] tmpfs: Bad value for 'mpol' [ 957.618310][T27646] EXT4-fs (loop1): invalid journal inode [ 957.619313][T27649] ext4 filesystem being mounted at /2105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 957.631513][T27664] loop2: detected capacity change from 0 to 1024 [ 957.651862][T27646] EXT4-fs (loop1): can't get journal size [ 957.669942][T27649] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 1025 (only 1 groups) [ 957.713027][T27646] EXT4-fs (loop1): 1 truncate cleaned up [ 957.730484][T27646] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 957.878649][T27674] ieee802154 phy0 wpan0: encryption failed: -22 [ 958.138247][T27694] loop4: detected capacity change from 0 to 256 [ 958.196302][T27689] loop2: detected capacity change from 0 to 4096 [ 958.366879][T27689] ntfs: volume version 3.1. [ 958.425477][T27689] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (4096) differing from the directory specified size (2048). Directory inode is corrupt or driver bug. [ 958.475683][T27689] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 958.505965][T27689] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 958.560278][T27721] loop1: detected capacity change from 0 to 8 [ 958.573985][T27689] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (4096) differing from the directory specified size (2048). Directory inode is corrupt or driver bug. [ 958.618777][T27689] ntfs: (device loop2): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 958.652595][T27724] netlink: 208 bytes leftover after parsing attributes in process `syz.3.10213'. [ 958.698519][T27728] netlink: 'syz.4.10214': attribute type 2 has an invalid length. [ 958.715582][T27721] SQUASHFS error: lzo decompression failed, data probably corrupt [ 958.743330][T27721] SQUASHFS error: Failed to read block 0x1c0: -5 [ 958.749897][T27721] SQUASHFS error: Unable to read metadata cache entry [1be] [ 959.074108][T27741] loop4: detected capacity change from 0 to 4096 [ 959.117169][T27751] loop2: detected capacity change from 0 to 128 [ 959.175449][T27741] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 959.195130][T27741] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 959.213509][T27741] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 959.248639][T27741] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 959.260339][T27751] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 959.311037][T27751] attempt to access beyond end of device [ 959.311037][T27751] loop2: rw=0, want=6491538, limit=128 [ 959.322076][T27741] ntfs: volume version 3.1. [ 959.406017][T27751] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 959.522623][ T4169] sysv_free_block: flc_count > flc_size [ 959.528494][ T4169] sysv_free_block: flc_count > flc_size [ 959.553032][ T4169] sysv_free_block: flc_count > flc_size [ 959.566007][ T4169] sysv_free_block: flc_count > flc_size [ 959.597714][ T4169] sysv_free_block: flc_count > flc_size [ 959.615990][ T4169] sysv_free_block: flc_count > flc_size [ 959.636458][ T4169] sysv_free_block: flc_count > flc_size [ 959.679656][ T4169] sysv_free_block: flc_count > flc_size [ 959.689476][ T4169] sysv_free_block: flc_count > flc_size [ 959.706145][ T4169] sysv_free_block: flc_count > flc_size [ 959.723221][ T4169] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 959.769470][T15023] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 959.856715][T27786] netlink: 'syz.0.10245': attribute type 13 has an invalid length. [ 960.069511][T15023] usb 4-1: Using ep0 maxpacket: 8 [ 960.160124][T27796] loop2: detected capacity change from 0 to 256 [ 960.246946][T27794] loop1: detected capacity change from 0 to 4096 [ 960.259808][T15023] usb 4-1: unable to get BOS descriptor or descriptor too short [ 960.297801][T27796] FAT-fs (loop2): Directory bread(block 64) failed [ 960.343446][T27796] FAT-fs (loop2): Directory bread(block 65) failed [ 960.368709][T15023] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 960.382283][T15023] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 960.388708][T27796] FAT-fs (loop2): Directory bread(block 66) failed [ 960.422520][T27794] ntfs: volume version 3.1. [ 960.428771][T15023] usb 4-1: config 4 has no interface number 0 [ 960.460088][T27796] FAT-fs (loop2): Directory bread(block 67) failed [ 960.506644][T27796] FAT-fs (loop2): Directory bread(block 68) failed [ 960.541735][T27796] FAT-fs (loop2): Directory bread(block 69) failed [ 960.568749][T27786] gretap0: refused to change device tx_queue_len [ 960.583248][T27796] FAT-fs (loop2): Directory bread(block 70) failed [ 960.587932][T27786] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 960.600768][T27796] FAT-fs (loop2): Directory bread(block 71) failed [ 960.649894][T27796] FAT-fs (loop2): Directory bread(block 72) failed [ 960.665212][T27796] FAT-fs (loop2): Directory bread(block 73) failed [ 960.688519][T15023] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 960.709924][T15023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.774478][T15023] usb 4-1: Product: syz [ 960.785000][T15023] usb 4-1: Manufacturer: syz [ 960.800611][T15023] usb 4-1: SerialNumber: syz [ 960.856315][T27800] kAFS: No cell specified [ 961.020970][T27783] loop4: detected capacity change from 0 to 32768 [ 961.185527][T27783] XFS (loop4): Mounting V5 Filesystem [ 961.364090][T15023] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 961.370632][T15023] usb 4-1: No valid video chain found. [ 961.388332][T15023] usb 4-1: USB disconnect, device number 28 [ 961.494164][T27783] XFS (loop4): Ending clean mount [ 961.527679][T27783] XFS (loop4): Quotacheck needed: Please wait. [ 961.642407][T27783] XFS (loop4): Quotacheck: Done. [ 961.673555][T27843] loop1: detected capacity change from 0 to 2048 [ 961.745172][ T4180] XFS (loop4): Unmounting Filesystem [ 961.795193][T27847] netlink: 'syz.3.10271': attribute type 9 has an invalid length. [ 961.885185][T27848] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 962.001735][T27843] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 962.057599][T27843] Remounting filesystem read-only [ 962.068302][T27843] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 962.098863][T27843] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 962.161259][T27843] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 962.161832][T27831] loop2: detected capacity change from 0 to 32768 [ 962.173573][T27843] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 962.211943][T27843] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 962.222212][T27843] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 962.252791][T27843] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 962.284407][T27843] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 962.289034][T27831] JBD2: Ignoring recovery information on journal [ 962.335488][T27843] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 962.406026][T27843] syz.1.10268 (27843) used greatest stack depth: 17880 bytes left [ 962.537530][T27831] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 962.608128][T27862] netlink: 'syz.3.10277': attribute type 21 has an invalid length. [ 962.910376][ T4169] ocfs2: Unmounting device (7,2) on (node local) [ 962.946218][T27876] netlink: 'syz.4.10282': attribute type 1 has an invalid length. [ 962.954090][T27876] netlink: 'syz.4.10282': attribute type 3 has an invalid length. [ 962.998535][T27876] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10282'. [ 963.014476][T27876] NCSI netlink: No device for ifindex 52229 [ 963.232322][T27887] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 963.798590][T27917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 963.994481][T27929] tmpfs: Bad value for 'mpol' [ 964.064528][T27925] loop2: detected capacity change from 0 to 2048 [ 964.118760][T27872] loop0: detected capacity change from 0 to 40427 [ 964.263803][T27872] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 964.309483][T27872] F2FS-fs (loop0): Found nat_bits in checkpoint [ 964.357365][T27948] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.10316'. [ 964.460656][T27872] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 964.488328][T27872] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 964.505607][T27872] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 964.527288][T27872] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 964.948211][ T150] block nbd2: Attempted send on invalid socket [ 964.954647][ T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 964.993996][T27935] loop1: detected capacity change from 0 to 32768 [ 965.001680][T27965] vxfs: unable to read disk superblock at 1 [ 965.019888][ T263] block nbd2: Attempted send on invalid socket [ 965.026105][ T263] blk_update_request: I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.038813][T27965] vxfs: unable to read disk superblock at 8 [ 965.061437][T27965] vxfs: can't find superblock. [ 965.154020][T27973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10330'. [ 965.200823][T27935] read_mapping_page failed! [ 965.205437][T27935] ialloc: diAlloc returned -5! [ 965.522404][T27991] tipc: Can't bind to reserved service type 1 [ 965.965890][T28013] rdma_rxe: rxe_register_device failed with error -23 [ 965.988023][T28013] rdma_rxe: failed to add ipvlan0 [ 966.021243][T28009] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 966.263027][T28028] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.10356'. [ 966.323738][T28028] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 966.491412][T28038] loop2: detected capacity change from 0 to 512 [ 966.562722][T28038] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 966.567830][T27989] loop3: detected capacity change from 0 to 40427 [ 966.602727][T28044] rdma_rxe: rxe_register_device failed with error -23 [ 966.615189][T28044] rdma_rxe: failed to add ipvlan0 [ 966.627622][T28038] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,noinit_itable,errors=remount-ro,grpjquota=.,stripe=0x0000000000000000,init_itable,. Quota mode: writeback. [ 966.646123][T28038] ext4 filesystem being mounted at /2071/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 966.671215][T27989] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 966.745688][T27989] F2FS-fs (loop3): Found nat_bits in checkpoint [ 966.761358][ T4318] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 966.815220][T19554] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 966.935810][T27989] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 967.006641][T27989] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 967.024896][T27989] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 967.032135][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 967.039426][T27989] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 967.072445][T19554] usb 1-1: Using ep0 maxpacket: 32 [ 967.107407][T28067] loop2: detected capacity change from 0 to 128 [ 967.171906][ T4318] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 967.183360][T28067] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 967.206038][ T4318] usb 5-1: config 0 has no interface number 0 [ 967.225743][T19554] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 967.237031][T19554] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 967.254553][T19554] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 967.266752][T19554] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 967.277923][T19554] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 967.301368][T19554] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.308515][ T4169] sysv_free_block: flc_count > flc_size [ 967.314316][ T4169] sysv_free_block: flc_count > flc_size [ 967.338489][ T4169] sysv_free_block: flc_count > flc_size [ 967.344738][ T4169] sysv_free_block: flc_count > flc_size [ 967.374710][ T4169] sysv_free_block: flc_count > flc_size [ 967.380304][ T4169] sysv_free_block: flc_count > flc_size [ 967.402622][ T4318] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 967.403047][ T4169] sysv_free_block: flc_count > flc_size [ 967.419159][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.427728][ T4318] usb 5-1: Product: syz [ 967.432058][ T4318] usb 5-1: Manufacturer: syz [ 967.434702][ T4169] sysv_free_block: flc_count > flc_size [ 967.442268][ T4169] sysv_free_block: flc_count > flc_size [ 967.444046][ T4318] usb 5-1: SerialNumber: syz [ 967.466605][ T4169] sysv_free_block: flc_count > flc_size [ 967.472367][ T4318] usb 5-1: config 0 descriptor?? [ 967.472776][ T4169] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 967.478029][T19554] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 967.500255][T19554] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 967.509007][T19554] usb 1-1: Product: syz [ 967.529716][T19554] usb 1-1: Manufacturer: syz [ 967.542450][ T4318] hub 5-1:0.145: bad descriptor, ignoring hub [ 967.564157][ T4318] hub: probe of 5-1:0.145 failed with error -5 [ 967.571924][T19554] usb 1-1: SerialNumber: syz [ 967.585049][ T4318] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.145/input/input63 [ 967.596978][T19554] usb 1-1: config 0 descriptor?? [ 967.639357][T19554] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 967.658869][T19554] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 967.766116][T18110] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 967.878152][T15023] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 967.881056][T28042] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 967.902044][ T4212] usb 1-1: USB disconnect, device number 38 [ 967.911655][ T4212] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 967.974649][T28090] netlink: 300 bytes leftover after parsing attributes in process `syz.2.10383'. [ 968.063546][T28092] loop2: detected capacity change from 0 to 8192 [ 968.140402][T15023] usb 4-1: Using ep0 maxpacket: 8 [ 968.158169][T18110] usb 2-1: config index 0 descriptor too short (expected 4114, got 18) [ 968.185439][T28092] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 968.196929][T28092] REISERFS (device loop2): using ordered data mode [ 968.203495][T28092] reiserfs: using flush barriers [ 968.213629][T28092] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 968.231158][T28092] REISERFS (device loop2): checking transaction log (loop2) [ 968.274486][ T4318] usb 5-1: USB disconnect, device number 27 [ 968.291714][T15023] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 968.313219][T15023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 252, changing to 11 [ 968.324780][T15023] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41574, setting to 1024 [ 968.337338][T15023] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 968.353408][T28092] REISERFS (device loop2): Using tea hash to sort names [ 968.361240][T18110] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 968.375426][T18110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.387831][T18110] usb 2-1: Product: syz [ 968.392062][T18110] usb 2-1: Manufacturer: syz [ 968.400186][T18110] usb 2-1: SerialNumber: syz [ 968.406988][T18110] usb 2-1: config 0 descriptor?? [ 968.547212][T15023] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 968.556347][T15023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 968.597784][T15023] usb 4-1: Product: syz [ 968.609133][T15023] usb 4-1: Manufacturer: syz [ 968.616893][T15023] usb 4-1: SerialNumber: syz [ 968.625240][T15023] usb 4-1: config 0 descriptor?? [ 968.685716][T18110] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 968.703329][T18110] asix: probe of 2-1:0.0 failed with error -61 [ 968.764130][T28104] device bridge1 entered promiscuous mode [ 968.902361][T18110] usb 2-1: USB disconnect, device number 42 [ 968.910111][T15023] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 968.932001][T15023] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 968.962111][T28116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10395'. [ 968.993047][T15023] usb 4-1: USB disconnect, device number 29 [ 969.011872][T28116] openvswitch: netlink: Missing key (keys=40, expected=100) [ 969.130880][T28121] xt_l2tp: invalid flags combination: c [ 969.175945][T28126] loop4: detected capacity change from 0 to 64 [ 969.334357][T28138] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 969.364131][T28138] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 969.717509][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 969.717528][ T26] audit: type=1400 audit(1743476850.416:46): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3A203A4BB7 pid=28157 comm="syz.3.10416" [ 969.798027][T28163] loop0: detected capacity change from 0 to 764 [ 969.880215][T28163] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 969.921011][T28163] Symlink component flag not implemented [ 969.929299][T28163] Symlink component flag not implemented [ 970.053811][T18110] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 970.116952][T28182] loop0: detected capacity change from 0 to 512 [ 970.265806][T28182] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000001000000,minixdf,min_batch_time=0x000000002d7ccfde,,errors=continue. Quota mode: writeback. [ 970.321072][T18110] usb 2-1: Using ep0 maxpacket: 32 [ 970.348044][T28193] loop4: detected capacity change from 0 to 1024 [ 970.374749][T28182] ext4 filesystem being mounted at /2155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 970.611852][T28201] i2c i2c-0: Invalid block write size 34 [ 970.822855][T28210] netlink: 'syz.0.10440': attribute type 4 has an invalid length. [ 970.848856][T28210] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10440'. [ 970.953162][T28215] loop2: detected capacity change from 0 to 2048 [ 971.032077][T28219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10445'. [ 971.048423][T18110] usb 2-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=6a.33 [ 971.057548][T18110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.108921][T18110] usb 2-1: config 0 descriptor?? [ 971.152537][T28222] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 971.164702][T18110] cdc_acm 2-1:0.0: Zero length descriptor references [ 971.172132][T28215] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 971.174622][T18110] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 971.214612][T28215] Remounting filesystem read-only [ 971.246628][T28215] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 971.298368][T28215] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 971.303725][T28228] loop0: detected capacity change from 0 to 64 [ 971.344123][T28215] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 971.388036][T28215] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 971.411799][T28215] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 971.438057][T28215] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 971.454465][ T4307] usb 2-1: USB disconnect, device number 43 [ 971.463414][T28215] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 971.474448][T28215] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 971.486504][T28215] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 971.496436][ T26] audit: type=1800 audit(1743476852.081:47): pid=28215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10443" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 971.903402][ T4318] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 972.159960][ T4318] usb 5-1: Using ep0 maxpacket: 8 [ 972.299273][ T4318] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 972.318255][ T4318] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 972.339942][ T4318] usb 5-1: config 6 has no interface number 0 [ 972.350762][ T4318] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 972.370847][ T4318] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 972.583029][ T4318] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 972.595909][T28294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10482'. [ 972.615220][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.655412][ T4318] usb 5-1: Product: syz [ 972.663371][ T4318] usb 5-1: Manufacturer: syz [ 972.668178][ T4318] usb 5-1: SerialNumber: syz [ 972.710057][T18110] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 972.727506][ T4318] hso 5-1:6.2: Failed to find INT IN ep [ 973.079563][T18110] usb 1-1: not running at top speed; connect to a high speed hub [ 973.121276][T28315] tmpfs: Bad value for 'mpol' [ 973.125183][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 973.132357][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 973.138794][ T4318] usb 5-1: USB disconnect, device number 28 [ 973.186505][T18110] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 973.219377][T18110] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 973.250511][T18110] usb 1-1: config 1 interface 0 has no altsetting 0 [ 973.421757][T18110] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 973.446054][T28297] loop1: detected capacity change from 0 to 40427 [ 973.456556][T18110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.482738][T18110] usb 1-1: Product: syz [ 973.496206][T18110] usb 1-1: Manufacturer: syz [ 973.500849][T18110] usb 1-1: SerialNumber: syz [ 973.509721][T28297] F2FS-fs (loop1): invalid crc value [ 973.539258][T28279] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 973.555321][T28297] F2FS-fs (loop1): Found nat_bits in checkpoint [ 973.565822][T28336] loop2: detected capacity change from 0 to 256 [ 973.623345][T28297] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 973.738832][T28297] F2FS-fs (loop1): Corrupted max_depth of 3: 4294967295 [ 974.010703][T28351] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 974.020655][T18110] usbhid 1-1:1.0: can't add hid device: -71 [ 974.027299][T18110] usbhid: probe of 1-1:1.0 failed with error -71 [ 974.052350][T18110] usb 1-1: USB disconnect, device number 39 [ 975.144936][T28398] loop0: detected capacity change from 0 to 4096 [ 975.185012][T28363] loop4: detected capacity change from 0 to 32768 [ 975.241939][T28398] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 975.277245][T28363] XFS (loop4): Mounting V5 Filesystem [ 975.394227][T28363] XFS (loop4): Ending clean mount [ 975.412286][T28363] XFS (loop4): Quotacheck needed: Please wait. [ 975.508313][T15019] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 975.532516][T28424] loop0: detected capacity change from 0 to 2048 [ 975.567633][T28363] XFS (loop4): Quotacheck: Done. [ 975.633014][ T4180] XFS (loop4): Unmounting Filesystem [ 975.639766][T28424] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 975.784223][T15019] usb 2-1: Using ep0 maxpacket: 16 [ 975.802897][T28432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10545'. [ 975.857713][T28432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10545'. [ 975.910441][T28436] overlayfs: missing 'workdir' [ 975.950539][T15019] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 975.986512][T15019] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.044819][T15019] usb 2-1: config 0 has no interface number 0 [ 976.176074][T28446] program syz.2.10551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 976.265409][T15019] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 976.274773][T15019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.321703][T15019] usb 2-1: Product: syz [ 976.325921][T15019] usb 2-1: Manufacturer: syz [ 976.339348][T28455] netlink: 'syz.2.10554': attribute type 10 has an invalid length. [ 976.361525][T28455] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10554'. [ 976.368220][T15019] usb 2-1: SerialNumber: syz [ 976.394453][T28455] device ipvlan1 entered promiscuous mode [ 976.403126][T15019] usb 2-1: config 0 descriptor?? [ 976.419059][T28460] overlayfs: missing 'lowerdir' [ 976.439492][T28455] bridge0: port 3(ipvlan1) entered blocking state [ 976.439610][T28455] bridge0: port 3(ipvlan1) entered disabled state [ 976.457100][T28455] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 976.460592][T15019] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 976.499689][T15019] usb 2-1: No valid video chain found. [ 976.508483][T28462] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10558'. [ 976.580887][T28462] netlink: 'syz.3.10558': attribute type 1 has an invalid length. [ 976.738339][ T4307] usb 2-1: USB disconnect, device number 44 [ 976.820523][T28476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10565'. [ 977.057127][T28492] device netdevsim0 entered promiscuous mode [ 977.092463][T28492] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 977.255192][T28504] loop4: detected capacity change from 0 to 64 [ 977.358578][T28510] [U] vÔ3¸Âfù¾"WçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 977.384127][T28510] [U] J"—e:ÀÆ" [ 977.994569][T28558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10606'. [ 978.068156][T28551] loop0: detected capacity change from 0 to 4096 [ 978.081373][T28562] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10608'. [ 978.172877][T28551] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 978.271793][T28551] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 978.282764][T28551] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 978.320313][T28551] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 978.603722][T28582] loop2: detected capacity change from 0 to 4096 [ 978.700606][T28592] netlink: 'syz.4.10623': attribute type 21 has an invalid length. [ 978.737353][T28547] loop1: detected capacity change from 0 to 32768 [ 978.785987][T28582] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 978.881675][T28547] XFS (loop1): Mounting V5 Filesystem [ 978.995133][T28547] XFS (loop1): Ending clean mount [ 979.029925][T28547] XFS (loop1): Quotacheck needed: Please wait. [ 979.147344][T28622] loop4: detected capacity change from 0 to 512 [ 979.163249][T28547] XFS (loop1): Quotacheck: Done. [ 979.312095][ T4168] XFS (loop1): Unmounting Filesystem [ 979.340638][T28622] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 979.356422][T28622] ext4 filesystem being mounted at /2065/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 979.449923][T28632] cgroup: No subsys list or none specified [ 979.624134][T19553] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 979.663329][T28640] netlink: 'syz.0.10641': attribute type 1 has an invalid length. [ 979.916217][T28649] netlink: 'syz.0.10646': attribute type 10 has an invalid length. [ 979.924910][T28649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10646'. [ 979.935740][T28649] device ipvlan1 entered promiscuous mode [ 979.955789][T28649] bridge0: port 3(ipvlan1) entered blocking state [ 979.962445][T28649] bridge0: port 3(ipvlan1) entered disabled state [ 979.972881][T28649] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 979.990344][T28651] loop4: detected capacity change from 0 to 1024 [ 980.007968][T19553] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.036560][T19553] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 980.037100][T15019] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 980.091308][T19553] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 980.127601][T19553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.154925][T19553] usb 4-1: config 0 descriptor?? [ 980.213053][T19553] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input64 [ 980.390421][T28664] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10652'. [ 980.445181][ T3532] bcm5974 4-1:0.0: could not read from device [ 980.479513][T19553] usb 4-1: USB disconnect, device number 30 [ 980.488448][T15019] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 980.514427][T15019] usb 3-1: config 0 has no interface number 0 [ 980.531859][T15019] usb 3-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 980.584000][T15019] usb 3-1: config 0 interface 29 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 980.655021][T28675] netlink: 'syz.1.10658': attribute type 1 has an invalid length. [ 980.690030][T28675] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.10658'. [ 980.694845][T28679] loop0: detected capacity change from 0 to 512 [ 980.805985][T15019] usb 3-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=60.e8 [ 980.819442][T15019] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.843553][T28679] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000008,minixdf,,errors=continue. Quota mode: writeback. [ 980.859704][T15019] usb 3-1: Product: syz [ 980.863962][T15019] usb 3-1: Manufacturer: syz [ 980.868669][T15019] usb 3-1: SerialNumber: syz [ 980.883412][T28679] ext4 filesystem being mounted at /2207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 980.905275][T15019] usb 3-1: config 0 descriptor?? [ 980.937242][T28642] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 980.960791][T15019] HFC-S_USB: probe of 3-1:0.29 failed with error -5 [ 981.210076][T15023] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 981.232571][T15019] usb 3-1: USB disconnect, device number 117 [ 981.492810][T15023] usb 2-1: Using ep0 maxpacket: 16 [ 981.621444][T15023] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.639136][T15023] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 981.737131][T28693] loop0: detected capacity change from 0 to 32768 [ 981.821630][T28693] (syz.0.10665,28693,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 981.856726][T15023] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 981.876718][T15023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.909656][T28693] (syz.0.10665,28693,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 981.931037][T15023] usb 2-1: Product: syz [ 981.935304][T15023] usb 2-1: Manufacturer: syz [ 981.939958][T15023] usb 2-1: SerialNumber: syz [ 981.970430][T15023] r8152-cfgselector 2-1: config 0 descriptor?? [ 982.010049][T28693] JBD2: Ignoring recovery information on journal [ 982.185696][T28693] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 982.188478][T28716] loop4: detected capacity change from 0 to 32768 [ 982.284745][T15023] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 982.352279][T28716] XFS (loop4): Mounting V5 Filesystem [ 982.367370][ T4167] ocfs2: Unmounting device (7,0) on (node local) [ 982.523141][T15023] usb 2-1: USB disconnect, device number 45 [ 982.525594][T28716] XFS (loop4): Ending clean mount [ 982.550613][T28716] XFS (loop4): Quotacheck needed: Please wait. [ 982.644229][T28716] XFS (loop4): Quotacheck: Done. [ 982.647529][T18110] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 982.744135][ T4180] XFS (loop4): Unmounting Filesystem [ 982.914712][T18110] usb 3-1: Using ep0 maxpacket: 8 [ 982.943402][T28760] netlink: 'syz.0.10694': attribute type 1 has an invalid length. [ 983.048529][T28764] Unsupported ieee802154 address type: 0 [ 983.063907][T18110] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 983.092145][T18110] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 983.131829][T18110] usb 3-1: config 6 has no interface number 0 [ 983.139767][T18110] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 983.176452][T18110] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 983.390350][T18110] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 983.406610][T15019] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 983.406809][T28780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10704'. [ 983.423628][T18110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.431786][T18110] usb 3-1: Product: syz [ 983.436669][T18110] usb 3-1: Manufacturer: syz [ 983.445030][T18110] usb 3-1: SerialNumber: syz [ 983.498843][T18110] hso 3-1:6.2: Failed to find INT IN ep [ 983.674887][T28786] loop3: detected capacity change from 0 to 4096 [ 983.806539][T15023] usb 3-1: USB disconnect, device number 118 [ 983.844885][T15019] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 983.855064][T15019] usb 1-1: config 2 interface 0 has no altsetting 0 [ 983.917365][T28786] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 984.080484][T15019] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 984.114820][T15019] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.140287][T15019] usb 1-1: Product: syz [ 984.154732][T15019] usb 1-1: Manufacturer: syz [ 984.159422][T15019] usb 1-1: SerialNumber: syz [ 984.290666][T15019] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 984.304517][T15019] usb 1-1: selecting invalid altsetting 0 [ 984.334177][T15019] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 984.481915][T15019] usb 1-1: USB disconnect, device number 40 [ 984.896864][T28834] loop2: detected capacity change from 0 to 1024 [ 984.953156][T28838] loop4: detected capacity change from 0 to 512 [ 985.068423][T28838] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 985.135810][T28842] loop1: detected capacity change from 0 to 4096 [ 985.181190][T28838] ext4 filesystem being mounted at /2086/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 985.426922][T28856] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 985.508977][T28856] VFS: Can't find a romfs filesystem on dev nullb0. [ 985.508977][T28856] [ 985.543580][T28842] ntfs3: loop1: failed to convert "046c" to maccroatian [ 986.564245][T28867] loop4: detected capacity change from 0 to 32768 [ 986.602911][ T4318] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 986.729999][T28867] [ 986.729999][T28867] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 986.729999][T28867] [ 986.775479][T28906] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 986.793785][T28867] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 986.793785][T28867] [ 986.864325][T19553] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 986.872161][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 986.893235][ T4233] read_mapping_page failed! [ 986.898452][ T4233] ERROR: (device loop4): txCommit: [ 986.898452][ T4233] [ 986.922836][ T4233] jfs_write_inode: jfs_commit_inode failed! [ 986.953345][ T4180] [ 986.953345][ T4180] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 986.953345][ T4180] [ 986.978954][ T4180] [ 986.978954][ T4180] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 986.978954][ T4180] [ 987.012039][ T4318] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 987.030573][ T4318] usb 3-1: config 0 has no interface number 0 [ 987.151878][T19553] usb 4-1: Using ep0 maxpacket: 32 [ 987.215171][ T4318] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 987.237563][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.261365][ T4318] usb 3-1: Product: syz [ 987.265671][ T4318] usb 3-1: Manufacturer: syz [ 987.282920][T19553] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.294297][ T4318] usb 3-1: SerialNumber: syz [ 987.309427][T19553] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.321423][ T4318] usb 3-1: config 0 descriptor?? [ 987.396991][T28928] loop0: detected capacity change from 0 to 128 [ 987.443592][T28928] EXT4-fs warning (device loop0): ext4_fill_super:3982: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 987.469283][T19553] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 987.474753][T28928] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 987.478365][T19553] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 987.503276][T19553] usb 4-1: Product: syz [ 987.507643][T19553] usb 4-1: Manufacturer: syz [ 987.579226][T28936] loop1: detected capacity change from 0 to 256 [ 987.597279][ T4318] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 987.604371][T19553] hub 4-1:4.0: USB hub found [ 987.614099][ T4318] usb 3-1: Failed to initialize entity for entity 6 [ 987.647434][ T4318] usb 3-1: Failed to register entities (-22). [ 987.676812][T28928] Option '§òž©€ÍR‹XÜw·ãN÷gù^ÎòüºÒü>8ó4]_)ç' to dns_resolver key: bad/missing value [ 987.811119][T28942] x_tables: ip_tables: osf match: only valid for protocol 6 [ 987.811582][T19553] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 987.822996][ T4307] usb 3-1: USB disconnect, device number 119 [ 987.840931][T28946] netlink: 216 bytes leftover after parsing attributes in process `syz.1.10779'. [ 988.012113][T28953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10785'. [ 988.050221][T28953] IPv6: Can't replace route, no match found [ 988.249869][T15019] usb 4-1: USB disconnect, device number 31 [ 988.612186][T28991] loop0: detected capacity change from 0 to 256 [ 988.741234][T28991] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 988.753965][T28997] SET target dimension over the limit! [ 989.587293][T28990] loop2: detected capacity change from 0 to 32768 [ 989.676643][T28990] ERROR: (device loop2): diAllocBit: iag inconsistent [ 989.676643][T28990] [ 989.709441][T28990] ERROR: (device loop2): remounting filesystem as read-only [ 989.722722][T28990] ialloc: diAlloc returned -5! [ 989.949119][T19553] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 990.216258][ T4215] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 990.237394][T19553] usb 2-1: Using ep0 maxpacket: 16 [ 990.366590][T19553] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.389695][T19553] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 990.408691][T19553] usb 2-1: New USB device found, idVendor=046b, idProduct=0000, bcdDevice= 0.00 [ 990.418133][T19553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.656362][ T4215] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 990.670036][ T4215] usb 4-1: config 0 has no interface number 0 [ 990.700990][ T4215] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 990.732072][T19553] usb 2-1: string descriptor 0 read error: -71 [ 990.740700][ T4215] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 990.755753][T19553] usb 2-1: 0:2 : does not exist [ 990.783883][ T4215] usb 4-1: config 0 interface 255 has no altsetting 0 [ 990.794546][ T4215] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 990.807722][T19553] usb 2-1: USB disconnect, device number 46 [ 990.822097][ T4215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.869687][ T4215] usb 4-1: config 0 descriptor?? [ 990.939715][ T4215] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 991.021255][T29109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10857'. [ 991.086271][ T4392] udevd[4392]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 991.216420][ T4215] usb 4-1: USB disconnect, device number 32 [ 991.296061][ T4318] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 991.357886][T29119] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10862'. [ 991.367435][T29119] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10862'. [ 991.378774][T29119] netlink: 'syz.1.10862': attribute type 5 has an invalid length. [ 991.387620][T29119] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10862'. [ 991.499200][T18110] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 991.560476][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 991.691835][ T4318] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 991.709553][ T4318] usb 1-1: config 1 has no interface number 0 [ 991.729730][ T4318] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 991.751291][ T4318] usb 1-1: config 1 interface 236 has no altsetting 0 [ 991.758867][T18110] usb 3-1: Using ep0 maxpacket: 16 [ 991.880859][T29143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10874'. [ 991.890494][T18110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.908232][T18110] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 991.951883][ T4318] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 991.971591][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.982259][ T4318] usb 1-1: Product: syz [ 991.986470][ T4318] usb 1-1: Manufacturer: syz [ 991.991606][ T4318] usb 1-1: SerialNumber: syz [ 992.012977][T29107] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 992.037688][ T4318] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected [ 992.087350][T18110] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 992.107512][T18110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.133950][T18110] usb 3-1: Product: syz [ 992.148500][T18110] usb 3-1: Manufacturer: syz [ 992.153643][T18110] usb 3-1: SerialNumber: syz [ 992.171388][T29154] nfs: Deprecated parameter 'nointr' [ 992.270428][T29133] loop1: detected capacity change from 0 to 32768 [ 992.299639][T29133] (syz.1.10868,29133,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 992.311401][T19553] usb 1-1: USB disconnect, device number 41 [ 992.327707][T29133] (syz.1.10868,29133,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 992.353094][T29133] JBD2: Ignoring recovery information on journal [ 992.407988][T29133] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 992.493786][T18110] usb 3-1: 0:2 : does not exist [ 992.498788][T18110] usb 3-1: unit 9 not found! [ 992.529520][ T4168] ocfs2: Unmounting device (7,1) on (node local) [ 992.559422][T18110] usb 3-1: USB disconnect, device number 120 [ 992.559781][ T4215] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 992.799184][T29172] device netdevsim0 entered promiscuous mode [ 992.844820][ T4392] udevd[4392]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.005303][T29170] loop4: detected capacity change from 0 to 32768 [ 993.073127][T29179] netlink: 'syz.1.10889': attribute type 3 has an invalid length. [ 993.081222][T29179] netlink: 'syz.1.10889': attribute type 3 has an invalid length. [ 993.153059][T29179] netlink: 'syz.1.10889': attribute type 3 has an invalid length. [ 993.162878][T29179] netlink: 'syz.1.10889': attribute type 3 has an invalid length. [ 993.168148][T29170] JBD2: Ignoring recovery information on journal [ 993.173531][T29179] netlink: 'syz.1.10889': attribute type 3 has an invalid length. [ 993.186005][T29179] netlink: 'syz.1.10889': attribute type 3 has an invalid length. [ 993.194511][T29179] netlink: 'syz.1.10889': attribute type 3 has an invalid length. [ 993.199626][ T4215] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 993.202893][T29179] netlink: 'syz.1.10889': attribute type 3 has an invalid length. [ 993.220662][T29179] netlink: 'syz.1.10889': attribute type 3 has an invalid length. [ 993.239555][T29185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 993.274096][ T4215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.282286][ T4215] usb 4-1: Product: syz [ 993.322503][ T4215] usb 4-1: Manufacturer: syz [ 993.334045][ T4215] usb 4-1: SerialNumber: syz [ 993.364376][T29170] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 993.378147][ T4215] usb 4-1: config 0 descriptor?? [ 993.447318][ T4215] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 993.518566][T29170] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 993.548190][T29198] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.10898'. [ 993.605577][T29170] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 993.632288][T29170] OCFS2: File system is now read-only. [ 993.632499][T29170] (syz.4.10886,29170,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 993.632535][T29170] (syz.4.10886,29170,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 993.632564][T29170] (syz.4.10886,29170,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 993.632591][T29170] (syz.4.10886,29170,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 993.632618][T29170] (syz.4.10886,29170,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 993.632645][T29170] (syz.4.10886,29170,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 993.633086][T29170] (syz.4.10886,29170,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 993.633234][T29170] (syz.4.10886,29170,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 993.633263][T29170] (syz.4.10886,29170,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 993.633756][T29170] (syz.4.10886,29170,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 993.633857][T29170] (syz.4.10886,29170,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 993.633886][T29170] (syz.4.10886,29170,0):ocfs2_symlink:1911 ERROR: status = -30 [ 993.647105][T29170] (syz.4.10886,29170,0):ocfs2_symlink:2065 ERROR: status = -30 [ 993.771430][ T4180] ocfs2: Unmounting device (7,4) on (node local) [ 993.854188][ T26] audit: type=1326 audit(1743476872.997:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.2.10904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d71889169 code=0x7ffc0000 [ 993.854237][ T26] audit: type=1326 audit(1743476872.997:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.2.10904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d71889169 code=0x7ffc0000 [ 993.883284][ T26] audit: type=1326 audit(1743476873.016:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.2.10904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f7d71889169 code=0x7ffc0000 [ 993.883337][ T26] audit: type=1326 audit(1743476873.016:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.2.10904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d71889169 code=0x7ffc0000 [ 993.883376][ T26] audit: type=1326 audit(1743476873.016:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29208 comm="syz.2.10904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d71889169 code=0x7ffc0000 [ 993.942687][ T4215] sonixb 4-1:0.0: Error writing register 01: -71 [ 993.942758][ T4215] sonixb: probe of 4-1:0.0 failed with error -71 [ 993.953361][ T4215] usb 4-1: USB disconnect, device number 33 [ 994.663598][ T4215] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 994.736723][T29213] loop2: detected capacity change from 0 to 32768 [ 994.847191][T29213] attempt to access beyond end of device [ 994.847191][T29213] loop2: rw=1, want=4680040, limit=32768 [ 994.872638][T29242] loop1: detected capacity change from 0 to 2048 [ 994.877596][T29213] metapage_write_end_io: I/O error [ 994.915155][T29246] openvswitch: netlink: Flow key attr not present in new flow. [ 994.918667][T29213] blkno = 8ed2c, nblocks = 1 [ 994.929651][ T4215] usb 5-1: Using ep0 maxpacket: 32 [ 994.938727][T29242] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 994.953935][T29213] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 994.953935][T29213] [ 994.994033][T29213] ERROR: (device loop2): remounting filesystem as read-only [ 995.044612][T29242] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000024,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,errors=remount-ro,norecovery,nombcache,bsddf,. Quota mode: none. [ 995.048111][T29213] UFO tlock:0xffffc900028a2090 [ 995.134405][ T4215] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 995.153410][ T4215] usb 5-1: config 0 has no interface number 0 [ 995.331551][ T276] blkno = 8ed2c, nblocks = 4 [ 995.336189][ T276] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 995.336189][ T276] [ 995.395511][ T4169] attempt to access beyond end of device [ 995.395511][ T4169] loop2: rw=1, want=4680040, limit=32768 [ 995.412339][ T4215] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 995.419214][ T4169] metapage_write_end_io: I/O error [ 995.428539][ T4169] JFS: metapage_get_blocks failed [ 995.436121][ T4169] JFS: metapage_get_blocks failed [ 995.441648][ T4169] JFS: metapage_get_blocks failed [ 995.448547][ T4169] JFS: metapage_get_blocks failed [ 995.462372][ T4215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.498285][ T4215] usb 5-1: Product: syz [ 995.502504][ T4215] usb 5-1: Manufacturer: syz [ 995.507128][ T4215] usb 5-1: SerialNumber: syz [ 995.551945][ T4215] usb 5-1: config 0 descriptor?? [ 995.606920][ T4215] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 995.624728][ T4215] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 995.762336][T29259] loop3: detected capacity change from 0 to 32768 [ 995.850163][T29259] (syz.3.10927,29259,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 995.864004][ T4215] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 995.912526][T29259] (syz.3.10927,29259,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 995.936615][T29284] loop1: detected capacity change from 0 to 1024 [ 995.984904][T29259] JBD2: Ignoring recovery information on journal [ 996.006207][T29284] hfsplus: Filesystem is marked locked, mounting read-only. [ 996.095785][T29284] hfsplus: filesystem is marked locked, leaving read-only. [ 996.106922][ T4215] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 996.123407][ T4215] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 996.145334][ T4215] usb 5-1: USB disconnect, device number 30 [ 996.153039][ T4215] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 996.185679][T29259] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 996.341541][T29302] loop1: detected capacity change from 0 to 128 [ 996.395969][ T4174] ocfs2: Unmounting device (7,3) on (node local) [ 996.406948][T29302] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 996.434447][T29302] ext4 filesystem being mounted at /2106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 996.689662][T29313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10952'. [ 996.886657][T29321] loop1: detected capacity change from 0 to 512 [ 996.972376][T29321] EXT4-fs (loop1): inodes count not valid: 1 vs 32 [ 997.739615][T29371] validate_nla: 45 callbacks suppressed [ 997.739635][T29371] netlink: 'syz.3.10980': attribute type 13 has an invalid length. [ 997.801583][T29373] QAT: Stopping all acceleration devices. [ 997.849680][ T4215] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 998.138081][ T4215] usb 2-1: Using ep0 maxpacket: 16 [ 998.266883][ T4215] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 998.297313][ T4215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 998.330048][T14683] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 998.338367][ T4215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12592, setting to 1024 [ 998.374428][ T4215] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 998.416346][ T4215] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 998.512643][ T4215] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 998.544241][ T4215] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 998.552293][ T4215] usb 2-1: Manufacturer: syz [ 998.590223][ T4215] usb 2-1: config 0 descriptor?? [ 998.750041][T14683] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.972532][T14683] usb 3-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 998.990254][T14683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.999328][ T4215] rc_core: IR keymap rc-hauppauge not found [ 999.006334][ T4215] Registered IR keymap rc-empty [ 999.034884][T14683] usb 3-1: Product: syz [ 999.039901][T14683] usb 3-1: Manufacturer: syz [ 999.047120][T14683] usb 3-1: SerialNumber: syz [ 999.060661][ T4215] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 999.122317][ T4215] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 999.135727][T29424] loop4: detected capacity change from 0 to 32768 [ 999.159392][ T4215] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 999.174206][ T4215] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input66 [ 999.197588][T29424] (syz.4.11003,29424,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 999.214045][T15019] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 999.222296][T29424] (syz.4.11003,29424,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 999.242637][T29424] JBD2: Ignoring recovery information on journal [ 999.250577][ T4215] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 999.282766][T29424] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 999.303712][ T4215] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 999.367413][ T4180] ocfs2: Unmounting device (7,4) on (node local) [ 999.385795][ T4215] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 999.422065][T14683] qmi_wwan 3-1:1.0: skipping garbage [ 999.430490][T14683] qmi_wwan 3-1:1.0: invalid descriptor buffer length [ 999.453015][ T4215] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 999.459933][T14683] qmi_wwan: probe of 3-1:1.0 failed with error -22 [ 999.477751][T14683] usb 3-1: USB disconnect, device number 121 [ 999.506560][ T4215] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 999.528221][T15019] usb 4-1: Using ep0 maxpacket: 32 [ 999.581836][ T4215] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 999.647507][ T4215] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 999.677828][T15019] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 999.698327][T15019] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.707050][ T4215] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 999.721506][T15019] usb 4-1: config 0 descriptor?? [ 999.773905][ T4215] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 999.776396][T15019] gspca_main: sq930x-2.14.0 probing 041e:403c [ 999.804717][T29452] loop4: detected capacity change from 0 to 256 [ 999.848720][ T4215] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 999.903630][ T4215] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 999.922209][ T4215] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 999.985911][ T4215] usb 2-1: USB disconnect, device number 47 [ 1000.167003][T29463] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1000.244408][T15019] gspca_sq930x: ucbus_write failed -71 [ 1000.249968][T15019] sq930x: probe of 4-1:0.0 failed with error -71 [ 1000.287622][T15019] usb 4-1: USB disconnect, device number 34 [ 1000.455429][T29448] loop0: detected capacity change from 0 to 32768 [ 1000.468748][T29475] netlink: 'syz.4.11028': attribute type 3 has an invalid length. [ 1000.539707][T29484] loop4: detected capacity change from 0 to 256 [ 1000.555079][T29448] XFS: ikeep mount option is deprecated. [ 1000.562411][ T150] block nbd1: Attempted send on invalid socket [ 1000.569306][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1000.581368][T29478] XFS (nbd1): SB validate failed with error -5. [ 1000.690223][T29484] FAT-fs (loop4): Directory bread(block 64) failed [ 1000.724822][T29484] FAT-fs (loop4): Directory bread(block 65) failed [ 1000.753922][T29484] FAT-fs (loop4): Directory bread(block 66) failed [ 1000.791370][T29496] netlink: 'syz.2.11035': attribute type 15 has an invalid length. [ 1000.802496][T29484] FAT-fs (loop4): Directory bread(block 67) failed [ 1000.805064][T29448] XFS (loop0): Mounting V5 Filesystem [ 1000.810933][T29484] FAT-fs (loop4): Directory bread(block 68) failed [ 1000.839183][T29484] FAT-fs (loop4): Directory bread(block 69) failed [ 1000.864649][T29484] FAT-fs (loop4): Directory bread(block 70) failed [ 1000.926957][T29484] FAT-fs (loop4): Directory bread(block 71) failed [ 1000.960082][T29484] FAT-fs (loop4): Directory bread(block 72) failed [ 1000.977105][T29484] FAT-fs (loop4): Directory bread(block 73) failed [ 1001.045712][T29448] XFS (loop0): Ending clean mount [ 1001.069768][T29448] XFS (loop0): Quotacheck needed: Please wait. [ 1001.098949][T29507] libceph: resolve '00' (ret=-3): failed [ 1001.199228][T29448] XFS (loop0): Quotacheck: Done. [ 1001.266588][T29448] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x42b dinode [ 1001.280363][T29513] AppArmor: change_hat: Invalid input 'G' [ 1001.336888][T29448] XFS (loop0): Unmount and run xfs_repair [ 1001.377836][T29448] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1001.408811][T29448] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 1001.462312][T29448] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1001.505038][T29448] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1001.544037][T29448] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1001.561507][T29529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11049'. [ 1001.584247][T29448] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1001.613773][T29531] SET target dimension over the limit! [ 1001.644873][T29448] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1001.653780][T29448] 00000060: ff ff ff ff 65 3f 0d b5 00 00 00 00 00 00 00 00 ....e?.......... [ 1001.713330][T29448] 00000070: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 ................ [ 1001.759550][T29537] loop1: detected capacity change from 0 to 256 [ 1001.767385][T29448] XFS (loop0): Internal error xfs_trans_cancel at line 954 of file fs/xfs/xfs_trans.c. Caller xfs_create+0x9f7/0x1370 [ 1001.789172][T29448] CPU: 1 PID: 29448 Comm: syz.0.11025 Not tainted 5.15.179-syzkaller #0 [ 1001.797589][T29448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1001.807684][T29448] Call Trace: [ 1001.810992][T29448] [ 1001.813946][T29448] dump_stack_lvl+0x1e3/0x2d0 [ 1001.818666][T29448] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1001.824329][T29448] ? xfs_init_new_inode+0x1e8/0x1100 [ 1001.829651][T29448] ? rwsem_write_trylock+0x166/0x210 [ 1001.834986][T29448] ? xfs_error_report+0x8e/0xd0 [ 1001.839868][T29448] ? xfs_create+0x9f7/0x1370 [ 1001.844483][T29448] ? xfs_create+0x9f7/0x1370 [ 1001.849103][T29448] xfs_trans_cancel+0x1c9/0x410 [ 1001.853982][T29448] ? xfs_create+0x9f7/0x1370 [ 1001.858604][T29448] xfs_create+0x9f7/0x1370 [ 1001.863082][T29448] ? xfs_inode_inherit_flags2+0x340/0x340 [ 1001.868861][T29448] ? posix_acl_create+0x155/0x420 [ 1001.873929][T29448] xfs_generic_create+0x426/0xd00 [ 1001.878986][T29448] ? xfs_vn_tmpfile+0x40/0x40 [ 1001.883681][T29448] ? from_kgid+0x1a3/0x730 [ 1001.888119][T29448] ? common_perm+0x16a/0x1c0 [ 1001.892730][T29448] ? apparmor_path_mkdir+0x204/0x2a0 [ 1001.898033][T29448] ? generic_permission+0x21c/0x4f0 [ 1001.903366][T29448] ? inode_permission+0xf7/0x450 [ 1001.908350][T29448] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 1001.913404][T29448] ? security_inode_mkdir+0xb4/0x100 [ 1001.918726][T29448] vfs_mkdir+0x3b6/0x590 [ 1001.923007][T29448] do_mkdirat+0x260/0x520 [ 1001.927372][T29448] ? vfs_mkdir+0x590/0x590 [ 1001.931815][T29448] ? getname_flags+0x1ec/0x4e0 [ 1001.936615][T29448] __x64_sys_mkdirat+0x85/0x90 [ 1001.941416][T29448] do_syscall_64+0x3b/0xb0 [ 1001.945863][T29448] ? clear_bhb_loop+0x15/0x70 [ 1001.950562][T29448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1001.956933][T29448] RIP: 0033:0x7f7b12b289d7 [ 1001.961391][T29448] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.981118][T29448] RSP: 002b:00007f7b10992e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1001.989572][T29448] RAX: ffffffffffffffda RBX: 00007f7b10992ef0 RCX: 00007f7b12b289d7 [ 1001.997668][T29448] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c [ 1002.005667][T29448] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000 [ 1002.013665][T29448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100 [ 1002.021666][T29448] R13: 00007f7b10992eb0 R14: 0000000000000000 R15: 0000000000000000 [ 1002.029861][T29448] [ 1002.074383][T29547] netlink: 'syz.4.11058': attribute type 61 has an invalid length. [ 1002.462284][T29543] loop2: detected capacity change from 0 to 32768 [ 1002.559007][T29543] (syz.2.11056,29543,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1002.606383][T29574] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.11069'. [ 1002.639231][T29543] (syz.2.11056,29543,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1002.709446][T29543] JBD2: Ignoring recovery information on journal [ 1002.745033][T29448] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1e2/0x410 (fs/xfs/xfs_trans.c:955). Shutting down filesystem. [ 1002.781894][T29448] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 1002.848330][T29543] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1002.865676][ T4167] XFS (loop0): Unmounting Filesystem [ 1002.955178][T29583] loop1: detected capacity change from 0 to 512 [ 1003.030515][T29583] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1003.112629][T29583] ================================================================== [ 1003.121354][T29583] BUG: KASAN: use-after-free in __ext4_iget+0x2ee/0x3f00 [ 1003.128412][T29583] Read of size 8 at addr ffff88807193a060 by task syz.1.11072/29583 [ 1003.136407][T29583] [ 1003.138745][T29583] CPU: 0 PID: 29583 Comm: syz.1.11072 Not tainted 5.15.179-syzkaller #0 [ 1003.147096][T29583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1003.157177][T29583] Call Trace: [ 1003.160477][T29583] [ 1003.163438][T29583] dump_stack_lvl+0x1e3/0x2d0 [ 1003.168239][T29583] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1003.173905][T29583] ? _printk+0xd1/0x120 [ 1003.178089][T29583] ? __wake_up_klogd+0xcc/0x100 [ 1003.182969][T29583] ? panic+0x860/0x860 [ 1003.186822][ T4169] ocfs2: Unmounting device (7,2) on (node local) [ 1003.187056][T29583] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 1003.198852][T29583] print_address_description+0x63/0x3b0 [ 1003.204425][T29583] ? __ext4_iget+0x2ee/0x3f00 [ 1003.209147][T29583] kasan_report+0x16b/0x1c0 [ 1003.213762][T29583] ? __ext4_iget+0x2ee/0x3f00 [ 1003.218470][T29583] __ext4_iget+0x2ee/0x3f00 [ 1003.223013][T29583] ? alloc_workqueue+0x1321/0x1460 [ 1003.228171][T29583] ? ext4_get_projid+0x140/0x140 [ 1003.233132][T29583] ? ext4_fill_super+0x7da8/0xa110 [ 1003.238276][T29583] ? mb_cache_create+0x452/0x550 [ 1003.243245][T29583] ext4_fill_super+0x7e9d/0xa110 [ 1003.248222][T29583] ? ext4_mount+0x40/0x40 [ 1003.252602][T29583] ? vscnprintf+0x80/0x80 [ 1003.256988][T29583] ? set_blocksize+0x1ec/0x370 [ 1003.261762][T29583] mount_bdev+0x2c9/0x3f0 [ 1003.266095][T29583] ? ext4_mount+0x40/0x40 [ 1003.270432][T29583] legacy_get_tree+0xeb/0x180 [ 1003.275119][T29583] ? ext4_errno_to_code+0x140/0x140 [ 1003.280323][T29583] vfs_get_tree+0x88/0x270 [ 1003.284739][T29583] do_new_mount+0x2ba/0xb40 [ 1003.289247][T29583] ? do_move_mount_old+0x160/0x160 [ 1003.294366][T29583] ? user_path_at_empty+0x12b/0x180 [ 1003.299566][T29583] __se_sys_mount+0x2d5/0x3c0 [ 1003.304248][T29583] ? __x64_sys_mount+0xc0/0xc0 [ 1003.309056][T29583] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1003.315049][T29583] ? lockdep_hardirqs_on+0x94/0x130 [ 1003.320255][T29583] ? __x64_sys_mount+0x1c/0xc0 [ 1003.325020][T29583] do_syscall_64+0x3b/0xb0 [ 1003.329453][T29583] ? clear_bhb_loop+0x15/0x70 [ 1003.334135][T29583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1003.340030][T29583] RIP: 0033:0x7f8ad65b990a [ 1003.344450][T29583] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.364060][T29583] RSP: 002b:00007f8ad4420e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1003.372489][T29583] RAX: ffffffffffffffda RBX: 00007f8ad4420ef0 RCX: 00007f8ad65b990a [ 1003.380470][T29583] RDX: 0000200000000280 RSI: 0000200000000080 RDI: 00007f8ad4420eb0 [ 1003.388445][T29583] RBP: 0000200000000280 R08: 00007f8ad4420ef0 R09: 0000000002000759 [ 1003.396423][T29583] R10: 0000000002000759 R11: 0000000000000246 R12: 0000200000000080 [ 1003.404393][T29583] R13: 00007f8ad4420eb0 R14: 000000000000051b R15: 000000000000002c [ 1003.412378][T29583] [ 1003.415392][T29583] [ 1003.417708][T29583] Allocated by task 5639: [ 1003.422024][T29583] __kasan_slab_alloc+0x8e/0xc0 [ 1003.426877][T29583] slab_post_alloc_hook+0x53/0x380 [ 1003.431984][T29583] kmem_cache_alloc+0xf3/0x280 [ 1003.436755][T29583] reiserfs_alloc_inode+0x19/0xb0 [ 1003.441790][T29583] iget5_locked+0x9c/0x260 [ 1003.446210][T29583] reiserfs_fill_super+0x1140/0x2690 [ 1003.451497][T29583] mount_bdev+0x2c9/0x3f0 [ 1003.455832][T29583] legacy_get_tree+0xeb/0x180 [ 1003.460630][T29583] vfs_get_tree+0x88/0x270 [ 1003.465060][T29583] do_new_mount+0x2ba/0xb40 [ 1003.469622][T29583] __se_sys_mount+0x2d5/0x3c0 [ 1003.474303][T29583] do_syscall_64+0x3b/0xb0 [ 1003.478723][T29583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1003.484613][T29583] [ 1003.486928][T29583] Last potentially related work creation: [ 1003.492632][T29583] kasan_save_stack+0x36/0x60 [ 1003.497398][T29583] kasan_record_aux_stack+0xba/0x100 [ 1003.502902][T29583] call_rcu+0x1c4/0xa70 [ 1003.507072][T29583] evict+0x87d/0x930 [ 1003.510967][T29583] evict_inodes+0x668/0x700 [ 1003.515468][T29583] generic_shutdown_super+0x94/0x310 [ 1003.520759][T29583] kill_block_super+0x7a/0xe0 [ 1003.525434][T29583] deactivate_locked_super+0xa0/0x110 [ 1003.530858][T29583] cleanup_mnt+0x44e/0x500 [ 1003.535378][T29583] task_work_run+0x129/0x1a0 [ 1003.540003][T29583] exit_to_user_mode_loop+0x106/0x130 [ 1003.545474][T29583] exit_to_user_mode_prepare+0xb1/0x140 [ 1003.551022][T29583] syscall_exit_to_user_mode+0x5d/0x240 [ 1003.556563][T29583] do_syscall_64+0x47/0xb0 [ 1003.560979][T29583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1003.566871][T29583] [ 1003.569187][T29583] Second to last potentially related work creation: [ 1003.575776][T29583] kasan_save_stack+0x36/0x60 [ 1003.580540][T29583] kasan_record_aux_stack+0xba/0x100 [ 1003.585822][T29583] call_rcu+0x1c4/0xa70 [ 1003.589982][T29583] evict+0x87d/0x930 [ 1003.593875][T29583] reiserfs_iget+0x1f6/0x2f0 [ 1003.598461][T29583] finish_unfinished+0x9b9/0x15c0 [ 1003.603482][T29583] reiserfs_fill_super+0x22e8/0x2690 [ 1003.608886][T29583] mount_bdev+0x2c9/0x3f0 [ 1003.613224][T29583] legacy_get_tree+0xeb/0x180 [ 1003.617901][T29583] vfs_get_tree+0x88/0x270 [ 1003.622310][T29583] do_new_mount+0x2ba/0xb40 [ 1003.626809][T29583] __se_sys_mount+0x2d5/0x3c0 [ 1003.631477][T29583] do_syscall_64+0x3b/0xb0 [ 1003.635893][T29583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1003.641870][T29583] [ 1003.644192][T29583] The buggy address belongs to the object at ffff888071939a80 [ 1003.644192][T29583] which belongs to the cache reiser_inode_cache of size 1568 [ 1003.658944][T29583] The buggy address is located 1504 bytes inside of [ 1003.658944][T29583] 1568-byte region [ffff888071939a80, ffff88807193a0a0) [ 1003.672388][T29583] The buggy address belongs to the page: [ 1003.678011][T29583] page:ffffea0001c64e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807193cf80 pfn:0x71938 [ 1003.689475][T29583] head:ffffea0001c64e00 order:3 compound_mapcount:0 compound_pincount:0 [ 1003.697797][T29583] memcg:ffff888024ecaa01 [ 1003.702027][T29583] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1003.710104][T29583] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888145f90c80 [ 1003.718685][T29583] raw: ffff88807193cf80 000000008013000b 00000001ffffffff ffff888024ecaa01 [ 1003.727254][T29583] page dumped because: kasan: bad access detected [ 1003.733674][T29583] page_owner tracks the page as allocated [ 1003.739376][T29583] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4936, ts 108908833442, free_ts 105444530908 [ 1003.761859][T29583] get_page_from_freelist+0x3b78/0x3d40 [ 1003.767407][T29583] __alloc_pages+0x272/0x700 [ 1003.771993][T29583] new_slab+0xbb/0x4b0 [ 1003.776058][T29583] ___slab_alloc+0x6f6/0xe10 [ 1003.780642][T29583] kmem_cache_alloc+0x18e/0x280 [ 1003.785489][T29583] reiserfs_alloc_inode+0x19/0xb0 [ 1003.790508][T29583] iget5_locked+0x9c/0x260 [ 1003.794921][T29583] reiserfs_fill_super+0x1140/0x2690 [ 1003.800203][T29583] mount_bdev+0x2c9/0x3f0 [ 1003.804527][T29583] legacy_get_tree+0xeb/0x180 [ 1003.809198][T29583] vfs_get_tree+0x88/0x270 [ 1003.813610][T29583] do_new_mount+0x2ba/0xb40 [ 1003.818112][T29583] __se_sys_mount+0x2d5/0x3c0 [ 1003.822785][T29583] do_syscall_64+0x3b/0xb0 [ 1003.827198][T29583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1003.833091][T29583] page last free stack trace: [ 1003.837751][T29583] free_unref_page_prepare+0xc34/0xcf0 [ 1003.843207][T29583] free_unref_page+0x95/0x2d0 [ 1003.847877][T29583] __unfreeze_partials+0x1b7/0x210 [ 1003.852985][T29583] put_cpu_partial+0x132/0x1a0 [ 1003.857744][T29583] ___cache_free+0xe3/0x100 [ 1003.862240][T29583] qlist_free_all+0x36/0x90 [ 1003.866736][T29583] kasan_quarantine_reduce+0x162/0x180 [ 1003.872193][T29583] __kasan_slab_alloc+0x2f/0xc0 [ 1003.877041][T29583] slab_post_alloc_hook+0x53/0x380 [ 1003.882167][T29583] kmem_cache_alloc+0xf3/0x280 [ 1003.886929][T29583] getname_flags+0xb8/0x4e0 [ 1003.891429][T29583] user_path_at_empty+0x2a/0x180 [ 1003.896377][T29583] do_readlinkat+0x114/0x3a0 [ 1003.900961][T29583] __x64_sys_readlink+0x7b/0x90 [ 1003.905810][T29583] do_syscall_64+0x3b/0xb0 [ 1003.910225][T29583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1003.916117][T29583] [ 1003.918432][T29583] Memory state around the buggy address: [ 1003.924056][T29583] ffff888071939f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1003.932108][T29583] ffff888071939f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1003.940179][T29583] >ffff88807193a000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1003.948231][T29583] ^ [ 1003.955591][T29583] ffff88807193a080: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 1003.963645][T29583] ffff88807193a100: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 1003.971694][T29583] ================================================================== [ 1003.979743][T29583] Disabling lock debugging due to kernel taint [ 1004.007381][T29583] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1004.014623][T29583] CPU: 1 PID: 29583 Comm: syz.1.11072 Tainted: G B 5.15.179-syzkaller #0 [ 1004.024364][T29583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1004.034462][T29583] Call Trace: [ 1004.037741][T29583] [ 1004.040670][T29583] dump_stack_lvl+0x1e3/0x2d0 [ 1004.045374][T29583] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1004.051047][T29583] ? panic+0x860/0x860 [ 1004.055131][T29583] ? rcu_is_watching+0x11/0xa0 [ 1004.059893][T29583] ? preempt_schedule_common+0xa6/0xd0 [ 1004.065358][T29583] panic+0x318/0x860 [ 1004.069283][T29583] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1004.075473][T29583] ? check_panic_on_warn+0x1d/0xa0 [ 1004.080588][T29583] ? fb_is_primary_device+0xd0/0xd0 [ 1004.085784][T29583] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 1004.091759][T29583] ? _raw_spin_unlock+0x40/0x40 [ 1004.096607][T29583] check_panic_on_warn+0x7e/0xa0 [ 1004.101537][T29583] ? __ext4_iget+0x2ee/0x3f00 [ 1004.106230][T29583] end_report+0x6d/0xf0 [ 1004.110382][T29583] kasan_report+0x18e/0x1c0 [ 1004.114885][T29583] ? __ext4_iget+0x2ee/0x3f00 [ 1004.119572][T29583] __ext4_iget+0x2ee/0x3f00 [ 1004.124069][T29583] ? alloc_workqueue+0x1321/0x1460 [ 1004.129192][T29583] ? ext4_get_projid+0x140/0x140 [ 1004.134125][T29583] ? ext4_fill_super+0x7da8/0xa110 [ 1004.139234][T29583] ? mb_cache_create+0x452/0x550 [ 1004.144168][T29583] ext4_fill_super+0x7e9d/0xa110 [ 1004.149225][T29583] ? ext4_mount+0x40/0x40 [ 1004.153562][T29583] ? vscnprintf+0x80/0x80 [ 1004.157894][T29583] ? set_blocksize+0x1ec/0x370 [ 1004.162760][T29583] mount_bdev+0x2c9/0x3f0 [ 1004.167088][T29583] ? ext4_mount+0x40/0x40 [ 1004.171418][T29583] legacy_get_tree+0xeb/0x180 [ 1004.176104][T29583] ? ext4_errno_to_code+0x140/0x140 [ 1004.181305][T29583] vfs_get_tree+0x88/0x270 [ 1004.185713][T29583] do_new_mount+0x2ba/0xb40 [ 1004.190217][T29583] ? do_move_mount_old+0x160/0x160 [ 1004.195348][T29583] ? user_path_at_empty+0x12b/0x180 [ 1004.200540][T29583] __se_sys_mount+0x2d5/0x3c0 [ 1004.205231][T29583] ? __x64_sys_mount+0xc0/0xc0 [ 1004.209987][T29583] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1004.215958][T29583] ? lockdep_hardirqs_on+0x94/0x130 [ 1004.221160][T29583] ? __x64_sys_mount+0x1c/0xc0 [ 1004.225939][T29583] do_syscall_64+0x3b/0xb0 [ 1004.230348][T29583] ? clear_bhb_loop+0x15/0x70 [ 1004.235019][T29583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1004.241035][T29583] RIP: 0033:0x7f8ad65b990a [ 1004.245452][T29583] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.265323][T29583] RSP: 002b:00007f8ad4420e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1004.273785][T29583] RAX: ffffffffffffffda RBX: 00007f8ad4420ef0 RCX: 00007f8ad65b990a [ 1004.281763][T29583] RDX: 0000200000000280 RSI: 0000200000000080 RDI: 00007f8ad4420eb0 [ 1004.289848][T29583] RBP: 0000200000000280 R08: 00007f8ad4420ef0 R09: 0000000002000759 [ 1004.297815][T29583] R10: 0000000002000759 R11: 0000000000000246 R12: 0000200000000080 [ 1004.305777][T29583] R13: 00007f8ad4420eb0 R14: 000000000000051b R15: 000000000000002c [ 1004.313754][T29583] [ 1004.317055][T29583] Kernel Offset: disabled [ 1004.321416][T29583] Rebooting in 86400 seconds..