last executing test programs: 2.651163643s ago: executing program 0 (id=1469): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2.560283031s ago: executing program 4 (id=1471): r0 = syz_open_dev$vim2m(&(0x7f00000052c0), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x48524742}}) 2.491969877s ago: executing program 4 (id=1473): syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0) 1.927476378s ago: executing program 0 (id=1487): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 1.853499854s ago: executing program 0 (id=1491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.738413714s ago: executing program 0 (id=1495): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23}}]}, 0x80}}, 0x0) 1.624320375s ago: executing program 0 (id=1499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000000705000000000000000000030000090800054000e2ff02090001"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.504677905s ago: executing program 0 (id=1501): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000080)={[{@journal_async_commit}, {@coherency_full}, {@data_ordered}, {@heartbeat_none}, {@localalloc={'localalloc', 0x3d, 0xfffffffffffffffa}}, {@nointr}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000001240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0xfffffffffffffffc, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x587, 0x0, 0x9c}) 1.468432419s ago: executing program 1 (id=1503): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a0002"], 0x30}}, 0x4c080) 1.397072185s ago: executing program 2 (id=1504): r0 = timerfd_create(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 1.248441408s ago: executing program 2 (id=1506): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004fcff", 0x58}], 0x1) 1.211902062s ago: executing program 1 (id=1507): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109a42, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) 1.082032093s ago: executing program 1 (id=1510): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32], 0x44}}, 0x0) 974.455113ms ago: executing program 2 (id=1511): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="000000001beaea7a9644ef158011", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 781.59674ms ago: executing program 2 (id=1512): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0xfffffffffffffffc, &(0x7f0000000140)=0x4) 720.541596ms ago: executing program 3 (id=1513): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) sendto$ax25(r0, 0x0, 0x0, 0x84, 0x0, 0x0) 628.471414ms ago: executing program 2 (id=1514): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x430, 0x2a8, 0x2a8, 0x430, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x200}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) 602.306546ms ago: executing program 1 (id=1515): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)={0x20, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x20}], 0x1}, 0x0) 544.143472ms ago: executing program 4 (id=1516): r0 = syz_open_dev$I2C(&(0x7f0000000300), 0xa, 0x80402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x1, 0x2, &(0x7f0000000000)={0xf, "52e250dbc4a50514001e45e06e000000000000000000001000"}}) 426.737362ms ago: executing program 4 (id=1517): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, &(0x7f0000000000)='gid=2\x00nk]e') 426.014283ms ago: executing program 1 (id=1527): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x413, 0x0, 0x0, {0x68, 0x0, 0x63}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}]}, 0x48}, 0x1, 0x4800}, 0x0) 425.551142ms ago: executing program 3 (id=1518): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a000b0000000000000000000400000004000000100001800c001000040008"], 0x28}}, 0x0) 407.878514ms ago: executing program 2 (id=1519): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000440)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@nocase}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}]}, 0x25, 0x336, &(0x7f0000004200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 384.883796ms ago: executing program 1 (id=1520): syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1, 0x5ddd, &(0x7f000000bc40)="$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") removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00') 297.468644ms ago: executing program 3 (id=1521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@setlink={0x44, 0x13, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}]}]}, @IFLA_IFNAME={0x14, 0x3, 'gretap0\x00'}]}, 0x44}}, 0x0) 228.44685ms ago: executing program 3 (id=1522): r0 = socket(0x22, 0x2, 0x24) connect$unix(r0, 0x0, 0x0) 130.034259ms ago: executing program 4 (id=1523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x60}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 107.746171ms ago: executing program 3 (id=1524): r0 = syz_io_uring_setup(0x29c2, &(0x7f0000000400)={0x0, 0x80244e, 0x10, 0x0, 0x205}, &(0x7f0000000300), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 31.577378ms ago: executing program 4 (id=1525): syz_usb_connect(0x0, 0x3f, &(0x7f0000000c80)={{0x12, 0x1, 0x0, 0xa1, 0x3d, 0xe3, 0x8, 0x2040, 0x2950, 0x85f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x21, 0x0, 0x1, 0xd5, 0x53, 0xe5, 0x0, [], [{{0x9, 0x5, 0x6}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0xf2, 0x38, 0xb5, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x7f7}}]}}]}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) 0s ago: executing program 3 (id=1526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32], 0x44}}, 0x0) kernel console output (not intermixed with test programs): .009069][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.014325][ T4212] Bluetooth: hci1: command 0x041b tx timeout [ 65.017618][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.024815][ T4212] Bluetooth: hci4: command 0x041b tx timeout [ 65.030362][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.053311][ T4164] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.066711][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.077184][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.090918][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.132885][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.142908][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.152393][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.161026][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.168111][ T4210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.177236][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.186131][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.198070][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.205184][ T4210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.212883][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.221699][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.229561][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.239509][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.248583][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.257766][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.264879][ T4210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.272717][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.282043][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.298306][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.316315][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.328855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.341486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.353784][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.360888][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.369840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.406933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.420114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.429500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.438579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.450537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.463778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.479778][ T4166] device veth0_macvtap entered promiscuous mode [ 65.492428][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.509867][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.519200][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.528084][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.536907][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.545166][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.557125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.568993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.589985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.599495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.610254][ T4166] device veth1_macvtap entered promiscuous mode [ 65.635809][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.651952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.661607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.672348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.681286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.691305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.700488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.709981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.726228][ T4164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.737898][ T4164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.757279][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.771399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.780134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.790718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.799797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.809311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.818677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.827664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.836199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.850091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.859047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.873988][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.886237][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.898705][ T4171] device veth0_vlan entered promiscuous mode [ 65.915699][ T4165] device veth0_vlan entered promiscuous mode [ 65.923269][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.935089][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.944851][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.953932][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.965146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.975208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.984644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.992901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.008616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.024928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.049571][ T4165] device veth1_vlan entered promiscuous mode [ 66.077993][ T4171] device veth1_vlan entered promiscuous mode [ 66.189550][ T4165] device veth0_macvtap entered promiscuous mode [ 66.216743][ T4171] device veth0_macvtap entered promiscuous mode [ 66.228230][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.236867][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.245309][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.253388][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.262503][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.271383][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.280167][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.287859][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.295784][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.304738][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.317083][ T4165] device veth1_macvtap entered promiscuous mode [ 66.332939][ T4171] device veth1_macvtap entered promiscuous mode [ 66.344093][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.352471][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.361046][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.370693][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.385737][ T4164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.424514][ T4210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.429928][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.432572][ T4210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.450830][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.452415][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.474381][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.485462][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.497990][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.507069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.515428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.522897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.530541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.540055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.549346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.558184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.577546][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.599875][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.611289][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.622467][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.633309][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.645700][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.659599][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.670268][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.680402][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.691215][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.705598][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.719945][ T4165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.728849][ T4165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.737803][ T4165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.746824][ T4165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.757457][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.766459][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.775811][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.785481][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.799488][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.811558][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.820996][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.827716][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.839238][ T4171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.848347][ T4171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.858498][ T4171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.867316][ T4171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.894722][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.904056][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.912783][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.014165][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 67.021210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.029315][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 67.036859][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 67.044910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.053718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.061730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.079385][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.092168][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.096934][ T4212] Bluetooth: hci4: command 0x040f tx timeout [ 67.107849][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 67.118959][ T4164] device veth0_vlan entered promiscuous mode [ 67.167619][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.184911][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.229670][ T4174] device veth0_vlan entered promiscuous mode [ 67.278922][ T4164] device veth1_vlan entered promiscuous mode [ 67.288908][ T4210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.298594][ T4210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.335057][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.343445][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.348253][ T4174] device veth1_vlan entered promiscuous mode [ 67.361113][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.369901][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.378308][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.401601][ T4254] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure [ 67.406301][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.497126][ T665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.515804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.526190][ T665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.527417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.543144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.551575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.560298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.576244][ T4164] device veth0_macvtap entered promiscuous mode [ 67.589351][ T4256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 67.609587][ T4174] device veth0_macvtap entered promiscuous mode [ 67.622715][ T665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.642652][ T665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.669378][ T4174] device veth1_macvtap entered promiscuous mode [ 67.683218][ T4164] device veth1_macvtap entered promiscuous mode [ 67.696588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.714945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.740163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.752053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.760455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.769297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.822671][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.852336][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.877191][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.899569][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.917540][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.929903][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.948389][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.980671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.989796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.008709][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.057699][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.069411][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.086558][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.108121][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.126700][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.146087][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.159555][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.176687][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.194802][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.207027][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.220018][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.239157][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.253698][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.259941][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.289283][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.332453][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.346020][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.364308][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.372550][ T4284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20'. [ 68.385287][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.395929][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.426621][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.447574][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.470535][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.507107][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.522870][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.537859][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.570437][ T4164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.598603][ T4164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.615226][ T4164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.634376][ T7] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 68.643308][ T4174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.653906][ T7] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 68.655947][ T4174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.662098][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.672519][ T4174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.700072][ T4174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.721791][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.750497][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.759786][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 68.774659][ T7] usb 2-1: config 0 has no interface number 0 [ 68.786170][ T7] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 68.786990][ T4164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.812926][ T4164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.822424][ T4164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.836945][ T7] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 68.849761][ T4164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.857154][ T7] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 68.885056][ T7] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 68.930331][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.959876][ T7] usb 2-1: config 0 descriptor?? [ 69.018066][ T7] gspca_main: spca561-2.14.0 probing abcd:cdee [ 69.093946][ T4226] Bluetooth: hci2: command 0x0419 tx timeout [ 69.100815][ T4226] Bluetooth: hci3: command 0x0419 tx timeout [ 69.117365][ T4226] Bluetooth: hci0: command 0x0419 tx timeout [ 69.124671][ T4301] delete_channel: no stack [ 69.178788][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 69.188814][ T4226] Bluetooth: hci4: command 0x0419 tx timeout [ 69.236620][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.262220][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.264412][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.273824][ T7] spca561: probe of 2-1:0.156 failed with error -22 [ 69.297901][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.320239][ T7] usb 2-1: MIDIStreaming interface descriptor not found [ 69.340711][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.358669][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.370782][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.383718][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.408160][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.460565][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.481958][ T7] usb 2-1: USB disconnect, device number 2 [ 69.491410][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.568981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.579634][ T4313] syz.0.32 uses obsolete (PF_INET,SOCK_PACKET) [ 69.615326][ T4292] loop4: detected capacity change from 0 to 32768 [ 69.672970][ T4309] udevd[4309]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.726961][ T4292] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.23 (4292) [ 69.830693][ T4325] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 69.872090][ T4292] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 69.913721][ T4292] BTRFS info (device loop4): using free space tree [ 69.920369][ T4292] BTRFS info (device loop4): has skinny extents [ 70.001478][ T4340] netlink: 'syz.0.42': attribute type 10 has an invalid length. [ 70.088438][ T4349] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 70.244650][ T4292] BTRFS info (device loop4): enabling ssd optimizations [ 70.284687][ T4363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 70.598863][ T4376] loop2: detected capacity change from 0 to 256 [ 70.714215][ T4376] ======================================================= [ 70.714215][ T4376] WARNING: The mand mount option has been deprecated and [ 70.714215][ T4376] and is ignored by this kernel. Remove the mand [ 70.714215][ T4376] option from the mount to silence this warning. [ 70.714215][ T4376] ======================================================= [ 70.729041][ T4379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.54'. [ 70.837497][ T4379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.54'. [ 71.022999][ T4337] loop3: detected capacity change from 0 to 32768 [ 71.051477][ T4387] openvswitch: netlink: IP tunnel dst address not specified [ 71.093673][ T4337] XFS: ikeep mount option is deprecated. [ 71.099381][ T4337] XFS: noikeep mount option is deprecated. [ 71.225504][ T4337] XFS (loop3): Mounting V5 Filesystem [ 71.340244][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.340434][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.344960][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 71.376435][ T4337] XFS (loop3): Ending clean mount [ 71.382112][ T4337] XFS (loop3): Quotacheck needed: Please wait. [ 71.511909][ T4416] loop1: detected capacity change from 0 to 16 [ 71.526973][ T4337] XFS (loop3): Quotacheck: Done. [ 71.536690][ T4419] IPv6: NLM_F_CREATE should be specified when creating new route [ 71.610551][ T4416] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 71.652879][ T4174] XFS (loop3): Unmounting Filesystem [ 71.734216][ T4426] openvswitch: netlink: Flow actions attr not present in new flow. [ 71.837622][ T4430] loop4: detected capacity change from 0 to 256 [ 71.942409][ T4430] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 72.040265][ T4438] loop1: detected capacity change from 0 to 64 [ 72.515421][ T4452] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 72.530881][ T4454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.540713][ T4452] netlink: 'syz.1.81': attribute type 2 has an invalid length. [ 72.566124][ T4452] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 72.733791][ T4384] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.838817][ T4428] loop2: detected capacity change from 0 to 32768 [ 72.845716][ T4465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 72.887811][ T4470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.91'. [ 72.902593][ T4470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.91'. [ 72.957815][ T4428] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 72.977096][ T4428] JBD2: Ignoring recovery information on journal [ 73.012939][ T4384] usb 5-1: Using ep0 maxpacket: 16 [ 73.129410][ T4481] loop1: detected capacity change from 0 to 4096 [ 73.163609][ T1333] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.164000][ T4384] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.188045][ T4481] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 73.205114][ T4428] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 73.217206][ T4481] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 73.224977][ T4384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.261302][ T4384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 73.280469][ T4486] loop3: detected capacity change from 0 to 1024 [ 73.282544][ T4481] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 73.318340][ T4384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 73.329048][ T4384] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.345897][ T4384] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 73.359304][ T4481] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 73.371532][ T4384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.398259][ T4384] usb 5-1: config 0 descriptor?? [ 73.412497][ T4481] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 73.432619][ T4481] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 73.443387][ T4486] hfsplus: xattr searching failed [ 73.454677][ T4481] ntfs: (device loop1): check_mft_mirror(): Failed to read $MFTMirr. [ 73.467540][ T4481] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 73.494499][ T4164] ocfs2: Unmounting device (7,2) on (node local) [ 73.520902][ T4481] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 73.533872][ T4481] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 73.554521][ T1333] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.574002][ T4384] rc_core: IR keymap rc-hauppauge not found [ 73.579940][ T4384] Registered IR keymap rc-empty [ 73.593778][ T1333] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 73.596618][ T4384] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 73.603470][ T1333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.622637][ T4481] ntfs: volume version 3.1. [ 73.649816][ T4384] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 73.661205][ T1333] usb 1-1: config 0 descriptor?? [ 73.709569][ T4489] loop3: detected capacity change from 0 to 256 [ 73.722297][ T4384] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 73.752365][ T4384] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 73.753737][ T1333] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 73.786703][ T4384] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 73.812748][ T4493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.99'. [ 73.827929][ T1333] rndis_host: probe of 1-1:0.0 failed with error -22 [ 73.831195][ T4384] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 73.850332][ T1333] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 73.884468][ T4384] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 73.884760][ T1333] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 73.923674][ T4384] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 73.933048][ T1333] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 73.963791][ T4384] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 73.977767][ T1333] usb 1-1: USB disconnect, device number 2 [ 74.013794][ T4384] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.093797][ T4384] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.123666][ T4384] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.163687][ T4384] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.233831][ T4384] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 74.276815][ T4384] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 74.299204][ T4384] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 74.328194][ T4384] usb 5-1: USB disconnect, device number 2 [ 74.478106][ T4521] loop2: detected capacity change from 0 to 128 [ 74.576742][ T4521] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.673007][ T263] block nbd0: Attempted send on invalid socket [ 74.681268][ T263] blk_update_request: I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 74.684500][ T4533] overlayfs: missing 'lowerdir' [ 74.695434][ T4532] qnx6: unable to read the first superblock [ 74.705205][ T263] block nbd0: Attempted send on invalid socket [ 74.711445][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 74.722684][ T4532] qnx6: unable to read the first superblock [ 74.728774][ T4532] qnx6: unable to read the first superblock [ 75.091091][ T4546] loop1: detected capacity change from 0 to 8 [ 75.176797][ T4550] loop2: detected capacity change from 0 to 256 [ 75.396617][ T4550] process 'syz.2.128' launched './file1' with NULL argv: empty string added [ 75.407849][ T4561] netlink: 'syz.4.134': attribute type 4 has an invalid length. [ 75.481704][ T4530] loop3: detected capacity change from 0 to 32768 [ 75.644909][ T4530] XFS (loop3): Mounting V5 Filesystem [ 75.693439][ T4578] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 75.835563][ T4587] netlink: 64 bytes leftover after parsing attributes in process `syz.4.140'. [ 75.837803][ T4580] xt_CT: No such helper "snmp_trap" [ 75.867604][ T4530] XFS (loop3): Ending clean mount [ 76.012523][ T4174] XFS (loop3): Unmounting Filesystem [ 76.331948][ T4558] loop0: detected capacity change from 0 to 32768 [ 76.379682][ T4607] loop4: detected capacity change from 0 to 64 [ 76.603843][ T4558] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 76.672643][ T4558] (syz.0.133,4558,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 76.719616][ T4558] (syz.0.133,4558,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 76.783717][ T4558] (syz.0.133,4558,0):ocfs2_mknod:296 ERROR: status = -2 [ 76.797260][ T4558] (syz.0.133,4558,0):ocfs2_mknod:500 ERROR: status = -2 [ 76.813182][ T4629] loop3: detected capacity change from 0 to 4096 [ 76.838345][ T4558] (syz.0.133,4558,0):ocfs2_create:674 ERROR: status = -2 [ 76.893729][ T4627] syz.4.156 (4627) used greatest stack depth: 19160 bytes left [ 76.912223][ T4629] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 76.940511][ T4166] ocfs2: Unmounting device (7,0) on (node local) [ 76.959242][ T4639] loop4: detected capacity change from 0 to 128 [ 77.055367][ T4639] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.448134][ T4664] autofs4:pid:4664:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 77.482924][ T4664] autofs4:pid:4664:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 77.905622][ T4686] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 78.191530][ T4700] loop3: detected capacity change from 0 to 1764 [ 78.235482][ T4704] netlink: 14 bytes leftover after parsing attributes in process `syz.0.196'. [ 78.335264][ T4700] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 78.388053][ T4648] loop2: detected capacity change from 0 to 32768 [ 78.397909][ T4708] netlink: 52 bytes leftover after parsing attributes in process `syz.0.198'. [ 78.574781][ T4648] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 78.755610][ T4728] ipt_REJECT: TCP_RESET invalid for non-tcp [ 78.774575][ T4164] ocfs2: Unmounting device (7,2) on (node local) [ 78.919746][ T4732] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 78.993679][ T4382] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.115214][ T4692] loop1: detected capacity change from 0 to 40427 [ 79.193721][ T4692] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 79.201778][ T4692] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 79.288496][ T4692] F2FS-fs (loop1): invalid crc value [ 79.354620][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 79.385430][ T4692] F2FS-fs (loop1): Found nat_bits in checkpoint [ 79.394977][ T4382] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 79.417640][ T4382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.449803][ T4382] usb 4-1: config 0 descriptor?? [ 79.492413][ T4761] netlink: 494 bytes leftover after parsing attributes in process `syz.4.221'. [ 79.507854][ T4382] cp210x 4-1:0.0: cp210x converter detected [ 79.591747][ T4692] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 79.623162][ T4692] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 79.729279][ T4382] usb 4-1: cp210x converter now attached to ttyUSB0 [ 79.738514][ T4692] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 79.792769][ T4692] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 79.830511][ T4779] loop0: detected capacity change from 0 to 512 [ 79.848279][ T4782] loop2: detected capacity change from 0 to 256 [ 79.905705][ T4779] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.934810][ T4226] usb 4-1: USB disconnect, device number 2 [ 79.949221][ T4779] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.961219][ T4226] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 79.976111][ T4779] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.230: Allocating blocks 41-42 which overlap fs metadata [ 80.024517][ T4782] FAT-fs (loop2): Directory bread(block 64) failed [ 80.034288][ T4782] FAT-fs (loop2): Directory bread(block 65) failed [ 80.040948][ T4782] FAT-fs (loop2): Directory bread(block 66) failed [ 80.057370][ T4226] cp210x 4-1:0.0: device disconnected [ 80.069298][ T4779] __quota_error: 10 callbacks suppressed [ 80.069318][ T4779] Quota error (device loop0): write_blk: dquota write failed [ 80.084995][ T4779] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 80.096324][ T4779] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.230: Failed to acquire dquot type 0 [ 80.111040][ T4782] FAT-fs (loop2): Directory bread(block 67) failed [ 80.121967][ T4782] FAT-fs (loop2): Directory bread(block 68) failed [ 80.129885][ T4779] EXT4-fs (loop0): 1 truncate cleaned up [ 80.137195][ T4782] FAT-fs (loop2): Directory bread(block 69) failed [ 80.143924][ T4782] FAT-fs (loop2): Directory bread(block 70) failed [ 80.150607][ T4782] FAT-fs (loop2): Directory bread(block 71) failed [ 80.157311][ T4782] FAT-fs (loop2): Directory bread(block 72) failed [ 80.164806][ T4782] FAT-fs (loop2): Directory bread(block 73) failed [ 80.179615][ T4779] EXT4-fs (loop0): pa ffff88802560c0e0: logic 1, phys. 41, len 23 [ 80.187864][ T4779] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 22, pa_free 23 [ 80.244170][ T4779] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,grpjquota=,nogrpid,errors=continue,noinit_itable,resgid=0x0000000000000000,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 80.422012][ T4779] Non-string source [ 80.672164][ T4804] netlink: 'syz.4.244': attribute type 3 has an invalid length. [ 80.715359][ T4805] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 80.946872][ T4816] IPv6: Can't replace route, no match found [ 81.021441][ T4812] loop3: detected capacity change from 0 to 4096 [ 81.540717][ T4837] loop3: detected capacity change from 0 to 512 [ 81.578279][ T21] cfg80211: failed to load regulatory.db [ 81.613936][ T4382] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.695903][ T4837] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 81.713782][ T4837] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.720962][ T4799] loop0: detected capacity change from 0 to 32768 [ 81.826488][ T4837] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 81.883657][ T4382] usb 2-1: Using ep0 maxpacket: 16 [ 81.900828][ T4837] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #16: comm syz.3.259: iget: bogus i_mode (5) [ 81.922079][ T4837] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.259: couldn't read orphan inode 16 (err -117) [ 81.955430][ T4837] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,jqfmt=vfsold,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,,errors=continue. Quota mode: writeback. [ 82.025251][ T4382] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 82.041730][ T4382] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.052700][ T4382] usb 2-1: config 0 has no interface number 0 [ 82.082357][ T4837] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 82.111904][ T4799] XFS (loop0): Mounting V5 Filesystem [ 82.225980][ T4382] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 82.246113][ T4382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.290564][ T4382] usb 2-1: Product: syz [ 82.340543][ T4382] usb 2-1: Manufacturer: syz [ 82.373472][ T4382] usb 2-1: SerialNumber: syz [ 82.383355][ T4878] loop4: detected capacity change from 0 to 512 [ 82.411228][ T4382] usb 2-1: config 0 descriptor?? [ 82.477103][ T4382] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 82.501921][ T4382] usb 2-1: No valid video chain found. [ 82.522823][ T4799] XFS (loop0): Ending clean mount [ 82.555537][ T4878] EXT4-fs (loop4): inodes count not valid: 1 vs 32 [ 82.633160][ T4166] XFS (loop0): Unmounting Filesystem [ 82.750735][ T4890] netlink: 'syz.2.281': attribute type 3 has an invalid length. [ 82.781680][ T13] usb 2-1: USB disconnect, device number 3 [ 82.912101][ T4896] loop2: detected capacity change from 0 to 8 [ 82.981636][ T4893] loop3: detected capacity change from 0 to 8192 [ 83.007676][ T4896] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 83.165387][ T4902] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 83.182943][ T4902] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 83.309946][ T4904] xt_CT: No such helper "netbios-ns" [ 83.365074][ T4911] netlink: 'syz.0.280': attribute type 3 has an invalid length. [ 83.436145][ T4911] netlink: 'syz.0.280': attribute type 3 has an invalid length. [ 83.595839][ T4926] loop4: detected capacity change from 0 to 512 [ 83.609537][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 83.643834][ T4926] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.714321][ T4926] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 83.773700][ T4939] loop0: detected capacity change from 0 to 512 [ 83.782105][ T4926] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.297: invalid indirect mapped block 2683928664 (level 1) [ 83.830610][ T4939] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 83.844416][ T4926] EXT4-fs (loop4): 1 truncate cleaned up [ 83.873807][ T4939] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 83.908181][ T4939] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 83.910239][ T4926] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,noinit_itable,minixdf,jqfmt=vfsv0,usrjquota=.,,errors=continue. Quota mode: writeback. [ 83.942091][ T4939] System zones: 1-12 [ 84.002491][ T4939] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.302: corrupted in-inode xattr [ 84.037168][ T4939] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.302: couldn't read orphan inode 15 (err -117) [ 84.076009][ T4939] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 84.342798][ T4967] netlink: 44 bytes leftover after parsing attributes in process `syz.0.309'. [ 84.633085][ T4966] loop3: detected capacity change from 0 to 8192 [ 84.712327][ T4966] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 84.733901][ T4966] REISERFS (device loop3): using ordered data mode [ 84.750781][ T4966] reiserfs: using flush barriers [ 84.763620][ T4966] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.786109][ T4966] REISERFS (device loop3): checking transaction log (loop3) [ 84.800686][ T4966] REISERFS (device loop3): Using r5 hash to sort names [ 84.836781][ T4966] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 84.929949][ T4995] loop0: detected capacity change from 0 to 1764 [ 85.104096][ T4385] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.379635][ T4385] usb 2-1: Using ep0 maxpacket: 8 [ 85.508039][ T5038] loop0: detected capacity change from 0 to 256 [ 85.524422][ T4385] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.548701][ T4385] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 85.563882][ T4385] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 100, changing to 10 [ 85.570700][ T5042] loop4: detected capacity change from 0 to 8 [ 85.580869][ T4385] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24936, setting to 1024 [ 85.601705][ T5038] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc5de6174, utbl_chksum : 0xe619d30d) [ 85.619779][ T4385] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 85.630827][ T4385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.685126][ T4385] hub 2-1:1.0: bad descriptor, ignoring hub [ 85.699652][ T5046] netlink: 'syz.3.351': attribute type 11 has an invalid length. [ 85.700200][ T4385] hub: probe of 2-1:1.0 failed with error -5 [ 85.755211][ T4385] cdc_wdm 2-1:1.0: skipping garbage [ 85.760459][ T4385] cdc_wdm 2-1:1.0: skipping garbage [ 85.776451][ T4385] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 86.043891][ T21] usb 2-1: USB disconnect, device number 4 [ 86.084729][ T5068] loop4: detected capacity change from 0 to 128 [ 86.141494][ T5068] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 87.093321][ T5129] loop4: detected capacity change from 0 to 1024 [ 87.122207][ T5132] netlink: 10 bytes leftover after parsing attributes in process `syz.0.393'. [ 87.156698][ T5126] loop1: detected capacity change from 0 to 4096 [ 87.207313][ T5126] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 87.228925][ T5076] loop2: detected capacity change from 0 to 32768 [ 87.259491][ T5129] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.281691][ T5137] rdma_rxe: rxe creation allowed on top of a real device only [ 87.419087][ T5139] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.396'. [ 87.454100][ T5126] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 87.521512][ T5126] ntfs3: loop1: Failed to load root. [ 87.657072][ T5147] loop0: detected capacity change from 0 to 8 [ 87.773822][ T5151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.403'. [ 87.795621][ T5147] SQUASHFS error: Failed to read block 0x738: -5 [ 87.823675][ T5147] SQUASHFS error: Unable to read metadata cache entry [736] [ 88.414229][ T5182] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 88.500735][ T5186] Cannot find add_set index 0 as target [ 88.959258][ T5210] loop0: detected capacity change from 0 to 1024 [ 89.019982][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'. [ 89.172917][ T5210] attempt to access beyond end of device [ 89.172917][ T5210] loop0: rw=0, want=201326594, limit=1024 [ 89.209432][ T5210] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 89.274570][ T5210] hfsplus: unable to mark blocks free: error -5 [ 89.294433][ T5210] hfsplus: can't free extent [ 89.384852][ T5231] loop2: detected capacity change from 0 to 256 [ 89.408054][ T5179] loop4: detected capacity change from 0 to 32768 [ 89.434817][ T4385] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 89.464812][ T5179] XFS: noikeep mount option is deprecated. [ 89.488834][ T5233] loop1: detected capacity change from 0 to 4096 [ 89.518911][ T5231] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe40551cd, utbl_chksum : 0xe619d30d) [ 89.534974][ T5233] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 89.629144][ T5179] XFS (loop4): Mounting V5 Filesystem [ 89.690975][ T5233] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 89.712990][ T5233] ntfs3: loop1: mft corrupted [ 89.732192][ T5233] ntfs3: loop1: Failed to load $Extend. [ 89.774204][ T5247] loop0: detected capacity change from 0 to 2048 [ 89.796986][ T5179] XFS (loop4): Ending clean mount [ 89.820337][ T5179] XFS (loop4): Quotacheck needed: Please wait. [ 89.830338][ T4385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 4231, setting to 64 [ 89.852419][ T5249] loop2: detected capacity change from 0 to 1024 [ 89.852799][ T5247] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.898659][ T13] Bluetooth: hci4: command 0x0405 tx timeout [ 89.905966][ T5179] XFS (loop4): Quotacheck: Done. [ 89.924014][ T4307] ntfs3: loop1: ino=1b, Internal error [ 89.930460][ T4307] ntfs3: loop1: ntfs3_write_inode r=1b failed, -22. [ 89.938835][ T5249] attempt to access beyond end of device [ 89.938835][ T5249] loop2: rw=2057, want=65536, limit=1024 [ 89.954101][ T5249] attempt to access beyond end of device [ 89.954101][ T5249] loop2: rw=1, want=2310, limit=1024 [ 89.995058][ T5249] attempt to access beyond end of device [ 89.995058][ T5249] loop2: rw=1, want=4358, limit=1024 [ 90.020407][ T4385] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 90.032763][ T4385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.041669][ T5249] attempt to access beyond end of device [ 90.041669][ T5249] loop2: rw=1, want=6406, limit=1024 [ 90.063039][ T5249] attempt to access beyond end of device [ 90.063039][ T5249] loop2: rw=1, want=8454, limit=1024 [ 90.081329][ T4385] usb 4-1: Product: syz [ 90.103060][ T4385] usb 4-1: Manufacturer: syz [ 90.108331][ T4385] usb 4-1: SerialNumber: syz [ 90.115349][ T5249] attempt to access beyond end of device [ 90.115349][ T5249] loop2: rw=1, want=10502, limit=1024 [ 90.128806][ T4385] usb 4-1: config 0 descriptor?? [ 90.148017][ T5249] attempt to access beyond end of device [ 90.148017][ T5249] loop2: rw=1, want=12550, limit=1024 [ 90.149979][ T4171] XFS (loop4): Unmounting Filesystem [ 90.164065][ T5222] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.188869][ T4385] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 90.195775][ T5249] attempt to access beyond end of device [ 90.195775][ T5249] loop2: rw=1, want=14598, limit=1024 [ 90.237063][ T5249] attempt to access beyond end of device [ 90.237063][ T5249] loop2: rw=1, want=16646, limit=1024 [ 90.434523][ T21] usb 4-1: USB disconnect, device number 3 [ 90.539610][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.650600][ T5259] device  entered promiscuous mode [ 90.731452][ T5261] loop2: detected capacity change from 0 to 128 [ 90.806539][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 90.827436][ T5261] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 90.910844][ T154] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 90.923767][ T13] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 90.934762][ T13] usb 2-1: config 0 has no interface number 0 [ 90.991980][ T5255] loop0: detected capacity change from 0 to 32768 [ 91.068377][ T5255] loop0: p1 p2 p3 < > [ 91.076554][ T5255] loop0: p1 size 242222080 extends beyond EOD, truncated [ 91.096211][ T13] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 91.116367][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.146696][ T13] usb 2-1: Product: syz [ 91.150958][ T13] usb 2-1: Manufacturer: syz [ 91.174529][ T13] usb 2-1: SerialNumber: syz [ 91.192262][ T13] usb 2-1: config 0 descriptor?? [ 91.468564][ T13] radio-si470x 2-1:0.35: this is not a si470x device. [ 91.515992][ T1333] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.683792][ T13] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 91.737796][ T13] usb 2-1: USB disconnect, device number 5 [ 91.770865][ T5279] loop3: detected capacity change from 0 to 32768 [ 91.883937][ T1333] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 91.913665][ T1333] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 91.923968][ T1333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.957291][ T5303] netlink: 'syz.4.475': attribute type 2 has an invalid length. [ 91.965659][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 91.995773][ T1333] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 92.127068][ T5309] loop0: detected capacity change from 0 to 512 [ 92.291676][ T5309] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.303895][ T5309] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.362669][ T5320] netlink: 'syz.4.481': attribute type 30 has an invalid length. [ 92.668469][ T5340] netlink: 'syz.4.490': attribute type 10 has an invalid length. [ 92.763252][ T5340] team0: Device veth1_macvtap failed to register rx_handler [ 93.053918][ T1333] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 93.205222][ T5373] xt_hashlimit: invalid interval [ 93.263824][ T1333] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 93.293658][ T1333] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 93.320253][ T1333] usb 3-1: USB disconnect, device number 2 [ 93.456794][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.704469][ T5405] delete_channel: no stack [ 93.744487][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 93.870279][ T5416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.526'. [ 93.891366][ T5415] loop2: detected capacity change from 0 to 512 [ 93.946153][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.967405][ T5415] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 93.985478][ T5422] loop1: detected capacity change from 0 to 128 [ 93.993721][ T5415] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 94.037058][ T5415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 94.054122][ T5415] System zones: 1-12 [ 94.078539][ T5422] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 94.088010][ T21] usb 1-1: config 247 has an invalid interface number: 166 but max is 1 [ 94.103353][ T5415] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.527: corrupted in-inode xattr [ 94.136649][ T21] usb 1-1: config 247 has an invalid interface number: 237 but max is 1 [ 94.183662][ T21] usb 1-1: config 247 has no interface number 0 [ 94.190227][ T21] usb 1-1: config 247 has no interface number 1 [ 94.203279][ T5415] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.527: couldn't read orphan inode 15 (err -117) [ 94.231371][ T144] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 94.280189][ T5415] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 94.285619][ T21] usb 1-1: config 247 interface 166 has no altsetting 0 [ 94.315089][ T21] usb 1-1: config 247 interface 237 has no altsetting 0 [ 94.370235][ T5441] loop3: detected capacity change from 0 to 512 [ 94.400278][ T5441] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.486259][ T21] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=4f.04 [ 94.487459][ T5441] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 94.520370][ T5441] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.538: invalid indirect mapped block 2683928664 (level 1) [ 94.553012][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.557266][ T5441] EXT4-fs (loop3): 1 truncate cleaned up [ 94.567180][ T5441] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,noinit_itable,minixdf,jqfmt=vfsv0,usrjquota=.,,errors=continue. Quota mode: writeback. [ 94.606740][ T21] usb 1-1: Product: syz [ 94.610957][ T21] usb 1-1: Manufacturer: syz [ 94.653560][ T21] usb 1-1: SerialNumber: syz [ 94.979598][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.058975][ T21] qmi_wwan: probe of 1-1:247.166 failed with error -22 [ 95.107959][ T21] usb 1-1: USB disconnect, device number 3 [ 95.234756][ T4382] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.323397][ T5458] loop2: detected capacity change from 0 to 32768 [ 95.373842][ T23] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 95.373877][ T23] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 95.373899][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.373919][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 95.373941][ T23] usb 5-1: config 0 has no interface number 0 [ 95.373976][ T23] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 95.374010][ T23] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.374034][ T23] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 95.374075][ T23] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 95.374100][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.376216][ T23] usb 5-1: config 0 descriptor?? [ 95.435069][ T23] gspca_main: spca561-2.14.0 probing abcd:cdee [ 95.464668][ T5458] XFS (loop2): Mounting V5 Filesystem [ 95.533669][ T4382] usb 2-1: Using ep0 maxpacket: 16 [ 95.638956][ T5458] XFS (loop2): Ending clean mount [ 95.672489][ T5498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 95.682249][ T4382] usb 2-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 95.693309][ T5498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 95.724467][ T23] spca561: probe of 5-1:0.156 failed with error -22 [ 95.737996][ T23] usb 5-1: MIDIStreaming interface descriptor not found [ 95.745308][ T4164] XFS (loop2): Unmounting Filesystem [ 95.766247][ T23] usb 5-1: USB disconnect, device number 3 [ 95.881772][ T5502] loop3: detected capacity change from 0 to 512 [ 95.894248][ T4382] usb 2-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43 [ 95.894282][ T4382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.894304][ T4382] usb 2-1: Product: syz [ 95.894320][ T4382] usb 2-1: Manufacturer: syz [ 95.894337][ T4382] usb 2-1: SerialNumber: syz [ 95.909401][ T4382] usb 2-1: config 0 descriptor?? [ 95.998635][ T5502] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.998761][ T5502] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.014541][ T4158] udevd[4158]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.044533][ T5502] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.3.565: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 96.126128][ T5502] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 96.205764][ T4382] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 96.219564][ T5511] loop0: detected capacity change from 0 to 16 [ 96.237458][ T4382] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 96.288223][ T4382] usb 2-1: USB disconnect, device number 6 [ 96.297125][ T5511] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 96.300296][ T5515] (unnamed net_device) (uninitialized): option lacp_active: invalid value (6) [ 96.533671][ T5524] netlink: 'syz.0.583': attribute type 10 has an invalid length. [ 96.547077][ T5527] loop3: detected capacity change from 0 to 256 [ 96.660501][ T5532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.577'. [ 96.685093][ T5527] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 96.833474][ T5529] loop2: detected capacity change from 0 to 8192 [ 96.924500][ T5529] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 96.951298][ T5529] REISERFS (device loop2): using ordered data mode [ 96.958396][ T5529] reiserfs: using flush barriers [ 96.969943][ T5529] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.987636][ T5529] REISERFS (device loop2): checking transaction log (loop2) [ 97.010191][ T5529] REISERFS (device loop2): Using r5 hash to sort names [ 97.024729][ T5529] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 97.175005][ T4212] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 97.413810][ T4212] usb 2-1: Using ep0 maxpacket: 32 [ 97.533912][ T4212] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.552534][ T4212] usb 2-1: config 0 has no interface number 0 [ 97.733913][ T4212] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 97.753790][ T4212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.788611][ T4212] usb 2-1: Product: syz [ 97.792816][ T4212] usb 2-1: Manufacturer: syz [ 97.798504][ T4212] usb 2-1: SerialNumber: syz [ 97.828781][ T4212] usb 2-1: config 0 descriptor?? [ 97.886115][ T4212] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 97.904952][ T4212] usb 2-1: selecting invalid altsetting 1 [ 97.916740][ T5585] loop4: detected capacity change from 0 to 4096 [ 97.917645][ T4212] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 97.957888][ T4212] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 97.991965][ T4212] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 98.002683][ T5585] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 98.049416][ T4212] usb 2-1: media controller created [ 98.054964][ T5585] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 98.055047][ T5585] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 98.177254][ T4212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.183829][ T5585] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 98.230960][ T5585] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 98.288363][ T5585] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 98.320295][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. [ 98.340410][ T5585] ntfs: (device loop4): check_mft_mirror(): Failed to read $MFTMirr. [ 98.362134][ T5585] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 98.399196][ T4212] usb 2-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 98.410243][ T5585] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 98.432866][ T4212] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 98.450660][ T5585] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 98.486856][ T5563] loop3: detected capacity change from 0 to 32768 [ 98.504751][ T5585] ntfs: volume version 3.1. [ 98.568216][ T4212] DVB: Unable to find symbol mxl5005s_attach() [ 98.578777][ T5563] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 98.630061][ T4212] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 98.632509][ T5563] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 98.756164][ T5563] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 16ms [ 98.800988][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 98.822902][ T4212] usb 2-1: USB disconnect, device number 7 [ 98.827339][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 98.993564][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 166ms [ 99.015703][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 99.031101][ T5563] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 99.120612][ T5634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 99.131058][ T4382] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.403723][ T4382] usb 3-1: Using ep0 maxpacket: 16 [ 99.543763][ T4382] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.567668][ T4382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.606170][ T4382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 99.650978][ T4382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.703634][ T4382] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.749387][ T4382] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 99.779516][ T4382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.799552][ T5671] netlink: 64 bytes leftover after parsing attributes in process `syz.0.650'. [ 99.804640][ T4382] usb 3-1: config 0 descriptor?? [ 99.814027][ T5672] netlink: 'syz.4.640': attribute type 10 has an invalid length. [ 99.833164][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'. [ 100.003741][ T4382] rc_core: IR keymap rc-hauppauge not found [ 100.010086][ T4382] Registered IR keymap rc-empty [ 100.033721][ T4382] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.082897][ T5689] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 100.084204][ T4382] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.159421][ T4382] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 100.199424][ T4382] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 100.252484][ T4382] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.303664][ T4382] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.312101][ T5709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 100.329264][ T5704] xt_CT: No such helper "snmp_trap" [ 100.390309][ T4382] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.433845][ T4382] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.481735][ T4382] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.523928][ T4382] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.573942][ T4382] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.623868][ T4382] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.631570][ T5731] netlink: 32 bytes leftover after parsing attributes in process `syz.4.668'. [ 100.676890][ T4382] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.693840][ T1333] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.733698][ T4382] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 100.741291][ T5739] loop3: detected capacity change from 0 to 256 [ 100.785255][ T4382] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 100.803972][ T4382] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 100.846931][ T5739] FAT-fs (loop3): Directory bread(block 64) failed [ 100.871219][ T4382] usb 3-1: USB disconnect, device number 3 [ 100.874122][ T5739] FAT-fs (loop3): Directory bread(block 65) failed [ 100.912916][ T5739] FAT-fs (loop3): Directory bread(block 66) failed [ 100.943847][ T1333] usb 1-1: Using ep0 maxpacket: 32 [ 100.968705][ T5739] FAT-fs (loop3): Directory bread(block 67) failed [ 100.981952][ T5739] FAT-fs (loop3): Directory bread(block 68) failed [ 100.999106][ T5739] FAT-fs (loop3): Directory bread(block 69) failed [ 101.014813][ T5739] FAT-fs (loop3): Directory bread(block 70) failed [ 101.024432][ T5755] loop2: detected capacity change from 0 to 256 [ 101.030856][ T5739] FAT-fs (loop3): Directory bread(block 71) failed [ 101.038439][ T5739] FAT-fs (loop3): Directory bread(block 72) failed [ 101.045453][ T5739] FAT-fs (loop3): Directory bread(block 73) failed [ 101.069571][ T1333] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.074360][ T5755] exfat: Deprecated parameter 'utf8' [ 101.099010][ T5755] exfat: Deprecated parameter 'namecase' [ 101.108374][ T5755] exfat: Deprecated parameter 'utf8' [ 101.149027][ T5751] loop1: detected capacity change from 0 to 4096 [ 101.163206][ T5755] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 101.253870][ T1333] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 101.263263][ T1333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.273610][ T1333] usb 1-1: Product: syz [ 101.293676][ T1333] usb 1-1: Manufacturer: syz [ 101.324796][ T1333] usb 1-1: SerialNumber: syz [ 101.339132][ T1333] usb 1-1: config 0 descriptor?? [ 101.414293][ T4384] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.416953][ T1333] cdc_ether 1-1:0.0: skipping garbage [ 101.466566][ T1333] usb 1-1: bad CDC descriptors [ 101.498390][ T1333] usb 1-1: unsupported MDLM descriptors [ 101.643876][ T5767] loop1: detected capacity change from 0 to 1024 [ 101.661849][ T23] usb 1-1: USB disconnect, device number 4 [ 101.683890][ T4384] usb 5-1: Using ep0 maxpacket: 8 [ 101.739808][ T5767] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,errors=remount-ro,. Quota mode: none. [ 101.823818][ T4384] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.838748][ T5767] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.688: Attempting to read directory block (623) that is past i_size (638464) [ 101.896169][ T5767] EXT4-fs (loop1): Remounting filesystem read-only [ 101.944558][ T4384] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 101.967117][ T4384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 101.994534][ T4384] usb 5-1: SerialNumber: syz [ 102.011808][ T4384] usb 5-1: config 0 descriptor?? [ 102.063520][ T4384] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 102.071097][ T4384] usb 5-1: No valid video chain found. [ 102.201226][ T5790] loop1: detected capacity change from 0 to 1024 [ 102.280296][ T4384] usb 5-1: USB disconnect, device number 4 [ 102.287792][ T5790] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent [ 102.307758][ T5799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.701'. [ 102.408834][ T5790] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 102.500237][ T5790] CIFS mount error: No usable UNC path provided in device string! [ 102.500237][ T5790] [ 102.534143][ T5790] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 102.722633][ T5828] autofs4:pid:5828:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 103.061884][ T5849] loop0: detected capacity change from 0 to 64 [ 103.241387][ T5851] loop2: detected capacity change from 0 to 4096 [ 103.308789][ T5851] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 103.416802][ T5869] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 103.923734][ T4212] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.173628][ T4212] usb 3-1: Using ep0 maxpacket: 8 [ 104.216252][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 104.293990][ T4212] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 104.302908][ T4212] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 104.362132][ T4212] usb 3-1: config 135 has no interface number 0 [ 104.399092][ T4212] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.623992][ T4212] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 104.657693][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.673792][ T4212] usb 3-1: Product: syz [ 104.678184][ T4212] usb 3-1: Manufacturer: syz [ 104.682790][ T4212] usb 3-1: SerialNumber: syz [ 104.713244][ T5889] loop1: detected capacity change from 0 to 32768 [ 104.793626][ T5889] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.743 (5889) [ 104.869090][ T5889] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 104.902871][ T5889] BTRFS info (device loop1): using free space tree [ 104.910597][ T5903] loop0: detected capacity change from 0 to 32768 [ 104.912341][ T5889] BTRFS info (device loop1): has skinny extents [ 104.948334][ T5889] BTRFS info (device loop1): enabling ssd optimizations [ 105.033935][ T5889] BTRFS warning (device loop1): can't clear the mixed_groups feature bit while mounted [ 105.054111][ T4212] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 105.077942][ T4212] usb 3-1: No valid video chain found. [ 105.122555][ T4212] usb 3-1: USB disconnect, device number 4 [ 105.144430][ T5903] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 105.257679][ T5964] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 105.516299][ T4166] ocfs2: Unmounting device (7,0) on (node local) [ 105.877412][ T5990] IPv6: Can't replace route, no match found [ 105.971269][ T5962] loop3: detected capacity change from 0 to 32768 [ 106.037315][ T5962] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.782 (5962) [ 106.101620][ T6000] netlink: 'syz.2.788': attribute type 3 has an invalid length. [ 106.123328][ T5962] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 106.135233][ T5962] BTRFS info (device loop3): using free space tree [ 106.141780][ T5962] BTRFS info (device loop3): has skinny extents [ 106.190837][ T6004] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 106.509960][ T5982] loop4: detected capacity change from 0 to 32768 [ 106.571297][ T5982] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 106.601729][ T5982] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 106.613858][ T5962] BTRFS info (device loop3): enabling ssd optimizations [ 106.651786][ T5982] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 106.673593][ T5976] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.692953][ T4382] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 106.723922][ T5962] BTRFS warning (device loop3): can't clear the mixed_groups feature bit while mounted [ 106.740653][ T4382] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 106.898882][ T4382] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 158ms [ 106.915379][ T4382] gfs2: fsid=syz:syz.0: jid=0: Done [ 106.920756][ T5982] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 106.925272][ T5976] usb 1-1: Using ep0 maxpacket: 8 [ 107.003619][ T1333] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.073977][ T5976] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 107.088737][ T5976] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 107.133189][ T5976] usb 1-1: config 135 has no interface number 0 [ 107.143261][ T5976] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.261096][ T1333] usb 3-1: Using ep0 maxpacket: 32 [ 107.324013][ T5976] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 107.365226][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.373268][ T5976] usb 1-1: Product: syz [ 107.383808][ T1333] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.433721][ T5976] usb 1-1: Manufacturer: syz [ 107.443956][ T5976] usb 1-1: SerialNumber: syz [ 107.573790][ T1333] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 107.596701][ T1333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.618137][ T1333] usb 3-1: Product: syz [ 107.635350][ T1333] usb 3-1: Manufacturer: syz [ 107.640102][ T1333] usb 3-1: SerialNumber: syz [ 107.665512][ T1333] usb 3-1: config 0 descriptor?? [ 107.714554][ T1333] cdc_ether 3-1:0.0: skipping garbage [ 107.731313][ T1333] usb 3-1: bad CDC descriptors [ 107.747703][ T1333] usb 3-1: unsupported MDLM descriptors [ 107.783851][ T5976] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 107.800468][ T5976] usb 1-1: No valid video chain found. [ 107.838703][ T5976] usb 1-1: USB disconnect, device number 5 [ 107.950247][ T4382] usb 3-1: USB disconnect, device number 5 [ 108.242663][ T6081] loop4: detected capacity change from 0 to 32768 [ 108.287735][ T6089] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 108.320178][ T6091] loop0: detected capacity change from 0 to 256 [ 108.342774][ T6085] loop1: detected capacity change from 0 to 32768 [ 108.372806][ T6081] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.810 (6081) [ 108.405626][ T6085] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 108.411916][ T6091] FAT-fs (loop0): Directory bread(block 64) failed [ 108.422113][ T6091] FAT-fs (loop0): Directory bread(block 65) failed [ 108.433698][ T6085] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 108.441283][ T6081] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 108.453818][ T6091] FAT-fs (loop0): Directory bread(block 66) failed [ 108.462309][ T6081] BTRFS info (device loop4): using free space tree [ 108.487444][ T6085] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 108.491250][ T6091] FAT-fs (loop0): Directory bread(block 67) failed [ 108.505062][ T5976] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 108.514419][ T5976] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 108.543837][ T6081] BTRFS info (device loop4): has skinny extents [ 108.550336][ T6091] FAT-fs (loop0): Directory bread(block 68) failed [ 108.578590][ T6091] FAT-fs (loop0): Directory bread(block 69) failed [ 108.609057][ T6091] FAT-fs (loop0): Directory bread(block 70) failed [ 108.616508][ T6091] FAT-fs (loop0): Directory bread(block 71) failed [ 108.623147][ T6091] FAT-fs (loop0): Directory bread(block 72) failed [ 108.660650][ T6091] FAT-fs (loop0): Directory bread(block 73) failed [ 108.665941][ T5976] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 151ms [ 108.683408][ T5976] gfs2: fsid=syz:syz.0: jid=0: Done [ 108.689092][ T6085] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 108.788675][ T6107] netlink: 'syz.3.819': attribute type 3 has an invalid length. [ 108.796608][ T6107] netlink: 'syz.3.819': attribute type 3 has an invalid length. [ 108.855092][ T6111] loop3: detected capacity change from 0 to 256 [ 108.872532][ T6111] exfat: Deprecated parameter 'utf8' [ 108.878790][ T6111] exfat: Deprecated parameter 'namecase' [ 108.885365][ T6111] exfat: Deprecated parameter 'utf8' [ 108.901921][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 108.901936][ T26] audit: type=1800 audit(1731084516.778:3): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.816" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 108.959452][ T6081] BTRFS info (device loop4): enabling ssd optimizations [ 108.966361][ T6111] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 109.031921][ T6081] BTRFS warning (device loop4): can't clear the mixed_groups feature bit while mounted [ 109.447279][ T6126] loop3: detected capacity change from 0 to 4096 [ 109.506086][ T6134] sctp: [Deprecated]: syz.0.830 (pid 6134) Use of int in maxseg socket option. [ 109.506086][ T6134] Use struct sctp_assoc_value instead [ 109.570211][ T6126] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 109.851887][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 109.876259][ T6156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.841'. [ 109.902143][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 110.160460][ T6174] loop3: detected capacity change from 0 to 512 [ 110.219192][ T6179] loop1: detected capacity change from 0 to 164 [ 110.232894][ T6174] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 110.232894][ T6174] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 110.232894][ T6174] [ 110.289730][ T6181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.852'. [ 110.337211][ T6174] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 110.355881][ T6174] EXT4-fs (loop3): 1 truncate cleaned up [ 110.361573][ T6174] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 110.377635][ T6191] loop0: detected capacity change from 0 to 1764 [ 110.393217][ T6179] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 110.461430][ T6174] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 4: comm syz.3.848: lblock 0 mapped to illegal pblock 4 (length 1) [ 110.556707][ T6198] netlink: 152 bytes leftover after parsing attributes in process `syz.1.859'. [ 110.587557][ T6201] netlink: 'syz.2.860': attribute type 21 has an invalid length. [ 110.616069][ T6201] netlink: 152 bytes leftover after parsing attributes in process `syz.2.860'. [ 110.626407][ T6203] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 [ 110.919545][ T6225] xt_socket: unknown flags 0x8 [ 111.050760][ T6239] netlink: 'syz.2.878': attribute type 21 has an invalid length. [ 111.210779][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 111.355148][ T6248] loop1: detected capacity change from 0 to 4096 [ 111.633879][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.794783][ T6291] netlink: 'syz.2.905': attribute type 21 has an invalid length. [ 111.880855][ T6289] loop3: detected capacity change from 0 to 4096 [ 111.904113][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 112.019890][ T6289] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 112.031576][ T6289] ntfs3: loop3: Failed to load $MFT. [ 112.057008][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.269647][ T23] usb 5-1: New USB device found, idVendor=0df6, idProduct=005b, bcdDevice=bb.35 [ 112.286830][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.316255][ T23] usb 5-1: Product: syz [ 112.328419][ T23] usb 5-1: Manufacturer: syz [ 112.339650][ T23] usb 5-1: SerialNumber: syz [ 112.349962][ T6289] loop3: detected capacity change from 0 to 4096 [ 112.369626][ T23] usb 5-1: config 0 descriptor?? [ 112.408082][ T6289] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 112.422681][ T23] r8712u: register rtl8712_netdev_ops to netdev_ops [ 112.433328][ T23] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 112.467123][ T6289] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 112.478265][ T6289] ntfs3: loop3: Failed to load root. [ 112.558765][ T6331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.663889][ T23] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 112.735354][ T6337] netlink: 48 bytes leftover after parsing attributes in process `syz.0.928'. [ 112.754449][ T23] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 112.820882][ T23] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 112.842751][ T6340] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 112.863751][ T6340] netlink: 224 bytes leftover after parsing attributes in process `syz.1.929'. [ 112.903305][ T6340] nbd: illegal input index 33022 [ 112.913663][ T23] usb 5-1: USB disconnect, device number 5 [ 112.996151][ T6347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.932'. [ 113.189189][ T6349] loop0: detected capacity change from 0 to 2048 [ 113.246654][ T6349] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 113.288827][ T6357] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 113.325972][ T6349] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 113.407027][ T6362] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 113.409660][ T6349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.590863][ T6369] x_tables: duplicate entry at hook 3 [ 113.692931][ T6365] loop2: detected capacity change from 0 to 4096 [ 113.787875][ T6365] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 113.810510][ T6365] ntfs3: loop2: Failed to load $MFTMirr. [ 113.991009][ T6385] AppArmor: change_hat: Invalid input 'G' [ 114.167126][ T6365] loop2: detected capacity change from 0 to 4096 [ 114.210317][ T6393] (unnamed net_device) (uninitialized): option mode: invalid value (8) [ 114.284671][ T6365] ntfs: (device loop2): parse_options(): Unrecognized mount option discard. [ 114.343912][ T6365] ntfs: (device loop2): parse_options(): Unrecognized mount option sparse. [ 114.393611][ T6365] ntfs: (device loop2): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 114.466432][ T6365] ntfs: (device loop2): parse_options(): Unrecognized mount option nohidden. [ 114.507060][ T6365] ntfs: (device loop2): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 114.536228][ T6365] ntfs: (device loop2): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 114.638142][ T6365] ntfs: (device loop2): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 114.693063][ T6365] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 114.725085][ T6367] loop4: detected capacity change from 0 to 32768 [ 115.030559][ T6389] loop0: detected capacity change from 0 to 32768 [ 115.172469][ T6389] add_index: next_index = 0. Resetting! [ 115.713437][ T6449] Scaler: ================= START STATUS ================= [ 115.740033][ T6446] loop0: detected capacity change from 0 to 2048 [ 115.753760][ T6449] Scaler: ================== END STATUS ================== [ 115.796497][ T6453] __nla_validate_parse: 1 callbacks suppressed [ 115.796513][ T6453] netlink: 68 bytes leftover after parsing attributes in process `syz.2.986'. [ 115.830751][ T6446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.883816][ T4382] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.224654][ T6469] libceph: resolve '. [ 116.224654][ T6469] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 116.224654][ T6469] ' (ret=-3): failed [ 116.232733][ T6467] loop1: detected capacity change from 0 to 1024 [ 116.309658][ T4382] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 116.329592][ T4382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.355038][ T4382] usb 4-1: config 0 descriptor?? [ 116.392323][ T6467] EXT4-fs (loop1): Ignoring removed orlov option [ 116.402032][ T4382] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 116.419420][ T6467] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.452760][ T6467] EXT4-fs (loop1): first meta block group too large: 50331648 (group descriptor block count 1) [ 116.613950][ T3528] bcm5974 4-1:0.0: could not read from device [ 116.636181][ T4382] usb 4-1: USB disconnect, device number 4 [ 116.646735][ T6467] loop1: detected capacity change from 0 to 256 [ 116.673791][ T3528] bcm5974 4-1:0.0: could not read from device [ 116.714253][ T6467] exfat: Deprecated parameter 'debug' [ 116.719716][ T6467] exfat: Unknown parameter 'nodiscard' [ 116.768991][ T6452] loop4: detected capacity change from 0 to 32768 [ 116.804930][ T6452] XFS: ikeep mount option is deprecated. [ 116.878746][ T6452] XFS (loop4): Mounting V5 Filesystem [ 116.932234][ T6510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1011'. [ 116.946155][ T6510] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1011'. [ 116.957070][ T6510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1011'. [ 116.966793][ T6510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1011'. [ 117.085981][ T6452] XFS (loop4): Ending clean mount [ 117.105888][ T6452] XFS (loop4): Quotacheck needed: Please wait. [ 117.214017][ T6452] XFS (loop4): Quotacheck: Done. [ 117.325470][ T4171] XFS (loop4): Unmounting Filesystem [ 117.485272][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'. [ 117.550153][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 117.592419][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 117.754332][ T6547] xt_NFQUEUE: number of total queues is 0 [ 117.966940][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 118.140297][ T6559] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.170663][ T6561] loop2: detected capacity change from 0 to 256 [ 118.232192][ T6520] loop1: detected capacity change from 0 to 32768 [ 118.313099][ T6561] FAT-fs (loop2): Directory bread(block 64) failed [ 118.330531][ T6561] FAT-fs (loop2): Directory bread(block 65) failed [ 118.337868][ T6561] FAT-fs (loop2): Directory bread(block 66) failed [ 118.338026][ T6563] loop0: detected capacity change from 0 to 2048 [ 118.357256][ T6520] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1015 (6520) [ 118.366124][ T6561] FAT-fs (loop2): Directory bread(block 67) failed [ 118.390851][ T6520] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 118.407232][ T6561] FAT-fs (loop2): Directory bread(block 68) failed [ 118.432274][ T6563] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.448604][ T6561] FAT-fs (loop2): Directory bread(block 69) failed [ 118.459496][ T6520] BTRFS info (device loop1): using free space tree [ 118.473634][ T6561] FAT-fs (loop2): Directory bread(block 70) failed [ 118.480126][ T6520] BTRFS info (device loop1): has skinny extents [ 118.501953][ T6561] FAT-fs (loop2): Directory bread(block 71) failed [ 118.542719][ T6561] FAT-fs (loop2): Directory bread(block 72) failed [ 118.549943][ T6561] FAT-fs (loop2): Directory bread(block 73) failed [ 118.741078][ T6588] xt_cgroup: path and classid specified [ 118.838444][ T6520] BTRFS info (device loop1): enabling ssd optimizations [ 118.984212][ T6599] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 119.005224][ T6555] loop4: detected capacity change from 0 to 32768 [ 119.068581][ T6555] (syz.4.1023,6555,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.119900][ T6555] (syz.4.1023,6555,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.147193][ T6604] netlink: 1788 bytes leftover after parsing attributes in process `syz.2.1047'. [ 119.171712][ T6606] loop0: detected capacity change from 0 to 256 [ 119.235311][ T6555] JBD2: Ignoring recovery information on journal [ 119.358479][ T6555] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 119.378150][ T6606] FAT-fs (loop0): Directory bread(block 64) failed [ 119.403656][ T6606] FAT-fs (loop0): Directory bread(block 65) failed [ 119.412746][ T6606] FAT-fs (loop0): Directory bread(block 66) failed [ 119.438098][ T6606] FAT-fs (loop0): Directory bread(block 67) failed [ 119.457194][ T6606] FAT-fs (loop0): Directory bread(block 68) failed [ 119.477329][ T6606] FAT-fs (loop0): Directory bread(block 69) failed [ 119.505866][ T6606] FAT-fs (loop0): Directory bread(block 70) failed [ 119.526912][ T6606] FAT-fs (loop0): Directory bread(block 71) failed [ 119.546686][ T6606] FAT-fs (loop0): Directory bread(block 72) failed [ 119.560532][ T6625] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.572159][ T6606] FAT-fs (loop0): Directory bread(block 73) failed [ 119.580214][ T6625] FAT-fs (loop3): unable to read boot sector [ 119.672692][ T4171] ocfs2: Unmounting device (7,4) on (node local) [ 119.979983][ T6633] loop0: detected capacity change from 0 to 2048 [ 120.023703][ T6629] syz.2.1061 (6629) used greatest stack depth: 19064 bytes left [ 120.260352][ T6640] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.363111][ T6633] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 120.525752][ T6633] Remounting filesystem read-only [ 120.738856][ T6658] loop4: detected capacity change from 0 to 256 [ 120.803837][ T5972] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.811471][ T5975] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.043806][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 121.088783][ T5975] usb 2-1: Using ep0 maxpacket: 16 [ 121.172762][ T5972] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 121.193239][ T5972] usb 4-1: config 0 has no interface number 1 [ 121.200216][ T5972] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 121.211063][ T5972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2039, setting to 1024 [ 121.230924][ T5975] usb 2-1: config 0 has no interfaces? [ 121.249811][ T5972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 121.359691][ T5975] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 121.375297][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.383331][ T5975] usb 2-1: Product: syz [ 121.400542][ T5975] usb 2-1: Manufacturer: syz [ 121.407751][ T5975] r8152-cfgselector 2-1: config 0 descriptor?? [ 121.431720][ T6694] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 121.445723][ T5972] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 121.456811][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.466471][ T5972] usb 4-1: Product: syz [ 121.472902][ T5972] usb 4-1: Manufacturer: syz [ 121.478644][ T5972] usb 4-1: SerialNumber: syz [ 121.495111][ T5972] usb 4-1: config 0 descriptor?? [ 121.525887][ T6700] loop0: detected capacity change from 0 to 8 [ 121.546458][ T5972] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 121.720486][ T5975] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 121.756845][ T2422] pvrusb2: Invalid read control endpoint [ 121.758349][ T5972] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 121.769549][ T2422] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 121.784188][ T4210] usb 2-1: config 0 descriptor?? [ 121.824664][ T2422] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 121.826703][ T5972] usb 4-1: USB disconnect, device number 5 [ 121.869032][ T6709] loop4: detected capacity change from 0 to 2048 [ 121.930114][ T6139] usb 2-1: USB disconnect, device number 8 [ 121.943779][ T4210] usb 2-1: can't set config #0, error -71 [ 121.969669][ T6709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.018146][ T6709] Invalid option length (0) for dns_resolver key [ 122.421894][ T6730] ERROR: device name not specified. [ 122.534923][ T6736] loop4: detected capacity change from 0 to 8 [ 122.557590][ T6702] loop2: detected capacity change from 0 to 32768 [ 122.697159][ T6702] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 122.697159][ T6702] [ 122.744264][ T6702] ialloc: diAlloc returned -5! [ 123.019256][ T6763] loop4: detected capacity change from 0 to 512 [ 123.089225][ T6767] loop0: detected capacity change from 0 to 64 [ 123.150967][ T6763] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=continue,minixdf,dioread_nolock,errors=remount-ro,. Quota mode: none. [ 123.212651][ T6763] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 6: comm syz.4.1122: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=4096 fake=0 [ 123.313724][ T6763] EXT4-fs (loop4): Remounting filesystem read-only [ 123.340764][ T6763] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 123.361038][ T6763] EXT4-fs (loop4): Remounting filesystem read-only [ 123.404115][ T6763] EXT4-fs warning (device loop4): ext4_rename_delete:3792: inode #2: comm syz.4.1122: Deleting old file: nlink 4, error=-117 [ 123.602623][ T6780] loop2: detected capacity change from 0 to 4096 [ 123.656876][ T6780] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 123.763254][ T6746] loop3: detected capacity change from 0 to 32768 [ 123.771867][ T6780] ntfs3: loop2: ino=5, "/" directory corrupted [ 124.052229][ T6746] XFS (loop3): Mounting V5 Filesystem [ 124.073639][ T6809] netlink: 'syz.2.1143': attribute type 10 has an invalid length. [ 124.081651][ T6809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1143'. [ 124.108454][ T6810] sctp: [Deprecated]: syz.1.1142 (pid 6810) Use of int in max_burst socket option deprecated. [ 124.108454][ T6810] Use struct sctp_assoc_value instead [ 124.141735][ T6746] XFS (loop3): Ending clean mount [ 124.190767][ T4174] XFS (loop3): Unmounting Filesystem [ 124.194449][ T6809] device ipvlan1 entered promiscuous mode [ 124.226151][ T6809] bridge0: port 3(ipvlan1) entered blocking state [ 124.234067][ T6809] bridge0: port 3(ipvlan1) entered disabled state [ 124.374545][ T4385] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.398051][ T6809] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 124.433432][ T6825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1148'. [ 124.464096][ T6825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1148'. [ 124.480871][ T6827] loop1: detected capacity change from 0 to 256 [ 124.483864][ T6825] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1148'. [ 124.783723][ T4385] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 124.796283][ T6839] loop3: detected capacity change from 0 to 512 [ 124.800587][ T4385] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 124.844540][ T4385] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.870504][ T4385] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 124.886225][ T6839] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 124.916832][ T6839] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.991512][ T6839] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 125.023767][ T6839] EXT4-fs (loop3): 1 truncate cleaned up [ 125.029457][ T6839] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 125.042414][ T6856] loop1: detected capacity change from 0 to 764 [ 125.113977][ T4385] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 125.123103][ T4385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.161796][ T6856] Symlink component flag not implemented [ 125.179368][ T6858] loop0: detected capacity change from 0 to 8 [ 125.196684][ T6856] Symlink component flag not implemented [ 125.203422][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1164'. [ 125.224276][ T6856] Symlink component flag not implemented (129) [ 125.230486][ T6856] Symlink component flag not implemented (6) [ 125.230972][ T4385] usb 5-1: Product: syz [ 125.238288][ T6862] tc_dump_action: action bad kind [ 125.241868][ T4385] usb 5-1: Manufacturer: syz [ 125.261444][ T4385] usb 5-1: SerialNumber: syz [ 125.304988][ T4385] usb 5-1: config 0 descriptor?? [ 125.351802][ T4385] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 125.371291][ T4385] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 125.397945][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 125.613191][ T23] usb 5-1: USB disconnect, device number 6 [ 125.624229][ T6880] loop0: detected capacity change from 0 to 512 [ 125.629254][ T23] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 125.671529][ T23] ti_usb_3410_5052 5-1:0.0: device disconnected [ 125.757186][ T6880] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1172: bad orphan inode 17 [ 125.789316][ T6880] ext4_test_bit(bit=16, block=4) = 1 [ 125.803189][ T6880] is_bad_inode(inode)=0 [ 125.886429][ T6880] NEXT_ORPHAN(inode)=0 [ 125.891038][ T6880] max_ino=32 [ 125.895194][ T6880] i_nlink=1 [ 125.899066][ T6880] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.177129][ T6910] netlink: 'syz.1.1187': attribute type 1 has an invalid length. [ 126.331700][ T6925] loop0: detected capacity change from 0 to 16 [ 126.420722][ T6925] erofs: (device loop0): mounted with root inode @ nid 36. [ 126.421852][ T6931] loop4: detected capacity change from 0 to 256 [ 126.453634][ T6139] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.475931][ T6925] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 126.514901][ T6925] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 126.587355][ T6931] FAT-fs (loop4): Directory bread(block 64) failed [ 126.594523][ T6931] FAT-fs (loop4): Directory bread(block 65) failed [ 126.601252][ T6931] FAT-fs (loop4): Directory bread(block 66) failed [ 126.651008][ T6931] FAT-fs (loop4): Directory bread(block 67) failed [ 126.673913][ T6931] FAT-fs (loop4): Directory bread(block 68) failed [ 126.680524][ T6931] FAT-fs (loop4): Directory bread(block 69) failed [ 126.703642][ T6139] usb 3-1: Using ep0 maxpacket: 16 [ 126.713899][ T6931] FAT-fs (loop4): Directory bread(block 70) failed [ 126.731335][ T6931] FAT-fs (loop4): Directory bread(block 71) failed [ 126.740963][ T6931] FAT-fs (loop4): Directory bread(block 72) failed [ 126.753818][ T6931] FAT-fs (loop4): Directory bread(block 73) failed [ 126.823819][ T6139] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 126.832275][ T6139] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 126.879325][ T6139] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 126.889210][ T6939] loop0: detected capacity change from 0 to 4096 [ 126.908313][ T6139] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 126.933809][ T6139] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 126.943442][ T6945] loop1: detected capacity change from 0 to 256 [ 126.962252][ T6139] usb 3-1: config 0 has no interface number 0 [ 126.968558][ T6939] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 126.983719][ T6139] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 127.009638][ T6139] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 127.030348][ T6139] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.050707][ T6945] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe40551cd, utbl_chksum : 0xe619d30d) [ 127.061469][ T6139] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.086578][ T6139] usb 3-1: config 0 interface 125 has no altsetting 0 [ 127.093388][ T6139] usb 3-1: config 0 interface 125 has no altsetting 2 [ 127.095908][ T6939] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 127.125182][ T6939] ntfs3: loop0: mft corrupted [ 127.129990][ T6939] ntfs3: loop0: Failed to load $Extend. [ 127.247135][ T9] ntfs3: loop0: ino=1b, Internal error [ 127.252660][ T9] ntfs3: loop0: ntfs3_write_inode r=1b failed, -22. [ 127.283834][ T6139] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 127.301764][ T6139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.332391][ T6139] usb 3-1: Product: syz [ 127.362365][ T6139] usb 3-1: Manufacturer: syz [ 127.393633][ T6139] usb 3-1: SerialNumber: syz [ 127.430650][ T6139] usb 3-1: config 0 descriptor?? [ 127.495556][ T6139] usb 3-1: selecting invalid altsetting 2 [ 127.612524][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 127.730778][ T6973] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1218'. [ 127.923584][ C0] usb 3-1: async_complete: urb error -71 [ 127.929996][ C0] usb 3-1: async_complete: urb error -71 [ 127.935742][ C0] usb 3-1: async_complete: urb error -71 [ 127.949781][ T6139] get_1284_register: usb error -71 [ 127.955059][ T6139] uss720: probe of 3-1:0.125 failed with error -71 [ 127.970172][ T6139] usb 3-1: USB disconnect, device number 6 [ 128.013076][ T6986] sctp: [Deprecated]: syz.3.1224 (pid 6986) Use of int in maxseg socket option. [ 128.013076][ T6986] Use struct sctp_assoc_value instead [ 128.365996][ T7003] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 128.422535][ T6962] loop1: detected capacity change from 0 to 32768 [ 128.484756][ T7009] IPv6: Can't replace route, no match found [ 128.516644][ T7012] ipt_REJECT: TCP_RESET invalid for non-tcp [ 128.601209][ T6962] XFS (loop1): Mounting V5 Filesystem [ 128.834261][ T6962] XFS (loop1): Ending clean mount [ 128.864551][ T6962] XFS (loop1): Quotacheck needed: Please wait. [ 128.945611][ T6962] XFS (loop1): Quotacheck: Done. [ 129.036976][ T7048] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 129.139019][ T4165] XFS (loop1): Unmounting Filesystem [ 129.254368][ T7050] loop0: detected capacity change from 0 to 4096 [ 129.286892][ T7060] autofs4:pid:7060:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 129.330750][ T7050] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 129.364134][ T7060] autofs4:pid:7060:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 129.373627][ T7050] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 129.398035][ T7050] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 129.430223][ T7050] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 129.489185][ T7050] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 129.535344][ T7050] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 129.608728][ T7050] ntfs: (device loop0): check_mft_mirror(): Failed to read $MFTMirr. [ 129.641774][ T7050] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 129.730260][ T7050] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 129.753630][ T7050] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 129.852901][ T7050] ntfs: volume version 3.1. [ 130.107166][ T7094] loop0: detected capacity change from 0 to 256 [ 130.160052][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 130.399579][ T7106] loop0: detected capacity change from 0 to 128 [ 130.443059][ T7108] loop3: detected capacity change from 0 to 1024 [ 130.551176][ T7106] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 130.660393][ T7108] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.850987][ T7084] loop1: detected capacity change from 0 to 32768 [ 130.871467][ T7100] loop4: detected capacity change from 0 to 32768 [ 130.934613][ T7100] XFS: ikeep mount option is deprecated. [ 130.940448][ T7100] XFS: noikeep mount option is deprecated. [ 131.003768][ T7084] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 131.091803][ T4165] ocfs2: Unmounting device (7,1) on (node local) [ 131.124674][ T7100] XFS (loop4): Mounting V5 Filesystem [ 131.268304][ T7100] XFS (loop4): Ending clean mount [ 131.322161][ T7100] XFS (loop4): Quotacheck needed: Please wait. [ 131.324755][ T7157] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 131.341481][ T7160] libceph: resolve '. [ 131.341481][ T7160] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 131.341481][ T7160] ' (ret=-3): failed [ 131.477628][ T7100] XFS (loop4): Quotacheck: Done. [ 131.604652][ T4171] XFS (loop4): Unmounting Filesystem [ 132.149572][ T7184] loop1: detected capacity change from 0 to 4096 [ 132.215652][ T7184] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 132.231813][ T7184] ntfs3: loop1: Failed to load $MFTMirr. [ 132.386787][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1330'. [ 132.408524][ T7203] loop4: detected capacity change from 0 to 1764 [ 132.437981][ T7184] loop1: detected capacity change from 0 to 4096 [ 132.776994][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.784305][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.839456][ T7219] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 132.856018][ T7195] loop3: detected capacity change from 0 to 32768 [ 132.902983][ T7195] (syz.3.1318,7195,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.953208][ T7227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.966295][ T7195] (syz.3.1318,7195,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.045956][ T7195] JBD2: Ignoring recovery information on journal [ 133.185621][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 133.205619][ T7236] misc userio: The device must be registered before sending interrupts [ 133.227238][ T7195] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 133.421947][ T7249] netlink: 'syz.1.1343': attribute type 28 has an invalid length. [ 133.467502][ T7249] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1343'. [ 133.525042][ T4174] ocfs2: Unmounting device (7,3) on (node local) [ 133.833745][ T7269] loop0: detected capacity change from 0 to 8 [ 133.959288][ T7269] SQUASHFS error: Failed to read block 0x260685: -5 [ 133.985165][ T7269] SQUASHFS error: Unable to read metadata cache entry [260685] [ 134.019633][ T7269] SQUASHFS error: Unable to read directory block [260685:0] [ 134.346761][ T7306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.396180][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 134.423651][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 134.466230][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1374'. [ 134.475787][ T5973] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 134.644090][ T7321] loop3: detected capacity change from 0 to 2048 [ 134.716915][ T7321] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 134.748469][ T7321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.833867][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 134.847254][ T5973] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 134.883613][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 134.893455][ T5973] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 134.922021][ T5973] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 134.942495][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.967440][ T5973] usb 1-1: config 0 descriptor?? [ 135.163807][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.235065][ T5973] hdpvr 1-1:0.0: firmware version 0xa dated x)8)F0-]gdX [ 135.235065][ T5973] 6ɫ}(@&uDLK [ 135.283581][ T5973] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 135.310092][ T7361] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.443828][ T5973] hdpvr 1-1:0.0: device init failed [ 135.449137][ T5973] hdpvr: probe of 1-1:0.0 failed with error -12 [ 135.496927][ T7367] netlink: 'syz.1.1400': attribute type 2 has an invalid length. [ 135.503391][ T5973] usb 1-1: USB disconnect, device number 6 [ 135.505308][ T7367] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1400'. [ 135.614058][ T21] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 135.623144][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.658248][ T21] usb 3-1: config 0 descriptor?? [ 135.679486][ T7374] loop3: detected capacity change from 0 to 1024 [ 135.715607][ T7377] loop1: detected capacity change from 0 to 2048 [ 135.717199][ T21] cp210x 3-1:0.0: cp210x converter detected [ 135.755916][ T7375] loop4: detected capacity change from 0 to 4096 [ 135.767827][ T7377] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 135.789302][ T7377] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 135.815772][ T7375] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 135.843944][ T7375] ntfs3: loop4: Failed to load $MFT. [ 135.850391][ T7377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.945488][ T21] usb 3-1: cp210x converter now attached to ttyUSB0 [ 136.087347][ T7375] loop4: detected capacity change from 0 to 4096 [ 136.152441][ T21] usb 3-1: USB disconnect, device number 7 [ 136.167336][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 136.194602][ T7375] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 136.206210][ T21] cp210x 3-1:0.0: device disconnected [ 136.253213][ T7375] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 136.271009][ T7375] ntfs3: loop4: Failed to load root. [ 136.383743][ T5975] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 136.623711][ T5975] usb 2-1: Using ep0 maxpacket: 8 [ 136.743870][ T5975] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 136.755897][ T7420] loop2: detected capacity change from 0 to 64 [ 136.757884][ T5975] usb 2-1: config 0 has no interface number 1 [ 136.784608][ T5975] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 136.808771][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2039, setting to 1024 [ 136.853661][ T5975] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 137.043861][ T5975] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 137.067285][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.097695][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'. [ 137.109195][ T5975] usb 2-1: Product: syz [ 137.113401][ T5975] usb 2-1: Manufacturer: syz [ 137.136743][ T5975] usb 2-1: SerialNumber: syz [ 137.157948][ T5975] usb 2-1: config 0 descriptor?? [ 137.206117][ T5975] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 137.426461][ T5975] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 137.479375][ T5975] usb 2-1: USB disconnect, device number 9 [ 137.507181][ T5975] pvrusb2: Device being rendered inoperable [ 137.572667][ T5975] pvrusb2: Device being rendered inoperable [ 138.057194][ T7431] loop0: detected capacity change from 0 to 32768 [ 138.085796][ T7475] netlink: 'syz.1.1454': attribute type 12 has an invalid length. [ 138.234610][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1459'. [ 138.266503][ T7431] XFS (loop0): Mounting V5 Filesystem [ 138.365340][ T7431] XFS (loop0): Ending clean mount [ 138.439750][ T7510] loop3: detected capacity change from 0 to 64 [ 138.471890][ T4166] XFS (loop0): Unmounting Filesystem [ 138.562777][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1468'. [ 138.647814][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1468'. [ 138.983552][ T5971] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 139.223594][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 139.266328][ T7558] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.343797][ T5971] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 139.376209][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 139.408425][ T5971] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 139.523139][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'. [ 139.594037][ T5971] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 139.609325][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.634091][ T5971] usb 5-1: Product: syz [ 139.658219][ T5971] usb 5-1: Manufacturer: syz [ 139.662871][ T5971] usb 5-1: SerialNumber: syz [ 139.724883][ T5971] usb 5-1: config 0 descriptor?? [ 139.743985][ T7522] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.754622][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'. [ 139.775553][ T5971] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 139.822085][ T5971] mceusb: probe of 5-1:0.0 failed with error -12 [ 140.009721][ T23] usb 5-1: USB disconnect, device number 7 [ 140.078219][ T7597] loop3: detected capacity change from 0 to 512 [ 140.155269][ T7598] device bond1 entered promiscuous mode [ 140.164300][ T7597] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.1509: bad orphan inode 4 [ 140.174234][ T7598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.232993][ T7598] bond1 (unregistering): Released all slaves [ 140.233623][ T7597] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.270789][ T7597] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.1509: Logical block already allocated [ 140.384727][ T7605] sctp: [Deprecated]: syz.2.1512 (pid 7605) Use of int in maxseg socket option. [ 140.384727][ T7605] Use struct sctp_assoc_value instead [ 140.717507][ T7616] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 140.757111][ T7621] loop2: detected capacity change from 0 to 256 [ 140.777586][ T7581] loop0: detected capacity change from 0 to 32768 [ 140.914673][ T7626] delete_channel: no stack [ 140.945624][ T7581] (syz.0.1501,7581,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.952808][ T7621] FAT-fs (loop2): Directory bread(block 64) failed [ 141.010899][ T7581] (syz.0.1501,7581,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.013805][ T7621] FAT-fs (loop2): Directory bread(block 65) failed [ 141.089903][ T7621] FAT-fs (loop2): Directory bread(block 66) failed [ 141.110750][ T7581] JBD2: Ignoring recovery information on journal [ 141.112095][ T7621] FAT-fs (loop2): Directory bread(block 67) failed [ 141.128210][ T7621] FAT-fs (loop2): Directory bread(block 68) failed [ 141.134860][ T7621] FAT-fs (loop2): Directory bread(block 69) failed [ 141.142073][ T7621] FAT-fs (loop2): Directory bread(block 70) failed [ 141.149029][ T7621] FAT-fs (loop2): Directory bread(block 71) failed [ 141.158894][ T7621] FAT-fs (loop2): Directory bread(block 72) failed [ 141.165566][ T7621] FAT-fs (loop2): Directory bread(block 73) failed [ 141.195381][ T7636] device bond1 entered promiscuous mode [ 141.201247][ T7636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.282497][ T7636] bond1 (unregistering): Released all slaves [ 141.320928][ T7581] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 141.379296][ T5973] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.386766][ T7581] [ 141.389141][ T7581] ====================================================== [ 141.396172][ T7581] WARNING: possible circular locking dependency detected [ 141.403206][ T7581] 5.15.171-syzkaller #0 Not tainted [ 141.408418][ T7581] ------------------------------------------------------ [ 141.410334][ T7623] loop1: detected capacity change from 0 to 32768 [ 141.415582][ T7581] syz.0.1501/7581 is trying to acquire lock: [ 141.415598][ T7581] ffff888074756a20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x221/0x2a0 [ 141.415657][ T7581] [ 141.415657][ T7581] but task is already holding lock: [ 141.415663][ T7581] ffff888074756d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 141.415715][ T7581] [ 141.415715][ T7581] which lock already depends on the new lock. [ 141.415715][ T7581] [ 141.415721][ T7581] [ 141.415721][ T7581] the existing dependency chain (in reverse order) is: [ 141.415728][ T7581] [ 141.415728][ T7581] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 141.415761][ T7581] lock_acquire+0x1db/0x4f0 [ 141.415782][ T7581] down_write+0x38/0x60 [ 141.498394][ T7581] ocfs2_lock_global_qf+0x202/0x2a0 [ 141.504246][ T7581] ocfs2_acquire_dquot+0x299/0xb40 [ 141.509877][ T7581] dqget+0x762/0xe90 [ 141.514289][ T7581] dquot_set_dqblk+0x27/0xf20 [ 141.519483][ T7581] quota_setquota+0x6d3/0x840 [ 141.524681][ T7581] __se_sys_quotactl+0x2b1/0x770 [ 141.530140][ T7581] do_syscall_64+0x3b/0xb0 [ 141.535084][ T7581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.541516][ T7581] [ 141.541516][ T7581] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 141.549159][ T7581] lock_acquire+0x1db/0x4f0 [ 141.554201][ T7581] __mutex_lock_common+0x1da/0x25a0 [ 141.559913][ T7581] mutex_lock_nested+0x17/0x20 [ 141.565190][ T7581] dquot_commit+0x57/0x510 [ 141.570117][ T7581] ext4_write_dquot+0x1fd/0x360 [ 141.575486][ T7581] mark_all_dquot_dirty+0xf7/0x400 [ 141.581294][ T7581] __dquot_free_space+0x932/0xe40 [ 141.586852][ T7581] ext4_free_blocks+0x1f5c/0x2e90 [ 141.592412][ T7581] ext4_ext_remove_space+0x24da/0x4db0 [ 141.598409][ T7581] ext4_ext_truncate+0x191/0x250 [ 141.603881][ T7581] ext4_truncate+0x9fd/0x1130 [ 141.609167][ T7581] ext4_setattr+0xf96/0x1990 [ 141.614273][ T7581] notify_change+0xc6d/0xf50 [ 141.619379][ T7581] do_truncate+0x21c/0x300 [ 141.624337][ T7581] vfs_truncate+0x2dd/0x3a0 [ 141.629353][ T7581] do_sys_truncate+0xda/0x190 [ 141.633587][ T5973] usb 5-1: Using ep0 maxpacket: 8 [ 141.634543][ T7581] do_syscall_64+0x3b/0xb0 [ 141.634567][ T7581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.650922][ T7581] [ 141.650922][ T7581] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 141.658563][ T7581] lock_acquire+0x1db/0x4f0 [ 141.663591][ T7581] down_write+0x38/0x60 [ 141.668279][ T7581] ext4_truncate+0x974/0x1130 [ 141.673481][ T7581] ext4_setattr+0xf96/0x1990 [ 141.678602][ T7581] notify_change+0xc6d/0xf50 [ 141.683733][ T7581] do_truncate+0x21c/0x300 [ 141.688700][ T7581] do_sys_ftruncate+0x2eb/0x390 [ 141.694064][ T7581] do_syscall_64+0x3b/0xb0 [ 141.699005][ T7581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.705441][ T7581] [ 141.705441][ T7581] -> #3 (jbd2_handle){++++}-{0:0}: [ 141.712729][ T7581] lock_acquire+0x1db/0x4f0 [ 141.717753][ T7581] start_this_handle+0x12e1/0x1570 [ 141.723397][ T7581] jbd2__journal_start+0x2d1/0x5c0 [ 141.729045][ T7581] jbd2_journal_start+0x25/0x30 [ 141.734425][ T7581] ocfs2_start_trans+0x3c2/0x6f0 [ 141.739907][ T7581] ocfs2_symlink+0x147f/0x2e20 [ 141.745207][ T7581] vfs_symlink+0x247/0x3d0 [ 141.750151][ T7581] do_symlinkat+0x1fd/0x600 [ 141.754222][ T5973] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 141.755166][ T7581] __x64_sys_symlink+0x7a/0x90 [ 141.763233][ T5973] usb 5-1: config 0 has no interface number 1 [ 141.768499][ T7581] do_syscall_64+0x3b/0xb0 [ 141.768526][ T7581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.768551][ T7581] [ 141.768551][ T7581] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 141.768583][ T7581] lock_acquire+0x1db/0x4f0 [ 141.777392][ T5973] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 141.779615][ T7581] down_read+0x45/0x2e0 [ 141.779642][ T7581] ocfs2_start_trans+0x3b7/0x6f0 [ 141.786605][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2039, setting to 1024 [ 141.794535][ T7581] ocfs2_symlink+0x147f/0x2e20 [ 141.794565][ T7581] vfs_symlink+0x247/0x3d0 [ 141.794583][ T7581] do_symlinkat+0x1fd/0x600 [ 141.794599][ T7581] __x64_sys_symlink+0x7a/0x90 [ 141.794617][ T7581] do_syscall_64+0x3b/0xb0 [ 141.794636][ T7581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.800456][ T5973] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 141.809358][ T7581] [ 141.809358][ T7581] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 141.809400][ T7581] lock_acquire+0x1db/0x4f0 [ 141.809424][ T7581] ocfs2_start_trans+0x2b2/0x6f0 [ 141.809442][ T7581] ocfs2_write_info+0x124/0x3a0 [ 141.809461][ T7581] dquot_set_dqinfo+0x488/0x6f0 [ 141.901375][ T7581] quota_setinfo+0x3d6/0x4f0 [ 141.906487][ T7581] __se_sys_quotactl+0x2b1/0x770 [ 141.911954][ T7581] do_syscall_64+0x3b/0xb0 [ 141.916891][ T7581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.923308][ T7581] [ 141.923308][ T7581] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 141.932179][ T7581] validate_chain+0x1649/0x5930 [ 141.937592][ T7581] __lock_acquire+0x1295/0x1ff0 [ 141.942961][ T7581] lock_acquire+0x1db/0x4f0 [ 141.947979][ T7581] down_write+0x38/0x60 [ 141.952656][ T7581] ocfs2_lock_global_qf+0x221/0x2a0 [ 141.958377][ T7581] ocfs2_acquire_dquot+0x299/0xb40 [ 141.964036][ T7581] dqget+0x762/0xe90 [ 141.968480][ T7581] dquot_set_dqblk+0x27/0xf20 [ 141.973867][ T5973] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 141.973880][ T7581] quota_setquota+0x6d3/0x840 [ 141.982911][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.988090][ T7581] __se_sys_quotactl+0x2b1/0x770 [ 141.988119][ T7581] do_syscall_64+0x3b/0xb0 [ 141.988137][ T7581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.988162][ T7581] [ 141.988162][ T7581] other info that might help us debug this: [ 141.988162][ T7581] [ 141.988169][ T7581] Chain exists of: [ 141.988169][ T7581] &ocfs2_quota_ip_alloc_sem_key --> &dquot->dq_lock --> [ 141.998395][ T5973] usb 5-1: Product: syz [ 142.001689][ T7581] &ocfs2_sysfile_lock_key[args->fi_sysfile_type] [ 142.007089][ T5973] usb 5-1: Manufacturer: syz [ 142.013054][ T7581] #7 [ 142.023807][ T5973] usb 5-1: SerialNumber: syz [ 142.034133][ T7581] [ 142.034133][ T7581] [ 142.034146][ T7581] Possible unsafe locking scenario: [ 142.034146][ T7581] [ 142.034152][ T7581] CPU0 CPU1 [ 142.034157][ T7581] ---- ---- [ 142.034162][ T7581] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 142.034187][ T7581] lock(&dquot->dq_lock); [ 142.034202][ T7581] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 142.034222][ T7581] lock(&ocfs2_quota_ip_alloc_sem_key); [ 142.034235][ T7581] [ 142.034235][ T7581] *** DEADLOCK *** [ 142.034235][ T7581] [ 142.034241][ T7581] 3 locks held by syz.0.1501/7581: [ 142.041751][ T5973] usb 5-1: config 0 descriptor?? [ 142.044692][ T7581] #0: ffff88805c4740e0 (&type->s_umount_key#63){++++}-{3:3}, at: user_get_super+0x11a/0x250 [ 142.044760][ T7581] #1: ffff8880747820a8 (&dquot->dq_lock){+.+.}-{3:3} [ 142.085476][ T5973] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 142.086479][ T7581] , at: ocfs2_acquire_dquot+0x28c/0xb40 [ 142.156690][ T7581] #2: ffff888074756d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 142.169674][ T7581] [ 142.169674][ T7581] stack backtrace: [ 142.175557][ T7581] CPU: 1 PID: 7581 Comm: syz.0.1501 Not tainted 5.15.171-syzkaller #0 [ 142.183712][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.193952][ T7581] Call Trace: [ 142.197232][ T7581] [ 142.200165][ T7581] dump_stack_lvl+0x1e3/0x2d0 [ 142.204840][ T7581] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 142.210733][ T7581] ? print_circular_bug+0x12b/0x1a0 [ 142.215931][ T7581] check_noncircular+0x2f8/0x3b0 [ 142.220867][ T7581] ? add_chain_block+0x850/0x850 [ 142.225861][ T7581] ? lockdep_lock+0x11f/0x2a0 [ 142.230562][ T7581] validate_chain+0x1649/0x5930 [ 142.235551][ T7581] ? stack_trace_save+0x113/0x1c0 [ 142.240609][ T7581] ? reacquire_held_locks+0x660/0x660 [ 142.245977][ T7581] ? stack_trace_snprint+0xe0/0xe0 [ 142.251515][ T7581] ? lockdep_unlock+0x166/0x300 [ 142.256366][ T7581] ? lockdep_unlock+0x166/0x300 [ 142.261232][ T7581] ? mark_lock+0x98/0x340 [ 142.265573][ T7581] __lock_acquire+0x1295/0x1ff0 [ 142.270421][ T7581] lock_acquire+0x1db/0x4f0 [ 142.274920][ T7581] ? ocfs2_lock_global_qf+0x221/0x2a0 [ 142.280328][ T7581] ? read_lock_is_recursive+0x10/0x10 [ 142.285713][ T7581] ? __might_sleep+0xc0/0xc0 [ 142.290322][ T7581] ? rwsem_write_trylock+0x166/0x210 [ 142.295617][ T7581] ? clear_nonspinnable+0x60/0x60 [ 142.296020][ T5973] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 142.300660][ T7581] ? do_raw_spin_unlock+0x137/0x8b0 [ 142.313215][ T7581] down_write+0x38/0x60 [ 142.317371][ T7581] ? ocfs2_lock_global_qf+0x221/0x2a0 [ 142.322758][ T7581] ocfs2_lock_global_qf+0x221/0x2a0 [ 142.327028][ T5973] usb 5-1: USB disconnect, device number 8 [ 142.328043][ T7581] ? lock_buffer+0x80/0x80 [ 142.334492][ T5973] pvrusb2: Device being rendered inoperable [ 142.338234][ T7581] ? __mutex_lock_common+0x444/0x25a0 [ 142.345789][ T5973] pvrusb2: Device being rendered inoperable [ 142.349479][ T7581] ocfs2_acquire_dquot+0x299/0xb40 [ 142.360461][ T7581] ? dqget+0x6dc/0xe90 [ 142.364550][ T7581] ? mutex_unlock+0x10/0x10 [ 142.369063][ T7581] ? from_kgid+0x1a3/0x730 [ 142.373511][ T7581] ? ocfs2_destroy_dquot+0x40/0x40 [ 142.378749][ T7581] ? percpu_counter_add_batch+0x142/0x160 [ 142.384487][ T7581] dqget+0x762/0xe90 [ 142.388424][ T7581] dquot_set_dqblk+0x27/0xf20 [ 142.393123][ T7581] ? __might_fault+0xb4/0x110 [ 142.397831][ T7581] quota_setquota+0x6d3/0x840 [ 142.402539][ T7581] ? quota_getnextquota+0x6b0/0x6b0 [ 142.407774][ T7581] ? bpf_lsm_capable+0x5/0x10 [ 142.412486][ T7581] ? security_capable+0x86/0xb0 [ 142.417368][ T7581] ? do_quotactl+0x4e1/0x6c0 [ 142.421990][ T7581] __se_sys_quotactl+0x2b1/0x770 [ 142.426956][ T7581] ? __lock_acquire+0x1ff0/0x1ff0 [ 142.432002][ T7581] ? __x64_sys_quotactl+0xa0/0xa0 [ 142.437049][ T7581] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 142.443038][ T7581] ? print_irqtrace_events+0x210/0x210 [ 142.448500][ T7581] ? vtime_user_exit+0x2d1/0x400 [ 142.453531][ T7581] ? syscall_enter_from_user_mode+0x2e/0x240 [ 142.459570][ T7581] ? lockdep_hardirqs_on+0x94/0x130 [ 142.464771][ T7581] ? syscall_enter_from_user_mode+0x2e/0x240 [ 142.470757][ T7581] do_syscall_64+0x3b/0xb0 [ 142.475175][ T7581] ? clear_bhb_loop+0x15/0x70 [ 142.479861][ T7581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.485752][ T7581] RIP: 0033:0x7f3035b7c719 [ 142.490158][ T7581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.509898][ T7581] RSP: 002b:00007f3033ff4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 142.518304][ T7581] RAX: ffffffffffffffda RBX: 00007f3035d33f80 RCX: 00007f3035b7c719 [ 142.526271][ T7581] RDX: 0000000000000000 RSI: 0000000020001240 RDI: ffffffff80000801 [ 142.534231][ T7581] RBP: 00007f3035bef39e R08: 0000000000000000 R09: 0000000000000000 [ 142.542192][ T7581] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 142.550169][ T7581] R13: 0000000000000000 R14: 00007f3035d33f80 R15: 00007ffec459c9b8 [ 142.558145][ T7581] [ 142.598784][ T4166] ocfs2: Unmounting device (7,0) on (node local)