last executing test programs: 1.804000162s ago: executing program 3 (id=2666): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@multiplanar_mmap={0x7, 0x1, 0x4, 0x4, 0x2, {0x77359400}, {0x1, 0x8, 0x9, 0x7, 0x50, 0x5, "b8d067ed"}, 0x90c, 0x1, {0x0}, 0x5}) 1.728928527s ago: executing program 4 (id=2668): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x6}]}}}]}, 0x3c}}, 0x4000) 1.728598697s ago: executing program 3 (id=2669): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000100)={'veth0_vlan\x00', @random="010000201000"}) 1.603970203s ago: executing program 3 (id=2672): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 1.581032838s ago: executing program 4 (id=2674): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2, 0x3a, '#! ', 0x3a, 'ip6gretap0\x00', 0x3a, './file0'}, 0x35) 1.520256357s ago: executing program 3 (id=2677): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x3000000}, 0x0) 1.463118085s ago: executing program 4 (id=2680): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0xfff) 1.356349085s ago: executing program 4 (id=2684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x24000810) 1.290316152s ago: executing program 3 (id=2687): r0 = syz_open_dev$dri(&(0x7f0000000480), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x0, 0xddffffff, 0xa, 0x1ff, 0x1}) 1.255734045s ago: executing program 4 (id=2689): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x13, 0x2, {{0x4, 0x0, 0x0, 0x7}, 0x1}}, @TCA_MPLS_BOS={0x0, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xfffffffffffffeb5}, {0xc}}}]}]}, 0x7c}}, 0x0) 1.203333695s ago: executing program 3 (id=2690): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x40, 0x12, 0x6, "92895cc31925"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.125365189s ago: executing program 4 (id=2695): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0xf3, 0x4, {{0x49, 0x4, 0x0, 0x8, 0x124, 0x66, 0x0, 0x6, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3f}, {[@lsrr={0x83, 0xfffffd4a, 0xd1, [@private=0xa010101, @broadcast, @multicast2, @empty, @broadcast, @remote, @remote, @private=0xa010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xe}]}, @cipso={0x86, 0x49, 0x3, [{0x5, 0x6, "c7f6d543"}, {0x7, 0xa, "2571e1ce80778e69"}, {0x0, 0x11, "268d77e9f03d9e6b617936054e3fe7"}, {0x5, 0x12, "0582100bf53ac8a3ceb477dd1d4b72b4"}, {0x6, 0x10, "1032d119ae0949929b9e064fdc40"}]}, @timestamp_prespec={0x44, 0x3c, 0xb5, 0x3, 0x0, [{@multicast1, 0xe80}, {@multicast1, 0x6}, {@broadcast, 0x2f}, {@multicast2}, {@broadcast, 0x3}, {@private=0xa010102, 0x7}, {@broadcast, 0x5}]}, @cipso={0x86, 0x4e, 0x2, [{0x0, 0xb, "ae92afbd06299bbcff"}, {0x6, 0xc, "5458f3d8674d51d90b68"}, {0x2, 0x11, "6813c1cd5b4abc2d8413ff564feb81"}, {0x0, 0x7, "f8cbfdb019"}, {0x0, 0x5, "01eff9"}, {0x6, 0x9, "dfe171f3fcae6f"}, {0x6, 0x4, "41a8"}, {0x2, 0x7, "df0ca7c111"}]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x7, 0x9, "91970158cdb2f7"}]}]}}}}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300"], 0x0) 992.951814ms ago: executing program 2 (id=2699): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x1, [{@local, 0xfff7fff9}]}]}}}], 0x20}}], 0x1, 0x0) 930.145931ms ago: executing program 1 (id=2700): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101080) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/237, 0xed}], 0x1) 929.370751ms ago: executing program 2 (id=2701): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xfd, 0x0, 0xfffff02c}, {0x6, 0x8, 0x4, 0x5}]}, 0x10) 760.563459ms ago: executing program 2 (id=2702): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 721.273561ms ago: executing program 1 (id=2703): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)='\"m', 0x2}], 0x1, 0x9, 0x8001) 623.468212ms ago: executing program 2 (id=2706): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000100000f040400000100000000000002000000000000000c0000000000000061"], &(0x7f0000001fc0)=""/4131, 0x3d, 0x1023, 0x1}, 0x28) 623.409532ms ago: executing program 1 (id=2707): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200040001c00364", 0x32}, {&(0x7f0000001ec0)="703f0634db2bd3020012d77f5bea3201c4709edd509da7dafd9b3ab926815af86e52c3521b7ce2a45ed1", 0x2a}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x810) 558.584359ms ago: executing program 1 (id=2709): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 552.048798ms ago: executing program 2 (id=2710): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 481.398634ms ago: executing program 1 (id=2712): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe521628db294a692, 0x300}}) 387.732166ms ago: executing program 0 (id=2713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 366.724892ms ago: executing program 1 (id=2714): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0xc177, 0xda1, 0x6, 0x1000000000000005, 0x5, 0x42, 0x1, 0xfffffffffffffffd, 0xffffffff}) 353.655689ms ago: executing program 0 (id=2715): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000200)) 284.142235ms ago: executing program 0 (id=2716): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000000)) 235.227546ms ago: executing program 0 (id=2717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 55.772721ms ago: executing program 0 (id=2718): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x40d, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x38}}, 0x0) 44.519359ms ago: executing program 0 (id=2719): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004000, &(0x7f0000001180)=ANY=[], 0x7, 0x1fd, &(0x7f00000024c0)="$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") lstat(&(0x7f0000007b80)='./file0\x00', &(0x7f0000007bc0)) 0s ago: executing program 2 (id=2720): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): val = 5 seconds, CP frequency < 30 seconds [ 167.151842][ T6715] ntfs: volume version 3.1. [ 167.254850][ T6720] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.310301][ T6717] ntfs: volume version 3.1. [ 167.531637][ T6719] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 167.575907][ T6719] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 167.641095][ T6719] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 167.906598][ T6726] ntfs: volume version 3.1. [ 168.182511][ T6722] (syz.4.876,6722,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 168.219148][ T6722] (syz.4.876,6722,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 168.322686][ T6724] (syz.0.877,6724,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 168.360620][ T6724] (syz.0.877,6724,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 168.654298][ T6728] (syz.3.879,6728,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 168.713901][ T6728] (syz.3.879,6728,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 168.847203][ T6731] (syz.2.880,6731,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 168.896658][ T6739] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 168.912728][ T6731] (syz.2.880,6731,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 169.145764][ T6733] (syz.1.881,6733,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 169.198951][ T6733] (syz.1.881,6733,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 169.522379][ T6743] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 169.531468][ T6745] set_capacity_and_notify: 19 callbacks suppressed [ 169.531485][ T6745] loop0: detected capacity change from 0 to 8192 [ 169.561931][ T6743] REISERFS (device loop2): using ordered data mode [ 169.568955][ T6743] reiserfs: using flush barriers [ 169.587357][ T6743] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 169.673500][ T6745] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 169.694358][ T6745] REISERFS (device loop0): using ordered data mode [ 169.701388][ T6743] REISERFS (device loop2): checking transaction log (loop2) [ 169.716200][ T6745] reiserfs: using flush barriers [ 169.796500][ T6745] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 169.879464][ T6745] REISERFS (device loop0): checking transaction log (loop0) [ 170.057562][ T6743] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 170.127247][ T6743] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 170.192373][ T6743] REISERFS (device loop2): Remounting filesystem read-only [ 170.219631][ T6745] REISERFS (device loop0): Using rupasov hash to sort names [ 170.227222][ T6745] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 170.228488][ T6736] loop4: detected capacity change from 0 to 65536 [ 170.250211][ T6743] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 170.288456][ T6736] (syz.4.882,6736,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 170.314226][ T6743] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 170.341379][ T6736] (syz.4.882,6736,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 170.464020][ T6741] loop3: detected capacity change from 0 to 65536 [ 170.482673][ T6741] (syz.3.884,6741,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 170.531917][ T6741] (syz.3.884,6741,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 170.732592][ T6757] loop0: detected capacity change from 0 to 512 [ 171.387880][ T6755] loop4: detected capacity change from 0 to 32768 [ 171.406376][ T6753] loop2: detected capacity change from 0 to 32768 [ 171.440891][ T6753] (syz.2.891,6753,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 171.451766][ T6755] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.890 (6755) [ 171.487396][ T6753] (syz.2.891,6753,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 171.496966][ T6755] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 171.524136][ T6755] BTRFS info (device loop4): using free space tree [ 171.554062][ T6755] BTRFS info (device loop4): has skinny extents [ 171.643017][ T6759] loop3: detected capacity change from 0 to 32768 [ 171.704658][ T6768] loop2: detected capacity change from 0 to 4096 [ 171.872215][ T6755] BTRFS info (device loop4): enabling ssd optimizations [ 171.886154][ T6782] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.918258][ T6784] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.433189][ T6761] loop0: detected capacity change from 0 to 65536 [ 172.497174][ T6761] (syz.0.893,6761,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 172.558889][ T6761] (syz.0.893,6761,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 172.647501][ T6788] loop4: detected capacity change from 0 to 4096 [ 172.812896][ T6788] ntfs: volume version 3.1. [ 174.902792][ T6786] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 174.964040][ T6786] REISERFS (device loop2): using ordered data mode [ 174.970696][ T6786] reiserfs: using flush barriers [ 175.028171][ T6786] REISERFS (device loop2): journal params: device loop2, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.101227][ T6786] REISERFS (device loop2): checking transaction log (loop2) [ 176.475636][ T6796] set_capacity_and_notify: 1 callbacks suppressed [ 176.475653][ T6796] loop1: detected capacity change from 0 to 131072 [ 176.619391][ T6796] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 176.673037][ T6796] REISERFS (device loop1): using ordered data mode [ 176.743156][ T6796] reiserfs: using flush barriers [ 176.794999][ T6796] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.911568][ T6796] REISERFS (device loop1): checking transaction log (loop1) [ 176.934665][ T6802] loop0: detected capacity change from 0 to 4096 [ 177.079300][ T6804] loop4: detected capacity change from 0 to 8192 [ 177.086157][ T6802] ntfs: volume version 3.1. [ 177.164516][ T6804] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 177.187942][ T6804] REISERFS (device loop4): using ordered data mode [ 177.194477][ T6804] reiserfs: using flush barriers [ 177.245306][ T6804] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.288211][ T6804] REISERFS (device loop4): checking transaction log (loop4) [ 177.519343][ T6807] loop0: detected capacity change from 0 to 1 [ 177.570312][ T6807] attempt to access beyond end of device [ 177.570312][ T6807] loop0: rw=2048, want=8, limit=1 [ 177.603310][ T6804] REISERFS (device loop4): Using tea hash to sort names [ 177.625601][ T6807] SQUASHFS error: Failed to read block 0x0: -5 [ 177.631832][ T6807] unable to read squashfs_super_block [ 177.638003][ T6804] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 177.917936][ T6786] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 177.967870][ T6786] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 8211. Fsck? [ 177.999731][ T6786] REISERFS (device loop2): Remounting filesystem read-only [ 178.007408][ T6786] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 178.049458][ T6809] loop0: detected capacity change from 0 to 8192 [ 178.053260][ T6786] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 178.219535][ T6809] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 178.288421][ T6809] REISERFS (device loop0): using ordered data mode [ 178.295018][ T6809] reiserfs: using flush barriers [ 178.377501][ T6809] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.453320][ T6809] REISERFS (device loop0): checking transaction log (loop0) [ 178.712675][ T6809] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 178.765940][ T6809] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 178.802562][ T6809] REISERFS (device loop0): Remounting filesystem read-only [ 178.809821][ T6809] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 178.884967][ T6809] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 179.313761][ T6814] loop2: detected capacity change from 0 to 128 [ 179.355231][ T6799] loop3: detected capacity change from 0 to 131072 [ 179.432423][ T6814] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 179.456117][ T6799] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 179.470174][ T6814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.480051][ T6799] REISERFS (device loop3): using ordered data mode [ 179.496407][ T6799] reiserfs: using flush barriers [ 179.502635][ T6799] REISERFS (device loop3): journal params: device loop3, size 8192, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.629236][ T6799] REISERFS (device loop3): checking transaction log (loop3) [ 179.777954][ T6819] loop2: detected capacity change from 0 to 2048 [ 179.864728][ T6819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.183717][ T6821] loop2: detected capacity change from 0 to 4096 [ 180.289544][ T6821] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 180.700735][ T6825] loop2: detected capacity change from 0 to 128 [ 180.731929][ T6825] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 180.784769][ T6825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.089510][ T6827] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 181.113947][ T6827] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 181.149897][ T6827] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 181.190851][ T6827] UDF-fs: Scanning with blocksize 512 failed [ 181.213718][ T6827] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 181.242254][ T6811] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 181.319847][ T6811] REISERFS (device loop4): using ordered data mode [ 181.367184][ T6811] reiserfs: using flush barriers [ 181.402174][ T6827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.425759][ T6811] REISERFS (device loop4): journal params: device loop4, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.459517][ T6811] REISERFS (device loop4): checking transaction log (loop4) [ 181.783800][ T6832] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 181.825979][ T6832] UDF-fs: Scanning with blocksize 512 failed [ 181.850518][ T6832] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 181.869232][ T6832] UDF-fs: Scanning with blocksize 1024 failed [ 181.901962][ T6832] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 181.909378][ T6832] UDF-fs: Scanning with blocksize 2048 failed [ 181.990603][ T6832] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 182.031203][ T6832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.317141][ T6816] set_capacity_and_notify: 3 callbacks suppressed [ 182.317156][ T6816] loop0: detected capacity change from 0 to 131072 [ 182.432288][ T6836] loop2: detected capacity change from 0 to 4096 [ 182.446047][ T6816] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 182.471575][ T6816] REISERFS (device loop0): using ordered data mode [ 182.478228][ T6816] reiserfs: using flush barriers [ 182.487616][ T6816] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 182.526761][ T6816] REISERFS (device loop0): checking transaction log (loop0) [ 182.568643][ T6836] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 182.586094][ T6836] UDF-fs: Scanning with blocksize 512 failed [ 182.653600][ T6836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.043440][ T6799] REISERFS (device loop3): Using tea hash to sort names [ 183.080227][ T6799] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 183.404370][ T6796] REISERFS (device loop1): Using tea hash to sort names [ 183.424192][ T6796] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 184.975347][ T6841] loop3: detected capacity change from 0 to 128 [ 185.029337][ T6841] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 185.084117][ T6841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.858906][ T6845] Can't find a SQUASHFS superblock on loop1 [ 186.086162][ T6843] loop3: detected capacity change from 0 to 32768 [ 186.120473][ T6843] (syz.3.921,6843,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 186.185255][ T6843] (syz.3.921,6843,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 186.423407][ T6847] loop1: detected capacity change from 0 to 16384 [ 186.463344][ T6847] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 186.513444][ T6847] UDF-fs: Scanning with blocksize 512 failed [ 186.535891][ T6847] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 186.579211][ T6847] UDF-fs: Scanning with blocksize 1024 failed [ 186.629536][ T6847] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 186.674398][ T6847] UDF-fs: Scanning with blocksize 2048 failed [ 186.721403][ T6851] loop2: detected capacity change from 0 to 256 [ 186.731341][ T6847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.737866][ T6849] loop3: detected capacity change from 0 to 16384 [ 186.835917][ T6849] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 16, size 4096) [ 186.882716][ T6849] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 186.963231][ T6854] loop2: detected capacity change from 0 to 512 [ 187.085036][ T6856] loop1: detected capacity change from 0 to 128 [ 187.188282][ T6858] loop3: detected capacity change from 0 to 128 [ 187.514954][ T6811] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 187.609347][ T6811] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 187.677375][ T6811] REISERFS (device loop4): Remounting filesystem read-only [ 187.737542][ T6811] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 187.791846][ T6811] REISERFS warning (device loop4): reiserfs_fill_super: corrupt root inode, run fsck [ 187.821729][ T6874] set_capacity_and_notify: 4 callbacks suppressed [ 187.821747][ T6874] loop3: detected capacity change from 0 to 512 [ 187.929117][ T6874] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 187.941257][ T6874] UDF-fs: Scanning with blocksize 512 failed [ 187.956257][ T6874] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 187.972912][ T6874] UDF-fs: Scanning with blocksize 1024 failed [ 187.991639][ T6874] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 187.999435][ T6873] loop1: detected capacity change from 0 to 8192 [ 188.013112][ T6874] UDF-fs: Scanning with blocksize 2048 failed [ 188.046686][ T6874] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 188.102415][ T6874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.107854][ T6873] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 188.133370][ T6873] UDF-fs: Scanning with blocksize 512 failed [ 188.159610][ T6873] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 188.175918][ T6873] UDF-fs: Scanning with blocksize 1024 failed [ 188.215540][ T6873] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 188.226396][ T6873] UDF-fs: Scanning with blocksize 2048 failed [ 188.272740][ T6873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.294212][ T6876] loop3: detected capacity change from 0 to 24 [ 188.308029][ T6876] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 188.335286][ T6876] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 188.801105][ T6816] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 188.838204][ T6816] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck? [ 188.866489][ T6816] REISERFS (device loop0): Remounting filesystem read-only [ 188.889981][ T6816] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 188.915069][ T6816] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 189.658875][ T6878] loop3: detected capacity change from 0 to 65536 [ 189.804250][ T6878] XFS (loop3): Mounting V5 Filesystem [ 189.912597][ T6878] XFS (loop3): Ending clean mount [ 190.009089][ T4188] XFS (loop3): Unmounting Filesystem [ 190.281836][ T6142] Bluetooth: hci1: command 0x0406 tx timeout [ 190.290929][ T6142] Bluetooth: hci0: command 0x0406 tx timeout [ 190.301086][ T1327] Bluetooth: hci3: command 0x0406 tx timeout [ 190.308384][ T1327] Bluetooth: hci2: command 0x0406 tx timeout [ 190.321417][ T6142] Bluetooth: hci4: command 0x0406 tx timeout [ 191.354546][ T6892] loop3: detected capacity change from 0 to 32768 [ 191.486697][ T6892] loop3: p1 p3 < p5 p6 > [ 191.940466][ T4581] udevd[4581]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 191.940555][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 191.952851][ T4593] udevd[4593]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 191.967871][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 192.362796][ T6896] loop3: detected capacity change from 0 to 32768 [ 192.519546][ T6898] loop2: detected capacity change from 0 to 32768 [ 192.520192][ T6896] XFS (loop3): Mounting V5 Filesystem [ 192.642998][ T6896] XFS (loop3): Ending clean mount [ 192.709569][ T4188] XFS (loop3): Unmounting Filesystem [ 192.711923][ T6898] XFS (loop2): Mounting V5 Filesystem [ 192.939555][ T6898] XFS (loop2): Ending clean mount [ 193.011384][ T4186] XFS (loop2): Unmounting Filesystem [ 194.143863][ T6920] loop2: detected capacity change from 0 to 32768 [ 194.290741][ T6920] XFS (loop2): Mounting V5 Filesystem [ 194.434439][ T6920] XFS (loop2): Ending clean mount [ 194.512295][ T4186] XFS (loop2): Unmounting Filesystem [ 194.750786][ T6918] loop3: detected capacity change from 0 to 65536 [ 194.880553][ T6918] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 196.394411][ T6937] loop2: detected capacity change from 0 to 65536 [ 196.509993][ T6937] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 197.576239][ T6939] loop0: detected capacity change from 0 to 131072 [ 197.695440][ T6939] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 197.718098][ T6939] REISERFS (device loop0): using ordered data mode [ 197.730660][ T6939] reiserfs: using flush barriers [ 197.737002][ T6939] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 197.760916][ T6939] REISERFS (device loop0): checking transaction log (loop0) [ 199.009323][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.015669][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.935662][ T6958] loop3: detected capacity change from 0 to 128 [ 200.197936][ T6962] loop3: detected capacity change from 0 to 512 [ 200.717257][ T6966] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 201.355657][ T1327] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 201.598540][ T6964] loop3: detected capacity change from 0 to 65536 [ 201.695851][ T6964] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 201.795413][ T1327] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 is Bulk; changing to Interrupt [ 201.836211][ T1327] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 201.871699][ T1327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.925173][ T6974] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 202.078246][ T6993] device bridge1 entered promiscuous mode [ 202.232557][ T1327] usb 2-1: string descriptor 0 read error: -71 [ 202.250766][ T1327] hub 2-1:32.0: USB hub found [ 202.376348][ T7003] netlink: 'syz.2.975': attribute type 5 has an invalid length. [ 202.384243][ T1327] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 202.455925][ T7003] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.975'. [ 202.500039][ T1327] usb 2-1: USB disconnect, device number 23 [ 202.724643][ T7011] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.013217][ T7020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.316250][ T6939] REISERFS (device loop0): Using r5 hash to sort names [ 203.329607][ T6939] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 203.349956][ T7043] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 203.485158][ T7053] tmpfs: Bad value for 'mpol' [ 203.556880][ T7058] ieee802154 phy0 wpan0: encryption failed: -90 [ 204.285136][ T7109] netlink: 'syz.3.1024': attribute type 3 has an invalid length. [ 204.442493][ T7116] loop3: detected capacity change from 0 to 512 [ 204.502762][ T7116] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 204.502762][ T7116] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 204.502762][ T7116] [ 204.527166][ T7126] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 204.565092][ T7116] EXT4-fs (loop3): can't mount with commit=1701, fs mounted w/o journal [ 204.740282][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1034'. [ 204.805889][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1034'. [ 204.837435][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1034'. [ 204.868895][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1034'. [ 204.905560][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1034'. [ 204.992173][ T7166] loop1: detected capacity change from 0 to 47 [ 205.065840][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1034'. [ 205.235370][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1034'. [ 205.280130][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1034'. [ 205.305308][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1034'. [ 205.884541][ T7220] loop3: detected capacity change from 0 to 16 [ 205.955621][ T7220] erofs: (device loop3): mounted with root inode @ nid 36. [ 206.024020][ T7235] xt_TCPMSS: Only works on TCP SYN packets [ 206.186929][ T7250] usb usb7: usbfs: process 7250 (syz.1.1069) did not claim interface 5 before use [ 206.344322][ T7266] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 206.521183][ T7279] loop3: detected capacity change from 0 to 2048 [ 206.584180][ T7279] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.615222][ T1108] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 206.623131][ T1327] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 206.709358][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 206.748237][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.760645][ T7288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.914128][ T1327] usb 2-1: Using ep0 maxpacket: 8 [ 207.038134][ T7299] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 207.079607][ T1108] usb 3-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=ab.a0 [ 207.089351][ T1327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 207.117108][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.126418][ T1327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.151466][ T1108] usb 3-1: config 0 descriptor?? [ 207.165024][ T1327] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.185749][ T1327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 207.205154][ T1327] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 207.219035][ T1327] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 207.239603][ T1108] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 207.253423][ T1108] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 207.273782][ T1327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.284343][ T1327] usb 2-1: config 0 descriptor?? [ 207.331534][ T7260] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 207.456940][ T1327] usb 3-1: USB disconnect, device number 22 [ 207.631147][ T7] usb 2-1: USB disconnect, device number 24 [ 207.731916][ T7340] loop3: detected capacity change from 0 to 4096 [ 207.793072][ T7340] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 207.889830][ T7355] cgroup: Unknown subsys name 'noxattr' [ 208.053409][ T7366] loop2: detected capacity change from 0 to 512 [ 208.147156][ T7366] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.1125: ea_inode with extended attributes [ 208.236935][ T7366] EXT4-fs (loop2): Remounting filesystem read-only [ 208.296713][ T7366] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1125: error while reading EA inode 11 err=-117 [ 208.314617][ T1327] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 208.331766][ T7366] EXT4-fs (loop2): Remounting filesystem read-only [ 208.353130][ T7366] EXT4-fs (loop2): 1 orphan inode deleted [ 208.374561][ T7366] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,errors=remount-ro,delalloc,journal_ioprio=0x0000000000000001,init_itable=0x0000000000008d55,. Quota mode: none. [ 208.432746][ T7390] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 208.510563][ T7394] loop1: detected capacity change from 0 to 128 [ 208.565849][ T7397] __nla_validate_parse: 33 callbacks suppressed [ 208.565865][ T7397] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1139'. [ 208.576420][ T7400] loop2: detected capacity change from 0 to 1764 [ 208.742445][ T1327] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 208.750737][ T1327] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 208.774442][ T1327] usb 1-1: config 220 has no interface number 2 [ 208.791302][ T1327] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 208.867766][ T1327] usb 1-1: config 220 interface 0 has no altsetting 0 [ 208.889798][ T7415] loop2: detected capacity change from 0 to 256 [ 208.902758][ T1327] usb 1-1: config 220 interface 76 has no altsetting 0 [ 208.909654][ T1327] usb 1-1: config 220 interface 1 has no altsetting 0 [ 209.026103][ T7415] FAT-fs (loop2): Directory bread(block 64) failed [ 209.051113][ T7415] FAT-fs (loop2): Directory bread(block 65) failed [ 209.090181][ T7415] FAT-fs (loop2): Directory bread(block 66) failed [ 209.104755][ T7415] FAT-fs (loop2): Directory bread(block 67) failed [ 209.124630][ T7415] FAT-fs (loop2): Directory bread(block 68) failed [ 209.137538][ T1327] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 209.143241][ T7415] FAT-fs (loop2): Directory bread(block 69) failed [ 209.177303][ T1327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.185262][ T7415] FAT-fs (loop2): Directory bread(block 70) failed [ 209.206178][ T1327] usb 1-1: Product: syz [ 209.230286][ T1327] usb 1-1: Manufacturer: syz [ 209.231279][ T7415] FAT-fs (loop2): Directory bread(block 71) failed [ 209.253989][ T1327] usb 1-1: SerialNumber: syz [ 209.281671][ T7415] FAT-fs (loop2): Directory bread(block 72) failed [ 209.327137][ T7415] FAT-fs (loop2): Directory bread(block 73) failed [ 209.375510][ T7447] netlink: 'syz.3.1163': attribute type 1 has an invalid length. [ 209.413886][ T7447] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1163'. [ 209.431063][ T7451] kAFS: unable to lookup cell '(/' [ 209.444031][ T7447] netlink: 'syz.3.1163': attribute type 1 has an invalid length. [ 209.550326][ T7455] loop3: detected capacity change from 0 to 64 [ 209.674326][ T1327] usb 1-1: selecting invalid altsetting 0 [ 209.692746][ T1327] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 209.714045][ T7455] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 209.722550][ T1327] usb 1-1: No valid video chain found. [ 209.833247][ T1327] usb 1-1: selecting invalid altsetting 0 [ 209.848833][ T1327] usbtest: probe of 1-1:220.1 failed with error -22 [ 209.865024][ T1327] usb 1-1: USB disconnect, device number 24 [ 210.014074][ T6144] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 210.117885][ T7485] loop4: detected capacity change from 0 to 736 [ 210.399290][ T6144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.431766][ T6144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.447239][ T6144] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.492208][ T6144] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.532297][ T6144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.594956][ T6144] usb 3-1: config 0 descriptor?? [ 210.634746][ T6144] hub 3-1:0.0: USB hub found [ 210.706194][ T7522] device ipip0 entered promiscuous mode [ 210.869247][ T6144] hub 3-1:0.0: 14 ports detected [ 210.891271][ T6144] hub 3-1:0.0: insufficient power available to use all downstream ports [ 210.926108][ T7535] device geneve2 entered promiscuous mode [ 211.113608][ T6144] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 211.141397][ T6144] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 211.201304][ T6144] usb 3-1: USB disconnect, device number 23 [ 211.247198][ T7541] loop1: detected capacity change from 0 to 8192 [ 211.389486][ T7541] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 211.409737][ T7541] REISERFS (device loop1): using ordered data mode [ 211.420471][ T7541] reiserfs: using flush barriers [ 211.432348][ T7541] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 211.454586][ T7541] REISERFS (device loop1): checking transaction log (loop1) [ 211.474200][ T7541] REISERFS (device loop1): Using r5 hash to sort names [ 211.489556][ T7541] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 211.560591][ T7570] netlink: 'syz.0.1222': attribute type 21 has an invalid length. [ 211.598989][ T7570] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1222'. [ 211.638076][ T7570] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 211.944887][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.989964][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.014852][ T7592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.212075][ T7602] netlink: 'syz.3.1239': attribute type 21 has an invalid length. [ 212.243322][ T7614] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1244'. [ 212.300710][ T7616] capability: warning: `syz.4.1245' uses 32-bit capabilities (legacy support in use) [ 212.523066][ T7622] loop3: detected capacity change from 0 to 4096 [ 212.648395][ T7622] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 212.664986][ T7622] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 212.712099][ T7622] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 212.750411][ T4725] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 212.758738][ T7622] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 212.814640][ T7622] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 212.855905][ T7622] ntfs: volume version 3.1. [ 212.860928][ T7658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1265'. [ 212.863758][ T7622] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 212.899420][ T7622] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 212.920514][ T7622] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 212.945167][ T7662] x_tables: unsorted entry at hook 3 [ 212.965835][ T7622] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 213.000959][ T7622] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 213.028384][ T4725] usb 5-1: Using ep0 maxpacket: 16 [ 213.064015][ T7672] loop1: detected capacity change from 0 to 256 [ 213.167611][ T4725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 213.273643][ T7671] loop0: detected capacity change from 0 to 8192 [ 213.367242][ T7671] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 213.381361][ T4725] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 213.426511][ T4725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.442621][ T7671] REISERFS (device loop0): using ordered data mode [ 213.450071][ T7671] reiserfs: using flush barriers [ 213.460486][ T7671] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.477773][ T4725] usb 5-1: Product: syz [ 213.479855][ T7671] REISERFS (device loop0): checking transaction log (loop0) [ 213.481955][ T4725] usb 5-1: Manufacturer: syz [ 213.502721][ T7671] REISERFS (device loop0): Using tea hash to sort names [ 213.541907][ T7671] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 213.579586][ T4725] usb 5-1: SerialNumber: syz [ 213.617774][ T4725] usb 5-1: config 0 descriptor?? [ 213.664801][ T4725] hub 5-1:0.0: bad descriptor, ignoring hub [ 213.692998][ T4725] hub: probe of 5-1:0.0 failed with error -5 [ 213.776309][ T7705] capability: warning: `syz.2.1288' uses deprecated v2 capabilities in a way that may be insecure [ 213.889324][ T7714] netlink: 'syz.1.1290': attribute type 21 has an invalid length. [ 213.965623][ T7717] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 214.010723][ T6371] usb 5-1: USB disconnect, device number 22 [ 214.029873][ T7717] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1293'. [ 214.300542][ T4725] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 214.444408][ T6140] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 214.573145][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 214.602470][ T4725] usb 4-1: Using ep0 maxpacket: 8 [ 214.706797][ T6140] usb 1-1: Using ep0 maxpacket: 8 [ 214.752314][ T7767] xt_CT: No such helper "pptp" [ 214.835130][ T6140] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.851119][ T6140] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEF, skipping [ 214.882483][ T6140] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.956289][ T7786] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1326'. [ 214.984699][ T4725] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 214.993813][ T4725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.997525][ T6140] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 215.020301][ T6140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 215.022334][ T4725] usb 4-1: Product: syz [ 215.039410][ T6140] usb 1-1: SerialNumber: syz [ 215.043861][ T4725] usb 4-1: Manufacturer: syz [ 215.054390][ T4725] usb 4-1: SerialNumber: syz [ 215.071510][ T6140] usb 1-1: config 0 descriptor?? [ 215.083472][ T4725] usb 4-1: config 0 descriptor?? [ 215.109627][ T7796] IPv6: sit1: Disabled Multicast RS [ 215.113731][ T6140] hso 1-1:0.0: Can't find BULK IN endpoint [ 215.136116][ T4725] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 215.364567][ T7810] MTD: Attempt to mount non-MTD device "./file0" [ 215.382239][ T7810] ./file0: Can't open blockdev [ 215.388172][ T1108] usb 1-1: USB disconnect, device number 25 [ 215.610045][ T4725] gspca_vc032x: reg_w err -71 [ 215.616735][ T4725] vc032x: probe of 4-1:0.0 failed with error -71 [ 215.650399][ T4725] usb 4-1: USB disconnect, device number 21 [ 215.658761][ T7798] loop1: detected capacity change from 0 to 32768 [ 215.718866][ T7798] JBD2: Ignoring recovery information on journal [ 215.782106][ T7812] loop4: detected capacity change from 0 to 32768 [ 215.834657][ T7798] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 215.847385][ T7808] loop2: detected capacity change from 0 to 32768 [ 215.913201][ T7798] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 215.932619][ T7798] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 215.933641][ T7812] XFS (loop4): Mounting V5 Filesystem [ 215.948234][ T7798] OCFS2: File system is now read-only. [ 215.967945][ T7798] (syz.1.1332,7798,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 215.994678][ T7798] (syz.1.1332,7798,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 216.002874][ T7798] (syz.1.1332,7798,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 216.011596][ T7798] (syz.1.1332,7798,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 216.014957][ T7808] XFS (loop2): Mounting V5 Filesystem [ 216.020468][ T7798] (syz.1.1332,7798,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 216.034564][ T7798] (syz.1.1332,7798,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 216.069743][ T7798] (syz.1.1332,7798,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 216.099509][ T7798] (syz.1.1332,7798,0):ocfs2_symlink:1941 ERROR: status = -30 [ 216.129097][ T7798] (syz.1.1332,7798,1):ocfs2_symlink:2065 ERROR: status = -30 [ 216.159582][ T7812] XFS (loop4): Ending clean mount [ 216.207307][ T7834] overlayfs: missing 'lowerdir' [ 216.208973][ T7808] XFS (loop2): Ending clean mount [ 216.230436][ T7808] XFS (loop2): Quotacheck needed: Please wait. [ 216.275030][ T7808] XFS (loop2): Quotacheck: Done. [ 216.286361][ T4198] ocfs2: Unmounting device (7,1) on (node local) [ 216.425844][ T4186] XFS (loop2): Unmounting Filesystem [ 216.472806][ T4195] XFS (loop4): Unmounting Filesystem [ 216.562728][ T7842] netlink: 'syz.1.1343': attribute type 3 has an invalid length. [ 216.571010][ T7842] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1343'. [ 217.223355][ T7870] netlink: 'syz.1.1360': attribute type 24 has an invalid length. [ 217.320906][ T7874] xt_TCPMSS: Only works on TCP SYN packets [ 217.560311][ T7891] program syz.1.1369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.883409][ T7908] xt_CT: No such helper "pptp" [ 218.099962][ T7938] SET target dimension over the limit! [ 218.229711][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 218.238065][ T7946] loop2: detected capacity change from 0 to 1024 [ 218.346496][ T7949] loop3: detected capacity change from 0 to 2048 [ 218.379196][ T7946] hfsplus: request for non-existent node 211 in B*Tree [ 218.398130][ T7946] hfsplus: request for non-existent node 211 in B*Tree [ 218.406500][ T7949] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=26504, location=26504 [ 218.432969][ T7949] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.844154][ T7975] loop3: detected capacity change from 0 to 24 [ 218.891490][ T7975] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 218.922387][ T7973] loop4: detected capacity change from 0 to 4096 [ 218.977420][ T7975] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 219.074045][ T7973] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 219.106554][ T7973] ntfs3: loop4: Failed to load $Extend. [ 219.200336][ T7953] loop0: detected capacity change from 0 to 32768 [ 219.264865][ T7953] JBD2: Ignoring recovery information on journal [ 219.300549][ T4195] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 219.316245][ T4195] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 219.345628][ T7] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 219.385533][ T7953] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 219.436257][ T7953] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 219.466934][ T7991] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1416'. [ 219.504213][ T7971] loop1: detected capacity change from 0 to 32768 [ 219.570199][ T7953] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 219.593107][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'. [ 219.618198][ T7953] OCFS2: File system is now read-only. [ 219.628926][ T7953] (syz.0.1400,7953,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 219.637055][ T7971] XFS (loop1): Mounting V5 Filesystem [ 219.653260][ T7953] (syz.0.1400,7953,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 219.672431][ T7953] (syz.0.1400,7953,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 219.718253][ T7953] (syz.0.1400,7953,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 219.726981][ T7953] (syz.0.1400,7953,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 219.741128][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.751904][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.754498][ T7953] (syz.0.1400,7953,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 219.784456][ T7953] (syz.0.1400,7953,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 219.803141][ T7953] (syz.0.1400,7953,0):ocfs2_symlink:1941 ERROR: status = -30 [ 219.814058][ T7953] (syz.0.1400,7953,0):ocfs2_symlink:2065 ERROR: status = -30 [ 219.823563][ T7971] XFS (loop1): Ending clean mount [ 219.837476][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 219.857400][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 219.857784][ T8006] loop4: detected capacity change from 0 to 256 [ 219.881027][ T7] usb 3-1: SerialNumber: syz [ 219.891920][ T4198] XFS (loop1): Unmounting Filesystem [ 219.919423][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 219.938170][ T8006] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 219.955131][ T8006] FAT-fs (loop4): bogus number of directory entries (1) [ 219.985940][ T8006] FAT-fs (loop4): Can't find a valid FAT filesystem [ 220.016518][ T7992] loop3: detected capacity change from 0 to 32768 [ 220.131431][ T8010] loop0: detected capacity change from 0 to 128 [ 220.157796][ T8012] loop4: detected capacity change from 0 to 512 [ 220.162147][ T7992] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1418 (7992) [ 220.190430][ T8012] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.224710][ T7] usb 3-1: 0:2 : does not exist [ 220.246212][ T7] usb 3-1: USB disconnect, device number 24 [ 220.298874][ T8012] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1425: bad orphan inode 131083 [ 220.353993][ T8012] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 220.413561][ T7992] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 220.457658][ T7992] BTRFS info (device loop3): force zlib compression, level 3 [ 220.477198][ T7992] BTRFS info (device loop3): force clearing of disk cache [ 220.511711][ T4581] udevd[4581]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.535628][ T7992] BTRFS info (device loop3): setting nodatasum [ 220.562485][ T7992] BTRFS info (device loop3): use zlib compression, level 3 [ 220.580915][ T7992] BTRFS info (device loop3): allowing degraded mounts [ 220.624016][ T7992] BTRFS info (device loop3): enabling disk space caching [ 220.664331][ T7992] BTRFS info (device loop3): disk space caching is enabled [ 220.710423][ T7992] BTRFS info (device loop3): has skinny extents [ 221.039816][ T7992] BTRFS info (device loop3): enabling ssd optimizations [ 221.067575][ T7992] BTRFS info (device loop3): clearing free space tree [ 221.080669][ T7992] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 221.092294][ T7992] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 221.203924][ T8071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1443'. [ 221.366830][ T8078] dlm: non-version read from control device 4096 [ 221.418505][ T8081] dlm: no locking on control device [ 221.692887][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 222.271037][ T8102] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1457 (8102) [ 222.370722][ T8102] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 222.435039][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1471'. [ 222.442589][ T8102] BTRFS info (device loop4): using free space tree [ 222.488393][ T8102] BTRFS info (device loop4): has skinny extents [ 222.622948][ T8150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1475'. [ 222.712989][ T8102] BTRFS info (device loop4): enabling ssd optimizations [ 222.948798][ T8169] ntfs3: loop1: ino=3, Correct links count -> 2. [ 222.989076][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 223.257011][ T8181] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 223.308007][ T8169] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 223.359852][ T8181] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1486: bad orphan inode 131083 [ 223.384536][ T8181] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 223.778847][ T8206] set_capacity_and_notify: 5 callbacks suppressed [ 223.778863][ T8206] loop0: detected capacity change from 0 to 256 [ 223.879491][ T8206] loop0: Can't mount, would change RO state [ 224.068058][ T8222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1502'. [ 224.460955][ T8232] loop3: detected capacity change from 0 to 4096 [ 224.604840][ T8232] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 224.656561][ T8232] ntfs3: loop3: Failed to load $Extend. [ 224.785722][ T8217] loop2: detected capacity change from 0 to 32768 [ 224.805706][ T4188] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 224.840547][ T4188] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22. [ 224.847216][ T8217] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1500 (8217) [ 224.915767][ T8217] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 224.950257][ T8217] BTRFS info (device loop2): force zlib compression, level 3 [ 224.968190][ T8217] BTRFS info (device loop2): force clearing of disk cache [ 224.980495][ T8217] BTRFS info (device loop2): setting nodatasum [ 225.008511][ T8217] BTRFS info (device loop2): use zlib compression, level 3 [ 225.016464][ T8217] BTRFS info (device loop2): allowing degraded mounts [ 225.050090][ T8217] BTRFS info (device loop2): enabling disk space caching [ 225.071750][ T8217] BTRFS info (device loop2): disk space caching is enabled [ 225.093433][ T8217] BTRFS info (device loop2): has skinny extents [ 225.229439][ T8244] loop0: detected capacity change from 0 to 32768 [ 225.267624][ T4722] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 225.276757][ T8246] loop4: detected capacity change from 0 to 32768 [ 225.347779][ T8244] XFS (loop0): Mounting V5 Filesystem [ 225.348103][ T8246] JBD2: Ignoring recovery information on journal [ 225.368247][ T8217] BTRFS info (device loop2): enabling ssd optimizations [ 225.391784][ T8217] BTRFS info (device loop2): clearing free space tree [ 225.401092][ T8217] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.420025][ T8246] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 225.459932][ T8217] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 225.481582][ T8244] XFS (loop0): Ending clean mount [ 225.506658][ T8244] XFS (loop0): Quotacheck needed: Please wait. [ 225.529243][ T8246] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 225.534856][ T4722] usb 4-1: Using ep0 maxpacket: 8 [ 225.564029][ T8246] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 225.578518][ T8246] OCFS2: File system is now read-only. [ 225.584717][ T8246] (syz.4.1515,8246,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 225.592560][ T8280] loop1: detected capacity change from 0 to 512 [ 225.619778][ T8246] (syz.4.1515,8246,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 225.643714][ T8246] (syz.4.1515,8246,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 225.660149][ T8246] (syz.4.1515,8246,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 225.732883][ T8244] XFS (loop0): Quotacheck: Done. [ 225.738010][ T4722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 225.758088][ T8246] (syz.4.1515,8246,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 225.766339][ T8246] (syz.4.1515,8246,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 225.774856][ T8246] (syz.4.1515,8246,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 225.790072][ T8246] (syz.4.1515,8246,1):ocfs2_symlink:1941 ERROR: status = -30 [ 225.798328][ T8246] (syz.4.1515,8246,1):ocfs2_symlink:2065 ERROR: status = -30 [ 225.885599][ T4187] XFS (loop0): Unmounting Filesystem [ 225.895526][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 225.952452][ T4722] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 225.959666][ T8280] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 225.961618][ T4722] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 225.985682][ T4722] usb 4-1: Product: syz [ 225.989856][ T4722] usb 4-1: Manufacturer: syz [ 225.994596][ T4722] usb 4-1: SerialNumber: syz [ 226.090918][ T8280] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.272402][ T4722] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 226.284616][ T4722] usb 4-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 226.300897][ T4722] usb 4-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 226.337437][ T4722] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 226.438880][ T8297] netlink: 'syz.2.1524': attribute type 7 has an invalid length. [ 226.465798][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1524'. [ 226.481322][ T8302] openvswitch: netlink: Actions may not be safe on all matching packets [ 226.497024][ T4722] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 226.527346][ T4722] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 226.576141][ T4722] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 226.617501][ T4722] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 226.661175][ T4722] usb 4-1: USB disconnect, device number 22 [ 226.688007][ T4722] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 226.725163][ T4722] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 226.750439][ T4722] visor 4-1:1.0: device disconnected [ 226.773523][ T8310] loop0: detected capacity change from 0 to 4096 [ 227.164031][ T8338] loop0: detected capacity change from 0 to 512 [ 227.225546][ T8342] loop3: detected capacity change from 0 to 512 [ 227.248314][ T8344] netlink: 'syz.4.1548': attribute type 2 has an invalid length. [ 227.263890][ T8338] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.330992][ T8338] process 'syz.0.1546' launched './file2' with NULL argv: empty string added [ 227.360308][ T8342] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 227.383246][ T8354] loop4: detected capacity change from 0 to 512 [ 227.426376][ T8342] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.577746][ T8354] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 227.584973][ T8354] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 227.617009][ T8354] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 227.636171][ T8359] erofs: (device loop1): mounted with root inode @ nid 36. [ 227.684476][ T8354] System zones: 1-12 [ 227.732415][ T8354] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.1552: corrupted in-inode xattr [ 227.854603][ T8354] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1552: couldn't read orphan inode 15 (err -117) [ 227.889960][ T8354] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 228.303414][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1579'. [ 228.364055][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 228.393332][ T8422] libceph: resolve '4.' (ret=-3): failed [ 228.405612][ T8421] netlink: 'syz.4.1582': attribute type 1 has an invalid length. [ 228.441906][ T8401] ntfs3: loop0: ino=3, Correct links count -> 2. [ 228.454831][ T8421] netlink: 'syz.4.1582': attribute type 2 has an invalid length. [ 228.518624][ T8401] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 228.871790][ T8444] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 229.022644][ T8448] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.043766][ T8410] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1576 (8410) [ 229.073340][ T4722] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 229.100199][ T8460] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 229.125885][ T8410] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 229.141356][ T8464] set_capacity_and_notify: 4 callbacks suppressed [ 229.141371][ T8464] loop0: detected capacity change from 0 to 512 [ 229.155943][ T8410] BTRFS info (device loop1): force zlib compression, level 3 [ 229.163830][ T8410] BTRFS info (device loop1): force clearing of disk cache [ 229.171614][ T8410] BTRFS info (device loop1): setting nodatasum [ 229.177899][ T8410] BTRFS info (device loop1): use zlib compression, level 3 [ 229.185640][ T8410] BTRFS info (device loop1): allowing degraded mounts [ 229.192785][ T8410] BTRFS info (device loop1): enabling disk space caching [ 229.200611][ T8410] BTRFS info (device loop1): disk space caching is enabled [ 229.208239][ T8410] BTRFS info (device loop1): has skinny extents [ 229.287868][ T8464] EXT4-fs (loop0): orphan cleanup on readonly fs [ 229.296140][ T8464] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 229.340160][ T4722] usb 4-1: Using ep0 maxpacket: 32 [ 229.382912][ T6140] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 229.394401][ T8464] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 229.399160][ T8410] BTRFS info (device loop1): enabling ssd optimizations [ 229.415881][ T8464] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1602: attempt to clear invalid blocks 2 len 1 [ 229.435834][ T8410] BTRFS info (device loop1): clearing free space tree [ 229.435851][ T8464] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1602: invalid indirect mapped block 1819239214 (level 0) [ 229.435887][ T8410] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 229.435928][ T8410] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 229.441580][ T8464] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1602: invalid indirect mapped block 1819239214 (level 1) [ 229.454432][ T8464] EXT4-fs (loop0): 1 truncate cleaned up [ 229.454458][ T8464] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 229.476455][ T8464] EXT4-fs error (device loop0): ext4_lookup:1855: inode #2: comm syz.0.1602: 'file1' linked to parent dir [ 229.479376][ T4722] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 229.479402][ T4722] usb 4-1: config 0 has no interface number 0 [ 229.479435][ T4722] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 229.479459][ T4722] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 229.479482][ T4722] usb 4-1: config 0 interface 126 has no altsetting 0 [ 229.695200][ T4722] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 229.695230][ T4722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.753004][ T4179] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop1 scanned by udevd (4179) [ 229.754354][ T4722] usb 4-1: Product: syz [ 229.770741][ T4722] usb 4-1: Manufacturer: syz [ 229.775447][ T4722] usb 4-1: SerialNumber: syz [ 229.778496][ T6140] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 229.783293][ T4722] usb 4-1: config 0 descriptor?? [ 229.812176][ T8440] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 229.819255][ T8440] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 229.820515][ T6140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.846833][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 229.869991][ T6140] usb 5-1: config 0 descriptor?? [ 230.218690][ T4722] ir_usb 4-1:0.126: IR Dongle converter detected [ 230.243544][ T8514] netlink: 'syz.2.1615': attribute type 21 has an invalid length. [ 230.259557][ T4722] usb 4-1: IRDA class descriptor not found, device not bound [ 230.281266][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 230.299980][ T4722] usb 4-1: USB disconnect, device number 23 [ 230.336690][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 230.357526][ T6140] ath6kl: Failed to submit usb control message: -71 [ 230.364176][ T6140] ath6kl: unable to send the bmi data to the device: -71 [ 230.429290][ T6140] ath6kl: Unable to send get target info: -71 [ 230.568699][ T6140] ath6kl: Failed to init ath6kl core: -71 [ 230.667392][ T8522] xt_socket: unknown flags 0x48 [ 230.769246][ T6140] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 230.799401][ T6140] usb 5-1: USB disconnect, device number 23 [ 230.931284][ T8529] tmpfs: Bad value for 'mpol' [ 231.239542][ T8548] netdevsim netdevsim4: Direct firmware load for / [ 231.239542][ T8548] failed with error -2 [ 231.278118][ T8548] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 231.278118][ T8548] [ 231.359525][ T8520] loop0: detected capacity change from 0 to 32768 [ 231.421276][ T8520] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1619 (8520) [ 231.442885][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1640'. [ 231.472203][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1640'. [ 231.507468][ T8520] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 231.544023][ T8520] BTRFS info (device loop0): using free space tree [ 231.561168][ T8520] BTRFS info (device loop0): has skinny extents [ 231.806899][ T8520] BTRFS info (device loop0): enabling ssd optimizations [ 232.107001][ T8567] loop3: detected capacity change from 0 to 32768 [ 232.312695][ T8567] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 232.344012][ T8578] loop1: detected capacity change from 0 to 32768 [ 232.365249][ T6141] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 232.425379][ T8604] loop4: detected capacity change from 0 to 4096 [ 232.461352][ T8578] XFS (loop1): Mounting V5 Filesystem [ 232.463542][ T8567] (syz.3.1643,8567,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 232.494385][ T8604] ntfs3: loop4: ino=3, Correct links count -> 2. [ 232.532650][ T8567] (syz.3.1643,8567,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 232.549977][ T8567] (syz.3.1643,8567,1):ocfs2_mknod:298 ERROR: status = -2 [ 232.560651][ T8567] (syz.3.1643,8567,1):ocfs2_mknod:502 ERROR: status = -2 [ 232.568439][ T8567] (syz.3.1643,8567,1):ocfs2_create:676 ERROR: status = -2 [ 232.585387][ T8615] netlink: 'syz.0.1652': attribute type 1 has an invalid length. [ 232.593610][ T8615] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.1652'. [ 232.661550][ T8604] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 232.727714][ T8578] XFS (loop1): Ending clean mount [ 232.750400][ T6141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 232.767078][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 232.784784][ T6141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 232.811040][ T6141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 232.882568][ T6141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 232.899212][ T8621] loop0: detected capacity change from 0 to 256 [ 232.918742][ T4198] XFS (loop1): Unmounting Filesystem [ 232.985530][ T8621] FAT-fs (loop0): Directory bread(block 64) failed [ 233.016247][ T8621] FAT-fs (loop0): Directory bread(block 65) failed [ 233.070716][ T8621] FAT-fs (loop0): Directory bread(block 66) failed [ 233.082924][ T6141] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 233.102246][ T6141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.112141][ T8621] FAT-fs (loop0): Directory bread(block 67) failed [ 233.119108][ T6141] usb 3-1: Product: syz [ 233.130317][ T8621] FAT-fs (loop0): Directory bread(block 68) failed [ 233.137390][ T6141] usb 3-1: Manufacturer: syz [ 233.142091][ T6141] usb 3-1: SerialNumber: syz [ 233.147464][ T8621] FAT-fs (loop0): Directory bread(block 69) failed [ 233.175381][ T6141] usb 3-1: config 0 descriptor?? [ 233.180659][ T8621] FAT-fs (loop0): Directory bread(block 70) failed [ 233.199734][ T8621] FAT-fs (loop0): Directory bread(block 71) failed [ 233.206365][ T8621] FAT-fs (loop0): Directory bread(block 72) failed [ 233.213835][ T8621] FAT-fs (loop0): Directory bread(block 73) failed [ 233.366714][ T8638] loop3: detected capacity change from 0 to 128 [ 233.455635][ T6141] adutux 3-1:0.0: Could not retrieve serial number [ 233.472023][ T6141] adutux: probe of 3-1:0.0 failed with error -5 [ 233.652484][ T8649] loop3: detected capacity change from 0 to 512 [ 233.673088][ T6141] usb 3-1: USB disconnect, device number 25 [ 233.876710][ T8649] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.194887][ T8682] netlink: 'syz.3.1680': attribute type 21 has an invalid length. [ 234.223216][ T8682] netlink: 'syz.3.1680': attribute type 1 has an invalid length. [ 234.250297][ T8682] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1680'. [ 234.372063][ T8691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.382268][ T8684] loop1: detected capacity change from 0 to 4096 [ 234.464372][ T8699] loop3: detected capacity change from 0 to 2048 [ 234.502530][ T8705] loop0: detected capacity change from 0 to 2048 [ 234.512366][ T8684] __ntfs_error: 6 callbacks suppressed [ 234.512381][ T8684] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 234.523858][ T8707] loop4: detected capacity change from 0 to 256 [ 234.545022][ T8684] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 234.569362][ T8684] ntfs: volume version 3.1. [ 234.578617][ T8707] exfat: Deprecated parameter 'utf8' [ 234.584179][ T8707] exfat: Deprecated parameter 'utf8' [ 234.613346][ T8699] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.626163][ T8710] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.660415][ T8707] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 235.135322][ T8742] loop0: detected capacity change from 0 to 128 [ 235.254259][ T4722] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 235.290105][ T8742] FAT-fs (loop0): FAT read failed (blocknr 50720) [ 235.508807][ T8760] loop4: detected capacity change from 0 to 16 [ 235.620026][ T8736] syz.2.1709 (8736): drop_caches: 2 [ 235.623332][ T8760] erofs: (device loop4): mounted with root inode @ nid 36. [ 235.653745][ T8766] loop1: detected capacity change from 0 to 256 [ 235.734471][ T4722] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 235.746737][ T4722] usb 4-1: config 0 has no interface number 0 [ 235.788912][ T8766] FAT-fs (loop1): Directory bread(block 64) failed [ 235.795503][ T8766] FAT-fs (loop1): Directory bread(block 65) failed [ 235.807059][ T4722] usb 4-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 235.850981][ T8766] FAT-fs (loop1): Directory bread(block 66) failed [ 235.857546][ T8766] FAT-fs (loop1): Directory bread(block 67) failed [ 235.887516][ T8770] loop4: detected capacity change from 0 to 8 [ 235.896547][ T8766] FAT-fs (loop1): Directory bread(block 68) failed [ 235.939475][ T8766] FAT-fs (loop1): Directory bread(block 69) failed [ 235.965570][ T8766] FAT-fs (loop1): Directory bread(block 70) failed [ 235.974453][ T8774] loop2: detected capacity change from 0 to 256 [ 235.982291][ T8770] SQUASHFS error: zlib decompression failed, data probably corrupt [ 235.985303][ T8766] FAT-fs (loop1): Directory bread(block 71) failed [ 235.997552][ T8766] FAT-fs (loop1): Directory bread(block 72) failed [ 236.004977][ T8766] FAT-fs (loop1): Directory bread(block 73) failed [ 236.031749][ T4722] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 236.033019][ T8770] SQUASHFS error: Failed to read block 0x9b: -5 [ 236.060277][ T8776] trusted_key: encrypted_key: master key parameter is missing [ 236.065222][ T4722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.083459][ T8770] SQUASHFS error: Unable to read metadata cache entry [99] [ 236.106581][ T8770] SQUASHFS error: Unable to read inode 0x127 [ 236.117252][ T8774] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 236.143769][ T4722] usb 4-1: Product: syz [ 236.147969][ T4722] usb 4-1: Manufacturer: syz [ 236.160618][ T4722] usb 4-1: SerialNumber: syz [ 236.193483][ T4722] usb 4-1: config 0 descriptor?? [ 236.280290][ T8780] netlink: 'syz.0.1728': attribute type 32 has an invalid length. [ 236.510041][ T4722] usb 4-1: USB disconnect, device number 24 [ 236.705430][ T8797] loop2: detected capacity change from 0 to 4096 [ 236.812688][ T8797] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 236.861505][ T8797] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 236.887355][ T8797] ntfs: volume version 3.1. [ 236.922433][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 237.096214][ T8790] loop4: detected capacity change from 0 to 32768 [ 237.175365][ T8790] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1733 (8790) [ 237.227725][ T8790] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 237.268248][ T8790] BTRFS error (device loop4): superblock checksum mismatch [ 237.311511][ T8790] BTRFS error (device loop4): open_ctree failed: -22 [ 237.342099][ T4178] udevd[4178]: incorrect btrfs checksum on /dev/loop4 [ 237.342419][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1755'. [ 237.430740][ T8837] XFS (nullb0): Invalid superblock magic number [ 237.586463][ T8855] comedi comedi2: ni_at_a2150: I/O port conflict (0xcf7,28) [ 237.763670][ T8868] netlink: 'syz.2.1768': attribute type 1 has an invalid length. [ 238.006788][ T8878] loop2: detected capacity change from 0 to 256 [ 238.088073][ T8878] FAT-fs (loop2): Directory bread(block 64) failed [ 238.105383][ T8878] FAT-fs (loop2): Directory bread(block 65) failed [ 238.123126][ T8878] FAT-fs (loop2): Directory bread(block 66) failed [ 238.133877][ T8878] FAT-fs (loop2): Directory bread(block 67) failed [ 238.152578][ T8878] FAT-fs (loop2): Directory bread(block 68) failed [ 238.169641][ T8878] FAT-fs (loop2): Directory bread(block 69) failed [ 238.176451][ T8878] FAT-fs (loop2): Directory bread(block 70) failed [ 238.205650][ T8880] EXT4-fs (loop3): Test dummy encryption mode enabled [ 238.208875][ T8878] FAT-fs (loop2): Directory bread(block 71) failed [ 238.219940][ T8878] FAT-fs (loop2): Directory bread(block 72) failed [ 238.226819][ T8880] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 238.241460][ T8880] EXT4-fs (loop3): SIPHASH is not a valid default hash value [ 238.254982][ T8878] FAT-fs (loop2): Directory bread(block 73) failed [ 238.286968][ T1327] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 238.558106][ T8790] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 238.590851][ T8790] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 238.694279][ T8790] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 20 extents in 0ms [ 238.736227][ T1327] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 238.768180][ T1327] usb 1-1: config 0 has no interface number 0 [ 238.870160][ T8790] attempt to access beyond end of device [ 238.870160][ T8790] loop4: rw=0, want=35184372094304, limit=32768 [ 238.972122][ T1327] usb 1-1: New USB device found, idVendor=10c4, idProduct=813d, bcdDevice=ae.9d [ 238.990964][ T1327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.014758][ T1327] usb 1-1: Product: syz [ 239.019614][ T8898] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 239.047977][ T1327] usb 1-1: Manufacturer: syz [ 239.063306][ T8790] gfs2: fsid=statfs_quantum.s: Error parsing journal for spectator mount. [ 239.065162][ T1327] usb 1-1: SerialNumber: syz [ 239.113063][ T1327] usb 1-1: config 0 descriptor?? [ 239.179417][ T1327] cp210x 1-1:0.119: cp210x converter detected [ 239.236019][ T8911] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 239.364561][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 239.396261][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 239.417079][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 239.438945][ T8916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.655726][ T1327] cp210x 1-1:0.119: failed to get vendor val 0x0010 size 3: -71 [ 239.687400][ T1327] cp210x 1-1:0.119: failed to get vendor val 0x000e size 678: -71 [ 239.695309][ T1327] cp210x 1-1:0.119: GPIO initialisation failed: -71 [ 239.742251][ T1327] usb 1-1: cp210x converter now attached to ttyUSB0 [ 239.781695][ T1327] usb 1-1: USB disconnect, device number 26 [ 239.794870][ T1327] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 239.831637][ T1327] cp210x 1-1:0.119: device disconnected [ 240.165950][ T8958] ip6t_srh: unknown srh match flags 4000 [ 240.469270][ T8936] set_capacity_and_notify: 4 callbacks suppressed [ 240.469285][ T8936] loop1: detected capacity change from 0 to 32768 [ 240.657549][ T8936] XFS (loop1): Mounting V5 Filesystem [ 240.675406][ T8990] loop0: detected capacity change from 0 to 2048 [ 240.807399][ T8990] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 240.827616][ T8954] loop4: detected capacity change from 0 to 32768 [ 240.857940][ T6140] XFS (loop1): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x2 [ 240.891670][ T6140] XFS (loop1): Unmount and run xfs_repair [ 240.899539][ T6140] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 240.905115][ T8990] UDF-fs: unknown compression code (0) [ 240.911392][ T6140] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 240.994831][ T6140] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 241.058412][ T6140] 00000020: 00 00 18 00 ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 241.067803][ T6140] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 241.070182][ T8954] XFS (loop4): Mounting V5 Filesystem [ 241.076696][ T6140] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 241.076717][ T6140] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 241.100662][ T6140] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 241.114608][ T6140] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 241.125430][ T8936] XFS (loop1): metadata I/O error in "xfs_read_agi+0x231/0x530" at daddr 0x2 len 1 error 74 [ 241.165105][ T8936] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 241.205294][ T8936] XFS (loop1): Failed to read root inode 0x1800, error 117 [ 241.224969][ T8954] XFS (loop4): Ending clean mount [ 241.444951][ T4195] XFS (loop4): Unmounting Filesystem [ 241.451000][ T6002] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 241.623109][ T9035] loop2: detected capacity change from 0 to 128 [ 241.675599][ T6004] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 241.728987][ T6002] usb 4-1: Using ep0 maxpacket: 32 [ 241.857398][ T6002] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 241.878686][ T6002] usb 4-1: config 0 has no interface number 0 [ 241.884949][ T6002] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 241.921385][ T6002] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.935237][ T6004] usb 1-1: Using ep0 maxpacket: 8 [ 242.016360][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1851'. [ 242.041604][ T9057] device bridge3 entered promiscuous mode [ 242.060677][ T6004] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 242.080106][ T6004] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 242.105972][ T6004] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 242.121906][ T6004] usb 1-1: config 1 has no interface number 1 [ 242.135449][ T6002] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 242.145986][ T6004] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 242.172051][ T6002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.183235][ T9064] netlink: 'syz.1.1855': attribute type 32 has an invalid length. [ 242.184182][ T6002] usb 4-1: Product: syz [ 242.196786][ T6002] usb 4-1: Manufacturer: syz [ 242.201809][ T6002] usb 4-1: SerialNumber: syz [ 242.219494][ T6002] usb 4-1: config 0 descriptor?? [ 242.242417][ T9028] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 242.292201][ T9071] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1859'. [ 242.359964][ T6004] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.372456][ T9078] xt_hashlimit: max too large, truncated to 1048576 [ 242.388202][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.417817][ T6004] usb 1-1: Product: syz [ 242.422024][ T6004] usb 1-1: Manufacturer: syz [ 242.434535][ T6004] usb 1-1: SerialNumber: syz [ 242.555931][ T9085] loop1: detected capacity change from 0 to 512 [ 242.576355][ T6002] usb 4-1: USB disconnect, device number 25 [ 242.703451][ T9085] EXT4-fs (loop1): orphan cleanup on readonly fs [ 242.731778][ T9085] EXT4-fs error (device loop1): ext4_quota_enable:6438: comm syz.1.1865: Bad quota inum: 2, type: 1 [ 242.808594][ T9085] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 242.840997][ T6004] usb 1-1: 2:1 : sample bitwidth 255 in over sample bytes 4 [ 242.857876][ T6004] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 242.903147][ T9085] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 242.913061][ T9085] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 242.949714][ T6004] usb 1-1: USB disconnect, device number 27 [ 243.009712][ T9101] netlink: ct family unspecified [ 243.021728][ T9101] openvswitch: netlink: Actions may not be safe on all matching packets [ 243.226702][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.257664][ T9111] loop2: detected capacity change from 0 to 512 [ 243.427603][ T9117] loop1: detected capacity change from 0 to 4096 [ 243.463358][ T9126] netlink: 1076 bytes leftover after parsing attributes in process `syz.0.1885'. [ 243.510171][ T9111] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.522363][ T9111] ext4 filesystem being mounted at /415/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.555053][ T9117] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 243.627818][ T9136] device bridge1 entered promiscuous mode [ 243.715635][ T9142] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1892'. [ 244.053706][ T9170] netlink: 'syz.2.1905': attribute type 20 has an invalid length. [ 244.302866][ T9178] loop2: detected capacity change from 0 to 4096 [ 244.314124][ T9186] netlink: 'syz.4.1913': attribute type 5 has an invalid length. [ 244.380222][ T9178] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 244.546728][ T9198] xt_TCPMSS: Only works on TCP SYN packets [ 244.962506][ T9148] loop3: detected capacity change from 0 to 40427 [ 245.025882][ T9219] device wlan0 entered promiscuous mode [ 245.062475][ T9222] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1932'. [ 245.085830][ T9148] F2FS-fs (loop3): build fault injection attr: rate: 10, type: 0x1ffff [ 245.094186][ T9148] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x2 [ 245.177042][ T9148] F2FS-fs (loop3): invalid crc value [ 245.222182][ T9231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.230141][ T9231] IPv6: NLM_F_CREATE should be set when creating new route [ 245.237469][ T9231] IPv6: NLM_F_CREATE should be set when creating new route [ 245.258478][ T9148] F2FS-fs (loop3) : inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x5249/0x67c0 [ 245.274868][ T9148] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 245.557677][ T9238] loop0: detected capacity change from 0 to 4096 [ 245.627897][ T9238] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 245.652283][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.693018][ T9238] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 245.727144][ T9259] netlink: 'syz.2.1949': attribute type 2 has an invalid length. [ 245.735472][ T9259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.776575][ T9238] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 245.798848][ T9254] xt_CT: No such helper "syz0" [ 245.809256][ T9238] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 245.864652][ T9238] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 245.971069][ T9238] ntfs: volume version 3.1. [ 246.000116][ T9238] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 246.056368][ T9238] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 246.067298][ T9276] netlink: 'syz.3.1957': attribute type 1 has an invalid length. [ 246.100467][ T9238] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 246.117055][ T9238] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 246.139665][ T9238] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 246.184275][ T9271] loop2: detected capacity change from 0 to 4096 [ 246.185996][ T9280] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 246.283618][ T9271] NILFS (loop2): invalid segment: Checksum error in segment payload [ 246.300137][ T9271] NILFS (loop2): trying rollback from an earlier position [ 246.382211][ T9271] NILFS (loop2): recovery complete [ 246.429849][ T9294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1964'. [ 246.430388][ T9295] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.503772][ T9294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1964'. [ 246.612120][ T9302] netlink: 'syz.3.1968': attribute type 20 has an invalid length. [ 246.690044][ T9308] loop2: detected capacity change from 0 to 512 [ 246.753008][ T6141] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 246.783271][ T9308] EXT4-fs (loop2): orphan cleanup on readonly fs [ 246.833300][ T9308] EXT4-fs error (device loop2): ext4_quota_enable:6438: comm syz.2.1970: Bad quota inum: 2, type: 1 [ 246.903212][ T9308] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 246.993608][ T9321] loop3: detected capacity change from 0 to 4096 [ 247.005364][ T9308] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 247.030778][ T9308] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 247.056309][ T9321] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 247.175633][ T6141] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 247.191913][ T6141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.220133][ T6141] usb 2-1: config 0 descriptor?? [ 247.716474][ T6141] ath6kl: Failed to submit usb control message: -71 [ 247.738761][ T6141] ath6kl: unable to send the bmi data to the device: -71 [ 247.778242][ T6141] ath6kl: Unable to send get target info: -71 [ 247.789074][ T6141] ath6kl: Failed to init ath6kl core: -71 [ 247.828654][ T6141] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 247.848481][ T1327] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 247.865009][ T6141] usb 2-1: USB disconnect, device number 25 [ 247.940034][ T9368] loop2: detected capacity change from 0 to 4096 [ 247.986204][ T9368] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 248.064869][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 248.142575][ T1327] usb 1-1: Using ep0 maxpacket: 16 [ 248.303082][ T1327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.513909][ T9390] loop3: detected capacity change from 0 to 256 [ 248.528547][ T1327] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 248.537694][ T1327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.577163][ T1327] usb 1-1: Product: syz [ 248.587587][ T1327] usb 1-1: Manufacturer: syz [ 248.617929][ T9390] FAT-fs (loop3): Directory bread(block 64) failed [ 248.618011][ T1327] usb 1-1: SerialNumber: syz [ 248.634293][ T9390] FAT-fs (loop3): Directory bread(block 65) failed [ 248.655711][ T9390] FAT-fs (loop3): Directory bread(block 66) failed [ 248.662283][ T9390] FAT-fs (loop3): Directory bread(block 67) failed [ 248.693657][ T1327] usb 1-1: config 0 descriptor?? [ 248.701502][ T9390] FAT-fs (loop3): Directory bread(block 68) failed [ 248.708099][ T9390] FAT-fs (loop3): Directory bread(block 69) failed [ 248.731927][ T9394] loop2: detected capacity change from 0 to 4096 [ 248.752307][ T9390] FAT-fs (loop3): Directory bread(block 70) failed [ 248.766659][ T9394] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 248.775947][ T9390] FAT-fs (loop3): Directory bread(block 71) failed [ 248.794331][ T9390] FAT-fs (loop3): Directory bread(block 72) failed [ 248.816524][ T1327] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 248.844040][ T9390] FAT-fs (loop3): Directory bread(block 73) failed [ 248.939914][ T9394] ntfs3: loop2: ino=5, "/" directory corrupted [ 249.011420][ T9394] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 249.043453][ T9398] loop1: detected capacity change from 0 to 4096 [ 249.087599][ T4186] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 249.089298][ T1327] usb 1-1: USB disconnect, device number 28 [ 249.100128][ T154] usb 1-1: Failed to submit usb control message: -71 [ 249.105837][ T4186] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 249.108537][ T154] usb 1-1: unable to send the bmi data to the device: -71 [ 249.126374][ T9398] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 249.140023][ T154] usb 1-1: unable to get target info from device [ 249.146658][ T154] usb 1-1: could not get target info (-71) [ 249.210904][ T154] usb 1-1: could not probe fw (-71) [ 249.488734][ T9409] loop3: detected capacity change from 0 to 256 [ 249.826814][ T9419] netlink: 'syz.3.2023': attribute type 8 has an invalid length. [ 249.953279][ T9333] syz.4.1984 (9333): drop_caches: 3 [ 250.027738][ T9435] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 250.073864][ T9437] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 250.085429][ T9439] loop4: detected capacity change from 0 to 256 [ 250.300000][ T9425] loop2: detected capacity change from 0 to 32768 [ 250.497576][ T9463] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 250.498754][ T9425] XFS (loop2): Mounting V5 Filesystem [ 250.508630][ T9466] Cannot find add_set index 1 as target [ 250.533103][ T9469] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 250.589329][ T9463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.617479][ T9473] device wlan0 entered promiscuous mode [ 250.707146][ T1327] XFS (loop2): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x2 [ 250.760791][ T1327] XFS (loop2): Unmount and run xfs_repair [ 250.787222][ T9481] netlink: 'syz.3.2049': attribute type 1 has an invalid length. [ 250.787529][ T1327] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 250.819752][ T1327] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 250.846961][ T9481] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2049'. [ 250.862772][ T1327] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 250.893739][ T1327] 00000020: 00 00 18 00 ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 250.908710][ T9484] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.2052'. [ 250.941163][ T1327] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 250.983520][ T1327] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 251.015984][ T1327] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 251.023625][ T9491] SET target dimension over the limit! [ 251.048464][ T1327] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 251.069411][ T9487] FAT-fs (loop1): Directory bread(block 64) failed [ 251.070099][ T1327] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 251.118726][ T9425] XFS (loop2): metadata I/O error in "xfs_read_agi+0x231/0x530" at daddr 0x2 len 1 error 74 [ 251.124918][ T9487] FAT-fs (loop1): Directory bread(block 65) failed [ 251.151380][ T9425] XFS (loop2): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 251.158569][ T9487] FAT-fs (loop1): Directory bread(block 66) failed [ 251.167176][ T9487] FAT-fs (loop1): Directory bread(block 67) failed [ 251.189140][ T9425] XFS (loop2): Failed to read root inode 0x1800, error 117 [ 251.238093][ T9487] FAT-fs (loop1): Directory bread(block 68) failed [ 251.248394][ T9487] FAT-fs (loop1): Directory bread(block 69) failed [ 251.274179][ T9487] FAT-fs (loop1): Directory bread(block 70) failed [ 251.282983][ T9487] FAT-fs (loop1): Directory bread(block 71) failed [ 251.306965][ T9487] FAT-fs (loop1): Directory bread(block 72) failed [ 251.333509][ T9487] FAT-fs (loop1): Directory bread(block 73) failed [ 251.547706][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 251.563170][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2066'. [ 251.618403][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'. [ 251.853404][ T9529] set_capacity_and_notify: 3 callbacks suppressed [ 251.853419][ T9529] loop1: detected capacity change from 0 to 1024 [ 251.959518][ T9535] device geneve1 entered promiscuous mode [ 252.022863][ T9529] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 252.243521][ T9550] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2084'. [ 252.377811][ T9559] loop3: detected capacity change from 0 to 512 [ 252.399630][ T9564] loop1: detected capacity change from 0 to 512 [ 252.490419][ T9559] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 252.513725][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2094'. [ 252.528997][ T9564] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 252.549104][ T9564] EXT4-fs (loop1): orphan cleanup on readonly fs [ 252.550823][ T9576] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2095'. [ 252.555953][ T9559] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.575080][ T9564] __quota_error: 6 callbacks suppressed [ 252.575095][ T9564] Quota error (device loop1): v2_read_file_info: Free block number too big (0 >= 0). [ 252.575216][ T9564] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 252.575241][ T9564] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 252.581089][ T9564] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2091: bg 0: block 40: padding at end of block bitmap is not set [ 252.642820][ T9576] unsupported nla_type 34 [ 252.734856][ T9579] netlink: 'syz.2.2096': attribute type 4 has an invalid length. [ 252.740721][ T9564] EXT4-fs (loop1): Remounting filesystem read-only [ 252.757650][ T9564] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 252.783545][ T9579] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2096'. [ 252.831537][ T9564] EXT4-fs (loop1): Remounting filesystem read-only [ 252.847980][ T9564] EXT4-fs (loop1): 1 truncate cleaned up [ 252.862721][ T9564] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,errors=remount-ro,noinit_itable,. Quota mode: writeback. [ 252.947247][ T9588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2102'. [ 253.243809][ T9595] loop0: detected capacity change from 0 to 4096 [ 253.272740][ T9611] netlink: 'syz.1.2108': attribute type 1 has an invalid length. [ 253.497942][ T9626] netlink: 'syz.3.2120': attribute type 21 has an invalid length. [ 253.533925][ T9626] netlink: 'syz.3.2120': attribute type 5 has an invalid length. [ 253.822314][ T9647] 9pnet: Insufficient options for proto=fd [ 253.958946][ T9660] loop2: detected capacity change from 0 to 1024 [ 254.103243][ T7177] hfsplus: b-tree write err: -5, ino 4 [ 254.132611][ T9667] loop4: detected capacity change from 0 to 8192 [ 254.510714][ T6237] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 254.522103][ T9712] loop0: detected capacity change from 0 to 256 [ 254.539042][ T9711] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 254.616043][ T9721] loop3: detected capacity change from 0 to 256 [ 254.628408][ T9722] loop1: detected capacity change from 0 to 64 [ 254.783741][ T6237] usb 3-1: Using ep0 maxpacket: 16 [ 254.975184][ T9749] loop4: detected capacity change from 0 to 164 [ 255.042207][ T9749] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 255.067247][ T9749] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 255.094652][ T9749] Symlink component flag not implemented [ 255.100428][ T9749] Symlink component flag not implemented [ 255.113300][ T9749] Symlink component flag not implemented (7) [ 255.119645][ T9749] Symlink component flag not implemented (116) [ 255.154914][ T6237] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 255.163992][ T6237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.175274][ T6237] usb 3-1: Product: syz [ 255.179569][ T6237] usb 3-1: Manufacturer: syz [ 255.180496][ T9764] netlink: 'syz.0.2188': attribute type 1 has an invalid length. [ 255.184164][ T6237] usb 3-1: SerialNumber: syz [ 255.185354][ T6237] r8152-cfgselector 3-1: config 0 descriptor?? [ 255.227508][ T9766] netlink: 'syz.0.2190': attribute type 6 has an invalid length. [ 255.263699][ T9768] netlink: 'syz.4.2189': attribute type 10 has an invalid length. [ 255.300159][ T9768] device hsr0 entered promiscuous mode [ 255.345452][ T9774] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 255.379722][ T1327] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 255.392374][ T9768] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 255.411774][ T9768] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 255.437425][ T9768] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 255.493548][ T9768] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 255.515722][ T9777] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 255.517145][ T9778] xt_l2tp: v2 sid > 0xffff: 262144 [ 255.632344][ T9777] CIFS mount error: No usable UNC path provided in device string! [ 255.632344][ T9777] [ 255.661976][ T9780] netlink: 'syz.4.2196': attribute type 1 has an invalid length. [ 255.675471][ T9777] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 255.711849][ T6237] r8152-cfgselector 3-1: Unknown version 0x0000 [ 255.719403][ T6237] r8152-cfgselector 3-1: bad CDC descriptors [ 255.806151][ T6237] r8152-cfgselector 3-1: Unknown version 0x0000 [ 255.822478][ T9782] device sit0 entered promiscuous mode [ 255.848618][ T6237] r8152-cfgselector 3-1: USB disconnect, device number 26 [ 255.856311][ T1327] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.869738][ T1327] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.881764][ T9782] netlink: 'syz.4.2197': attribute type 1 has an invalid length. [ 255.891307][ T1327] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.944180][ T1327] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.999078][ T1327] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.148857][ T1327] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.166506][ T1327] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.196909][ T1327] usb 4-1: Product: syz [ 256.201110][ T1327] usb 4-1: Manufacturer: syz [ 256.288683][ T1327] cdc_wdm 4-1:1.0: skipping garbage [ 256.293933][ T1327] cdc_wdm 4-1:1.0: skipping garbage [ 256.354164][ T1327] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 256.390730][ T1327] cdc_wdm 4-1:1.0: Unknown control protocol [ 256.542987][ T9760] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 256.581018][ T1327] usb 4-1: USB disconnect, device number 26 [ 256.583978][ T9814] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 256.597830][ T9827] netlink: 'syz.2.2218': attribute type 3 has an invalid length. [ 256.608421][ T9814] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 256.640822][ T9814] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 256.692884][ T9814] ntfs: volume version 3.1. [ 256.747147][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 256.783724][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 256.799402][ T4187] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 256.841534][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 256.947243][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 257.036633][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 257.065490][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 257.097694][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 257.279536][ T9841] bridge0: port 3(team0) entered blocking state [ 257.314113][ T9841] bridge0: port 3(team0) entered disabled state [ 257.323304][ T9841] device team0 entered promiscuous mode [ 257.367514][ T9841] device team_slave_0 entered promiscuous mode [ 257.429612][ T9841] device team_slave_1 entered promiscuous mode [ 258.053413][ T9886] set_capacity_and_notify: 3 callbacks suppressed [ 258.053429][ T9886] loop3: detected capacity change from 0 to 1764 [ 258.138606][ T9886] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 258.384124][ T9861] loop2: detected capacity change from 0 to 32768 [ 258.404256][ T9847] loop0: detected capacity change from 0 to 32768 [ 258.476893][ T9861] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 258.507182][ T9906] loop4: detected capacity change from 0 to 512 [ 258.533787][ T9915] __nla_validate_parse: 10 callbacks suppressed [ 258.533803][ T9915] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2259'. [ 258.554879][ T9915] batman_adv: Cannot find parent device [ 258.573614][ T9847] XFS (loop0): Mounting V5 Filesystem [ 258.631091][ T9906] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 258.660807][ T9906] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.753206][ T9847] XFS (loop0): Ending clean mount [ 258.936039][ T4187] XFS (loop0): Unmounting Filesystem [ 259.025830][ T9938] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2272'. [ 259.087247][ T9938] device veth0_to_bond entered promiscuous mode [ 259.126017][ T9941] sctp: [Deprecated]: syz.4.2271 (pid 9941) Use of int in maxseg socket option. [ 259.126017][ T9941] Use struct sctp_assoc_value instead [ 259.502015][ T9959] delete_channel: no stack [ 259.624554][ T9972] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2286'. [ 259.671856][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'. [ 259.914795][ T9997] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 259.954146][ T9997] netlink: 'syz.2.2299': attribute type 3 has an invalid length. [ 259.962392][ T9997] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2299'. [ 260.008268][ T9997] NCSI netlink: No device for ifindex 2986344450 [ 260.055386][T10011] netlink: 'syz.3.2303': attribute type 1 has an invalid length. [ 260.098244][T10011] netlink: 'syz.3.2303': attribute type 2 has an invalid length. [ 260.134344][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2303'. [ 260.249370][T10029] loop4: detected capacity change from 0 to 1024 [ 260.298699][T10033] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 260.390676][T10029] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.420839][T10029] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.435641][ T1327] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 260.648355][T10054] futex_wake_op: syz.3.2323 tries to shift op by 32; fix this program [ 260.724001][ T1327] usb 2-1: Using ep0 maxpacket: 16 [ 260.862996][ T1327] usb 2-1: config 0 has an invalid interface number: 61 but max is 0 [ 260.883788][ T1327] usb 2-1: config 0 has no interface number 0 [ 260.892199][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 260.919310][T10068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2330'. [ 260.945833][T10068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2330'. [ 260.961294][T10072] loop3: detected capacity change from 0 to 1024 [ 260.989730][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 261.009578][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 261.076841][ T1327] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=d1.d8 [ 261.089784][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 261.095209][ T1327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.122031][T10078] loop2: detected capacity change from 0 to 64 [ 261.135840][ T1327] usb 2-1: Product: syz [ 261.149468][ T1327] usb 2-1: Manufacturer: syz [ 261.160257][ T1327] usb 2-1: SerialNumber: syz [ 261.161429][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 261.192941][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 261.210840][ T1327] usb 2-1: config 0 descriptor?? [ 261.261447][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 261.298088][ T1327] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 261.341801][T10086] loop3: detected capacity change from 0 to 256 [ 261.425302][T10086] FAT-fs (loop3): Directory bread(block 64) failed [ 261.455703][T10086] FAT-fs (loop3): Directory bread(block 65) failed [ 261.485833][T10086] FAT-fs (loop3): Directory bread(block 66) failed [ 261.493912][T10086] FAT-fs (loop3): Directory bread(block 67) failed [ 261.522375][ T2427] pvrusb2: Invalid write control endpoint [ 261.533023][T10086] FAT-fs (loop3): Directory bread(block 68) failed [ 261.557591][T10086] FAT-fs (loop3): Directory bread(block 69) failed [ 261.564220][T10086] FAT-fs (loop3): Directory bread(block 70) failed [ 261.575911][ T2427] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 261.614775][T10086] FAT-fs (loop3): Directory bread(block 71) failed [ 261.621957][ T2427] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 261.631055][T10086] FAT-fs (loop3): Directory bread(block 72) failed [ 261.666325][T10086] FAT-fs (loop3): Directory bread(block 73) failed [ 261.680422][T10086] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.691280][T10105] netlink: 'syz.2.2349': attribute type 29 has an invalid length. [ 261.724363][T10105] netlink: 'syz.2.2349': attribute type 3 has an invalid length. [ 261.757406][T10105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2349'. [ 261.791037][ T6141] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 261.819460][ T5999] usb 2-1: USB disconnect, device number 26 [ 262.070563][ T6141] usb 1-1: Using ep0 maxpacket: 32 [ 262.093792][T10111] loop3: detected capacity change from 0 to 32768 [ 262.161330][T10111] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 262.212766][T10119] loop2: detected capacity change from 0 to 1024 [ 262.253106][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 262.256578][T10123] netlink: 'syz.4.2357': attribute type 10 has an invalid length. [ 262.268795][T10123] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2357'. [ 262.279011][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 262.299406][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 262.353068][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 262.370087][ T6141] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 262.391534][ T6141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.413352][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 262.416681][ T6141] usb 1-1: Product: syz [ 262.439228][ T6141] usb 1-1: Manufacturer: syz [ 262.447067][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 262.459280][ T6141] usb 1-1: SerialNumber: syz [ 262.482858][T10121] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 262.513040][T10123] netlink: 'syz.4.2357': attribute type 10 has an invalid length. [ 262.540389][ T4581] udevd[4581]: incorrect cramfs checksum on /dev/loop1 [ 262.550093][T10127] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 262.579703][ T7171] hfsplus: b-tree write err: -5, ino 4 [ 262.630779][ T4581] udevd[4581]: incorrect cramfs checksum on /dev/loop1 [ 262.693548][T10127] cramfs: Error -3 while decompressing! [ 262.697685][T10132] netlink: 'syz.2.2359': attribute type 4 has an invalid length. [ 262.708965][T10127] cramfs: ffffffff964060a8(26)->ffff888071954000(4096) [ 262.753063][T10127] cramfs: Error -3 while decompressing! [ 262.754983][ T6141] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 262.791081][ T6141] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 262.799783][T10127] cramfs: ffffffff964060c2(26)->ffff888071955000(4096) [ 262.824345][ T6141] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 262.838161][T10135] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 262.883370][T10127] cramfs: Error -3 while decompressing! [ 262.888957][T10127] cramfs: ffffffff964060dc(16)->ffff888071938000(4096) [ 262.907871][T10127] cramfs: Error -3 while decompressing! [ 262.930236][T10127] cramfs: ffffffff964060a8(26)->ffff888071954000(4096) [ 263.109018][ T6002] usb 1-1: USB disconnect, device number 29 [ 263.127817][ T6002] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 263.154629][ T6002] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 263.171421][ T6002] visor 1-1:1.0: device disconnected [ 263.274273][T10157] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 263.461826][T10171] netlink: 'syz.2.2382': attribute type 3 has an invalid length. [ 263.999467][T10169] set_capacity_and_notify: 3 callbacks suppressed [ 263.999481][T10169] loop3: detected capacity change from 0 to 32768 [ 264.114759][T10169] ialloc: diAlloc returned -5! [ 264.441112][T10214] __nla_validate_parse: 3 callbacks suppressed [ 264.441130][T10214] netlink: 328 bytes leftover after parsing attributes in process `syz.2.2403'. [ 264.488273][T10183] loop4: detected capacity change from 0 to 32768 [ 264.565433][T10183] JBD2: Ignoring recovery information on journal [ 264.674339][T10183] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 264.689865][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.696660][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.891704][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 264.921044][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2413'. [ 265.150825][T10245] loop2: detected capacity change from 0 to 128 [ 265.516502][T10262] loop2: detected capacity change from 0 to 1764 [ 265.604351][T10265] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2427'. [ 265.727901][T10278] Cannot find del_set index 4 as target [ 265.985406][T10297] ERROR: device name not specified. [ 266.163491][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2450'. [ 266.258068][T10315] deleting an unspecified loop device is not supported. [ 266.488942][T10325] Cannot find del_set index 1 as target [ 266.492277][T10303] loop4: detected capacity change from 0 to 32768 [ 266.571014][T10303] XFS (loop4): Mounting V5 Filesystem [ 266.593443][T10329] loop3: detected capacity change from 0 to 2048 [ 266.624415][ T6141] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 266.673188][T10329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.789801][T10303] XFS (loop4): Ending clean mount [ 266.801910][T10303] XFS (loop4): Quotacheck needed: Please wait. [ 266.846040][T10303] XFS (loop4): Quotacheck: Done. [ 266.891438][ T6141] usb 3-1: Using ep0 maxpacket: 32 [ 266.928470][ T4195] XFS (loop4): Unmounting Filesystem [ 266.956087][T10347] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 267.019878][ T6141] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 267.193293][ T6141] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 267.202607][ T6141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.211932][ T6141] usb 3-1: Product: syz [ 267.220675][ T6141] usb 3-1: Manufacturer: syz [ 267.225740][ T6141] usb 3-1: SerialNumber: syz [ 267.233190][ T6141] usb 3-1: config 0 descriptor?? [ 267.277213][ T6141] usb 3-1: bad CDC descriptors [ 267.282681][ T6141] usb 3-1: unsupported MDLM descriptors [ 267.500382][ T4722] usb 3-1: USB disconnect, device number 27 [ 270.515589][T10378] device netdevsim0 entered promiscuous mode [ 270.758802][T10402] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2491'. [ 270.787152][T10395] loop2: detected capacity change from 0 to 4096 [ 270.907801][T10395] ntfs: volume version 3.1. [ 270.950688][T10417] device netdevsim0 entered promiscuous mode [ 271.127426][T10428] netlink: zone id is out of range [ 271.132586][T10428] netlink: zone id is out of range [ 271.144840][T10425] loop0: detected capacity change from 0 to 2048 [ 271.152109][T10428] netlink: zone id is out of range [ 271.167999][T10428] netlink: zone id is out of range [ 271.185071][T10428] netlink: zone id is out of range [ 271.203037][T10428] netlink: zone id is out of range [ 271.219279][T10428] netlink: zone id is out of range [ 271.224815][T10428] netlink: zone id is out of range [ 271.240853][T10428] netlink: zone id is out of range [ 271.260561][T10428] netlink: zone id is out of range [ 271.365122][T10425] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.444830][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 272.789211][T10562] comedi comedi2: dt2814: I/O port conflict (0xcf7,2) [ 272.837105][T10560] loop2: detected capacity change from 0 to 4096 [ 273.027146][ T6140] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 273.040580][T10578] loop0: detected capacity change from 0 to 256 [ 273.110427][T10578] FAT-fs (loop0): Directory bread(block 64) failed [ 273.128110][T10578] FAT-fs (loop0): Directory bread(block 65) failed [ 273.141572][T10578] FAT-fs (loop0): Directory bread(block 66) failed [ 273.165561][T10578] FAT-fs (loop0): Directory bread(block 67) failed [ 273.183915][T10578] FAT-fs (loop0): Directory bread(block 68) failed [ 273.195374][T10578] FAT-fs (loop0): Directory bread(block 69) failed [ 273.205615][T10578] FAT-fs (loop0): Directory bread(block 70) failed [ 273.218761][T10578] FAT-fs (loop0): Directory bread(block 71) failed [ 273.226746][T10578] FAT-fs (loop0): Directory bread(block 72) failed [ 273.234689][T10578] FAT-fs (loop0): Directory bread(block 73) failed [ 273.298522][T10584] netlink: 'syz.2.2578': attribute type 1 has an invalid length. [ 273.308278][T10584] netlink: 'syz.2.2578': attribute type 3 has an invalid length. [ 273.316577][ T6141] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 273.328571][T10584] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2578'. [ 273.338803][T10584] NCSI netlink: No device for ifindex 55159 [ 273.465740][ T6140] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 273.469213][T10594] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2583'. [ 273.482399][ T6140] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 273.493983][ T6140] usb 4-1: config 8 has no interface number 0 [ 273.500220][ T6140] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 273.511163][ T6140] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 273.522339][ T6140] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 273.535070][ T6140] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 273.549257][ T6140] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 273.560493][ T6140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.626939][ T6140] usb 4-1: NFC: intf ffff88807a97f000 id ffffffff8cb52500 [ 273.711550][ T6141] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 273.729774][ T6141] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 273.740507][ T6141] usb 5-1: config 220 has no interface number 2 [ 273.747343][ T6002] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 273.755208][ T6141] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 273.766618][ T6141] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 273.776854][ T6141] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 273.791409][ T6141] usb 5-1: config 220 interface 0 has no altsetting 0 [ 273.798463][ T6141] usb 5-1: config 220 interface 76 has no altsetting 0 [ 273.805587][ T6141] usb 5-1: config 220 interface 1 has no altsetting 0 [ 273.856446][ T6140] usb 4-1: USB disconnect, device number 27 [ 274.000443][ T6141] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 274.023999][ T6141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.046431][ T6141] usb 5-1: Product: syz [ 274.050633][ T6141] usb 5-1: Manufacturer: syz [ 274.057101][ T6141] usb 5-1: SerialNumber: syz [ 274.354801][T10644] libceph: resolve 'cc' (ret=-3): failed [ 274.374737][ T6002] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 274.384106][ T6002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.416325][ T6002] usb 3-1: Product: syz [ 274.420876][ T6002] usb 3-1: Manufacturer: syz [ 274.425503][ T6002] usb 3-1: SerialNumber: syz [ 274.454918][ T6002] r8152-cfgselector 3-1: config 0 descriptor?? [ 274.482395][ T6141] usb 5-1: selecting invalid altsetting 0 [ 274.499159][ T6141] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 274.528143][ T6141] usb 5-1: No valid video chain found. [ 274.631608][ T6141] usb 5-1: selecting invalid altsetting 0 [ 274.640396][ T6141] usbtest: probe of 5-1:220.1 failed with error -22 [ 274.668090][ T6141] usb 5-1: USB disconnect, device number 24 [ 274.876380][ T4722] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 275.004807][ T6002] r8152-cfgselector 3-1: Unknown version 0x0000 [ 275.027209][ T6002] r8152-cfgselector 3-1: USB disconnect, device number 28 [ 275.041089][T10674] loop4: detected capacity change from 0 to 4096 [ 275.090257][ T6237] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 275.264131][ T4722] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 275.272571][ T4722] usb 4-1: config 0 has no interface number 0 [ 275.346751][ T6237] usb 1-1: Using ep0 maxpacket: 16 [ 275.445038][ T4722] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 275.457561][ T4722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.468453][ T4722] usb 4-1: Product: syz [ 275.472650][ T4722] usb 4-1: Manufacturer: syz [ 275.477833][ T6237] usb 1-1: config 0 has an invalid interface number: 61 but max is 0 [ 275.486149][ T6237] usb 1-1: config 0 has no interface number 0 [ 275.492329][ T4722] usb 4-1: SerialNumber: syz [ 275.499095][ T4722] usb 4-1: config 0 descriptor?? [ 275.644696][T10697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2634'. [ 275.656751][ T6237] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=d1.d8 [ 275.666157][ T6237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.680039][ T6237] usb 1-1: Product: syz [ 275.684237][ T6237] usb 1-1: Manufacturer: syz [ 275.747649][ T6237] usb 1-1: SerialNumber: syz [ 275.762678][ T6237] usb 1-1: config 0 descriptor?? [ 275.780672][ T4722] usb 4-1: USB disconnect, device number 28 [ 275.818981][ T6237] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 275.933053][T10711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.315454][ T4722] usb 1-1: USB disconnect, device number 30 [ 276.343782][ T4722] pvrusb2: Device being rendered inoperable [ 276.491804][T10747] loop1: detected capacity change from 0 to 64 [ 276.574631][T10751] printk: syz.3.2661 (10751): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 276.608950][T10753] loop4: detected capacity change from 0 to 64 [ 276.758338][T10762] netlink: 'syz.1.2664': attribute type 3 has an invalid length. [ 276.824083][T10768] netlink: 'syz.2.2670': attribute type 10 has an invalid length. [ 277.244136][T10805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.280793][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2689'. [ 277.305945][T10811] loop0: detected capacity change from 0 to 128 [ 277.319080][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2689'. [ 277.419405][T10811] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000006f) [ 277.432637][T10811] FAT-fs (loop0): Filesystem has been set read-only [ 277.602156][ T6146] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 277.679175][ T1327] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 277.880134][ T6146] usb 4-1: Using ep0 maxpacket: 8 [ 277.938032][ T1327] usb 5-1: Using ep0 maxpacket: 8 [ 277.972644][T10849] netlink: 'syz.2.2710': attribute type 10 has an invalid length. [ 278.075863][ T1327] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 278.092000][ T1327] usb 5-1: config 179 has no interface number 0 [ 278.099050][ T1327] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 278.119432][ T1327] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 278.142508][ T1327] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 34304, setting to 1024 [ 278.171645][ T1327] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 278.199593][ T1327] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 278.219666][ T1327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.222357][ T6146] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 278.254647][T10817] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 278.258980][ T6146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.269037][T10817] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 278.282858][ T6146] usb 4-1: Product: syz [ 278.297771][ T6146] usb 4-1: Manufacturer: syz [ 278.312658][ T6146] usb 4-1: SerialNumber: syz [ 278.320528][ T6146] usb 4-1: config 0 descriptor?? [ 278.453257][T10867] loop0: detected capacity change from 0 to 64 [ 278.525394][T10857] loop1: detected capacity change from 0 to 32768 [ 278.569038][ T6002] usb 5-1: USB disconnect, device number 25 [ 278.574772][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 278.583346][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 278.592633][ C1] ================================================================== [ 278.601138][ C1] BUG: KASAN: use-after-free in do_raw_spin_lock+0x283/0x2f0 [ 278.608527][ C1] Read of size 4 at addr ffff88802392185c by task udevd/4179 [ 278.615549][T10857] (syz.1.2714,10857,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.615900][ C1] [ 278.631679][ C1] CPU: 1 PID: 4179 Comm: udevd Not tainted syzkaller #0 [ 278.638623][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.639306][ T6146] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 278.648692][ C1] Call Trace: [ 278.648705][ C1] [ 278.659965][T10857] (syz.1.2714,10857,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.662059][ C1] dump_stack_lvl+0x188/0x250 [ 278.662091][ C1] ? show_regs_print_info+0x20/0x20 [ 278.662118][ C1] ? load_image+0x400/0x400 [ 278.662134][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 278.662156][ C1] print_address_description+0x60/0x2d0 [ 278.662173][ C1] ? do_raw_spin_lock+0x283/0x2f0 [ 278.706191][ C1] kasan_report+0xdf/0x130 [ 278.710622][ C1] ? do_raw_spin_lock+0x283/0x2f0 [ 278.715669][ C1] do_raw_spin_lock+0x283/0x2f0 [ 278.720550][ C1] ? read_lock_is_recursive+0x10/0x10 [ 278.720622][T10857] JBD2: Ignoring recovery information on journal [ 278.725943][ C1] ? __rwlock_init+0x140/0x140 [ 278.725977][ C1] _raw_spin_lock_irqsave+0xbc/0x100 [ 278.725999][ C1] ? _raw_spin_lock+0x40/0x40 [ 278.747021][ C1] __wake_up+0xf4/0x180 [ 278.751202][ C1] ? remove_wait_queue+0x120/0x120 [ 278.756347][ C1] ? _raw_spin_unlock+0x24/0x40 [ 278.761654][ C1] __usb_hcd_giveback_urb+0x396/0x520 [ 278.767051][ C1] dummy_timer+0x8a8/0x31e0 [ 278.771663][ C1] ? mark_lock+0x94/0x320 [ 278.773520][T10857] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 278.775999][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 278.776059][ C1] ? dummy_free_streams+0x530/0x530 [ 278.796094][ C1] ? dummy_free_streams+0x530/0x530 [ 278.801308][ C1] call_timer_fn+0x17b/0x540 [ 278.806352][ C1] ? dummy_free_streams+0x530/0x530 [ 278.811564][ C1] ? __run_timers+0x800/0x800 [ 278.816268][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 278.821486][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 278.826699][ C1] ? dummy_free_streams+0x530/0x530 [ 278.831915][ C1] __run_timers+0x53e/0x800 [ 278.836447][ C1] ? detach_timer+0x2b0/0x2b0 [ 278.841146][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 278.847142][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 278.852014][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 278.857327][ C1] run_timer_softirq+0x63/0xf0 [ 278.862104][ C1] handle_softirqs+0x339/0x830 [ 278.866892][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 278.871758][ C1] ? do_softirq+0x210/0x210 [ 278.876270][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 278.881457][ C1] __irq_exit_rcu+0x13b/0x230 [ 278.886119][ C1] ? irq_exit_rcu+0x20/0x20 [ 278.890625][ C1] irq_exit_rcu+0x5/0x20 [ 278.894846][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 278.900555][ C1] [ 278.903468][ C1] [ 278.906385][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 278.906447][ T6146] usb write operation failed. (-71) [ 278.912371][ C1] RIP: 0010:check_preemption_disabled+0x42/0x110 [ 278.912402][ C1] Code: 65 8b 05 59 dc 45 76 65 8b 0d c2 36 46 76 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 [ 278.912418][ C1] RSP: 0018:ffffc90002dcf248 EFLAGS: 00000246 [ 278.912439][ C1] RAX: 0000000000000001 RBX: 00007fc4b9972b0a RCX: e73bf076a9487900 [ 278.912453][ C1] RDX: 0000000000000000 RSI: ffffffff8a79f7e0 RDI: ffffffff8a79f7a0 [ 278.912463][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff203a618 [ 278.912473][ C1] R10: dffffc0000000000 R11: fffffbfff203a619 R12: ffff8880249b1dc0 [ 278.930711][ T6146] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 278.943928][ C1] R13: ffff888016de9640 R14: 00007fc4b9972b0a R15: 1ffff920005b9e6e [ 278.943962][ C1] ? preempt_count_add+0x8d/0x190 [ 278.943990][ C1] rcu_is_watching+0x11/0xa0 [ 278.944011][ C1] is_bpf_text_address+0x36/0x270 [ 278.950667][ T6146] dvbdev: DVB: registering new adapter (Terratec H7) [ 278.958117][ C1] __kernel_text_address+0x9a/0x100 [ 278.958146][ C1] unwind_get_return_address+0x49/0x80 [ 278.958169][ C1] ? stack_trace_save+0xf0/0xf0 [ 278.967666][ T6146] usb 4-1: media controller created [ 278.974427][ C1] arch_stack_walk+0xf2/0x140 [ 278.974465][ C1] stack_trace_save+0xa6/0xf0 [ 278.974485][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 279.014347][ T6146] usb read operation failed. (-71) [ 279.015472][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 279.067031][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 279.072068][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 279.073132][ T6146] usb write operation failed. (-71) [ 279.077354][ C1] ? kmem_cache_alloc+0x100/0x290 [ 279.077374][ C1] ? __d_alloc+0x2a/0x6f0 [ 279.077390][ C1] ? d_alloc_parallel+0x7b/0x1330 [ 279.077406][ C1] ? __lookup_slow+0x134/0x410 [ 279.090236][ T6146] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 279.091916][ C1] ? lookup_slow+0x53/0x70 [ 279.101064][ T6146] usb 4-1: USB disconnect, device number 29 [ 279.101675][ C1] ? walk_component+0x319/0x460 [ 279.123803][ C1] ? path_lookupat+0x169/0x440 [ 279.128560][ C1] ? filename_lookup+0x214/0x540 [ 279.133478][ C1] ? user_path_at_empty+0x40/0x190 [ 279.138583][ C1] ? vfs_statx+0x107/0x500 [ 279.143028][ C1] ? __x64_sys_newfstatat+0x15f/0x200 [ 279.148603][ C1] ? do_syscall_64+0x4c/0xa0 [ 279.153263][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.159352][ C1] slab_post_alloc_hook+0x4c/0x380 [ 279.164465][ C1] ? get_obj_cgroup_from_current+0x2bf/0x2f0 [ 279.170966][ C1] ? __d_alloc+0x2a/0x6f0 [ 279.175312][ C1] kmem_cache_alloc+0x100/0x290 [ 279.180203][ C1] __d_alloc+0x2a/0x6f0 [ 279.184380][ C1] ? lockdep_init_map_type+0x98/0x900 [ 279.189785][ C1] d_alloc_parallel+0x7b/0x1330 [ 279.194666][ C1] ? __init_waitqueue_head+0xa5/0x150 [ 279.200055][ C1] __lookup_slow+0x134/0x410 [ 279.204670][ C1] ? lookup_one_len+0x2d0/0x2d0 [ 279.209554][ C1] ? down_read+0x1aa/0x2e0 [ 279.213996][ C1] lookup_slow+0x53/0x70 [ 279.218270][ C1] walk_component+0x319/0x460 [ 279.223079][ C1] path_lookupat+0x169/0x440 [ 279.227705][ C1] filename_lookup+0x214/0x540 [ 279.232501][ C1] ? hashlen_string+0x110/0x110 [ 279.237391][ C1] ? strncpy_from_user+0x1fb/0x360 [ 279.242526][ C1] ? getname_flags+0x1fe/0x500 [ 279.247405][ C1] user_path_at_empty+0x40/0x190 [ 279.252362][ C1] vfs_statx+0x107/0x500 [ 279.256622][ C1] ? __might_fault+0xb7/0x110 [ 279.261321][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 279.266395][ C1] ? vfs_fstatat+0x40/0x40 [ 279.270826][ C1] __x64_sys_newfstatat+0x15f/0x200 [ 279.276008][ C1] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 279.281285][ C1] ? lock_chain_count+0x20/0x20 [ 279.286125][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 279.291047][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 279.296232][ C1] do_syscall_64+0x4c/0xa0 [ 279.300630][ C1] ? clear_bhb_loop+0x30/0x80 [ 279.305315][ C1] ? clear_bhb_loop+0x30/0x80 [ 279.309970][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.315845][ C1] RIP: 0033:0x7fc4b9972b0a [ 279.320326][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 279.339918][ C1] RSP: 002b:00007ffc4e430608 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 279.348320][ C1] RAX: ffffffffffffffda RBX: 00005634de7446e0 RCX: 00007fc4b9972b0a [ 279.356286][ C1] RDX: 00007ffc4e430630 RSI: 00005634de7446e0 RDI: 00000000ffffff9c [ 279.364252][ C1] RBP: 00005634de7446f9 R08: 00005634de74dc50 R09: 0000000000000000 [ 279.372280][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc4e431755 [ 279.380255][ C1] R13: 00007ffc4e4306c0 R14: 00005634a0aa06d7 R15: 00007ffc4e431750 [ 279.388229][ C1] [ 279.391285][ C1] [ 279.393601][ C1] Allocated by task 1327: [ 279.397994][ C1] __kasan_kmalloc+0xb5/0xf0 [ 279.402567][ C1] xpad_probe+0x3f6/0x1b20 [ 279.406966][ C1] usb_probe_interface+0x5c5/0xb20 [ 279.412070][ C1] really_probe+0x284/0xc80 [ 279.416555][ C1] __driver_probe_device+0x18c/0x330 [ 279.421817][ C1] driver_probe_device+0x4f/0x420 [ 279.426860][ C1] __device_attach_driver+0x2b0/0x500 [ 279.432269][ C1] bus_for_each_drv+0x184/0x210 [ 279.437131][ C1] __device_attach+0x2a8/0x480 [ 279.441872][ C1] bus_probe_device+0xbc/0x1e0 [ 279.446646][ C1] device_add+0xa00/0xfb0 [ 279.450956][ C1] usb_set_configuration+0x1991/0x1fd0 [ 279.456399][ C1] usb_generic_driver_probe+0x89/0x150 [ 279.461864][ C1] usb_probe_device+0x139/0x270 [ 279.466752][ C1] really_probe+0x284/0xc80 [ 279.471264][ C1] __driver_probe_device+0x18c/0x330 [ 279.476564][ C1] driver_probe_device+0x4f/0x420 [ 279.481691][ C1] __device_attach_driver+0x2b0/0x500 [ 279.487080][ C1] bus_for_each_drv+0x184/0x210 [ 279.491950][ C1] __device_attach+0x2a8/0x480 [ 279.496722][ C1] bus_probe_device+0xbc/0x1e0 [ 279.501504][ C1] device_add+0xa00/0xfb0 [ 279.505842][ C1] usb_new_device+0xd65/0x1660 [ 279.510617][ C1] hub_event+0x2e4a/0x55e0 [ 279.515016][ C1] process_one_work+0x85f/0x1010 [ 279.519963][ C1] worker_thread+0xaa6/0x1290 [ 279.524619][ C1] kthread+0x436/0x520 [ 279.528664][ C1] ret_from_fork+0x1f/0x30 [ 279.533062][ C1] [ 279.535365][ C1] Freed by task 6002: [ 279.539320][ C1] kasan_set_track+0x4b/0x70 [ 279.543889][ C1] kasan_set_free_info+0x1f/0x40 [ 279.548813][ C1] ____kasan_slab_free+0xd5/0x110 [ 279.553835][ C1] slab_free_freelist_hook+0xea/0x170 [ 279.559187][ C1] kfree+0xef/0x2a0 [ 279.562973][ C1] xpad_disconnect+0x34c/0x470 [ 279.567839][ C1] usb_unbind_interface+0x1ee/0x860 [ 279.573104][ C1] device_release_driver_internal+0x4b4/0x750 [ 279.579156][ C1] bus_remove_device+0x2e2/0x400 [ 279.584103][ C1] device_del+0x6af/0xaf0 [ 279.588416][ C1] usb_disable_device+0x3e2/0x890 [ 279.593419][ C1] usb_disconnect+0x348/0x8a0 [ 279.598075][ C1] hub_event+0x1ecb/0x55e0 [ 279.602471][ C1] process_one_work+0x85f/0x1010 [ 279.607392][ C1] worker_thread+0xaa6/0x1290 [ 279.612051][ C1] kthread+0x436/0x520 [ 279.616230][ C1] ret_from_fork+0x1f/0x30 [ 279.620625][ C1] [ 279.622928][ C1] The buggy address belongs to the object at ffff888023921800 [ 279.622928][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 279.637070][ C1] The buggy address is located 92 bytes inside of [ 279.637070][ C1] 1024-byte region [ffff888023921800, ffff888023921c00) [ 279.650329][ C1] The buggy address belongs to the page: [ 279.655940][ C1] page:ffffea00008e4800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888023926000 pfn:0x23920 [ 279.667371][ C1] head:ffffea00008e4800 order:3 compound_mapcount:0 compound_pincount:0 [ 279.675675][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 279.683767][ C1] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c41dc0 [ 279.692336][ C1] raw: ffff888023926000 000000008010000d 00000001ffffffff 0000000000000000 [ 279.700895][ C1] page dumped because: kasan: bad access detected [ 279.707300][ C1] page_owner tracks the page as allocated [ 279.713079][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4195, ts 68681959869, free_ts 68437223069 [ 279.732202][ C1] get_page_from_freelist+0x1bbd/0x1ca0 [ 279.737740][ C1] __alloc_pages+0x1ee/0x480 [ 279.742312][ C1] new_slab+0xc0/0x4b0 [ 279.746366][ C1] ___slab_alloc+0x80a/0xdd0 [ 279.751200][ C1] __kmalloc_node+0x200/0x3b0 [ 279.755882][ C1] qdisc_alloc+0x8d/0xb10 [ 279.760201][ C1] qdisc_create_dflt+0x5f/0x430 [ 279.765049][ C1] dev_activate+0x331/0x12b0 [ 279.769627][ C1] __dev_open+0x33b/0x430 [ 279.773973][ C1] __dev_change_flags+0x20d/0x6a0 [ 279.779067][ C1] dev_change_flags+0x82/0x1a0 [ 279.783903][ C1] do_setlink+0xcdb/0x3d60 [ 279.788304][ C1] rtnl_newlink+0x1658/0x1a50 [ 279.793102][ C1] rtnetlink_rcv_msg+0x844/0xf30 [ 279.798034][ C1] netlink_rcv_skb+0x1f5/0x440 [ 279.802799][ C1] netlink_unicast+0x774/0x920 [ 279.807559][ C1] page last free stack trace: [ 279.812214][ C1] free_unref_page_prepare+0x637/0x6c0 [ 279.817659][ C1] free_unref_page+0x8f/0x2a0 [ 279.822321][ C1] __unfreeze_partials+0x1a5/0x200 [ 279.827410][ C1] put_cpu_partial+0x12d/0x190 [ 279.832168][ C1] qlist_free_all+0x35/0x90 [ 279.836655][ C1] kasan_quarantine_reduce+0x150/0x160 [ 279.842101][ C1] __kasan_slab_alloc+0x2f/0xd0 [ 279.846936][ C1] slab_post_alloc_hook+0x4c/0x380 [ 279.852031][ C1] kmem_cache_alloc+0x100/0x290 [ 279.856869][ C1] proc_reg_open+0x1a4/0x510 [ 279.861441][ C1] do_dentry_open+0x7ff/0xf80 [ 279.866103][ C1] path_openat+0x26f5/0x2fa0 [ 279.870687][ C1] do_filp_open+0x1e2/0x410 [ 279.875192][ C1] do_sys_openat2+0x150/0x4b0 [ 279.879854][ C1] __x64_sys_openat+0x135/0x160 [ 279.884688][ C1] do_syscall_64+0x4c/0xa0 [ 279.889203][ C1] [ 279.891515][ C1] Memory state around the buggy address: [ 279.897126][ C1] ffff888023921700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 279.905283][ C1] ffff888023921780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 279.913355][ C1] >ffff888023921800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.921402][ C1] ^ [ 279.928324][ C1] ffff888023921880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.936371][ C1] ffff888023921900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 279.944414][ C1] ================================================================== [ 279.952453][ C1] Disabling lock debugging due to kernel taint [ 279.958680][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 279.965868][ C1] CPU: 1 PID: 4179 Comm: udevd Tainted: G B syzkaller #0 [ 279.974172][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.984210][ C1] Call Trace: [ 279.987487][ C1] [ 279.990322][ C1] dump_stack_lvl+0x188/0x250 [ 279.994986][ C1] ? show_regs_print_info+0x20/0x20 [ 280.000165][ C1] ? load_image+0x400/0x400 [ 280.004691][ C1] panic+0x2e5/0x810 [ 280.008581][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 280.013063][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 280.018937][ C1] ? _raw_spin_unlock+0x40/0x40 [ 280.023917][ C1] ? do_raw_spin_lock+0x283/0x2f0 [ 280.028931][ C1] check_panic_on_warn+0x80/0xa0 [ 280.033867][ C1] ? do_raw_spin_lock+0x283/0x2f0 [ 280.038873][ C1] end_report+0x6d/0xf0 [ 280.043014][ C1] kasan_report+0x102/0x130 [ 280.047500][ C1] ? do_raw_spin_lock+0x283/0x2f0 [ 280.052508][ C1] do_raw_spin_lock+0x283/0x2f0 [ 280.057349][ C1] ? read_lock_is_recursive+0x10/0x10 [ 280.062714][ C1] ? __rwlock_init+0x140/0x140 [ 280.067462][ C1] _raw_spin_lock_irqsave+0xbc/0x100 [ 280.072732][ C1] ? _raw_spin_lock+0x40/0x40 [ 280.077392][ C1] __wake_up+0xf4/0x180 [ 280.081548][ C1] ? remove_wait_queue+0x120/0x120 [ 280.086643][ C1] ? _raw_spin_unlock+0x24/0x40 [ 280.091488][ C1] __usb_hcd_giveback_urb+0x396/0x520 [ 280.096957][ C1] dummy_timer+0x8a8/0x31e0 [ 280.101455][ C1] ? mark_lock+0x94/0x320 [ 280.105772][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 280.111742][ C1] ? dummy_free_streams+0x530/0x530 [ 280.117047][ C1] ? dummy_free_streams+0x530/0x530 [ 280.122231][ C1] call_timer_fn+0x17b/0x540 [ 280.126810][ C1] ? dummy_free_streams+0x530/0x530 [ 280.132011][ C1] ? __run_timers+0x800/0x800 [ 280.136677][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 280.141858][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 280.147042][ C1] ? dummy_free_streams+0x530/0x530 [ 280.152225][ C1] __run_timers+0x53e/0x800 [ 280.156728][ C1] ? detach_timer+0x2b0/0x2b0 [ 280.161390][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 280.167435][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 280.172270][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 280.177543][ C1] run_timer_softirq+0x63/0xf0 [ 280.182291][ C1] handle_softirqs+0x339/0x830 [ 280.187037][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 280.191871][ C1] ? do_softirq+0x210/0x210 [ 280.196361][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 280.201538][ C1] __irq_exit_rcu+0x13b/0x230 [ 280.206199][ C1] ? irq_exit_rcu+0x20/0x20 [ 280.210682][ C1] irq_exit_rcu+0x5/0x20 [ 280.214902][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 280.220514][ C1] [ 280.223425][ C1] [ 280.226344][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 280.232304][ C1] RIP: 0010:check_preemption_disabled+0x42/0x110 [ 280.238711][ C1] Code: 65 8b 05 59 dc 45 76 65 8b 0d c2 36 46 76 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 [ 280.258404][ C1] RSP: 0018:ffffc90002dcf248 EFLAGS: 00000246 [ 280.264488][ C1] RAX: 0000000000000001 RBX: 00007fc4b9972b0a RCX: e73bf076a9487900 [ 280.272445][ C1] RDX: 0000000000000000 RSI: ffffffff8a79f7e0 RDI: ffffffff8a79f7a0 [ 280.280396][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff203a618 [ 280.288345][ C1] R10: dffffc0000000000 R11: fffffbfff203a619 R12: ffff8880249b1dc0 [ 280.296301][ C1] R13: ffff888016de9640 R14: 00007fc4b9972b0a R15: 1ffff920005b9e6e [ 280.304376][ C1] ? preempt_count_add+0x8d/0x190 [ 280.309393][ C1] rcu_is_watching+0x11/0xa0 [ 280.313966][ C1] is_bpf_text_address+0x36/0x270 [ 280.318980][ C1] __kernel_text_address+0x9a/0x100 [ 280.324254][ C1] unwind_get_return_address+0x49/0x80 [ 280.329696][ C1] ? stack_trace_save+0xf0/0xf0 [ 280.334539][ C1] arch_stack_walk+0xf2/0x140 [ 280.339218][ C1] stack_trace_save+0xa6/0xf0 [ 280.343878][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 280.348969][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 280.353805][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 280.358814][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 280.364090][ C1] ? kmem_cache_alloc+0x100/0x290 [ 280.369091][ C1] ? __d_alloc+0x2a/0x6f0 [ 280.373421][ C1] ? d_alloc_parallel+0x7b/0x1330 [ 280.378427][ C1] ? __lookup_slow+0x134/0x410 [ 280.383271][ C1] ? lookup_slow+0x53/0x70 [ 280.387670][ C1] ? walk_component+0x319/0x460 [ 280.392689][ C1] ? path_lookupat+0x169/0x440 [ 280.397429][ C1] ? filename_lookup+0x214/0x540 [ 280.402443][ C1] ? user_path_at_empty+0x40/0x190 [ 280.407547][ C1] ? vfs_statx+0x107/0x500 [ 280.411946][ C1] ? __x64_sys_newfstatat+0x15f/0x200 [ 280.417297][ C1] ? do_syscall_64+0x4c/0xa0 [ 280.421877][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.427935][ C1] slab_post_alloc_hook+0x4c/0x380 [ 280.433026][ C1] ? get_obj_cgroup_from_current+0x2bf/0x2f0 [ 280.439080][ C1] ? __d_alloc+0x2a/0x6f0 [ 280.443394][ C1] kmem_cache_alloc+0x100/0x290 [ 280.448227][ C1] __d_alloc+0x2a/0x6f0 [ 280.452362][ C1] ? lockdep_init_map_type+0x98/0x900 [ 280.457717][ C1] d_alloc_parallel+0x7b/0x1330 [ 280.462570][ C1] ? __init_waitqueue_head+0xa5/0x150 [ 280.467924][ C1] __lookup_slow+0x134/0x410 [ 280.472495][ C1] ? lookup_one_len+0x2d0/0x2d0 [ 280.477335][ C1] ? down_read+0x1aa/0x2e0 [ 280.481741][ C1] lookup_slow+0x53/0x70 [ 280.486052][ C1] walk_component+0x319/0x460 [ 280.490884][ C1] path_lookupat+0x169/0x440 [ 280.495540][ C1] filename_lookup+0x214/0x540 [ 280.500290][ C1] ? hashlen_string+0x110/0x110 [ 280.505129][ C1] ? strncpy_from_user+0x1fb/0x360 [ 280.510861][ C1] ? getname_flags+0x1fe/0x500 [ 280.515614][ C1] user_path_at_empty+0x40/0x190 [ 280.520625][ C1] vfs_statx+0x107/0x500 [ 280.524857][ C1] ? __might_fault+0xb7/0x110 [ 280.529514][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 280.534526][ C1] ? vfs_fstatat+0x40/0x40 [ 280.538927][ C1] __x64_sys_newfstatat+0x15f/0x200 [ 280.544268][ C1] ? __ia32_sys_newlstat+0x1c0/0x1c0 [ 280.549577][ C1] ? lock_chain_count+0x20/0x20 [ 280.554410][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 280.559330][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 280.564519][ C1] do_syscall_64+0x4c/0xa0 [ 280.568952][ C1] ? clear_bhb_loop+0x30/0x80 [ 280.573616][ C1] ? clear_bhb_loop+0x30/0x80 [ 280.578281][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.584154][ C1] RIP: 0033:0x7fc4b9972b0a [ 280.588682][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 280.608354][ C1] RSP: 002b:00007ffc4e430608 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 280.616926][ C1] RAX: ffffffffffffffda RBX: 00005634de7446e0 RCX: 00007fc4b9972b0a [ 280.624895][ C1] RDX: 00007ffc4e430630 RSI: 00005634de7446e0 RDI: 00000000ffffff9c [ 280.632849][ C1] RBP: 00005634de7446f9 R08: 00005634de74dc50 R09: 0000000000000000 [ 280.640800][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc4e431755 [ 280.648750][ C1] R13: 00007ffc4e4306c0 R14: 00005634a0aa06d7 R15: 00007ffc4e431750 [ 280.656711][ C1] [ 280.660141][ C1] Kernel Offset: disabled [ 280.664453][ C1] Rebooting in 86400 seconds..