last executing test programs: 4m3.407934932s ago: executing program 0 (id=6334): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="fd"], 0x10) 4m3.285374448s ago: executing program 0 (id=6337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) 4m3.126190416s ago: executing program 0 (id=6339): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="a5e6efc35603e7564b7345d63ddd28921043052db1e8293a3cccdcbbfe66420d245c069405350a418630348ac28237dffd6396393abb1c54e8b62fa09afa9dd6143056389d59d83d642d9c199a7ee26b39bb83b6c59ab057c4cdda6edf7b8eac48ee1f2a5e0c4e0ccc25cf9b5449", @ANYRES8, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES8], 0x1, 0x5d5, &(0x7f0000002380)="$eJzs3E1v3MbdAPChLEX7KHiMAkFjxzEQxsnBPVjZXdUyhPTgLUVJTHaXC5IK5FMR1HIqVEqLuAUa33xpG7RFTz0XORXoqcd+qXyFquC+yFpJluL4ZVPg9wNsDpd/zvyHImawxA4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABCiZL3ZbEWhm/W3d+KnS9aLvHfO8Ul9/57aTFkIIcwftRtCVP8LjUa4Ovro6htPYn9Y/3cjXBntXQmNEMJ/GuHR62/+4MM35ufqExeiKJyT0Cvx8MtHv/x0f3/3i1kn8gIcRs9+zmbaz8o863U20zgr83htdbX5wdZGGW9k3bS8V1ZpL06KtFPlRXwzuRtCWFuJ0+V7+XZ/c73TTeObyY/i1tranVvtZnM1/mh5kHaKMu9/8NFymWxl3W7W3xzG1Idvtd8Jd+ob8eOsiqu004vjB3v7uysXJVkHtb5NUPuioHaz3W612u3W6u2123eazcb4bj36YL55Qjh5yvzsb1peuddC40/1jTLcmYxxr73YkRye3WHy11mnAAAAALxk0fAZezR8On91WNrIumlzKuYwmll6AAAAwAsw/Gp/ZfwAIISrITr9/R8AAAD43/bH6TV2YXqNXYiiUA4Wo8lSlcHO+9FBpy51Di6NPrp0ssZq41p0eVzJcLM6P95L0uvRW6OgtybR34w3Dy7KIyqKhejx8yUQ/hyujWKu3R9t70+OjFpZ2si66XKSdz9shU7n8lyV7lS//XzvdyEUxeGlr/q9y1F4sLe/u/zzX+3fH+byuK7l8cH4FxKnfigxnctiOJbLb47WPY57fHe6xwvDBzF1r7/q95ZG7TYH3fmj/s8Nzz489Sc9p/+/D2+PYt5eGm2XpvvfqNtsLZ/R++NZtAY77y+OGxv3fOHZsrg+irl+8716897N8ZGFY1m0L8qiffz6j65FmHsRWRy/FivnZHEY9vZ3V54zC4BZeXByFhrNu+HJ/H9q3h0Pb/HJqs4Z5S6Y3esp/MLZ/RfntvKvpXpEf3cU8+61+Sdz8YkRvXnRvNL8lvN6CGf39Z/hxt//FsJ2uDEJftocW7f7l6lZNTr4uj7h61PtTlaal912VO9cWjz4dXjz4ZePbu0dfPrZ7me7n7fbK6vNHzebt9thYdiN8cbcA8AZ0uKbaKn6Q1QU2eBnrbW1VqfaSuMiTz6Oi2x9M42zfpUWyVanv5nGgyKv8iTv1oVPsvW0jMvtwSAvqngjL+JBXmY7wze/xONXv5Rpr9OvsqQcdNNOmcZJ3q86SRWvZ2USD7Z/2s3KrbQYnlwO0iTbyJJOleX9uMy3iyRdjuMyTY8FZutpv8o2srrY/0cosl6nuBd/kne3e2m8npZJkQ2qfFThpK2sv5EXvWG1y7O+2ADwPfEwjN9gd/Qqu2cuhMYFMWe1e+oZKQDwypycpRdnnRAAAAAAAAAAAAAAAHDK8eV6PxkvynvuFYHnFhrhqBDCy2ji7utnHXrnJXXnOxZCCPMvtYnJi5Oer576b/Q9uWKzLTTqwlyYdRoLx5bOfpd6ohDCUw7937ja3S8e/n8dM4vRCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADO998AAAD//w4liW4=") chdir(&(0x7f0000000040)='./file0\x00') 4m2.679042518s ago: executing program 0 (id=6350): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000dc0)={[{@umask}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@part={'part', 0x3d, 0x4}}, {@nobarrier}, {@force}, {@gid}, {@gid}, {}]}, 0x44, 0x70f, &(0x7f00000005c0)="$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") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) 4m2.25365592s ago: executing program 0 (id=6358): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x30, &(0x7f0000000100)=[{0x30, '\x00', @data=0x10000, 0x2}]}) 4m1.648362719s ago: executing program 0 (id=6370): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) 4m1.563793474s ago: executing program 32 (id=6370): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) 3.595902352s ago: executing program 3 (id=12314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.516339087s ago: executing program 2 (id=12315): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) 3.516233876s ago: executing program 2 (id=12316): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}) 3.478733748s ago: executing program 3 (id=12317): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 3.422243521s ago: executing program 3 (id=12318): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 3.380344033s ago: executing program 2 (id=12319): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 3.253239309s ago: executing program 2 (id=12320): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 3.052226069s ago: executing program 2 (id=12322): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000440)={[{0x8, 0x4e00, "19ddc49e6f50fa6b"}]}) 2.524106695s ago: executing program 3 (id=12330): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./bus\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$eJzs3T9sW3kdAPDvew1cWu5Kc3Q4JCQscQIEKEpuOshJpGnaXnINRYW7gcV1El8bcOIqcRDDDUEsJzEhMSCG0yGxZTplYzoWJEYWxmOuBAMLEtIJI9vPjt9z3JjWTmj1+Ujt8/v9j7/v/fx7g/1LM40HW3ulrb1SZadU33h377XST+u1/e1qpEV/GkgZi5H751w9XZymJ9AmT+PO9Zs/eOe1iD9u/vVRs9lsRstUnGi+7/W//vneRv+xK+0/+UWn3ZNbG5cfRcTVgXG1XIiI6ez1tey4lB0vRsTliEgi4p33fnmvNKbRfPRJ9Y3yp2vvHy28unr4wdHwvz2J+G3ti9+6v/33r1xY+Ns3eukfjmkgAAAAAAAAAAAAAAAAAAA8k27dvfP29+fm4+Mkpg6TzvdhI+Kgl58dh30/tjk2Xz6DvxYAAAAAAAAAAAAAAAAAAAD+Px1//7+UvJwM7te9nB0Xh9Rvfne0fr76lONkMla+d2f5xtx8tv97MpD/epb0j2sXYqa7v/qfh+//fq1Q/+T93wf7eVLd8XX7vRJJOps7T9PZ2YjfZRu/v5JcSmv1vcY3363v72yObRjPrHz8O7v356KTbeifi/9j9v9fKrQ/+f3/vzBwNbXO743vEnuu5eN/YWi53/88eUz8P9srd71Q7yziz5PLx3+qnXaxv8BiZwJoxf9XU6ff/8uF9icV/8sRUUpaYy3lZoDWGqaVPmy9Ql4+/p9pp+WmzuyNHHb//7sQ/xuF9s9r/j8ofhBxonz8O/P4dK7E8f0/k55+/98stH8e8W+N/8Dn/0jy8X+hkziVK9J+J0ed/28V2p9U/N9Os3FeTnJXwGHSSR/2e3Xk5eM/PZB//PyXjrT+f7NQ/6ye/7r9dp//utP/15PO8x8n68X/KB41mxeHlhv1/l8p1Jt0/Bfb678Br18dWw/Pt/z9f6mdll87X2n/Pyz+zUL8VwvtP8H8/4fhT6HH2quS6W78j6+n/7zQSf/Q+m8k+fh/rpOY9pfo/BRse/2XnL7+f6vQ/nms/1rjP0gn2+vzIh//F4eWa8X/LyN8/t8u1Jt8/CPmuhfA4PKFU+Tj/9LQcu37f/r0+K8V6k06/l+bZOMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4Cl7HglknQ2d56ms7MR17PzV+JSsl7ZLK/X6hs/2YtYztJL8XJyv1Zfr9TKWzv1zWq5UqvVNyJuZPlXYzrZq9Ub5e3Kw5u9ti4mD6qV3cZ6tdKIiFtZ+pfipW5b61uN7crDiHizl/f5tL778EFlp7y5tfudubm5uVjpjWEmqf6sUd1pdHrv5Eas9upeSfoG185+qzeWF5Mf1/d3dyq1dvrtvjq1+kal1ldnLcv7dcwkjd39nY1Ko1qu1e93+ztPi9lxeeXuD+/enh/Iv5d0jktnOywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/kcfL3z7NxEx1TlLI6KUZC+S7F/OR59U3yh/uvb+0cKrq4cfHD06qQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9lBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCrv0j9JAEMUB+M1YaOkxrJbdznZFES1cETyBHsPD6FG8hHewSJE2RQgksxD2D2yTVN/XPJgfM+/BPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5R7fuvfXuolIcbW9jPj9/Ps/zp9L/b6bvn9xhhk5naeX7v6hbsq/p1F+W45Wbd6nm/XXR0zU3s9gT4b7dDDuMzS3b3Pz9X2vI+UqItqS36Scq2rZWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2j6NsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgVAAD//6DWH10=") quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.710325455s ago: executing program 4 (id=12345): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe5c8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x2, "b43d70dde5dbbbe40f00f40103e6c9000000c67f00", 0x33524742}) 1.62017617s ago: executing program 3 (id=12347): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 1.585493961s ago: executing program 4 (id=12348): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x20008c0, &(0x7f00000000c0)={[{@fat=@nfs_stale_rw}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}]}, 0x4, 0x388, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xc4042, 0x1ff) 1.123560754s ago: executing program 4 (id=12359): socket$inet(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000740)={[{@usrquota}, {@nomblk_io_submit}, {@sysvgroups}, {@barrier_val={'barrier', 0x3d, 0x1}}]}, 0x0, 0x62c, &(0x7f00000000c0)="$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") 1.064317967s ago: executing program 3 (id=12360): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200033010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)={0x0, 0x15, 0x3, "57d29e"}, 0x0, 0x0}) 998.66006ms ago: executing program 1 (id=12363): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) 959.363693ms ago: executing program 1 (id=12365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x42, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0}, 0x38) 936.003594ms ago: executing program 1 (id=12367): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 596.117691ms ago: executing program 4 (id=12372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x487, 0x0, 0xf}]}) 535.300154ms ago: executing program 4 (id=12374): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000a00000074000000000e000008001b0001000000", 0x24) 466.451427ms ago: executing program 5 (id=12376): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x1008, 0x3}}) 435.517659ms ago: executing program 4 (id=12377): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 356.364722ms ago: executing program 5 (id=12378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000080)) 349.974003ms ago: executing program 5 (id=12379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000e0a0102e2a4ebd826ce7d6e010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180060001"], 0xd0}}, 0x0) 310.060235ms ago: executing program 1 (id=12380): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000002c0)) 244.306328ms ago: executing program 5 (id=12381): pipe2$9p(&(0x7f0000005500)={0xffffffffffffffff}, 0x800) fcntl$getflags(r0, 0x408) 244.162748ms ago: executing program 1 (id=12382): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") open(&(0x7f00000003c0)='./file2\x00', 0x430dc882a8a7f17, 0xc) 221.819469ms ago: executing program 5 (id=12383): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x210481, &(0x7f0000000600)={[{@nobarrier}, {@gid}, {@type={'type', 0x3d, "69759d7b"}}, {@nls={'nls', 0x3d, 'cp949'}}, {@part={'part', 0x3d, 0x1ff}}, {@umask={'umask', 0x3d, 0x3}}, {@nodecompose}, {@uid}, {@gid}]}, 0x80, 0x6f8, &(0x7f0000002440)="$eJzs3U9sW3cdAPDvc2wn7lDm/ek2EFKjVVSwQpvEjBYJiYIQymFClbjsatp0jeJkVeKhtELUYwyOcEI97FCEwmEntAPSEAfEOCMhcUW9V+JeccDoPT87tpM49po/Xfl8pJf3e+/9/nx/37z3Yj+3cgD/t5bejFIrklg6/8ZWuv1gu9Z4sF1b65YjYjoiChHFziqS9Yjkk4gr0Vni8+nOvLtsfX+PcV5/+PEH5+59WOtsFfMlq1/oaz9Cu2+EYa18ibmImMrXEyru19+1Pfq7O1HXSS/uNGFnu4mDk9bepTVJ8zGuW+BJdzdiqrTH/mrEqYiYyV8HRH53KBxzeIduorscAAAAPJmmDqrw7KN4FFsxezzhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNMh6XxnYJIvhW55LpLu9/+X832pcvmE4x3tqwccf//GMQUCAAAAAAAAAEfio/yD+zOP4lFsxWy+O2kl2Wf+r2ZbL2Y/n4l3YjOWYyMuxFbUoxnN2IiFiNJsX4flrXqzubGwu+VvIm3Zbrfv5i0XI6K6q+XiccwaAAAAAAAAAJ5aP4ulmD3pIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoF8SMdVZZcuL3XI1CsWImImIclqvFfHnbvmz7C8nHQAAAAAcvUq+nk3+2ym0k+w9/0vZ+/6ZeCfWoxkr0YxGLMf17FlA511/4R+tWuPBdm0tXXZ3/J1/TxRH1mNETMW7+4w8n9U43WuxFN+PH8b5mIursREr8eOoRzOWYy4q6SSiHklUK52nF9VunHvHe2Vg6+pwbGeGtl/JIqnEjVjJYrsQ18rReWySzSEd85W+0f5Yjhga8d00O8m3c2Pm6Hrf7+vX+XOZXPvZMfs4GtVs5qVeRubT3OfZeG507ic8T4ZHWohC7xnUizujpJvDI3Vz/qNJcn4qX6e5/sVgzg/bhI/ShjOxGIX87It4aTDnt7507/nBxl/551+v3iysr968sXn+CKd0pErdwnAman2ZeHn02ZdnopFmojV+JkrDO2YeYx6HqJxnI7sVjXm3/F5Wqserfafg23E9luNSzMdCXI75+GYsRm3gDDs9kNdibW0wJ9m1Vth9f6uMCP7sl/sq/fKAyscrzctzfXntv9NVs2P5niu/ivm+LD0/+uyb+K9AOv4X8nI6xnu9vzhPgoFMZPfm9z7XPfbC6Ez8tp3+3Gysr27crN8ac7xz+Tq9bN8fvDf/7hCm8xjS8yW94xazrSwnle75kh57oRftYL7K+ScunXaFXcdO945VYzZW4gf7Xqnl/DXc7p46x17uP/avnTtnOX990z028Con3o5G9ipkyNzxZBWAsZ167VS58rDy98r9ys8rNytvzHx3+vL0F8tR+lvxT1N/KPy+8K3ktbgfP43Zk44UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeBpu376zWG43ljV4hZob3PG6hvO9YowtROLDO9jPjdRjViNFjJXmhfLhzv31ntRiH3OFRFyoxduXud3WN1/NHETGiTvmxg08mPscmLqSzPZQOS/2pa09N0Lw4OuHF2JzZ7zc4vXMVRHW13vhPe6BOJfoumT1M+F2FwBPtYnPt1sXN23e+trJWf2v5reX1xcuXLl+qfWPh6xdvrDSW5zs/TzpK4Chs3r4zddIxAAAAAAAAAAAAAJPJ//V/81P/Z4biAXXKG5t7j3zmuKcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfEYtvRmlViSxMH9hPt1+sF1rpEu3vFOzGBGFiEh+EpF8EnElOktU+7pL9hvn9Ycff3Du3oe1nb6K3fqFUe3G08qXmIuIqXx9sOk9utnd37W+/lqfKrykN8M0YWe7iYOT9r8AAAD//4739gY=") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRESDEC=0x0, @ANYRES8], 0xdf, 0x0, &(0x7f0000000000)) 117.537804ms ago: executing program 2 (id=12384): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x62, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 277.8µs ago: executing program 5 (id=12385): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f7221d7743d303030303030303030302c70726976706f7274"]) 0s ago: executing program 1 (id=12386): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0x48, 0x4) kernel console output (not intermixed with test programs): ] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10173'. [ 599.424173][T27187] IPv6: sit3: Disabled Multicast RS [ 599.689206][T27199] xt_cluster: you have exceeded the maximum number of cluster nodes (127 > 32) [ 599.971067][T27182] loop3: detected capacity change from 0 to 32768 [ 600.018207][T27211] loop1: detected capacity change from 0 to 1024 [ 600.263849][ T5624] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 600.563285][ T5624] usb 3-1: Using ep0 maxpacket: 32 [ 600.598302][T27211] EXT4-fs (loop1): Ignoring removed bh option [ 600.610280][T27177] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 600.625741][T27211] EXT4-fs (loop1): inline encryption not supported [ 600.646328][T27211] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 600.656694][T27177] ntfs3: loop4: ntfs_evict_inode r=6 failed, -22. [ 600.671352][T27182] XFS (loop3): Mounting V5 Filesystem [ 600.699169][T27177] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 600.710667][T27211] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.10186: lblock 2 mapped to illegal pblock 2 (length 1) [ 600.725388][T27211] __quota_error: 5 callbacks suppressed [ 600.725402][T27211] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 600.744631][T27225] netlink: 'syz.5.10188': attribute type 1 has an invalid length. [ 600.748252][T27211] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.10186: lblock 0 mapped to illegal pblock 48 (length 1) [ 600.753645][ T5624] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.770118][T27211] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 600.789816][T27211] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.10186: Failed to acquire dquot type 0 [ 600.802327][T27211] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 600.812074][T27211] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.10186: mark_inode_dirty error [ 600.824673][T27225] netlink: 'syz.5.10188': attribute type 2 has an invalid length. [ 600.832629][T27211] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 600.835305][ T5624] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.856362][T27211] EXT4-fs (loop1): 1 orphan inode deleted [ 600.862126][T27211] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 600.985558][T27211] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm syz.1.10186: lblock 1 mapped to illegal pblock 1 (length 1) [ 600.999459][T27182] XFS (loop3): Ending clean mount [ 601.064601][T27211] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 601.091886][ T4193] XFS (loop3): Unmounting Filesystem [ 601.103373][ T3065] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 601.134625][ T5624] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 601.154257][ T5624] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 601.162075][ T3065] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 601.170156][ T5624] usb 3-1: Product: syz [ 601.196764][ T3065] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 601.225136][ T5624] usb 3-1: Manufacturer: syz [ 601.278185][ T4185] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 601.299275][ T4185] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 601.312470][ T5624] hub 3-1:4.0: USB hub found [ 601.326913][ T4185] EXT4-fs error (device loop1): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 601.578923][ T5624] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 601.621548][T27255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10204'. [ 602.071579][ T5624] usb 3-1: USB disconnect, device number 75 [ 602.356209][T27309] tmpfs: Bad value for 'mpol' [ 602.391372][ T5624] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 602.435245][ T4228] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 602.474010][T27317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10233'. [ 602.492641][T27319] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 602.678289][T27327] loop4: detected capacity change from 0 to 8192 [ 602.704607][ T4225] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 602.726377][T27327] REISERFS warning (device loop4): super-6514 reiserfs_parse_options: unknown quota format specified. [ 602.829847][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 602.854407][ T5624] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.865259][ T4228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59382, setting to 1024 [ 602.872299][ T5624] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 602.879750][ T4228] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 602.897353][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.948641][ T4228] usb 2-1: config 0 descriptor?? [ 602.956081][T27346] SET target dimension over the limit! [ 602.968790][T27291] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 602.993688][ T4228] gspca_main: spca561-2.14.0 probing abcd:cdee [ 603.081178][T27356] netlink: 'syz.4.10253': attribute type 12 has an invalid length. [ 603.093356][T27356] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.10253'. [ 603.107732][ T4225] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 603.121678][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.144759][ T4225] usb 4-1: config 0 descriptor?? [ 603.167437][ T5624] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 603.167517][T27360] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 603.182072][ T5624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.201559][ T5624] usb 6-1: Product: syz [ 603.205831][ T4225] gspca_main: spca508-2.14.0 probing 8086:0110 [ 603.212455][ T5624] usb 6-1: Manufacturer: syz [ 603.217131][ T5624] usb 6-1: SerialNumber: syz [ 603.268792][ T5624] usb 6-1: bad CDC descriptors [ 603.290169][ T4228] spca561: probe of 2-1:0.0 failed with error -22 [ 603.308239][ T4228] usb 2-1: MIDIStreaming interface descriptor not found [ 603.372194][T27368] Timeout policy `syz1' can only be used by L3 protocol number 25944 [ 603.395504][ T4228] usb 2-1: USB disconnect, device number 80 [ 603.508379][ T4794] usb 6-1: USB disconnect, device number 12 [ 603.677428][ T4225] gspca_spca508: reg_read err -71 [ 603.692134][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.731269][ T4225] gspca_spca508: reg_read err -71 [ 603.759808][ T4225] gspca_spca508: reg_read err -71 [ 603.791830][ T4225] gspca_spca508: reg_read err -71 [ 603.813125][ T4225] gspca_spca508: reg write: error -71 [ 603.819938][ T4225] spca508: probe of 4-1:0.0 failed with error -71 [ 603.861378][ T4225] usb 4-1: USB disconnect, device number 90 [ 603.900717][T27402] netlink: 'syz.1.10274': attribute type 3 has an invalid length. [ 603.957226][T27406] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 603.969726][T27406] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 604.017524][T27410] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10278'. [ 604.171018][T27424] loop5: detected capacity change from 0 to 24 [ 604.188157][T27424] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 604.259527][T27424] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 604.260671][T27428] netlink: 88 bytes leftover after parsing attributes in process `syz.3.10288'. [ 604.663844][T27459] openvswitch: netlink: Message has 4 unknown bytes. [ 604.752537][T27464] loop3: detected capacity change from 0 to 256 [ 604.769123][ T1106] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 604.865629][T27464] FAT-fs (loop3): Directory bread(block 64) failed [ 604.893173][T27464] FAT-fs (loop3): Directory bread(block 65) failed [ 604.922370][T27464] FAT-fs (loop3): Directory bread(block 66) failed [ 604.960551][T27464] FAT-fs (loop3): Directory bread(block 67) failed [ 604.967151][T27464] FAT-fs (loop3): Directory bread(block 68) failed [ 604.977736][T27464] FAT-fs (loop3): Directory bread(block 69) failed [ 604.981549][T27478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10313'. [ 604.988762][T27464] FAT-fs (loop3): Directory bread(block 70) failed [ 605.019683][T27464] FAT-fs (loop3): Directory bread(block 71) failed [ 605.035153][T27482] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10315'. [ 605.046616][T27464] FAT-fs (loop3): Directory bread(block 72) failed [ 605.057935][T27464] FAT-fs (loop3): Directory bread(block 73) failed [ 605.150917][T27488] loop4: detected capacity change from 0 to 16 [ 605.203012][ T1106] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 605.218705][ T1106] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 605.229007][ T1106] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 605.255203][T27488] erofs: (device loop4): mounted with root inode @ nid 36. [ 605.261163][ T1106] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 605.283287][T27488] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 605.327779][T27488] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 605.357560][T27503] loop3: detected capacity change from 0 to 22 [ 605.388508][T27503] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 605.420703][T27503] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 605.491698][ T1106] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 605.506115][T27507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10328'. [ 605.521122][ T1106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.555943][ T1106] usb 3-1: Product: syz [ 605.560117][ T1106] usb 3-1: Manufacturer: syz [ 605.586986][ T1106] usb 3-1: SerialNumber: syz [ 605.605098][ T1106] usb 3-1: config 0 descriptor?? [ 605.655248][ T4225] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 605.862631][T27530] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10338'. [ 605.874420][T27530] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10338'. [ 605.885514][T27530] tc_dump_action: action bad kind [ 605.922517][ T1106] adutux 3-1:0.0: Could not retrieve serial number [ 605.929184][ T1106] adutux: probe of 3-1:0.0 failed with error -5 [ 605.962616][T27534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10341'. [ 606.056125][ T4225] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 606.065366][ T4225] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.080777][ T4225] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 606.104697][ T4225] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.125671][ T4225] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.155695][ T4228] usb 3-1: USB disconnect, device number 76 [ 606.272103][ T4225] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 606.281202][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 606.308099][ T4225] usb 2-1: Product: syz [ 606.314879][ T4225] usb 2-1: Manufacturer: syz [ 606.369395][ T4225] cdc_wdm 2-1:1.0: skipping garbage [ 606.374635][ T4225] cdc_wdm 2-1:1.0: skipping garbage [ 606.411027][T27558] loop4: detected capacity change from 0 to 4096 [ 606.411033][ T4225] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 606.411059][ T4225] cdc_wdm 2-1:1.0: Unknown control protocol [ 606.440482][T27558] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 606.510345][T27558] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 606.604448][T27502] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 606.617989][ T4225] usb 2-1: USB disconnect, device number 81 [ 606.646031][T27566] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 606.726318][T27568] loop4: detected capacity change from 0 to 512 [ 606.844688][T27568] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 606.925732][T27568] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 606.959825][T27586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10365'. [ 607.159534][T27591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10368'. [ 607.289446][T27599] device ipip0 entered promiscuous mode [ 607.470177][T27613] netlink: 'syz.2.10379': attribute type 8 has an invalid length. [ 607.490797][T27613] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.10379'. [ 608.100203][T27643] loop3: detected capacity change from 0 to 4096 [ 608.147670][T27643] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 608.202519][T27643] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 608.329859][T18856] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 608.332063][ T4193] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 608.332141][ T4193] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 608.332179][ T4193] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 608.349497][T18856] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 608.350002][ T4193] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 609.168539][T27704] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 609.294306][T27671] loop5: detected capacity change from 0 to 32768 [ 609.357288][T27713] device bond4 entered promiscuous mode [ 609.357640][T27713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 609.495812][T27699] loop4: detected capacity change from 0 to 32768 [ 609.600535][T27699] (syz.4.10422,27699,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 609.600764][T27699] (syz.4.10422,27699,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 609.614267][T27699] JBD2: Ignoring recovery information on journal [ 609.699045][T27699] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 609.702266][T27699] (syz.4.10422,27699,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 609.729197][T27699] (syz.4.10422,27699,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 609.782665][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 609.896075][ T4225] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 609.959960][T27745] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 610.137522][T27754] loop5: detected capacity change from 0 to 164 [ 610.204656][T27754] overlayfs: upper fs is r/o, try multi-lower layers mount [ 610.281066][ T4225] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 610.368458][T27761] loop5: detected capacity change from 0 to 256 [ 610.403426][T27763] openvswitch: netlink: Message has 8 unknown bytes. [ 610.403450][T27763] openvswitch: netlink: Actions may not be safe on all matching packets [ 610.452046][ T4225] usb 2-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 610.452076][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.452131][ T4225] usb 2-1: Product: syz [ 610.452166][ T4225] usb 2-1: Manufacturer: syz [ 610.452181][ T4225] usb 2-1: SerialNumber: syz [ 610.708576][T27755] loop4: detected capacity change from 0 to 32768 [ 610.730794][T27778] __nla_validate_parse: 1 callbacks suppressed [ 610.730808][T27778] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10459'. [ 610.771502][T27755] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.10448 (27755) [ 610.776834][T27755] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 610.776873][T27755] BTRFS info (device loop4): force zlib compression, level 3 [ 610.776895][T27755] BTRFS info (device loop4): force clearing of disk cache [ 610.776914][T27755] BTRFS info (device loop4): setting nodatasum [ 610.776933][T27755] BTRFS info (device loop4): allowing degraded mounts [ 610.776952][T27755] BTRFS info (device loop4): enabling disk space caching [ 610.776968][T27755] BTRFS info (device loop4): disk space caching is enabled [ 610.776984][T27755] BTRFS info (device loop4): has skinny extents [ 610.839099][ T4225] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 610.910351][ T4225] usb 2-1: USB disconnect, device number 82 [ 611.054597][T27755] BTRFS info (device loop4): clearing free space tree [ 611.106413][T27755] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 611.106441][T27755] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 611.165355][ T4406] udevd[4406]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.721300][T27838] loop4: detected capacity change from 0 to 8 [ 611.894296][T27850] loop5: detected capacity change from 0 to 16 [ 611.991551][T27850] erofs: (device loop5): mounted with root inode @ nid 36. [ 612.397648][ T5624] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 612.431307][T27889] netlink: 'syz.2.10505': attribute type 15 has an invalid length. [ 612.641008][T27873] loop4: detected capacity change from 0 to 32768 [ 612.675627][ T4226] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 612.701536][T27873] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.10497 (27873) [ 612.729213][ T5624] usb 2-1: Using ep0 maxpacket: 8 [ 612.755242][T27873] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 612.764161][T27909] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 134217730 out of range (51000..2150000) [ 612.772698][T27873] BTRFS info (device loop4): enabling ssd optimizations [ 612.781338][T27873] BTRFS info (device loop4): not using ssd optimizations [ 612.789092][T27873] BTRFS info (device loop4): turning off barriers [ 612.795776][T27873] BTRFS info (device loop4): use no compression [ 612.820374][T27873] BTRFS info (device loop4): using free space tree [ 612.836096][T27873] BTRFS info (device loop4): has skinny extents [ 612.889609][ T5624] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.910596][ T5624] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 612.943005][ T4226] usb 4-1: Using ep0 maxpacket: 8 [ 612.944961][ T5624] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 613.010487][ T5624] usb 2-1: config 0 interface 0 has no altsetting 0 [ 613.075172][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 613.116421][ T4226] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 613.231706][ T5624] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 613.240781][ T5624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.263907][ T5624] usb 2-1: Product: syz [ 613.268116][ T5624] usb 2-1: Manufacturer: syz [ 613.283530][ T5624] usb 2-1: SerialNumber: syz [ 613.314569][ T5624] usb 2-1: config 0 descriptor?? [ 613.332413][ T4226] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 613.351606][ T5624] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 613.359981][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.366424][T27953] loop5: detected capacity change from 0 to 256 [ 613.388363][ T4226] usb 4-1: Product: syz [ 613.397415][ T4226] usb 4-1: Manufacturer: syz [ 613.416554][T27956] nfs: Deprecated parameter 'nointr' [ 613.424017][ T4226] usb 4-1: SerialNumber: syz [ 613.444969][ T4226] usb 4-1: config 0 descriptor?? [ 613.483784][T27953] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 613.585637][ T5624] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 613.602678][ T5624] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 613.620871][ T5624] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 613.690228][T27964] loop2: detected capacity change from 0 to 764 [ 613.852788][ T5624] usb 2-1: USB disconnect, device number 83 [ 613.978615][ T5036] usb 4-1: USB disconnect, device number 91 [ 614.215058][ T4801] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 614.225864][ T1106] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 614.493215][ T1106] usb 6-1: Using ep0 maxpacket: 32 [ 614.517567][T27990] loop1: detected capacity change from 0 to 4096 [ 614.617391][T27994] tmpfs: Bad value for 'mpol' [ 614.632297][ T1106] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 614.641228][ T1106] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.642815][ T4801] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 614.683630][ T1106] usb 6-1: config 0 has no interface number 0 [ 614.692938][ T4801] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 158 [ 614.698171][ T1106] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 614.744638][ T1106] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 614.758004][ T1106] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 614.784392][ T1106] usb 6-1: config 0 interface 85 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 614.798208][T27999] loop3: detected capacity change from 0 to 4096 [ 614.805041][ T1106] usb 6-1: config 0 interface 85 has no altsetting 0 [ 614.824487][ T4801] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 614.841968][ T4801] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 614.870737][ T4801] usb 3-1: Manufacturer: syz [ 614.898032][ T4801] usb 3-1: config 0 descriptor?? [ 614.905131][T28003] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 614.953036][T27968] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 614.975992][ T4801] igorplugusb 3-1:0.0: endpoint incorrect [ 615.006622][ T1106] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 615.015770][ T1106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.030739][ T1106] usb 6-1: Product: syz [ 615.036909][ T1106] usb 6-1: Manufacturer: syz [ 615.062263][ T1106] usb 6-1: SerialNumber: syz [ 615.068573][ T1106] usb 6-1: config 0 descriptor?? [ 615.198923][ T5036] usb 3-1: USB disconnect, device number 77 [ 615.348383][ T1106] appletouch 6-1:0.85: Failed to read mode from device. [ 615.363741][ T1106] appletouch: probe of 6-1:0.85 failed with error -5 [ 615.378242][T28023] ieee802154 phy1 wpan1: encryption failed: -22 [ 615.428222][ T1106] usb 6-1: USB disconnect, device number 13 [ 615.526447][T28030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10565'. [ 615.752365][T28043] loop1: detected capacity change from 0 to 256 [ 615.854685][T28047] loop2: detected capacity change from 0 to 4096 [ 615.912298][T28055] netlink: 'syz.4.10577': attribute type 1 has an invalid length. [ 615.923090][T28055] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10577'. [ 615.947141][T28056] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 616.061289][T28047] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 616.087124][T28066] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 616.115991][T28070] netlink: 'syz.5.10584': attribute type 1 has an invalid length. [ 616.142639][T28047] Remounting filesystem read-only [ 616.148324][T28070] netlink: 244 bytes leftover after parsing attributes in process `syz.5.10584'. [ 616.214270][ T4801] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 616.289206][T28072] loop5: detected capacity change from 0 to 4096 [ 616.320175][T28080] loop4: detected capacity change from 0 to 128 [ 616.390808][T28080] hpfs: hpfs_map_4sectors(): unaligned read [ 616.402361][T28080] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 616.416641][T28080] hpfs: hpfs_map_sector(): read error [ 616.588620][ T4292] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 616.631462][ T4801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 616.668125][ T4801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59382, setting to 1024 [ 616.708353][ T4801] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 616.749161][ T4801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.781426][ T4801] usb 4-1: config 0 descriptor?? [ 616.809941][T28103] loop5: detected capacity change from 0 to 1024 [ 616.821043][T28053] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 616.847067][ T4801] gspca_main: spca561-2.14.0 probing abcd:cdee [ 616.932012][ T1438] hfsplus: b-tree write err: -5, ino 25 [ 616.937996][ T1438] hfsplus: b-tree write err: -5, ino 4 [ 616.951599][ T1438] hfsplus: b-tree write err: -5, ino 2 [ 617.033397][ T4292] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 617.057317][ T4292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.074577][ T4292] usb 2-1: config 0 descriptor?? [ 617.156749][ T4801] spca561: probe of 4-1:0.0 failed with error -22 [ 617.168426][ T4292] gspca_main: spca508-2.14.0 probing 8086:0110 [ 617.175394][ T4801] usb 4-1: MIDIStreaming interface descriptor not found [ 617.178030][T28127] loop4: detected capacity change from 0 to 64 [ 617.245035][ T4801] usb 4-1: USB disconnect, device number 92 [ 617.403205][ T5036] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 617.618040][ T4292] gspca_spca508: reg_read err -71 [ 617.632875][T28129] loop2: detected capacity change from 0 to 32768 [ 617.633549][T28146] loop4: detected capacity change from 0 to 24 [ 617.645926][ T4292] gspca_spca508: reg_read err -71 [ 617.657957][ T5036] usb 6-1: Using ep0 maxpacket: 32 [ 617.666858][T28129] XFS (loop2): Mounting V5 Filesystem [ 617.672676][ T4292] gspca_spca508: reg_read err -71 [ 617.691752][ T4292] gspca_spca508: reg_read err -71 [ 617.701904][T28146] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 617.710953][ T4292] gspca_spca508: reg write: error -71 [ 617.716484][ T4292] spca508: probe of 2-1:0.0 failed with error -71 [ 617.747866][ T4292] usb 2-1: USB disconnect, device number 84 [ 617.765670][T28146] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 617.787019][ T5036] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 617.803689][ T5036] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 617.829642][ T5036] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 617.838605][ T5036] usb 6-1: config 1 has no interface number 0 [ 617.888815][ T5036] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 617.932566][ T5036] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 617.945477][ T5036] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 617.945566][T28169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10628'. [ 617.962645][ T5036] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 617.969930][T28169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10628'. [ 617.985788][ T5036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.015211][T28129] XFS (loop2): Ending clean mount [ 618.055683][ T5036] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 618.076293][ T4189] XFS (loop2): Unmounting Filesystem [ 618.259878][ T4790] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 618.299665][ T5036] snd_usb_pod 6-1:1.1: cannot start listening: -90 [ 618.317492][ T5036] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 618.346211][ T5036] snd_usb_pod: probe of 6-1:1.1 failed with error -90 [ 618.559793][ T4226] usb 6-1: USB disconnect, device number 14 [ 618.576938][ T4790] usb 5-1: Using ep0 maxpacket: 16 [ 618.697604][T28203] syz.1.10645: vmalloc error: size 9007199254740992, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 618.719132][T28203] CPU: 0 PID: 28203 Comm: syz.1.10645 Not tainted syzkaller #0 [ 618.726694][T28203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.736754][T28203] Call Trace: [ 618.740041][T28203] [ 618.742978][T28203] dump_stack_lvl+0x188/0x250 [ 618.747668][T28203] ? rcu_lock_release+0x5/0x20 [ 618.752444][T28203] ? show_regs_print_info+0x20/0x20 [ 618.757653][T28203] ? load_image+0x400/0x400 [ 618.762174][T28203] warn_alloc+0x243/0x320 [ 618.766516][T28203] ? rcu_lock_release+0x20/0x20 [ 618.771378][T28203] ? zone_watermark_ok_safe+0x240/0x240 [ 618.776938][T28203] ? dvb_demux_do_ioctl+0x313/0x530 [ 618.782149][T28203] ? kfree+0xef/0x2a0 [ 618.786147][T28203] __vmalloc_node_range+0x2b1/0x8b0 [ 618.791360][T28203] ? mutex_lock_io_nested+0x60/0x60 [ 618.796573][T28203] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 618.802393][T28203] vmalloc+0x75/0x80 [ 618.806298][T28203] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 618.812114][T28203] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 618.817764][T28203] dvb_demux_do_ioctl+0x450/0x530 [ 618.822799][T28203] dvb_usercopy+0x191/0x2b0 [ 618.827318][T28203] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 618.832875][T28203] ? dvb_generic_ioctl+0xb0/0xb0 [ 618.837838][T28203] ? dvb_demux_poll+0x210/0x210 [ 618.838828][T28191] loop3: detected capacity change from 0 to 32768 [ 618.842693][T28203] dvb_demux_ioctl+0x25/0x30 [ 618.842769][T28203] __se_sys_ioctl+0xfa/0x170 [ 618.842792][T28203] do_syscall_64+0x4c/0xa0 [ 618.862751][T28203] ? clear_bhb_loop+0x30/0x80 [ 618.867440][T28203] ? clear_bhb_loop+0x30/0x80 [ 618.872132][T28203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 618.878026][T28203] RIP: 0033:0x7fdeaadce799 [ 618.882446][T28203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.902053][T28203] RSP: 002b:00007fdea9028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.910464][T28203] RAX: ffffffffffffffda RBX: 00007fdeab047fa0 RCX: 00007fdeaadce799 [ 618.918432][T28203] RDX: 0020000000000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 618.926392][T28203] RBP: 00007fdeaae64c99 R08: 0000000000000000 R09: 0000000000000000 [ 618.934353][T28203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.942312][T28203] R13: 00007fdeab048038 R14: 00007fdeab047fa0 R15: 00007fffc77142d8 [ 618.950288][T28203] [ 618.954453][T28203] Mem-Info: [ 618.957578][T28203] active_anon:96 inactive_anon:11973 isolated_anon:0 [ 618.957578][T28203] active_file:14601 inactive_file:4155 isolated_file:0 [ 618.957578][T28203] unevictable:768 dirty:218 writeback:0 [ 618.957578][T28203] slab_reclaimable:17027 slab_unreclaimable:104868 [ 618.957578][T28203] mapped:30933 shmem:5733 pagetables:825 bounce:0 [ 618.957578][T28203] kernel_misc_reclaimable:0 [ 618.957578][T28203] free:1388191 free_pcp:9992 free_cma:0 [ 618.957904][ T4790] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 618.999213][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.012500][T28191] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 619.018263][T28203] Node 0 active_anon:300kB inactive_anon:47356kB active_file:58384kB inactive_file:16424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123676kB dirty:960kB writeback:0kB shmem:20804kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12108kB pagetables:3312kB all_unreclaimable? no [ 619.041640][T28191] BTRFS info (device loop3): using free space tree [ 619.056219][T28203] Node 1 active_anon:0kB inactive_anon:540kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 619.072810][T28191] BTRFS info (device loop3): has skinny extents [ 619.090856][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.094117][T28203] Node 0 DMA free:15340kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 619.143644][T28203] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 619.149698][T28203] Node 0 DMA32 free:1623976kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:400kB inactive_anon:47256kB active_file:58384kB inactive_file:16424kB unevictable:1536kB writepending:960kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:30212kB local_pcp:19788kB free_cma:0kB [ 619.160943][T28209] device gretap1 entered promiscuous mode [ 619.203836][T28203] lowmem_reserve[]: 0 0 0 0 0 [ 619.209139][T28203] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 619.234730][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.241584][T28203] lowmem_reserve[]: 0 0 0 0 0 [ 619.246650][T28203] Node 1 Normal free:3913192kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:540kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:9600kB local_pcp:2288kB free_cma:0kB [ 619.275297][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.282250][T28203] lowmem_reserve[]: 0 0 0 0 0 [ 619.288197][T28203] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15340kB [ 619.307163][ T4790] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 619.316772][T28203] Node 0 DMA32: 3*4kB (UME) 536*8kB (UME) 852*16kB (ME) 1537*32kB (UME) 470*64kB (UME) 146*128kB (UME) 110*256kB (UME) 98*512kB (UME) 58*1024kB (ME) 39*2048kB (UM) 315*4096kB (UM) = 1623724kB [ 619.361999][T28203] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 619.374232][T28203] Node 1 Normal: 142*4kB (UE) 4*8kB (UE) 29*16kB (UE) 148*32kB (UME) 59*64kB (UME) 23*128kB (UME) 9*256kB (U) 4*512kB (UE) 1*1024kB (E) 2*2048kB (UE) 950*4096kB (M) = 3913192kB [ 619.385159][ T4790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.392136][T28203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 619.409610][T28203] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 619.419497][T28203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 619.430965][T28203] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 619.452735][T28203] 24476 total pagecache pages [ 619.457808][T28203] 59 pages in swap cache [ 619.461809][ T4790] usb 5-1: Product: syz [ 619.466307][T28203] Swap cache stats: add 218, delete 159, find 16/30 [ 619.466326][T28203] Free swap = 124216kB [ 619.466335][T28203] Total swap = 124996kB [ 619.466345][T28203] 2097051 pages RAM [ 619.466353][T28203] 0 pages HighMem/MovableOnly [ 619.466361][T28203] 411490 pages reserved [ 619.466369][T28203] 0 pages cma reserved [ 619.496352][T28191] BTRFS info (device loop3): enabling ssd optimizations [ 619.498512][ T4790] usb 5-1: Manufacturer: syz [ 619.509715][ T4790] usb 5-1: SerialNumber: syz [ 619.831057][ T4790] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 619.899410][ T4292] usb 5-1: USB disconnect, device number 79 [ 619.915103][T28250] IPv6: sit2: Disabled Multicast RS [ 619.982283][ T4407] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4407) [ 619.987062][T28254] netlink: 'syz.1.10660': attribute type 1 has an invalid length. [ 620.020924][T28256] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10651'. [ 620.029975][T28256] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10651'. [ 620.043482][T28256] tc_dump_action: action bad kind [ 620.116363][ T4790] usb 3-1: Using ep0 maxpacket: 32 [ 620.244897][ T4790] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 620.285120][ T4790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 620.306091][ T4790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 620.354872][T28277] xt_connbytes: Forcing CT accounting to be enabled [ 620.413357][T28279] loop5: detected capacity change from 0 to 512 [ 620.518715][T28279] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,noload,data_err=ignore,debug_want_extra_isize=0x0000000000000010,,errors=continue. Quota mode: none. [ 620.576150][ T4790] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 620.585202][ T4790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.593507][ T4790] usb 3-1: Product: syz [ 620.598291][ T4790] usb 3-1: Manufacturer: syz [ 620.602897][ T4790] usb 3-1: SerialNumber: syz [ 620.612370][ T4790] usb 3-1: config 0 descriptor?? [ 620.737617][T28300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10681'. [ 620.894964][ T4790] usb 3-1: USB disconnect, device number 78 [ 620.928370][T28312] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 620.954064][T28317] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 621.189167][T28328] set_capacity_and_notify: 1 callbacks suppressed [ 621.189183][T28328] loop1: detected capacity change from 0 to 4096 [ 621.243263][ T4790] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 621.256075][T28337] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10700'. [ 621.331055][T28328] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 621.442357][T28353] loop3: detected capacity change from 0 to 512 [ 621.512347][T28353] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 621.560147][ T4292] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 621.594398][T28353] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 621.869714][ T4292] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 622.132707][T28394] netlink: 236 bytes leftover after parsing attributes in process `syz.4.10726'. [ 622.140519][T28395] nft_compat: unsupported protocol 5 [ 622.168853][ T21] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 622.231348][T28401] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 622.302782][T28367] loop2: detected capacity change from 0 to 32768 [ 622.422497][T28367] XFS (loop2): Mounting V5 Filesystem [ 622.437468][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 622.524970][T28367] XFS (loop2): Ending clean mount [ 622.564527][ T21] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 622.572912][ T21] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 622.589126][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 622.598533][T28434] netlink: 'syz.5.10742': attribute type 1 has an invalid length. [ 622.606385][T28434] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10742'. [ 622.621598][ T21] usb 2-1: config 1 has no interface number 0 [ 622.627796][ T21] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 622.638083][ T21] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 622.654791][ T21] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 622.707348][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.714359][ T4790] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 622.737774][ T4790] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 622.737954][ T4189] XFS (loop2): Unmounting Filesystem [ 622.791430][ T21] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 623.035607][ T21] snd_usb_pod 2-1:1.1: invalid control EP [ 623.046073][ T21] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 623.085118][ T21] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 623.117765][ T21] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 623.253604][ T21] usb 2-1: USB disconnect, device number 85 [ 623.275336][ T4790] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 623.304596][T28477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10744'. [ 623.395976][T28471] loop5: detected capacity change from 0 to 4096 [ 623.401207][T28482] netlink: 'syz.4.10757': attribute type 16 has an invalid length. [ 623.413105][T28480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge7: link becomes ready [ 623.435916][T28482] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.10757'. [ 623.471183][T28487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10762'. [ 623.490031][T28471] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 623.588276][T28492] loop2: detected capacity change from 0 to 164 [ 623.604408][T28493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10764'. [ 623.632996][T28493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10764'. [ 623.658694][T28492] overlayfs: upper fs is r/o, try multi-lower layers mount [ 623.785493][T28503] netlink: 'syz.4.10771': attribute type 1 has an invalid length. [ 623.825971][T28503] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10771'. [ 623.882960][T28503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10771'. [ 623.942679][T28513] xt_TCPMSS: Only works on TCP SYN packets [ 624.159217][T28530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10785'. [ 624.803434][T28567] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 625.402483][T28598] netlink: 'syz.5.10819': attribute type 1 has an invalid length. [ 625.443623][T28600] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 625.472699][T28600] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 625.712214][T28631] loop3: detected capacity change from 0 to 256 [ 625.779206][T28634] overlayfs: missing 'lowerdir' [ 626.077048][T28628] loop2: detected capacity change from 0 to 32768 [ 626.274991][T28651] loop4: detected capacity change from 0 to 256 [ 626.714066][T28628] JBD2: Ignoring recovery information on journal [ 626.815914][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 626.881088][T28669] netlink: 'syz.1.10851': attribute type 1 has an invalid length. [ 626.884057][T28628] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 626.976908][T28628] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 626.977034][T28628] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 627.033357][T28628] OCFS2: File system is now read-only. [ 627.053363][T28628] (syz.2.10834,28628,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 627.062316][T28628] (syz.2.10834,28628,0):ocfs2_mknod:334 ERROR: status = -117 [ 627.071661][T28628] (syz.2.10834,28628,0):ocfs2_mknod:502 ERROR: status = -117 [ 627.085790][T28628] (syz.2.10834,28628,0):ocfs2_mkdir:659 ERROR: status = -117 [ 627.161507][ T4790] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 627.191145][T28680] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 627.218459][ T4189] ocfs2: Unmounting device (7,2) on (node local) [ 627.236835][ T5037] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 627.329452][T28684] device bond5 entered promiscuous mode [ 627.336059][T28684] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.492880][ T5037] usb 6-1: Using ep0 maxpacket: 32 [ 627.621275][ T5037] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 627.645320][ T5037] usb 6-1: config 0 has no interface number 0 [ 627.651700][T28701] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 627.662282][ T5037] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 627.685197][T28701] exFAT-fs (nullb0): invalid boot record signature [ 627.699349][T28701] exFAT-fs (nullb0): failed to read boot sector [ 627.705872][T28701] exFAT-fs (nullb0): failed to recognize exfat type [ 627.712846][ T5037] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 627.806236][ T4790] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 627.824125][ T4790] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 627.834411][ T4790] usb 5-1: Product: syz [ 627.843809][ T4790] usb 5-1: Manufacturer: syz [ 627.865141][ T4790] usb 5-1: SerialNumber: syz [ 627.882984][T28716] loop1: detected capacity change from 0 to 16 [ 627.908450][T28718] loop2: detected capacity change from 0 to 1024 [ 627.920636][ T5037] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 627.929761][ T5037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.936394][ T4790] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 627.938229][ T5037] usb 6-1: Product: syz [ 627.950537][ T5037] usb 6-1: Manufacturer: syz [ 627.973930][T28716] erofs: (device loop1): mounted with root inode @ nid 36. [ 627.982612][ T5037] usb 6-1: SerialNumber: syz [ 628.005008][ T5037] usb 6-1: config 0 descriptor?? [ 628.046533][ T1438] hfsplus: b-tree write err: -5, ino 25 [ 628.052807][ T1438] hfsplus: b-tree write err: -5, ino 4 [ 628.058355][ T1438] hfsplus: b-tree write err: -5, ino 2 [ 628.099036][ T5037] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 628.119264][T28727] IPVS: Error joining to the multicast group [ 628.139892][T28729] __nla_validate_parse: 7 callbacks suppressed [ 628.139905][T28729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10880'. [ 628.173866][ T4790] vp7045: USB control message 'out' went wrong. [ 628.182712][ T4790] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 628.197854][ T4790] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 628.213022][ T4790] usb 5-1: USB disconnect, device number 80 [ 628.305373][ T5037] usb 6-1: qt2_setup_urbs - submit read urb failed -90 [ 628.323262][ T5037] quatech2: probe of 6-1:0.51 failed with error -90 [ 628.527103][ T5037] usb 6-1: USB disconnect, device number 15 [ 628.585316][T28757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10896'. [ 628.815518][T28775] netlink: 'syz.2.10905': attribute type 1 has an invalid length. [ 628.856041][T28775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10905'. [ 628.856407][T28780] loop3: detected capacity change from 0 to 256 [ 629.371947][T28813] netlink: 'syz.4.10924': attribute type 21 has an invalid length. [ 629.554323][T28824] netlink: 'syz.3.10929': attribute type 1 has an invalid length. [ 629.790778][T28803] loop2: detected capacity change from 0 to 32768 [ 629.842944][T28803] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.10918 (28803) [ 629.887938][T28803] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 629.903161][T28803] BTRFS info (device loop2): force zlib compression, level 3 [ 629.918968][T28803] BTRFS info (device loop2): force clearing of disk cache [ 629.942640][T28848] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 629.957050][T28803] BTRFS info (device loop2): setting nodatasum [ 629.968528][T28803] BTRFS info (device loop2): allowing degraded mounts [ 629.986348][T28803] BTRFS info (device loop2): enabling disk space caching [ 630.007709][T28803] BTRFS info (device loop2): disk space caching is enabled [ 630.029208][T28803] BTRFS info (device loop2): has skinny extents [ 630.093666][T28860] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 134217730 out of range (51000..2150000) [ 630.243389][ T21] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 630.308704][T28803] BTRFS info (device loop2): clearing free space tree [ 630.319155][T28803] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 630.329329][T28803] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 630.683690][ T21] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 630.696180][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.709895][ T21] usb 4-1: config 0 descriptor?? [ 630.735376][T28913] loop4: detected capacity change from 0 to 64 [ 630.918137][T28919] SET target dimension over the limit! [ 630.991363][T28926] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.193536][ T21] ath6kl: Failed to submit usb control message: -71 [ 631.200176][ T21] ath6kl: unable to send the bmi data to the device: -71 [ 631.223384][ T21] ath6kl: Unable to send get target info: -71 [ 631.247325][ T21] ath6kl: Failed to init ath6kl core: -71 [ 631.303248][ T21] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 631.311595][T28944] loop1: detected capacity change from 0 to 64 [ 631.341527][ T21] usb 4-1: USB disconnect, device number 93 [ 631.529131][T28953] netlink: 88 bytes leftover after parsing attributes in process `syz.1.10981'. [ 631.676576][T28962] netlink: 340 bytes leftover after parsing attributes in process `syz.1.10984'. [ 631.683568][ T4174] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 631.696120][T28962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10984'. [ 632.069786][ T4174] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 632.078439][ T4174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.114839][ T4174] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 632.132566][ T4174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.144756][ T4174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.335834][ T4174] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 632.355820][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 632.372676][ T4174] usb 5-1: Product: syz [ 632.378593][ T4174] usb 5-1: Manufacturer: syz [ 632.432846][ T4174] cdc_wdm 5-1:1.0: skipping garbage [ 632.438096][ T4174] cdc_wdm 5-1:1.0: skipping garbage [ 632.488016][ T4174] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 632.493926][ T4174] cdc_wdm 5-1:1.0: Unknown control protocol [ 632.503437][T29012] IPv6: sit2: Disabled Multicast RS [ 632.527613][T29015] loop3: detected capacity change from 0 to 256 [ 632.536834][T29016] qrtr: Invalid version 0 [ 632.551744][T29015] exfat: Deprecated parameter 'utf8' [ 632.564479][T29015] exfat: Deprecated parameter 'namecase' [ 632.570294][T29015] exfat: Deprecated parameter 'namecase' [ 632.579833][T29015] exfat: Deprecated parameter 'utf8' [ 632.613058][T29015] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 632.677755][ T4174] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 632.698345][T28948] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 632.717737][ T5624] usb 5-1: USB disconnect, device number 81 [ 632.813005][T29030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11015'. [ 632.915209][T29036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11019'. [ 632.945002][ T4174] usb 2-1: Using ep0 maxpacket: 8 [ 633.011264][T29044] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11023'. [ 633.020707][T29044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11023'. [ 633.084149][ T4174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 633.104650][ T4174] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 633.298000][ T4174] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 633.317343][ T4174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.338420][ T4174] usb 2-1: Product: syz [ 633.356610][ T4174] usb 2-1: Manufacturer: syz [ 633.362995][T29072] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 633.379394][ T4174] usb 2-1: SerialNumber: syz [ 633.391831][T29073] loop5: detected capacity change from 0 to 1764 [ 633.403645][ T4174] usb 2-1: config 0 descriptor?? [ 633.408784][T29072] overlayfs: bad mount option "redirect_dir=nofollow\" [ 633.704037][T29094] __nla_validate_parse: 2 callbacks suppressed [ 633.704052][T29094] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11048'. [ 633.745990][T29098] loop4: detected capacity change from 0 to 128 [ 633.925258][ T4790] usb 2-1: USB disconnect, device number 86 [ 633.935611][T29113] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 634.039514][T29126] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 634.086233][T29129] loop3: detected capacity change from 0 to 128 [ 634.139967][T29133] loop2: detected capacity change from 0 to 512 [ 634.185829][T29138] loop4: detected capacity change from 0 to 16 [ 634.204660][T29140] device gretap1 entered promiscuous mode [ 634.247757][T29133] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nobarrier,stripe=0x0000000000000042,,errors=continue. Quota mode: writeback. [ 634.286604][T29138] erofs: (device loop4): mounted with root inode @ nid 36. [ 634.574072][T29155] loop4: detected capacity change from 0 to 1024 [ 634.594675][T29159] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 634.746105][T29155] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 634.794221][T29177] loop1: detected capacity change from 0 to 256 [ 634.820269][T29180] netlink: 'syz.3.11086': attribute type 21 has an invalid length. [ 634.830792][T29180] IPv6: NLM_F_CREATE should be specified when creating new route [ 634.858691][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 634.907283][T29155] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 623: comm syz.4.11076: Attempting to read directory block (623) that is past i_size (638464) [ 634.950913][T29177] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 635.445452][T29203] loop5: detected capacity change from 0 to 4096 [ 635.553467][T29203] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 635.592752][T29203] ntfs3: loop5: Failed to load $Extend. [ 635.665312][T29157] loop2: detected capacity change from 0 to 32768 [ 635.806683][T29157] XFS (loop2): Mounting V5 Filesystem [ 635.869574][T29237] netlink: 236 bytes leftover after parsing attributes in process `syz.5.11111'. [ 635.977101][T29157] XFS (loop2): Ending clean mount [ 635.982454][ T4174] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 636.051238][T29157] XFS (loop2): Quotacheck needed: Please wait. [ 636.197581][T29157] XFS (loop2): Quotacheck: Done. [ 636.234618][ T4189] XFS (loop2): Unmounting Filesystem [ 636.249549][ T4174] usb 4-1: Using ep0 maxpacket: 32 [ 636.370284][T29275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11129'. [ 636.401536][ T4174] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 636.433854][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 636.451854][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 636.654917][ T4174] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 636.685596][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.707196][ T4174] usb 4-1: Product: syz [ 636.718007][ T4174] usb 4-1: Manufacturer: syz [ 636.733794][ T4174] usb 4-1: SerialNumber: syz [ 636.752517][ T4174] usb 4-1: config 0 descriptor?? [ 636.772668][T29293] loop5: detected capacity change from 0 to 4096 [ 636.811193][T29300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.827181][T29293] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 636.847582][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.934905][T29293] ntfs: volume version 3.1. [ 636.967526][T29311] ip6t_REJECT: ECHOREPLY is not supported [ 637.026515][T29313] SET target dimension over the limit! [ 637.074367][ T4174] usb 4-1: USB disconnect, device number 94 [ 637.167730][ T4226] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 637.241541][T29327] netlink: 'syz.4.11153': attribute type 4 has an invalid length. [ 637.255194][T29327] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11153'. [ 637.435151][ T4226] usb 2-1: Using ep0 maxpacket: 16 [ 637.596323][ T4226] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 637.620936][ T4226] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 637.645202][ T4226] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 637.660360][T29355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11168'. [ 637.692233][T29355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11168'. [ 637.780417][ T4226] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.803782][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 637.836156][ T4226] usb 2-1: SerialNumber: syz [ 637.898718][T29307] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 638.028384][T29373] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 638.038543][T29373] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 638.038543][T29373] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 638.038543][T29373] [ 638.070708][T29373] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 638.094283][T29373] [EXT4 FS bs=4096, gc=1, bpg=256, ipg=32, mo=88428018, mo2=0000] [ 638.094744][T29372] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 638.111843][T29353] (syz.5.11166,29353,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 638.141419][T29373] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #12: comm syz.3.11176: iget: bad i_size value: -562949953417216 [ 638.173903][ T4226] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 638.190218][T29353] (syz.5.11166,29353,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 638.215180][T29373] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.11176: couldn't read orphan inode 12 (err -117) [ 638.236974][ T4226] usb 2-1: USB disconnect, device number 87 [ 638.247926][T29373] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noblock_validity,debug,barrier=0x0000000000000003,grpjquota=./file0,acl,journal_ioprio=0x0000000000000001,nouser_xattr,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 638.268380][T29353] JBD2: Ignoring recovery information on journal [ 638.272366][ C1] vkms_vblank_simulate: vblank timer overrun [ 638.363183][T29373] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.11176: deleted inode referenced: 12 [ 638.381249][T29353] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 638.424846][T29388] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 638.475712][T29353] (syz.5.11166,29353,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 638.522387][T29388] 8021q: adding VLAN 0 to HW filter on device bond4 [ 638.592676][T29353] (syz.5.11166,29353,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 638.593317][T29393] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 638.669997][T18830] ocfs2: Unmounting device (7,5) on (node local) [ 638.950980][T29419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11195'. [ 638.994261][T29419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11195'. [ 639.064227][T29427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11200'. [ 639.096858][T29427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11200'. [ 639.105982][T29432] netlink: 'syz.5.11203': attribute type 1 has an invalid length. [ 639.106000][T29432] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.11203'. [ 639.106016][T29432] netlink: 9 bytes leftover after parsing attributes in process `syz.5.11203'. [ 639.250163][T29444] netlink: 'syz.4.11208': attribute type 3 has an invalid length. [ 639.262953][T29446] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 639.290073][T29444] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11208'. [ 639.306299][T29446] exFAT-fs (nullb0): invalid boot record signature [ 639.320305][T29446] exFAT-fs (nullb0): failed to read boot sector [ 639.333462][T29446] exFAT-fs (nullb0): failed to recognize exfat type [ 639.359157][T29455] set_capacity_and_notify: 4 callbacks suppressed [ 639.359171][T29455] loop1: detected capacity change from 0 to 1024 [ 639.415888][T29459] netlink: 'syz.4.11216': attribute type 21 has an invalid length. [ 639.441982][T29459] IPv6: NLM_F_CREATE should be specified when creating new route [ 639.463536][T29459] IPv6: Can't replace route, no match found [ 639.539544][T29455] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.11213: lblock 2 mapped to illegal pblock 2 (length 1) [ 639.597959][T29455] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 639.679183][T29455] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.11213: lblock 0 mapped to illegal pblock 48 (length 1) [ 639.702375][T29481] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11226'. [ 639.807291][T29455] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 639.807316][T29455] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.11213: Failed to acquire dquot type 0 [ 639.809504][T29455] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 639.809702][T29455] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.11213: mark_inode_dirty error [ 639.809874][T29455] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 639.809935][T29455] EXT4-fs (loop1): 1 orphan inode deleted [ 639.809953][T29455] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 639.830408][T18856] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 639.830885][T18856] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 639.830917][T18856] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:8: Failed to release dquot type 0 [ 639.852035][ T154] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm kworker/u4:2: lblock 2 mapped to illegal pblock 2 (length 1) [ 639.856459][ T154] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 639.856580][ T154] EXT4-fs error (device loop1): ext4_write_dquot:6214: comm kworker/u4:2: Failed to commit dquot type 0 [ 639.862563][ T154] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 639.915020][ T4185] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 639.915739][ T4185] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 639.915924][ T4185] EXT4-fs error (device loop1): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 640.262396][T29503] loop3: detected capacity change from 0 to 8192 [ 640.266424][T29511] netlink: 'syz.1.11241': attribute type 3 has an invalid length. [ 640.356801][T29503] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 640.392834][T29503] REISERFS (device loop3): using ordered data mode [ 640.395207][T29516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11243'. [ 640.408587][ T4226] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 640.411624][T29503] reiserfs: using flush barriers [ 640.499301][T29503] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 640.577316][T29503] REISERFS (device loop3): checking transaction log (loop3) [ 640.610860][T29503] REISERFS (device loop3): Using r5 hash to sort names [ 640.634819][T29503] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 640.638901][T29528] loop5: detected capacity change from 0 to 512 [ 640.676389][ T4226] usb 3-1: Using ep0 maxpacket: 8 [ 640.770160][T29528] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 641.026290][ T4226] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 641.056552][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.073216][T29526] loop1: detected capacity change from 0 to 32768 [ 641.080204][ T4226] usb 3-1: Product: syz [ 641.084483][ T4226] usb 3-1: Manufacturer: syz [ 641.101893][ T4226] usb 3-1: SerialNumber: syz [ 641.133419][ T4226] usb 3-1: config 0 descriptor?? [ 641.171317][T29526] JBD2: Ignoring recovery information on journal [ 641.180079][ T4226] gspca_main: se401-2.14.0 probing 047d:5003 [ 641.243103][T29526] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 641.430425][T29526] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 641.430454][T29526] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 641.465583][T29526] OCFS2: File system is now read-only. [ 641.471924][T29526] (syz.1.11247,29526,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 641.489609][T29526] (syz.1.11247,29526,0):ocfs2_mknod:334 ERROR: status = -117 [ 641.515761][T29526] (syz.1.11247,29526,0):ocfs2_mknod:502 ERROR: status = -117 [ 641.540564][T29526] (syz.1.11247,29526,0):ocfs2_mkdir:659 ERROR: status = -117 [ 641.647454][ T4226] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 641.655382][ T4226] se401: probe of 3-1:0.0 failed with error -71 [ 641.662679][T29582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11274'. [ 641.667693][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 641.700312][ T4226] usb 3-1: USB disconnect, device number 79 [ 641.892883][T29596] program syz.5.11281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.106866][ T4801] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 642.343856][T29630] ERROR: device name not specified. [ 642.382836][T29634] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.11299'. [ 642.390782][ T4801] usb 4-1: Using ep0 maxpacket: 32 [ 642.534647][ T4801] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 642.546238][ T4801] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 642.556281][ T4801] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 642.599033][ T4801] usb 4-1: config 1 has no interface number 0 [ 642.610015][ T4801] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 642.656296][T29651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11307'. [ 642.660083][ T4801] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 642.708017][ T4801] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 642.735349][ T4801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.836504][ T4801] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 643.073514][ T4801] snd_usb_pod 4-1:1.1: invalid control EP [ 643.079285][ T4801] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 643.114586][ T4801] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 643.122057][ T4801] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 643.168922][T29673] loop4: detected capacity change from 0 to 8192 [ 643.183743][T29685] netlink: 'syz.2.11325': attribute type 10 has an invalid length. [ 643.205418][T29685] team0: Device hsr_slave_0 failed to register rx_handler [ 643.255402][T29673] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 643.275617][T29689] device bridge7 entered promiscuous mode [ 643.313890][T29673] REISERFS (device loop4): using ordered data mode [ 643.340964][T29673] reiserfs: using flush barriers [ 643.355586][ T5624] usb 4-1: USB disconnect, device number 95 [ 643.390563][T29669] loop5: detected capacity change from 0 to 32768 [ 643.398407][T29673] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 643.420772][T29673] REISERFS (device loop4): checking transaction log (loop4) [ 643.437881][T29673] REISERFS (device loop4): Using r5 hash to sort names [ 643.446288][T29673] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 643.577861][T29669] XFS (loop5): Mounting V5 Filesystem [ 643.751107][T29669] XFS (loop5): Ending clean mount [ 643.787983][T29718] netlink: 'syz.4.11336': attribute type 3 has an invalid length. [ 643.806505][T18830] XFS (loop5): Unmounting Filesystem [ 643.849700][ T4226] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 644.119121][ T4226] usb 2-1: Using ep0 maxpacket: 16 [ 644.242689][T29716] loop2: detected capacity change from 0 to 32768 [ 644.270319][ T4226] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 644.274776][T29739] SET target dimension over the limit! [ 644.291485][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.302718][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 97, changing to 7 [ 644.352011][ T4789] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 644.370271][ T4226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 644.382224][ T4226] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.406546][T29716] XFS (loop2): Mounting V5 Filesystem [ 644.428424][T29750] __nla_validate_parse: 1 callbacks suppressed [ 644.428437][T29750] netlink: 340 bytes leftover after parsing attributes in process `syz.3.11349'. [ 644.484903][ T4226] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 644.494286][ T4226] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 644.503183][ T4226] usb 2-1: Manufacturer: syz [ 644.509484][ T4226] usb 2-1: config 0 descriptor?? [ 644.591896][T29759] IPv6: sit3: Disabled Multicast RS [ 644.592739][T29716] XFS (loop2): Ending clean mount [ 644.642774][ T4789] usb 5-1: Using ep0 maxpacket: 8 [ 644.705907][T29769] netlink: 800 bytes leftover after parsing attributes in process `syz.3.11356'. [ 644.715166][T29769] netlink: 1301 bytes leftover after parsing attributes in process `syz.3.11356'. [ 644.784207][ T4226] usb 2-1: USB disconnect, device number 88 [ 644.802851][ T4189] XFS (loop2): Unmounting Filesystem [ 644.843904][ T4789] usb 5-1: unable to get BOS descriptor or descriptor too short [ 644.940107][ T4789] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 644.957342][T29781] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 644.959622][ T4789] usb 5-1: config 8 interface 0 has no altsetting 0 [ 645.058918][T29787] loop3: detected capacity change from 0 to 64 [ 645.175359][ T4789] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 645.184421][ T4789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.205347][ T4789] usb 5-1: Product: syz [ 645.215349][ T4789] usb 5-1: Manufacturer: syz [ 645.242181][ T4789] usb 5-1: SerialNumber: syz [ 645.278001][T29797] loop2: detected capacity change from 0 to 256 [ 645.318391][T29800] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11372'. [ 645.380391][T29797] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 645.597878][T29817] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 645.626550][ T4789] usb 5-1: selecting invalid altsetting 0 [ 645.695391][ T4789] usb 5-1: USB disconnect, device number 82 [ 645.704990][T29817] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 645.860745][T29833] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 645.950338][T29839] loop3: detected capacity change from 0 to 1024 [ 645.999058][ T4415] udevd[4415]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.012457][T29844] netlink: 'syz.2.11403': attribute type 1 has an invalid length. [ 646.034097][T29846] loop5: detected capacity change from 0 to 256 [ 646.137030][T29846] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 646.191777][T29854] overlayfs: missing 'lowerdir' [ 646.251026][T29860] device bridge5 entered promiscuous mode [ 646.494550][T29864] loop4: detected capacity change from 0 to 4096 [ 646.526164][T29872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11408'. [ 646.547924][T29864] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 646.565069][T29872] netlink: get zone limit has 8 unknown bytes [ 646.961477][T29908] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 647.645302][T29960] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 647.861812][T29978] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 647.883302][T29979] program syz.3.11452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 647.948133][T29924] loop4: detected capacity change from 0 to 32768 [ 648.001436][T29987] netlink: 'syz.3.11457': attribute type 1 has an invalid length. [ 648.521068][T29971] loop1: detected capacity change from 0 to 32768 [ 648.580986][T30016] xt_CT: No such helper "netbios-ns" [ 648.581430][T30023] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 648.687712][T29971] XFS (loop1): Mounting V5 Filesystem [ 648.785083][T30042] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 648.799015][T29971] XFS (loop1): Ending clean mount [ 648.808628][T30046] netlink: 100 bytes leftover after parsing attributes in process `syz.5.11481'. [ 648.820938][T30041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11479'. [ 648.847015][T30047] netlink: 'syz.2.11480': attribute type 21 has an invalid length. [ 648.872315][T29971] XFS (loop1): Quotacheck needed: Please wait. [ 648.970518][T30047] IPv6: NLM_F_CREATE should be specified when creating new route [ 648.983984][T29971] XFS (loop1): Quotacheck: Done. [ 649.040848][T30056] loop3: detected capacity change from 0 to 1764 [ 649.073523][ T4185] XFS (loop1): Unmounting Filesystem [ 649.241918][T30067] netlink: 'syz.3.11493': attribute type 10 has an invalid length. [ 649.336294][T30067] team0: Device hsr_slave_0 failed to register rx_handler [ 649.480587][T30076] loop4: detected capacity change from 0 to 512 [ 649.566458][T30082] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.682531][T30076] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobarrier,stripe=0x0000000000000042,,errors=continue. Quota mode: writeback. [ 649.734043][T30087] loop2: detected capacity change from 0 to 4096 [ 649.851353][T30106] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11508'. [ 649.900440][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 649.999340][T30112] netlink: 'syz.1.11511': attribute type 10 has an invalid length. [ 650.046729][T30112] team0: Device hsr_slave_0 failed to register rx_handler [ 650.110452][T30114] EXT4-fs (loop4): Ignoring removed nobh option [ 650.125101][T30114] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 650.161946][T30114] EXT4-fs (loop4): orphan cleanup on readonly fs [ 650.168940][T30114] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.11513: bad orphan inode 15 [ 650.267067][T30114] ext4_test_bit(bit=14, block=18) = 1 [ 650.295830][ T4226] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 650.317750][T30114] is_bad_inode(inode)=0 [ 650.321915][T30114] NEXT_ORPHAN(inode)=1023 [ 650.403021][T30114] max_ino=32 [ 650.411025][T30114] i_nlink=0 [ 650.426118][T30114] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.11513: bg 0: block 161: padding at end of block bitmap is not set [ 650.454640][T30114] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 650.479134][T30114] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,nobh,,errors=continue. Quota mode: none. [ 650.874240][T30156] nftables ruleset with unbound chain [ 650.894866][ T4226] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 650.894927][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.894949][ T4226] usb 3-1: Product: syz [ 650.894972][ T4226] usb 3-1: Manufacturer: syz [ 650.894988][ T4226] usb 3-1: SerialNumber: syz [ 650.896750][ T4226] usb 3-1: config 0 descriptor?? [ 650.904954][T30159] netlink: 'syz.5.11529': attribute type 10 has an invalid length. [ 650.950486][ T4226] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 650.950519][ T4226] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 650.950558][ T4226] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 650.964996][T30159] team0: Device hsr_slave_0 failed to register rx_handler [ 651.171266][ T4789] usb 3-1: USB disconnect, device number 80 [ 651.175808][T30168] set_capacity_and_notify: 2 callbacks suppressed [ 651.175820][T30168] loop3: detected capacity change from 0 to 1024 [ 651.267509][T30168] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 651.321060][T30168] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 623: comm syz.3.11535: Attempting to read directory block (623) that is past i_size (638464) [ 651.505946][ T4226] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 651.521445][T30193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 651.594379][T30198] loop5: detected capacity change from 0 to 256 [ 651.702040][T30198] FAT-fs (loop5): Directory bread(block 64) failed [ 651.712177][T30198] FAT-fs (loop5): Directory bread(block 65) failed [ 651.731576][T30198] FAT-fs (loop5): Directory bread(block 66) failed [ 651.738233][T30198] FAT-fs (loop5): Directory bread(block 67) failed [ 651.745600][T30198] FAT-fs (loop5): Directory bread(block 68) failed [ 651.752437][T30198] FAT-fs (loop5): Directory bread(block 69) failed [ 651.759070][T30198] FAT-fs (loop5): Directory bread(block 70) failed [ 651.765813][T30198] FAT-fs (loop5): Directory bread(block 71) failed [ 651.772479][T30198] FAT-fs (loop5): Directory bread(block 72) failed [ 651.778996][T30198] FAT-fs (loop5): Directory bread(block 73) failed [ 651.792610][ T4226] usb 2-1: Using ep0 maxpacket: 16 [ 652.156123][ T4226] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 652.157262][T30208] netlink: 'syz.4.11550': attribute type 10 has an invalid length. [ 652.180396][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.187387][T30208] team0: Device hsr_slave_0 failed to register rx_handler [ 652.189337][ T4226] usb 2-1: Product: syz [ 652.213433][ T4226] usb 2-1: Manufacturer: syz [ 652.220299][ T4226] usb 2-1: SerialNumber: syz [ 652.252409][ T4226] r8152-cfgselector 2-1: config 0 descriptor?? [ 652.574794][T30233] kcapi: manufacturer command 4294967295 unknown. [ 652.728104][T30242] netlink: 'syz.4.11570': attribute type 10 has an invalid length. [ 652.760068][T30242] team0: Device hsr_slave_0 failed to register rx_handler [ 652.786832][ T4226] r8152-cfgselector 2-1: Unknown version 0x0000 [ 652.794511][ T4226] r8152-cfgselector 2-1: bad CDC descriptors [ 652.840608][ T4226] r8152-cfgselector 2-1: Unknown version 0x0000 [ 652.851987][T30204] loop3: detected capacity change from 0 to 32768 [ 652.864801][ T4226] r8152-cfgselector 2-1: USB disconnect, device number 89 [ 652.911251][T30253] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 652.927362][T30253] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 652.993208][T30204] XFS (loop3): Mounting V5 Filesystem [ 653.082253][T30268] loop2: detected capacity change from 0 to 2048 [ 653.110082][T30204] XFS (loop3): Ending clean mount [ 653.125967][T30273] loop4: detected capacity change from 0 to 256 [ 653.138620][T30268] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 653.146208][T30204] XFS (loop3): Quotacheck needed: Please wait. [ 653.213969][T30273] exfat: Deprecated parameter 'utf8' [ 653.231220][T30273] exfat: Deprecated parameter 'namecase' [ 653.231854][T30268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.241709][T30273] exfat: Deprecated parameter 'namecase' [ 653.252879][T30273] exfat: Deprecated parameter 'utf8' [ 653.271396][T30204] XFS (loop3): Quotacheck: Done. [ 653.271638][T30268] UDF-fs: unknown compression code (0) [ 653.376821][T30273] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 653.404675][T30277] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11583'. [ 653.499546][ T4193] XFS (loop3): Unmounting Filesystem [ 653.515202][T30284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11586'. [ 653.551005][T30285] netlink: 'syz.2.11587': attribute type 10 has an invalid length. [ 653.582508][T30285] team0: Device hsr_slave_0 failed to register rx_handler [ 653.614482][T30287] loop5: detected capacity change from 0 to 2048 [ 653.726765][T30287] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.783674][T30295] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 653.849025][T30295] 8021q: adding VLAN 0 to HW filter on device bond6 [ 654.114721][T30311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11601'. [ 654.124627][T30314] CIFS: iocharset name too long [ 654.153282][T30311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11601'. [ 654.203547][T30323] netlink: 'syz.1.11606': attribute type 10 has an invalid length. [ 654.234144][T30323] team0: Device hsr_slave_0 failed to register rx_handler [ 654.305367][T30328] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 4, id = 0 [ 654.401164][ T21] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 654.433304][ T5037] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 654.442309][ T26] audit: type=1400 audit(620.007:35): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=30337 comm="syz.5.11613" [ 654.468645][T30340] libceph: resolve '0' (ret=-3): failed [ 654.640413][T30354] IPv6: sit3: Disabled Multicast RS [ 654.674092][T30358] netlink: 'syz.2.11623': attribute type 13 has an invalid length. [ 654.796967][ T21] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 654.818023][ T5037] usb 4-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 654.837120][ T5037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.904120][ T5037] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 654.917671][ T21] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 654.932281][T30378] loop2: detected capacity change from 0 to 512 [ 655.036397][ T21] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 655.219987][T30388] loop5: detected capacity change from 0 to 4096 [ 655.257142][T30388] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 655.295855][T30388] ntfs3: loop5: Failed to load $Extend. [ 655.331270][ T21] usb 5-1: string descriptor 0 read error: -22 [ 655.352572][ T21] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 655.374029][ T5037] gspca_sn9c20x: Write register 1001 failed -71 [ 655.383317][ T5037] gspca_sn9c20x: Device initialization failed [ 655.389974][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.406185][ T5037] gspca_sn9c20x: probe of 4-1:252.0 failed with error -71 [ 655.462786][ T5037] usb 4-1: USB disconnect, device number 96 [ 655.471808][ T21] adutux 5-1:168.0: interrupt endpoints not found [ 655.508427][T30382] loop1: detected capacity change from 0 to 32768 [ 655.557773][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11648'. [ 655.628373][T30382] (syz.1.11636,30382,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 655.654656][T30382] (syz.1.11636,30382,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 655.690162][ T4174] usb 5-1: USB disconnect, device number 83 [ 655.704085][T30382] JBD2: Ignoring recovery information on journal [ 655.759884][T30382] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 655.782335][T30426] ERROR: device name not specified. [ 655.977988][T30432] netlink: 'syz.3.11658': attribute type 1 has an invalid length. [ 656.015413][T30432] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.11658'. [ 656.039914][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 656.182237][T30444] libceph: resolve '0' (ret=-3): failed [ 656.212538][T30436] loop2: detected capacity change from 0 to 4096 [ 656.288251][T30436] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 656.541845][T30450] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 656.577260][T30466] xt_HMARK: spi-set and port-set can't be combined [ 656.631421][T30450] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 656.702308][T30450] ntfs3: loop3: failed to convert "c46c" to cp863 [ 657.017125][T30494] set_capacity_and_notify: 2 callbacks suppressed [ 657.017142][T30494] loop3: detected capacity change from 0 to 2048 [ 657.061068][T30494] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.269495][ T5037] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 657.418548][T30527] trusted_key: encrypted_key: keylen parameter is missing [ 657.436406][T30517] loop4: detected capacity change from 0 to 8192 [ 657.537837][T30517] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 657.588412][T30517] REISERFS (device loop4): using ordered data mode [ 657.639342][T30517] reiserfs: using flush barriers [ 657.664808][T30517] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 657.665025][ T5037] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 657.682018][T30517] REISERFS (device loop4): checking transaction log (loop4) [ 657.715204][T30517] REISERFS (device loop4): Using r5 hash to sort names [ 657.750536][ T5037] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.755599][T30517] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 657.777552][ T5037] usb 2-1: config 0 has no interface number 0 [ 657.807291][ T5037] usb 2-1: config 0 interface 52 has no altsetting 0 [ 657.993473][ T5037] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 658.002530][ T5037] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 658.023659][ T4226] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 658.027807][ T5037] usb 2-1: Product: syz [ 658.064672][ T5037] usb 2-1: Manufacturer: syz [ 658.092869][ T5037] usb 2-1: SerialNumber: syz [ 658.117722][ T5037] usb 2-1: config 0 descriptor?? [ 658.266856][T30548] loop2: detected capacity change from 0 to 32768 [ 658.291594][T30570] kAFS: No cell specified [ 658.314027][ T4226] usb 6-1: Using ep0 maxpacket: 8 [ 658.446295][ T4226] usb 6-1: config 0 interface 0 has no altsetting 0 [ 658.521461][T30586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11734'. [ 658.623611][ T5037] usb 2-1: USB disconnect, device number 90 [ 658.668258][ T4226] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 658.709473][ T4226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.733241][ T4226] usb 6-1: Product: syz [ 658.737673][ T4226] usb 6-1: Manufacturer: syz [ 658.780378][ T4226] usb 6-1: SerialNumber: syz [ 658.796789][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 658.814585][ T4226] usb 6-1: config 0 descriptor?? [ 658.915266][ T4226] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 659.061447][T30624] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 659.149976][ T4226] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 659.183867][ T4226] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 659.240180][T30632] loop2: detected capacity change from 0 to 256 [ 659.310147][T30632] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 659.333598][T30632] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 659.365420][ T4226] usb 6-1: USB disconnect, device number 16 [ 659.385226][T30632] FAT-fs (loop2): Filesystem has been set read-only [ 659.406080][T30646] netlink: 800 bytes leftover after parsing attributes in process `syz.1.11765'. [ 659.447087][T30646] netlink: 1301 bytes leftover after parsing attributes in process `syz.1.11765'. [ 659.630553][T30660] loop3: detected capacity change from 0 to 1024 [ 659.675558][ T26] audit: type=1400 audit(624.899:36): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=30665 comm="syz.2.11775" [ 659.690375][T30668] netlink: 'syz.1.11776': attribute type 1 has an invalid length. [ 659.695990][T30660] EXT4-fs (loop3): Ignoring removed bh option [ 659.722682][T30668] netlink: 'syz.1.11776': attribute type 2 has an invalid length. [ 659.755540][T30660] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.11772: lblock 2 mapped to illegal pblock 2 (length 1) [ 659.763944][T30668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11776'. [ 659.790648][T30660] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 659.798824][T30660] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.11772: lblock 0 mapped to illegal pblock 48 (length 1) [ 659.814556][T30660] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 659.863488][T30660] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.11772: Failed to acquire dquot type 0 [ 659.905063][T30660] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 659.949550][ T5037] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 659.957531][T30660] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.11772: mark_inode_dirty error [ 659.985453][T30680] loop2: detected capacity change from 0 to 4096 [ 659.997136][T30660] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 660.012385][T30660] EXT4-fs (loop3): 1 orphan inode deleted [ 660.020780][T30660] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: none. [ 660.041330][ T154] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 660.066075][ T154] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 660.119807][ T154] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:2: Failed to release dquot type 0 [ 660.145605][T30680] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 660.176872][ T4593] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 660.206040][ T5037] usb 5-1: Using ep0 maxpacket: 16 [ 660.212129][T30680] ntfs3: loop2: Failed to load $Extend. [ 660.233609][ T4593] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 660.267077][ T4593] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:7: Failed to release dquot type 0 [ 660.295590][ T4193] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 660.327932][ T4193] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 660.340691][ T4193] EXT4-fs error (device loop3): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 660.452053][ T4174] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 660.516376][ T5037] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 660.543918][ T5037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.554453][ T5037] usb 5-1: Product: syz [ 660.562263][ T5037] usb 5-1: Manufacturer: syz [ 660.568724][ T5037] usb 5-1: SerialNumber: syz [ 660.590425][ T5037] usb 5-1: config 0 descriptor?? [ 660.708639][ T4174] usb 6-1: Using ep0 maxpacket: 32 [ 660.837185][ T4174] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 660.850722][ T4174] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 660.879906][ T5037] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 660.890403][ T5037] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 660.900096][ T4174] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 660.906315][T30686] ODEBUG: Out of memory. ODEBUG disabled [ 660.938554][ T4174] usb 6-1: config 1 has no interface number 0 [ 660.954042][ T4174] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 660.986458][ T4174] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 661.000381][ T4174] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 661.009976][ T4174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.064012][T30724] loop3: detected capacity change from 0 to 256 [ 661.086573][T30686] syz.1.11784 (30686): drop_caches: 3 [ 661.096371][ T21] usb 5-1: USB disconnect, device number 84 [ 661.105148][ T4174] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 661.318837][ T4174] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 661.349611][T30723] syz.2.11802 (30723): drop_caches: 3 [ 661.539761][ T4789] usb 6-1: USB disconnect, device number 17 [ 661.553857][ T4789] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 661.685529][T30758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11820'. [ 662.013063][T30742] loop3: detected capacity change from 0 to 32768 [ 662.061351][T30786] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11833'. [ 662.141961][T30742] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 662.153649][T30742] BTRFS info (device loop3): using free space tree [ 662.160173][T30742] BTRFS info (device loop3): has skinny extents [ 662.190767][T30742] BTRFS info (device loop3): enabling ssd optimizations [ 662.206985][T30742] BTRFS warning (device loop3): get dev_stats failed, device not found [ 662.340864][T30819] netlink: 'syz.4.11840': attribute type 1 has an invalid length. [ 662.387157][T30819] netlink: 244 bytes leftover after parsing attributes in process `syz.4.11840'. [ 662.408588][ T4178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4178) [ 662.793568][T30847] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11852'. [ 663.137687][T30876] overlayfs: missing 'lowerdir' [ 663.423798][T30889] xt_CT: No such helper "syz0" [ 663.489231][ T5037] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 663.497195][T30895] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 663.744870][ T5037] usb 3-1: Using ep0 maxpacket: 8 [ 663.745810][T30866] loop3: detected capacity change from 0 to 32768 [ 663.778786][T30911] overlayfs: './file0' not a directory [ 663.873562][ T5037] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 663.882316][ T5037] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 663.917905][ T5037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.931160][ T5037] usb 3-1: config 0 descriptor?? [ 663.951294][T30866] XFS (loop3): Mounting V5 Filesystem [ 663.981796][ T5037] usb 3-1: Found UVC 0.00 device (2833:0201) [ 664.001268][ T5037] usb 3-1: No valid video chain found. [ 664.019333][T30927] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 664.075894][T30866] XFS (loop3): Ending clean mount [ 664.097443][ T4174] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 664.197773][ T7] usb 3-1: USB disconnect, device number 81 [ 664.214312][ T4193] XFS (loop3): Unmounting Filesystem [ 664.317123][T30938] netlink: 'syz.1.11887': attribute type 1 has an invalid length. [ 664.354021][ T4174] usb 5-1: Using ep0 maxpacket: 16 [ 664.504889][ T4174] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 664.760437][ T4174] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 664.787231][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.817023][ T4174] usb 5-1: Product: syz [ 664.821292][ T4174] usb 5-1: Manufacturer: syz [ 664.853208][ T4174] usb 5-1: SerialNumber: syz [ 664.882909][ T4174] r8152-cfgselector 5-1: config 0 descriptor?? [ 665.036783][T30969] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 665.083132][T30974] loop5: detected capacity change from 0 to 512 [ 665.141548][T30974] EXT4-fs (loop5): Ignoring removed nobh option [ 665.161077][T30974] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 665.213512][T30974] EXT4-fs (loop5): orphan cleanup on readonly fs [ 665.240158][T30974] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.11904: bad orphan inode 15 [ 665.262059][T30974] ext4_test_bit(bit=14, block=18) = 1 [ 665.296091][T30974] is_bad_inode(inode)=0 [ 665.300272][T30974] NEXT_ORPHAN(inode)=1023 [ 665.304611][T30974] max_ino=32 [ 665.385188][T30974] i_nlink=0 [ 665.401883][T30974] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.11904: bg 0: block 161: padding at end of block bitmap is not set [ 665.417427][ T7] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 665.444769][ T4174] r8152-cfgselector 5-1: Unknown version 0x0000 [ 665.454224][ T4174] r8152-cfgselector 5-1: USB disconnect, device number 85 [ 665.480036][T30974] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 665.550378][T30974] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,nobh,,errors=continue. Quota mode: none. [ 665.738324][T30996] xt_hashlimit: size too large, truncated to 1048576 [ 665.745316][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 665.765524][T30996] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 665.896641][ T7] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 665.921897][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 665.946309][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 97, changing to 7 [ 666.000178][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 666.033758][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 666.089631][T31014] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11923'. [ 666.139442][T31014] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11923'. [ 666.174910][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 666.199341][ T7] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 666.225607][ T7] usb 4-1: Manufacturer: syz [ 666.231329][T31025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11928'. [ 666.249267][ T7] usb 4-1: config 0 descriptor?? [ 666.348557][T31032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11930'. [ 666.473368][T31041] ieee802154 phy1 wpan1: encryption failed: -22 [ 666.546860][ T5037] usb 4-1: USB disconnect, device number 97 [ 666.656894][T31050] netlink: 'syz.5.11938': attribute type 3 has an invalid length. [ 666.872849][T31062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11943'. [ 666.936009][T31062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11943'. [ 666.952062][T31064] netlink: 'syz.5.11945': attribute type 6 has an invalid length. [ 666.981438][T31064] netlink: 'syz.5.11945': attribute type 7 has an invalid length. [ 667.008917][T31064] netlink: 'syz.5.11945': attribute type 8 has an invalid length. [ 667.096643][T31043] loop1: detected capacity change from 0 to 32768 [ 667.198780][T31069] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 667.270677][T31069] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 667.340579][T31076] loop3: detected capacity change from 0 to 2048 [ 667.407880][T31076] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 667.482094][T31076] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 667.515112][T31076] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 667.878766][T31100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11962'. [ 667.920931][T31102] loop1: detected capacity change from 0 to 64 [ 668.072426][T31114] loop3: detected capacity change from 0 to 1024 [ 668.377582][ T7] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 668.388861][T31143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 668.689769][T31153] netlink: 'syz.1.11997': attribute type 13 has an invalid length. [ 668.833423][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 668.946475][T31170] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 669.038613][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 669.082655][T31141] loop5: detected capacity change from 0 to 32768 [ 669.090400][ T5037] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 669.116200][T31179] loop4: detected capacity change from 0 to 1024 [ 669.153852][T31141] XFS (loop5): Mounting V5 Filesystem [ 669.176870][ T7] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 669.187953][ T7] usb 3-1: config 8 interface 0 has no altsetting 0 [ 669.291736][T31194] ERROR: device name not specified. [ 669.295045][T31141] XFS (loop5): Ending clean mount [ 669.310002][T31141] XFS (loop5): Quotacheck needed: Please wait. [ 669.380905][ T7] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 669.393772][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.410614][ T7] usb 3-1: Product: syz [ 669.414859][ T7] usb 3-1: Manufacturer: syz [ 669.419541][ T7] usb 3-1: SerialNumber: syz [ 669.439635][T31141] XFS (loop5): Quotacheck: Done. [ 669.513751][T18830] XFS (loop5): Unmounting Filesystem [ 669.518547][T31200] loop3: detected capacity change from 0 to 4096 [ 669.639924][T31200] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 669.655124][T31200] ntfs3: loop3: Failed to load $Extend. [ 669.661032][ T5037] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 669.691336][ T5037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.716776][ T5037] usb 2-1: Product: syz [ 669.727035][ T5037] usb 2-1: Manufacturer: syz [ 669.737349][ T5037] usb 2-1: SerialNumber: syz [ 669.744842][ T5037] usb 2-1: config 0 descriptor?? [ 669.799798][ T5037] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 669.808452][ T7] usb 3-1: selecting invalid altsetting 0 [ 669.816968][ T5037] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 669.817512][T31204] kcapi: manufacturer command 4294967295 unknown. [ 669.825070][ T5037] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 669.872827][ T7] usb 3-1: USB disconnect, device number 82 [ 670.055603][ T4226] usb 2-1: USB disconnect, device number 91 [ 670.229618][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.378489][ T26] audit: type=1326 audit(634.918:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31240 comm="syz.2.12028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8798454799 code=0x0 [ 670.405784][T31244] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12031'. [ 670.545804][T31260] netlink: 'syz.2.12037': attribute type 1 has an invalid length. [ 670.748676][T31273] netlink: 'syz.3.12043': attribute type 10 has an invalid length. [ 670.768674][T31273] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12043'. [ 670.931057][T31291] program syz.5.12052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 670.940213][T31277] loop2: detected capacity change from 0 to 8192 [ 670.977827][T31297] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 671.073245][T31277] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 671.084422][T31277] REISERFS (device loop2): using ordered data mode [ 671.108799][T31277] reiserfs: using flush barriers [ 671.137593][T31277] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 671.221031][T31277] REISERFS (device loop2): checking transaction log (loop2) [ 671.287924][T31277] REISERFS (device loop2): Using r5 hash to sort names [ 671.342679][T31277] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 671.420690][T31277] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 671.558354][T31342] netlink: 'syz.1.12078': attribute type 21 has an invalid length. [ 671.610251][T31342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12078'. [ 671.781978][T31350] loop1: detected capacity change from 0 to 2048 [ 671.850513][T31350] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 671.897985][T31358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12084'. [ 671.951065][T31362] loop5: detected capacity change from 0 to 512 [ 672.923641][T31371] loop4: detected capacity change from 0 to 40427 [ 672.966542][T31424] netlink: 800 bytes leftover after parsing attributes in process `syz.2.12112'. [ 672.980200][T31424] netlink: 1301 bytes leftover after parsing attributes in process `syz.2.12112'. [ 672.994037][T31371] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 673.001851][T31371] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 673.045789][T31371] F2FS-fs (loop4): invalid crc value [ 673.104887][T31371] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 673.317060][T31371] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 673.327980][T31371] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 673.383565][T31371] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 673.511290][T31449] loop1: detected capacity change from 0 to 4096 [ 673.646379][T31463] loop5: detected capacity change from 0 to 256 [ 673.734636][T31463] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 673.783971][T31463] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 673.793797][T31463] FAT-fs (loop5): Filesystem has been set read-only [ 674.472193][T31511] netlink: 'syz.1.12152': attribute type 3 has an invalid length. [ 674.503892][T31511] netlink: 'syz.1.12152': attribute type 1 has an invalid length. [ 674.622322][T31522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12158'. [ 674.681341][T31528] netlink: 9 bytes leftover after parsing attributes in process `syz.3.12160'. [ 674.852352][ T4226] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 675.194444][T31559] loop2: detected capacity change from 0 to 512 [ 675.273992][T31559] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 675.311967][ T4226] usb 5-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 675.331960][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.377934][ T4226] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 675.710950][T31570] loop5: detected capacity change from 0 to 32768 [ 675.850834][ T4226] gspca_sn9c20x: Write register 1001 failed -71 [ 675.868169][ T4226] gspca_sn9c20x: Device initialization failed [ 675.872377][T31599] loop3: detected capacity change from 0 to 64 [ 675.896522][ T4226] gspca_sn9c20x: probe of 5-1:252.0 failed with error -71 [ 675.925998][ T4226] usb 5-1: USB disconnect, device number 86 [ 675.975369][T31606] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12197'. [ 676.284815][ T5037] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 676.344973][T31619] loop5: detected capacity change from 0 to 2048 [ 676.441953][T31619] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 676.541334][ T5037] usb 4-1: Using ep0 maxpacket: 8 [ 676.670153][ T5037] usb 4-1: config 7 has an invalid interface number: 143 but max is 1 [ 676.699956][ T5037] usb 4-1: config 7 has an invalid interface number: 217 but max is 1 [ 676.719075][ T5037] usb 4-1: config 7 has an invalid descriptor of length 121, skipping remainder of the config [ 676.743668][ T5037] usb 4-1: config 7 has no interface number 0 [ 676.785792][ T5037] usb 4-1: config 7 has no interface number 1 [ 676.806574][ T5037] usb 4-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 676.858412][ T5037] usb 4-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 676.873928][T31662] IPv6: NLM_F_REPLACE set, but no existing node found! [ 676.904249][ T5037] usb 4-1: config 7 interface 143 has no altsetting 0 [ 676.911781][T31663] loop5: detected capacity change from 0 to 256 [ 677.038449][T31663] FAT-fs (loop5): Directory bread(block 64) failed [ 677.051648][T31663] FAT-fs (loop5): Directory bread(block 65) failed [ 677.063035][T31663] FAT-fs (loop5): Directory bread(block 66) failed [ 677.070644][T31663] FAT-fs (loop5): Directory bread(block 67) failed [ 677.081984][T31663] FAT-fs (loop5): Directory bread(block 68) failed [ 677.087119][ T5037] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 677.088906][T31663] FAT-fs (loop5): Directory bread(block 69) failed [ 677.099655][ T5037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.107560][T31663] FAT-fs (loop5): Directory bread(block 70) failed [ 677.112679][ T5037] usb 4-1: Product: syz [ 677.123105][ T5037] usb 4-1: Manufacturer: syz [ 677.127698][ T5037] usb 4-1: SerialNumber: syz [ 677.128277][T31663] FAT-fs (loop5): Directory bread(block 71) failed [ 677.139073][T31663] FAT-fs (loop5): Directory bread(block 72) failed [ 677.150290][T31663] FAT-fs (loop5): Directory bread(block 73) failed [ 677.236389][ T4789] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 677.288085][T31683] overlayfs: './file0' not a directory [ 677.451160][ T5037] qmi_wwan: probe of 4-1:7.143 failed with error -22 [ 677.524988][ T5037] usb 4-1: Could not set interface, error -71 [ 677.566325][ T5037] usb 4-1: USB disconnect, device number 98 [ 677.650934][T31710] netlink: 'syz.1.12249': attribute type 2 has an invalid length. [ 677.664129][ T4789] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 677.670274][T31710] netlink: 'syz.1.12249': attribute type 3 has an invalid length. [ 677.687040][ T4789] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 677.711444][ T4789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.781265][ T4789] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 677.813213][T31717] loop1: detected capacity change from 0 to 512 [ 677.894014][T31717] EXT4-fs (loop1): Ignoring removed nobh option [ 677.901209][T31717] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 677.932612][T31717] EXT4-fs (loop1): orphan cleanup on readonly fs [ 677.941396][T31717] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.12252: bad orphan inode 15 [ 677.964192][T31717] ext4_test_bit(bit=14, block=18) = 1 [ 677.969579][T31717] is_bad_inode(inode)=0 [ 677.984473][T31717] NEXT_ORPHAN(inode)=1023 [ 677.989053][T31717] max_ino=32 [ 677.992279][T31717] i_nlink=0 [ 678.008090][T31717] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.12252: bg 0: block 161: padding at end of block bitmap is not set [ 678.033602][T31717] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 678.049316][T31717] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,nobh,,errors=continue. Quota mode: none. [ 678.324811][T31735] loop1: detected capacity change from 0 to 256 [ 678.438494][T31735] exfat: Deprecated parameter 'utf8' [ 678.443876][T31735] exfat: Deprecated parameter 'namecase' [ 678.465656][T31735] exfat: Deprecated parameter 'namecase' [ 678.503226][T31735] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 678.529591][T31748] loop3: detected capacity change from 0 to 64 [ 678.549870][ T26] audit: type=1800 audit(642.550:38): pid=31735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12260" name="file1" dev="loop1" ino=1048697 res=0 errno=0 [ 678.779338][T31757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12270'. [ 678.957561][ T4789] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 679.053158][T31771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 679.182494][ T4789] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 679.213955][ T4789] stv0680 3-1:4.0: last error: 70, command = 0x88 [ 679.233965][ T4789] usb 3-1: USB disconnect, device number 83 [ 679.504943][T31791] loop5: detected capacity change from 0 to 2048 [ 679.560486][ T7] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 679.572227][T31791] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.734574][T31789] loop1: detected capacity change from 0 to 32768 [ 679.785817][T31797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12291'. [ 679.796157][T31797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12291'. [ 679.855500][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 680.005116][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 680.189332][ T7] usb 5-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 680.209537][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.252577][ T7] usb 5-1: Product: syz [ 680.260807][ T7] usb 5-1: Manufacturer: syz [ 680.283522][ T7] usb 5-1: SerialNumber: syz [ 680.301745][ T7] usb 5-1: config 0 descriptor?? [ 680.369977][ T7] safe_serial 5-1:0.0: safe_serial converter detected [ 680.392084][ T7] usb 5-1: safe_serial converter now attached to ttyUSB0 [ 680.578034][T31836] loop2: detected capacity change from 0 to 64 [ 680.588845][ T7] usb 5-1: USB disconnect, device number 87 [ 680.608203][ T7] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 680.631882][ T7] safe_serial 5-1:0.0: device disconnected [ 681.014584][T31856] ipt_CLUSTERIP: Please specify destination IP [ 681.230128][T31860] netlink: 'syz.4.12321': attribute type 1 has an invalid length. [ 681.598309][T31870] loop4: detected capacity change from 0 to 1024 [ 681.602181][T31854] syz.3.12318 (31854): drop_caches: 3 [ 681.615458][ T7] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 681.666404][T31870] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 681.730896][T31870] EXT4-fs error (device loop4): ext4_get_journal_inode:5185: inode #32: comm syz.4.12326: iget: special inode unallocated [ 681.769823][T31870] EXT4-fs (loop4): no journal found [ 681.776081][T31870] EXT4-fs (loop4): can't get journal size [ 681.848322][T31870] EXT4-fs (loop4): filesystem is read-only [ 681.874724][T31870] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,. Quota mode: none. [ 681.935815][T31806] syz.5.12293 (31806): drop_caches: 3 [ 682.023521][T31885] loop5: detected capacity change from 0 to 128 [ 682.270534][T31885] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,sysvgroups,,errors=continue. Quota mode: none. [ 682.296552][T31897] 9pnet: Insufficient options for proto=fd [ 682.314359][ T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 682.334278][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.342482][ T7] usb 3-1: Product: syz [ 682.346786][ T7] usb 3-1: Manufacturer: syz [ 682.351386][ T7] usb 3-1: SerialNumber: syz [ 682.386202][T31879] loop3: detected capacity change from 0 to 32768 [ 682.403860][T31885] EXT4-fs error (device loop5): __ext4_new_inode:1076: comm syz.5.12333: reserved inode found cleared - inode=2 [ 682.417148][ T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 682.505840][T31879] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 682.524527][T31879] JBD2: Ignoring recovery information on journal [ 682.608908][T31879] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 682.749348][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 682.802864][T31917] loop4: detected capacity change from 0 to 256 [ 682.887981][T31917] FAT-fs (loop4): Directory bread(block 64) failed [ 682.921253][T31917] FAT-fs (loop4): Directory bread(block 65) failed [ 682.944081][T31917] FAT-fs (loop4): Directory bread(block 66) failed [ 682.961687][T31917] FAT-fs (loop4): Directory bread(block 67) failed [ 682.984349][T31917] FAT-fs (loop4): Directory bread(block 68) failed [ 683.001886][T31917] FAT-fs (loop4): Directory bread(block 69) failed [ 683.012412][T31928] overlayfs: './file0' not a directory [ 683.018629][T31917] FAT-fs (loop4): Directory bread(block 70) failed [ 683.051211][T31917] FAT-fs (loop4): Directory bread(block 71) failed [ 683.072397][T31917] FAT-fs (loop4): Directory bread(block 72) failed [ 683.087849][T31917] FAT-fs (loop4): Directory bread(block 73) failed [ 683.168099][ T26] audit: type=1800 audit(646.872:39): pid=31917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12348" name="file1" dev="loop4" ino=1048698 res=0 errno=0 [ 683.189998][ T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 683.336701][T31946] loop4: detected capacity change from 0 to 1024 [ 683.457625][T31946] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 683.516446][T31946] JBD2: no valid journal superblock found [ 683.527353][T31946] EXT4-fs (loop4): error loading journal [ 683.587529][ T5037] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 683.697346][ T4789] usb 3-1: USB disconnect, device number 84 [ 683.864764][T31971] netlink: 'syz.4.12374': attribute type 27 has an invalid length. [ 683.976450][T31957] syz.1.12367 (31957): drop_caches: 3 [ 684.034096][T31981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12379'. [ 684.117985][T31987] loop1: detected capacity change from 0 to 2048 [ 684.146698][T31989] loop5: detected capacity change from 0 to 1024 [ 684.174590][ T5037] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 684.189303][ T5037] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.197682][ T5037] usb 4-1: Product: syz [ 684.201851][ T5037] usb 4-1: Manufacturer: syz [ 684.206540][ T5037] usb 4-1: SerialNumber: syz [ 684.212015][T31990] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 684.227965][ T4790] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 684.246331][ T5037] usb 4-1: config 0 descriptor?? [ 684.260856][ T26] audit: type=1800 audit(647.892:40): pid=31987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12382" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 684.276472][T31987] NILFS (loop1): error -2 truncating bmap (ino=16) [ 684.304055][ T5037] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 684.328329][ T5037] usb 4-1: Detected FT-X [ 684.367505][ T7] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 684.374468][ T7] ath9k_htc: Failed to initialize the device [ 684.384548][T31990] ------------[ cut here ]------------ [ 684.390746][T31990] WARNING: CPU: 1 PID: 31990 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 684.400291][T31990] Modules linked in: [ 684.400491][ T4789] usb 3-1: ath9k_htc: USB layer deinitialized [ 684.404186][T31990] CPU: 1 PID: 31990 Comm: segctord Not tainted syzkaller #0 [ 684.417713][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 684.427838][T31990] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 684.433886][T31990] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff [ 684.453643][T31990] RSP: 0018:ffffc900033ff390 EFLAGS: 00010293 [ 684.459720][T31990] RAX: ffffffff830ec6ac RBX: ffff888061b541a0 RCX: ffff88807c6f3b80 [ 684.467766][T31990] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 684.475826][T31990] RBP: 0000000000000003 R08: ffff88805eef6747 R09: 1ffff1100bddece8 [ 684.483812][T31990] R10: dffffc0000000000 R11: ffffed100bddece9 R12: ffff88807c6f5308 [ 684.491861][T31990] R13: ffff88804fb0a9e0 R14: 00000000003f0002 R15: ffff888029cf5330 [ 684.500007][T31990] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 684.508971][T31990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 684.515639][T31990] CR2: 00007fa294e07000 CR3: 0000000065465000 CR4: 00000000003506e0 [ 684.523667][T31990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 684.531712][T31990] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 684.539763][T31990] Call Trace: [ 684.543043][T31990] [ 684.545977][T31990] nilfs_dat_commit_update+0x24/0x40 [ 684.551322][T31990] nilfs_btree_commit_update_v+0x93/0x410 [ 684.557055][T31990] nilfs_btree_propagate+0x95a/0xcf0 [ 684.562395][T31990] nilfs_bmap_propagate+0x70/0x120 [ 684.567514][T31990] nilfs_segctor_apply_buffers+0x15d/0x320 [ 684.569957][ T4790] usb 5-1: Using ep0 maxpacket: 16 [ 684.573367][T31990] ? nilfs_collect_file_data+0xc0/0xc0 [ 684.583975][T31990] nilfs_segctor_scan_file+0x7af/0x9d0 [ 684.589455][T31990] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 684.596611][T31990] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 684.602590][T31990] ? rcu_is_watching+0x11/0xa0 [ 684.607358][T31990] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 684.613334][T31990] ? verify_lock_unused+0x140/0x140 [ 684.618549][T31990] ? nilfs_transaction_unlock+0x220/0x220 [ 684.624469][T31990] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 684.630635][T31990] ? clear_nonspinnable+0x60/0x60 [ 684.635776][T31990] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 684.641252][T31990] ? __lock_acquire+0x7d10/0x7d10 [ 684.646420][T31990] ? __rwlock_init+0x140/0x140 [ 684.651189][T31990] ? do_raw_spin_unlock+0x11d/0x230 [ 684.656449][T31990] ? _raw_spin_unlock+0x24/0x40 [ 684.661298][T31990] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 684.666807][T31990] nilfs_segctor_construct+0x17b/0x690 [ 684.672280][T31990] nilfs_segctor_thread+0x523/0x1180 [ 684.677646][T31990] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 684.683542][T31990] ? nilfs_iput_work_func+0x70/0x70 [ 684.688783][T31990] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 684.694676][T31990] ? _raw_spin_unlock+0x40/0x40 [ 684.699581][T31990] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 684.705475][T31990] ? init_wait_entry+0xd0/0xd0 [ 684.709046][ T4790] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 684.710379][T31990] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 684.722587][ T4790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.725166][T31990] ? __kthread_parkme+0x157/0x1b0 [ 684.738186][T31990] kthread+0x436/0x520 [ 684.742318][T31990] ? nilfs_iput_work_func+0x70/0x70 [ 684.745514][ T4790] usb 5-1: config 0 descriptor?? [ 684.747611][T31990] ? kthread_blkcg+0xd0/0xd0 [ 684.757175][T31990] ret_from_fork+0x1f/0x30 [ 684.761583][T31990] [ 684.764645][T31990] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 684.771913][T31990] CPU: 1 PID: 31990 Comm: segctord Not tainted syzkaller #0 [ 684.779172][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 684.789208][T31990] Call Trace: [ 684.792481][T31990] [ 684.795436][T31990] dump_stack_lvl+0x188/0x250 [ 684.800094][T31990] ? show_regs_print_info+0x20/0x20 [ 684.805274][T31990] ? load_image+0x400/0x400 [ 684.809760][T31990] panic+0x2e5/0x810 [ 684.813638][T31990] ? bpf_jit_dump+0xd0/0xd0 [ 684.818124][T31990] ? ret_from_fork+0x1f/0x30 [ 684.822692][T31990] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 684.828051][T31990] __warn+0x248/0x2b0 [ 684.832040][T31990] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 684.837412][T31990] report_bug+0x1b7/0x2e0 [ 684.841730][T31990] handle_bug+0x3a/0x70 [ 684.845877][T31990] exc_invalid_op+0x16/0x40 [ 684.850360][T31990] asm_exc_invalid_op+0x16/0x20 [ 684.855191][T31990] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 684.861160][T31990] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 73 5a 6a fe e8 7e b6 f1 fd e9 b8 fc ff ff e8 64 5a 6a fe <0f> 0b e9 16 fc ff ff e8 58 5a 6a fe e8 63 b6 f1 fd e9 74 fe ff ff [ 684.880755][T31990] RSP: 0018:ffffc900033ff390 EFLAGS: 00010293 [ 684.883716][ T4790] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 684.886822][T31990] RAX: ffffffff830ec6ac RBX: ffff888061b541a0 RCX: ffff88807c6f3b80 [ 684.886840][T31990] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 684.886851][T31990] RBP: 0000000000000003 R08: ffff88805eef6747 R09: 1ffff1100bddece8 [ 684.886864][T31990] R10: dffffc0000000000 R11: ffffed100bddece9 R12: ffff88807c6f5308 [ 684.886878][T31990] R13: ffff88804fb0a9e0 R14: 00000000003f0002 R15: ffff888029cf5330 [ 684.934072][T31990] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 684.939455][T31990] nilfs_dat_commit_update+0x24/0x40 [ 684.944721][T31990] nilfs_btree_commit_update_v+0x93/0x410 [ 684.950430][T31990] nilfs_btree_propagate+0x95a/0xcf0 [ 684.955715][T31990] nilfs_bmap_propagate+0x70/0x120 [ 684.960809][T31990] nilfs_segctor_apply_buffers+0x15d/0x320 [ 684.966600][T31990] ? nilfs_collect_file_data+0xc0/0xc0 [ 684.972048][T31990] nilfs_segctor_scan_file+0x7af/0x9d0 [ 684.977494][T31990] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 684.984596][T31990] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 684.990476][T31990] ? rcu_is_watching+0x11/0xa0 [ 684.995245][T31990] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 685.001147][T31990] ? verify_lock_unused+0x140/0x140 [ 685.006336][T31990] ? nilfs_transaction_unlock+0x220/0x220 [ 685.012046][T31990] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 685.018185][T31990] ? clear_nonspinnable+0x60/0x60 [ 685.023189][T31990] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 685.028632][T31990] ? __lock_acquire+0x7d10/0x7d10 [ 685.033638][T31990] ? __rwlock_init+0x140/0x140 [ 685.038385][T31990] ? do_raw_spin_unlock+0x11d/0x230 [ 685.043572][T31990] ? _raw_spin_unlock+0x24/0x40 [ 685.048429][T31990] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 685.053870][T31990] nilfs_segctor_construct+0x17b/0x690 [ 685.059316][T31990] nilfs_segctor_thread+0x523/0x1180 [ 685.064595][T31990] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 685.070471][T31990] ? nilfs_iput_work_func+0x70/0x70 [ 685.075650][T31990] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 685.081538][T31990] ? _raw_spin_unlock+0x40/0x40 [ 685.086374][T31990] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 685.092250][T31990] ? init_wait_entry+0xd0/0xd0 [ 685.097013][T31990] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 685.102910][T31990] ? __kthread_parkme+0x157/0x1b0 [ 685.107919][T31990] kthread+0x436/0x520 [ 685.111999][T31990] ? nilfs_iput_work_func+0x70/0x70 [ 685.117187][T31990] ? kthread_blkcg+0xd0/0xd0 [ 685.121785][T31990] ret_from_fork+0x1f/0x30 [ 685.126189][T31990] [ 685.129475][T31990] Kernel Offset: disabled [ 685.134181][T31990] Rebooting in 86400 seconds..