last executing test programs: 19m28.982571375s ago: executing program 2 (id=7087): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4e1f, 0x0, 0x4e24, 0x419f, 0xa, 0x30, 0x40, 0x5c}, {0x4, 0x2, 0x1, 0x7, 0x3, 0x8000000000000001, 0x0, 0x200000000000004}, {0x4, 0x26, 0x7, 0x4}, 0x9, 0x0, 0x3, 0x1, 0x3, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x3505, 0x1, 0x0, 0x80, 0x7, 0x4, 0x7}}, 0xe8) 19m28.94974132s ago: executing program 2 (id=7089): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x6, &(0x7f0000000540)=""/167, &(0x7f0000000100)=0xa7) 19m28.902485653s ago: executing program 2 (id=7091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="900000000308010100000000000000040500000a06000240060000000600f84088f800000600024022eb00000900010073797a300000000044000480080006400000000408000140000010000800064000000003080007400000000108000340000000030800074000000048080002400000044108000140000000050500030001"], 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x850) 19m28.821311041s ago: executing program 2 (id=7092): syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f00000000c0)={[{}, {@codepage={'codepage', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@dir_umask}]}, 0x2, 0x34e, &(0x7f0000002280)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 19m28.68439943s ago: executing program 2 (id=7094): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0x0, @private0}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x0, 0x0, @empty}]}, &(0x7f0000000180)=0x10) 19m27.922332387s ago: executing program 2 (id=7106): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a0431a, &(0x7f0000000000)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 19m27.714467955s ago: executing program 32 (id=7106): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a0431a, &(0x7f0000000000)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.606363367s ago: executing program 3 (id=30375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 2.321953958s ago: executing program 3 (id=30381): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) 2.167898897s ago: executing program 1 (id=30384): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x27, &(0x7f00000002c0)={0x0, 0x38, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) 2.127400447s ago: executing program 5 (id=30385): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x1d, 0x18, 0xd, "fee8a2ab78fc179fcff8a0e91ddaaca7bd6447a4b4e00d9683dda1afb94c1956b7fb0a018c060000000000000300000000000000000000000000e0ffffff00", "2809e8dbe10859892d00009f8aa9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c5f00", [0x4, 0x5]}}) 2.019930824s ago: executing program 1 (id=30386): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.95351359s ago: executing program 5 (id=30387): unshare(0x28000600) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0xb, @mcast2, 0x8, 0x1}, 0x20) 1.867345132s ago: executing program 5 (id=30389): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000a40)='./file0\x00') 1.792763411s ago: executing program 3 (id=30390): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000080)=[{'IMIX', @val={' \'', 'Synth'}}, {'IMIX', @void}], 0x27) close(r0) 1.792244671s ago: executing program 1 (id=30391): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) 1.782503333s ago: executing program 5 (id=30392): r0 = socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x2, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) 1.749851312s ago: executing program 3 (id=30393): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcf, 0x0, 0x0) 1.624281223s ago: executing program 1 (id=30395): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) 1.576286055s ago: executing program 3 (id=30396): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080", @ANYBLOB='\x00\x00\n'], 0x38}}, 0x94) 1.439877379s ago: executing program 1 (id=30398): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x443b, &(0x7f0000009e40)="$eJzs3U9sFFUcAOA30yotAhbkgImJm0iiUdO0nNCSWEqhtFAxKMR4WbbtAtVtl7Rb44FDvZF4MvFgPBBNPNkT6cErHj168YgnDyR68GJiQqzZ3WnpzO6mC+m2Qr4vobPz/re/nTdvDsOLE5Xrs4u52cVcYT5Xnr66eCz3abm0NFcM8Q7Z7f5pTyfiJPa758KpM+9fPhbCTzO/3l9bW1sLVd2hqcFNn//+6+b05uO6OFOn2m7z1rbLRyGEww3jquoKIXz4YwhRCOFkkjaSHHtDCAdCPe/yzS+u5LZpNHfuFU/kH0zeWh06OrFye7Xxd19LRCF8U3rxzWtzf7zSNfTb69vUPQAAAAAAAAAAAAAAAAAAT7ixixcuvTcwGO5GoXslanxfdyw5tno/dm3bvNz5XxYAAAAAAAAAAAAAAAAAAAD+px6+/5+LDjV5/380OQ63qL/2TufHSOeMv3th9PTAYLL/e9SQP5wk/XmyKxxssu97dv/3k5n6zfd/b+zncR2P0v32hSjuT53HcX9/CN8lG78fifbGpfJi5Y2r5aX5mW0bxhMrHf/67v2p6CQb+m8V/99/rpcbybTf+f3/X2j4NlXPr2zfV+yplo5/VzZ7z/qH7z+P2rr+T2Ua2In48/jS8e+upfVuLjBcnwCq8f+ye+v4j2ba71T8D4QQclF1rLnUDFBdw1TTW61XSEvH/5laWmrqTP6Qra7/fzLxP51pf7fm/+XsjYim0vF/tpbWkyoRh3AziX+89fV/JtP+bsS/Ov5l9/+2pOOf3O67U0Vqf8mH8389sVX8xzLtdyr+l+JknAei1DdgJaqnt/r/6khLx7+nIf/4xvNf3Nb672ym/k49/633u/78tz79vxbVn/9oLh3/3kzuw+9Du+u/8UwLnZ7/h8MP2SmHR5CO/95aWnrt3Ff72W78JzLtb1/8G1YltaThzPr/3z319G+t/9qSjv9z9cR4c4nl2s/a+i/aev1/LtP+bqz/quNfjjvb69MiHf99LctV4/9LG/f/85l6nY9/42qiu9MdPkXS8d/fslzt+u/ZOv6TmXqdjv+rnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Akwkhz7QhT3p87juL8/hFPJ+ZGwN5oqzOSnSuXpTxZDGE3Sc+FQdK1UniqU8rPz5ZlivlAqladDOJ3kHw490WKpXMnPFW6c2WirN7peLCxUpoqFSghhLEl/Kexfb2tqtjJXuBFCOLuR93xcXrhxvTCfn5ldeHtgYGAgjG+M4WBU/KxSnK/Ue6/nhjCxUbcv2jS4Wva5jbHsiz4uLy3MF0q19POb6pTK04XSpjqTSd5X4WBUWViany5UivlS+dp6f7tpODmOjl/84OL5wYb8K1H9OLKzwwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgEd0deuvrEEJ3/SwOIeSi5EOU/Eu5c694Iv9g8tbq0NGJldur95uVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsEvHKBEDURiA34yFlh7DKiSdbUQRLYwInsDUnsDDaOM9cgnvYGFhayHLkgSWkLBpdqvva97AY2b+4gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY7/apeX4sq4gUZ/+nEV379b27vx/m+9X8/ZMjZORw7h6a65uyiq79fJ3bX6Z+/tQ5tse/37eXmJmjj0lPpn3qpb25lvq2lG/89zxSLiKiHvYXKeeiWPcWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoq+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfgUAAP//wL8omg==") open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) 1.429378882s ago: executing program 3 (id=30399): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000280)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.018539595s ago: executing program 4 (id=30407): r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r0}]) 853.459426ms ago: executing program 4 (id=30410): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0x808c) 849.333917ms ago: executing program 5 (id=30411): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x2804450, &(0x7f0000003b80), 0x1, 0x51b, &(0x7f00000014c0)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x72d, 0x542e, 0x1, 0x7}) 702.967093ms ago: executing program 0 (id=30413): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000)) 702.477713ms ago: executing program 4 (id=30414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r0}, 0xc) 702.250224ms ago: executing program 0 (id=30415): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32=r0], 0x30}}, 0x0) 559.97477ms ago: executing program 4 (id=30416): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000100001002cbd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="38280400a3060000340012800b000100627269646765000024000280060014"], 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 559.214299ms ago: executing program 0 (id=30417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd27, 0x2ddfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) 364.372448ms ago: executing program 0 (id=30418): setresuid(0xee01, 0xee01, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 262.473934ms ago: executing program 4 (id=30419): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffffb, 0x1, 0x3ff}}) 201.733829ms ago: executing program 4 (id=30420): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@dioread_nolock}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000001380)='2', 0x1, 0xc00) 194.241441ms ago: executing program 0 (id=30421): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/63, 0x3f}, {&(0x7f0000000d40)=""/101, 0x65}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/6, 0x6}, {&(0x7f0000000e00)=""/251, 0xfb}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0x4b7}], 0x3, 0x2, 0x0) 128.402318ms ago: executing program 1 (id=30422): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x80, 0xa, 0x3, "0ca000"}}, 0x0}, 0x0) 86.695278ms ago: executing program 5 (id=30423): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x200, 0x4) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x6e20, 0x4, @mcast2, 0x41}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000a40)="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", 0x201}], 0x1}}], 0x1, 0x800) 0s ago: executing program 0 (id=30424): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f00000003c0)={0x2, r1, 0x6, 0x4, 0x1, 0x3, 0x3, 0x20, 0x10000}) kernel console output (not intermixed with test programs): ock 70) failed [ 1754.266942][T28997] FAT-fs (loop1): Directory bread(block 71) failed [ 1754.283528][T29033] tc_dump_action: action bad kind [ 1754.293165][T28997] FAT-fs (loop1): Directory bread(block 72) failed [ 1754.299723][T28997] FAT-fs (loop1): Directory bread(block 73) failed [ 1754.326504][T31313] usb 6-1: new low-speed USB device number 87 using dummy_hcd [ 1754.422120][T28997] attempt to access beyond end of device [ 1754.422120][T28997] loop1: rw=524288, want=1196, limit=256 [ 1754.483337][T28997] attempt to access beyond end of device [ 1754.483337][T28997] loop1: rw=0, want=1196, limit=256 [ 1754.545620][ T26] audit: type=1800 audit(1680.362:99): pid=28997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.28305" name="file1" dev="loop1" ino=1048817 res=0 errno=0 [ 1754.572325][T29046] netlink: 144 bytes leftover after parsing attributes in process `syz.0.28324'. [ 1754.720004][T31313] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1754.740139][T31313] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1754.783375][T31313] usb 6-1: config 0 has no interface number 0 [ 1754.805253][T31313] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1754.815322][T31313] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1754.857849][T29068] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.28328'. [ 1754.868263][T31313] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1754.931497][T31313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.965973][T31313] usb 6-1: config 0 descriptor?? [ 1755.065936][T29083] netlink: 'syz.4.28333': attribute type 1 has an invalid length. [ 1755.361118][T31315] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1755.508353][T31313] usb 6-1: USB disconnect, device number 87 [ 1755.746079][T31315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1755.788704][T31315] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1755.819926][T31315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1755.872637][T31315] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1755.910035][T31315] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1755.922431][T31315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.933186][T29157] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1755.935226][T31315] usb 1-1: config 0 descriptor?? [ 1756.069221][T29166] afs: Bad value for 'source' [ 1756.217949][T31315] hdpvr 1-1:0.0: firmware version 0x12 dated ¾ [ 1756.232465][ T4622] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1756.408820][T11397] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1756.451598][T31315] hdpvr 1-1:0.0: device init failed [ 1756.464101][T31315] hdpvr: probe of 1-1:0.0 failed with error -12 [ 1756.478275][T29205] IPv6: NLM_F_CREATE should be specified when creating new route [ 1756.494291][ T4622] usb 4-1: Using ep0 maxpacket: 32 [ 1756.510138][T31315] usb 1-1: USB disconnect, device number 115 [ 1756.623340][ T4622] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1756.652107][ T4622] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1756.684084][ T4622] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1756.686788][T11397] usb 6-1: Using ep0 maxpacket: 32 [ 1756.736995][T29229] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 1756.749302][T29229] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1756.853723][T11397] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1756.876882][T11397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.901204][ T4622] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1756.919050][ T4622] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1756.940965][ T4622] usb 4-1: Product: syz [ 1756.949416][ T4622] usb 4-1: Manufacturer: syz [ 1756.963085][ T4622] usb 4-1: SerialNumber: syz [ 1756.966951][T11397] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1756.986349][T29153] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1757.015219][ T4622] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input120 [ 1757.181774][T29269] loop0: detected capacity change from 0 to 256 [ 1757.243553][ T4622] usb 4-1: USB disconnect, device number 9 [ 1757.284766][ T4622] appletouch 4-1:1.0: input: appletouch disconnected [ 1757.456596][T11397] gspca_nw80x: reg_r err -71 [ 1757.462123][T11397] nw80x: probe of 6-1:3.0 failed with error -71 [ 1757.470196][T29294] loop4: detected capacity change from 0 to 2048 [ 1757.479916][T11397] usb 6-1: USB disconnect, device number 88 [ 1757.508046][T29305] netlink: 44 bytes leftover after parsing attributes in process `syz.1.28394'. [ 1757.583361][T29294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1758.012766][T10106] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1758.251392][T29359] loop0: detected capacity change from 0 to 2048 [ 1758.313866][T29359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1758.457039][T10106] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1758.471877][T10106] usb 5-1: config 0 has no interface number 0 [ 1758.478024][T10106] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1758.495155][T10106] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1758.515092][T29378] xt_TCPMSS: Only works on TCP SYN packets [ 1758.696717][T10106] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1758.749880][T10106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.756368][T29396] loop0: detected capacity change from 0 to 1024 [ 1758.757923][T10106] usb 5-1: Product: syz [ 1758.757946][T10106] usb 5-1: Manufacturer: syz [ 1758.757962][T10106] usb 5-1: SerialNumber: syz [ 1758.815610][T29404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28426'. [ 1758.828102][T10106] usb 5-1: config 0 descriptor?? [ 1758.840254][T29399] loop1: detected capacity change from 0 to 2048 [ 1758.847292][T29322] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1758.866431][T29404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28426'. [ 1758.878517][T10106] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1758.910847][T29404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28426'. [ 1758.923608][T10106] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1758.967704][T29396] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1758.996538][T29399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1759.066799][T29396] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1759.124465][T29396] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.28423: Failed to acquire dquot type 0 [ 1759.165540][T29396] EXT4-fs (loop0): 1 truncate cleaned up [ 1759.182333][T29396] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1759.225642][T29396] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1759.247388][T29396] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1759.291895][T29396] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.28423: Failed to acquire dquot type 0 [ 1759.424110][ T4622] usb 5-1: USB disconnect, device number 85 [ 1759.454939][ T4622] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1759.504228][ T4622] cyberjack 5-1:0.69: device disconnected [ 1759.610128][T29463] (syz.5.28440,29463,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 1759.667625][T29463] (syz.5.28440,29463,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1759.822579][T29480] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1759.887112][T29485] xt_hashlimit: max too large, truncated to 1048576 [ 1759.919114][T29485] xt_limit: Overflow, try lower: 0/0 [ 1760.267112][T29519] loop4: detected capacity change from 0 to 64 [ 1760.411457][T29534] x_tables: unsorted entry at hook 2 [ 1760.445168][T29536] 9p: Unknown access argument Ø [ 1760.526269][T29539] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1760.581289][T29544] IPv6: sit2: Disabled Multicast RS [ 1760.747187][T29566] fuse: Bad value for 'group_id' [ 1760.938864][T29574] loop0: detected capacity change from 0 to 4096 [ 1761.034248][T29574] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1761.049678][T29574] ntfs3: loop0: Failed to load $Extend. [ 1761.123164][ T4622] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1761.395436][T29605] loop5: detected capacity change from 0 to 4096 [ 1761.438428][T29605] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1761.524681][ T4622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1761.561318][ T4622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1761.604767][T29605] ntfs3: loop5: failed to convert "c46c" to cp852 [ 1761.713032][T29640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28497'. [ 1761.732622][ T4622] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1761.741744][ T4622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.810761][ T4622] usb 5-1: Product: syz [ 1761.824690][ T4622] usb 5-1: Manufacturer: syz [ 1761.848314][ T4622] usb 5-1: SerialNumber: syz [ 1761.883727][ T4622] usb 5-1: config 0 descriptor?? [ 1761.928124][T29646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28501'. [ 1761.935817][T29576] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1762.010249][ C0] port100 5-1:0.0: NFC: The urb has been stopped (status -2) [ 1762.017914][ T4622] port100 5-1:0.0: NFC: Could not get supported command types [ 1762.028120][T29655] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1762.252775][ T4622] usb 5-1: USB disconnect, device number 86 [ 1762.343678][T29675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28506'. [ 1762.643278][T29683] loop1: detected capacity change from 0 to 4096 [ 1763.320282][T29748] loop4: detected capacity change from 0 to 256 [ 1763.378702][T11397] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1763.402239][T29752] loop0: detected capacity change from 0 to 1764 [ 1763.456046][T29748] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1763.496235][T29748] FAT-fs (loop4): Filesystem has been set read-only [ 1763.503110][T29748] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1763.549639][T29748] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1763.558430][T29748] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1763.564296][T29766] device gtp0 entered promiscuous mode [ 1763.640749][T29748] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1763.688794][T11397] usb 4-1: Using ep0 maxpacket: 32 [ 1763.728318][T29748] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1763.784823][T29748] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1763.816641][T29748] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1763.841218][T29784] CIFS mount error: No usable UNC path provided in device string! [ 1763.841218][T29784] [ 1763.859692][T29748] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1763.890272][T29748] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1763.900691][T29784] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1763.926570][ T26] audit: type=1800 audit(1689.146:100): pid=29748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.28534" name="file1" dev="loop4" ino=1048818 res=0 errno=0 [ 1763.975281][T29748] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1764.052623][T11397] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1764.072770][T11397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.104036][T11397] usb 4-1: Product: syz [ 1764.114836][T11397] usb 4-1: Manufacturer: syz [ 1764.130123][T11397] usb 4-1: SerialNumber: syz [ 1764.149582][T11397] usb 4-1: config 0 descriptor?? [ 1764.268441][T29820] loop5: detected capacity change from 0 to 512 [ 1764.270444][T29821] tmpfs: Bad value for 'mpol' [ 1764.449909][T11397] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 010 [ 1764.473425][T29820] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #3: comm syz.5.28551: corrupted inode contents [ 1764.538687][T29820] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #3: comm syz.5.28551: mark_inode_dirty error [ 1764.568428][T29820] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #3: comm syz.5.28551: corrupted inode contents [ 1764.624542][T29820] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.28551: mark_inode_dirty error [ 1764.635220][T29847] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1764.664867][T29820] Quota error (device loop5): write_blk: dquota write failed [ 1764.683866][T29820] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1764.689557][ T4678] usb 4-1: USB disconnect, device number 10 [ 1764.725073][T29820] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.28551: Failed to acquire dquot type 0 [ 1764.765321][T29820] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #16: comm syz.5.28551: corrupted inode contents [ 1764.792143][T29820] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #16: comm syz.5.28551: mark_inode_dirty error [ 1764.805914][T29820] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #16: comm syz.5.28551: corrupted inode contents [ 1764.818453][T29820] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.28551: mark_inode_dirty error [ 1764.832588][T11397] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1764.847287][T29820] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #16: comm syz.5.28551: corrupted inode contents [ 1764.864741][ T4622] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1764.905879][T29820] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1764.916670][T29820] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #16: comm syz.5.28551: corrupted inode contents [ 1764.929808][T29820] EXT4-fs error (device loop5): ext4_truncate:4279: inode #16: comm syz.5.28551: mark_inode_dirty error [ 1764.941788][T29820] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1764.954466][T29820] EXT4-fs (loop5): 1 truncate cleaned up [ 1764.960158][T29820] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 1765.121135][ T4622] usb 2-1: Using ep0 maxpacket: 32 [ 1765.132100][T11397] usb 5-1: Using ep0 maxpacket: 16 [ 1765.249558][ T4622] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 1765.268602][ T4622] usb 2-1: config 0 has no interface number 0 [ 1765.282702][T11397] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1765.286803][ T4622] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1765.311357][T11397] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1765.343225][ T4622] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 1765.346375][T11397] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1765.410240][T11403] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1765.440561][T29886] netlink: 132 bytes leftover after parsing attributes in process `syz.3.28566'. [ 1765.525309][T11397] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1765.527555][ T4622] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1765.543599][T11397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1765.563123][T11397] usb 5-1: SerialNumber: syz [ 1765.576033][ T4622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.592687][ T4622] usb 2-1: Product: syz [ 1765.603140][ T4622] usb 2-1: Manufacturer: syz [ 1765.607806][ T4622] usb 2-1: SerialNumber: syz [ 1765.623585][T29833] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1765.645015][ T4622] usb 2-1: config 0 descriptor?? [ 1765.666748][T29841] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1765.673821][T29841] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1765.709178][T11403] usb 6-1: Using ep0 maxpacket: 16 [ 1765.848502][T11403] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1765.867658][T11403] usb 6-1: config 0 has no interface number 0 [ 1765.874520][T11397] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 1765.913554][T11397] usb 5-1: USB disconnect, device number 87 [ 1765.922672][T11403] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1766.036894][ T4622] usb 2-1: USB disconnect, device number 126 [ 1766.094263][T11403] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1766.111756][T11403] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1766.137552][T11403] usb 6-1: Manufacturer: syz [ 1766.142187][T11403] usb 6-1: SerialNumber: syz [ 1766.159605][T11403] usb 6-1: config 0 descriptor?? [ 1766.678887][T29952] loop1: detected capacity change from 0 to 256 [ 1766.685820][T11403] usbtouchscreen: probe of 6-1:0.214 failed with error -71 [ 1766.712940][T11403] usb 6-1: USB disconnect, device number 89 [ 1767.079261][T29982] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1767.436640][T30007] rdma_rxe: rxe creation allowed on top of a real device only [ 1767.773723][T30015] loop5: detected capacity change from 0 to 4096 [ 1768.954960][T30113] loop4: detected capacity change from 0 to 64 [ 1768.969474][ T4622] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1769.060861][T31315] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1769.236844][ T4622] usb 6-1: Using ep0 maxpacket: 16 [ 1769.273692][T30095] loop1: detected capacity change from 0 to 32768 [ 1769.333093][T31315] usb 4-1: Using ep0 maxpacket: 16 [ 1769.370949][ T4622] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1769.411967][ T4622] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 1769.472354][T31315] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.483822][T31315] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1769.525207][T30131] loop0: detected capacity change from 0 to 4096 [ 1769.548026][T30131] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1769.621822][ T4622] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1769.643457][ T4622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.651510][ T4622] usb 6-1: Product: syz [ 1769.667248][ T4622] usb 6-1: Manufacturer: syz [ 1769.672333][ T4622] usb 6-1: SerialNumber: syz [ 1769.689948][T31315] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1769.722978][T31315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.740010][ T4622] usb 6-1: config 0 descriptor?? [ 1769.756033][T31315] usb 4-1: Product: syz [ 1769.760365][T31315] usb 4-1: Manufacturer: syz [ 1769.781890][T31315] usb 4-1: SerialNumber: syz [ 1769.794383][ T4622] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1769.802234][T30131] ntfs3: loop0: failed to convert "c46c" to iso8859-14 [ 1769.815317][ T4622] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1770.147224][T30164] netlink: 'syz.0.28639': attribute type 1 has an invalid length. [ 1770.155371][T30164] netlink: 224 bytes leftover after parsing attributes in process `syz.0.28639'. [ 1770.289136][T30149] loop1: detected capacity change from 0 to 32768 [ 1770.337988][T31315] usb 4-1: cannot find UAC_HEADER [ 1770.379199][T31315] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1770.400229][T31315] usb 4-1: USB disconnect, device number 11 [ 1770.438228][T30149] XFS (loop1): Mounting V5 Filesystem [ 1770.566866][T30149] XFS (loop1): Ending clean mount [ 1770.594127][T30149] XFS (loop1): Quotacheck needed: Please wait. [ 1770.616596][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1770.841158][T30149] XFS (loop1): Quotacheck: Done. [ 1770.933566][T30232] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.28653'. [ 1770.956691][ T4636] XFS (loop1): Unmounting Filesystem [ 1770.969353][T30232] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.28653'. [ 1771.327196][T30251] loop4: detected capacity change from 0 to 2048 [ 1771.356105][T30251] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1771.422032][T30256] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1771.723085][T30275] loop4: detected capacity change from 0 to 64 [ 1771.764053][T30276] netlink: 'syz.3.28666': attribute type 1 has an invalid length. [ 1771.773352][T30267] loop0: detected capacity change from 0 to 4096 [ 1771.789205][T30276] netlink: 56 bytes leftover after parsing attributes in process `syz.3.28666'. [ 1771.816071][T30267] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1771.889523][T30267] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1771.916973][T11397] usb 6-1: USB disconnect, device number 90 [ 1771.952208][T30283] xt_TCPMSS: Only works on TCP SYN packets [ 1771.963727][T30267] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1771.998898][T30290] loop5: detected capacity change from 0 to 256 [ 1772.017218][T30267] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1772.072073][T30267] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1772.134854][T30267] ntfs: volume version 3.1. [ 1772.153932][T30290] FAT-fs (loop5): Directory bread(block 64) failed [ 1772.184379][T30267] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1772.218035][T30290] FAT-fs (loop5): Directory bread(block 65) failed [ 1772.225598][T30290] FAT-fs (loop5): Directory bread(block 66) failed [ 1772.250779][T30267] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1772.297164][T30290] FAT-fs (loop5): Directory bread(block 67) failed [ 1772.303822][T30290] FAT-fs (loop5): Directory bread(block 68) failed [ 1772.332407][T30290] FAT-fs (loop5): Directory bread(block 69) failed [ 1772.337989][T30267] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1772.368459][T30290] FAT-fs (loop5): Directory bread(block 70) failed [ 1772.379290][T30267] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1772.399931][T30290] FAT-fs (loop5): Directory bread(block 71) failed [ 1772.410791][T30290] FAT-fs (loop5): Directory bread(block 72) failed [ 1772.432363][T30290] FAT-fs (loop5): Directory bread(block 73) failed [ 1772.439202][T30267] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1772.648908][T30314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.28674'. [ 1773.137357][T30352] netlink: 'syz.5.28685': attribute type 1 has an invalid length. [ 1773.137544][T30347] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1773.173869][T30345] loop4: detected capacity change from 0 to 2048 [ 1773.242323][T30345] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1773.486799][T30298] loop1: detected capacity change from 0 to 40427 [ 1773.642150][T11397] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1773.868357][T11403] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1773.919965][T11397] usb 4-1: Using ep0 maxpacket: 16 [ 1774.068920][T11397] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1774.083938][T11397] usb 4-1: config 0 has no interfaces? [ 1774.272029][T11397] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1774.281222][T11397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.303937][T11397] usb 4-1: Product: syz [ 1774.308145][T11397] usb 4-1: Manufacturer: syz [ 1774.312761][T11397] usb 4-1: SerialNumber: syz [ 1774.338382][T11397] r8152-cfgselector 4-1: config 0 descriptor?? [ 1774.464373][T11403] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1774.473596][T11403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.491206][T11403] usb 6-1: Product: syz [ 1774.493635][T30298] F2FS-fs (loop1): invalid crc value [ 1774.502456][T11403] usb 6-1: Manufacturer: syz [ 1774.509127][T11403] usb 6-1: SerialNumber: syz [ 1774.515844][T30298] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1774.587684][T11403] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1774.589060][T30298] F2FS-fs (loop1): Start checkpoint disabled! [ 1774.625099][T11397] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1774.638218][T28702] usb 4-1: config 0 descriptor?? [ 1774.654141][T30298] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1774.697677][T30298] F2FS-fs (loop1): disabling checkpoint not compatible with read-only [ 1774.830145][T30404] overlayfs: missing 'lowerdir' [ 1774.843209][T31315] usb 4-1: USB disconnect, device number 12 [ 1774.849420][T28702] usb 4-1: can't set config #0, error -71 [ 1775.091726][T30424] loop0: detected capacity change from 0 to 764 [ 1775.138308][T30424] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1775.330766][T11403] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1775.574861][T30455] loop0: detected capacity change from 0 to 128 [ 1775.788626][T11397] usb 6-1: USB disconnect, device number 91 [ 1776.386302][T30455] FAT-fs (loop0): FAT read failed (blocknr 50720) [ 1776.447000][T30467] loop4: detected capacity change from 0 to 1024 [ 1776.484641][T11403] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1776.491761][T11403] ath9k_htc: Failed to initialize the device [ 1776.507462][T11397] usb 6-1: ath9k_htc: USB layer deinitialized [ 1776.544660][T30473] loop5: detected capacity change from 0 to 4096 [ 1776.779818][T30467] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.28717: Failed to acquire dquot type 0 [ 1776.783024][T30494] loop1: detected capacity change from 0 to 512 [ 1776.833578][T30467] EXT4-fs (loop4): 1 truncate cleaned up [ 1776.846007][T30467] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1776.890283][T30494] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 1776.951572][T30467] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.28717: Failed to acquire dquot type 0 [ 1777.154141][T30514] loop0: detected capacity change from 0 to 4096 [ 1777.244716][T30514] __ntfs_warning: 10 callbacks suppressed [ 1777.244735][T30514] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1777.307994][T11397] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1777.369755][T30514] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1777.422890][T30514] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1777.455768][T30535] loop1: detected capacity change from 0 to 4096 [ 1777.463118][T30514] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1777.494982][T30514] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1777.509312][T30514] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1777.537681][T30514] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1777.548598][T30514] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1777.569466][T30514] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1777.579654][T30514] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1777.605682][T30514] ntfs: volume version 3.1. [ 1777.657835][T30535] ntfs: volume version 3.1. [ 1777.735760][T11397] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1777.744097][T11397] usb 4-1: config 8 has no interface number 0 [ 1777.757856][T11397] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1777.772141][T11397] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1777.779237][T11397] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1777.788318][T11397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.843418][T30506] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1778.163225][T11397] usb 4-1: string descriptor 0 read error: -71 [ 1778.195187][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 1778.708229][T11397] ir_toy 4-1:8.177: could not write reset command: -110 [ 1778.729507][ C1] ir_toy 4-1:8.177: failed to resubmit urb: -1 [ 1778.735957][T11397] ir_toy: probe of 4-1:8.177 failed with error -110 [ 1778.750400][T11397] usb 4-1: USB disconnect, device number 13 [ 1778.932558][T30557] netlink: 'syz.1.28742': attribute type 32 has an invalid length. [ 1779.072255][T30558] loop0: detected capacity change from 0 to 4096 [ 1779.536251][T30575] loop5: detected capacity change from 0 to 4096 [ 1779.548830][T30582] xt_hashlimit: max too large, truncated to 1048576 [ 1779.627544][T30575] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1779.711653][T30575] ntfs3: loop5: failed to convert "c46c" to iso8859-14 [ 1779.839108][T30587] loop0: detected capacity change from 0 to 4096 [ 1780.119373][T30587] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1780.141276][T11397] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1780.165821][T30617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28750'. [ 1780.178000][T30587] ntfs3: loop0: Failed to load $Extend. [ 1780.448637][T30637] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1780.580041][T11397] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1780.588174][T11397] usb 2-1: config 0 has no interface number 0 [ 1780.632373][ T4678] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1780.640591][T11397] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1780.703857][T11397] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1780.891542][ T4678] usb 5-1: Using ep0 maxpacket: 16 [ 1780.922425][T11397] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1780.927558][T30664] set_capacity_and_notify: 1 callbacks suppressed [ 1780.927572][T30664] loop5: detected capacity change from 0 to 4096 [ 1780.943641][T11397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.952467][T11397] usb 2-1: Product: syz [ 1780.997758][T11397] usb 2-1: Manufacturer: syz [ 1781.003765][T11397] usb 2-1: SerialNumber: syz [ 1781.039369][T11397] usb 2-1: config 0 descriptor?? [ 1781.064685][T30664] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1781.092959][T30594] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1781.136724][T11397] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1781.193110][ T4678] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1781.206622][T11397] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1781.235671][ T4678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.268964][ T4678] usb 5-1: Product: syz [ 1781.273194][ T4678] usb 5-1: Manufacturer: syz [ 1781.324027][ T4678] usb 5-1: SerialNumber: syz [ 1781.362971][ T4678] usb 5-1: config 0 descriptor?? [ 1781.446321][ T4678] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 1781.564059][T30717] netlink: 'syz.3.28775': attribute type 21 has an invalid length. [ 1781.604637][T30717] netlink: 100 bytes leftover after parsing attributes in process `syz.3.28775'. [ 1781.681124][T11397] usb 5-1: USB disconnect, device number 88 [ 1781.724418][T31315] usb 2-1: USB disconnect, device number 127 [ 1781.754878][T31315] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1781.782825][T31315] cyberjack 2-1:0.69: device disconnected [ 1782.022159][ T4622] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1782.373773][T30768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28786'. [ 1782.439129][ T4622] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.465276][ T4622] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1782.485809][ T4622] usb 6-1: config 1 has no interface number 0 [ 1782.491953][ T4622] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1782.522775][ T4622] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1782.749179][ T4622] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1782.770030][ T4622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.780919][ T4622] usb 6-1: Product: syz [ 1782.785172][ T4622] usb 6-1: Manufacturer: syz [ 1782.836327][ T4622] usb 6-1: SerialNumber: syz [ 1783.347666][T31315] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1783.368673][ T4622] usb 6-1: USB disconnect, device number 92 [ 1783.796755][T31315] usb 2-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1783.893036][T31315] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1783.902115][T31315] usb 2-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 1783.910166][T31315] usb 2-1: Product: syz [ 1783.946449][T30821] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1783.970910][T31315] usbhid 2-1:15.0: fixing wrong optional hid class descriptors count [ 1783.995770][T31315] usbhid 2-1:15.0: can't add hid device: -22 [ 1784.013505][T31315] usbhid: probe of 2-1:15.0 failed with error -22 [ 1784.052787][T30859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28816'. [ 1784.216880][T30871] loop4: detected capacity change from 0 to 764 [ 1784.237169][ T4622] usb 2-1: USB disconnect, device number 2 [ 1784.320473][T31315] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1784.342724][T30871] rock: directory entry would overflow storage [ 1784.355296][T30871] rock: sig=0x4654, size=5, remaining=4 [ 1784.630457][T31315] usb 6-1: Using ep0 maxpacket: 32 [ 1784.697087][T30909] mip6: mip6_rthdr_init_state: spi is not 0: 655360 [ 1784.940051][T30923] loop1: detected capacity change from 0 to 1764 [ 1784.946925][T31315] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1784.971832][T31315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.005950][T31315] usb 6-1: Product: syz [ 1785.010172][T31315] usb 6-1: Manufacturer: syz [ 1785.014803][T31315] usb 6-1: SerialNumber: syz [ 1785.029277][T30936] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28843'. [ 1785.041192][T31315] usb 6-1: config 0 descriptor?? [ 1785.134305][T30923] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1785.327184][T31315] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 093 [ 1785.549538][T11397] usb 6-1: USB disconnect, device number 93 [ 1785.734170][T30992] loop4: detected capacity change from 0 to 1024 [ 1785.823604][T30995] loop0: detected capacity change from 0 to 64 [ 1785.871477][T30992] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1786.067514][T31011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.28859'. [ 1786.096965][T31011] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 1786.121125][T31014] loop4: detected capacity change from 0 to 256 [ 1786.139501][T31016] netlink: 'syz.0.28858': attribute type 1 has an invalid length. [ 1786.167937][T31016] netlink: 'syz.0.28858': attribute type 3 has an invalid length. [ 1786.223379][T31016] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28858'. [ 1786.237769][T31014] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 1786.339551][T31030] kAFS: unable to lookup cell '@mTsyz0' [ 1786.484396][T31042] loop0: detected capacity change from 0 to 256 [ 1786.596134][T31042] FAT-fs (loop0): Directory bread(block 64) failed [ 1786.618680][T31042] FAT-fs (loop0): Directory bread(block 65) failed [ 1786.625412][T31042] FAT-fs (loop0): Directory bread(block 66) failed [ 1786.683053][T31042] FAT-fs (loop0): Directory bread(block 67) failed [ 1786.689712][T31042] FAT-fs (loop0): Directory bread(block 68) failed [ 1786.734789][T31042] FAT-fs (loop0): Directory bread(block 69) failed [ 1786.768686][T31042] FAT-fs (loop0): Directory bread(block 70) failed [ 1786.792015][T31042] FAT-fs (loop0): Directory bread(block 71) failed [ 1786.798679][T31042] FAT-fs (loop0): Directory bread(block 72) failed [ 1786.863607][T31042] FAT-fs (loop0): Directory bread(block 73) failed [ 1787.064250][T31067] loop4: detected capacity change from 0 to 64 [ 1787.222964][T31073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28880'. [ 1787.333391][T31077] netlink: 'syz.0.28879': attribute type 21 has an invalid length. [ 1787.365044][T31077] netlink: 152 bytes leftover after parsing attributes in process `syz.0.28879'. [ 1787.398687][T31082] loop1: detected capacity change from 0 to 16 [ 1787.529726][T31091] Timeout policy `syz0' can only be used by L3 protocol number 37120 [ 1787.562937][T31082] erofs: (device loop1): mounted with root inode @ nid 36. [ 1787.787990][T31112] netlink: 'syz.0.28889': attribute type 7 has an invalid length. [ 1787.828504][T31112] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.28889'. [ 1788.017691][T31120] loop4: detected capacity change from 0 to 64 [ 1788.666835][T31113] loop1: detected capacity change from 0 to 32768 [ 1788.743079][T31113] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.28887 (31113) [ 1788.818494][T31118] loop0: detected capacity change from 0 to 32768 [ 1788.933508][T31118] (syz.0.28890,31118,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1788.964741][ T4178] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4178) [ 1789.004241][T31118] (syz.0.28890,31118,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1789.080024][T31138] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1789.113401][T31118] JBD2: Ignoring recovery information on journal [ 1789.318665][T31147] loop1: detected capacity change from 0 to 1024 [ 1789.335142][T31118] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1789.435212][T31147] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 1789.501112][T31147] System zones: 0-1, 3-36 [ 1789.530481][T31147] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.28897: bad orphan inode 134217728 [ 1789.597509][T31125] loop4: detected capacity change from 0 to 32768 [ 1789.613418][T31147] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,debug,journal_dev=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 1789.652030][ T4632] ocfs2: Unmounting device (7,0) on (node local) [ 1789.861032][T31125] XFS (loop4): Mounting V5 Filesystem [ 1789.904780][ T151] block nbd3: Attempted send on invalid socket [ 1789.911051][ T151] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1789.924488][ T151] block nbd3: Attempted send on invalid socket [ 1789.930692][ T151] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1790.209249][T31125] XFS (loop4): Ending clean mount [ 1790.345236][ T4639] XFS (loop4): Unmounting Filesystem [ 1790.445899][T11403] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1790.702590][T11403] usb 2-1: Using ep0 maxpacket: 32 [ 1790.831749][T11403] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.854031][T11403] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1791.001828][T11403] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1791.010993][T11403] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1791.028554][T11403] usb 2-1: Product: syz [ 1791.032832][T11403] usb 2-1: Manufacturer: syz [ 1791.088375][T11403] hub 2-1:4.0: USB hub found [ 1791.330334][T11403] hub 2-1:4.0: 2 ports detected [ 1791.546998][T11403] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1791.553913][T11403] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1791.645504][T11403] usb 2-1: USB disconnect, device number 3 [ 1791.824726][ T4678] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1792.120418][T31254] loop4: detected capacity change from 0 to 128 [ 1792.242226][T31254] ADFS-fs (loop4): error: can't find an ADFS filesystem on dev loop4. [ 1792.383905][ T4678] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1792.401681][ T4678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.414722][T31279] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1792.486775][ T4678] usb 1-1: Product: syz [ 1792.516459][ T4678] usb 1-1: Manufacturer: syz [ 1792.552864][ T4678] usb 1-1: SerialNumber: syz [ 1792.593122][ T4678] usb 1-1: config 0 descriptor?? [ 1792.856115][T31343] loop5: detected capacity change from 0 to 4096 [ 1792.904556][ T4678] mos7840 1-1:0.0: required endpoints missing [ 1792.971900][T31343] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1793.039711][T31343] ntfs3: loop5: Failed to load $Extend. [ 1793.095311][T31371] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1793.121180][T11403] usb 1-1: USB disconnect, device number 116 [ 1793.268039][ T4678] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1793.282573][T31381] netlink: 20 bytes leftover after parsing attributes in process `syz.5.28949'. [ 1793.556672][ T4678] usb 4-1: Using ep0 maxpacket: 16 [ 1793.583653][T31387] loop1: detected capacity change from 0 to 8192 [ 1793.683693][T31387] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1793.694761][ T4678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1793.877430][ T4678] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1793.882894][T31377] loop4: detected capacity change from 0 to 32768 [ 1793.897421][ T4678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.952090][ T4678] usb 4-1: Product: syz [ 1793.965922][ T4678] usb 4-1: Manufacturer: syz [ 1793.970561][ T4678] usb 4-1: SerialNumber: syz [ 1794.029582][ T4678] usb 4-1: config 0 descriptor?? [ 1794.045604][T31377] JBD2: Invalid start block of journal: 67108866 [ 1794.067393][T31377] (syz.4.28948,31377,0):ocfs2_journal_wipe:1154 ERROR: status = -22 [ 1794.075515][T31377] (syz.4.28948,31377,0):ocfs2_check_volume:2424 ERROR: status = -22 [ 1794.084155][T31377] (syz.4.28948,31377,0):ocfs2_check_volume:2493 ERROR: status = -22 [ 1794.093285][T31377] (syz.4.28948,31377,0):ocfs2_mount_volume:1824 ERROR: status = -22 [ 1794.123978][T31377] (syz.4.28948,31377,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1794.124659][ T4678] hub 4-1:0.0: bad descriptor, ignoring hub [ 1794.186900][ T4678] hub: probe of 4-1:0.0 failed with error -5 [ 1794.450605][ T4622] usb 4-1: USB disconnect, device number 14 [ 1794.538167][T31469] loop5: detected capacity change from 0 to 8 [ 1794.672404][T31469] cramfs: bad data blocksize 3222268820 [ 1794.702586][T31469] cramfs: Error -3 while decompressing! [ 1794.712149][T31469] cramfs: ffffffff964020dc(16)->ffff88804c0a0000(4096) [ 1794.719530][T31469] cramfs: bad data blocksize 4165569313 [ 1794.726125][T31469] cramfs: bad data blocksize 3825676623 [ 1794.742312][T31469] cramfs: bad data blocksize 4294480561 [ 1794.753856][T31469] cramfs: bad data blocksize 1076736 [ 1794.760401][T31469] cramfs: bad data blocksize 485460736 [ 1794.770495][T31469] cramfs: bad data blocksize 3808479469 [ 1794.819914][T31469] cramfs: bad data blocksize 3222268820 [ 1794.830469][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 1794.830485][ T26] audit: type=1800 audit(1718.052:102): pid=31469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.28970" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 1795.147524][T31528] netlink: 'syz.4.28985': attribute type 1 has an invalid length. [ 1795.160198][T31528] netlink: 224 bytes leftover after parsing attributes in process `syz.4.28985'. [ 1795.280902][T31538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28987'. [ 1796.036648][T31608] loop4: detected capacity change from 0 to 128 [ 1796.058010][ T4622] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1796.194109][T31620] loop1: detected capacity change from 0 to 256 [ 1796.271844][T31620] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1796.346896][ T4622] usb 6-1: Using ep0 maxpacket: 16 [ 1796.496777][ T4622] usb 6-1: config 1 has an invalid interface number: 152 but max is 0 [ 1796.505646][ T4622] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.538100][T31645] netlink: 'syz.1.29023': attribute type 11 has an invalid length. [ 1796.580257][ T4622] usb 6-1: config 1 has no interface number 0 [ 1796.608600][ T4622] usb 6-1: config 1 interface 152 altsetting 239 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1796.663309][ T4622] usb 6-1: config 1 interface 152 altsetting 239 endpoint 0xF has invalid wMaxPacketSize 0 [ 1796.692931][ T4622] usb 6-1: config 1 interface 152 has no altsetting 0 [ 1796.793790][T31666] netlink: 45 bytes leftover after parsing attributes in process `syz.4.29030'. [ 1796.814901][T31670] ip6t_srh: unknown srh match flags 4000 [ 1796.892335][ T4622] usb 6-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=7e.a8 [ 1796.916813][ T4622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.961115][ T4622] usb 6-1: Product: syz [ 1796.965361][ T4622] usb 6-1: Manufacturer: syz [ 1796.991017][ T4622] usb 6-1: SerialNumber: syz [ 1797.101002][T31690] loop1: detected capacity change from 0 to 8 [ 1797.143325][T31693] loop4: detected capacity change from 0 to 1024 [ 1797.193808][T31690] SQUASHFS error: Unable to read inode 0xe3 [ 1797.361144][T31706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29043'. [ 1797.395324][ T4622] safe_serial 6-1:1.152: safe_serial converter detected [ 1797.413423][ T4622] safe_serial: probe of 6-1:1.152 failed with error -22 [ 1797.480908][ T4622] usb 6-1: USB disconnect, device number 94 [ 1797.489171][T31693] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1797.515912][T31693] hfsplus: xattr search failed [ 1797.743717][T28702] hfsplus: b-tree write err: -5, ino 4 [ 1798.024075][T31752] sctp: [Deprecated]: syz.3.29054 (pid 31752) Use of int in max_burst socket option. [ 1798.024075][T31752] Use struct sctp_assoc_value instead [ 1798.500591][T31790] loop4: detected capacity change from 0 to 8 [ 1798.586506][T31790] SQUASHFS error: Failed to read block 0x26067d: -5 [ 1798.614862][T31712] lo speed is unknown, defaulting to 1000 [ 1798.621662][T31712] bridge0 speed is unknown, defaulting to 1000 [ 1798.664991][T31790] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 1798.683005][T31790] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1798.837201][T31811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29073'. [ 1798.940895][T31819] kAFS: unparsable volume name [ 1799.562250][T31881] device lo entered promiscuous mode [ 1799.632398][T31881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1799.974315][T31914] netlink: 76 bytes leftover after parsing attributes in process `syz.3.29102'. [ 1800.355541][ T4620] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1800.665398][ T4620] usb 6-1: Using ep0 maxpacket: 8 [ 1800.804480][ T4620] usb 6-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 1800.808714][T31959] netlink: 'syz.0.29118': attribute type 4 has an invalid length. [ 1800.813606][ T4620] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.832861][T31959] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.29118'. [ 1800.885247][ T4620] usb 6-1: config 0 descriptor?? [ 1800.966902][ T4620] usb 6-1: Found UVC 0.00 device (2801:0201) [ 1800.982888][ T4620] usb 6-1: No valid video chain found. [ 1801.093766][T31901] lo speed is unknown, defaulting to 1000 [ 1801.101001][T31901] bridge0 speed is unknown, defaulting to 1000 [ 1801.238908][T31986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29127'. [ 1801.241485][T31987] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 1801.268002][ T4620] usb 6-1: USB disconnect, device number 95 [ 1801.498530][T32001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29128'. [ 1801.993956][T32034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.29138'. [ 1802.623677][T32074] loop0: detected capacity change from 0 to 512 [ 1803.016056][T32074] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 1803.273839][ T26] audit: type=1800 audit(1725.947:103): pid=32074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.29149" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1803.659506][T32129] loop4: detected capacity change from 0 to 2048 [ 1803.793373][T32129] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1804.045464][T32158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29175'. [ 1804.104049][T32158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29175'. [ 1804.156724][T32158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29175'. [ 1804.201451][T32158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1804.367097][T32174] device bridge11 entered promiscuous mode [ 1804.603627][T32189] netlink: 48 bytes leftover after parsing attributes in process `syz.5.29183'. [ 1805.219446][T32221] netlink: 'syz.5.29192': attribute type 3 has an invalid length. [ 1805.287590][T32221] netlink: 766 bytes leftover after parsing attributes in process `syz.5.29192'. [ 1805.647896][T32239] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1806.134695][T32201] loop4: detected capacity change from 0 to 32768 [ 1806.233297][T32201] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.29186 (32201) [ 1806.334928][T32201] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1806.373757][T32201] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1806.390071][T32281] loop5: detected capacity change from 0 to 512 [ 1806.448570][T32201] BTRFS info (device loop4): trying to use backup root at mount time [ 1806.456707][T32201] BTRFS info (device loop4): setting nodatasum [ 1806.512712][T32201] BTRFS info (device loop4): enabling ssd optimizations [ 1806.519708][T32201] BTRFS info (device loop4): using spread ssd allocation scheme [ 1806.619662][T32201] BTRFS info (device loop4): turning on flush-on-commit [ 1806.626668][T32201] BTRFS info (device loop4): force zlib compression, level 3 [ 1806.641765][T32281] EXT4-fs (loop5): Ignoring removed oldalloc option [ 1806.684234][T32201] BTRFS info (device loop4): using free space tree [ 1806.694683][T32201] BTRFS info (device loop4): has skinny extents [ 1806.723507][T32281] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,block_validity,grpid,oldalloc,,errors=continue. Quota mode: writeback. [ 1807.114069][T32330] loop5: detected capacity change from 0 to 256 [ 1807.315250][T32330] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 1807.873578][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1808.105780][T32372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29226'. [ 1808.105816][T32372] netlink: 'syz.3.29226': attribute type 1 has an invalid length. [ 1808.815819][T32396] netlink: 'syz.5.29233': attribute type 1 has an invalid length. [ 1809.371295][T32434] AppArmor: change_hat: Invalid input '0x000000000000' [ 1809.705076][T32462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29257'. [ 1809.733008][T32466] loop5: detected capacity change from 0 to 164 [ 1809.921416][T32476] CIFS mount error: No usable UNC path provided in device string! [ 1809.921416][T32476] [ 1810.002714][T32476] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1810.196391][T32502] loop4: detected capacity change from 0 to 512 [ 1810.212766][T32504] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.29269'. [ 1810.252454][T32504] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1810.321941][T32490] loop5: detected capacity change from 0 to 4096 [ 1810.344814][T32502] EXT4-fs (loop4): Ignoring removed bh option [ 1810.361365][T32502] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1810.392270][T32502] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1810.468323][T32502] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1810.488719][T32502] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1810.513471][T32502] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 1810.566119][T32525] loop0: detected capacity change from 0 to 1024 [ 1810.598323][T32502] EXT4-fs warning (device loop4): ext4_group_extend:1852: can't read last block, resize aborted [ 1810.803793][T32525] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 1810.996045][T32554] tipc: Trying to set illegal importance in message [ 1811.248739][T32568] loop0: detected capacity change from 0 to 8 [ 1811.257984][T32574] netlink: 'syz.1.29286': attribute type 12 has an invalid length. [ 1811.318909][T32574] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.29286'. [ 1811.560292][T32596] dlm: non-version read from control device 4096 [ 1812.360284][ T4678] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1812.593753][T32674] netlink: 148 bytes leftover after parsing attributes in process `syz.1.29321'. [ 1812.619947][T32674] netlink: 'syz.1.29321': attribute type 2 has an invalid length. [ 1812.649007][ T4678] usb 1-1: Using ep0 maxpacket: 8 [ 1812.777606][ T4678] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 1812.799237][ T4678] usb 1-1: config 127 has no interface number 1 [ 1812.805561][ T4678] usb 1-1: config 127 interface 0 altsetting 10 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1812.846413][ T4678] usb 1-1: config 127 interface 171 has no altsetting 0 [ 1812.858472][T32617] loop4: detected capacity change from 0 to 32768 [ 1812.869960][ T4678] usb 1-1: config 127 interface 0 has no altsetting 0 [ 1813.014086][T32617] (syz.4.29300,32617,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1813.033810][T32704] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1813.057486][ T4678] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1813.062796][T32617] (syz.4.29300,32617,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1813.068096][ T4678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.139294][ T4678] usb 1-1: Product: syz [ 1813.150112][ T4678] usb 1-1: Manufacturer: syz [ 1813.162106][T11397] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1813.180846][ T4678] usb 1-1: SerialNumber: syz [ 1813.189361][T32617] JBD2: Ignoring recovery information on journal [ 1813.371519][T32617] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1813.569802][ T4678] xr_serial 1-1:127.171: xr_serial converter detected [ 1813.601400][ T4678] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1813.607920][ T4678] xr_serial: probe of ttyUSB0 failed with error -71 [ 1813.677845][ T4678] usb 1-1: USB disconnect, device number 117 [ 1813.718104][T11397] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1813.721680][ T4639] ocfs2: Unmounting device (7,4) on (node local) [ 1813.732504][ T4678] xr_serial 1-1:127.171: device disconnected [ 1813.740049][T11397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.771763][T11397] usb 4-1: Product: syz [ 1813.780736][T11397] usb 4-1: Manufacturer: syz [ 1813.794079][T11397] usb 4-1: SerialNumber: syz [ 1813.814937][T11397] usb 4-1: config 0 descriptor?? [ 1813.871510][T11397] hub 4-1:0.0: bad descriptor, ignoring hub [ 1813.878474][T11397] hub: probe of 4-1:0.0 failed with error -5 [ 1813.905312][T11397] usbsevseg 4-1:0.0: USB 7 Segment device now attached [ 1814.083420][ T317] loop5: detected capacity change from 0 to 256 [ 1814.252675][T11397] usb 4-1: USB disconnect, device number 15 [ 1814.302817][T11397] usbsevseg 4-1:0.0: USB 7 Segment now disconnected [ 1814.411746][ T345] loop1: detected capacity change from 0 to 128 [ 1814.496135][ T345] affs: No valid root block on device loop1 [ 1814.552833][ T365] sctp: [Deprecated]: syz.5.29361 (pid 365) Use of int in max_burst socket option. [ 1814.552833][ T365] Use struct sctp_assoc_value instead [ 1814.765700][T31326] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1815.065099][T31326] usb 5-1: Using ep0 maxpacket: 8 [ 1815.193422][T31326] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1815.204498][T31326] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1815.234329][T31326] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1815.289382][T31326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 214, changing to 11 [ 1815.343293][T31326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49299, setting to 1024 [ 1815.428534][ T425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29381'. [ 1815.556956][T31330] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1815.578461][T31326] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1815.587581][T31326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.630550][T31326] usb 5-1: Product: syz [ 1815.644510][T31326] usb 5-1: Manufacturer: syz [ 1815.669726][T31326] usb 5-1: SerialNumber: syz [ 1815.696965][T31326] usb 5-1: config 0 descriptor?? [ 1815.771286][T31326] hub 5-1:0.0: bad descriptor, ignoring hub [ 1815.777266][T31326] hub: probe of 5-1:0.0 failed with error -5 [ 1815.804813][T31326] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input124 [ 1815.834606][T31330] usb 2-1: Using ep0 maxpacket: 32 [ 1815.921195][ T459] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2 [ 1815.973159][ T465] loop5: detected capacity change from 0 to 128 [ 1816.024768][T32392] usb 5-1: USB disconnect, device number 89 [ 1816.068717][ T465] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1816.102173][T31330] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice= 1.f3 [ 1816.111307][T31330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 1816.142468][T31330] usb 2-1: SerialNumber: syz [ 1816.198893][ T465] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 1816.398719][ T506] netlink: 32 bytes leftover after parsing attributes in process `syz.3.29402'. [ 1816.429944][ T506] netlink: 32 bytes leftover after parsing attributes in process `syz.3.29402'. [ 1816.489318][T31330] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1816.507986][ T496] loop0: detected capacity change from 0 to 4096 [ 1816.523149][T31330] dvb_usb_af9015: probe of 2-1:253.0 failed with error -22 [ 1816.549142][ T496] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1816.573491][T31330] usb 2-1: USB disconnect, device number 4 [ 1816.935601][T11397] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1817.331284][T11397] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.341480][T11397] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1817.403551][T11397] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1817.438795][T11397] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1817.458615][T11397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.479615][T11397] usb 6-1: config 0 descriptor?? [ 1817.785465][T11397] usb 6-1: USB disconnect, device number 96 [ 1818.050273][ T722] netlink: 'syz.4.29425': attribute type 6 has an invalid length. [ 1818.670314][ T835] MTD: Couldn't look up '': -22 [ 1818.801501][ T846] netlink: 16 bytes leftover after parsing attributes in process `syz.5.29443'. [ 1818.849195][ T846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29443'. [ 1819.052445][ T860] netlink: 2 bytes leftover after parsing attributes in process `syz.4.29448'. [ 1819.281249][ T866] xt_CT: No such helper "netbios-ns" [ 1819.385987][ T875] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1819.417772][ T881] SET target dimension over the limit! [ 1819.589971][ T829] loop0: detected capacity change from 0 to 32768 [ 1819.611308][ T888] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1819.662414][ T829] (syz.0.29438,829,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1819.714286][ T836] loop1: detected capacity change from 0 to 32768 [ 1819.734161][ T829] (syz.0.29438,829,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1819.796952][ T829] JBD2: Ignoring recovery information on journal [ 1819.887437][ T829] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1819.937046][ T836] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1819.978820][ T836] JBD2: Ignoring recovery information on journal [ 1820.057340][T31330] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1820.150388][ T836] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1820.253202][ T4632] ocfs2: Unmounting device (7,0) on (node local) [ 1820.331123][T31330] usb 6-1: Using ep0 maxpacket: 8 [ 1820.413757][ T4636] ocfs2: Unmounting device (7,1) on (node local) [ 1820.495659][T31330] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1820.730967][T31330] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1820.751622][T31330] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1820.809229][T31330] usb 6-1: Product: syz [ 1820.825779][T31330] usb 6-1: Manufacturer: syz [ 1820.857415][T31330] usb 6-1: SerialNumber: syz [ 1821.168990][T31330] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 1821.181404][T31330] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1821.189258][T31330] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1821.226858][T31330] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1821.265111][T32392] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1821.367531][ T933] loop4: detected capacity change from 0 to 32768 [ 1821.404333][T31330] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 1821.415833][T31330] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1821.435402][T31330] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1821.498416][ T933] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 1821.498416][ T933] [ 1821.513521][T31330] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1821.518091][ T991] loop0: detected capacity change from 0 to 128 [ 1821.539660][T31330] usb 6-1: USB disconnect, device number 97 [ 1821.547110][T32392] usb 4-1: Using ep0 maxpacket: 16 [ 1821.561599][T31330] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1821.576909][T31330] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1821.588154][T31330] visor 6-1:1.0: device disconnected [ 1821.693762][T32392] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1821.703324][T32392] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.775947][T32392] usb 4-1: config 0 has no interface number 0 [ 1821.970996][T32392] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1821.995514][T32392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 1822.039146][T32392] usb 4-1: Product: syz [ 1822.061646][T32392] usb 4-1: Manufacturer: syz [ 1822.088280][T32392] usb 4-1: SerialNumber: syz [ 1822.131947][T32392] usb 4-1: config 0 descriptor?? [ 1822.182784][T32392] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 1822.196684][T32392] usb 4-1: No valid video chain found. [ 1822.475391][T32392] usb 4-1: USB disconnect, device number 16 [ 1822.966471][ T1120] delete_channel: no stack [ 1823.256771][ T1145] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1823.338347][ T1152] loop4: detected capacity change from 0 to 1024 [ 1823.610307][ T1152] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1823.631167][ T1152] attempt to access beyond end of device [ 1823.631167][ T1152] loop4: rw=0, want=917506, limit=1024 [ 1823.700535][ T1152] Buffer I/O error on dev loop4, logical block 458752, async page read [ 1823.745317][ T1152] attempt to access beyond end of device [ 1823.745317][ T1152] loop4: rw=0, want=917506, limit=1024 [ 1823.850413][ T1152] Buffer I/O error on dev loop4, logical block 458752, async page read [ 1824.075060][ T1209] netlink: 'syz.0.29539': attribute type 1 has an invalid length. [ 1824.632030][ T1253] netlink: 20 bytes leftover after parsing attributes in process `syz.5.29554'. [ 1825.330487][ T1311] netlink: 'syz.0.29573': attribute type 21 has an invalid length. [ 1825.361554][ T1311] IPv6: NLM_F_CREATE should be specified when creating new route [ 1825.563335][ T1325] QAT: Invalid ioctl 1075883590 [ 1825.568323][ T1325] QAT: Invalid ioctl 1075883590 [ 1825.628686][ T1325] QAT: Invalid ioctl 1075883590 [ 1825.633776][ T1325] QAT: Invalid ioctl 1075883590 [ 1825.671014][ T1325] QAT: Invalid ioctl 1075883590 [ 1825.690855][ T1325] QAT: Invalid ioctl 1075883590 [ 1825.712255][ T1325] QAT: Invalid ioctl 1075883590 [ 1825.730555][ T1325] QAT: Invalid ioctl 1075883590 [ 1825.752173][ T1325] QAT: Invalid ioctl 1075883590 [ 1825.788627][ T1325] QAT: Invalid ioctl 1075883590 [ 1825.865019][ T1343] netlink: 'syz.4.29584': attribute type 10 has an invalid length. [ 1825.932131][ T1343] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.29584'. [ 1825.974183][ T1343] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1826.002700][ T1347] loop5: detected capacity change from 0 to 2048 [ 1826.017526][ T1338] loop0: detected capacity change from 0 to 4096 [ 1826.236113][ T1347] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1826.271474][ T1338] ntfs3: loop0: ino=5, "/" directory corrupted [ 1826.278376][ T1338] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1826.315480][ T1371] netlink: 'syz.3.29592': attribute type 1 has an invalid length. [ 1827.176194][ T1439] [U] ^C [ 1827.296314][ T1446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29614'. [ 1827.350117][ T1449] loop5: detected capacity change from 0 to 16 [ 1827.428184][ T1449] erofs: (device loop5): mounted with root inode @ nid 36. [ 1827.481178][ T1449] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 83 [ 1827.498959][ T1461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29619'. [ 1827.541090][ T1449] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 1827.756774][ T1476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29622'. [ 1827.897141][ T1488] ipt_ECN: cannot use operation on non-tcp rule [ 1827.973530][ T1491] device gtp2 entered promiscuous mode [ 1828.133092][ T976] syz.1.29482 (976): drop_caches: 3 [ 1828.298572][ T1517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29636'. [ 1828.352136][ T1520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29638'. [ 1828.405030][ T1520] IPv6: sit6: Disabled Multicast RS [ 1828.498415][ T1533] device vlan0 entered promiscuous mode [ 1828.658629][ T1548] netlink: 20 bytes leftover after parsing attributes in process `syz.5.29647'. [ 1828.835280][ T1565] overlayfs: missing 'lowerdir' [ 1829.434616][ T1615] netlink: 'syz.4.29670': attribute type 16 has an invalid length. [ 1829.442601][ T1615] netlink: 'syz.4.29670': attribute type 17 has an invalid length. [ 1829.452789][ T1614] netlink: 4568 bytes leftover after parsing attributes in process `syz.0.29671'. [ 1829.461946][ T1618] loop1: detected capacity change from 0 to 512 [ 1829.489789][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wg1: link becomes ready [ 1829.558752][T31313] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured! [ 1829.731257][ T1618] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1829.878995][ T1618] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.29672: corrupted xattr block 33 [ 1829.972170][ T1647] netlink: 'syz.0.29679': attribute type 49 has an invalid length. [ 1830.426595][T11403] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1830.626255][T31313] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured! [ 1830.811364][T11403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1830.826935][T11403] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1830.874730][T11403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1830.913920][T11403] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1830.923944][ T1708] netlink: 256 bytes leftover after parsing attributes in process `syz.4.29697'. [ 1830.960825][T11403] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1830.976825][T11403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.025391][T11403] usb 1-1: config 0 descriptor?? [ 1831.242763][ T1680] loop5: detected capacity change from 0 to 32768 [ 1831.292390][T11403] hdpvr 1-1:0.0: firmware version 0xbb dated ‘ÿOgôoSÛÌà-\âÛÊHü„”Ùkƒ<¸×ãÓ¶ÚJò#/Yûê [ 1831.302955][T11397] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1831.320669][T11403] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 1831.368250][ T1680] (syz.5.29689,1680,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1831.410257][ T1680] (syz.5.29689,1680,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1831.488718][ T26] audit: type=1326 audit(1752.345:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.3.29710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d526f4799 code=0x7ffc0000 [ 1831.527943][T11403] hdpvr 1-1:0.0: device init failed [ 1831.533482][T11403] hdpvr: probe of 1-1:0.0 failed with error -12 [ 1831.544547][ T1680] JBD2: Ignoring recovery information on journal [ 1831.559588][T11397] usb 5-1: Using ep0 maxpacket: 16 [ 1831.610577][T11403] usb 1-1: USB disconnect, device number 118 [ 1831.624740][ T26] audit: type=1326 audit(1752.345:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.3.29710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f9d526f4799 code=0x7ffc0000 [ 1831.646809][ T26] audit: type=1326 audit(1752.345:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1743 comm="syz.3.29710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d526f4799 code=0x7ffc0000 [ 1831.687893][T11397] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 1831.749532][ T1764] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1831.786717][ T1764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1831.793370][ T1680] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1831.819093][ T1680] (syz.5.29689,1680,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1831.891269][T11397] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1831.913573][T11397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.921647][T11397] usb 5-1: Product: syz [ 1831.950017][T11397] usb 5-1: Manufacturer: syz [ 1831.954685][T11397] usb 5-1: SerialNumber: syz [ 1831.999755][T11397] usb 5-1: config 0 descriptor?? [ 1832.028624][ T1713] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1832.072152][ T1680] (syz.5.29689,1680,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 1832.077170][T11397] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 1832.126311][ T1680] (syz.5.29689,1680,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 1832.169961][ T1680] (syz.5.29689,1680,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1832.190040][ T1680] (syz.5.29689,1680,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1832.210545][ T1680] Quota error (device loop5): find_block_dqentry: Can't read quota tree block 6 [ 1832.308772][ T1680] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1832.351509][ T1680] (syz.5.29689,1680,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 1832.390866][T11397] usb 5-1: USB disconnect, device number 90 [ 1832.404446][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 1832.410623][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 1832.438280][T11397] mcba_usb 5-1:0.0 can0: device disconnected [ 1832.505742][T20116] ocfs2: Unmounting device (7,5) on (node local) [ 1833.209988][ T1864] netlink: 'syz.4.29741': attribute type 1 has an invalid length. [ 1833.243121][ T1864] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.29741'. [ 1833.293926][ T1864] netlink: 9 bytes leftover after parsing attributes in process `syz.4.29741'. [ 1833.915085][ T1918] loop1: detected capacity change from 0 to 512 [ 1833.961024][ T1925] IPVS: Error connecting to the multicast addr [ 1834.035515][ T1918] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1834.061396][ T1918] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1834.128611][ T1918] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1834.200993][ T1918] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1834.227082][ T1918] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 1834.235179][ T1918] EXT4-fs (loop1): failed to initialize system zone (-117) [ 1834.242503][ T1918] EXT4-fs (loop1): mount failed [ 1835.092701][ T2020] loop5: detected capacity change from 0 to 512 [ 1835.181138][ T2015] loop1: detected capacity change from 0 to 2048 [ 1835.236136][ T2020] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1835.262103][ T2015] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1835.299240][ T2020] EXT4-fs (loop5): 1 truncate cleaned up [ 1835.375868][ T2020] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000004,user_xattr,max_dir_size_kb=0x0000000000000005,quota,,errors=continue. Quota mode: writeback. [ 1835.625290][ T2051] loop0: detected capacity change from 0 to 128 [ 1835.695836][ T1981] loop4: detected capacity change from 0 to 40427 [ 1835.783810][ T2062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29794'. [ 1835.803640][T11403] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1835.858400][ T1981] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1835.877847][ T1981] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1835.898842][ T1981] F2FS-fs (loop4): invalid crc value [ 1835.930838][ T1981] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 1836.017143][T31313] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1836.099681][ T2077] loop5: detected capacity change from 0 to 2048 [ 1836.173618][ T1981] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1836.182310][ T1981] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1836.236663][ T1981] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 1836.306105][T31313] usb 4-1: Using ep0 maxpacket: 16 [ 1836.370375][T11403] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1836.413210][T11403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.447671][T11403] usb 2-1: Product: syz [ 1836.451920][T11403] usb 2-1: Manufacturer: syz [ 1836.466452][T31313] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1836.478249][T31313] usb 4-1: config 0 has no interface number 0 [ 1836.485291][T11403] usb 2-1: SerialNumber: syz [ 1836.498874][T11403] r8152-cfgselector 2-1: config 0 descriptor?? [ 1836.527953][ T2070] lo speed is unknown, defaulting to 1000 [ 1836.557935][ T2070] bridge0 speed is unknown, defaulting to 1000 [ 1836.658897][T31313] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1836.673943][T31313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.691014][T31313] usb 4-1: Product: syz [ 1836.716942][T31313] usb 4-1: Manufacturer: syz [ 1836.721593][T31313] usb 4-1: SerialNumber: syz [ 1836.772106][T31313] usb 4-1: config 0 descriptor?? [ 1836.865796][T31313] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1836.904171][ T2131] loop5: detected capacity change from 0 to 128 [ 1836.982748][ T2131] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1837.022357][T11403] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1837.028779][T11403] r8152-cfgselector 2-1: bad CDC descriptors [ 1837.068245][T11403] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1837.084579][T11403] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 1837.326204][T31313] gspca_spca1528: reg_w err -71 [ 1837.375103][T31313] spca1528: probe of 4-1:0.1 failed with error -71 [ 1837.390561][T31313] usb 4-1: USB disconnect, device number 17 [ 1837.492681][ T4678] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 1837.575267][ T2188] NILFS (nullb0): couldn't find nilfs on the device [ 1837.654772][ T2190] loop0: detected capacity change from 0 to 1024 [ 1837.844197][T12188] hfsplus: b-tree write err: -5, ino 4 [ 1837.931076][ T4678] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1837.982282][ T4678] usb 5-1: not running at top speed; connect to a high speed hub [ 1838.025993][ T2206] loop5: detected capacity change from 0 to 2048 [ 1838.091295][ T4678] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 1838.099425][ T4678] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1838.115370][ T2219] openvswitch: netlink: Message has 8 unknown bytes. [ 1838.140825][ T4678] usb 5-1: config 17 has no interface number 0 [ 1838.172078][ T4678] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 14129, setting to 64 [ 1838.198316][ T4678] usb 5-1: config 17 interface 8 has no altsetting 0 [ 1838.246286][ T2206] loop5: p1 p2 < > p3 < p5 > p4 [ 1838.251907][ T2206] loop5: partition table partially beyond EOD, truncated [ 1838.279283][ T2206] loop5: p1 size 917504 extends beyond EOD, truncated [ 1838.320042][ T2206] loop5: p2 start 4278190080 is beyond EOD, truncated [ 1838.385512][ T2206] loop5: p4 start 150994949 is beyond EOD, truncated [ 1838.412286][ T4678] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1838.432223][ T4678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.453791][ T2206] loop5: p5 size 917504 extends beyond EOD, truncated [ 1838.464588][ T4678] usb 5-1: Product: syz [ 1838.476276][ T4678] usb 5-1: Manufacturer: syz [ 1838.481179][ T4678] usb 5-1: SerialNumber: syz [ 1838.542582][ T2247] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 1838.602753][ T2250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29838'. [ 1838.725385][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1838.726350][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 1838.737896][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1838.817034][ T2267] loop5: detected capacity change from 0 to 512 [ 1838.884598][ T4678] usb 5-1: selecting invalid altsetting 0 [ 1838.901723][ T2273] netlink: 'syz.0.29843': attribute type 4 has an invalid length. [ 1838.957071][ T4678] usb 5-1: USB disconnect, device number 91 [ 1838.970955][ T2267] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 1839.068008][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1839.083778][ T2296] overlayfs: workdir and upperdir must be separate subtrees [ 1839.095108][ T2267] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #12: comm syz.5.29840: Directory hole found for htree leaf block 0 [ 1839.110019][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1839.119965][ T2267] EXT4-fs (loop5): Remounting filesystem read-only [ 1839.134804][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 1839.214629][ T6607] udevd[6607]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1839.305209][ T2304] xt_socket: unknown flags 0xc [ 1840.278933][ T2367] netlink: 'syz.1.29872': attribute type 1 has an invalid length. [ 1840.344121][ T2367] netlink: 224 bytes leftover after parsing attributes in process `syz.1.29872'. [ 1840.432405][ T2367] nbd: couldn't find a device at index 1024 [ 1840.871486][ T2405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29886'. [ 1840.956481][ T2410] netlink: 68 bytes leftover after parsing attributes in process `syz.3.29888'. [ 1841.276782][T31313] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1841.281999][ T2356] loop5: detected capacity change from 0 to 32768 [ 1841.457651][ T2356] XFS (loop5): invalid logbufs value: 1 [not 2-8] [ 1841.554746][T31313] usb 1-1: Using ep0 maxpacket: 32 [ 1841.687509][ T2459] loop1: detected capacity change from 0 to 2048 [ 1841.704569][T31313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.822054][T31330] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1841.895354][ T2455] lo speed is unknown, defaulting to 1000 [ 1841.907764][T31313] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1841.918208][ T4678] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1841.920711][T31313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.934833][ T2455] bridge0 speed is unknown, defaulting to 1000 [ 1841.939935][T31313] usb 1-1: Product: syz [ 1841.945575][T31313] usb 1-1: Manufacturer: syz [ 1841.966735][T31313] usb 1-1: SerialNumber: syz [ 1841.991904][T31313] usb 1-1: config 0 descriptor?? [ 1842.055103][T31313] usb 1-1: bad CDC descriptors [ 1842.057164][T11403] usb 6-1: new low-speed USB device number 98 using dummy_hcd [ 1842.065198][T31313] usb 1-1: unsupported MDLM descriptors [ 1842.174736][ T4678] usb 5-1: Using ep0 maxpacket: 16 [ 1842.250040][T31330] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 1842.258847][T31330] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1842.298452][T31330] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1842.302034][T10106] usb 1-1: USB disconnect, device number 119 [ 1842.310099][T31330] usb 4-1: config 8 has no interface number 0 [ 1842.314948][ T4678] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 1842.321695][T31330] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1842.344671][ T4678] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 1842.367384][ T4678] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1842.368760][T31330] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1842.376277][ T4678] usb 5-1: config 0 has no interface number 0 [ 1842.398046][ T4678] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1842.408216][ T4678] usb 5-1: config 0 interface 104 has no altsetting 1 [ 1842.453295][T11403] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1842.463525][T11403] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1842.472581][T11403] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.559602][T31313] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1842.591683][ T4678] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1842.600786][ T4678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.609147][ T4678] usb 5-1: Product: syz [ 1842.613304][T31330] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1842.613332][T31330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.613355][T31330] usb 4-1: Product: syz [ 1842.613371][T31330] usb 4-1: Manufacturer: syz [ 1842.613386][T31330] usb 4-1: SerialNumber: syz [ 1842.644072][ T4678] usb 5-1: Manufacturer: syz [ 1842.648872][ T4678] usb 5-1: SerialNumber: syz [ 1842.656387][ T4678] usb 5-1: config 0 descriptor?? [ 1842.699827][ T4678] asix: probe of 5-1:0.104 failed with error -22 [ 1842.773471][T11403] usb 6-1: string descriptor 0 read error: -71 [ 1842.779983][T11403] hub 6-1:32.0: bad descriptor, ignoring hub [ 1842.786509][T11403] hub: probe of 6-1:32.0 failed with error -5 [ 1842.840771][T11403] usb 6-1: USB disconnect, device number 98 [ 1842.935977][T31330] usb 4-1: USB disconnect, device number 18 [ 1842.993989][T31313] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1843.009454][T31313] usb 2-1: config 0 has no interface number 0 [ 1843.036318][T31313] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1843.073450][T31313] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1843.092970][T31326] usb 5-1: USB disconnect, device number 92 [ 1843.269275][ T2573] device ip6tnl7 entered promiscuous mode [ 1843.281969][T31313] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1843.310725][T31313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.319890][T31313] usb 2-1: Product: syz [ 1843.324083][T31313] usb 2-1: Manufacturer: syz [ 1843.328712][T31313] usb 2-1: SerialNumber: syz [ 1843.348574][T31313] usb 2-1: config 0 descriptor?? [ 1843.394268][ T2508] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 1843.426842][T31313] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1843.460060][T31313] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1843.700955][ T2621] loop5: detected capacity change from 0 to 16 [ 1843.741267][ T2625] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 1843.788882][ T2625] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 1843.789027][ T2621] erofs: (device loop5): mounted with root inode @ nid 36. [ 1843.874999][T31313] usb 2-1: USB disconnect, device number 6 [ 1843.907886][T31313] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1843.946509][ T2621] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1843.953912][T31313] cyberjack 2-1:0.69: device disconnected [ 1844.077517][ T2621] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 1844.126170][ T2621] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 1844.300653][ T2669] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1844.409740][ T4678] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1844.441068][ T2676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29937'. [ 1844.618899][ T2692] dlm: no local IP address has been set [ 1844.676298][ T2692] dlm: cannot start dlm midcomms -107 [ 1844.793998][ T4678] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1844.803117][ T4678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.854882][ T4678] usb 5-1: config 0 descriptor?? [ 1844.956305][ T4678] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1845.404951][ T4678] gspca_cpia1: usb_control_msg 03, error -71 [ 1845.424540][ T4678] gspca_cpia1: usb_control_msg 01, error -71 [ 1845.431892][ T4678] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1845.456626][T11403] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1845.483096][ T4678] usb 5-1: USB disconnect, device number 93 [ 1845.590000][ T2771] loop5: detected capacity change from 0 to 1024 [ 1845.721603][T11403] usb 1-1: Using ep0 maxpacket: 32 [ 1845.778548][ T2771] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: writeback. [ 1845.884407][T11403] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1845.916417][T11403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1845.962910][T11403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1846.162464][T11403] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1846.171556][T11403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.243984][T11403] usb 1-1: Product: syz [ 1846.269087][T11403] usb 1-1: Manufacturer: syz [ 1846.273732][T11403] usb 1-1: SerialNumber: syz [ 1846.333749][T11403] usb 1-1: config 0 descriptor?? [ 1846.346958][ T2833] loop1: detected capacity change from 0 to 164 [ 1846.450154][ T2848] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 1846.676771][T11403] usb 1-1: USB disconnect, device number 120 [ 1846.892328][ T2877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1847.066283][ T2893] netlink: 'syz.3.29993': attribute type 1 has an invalid length. [ 1847.594674][T11403] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1847.669513][ T2933] loop1: detected capacity change from 0 to 8192 [ 1847.824645][ T2949] loop5: detected capacity change from 0 to 4096 [ 1847.934211][ T2933] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1847.947423][ T2933] REISERFS (device loop1): using ordered data mode [ 1847.953955][ T2933] reiserfs: using flush barriers [ 1847.972361][ T2933] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1848.010448][ T2949] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1848.076240][ T2949] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1848.097163][ T2949] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1848.115419][ T2933] REISERFS (device loop1): checking transaction log (loop1) [ 1848.135623][ T2933] REISERFS (device loop1): Using r5 hash to sort names [ 1848.161069][ T2933] REISERFS (device loop1): using 3.5.x disk format [ 1848.161307][T11403] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1848.172414][ T2933] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1848.211071][T11403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.237206][ T2949] ntfs: volume version 3.1. [ 1848.267960][T11403] usb 5-1: Product: syz [ 1848.278907][T11403] usb 5-1: Manufacturer: syz [ 1848.284805][ T2949] ntfs: (device loop5): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1848.309252][T11403] usb 5-1: SerialNumber: syz [ 1848.321522][ T2949] ntfs: (device loop5): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1848.393913][ T2949] ntfs: (device loop5): load_and_init_quota(): Failed to load $Quota/$Q index. [ 1848.397200][ T2967] netlink: 76 bytes leftover after parsing attributes in process `syz.0.30010'. [ 1848.407896][T11403] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1848.474279][ T2949] ntfs: (device loop5): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 1848.551316][ T2949] ntfs: (device loop5): ntfs_nlstoucs(): Name using character set utf8 contains characters that cannot be converted to Unicode. [ 1848.569303][ T2949] ntfs: (device loop5): ntfs_lookup(): Failed to convert name to Unicode. [ 1848.578189][ T2974] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 1848.848669][ T2992] netlink: 224 bytes leftover after parsing attributes in process `syz.5.30014'. [ 1849.114440][ T3018] loop1: detected capacity change from 0 to 16 [ 1849.155742][T11403] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1849.174959][ T3018] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1849.262285][T10106] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1849.428283][ T3039] loop1: detected capacity change from 0 to 8 [ 1849.566035][ T3039] unable to read fragment index table [ 1849.602831][T11397] usb 5-1: USB disconnect, device number 94 [ 1849.647244][T10106] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.664649][T10106] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1849.675578][T10106] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1849.775522][ T4566] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1849.871687][T10106] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1849.890292][T10106] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.904969][T10106] usb 6-1: Product: syz [ 1849.909192][T10106] usb 6-1: Manufacturer: syz [ 1849.936418][T10106] usb 6-1: SerialNumber: syz [ 1850.133728][ T3095] loop0: detected capacity change from 0 to 64 [ 1850.171103][ T4566] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.187650][ T4566] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1850.246120][ T4566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.277699][T11403] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1850.285975][T11403] ath9k_htc: Failed to initialize the device [ 1850.292509][T10106] usb 6-1: 0:2 : does not exist [ 1850.308830][T11397] usb 5-1: ath9k_htc: USB layer deinitialized [ 1850.322741][ T4566] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1850.342634][T10106] usb 6-1: USB disconnect, device number 99 [ 1850.455681][ T3134] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1850.637501][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1850.724972][ T3156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30060'. [ 1850.769540][ T3156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30060'. [ 1850.801631][ T3156] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1850.905444][ T3169] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 1850.996312][ T3174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30066'. [ 1851.090221][T31313] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1851.349858][ T3199] netlink: 'syz.5.30073': attribute type 1 has an invalid length. [ 1851.507433][T31313] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1851.522897][ T4566] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1851.537609][ T3168] loop0: detected capacity change from 0 to 32768 [ 1851.545170][T31313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.561490][T31313] usb 5-1: config 0 descriptor?? [ 1851.742270][ T4566] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1851.750510][ T4566] stv0680 4-1:4.0: last error: 70, command = 0x88 [ 1851.772914][ T4566] usb 4-1: USB disconnect, device number 19 [ 1851.933549][ T3237] loop5: detected capacity change from 0 to 2048 [ 1851.977253][ T3237] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1852.083248][T31313] usb 5-1: Cannot set MAC address [ 1852.088593][T31313] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 1852.113154][ T3244] xt_connbytes: Forcing CT accounting to be enabled [ 1852.140484][T31313] usb 5-1: USB disconnect, device number 95 [ 1852.397399][ T3263] sctp: [Deprecated]: syz.5.30090 (pid 3263) Use of int in max_burst socket option deprecated. [ 1852.397399][ T3263] Use struct sctp_assoc_value instead [ 1852.437326][ T3269] netlink: 'syz.1.30091': attribute type 5 has an invalid length. [ 1852.534537][ T3264] loop0: detected capacity change from 0 to 4096 [ 1852.599119][ T3264] ntfs3: loop0: ino=3, Correct links count -> 2. [ 1852.716337][ T3264] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1852.922095][ T3302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30101'. [ 1852.970876][ T3305] sctp: [Deprecated]: syz.1.30102 (pid 3305) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1852.970876][ T3305] Use struct sctp_sack_info instead [ 1853.282115][ T3326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30110'. [ 1853.327225][ T3326] netlink: 76 bytes leftover after parsing attributes in process `syz.3.30110'. [ 1853.516585][ T3355] loop1: detected capacity change from 0 to 256 [ 1853.572244][ T3355] exfat: Deprecated parameter 'utf8' [ 1853.623814][T10106] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1853.669452][ T3355] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1853.752046][ T4566] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1853.891141][T10106] usb 5-1: Using ep0 maxpacket: 8 [ 1854.020406][T10106] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1854.030493][ T4566] usb 4-1: Using ep0 maxpacket: 32 [ 1854.055011][T10106] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1854.094988][T10106] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1854.158548][ T4566] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 26, changing to 7 [ 1854.297403][T10106] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1854.306504][T10106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.329864][T10106] usb 5-1: Product: syz [ 1854.334077][T10106] usb 5-1: Manufacturer: syz [ 1854.338694][T10106] usb 5-1: SerialNumber: syz [ 1854.356847][ T4566] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 1854.404031][ T4566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.412079][ T4566] usb 4-1: Product: syz [ 1854.444691][ T4566] usb 4-1: Manufacturer: syz [ 1854.463869][ T4566] usb 4-1: SerialNumber: syz [ 1854.491150][T10106] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 1854.581790][ T3418] loop1: detected capacity change from 0 to 4096 [ 1854.684840][ T3418] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1854.764162][ T3448] loop0: detected capacity change from 0 to 64 [ 1854.774137][ T3418] ntfs3: loop1: failed to convert "c46c" to cp1250 [ 1854.781686][T31330] usb 5-1: USB disconnect, device number 96 [ 1854.799801][ T4566] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1854.861224][ T4566] usb 4-1: USB disconnect, device number 20 [ 1854.884112][ T3448] Trying to free block not in datazone [ 1854.964687][ T3476] loop5: detected capacity change from 0 to 1024 [ 1855.029159][ T3483] netlink: 'syz.1.30153': attribute type 21 has an invalid length. [ 1855.088496][ T3476] EXT4-fs (loop5): Ignoring removed bh option [ 1855.094689][ T3476] EXT4-fs (loop5): inline encryption not supported [ 1855.135358][ T3476] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 1855.238436][ T3476] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 2: comm syz.5.30149: lblock 2 mapped to illegal pblock 2 (length 1) [ 1855.288888][ T3476] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1855.314306][ T3476] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 48: comm syz.5.30149: lblock 0 mapped to illegal pblock 48 (length 1) [ 1855.408932][ T3476] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1855.431439][ T3476] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.30149: Failed to acquire dquot type 0 [ 1855.474600][ T3476] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 1855.504789][ T3476] EXT4-fs error (device loop5): ext4_evict_inode:282: inode #11: comm syz.5.30149: mark_inode_dirty error [ 1855.557127][ T3476] EXT4-fs warning (device loop5): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 1855.622884][ T3476] EXT4-fs (loop5): 1 orphan inode deleted [ 1855.628673][ T3476] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 1855.655689][T20016] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1855.702447][ T3530] loop1: detected capacity change from 0 to 2048 [ 1855.749661][T20016] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1855.769750][T20016] EXT4-fs error (device loop5): ext4_release_dquot:6270: comm kworker/u4:1: Failed to release dquot type 0 [ 1855.807565][ T3530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1855.848104][ T3476] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 1: comm syz.5.30149: lblock 1 mapped to illegal pblock 1 (length 1) [ 1855.923118][ T3530] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 1856.007125][ T3476] Quota error (device loop5): find_next_id: Can't read quota tree block 1 [ 1856.094195][ T3558] netlink: 11 bytes leftover after parsing attributes in process `syz.4.30171'. [ 1856.103378][ T3558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30171'. [ 1856.123130][T20116] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1856.252909][T20116] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 1856.294969][T20116] EXT4-fs error (device loop5): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 1856.394507][ T3581] netlink: 200 bytes leftover after parsing attributes in process `syz.3.30181'. [ 1856.701799][ T3593] loop5: detected capacity change from 0 to 8192 [ 1856.791103][ T3593] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1856.825665][ T3627] loop0: detected capacity change from 0 to 1024 [ 1856.833691][ T3593] REISERFS (device loop5): using ordered data mode [ 1856.840222][ T3593] reiserfs: using flush barriers [ 1856.861053][ T3593] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1856.878498][T10106] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1857.028756][ T3593] REISERFS (device loop5): checking transaction log (loop5) [ 1857.105872][ T3593] REISERFS (device loop5): Using r5 hash to sort names [ 1857.132900][ T3593] REISERFS (device loop5): using 3.5.x disk format [ 1857.161505][ T3593] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1857.256829][ T3657] device bridge_slave_1 left promiscuous mode [ 1857.274167][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.303918][ T3657] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1857.322566][T10106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1857.326868][ T3659] loop4: detected capacity change from 0 to 512 [ 1857.347915][T10106] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1857.383139][T10106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1857.416075][T10106] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1857.482815][T10106] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1857.502782][T10106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.528148][T10106] usb 4-1: config 0 descriptor?? [ 1857.547615][ T3659] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noload,data_err=ignore,debug_want_extra_isize=0x0000000000000010,,errors=continue. Quota mode: none. [ 1857.804385][T10106] hdpvr 4-1:0.0: firmware version 0xd dated 8°mPª{, [ 1857.804385][T10106] #ðãpó⊻’lôEÈ¥£]Ô +±aV@g_C.ÏÁ«r‡9 [ 1858.004632][ T3691] loop0: detected capacity change from 0 to 2048 [ 1858.011260][ T3695] netlink: 'syz.1.30213': attribute type 24 has an invalid length. [ 1858.060151][T10106] hdpvr 4-1:0.0: device init failed [ 1858.065460][T10106] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1858.112759][T10106] usb 4-1: USB disconnect, device number 21 [ 1858.162592][ T3691] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1858.227255][ T3715] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1858.273525][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1858.288979][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1858.346708][ T3691] Remounting filesystem read-only [ 1858.358334][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1858.380114][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1858.402271][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1858.424936][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1858.464678][ T3726] netlink: 'syz.1.30220': attribute type 3 has an invalid length. [ 1858.471797][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1858.559030][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1858.626667][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1858.678158][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1858.735419][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1858.816606][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1858.879003][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1858.922140][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1858.987361][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1859.030540][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1859.075629][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1859.104508][ T3768] netlink: 'syz.5.30234': attribute type 2 has an invalid length. [ 1859.118464][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1859.139029][ T3768] netlink: 132 bytes leftover after parsing attributes in process `syz.5.30234'. [ 1859.149828][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1859.172215][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1859.214870][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1859.246689][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1859.279554][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1859.324271][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1859.372261][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1859.396696][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1859.417566][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1859.484569][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1859.546155][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1859.567490][T10106] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1859.567837][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1859.608907][ T3798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.30243'. [ 1859.628481][ T3691] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 1859.694435][ T3691] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1859.707361][ T26] audit: type=1800 audit(1778.744:107): pid=3691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30212" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1859.834574][T10106] usb 5-1: Using ep0 maxpacket: 16 [ 1859.963261][T10106] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1859.996275][T10106] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.027265][T10106] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1860.059079][T31330] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1860.251843][T10106] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1860.260943][T10106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.292632][T10106] usb 5-1: Product: syz [ 1860.294369][T31313] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1860.303783][T10106] usb 5-1: Manufacturer: syz [ 1860.323338][T10106] usb 5-1: SerialNumber: syz [ 1860.337455][T10106] usb 5-1: config 0 descriptor?? [ 1860.371206][ T3845] loop5: detected capacity change from 0 to 4096 [ 1860.418601][ T3845] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1860.487050][T31330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1860.505250][T31330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1860.529473][T31330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1860.549998][T31330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1860.579142][T31330] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1860.588801][T31313] usb 1-1: Using ep0 maxpacket: 16 [ 1860.634796][T31330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.656212][T32392] usb 5-1: USB disconnect, device number 97 [ 1860.665648][T20116] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 1860.688512][T31330] usb 2-1: config 0 descriptor?? [ 1860.699373][T20116] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 1860.722495][T20116] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1860.752783][T31313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1860.783336][T31313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1860.796357][T31313] usb 1-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00 [ 1860.813958][T31313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.859791][T31313] usb 1-1: config 0 descriptor?? [ 1860.938606][T31313] hub 1-1:0.0: USB hub found [ 1860.999924][T31330] hdpvr 2-1:0.0: firmware version 0x8 dated —jl;™S11´Ô [ 1861.048640][ T3894] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.30282'. [ 1861.171215][T31313] hub 1-1:0.0: 7 ports detected [ 1861.192412][T31313] hub 1-1:0.0: insufficient power available to use all downstream ports [ 1861.235107][T31330] hdpvr 2-1:0.0: device init failed [ 1861.240415][T31330] hdpvr: probe of 2-1:0.0 failed with error -12 [ 1861.289284][ T3908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.30276'. [ 1861.296004][T31330] usb 2-1: USB disconnect, device number 7 [ 1861.388975][ T3921] netlink: 'syz.4.30279': attribute type 32 has an invalid length. [ 1861.397674][T31313] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1861.404096][T31313] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1861.482497][T31313] usb 1-1: USB disconnect, device number 121 [ 1861.534797][ T3934] xt_TCPMSS: Only works on TCP SYN packets [ 1861.629465][ T3942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1861.748537][ T3948] netlink: 420 bytes leftover after parsing attributes in process `syz.5.30287'. [ 1862.191508][ T3990] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1862.257950][ T4000] netlink: 64 bytes leftover after parsing attributes in process `syz.5.30302'. [ 1862.670618][ T4038] sctp: [Deprecated]: syz.1.30314 (pid 4038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1862.670618][ T4038] Use struct sctp_sack_info instead [ 1862.850064][ T4052] x_tables: unsorted entry at hook 3 [ 1862.872137][ T3971] orangefs_mount: mount request failed with -4 [ 1863.250840][ T4087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.30332'. [ 1863.309066][ T4087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.30332'. [ 1863.433502][ T4095] loop0: detected capacity change from 0 to 1764 [ 1863.461311][ T4079] loop5: detected capacity change from 0 to 4096 [ 1863.591250][ T4079] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1863.611363][ T4079] ntfs3: loop5: Failed to load $MFT. [ 1863.700347][ T4111] dlm: dev_write: no op 0 74000000000000 [ 1864.692516][ T4181] netlink: 'syz.1.30358': attribute type 5 has an invalid length. [ 1864.721732][ T4181] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.30358'. [ 1864.923428][T10106] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 1865.318725][T10106] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 1865.331749][T10106] usb 1-1: config 0 has no interface number 0 [ 1865.339751][ T4231] netlink: 80 bytes leftover after parsing attributes in process `syz.5.30374'. [ 1865.352328][T10106] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1865.364737][T10106] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1865.382078][T10106] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1865.416666][T10106] usb 1-1: config 0 interface 11 has no altsetting 0 [ 1865.442180][T10106] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1865.470127][T10106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.499996][ T4242] loop5: detected capacity change from 0 to 128 [ 1865.505255][T10106] usb 1-1: config 0 descriptor?? [ 1865.543395][ T4173] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1865.550655][ T4173] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1865.608734][T10106] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 1865.615327][ T4242] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1865.617162][T10106] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 1865.678104][ T4242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1865.679590][T10106] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 1865.742557][T10106] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 1865.763397][ T4262] loop4: detected capacity change from 0 to 128 [ 1865.771497][T10106] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 1865.789212][T10106] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 1865.816450][T10106] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 1865.830062][T10106] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1865.839925][T10106] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 1865.853809][T10106] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 1865.868378][T10106] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 1865.903855][ T4262] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 1865.909859][T10106] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 1865.919766][ T4262] FAT-fs (loop4): Filesystem has been set read-only [ 1865.943333][T10106] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 1865.962393][T10106] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 1865.973516][T10106] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1865.988064][T10106] usb 1-1: USB disconnect, device number 122 [ 1866.012125][T11397] kernel write not supported for file /audio (pid: 11397 comm: kworker/1:12) [ 1866.068289][T10106] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1866.132702][T10106] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1866.202696][T10106] keyspan 1-1:0.11: device disconnected [ 1866.533089][ T4331] program syz.4.30400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1866.704183][ T4341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30403'. [ 1866.839685][T10106] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1867.114026][ T4369] loop5: detected capacity change from 0 to 512 [ 1867.148545][ T4368] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1867.183861][ T4329] loop1: detected capacity change from 0 to 32768 [ 1867.247497][ T4329] JBD2: Ignoring recovery information on journal [ 1867.254255][T10106] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1867.294330][T10106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.344266][T10106] usb 4-1: config 0 descriptor?? [ 1867.375536][ T4369] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 1867.392498][ T4369] System zones: 0-2, 18-18, 34-34 [ 1867.406438][ T4369] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #3: comm syz.5.30411: corrupted inode contents [ 1867.422116][ T4369] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #3: comm syz.5.30411: mark_inode_dirty error [ 1867.442615][T10106] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1867.452767][ T4329] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1867.485379][ T4369] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #3: comm syz.5.30411: corrupted inode contents [ 1867.530541][ T4369] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.30411: mark_inode_dirty error [ 1867.564119][ T4329] (syz.1.30398,4329,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 1867.597440][ T4369] Quota error (device loop5): write_blk: dquota write failed [ 1867.605410][ T4369] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1867.615813][ T4369] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.30411: Failed to acquire dquot type 0 [ 1867.661652][ T4329] (syz.1.30398,4329,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 1867.689593][ T4369] EXT4-fs (loop5): 1 orphan inode deleted [ 1867.696388][ T4369] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1867.708722][ T4329] (syz.1.30398,4329,1):ocfs2_mknod:298 ERROR: status = -2 [ 1867.716730][ T4329] (syz.1.30398,4329,1):ocfs2_mknod:502 ERROR: status = -2 [ 1867.734540][ T4329] (syz.1.30398,4329,1):ocfs2_create:676 ERROR: status = -2 [ 1867.789787][ T4409] loop4: detected capacity change from 0 to 512 [ 1867.815756][ T4636] ocfs2: Unmounting device (7,1) on (node local) [ 1867.891324][ T4409] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1867.895171][T10106] gspca_spca508: reg_read err -71 [ 1867.930891][ T4409] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.30420: invalid indirect mapped block 256 (level 2) [ 1867.995970][ T4409] EXT4-fs (loop4): 2 truncates cleaned up [ 1868.023144][T10106] gspca_spca508: reg_read err -71 [ 1868.049761][ T4409] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1868.082922][T10106] gspca_spca508: reg_read err -71 [ 1868.102665][ T4409] [ 1868.105039][ T4409] ====================================================== [ 1868.112067][ T4409] WARNING: possible circular locking dependency detected [ 1868.119101][ T4409] syzkaller #0 Not tainted [ 1868.123563][ T4409] ------------------------------------------------------ [ 1868.130111][T10106] gspca_spca508: reg_read err -71 [ 1868.130583][ T4409] syz.4.30420/4409 is trying to acquire lock: [ 1868.130596][ T4409] ffff8880291414b8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 1868.151435][ T4409] [ 1868.151435][ T4409] but task is already holding lock: [ 1868.155090][T10106] gspca_spca508: reg write: error -71 [ 1868.158798][ T4409] ffff88814ce00bd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 1868.174253][ T4409] [ 1868.174253][ T4409] which lock already depends on the new lock. [ 1868.174253][ T4409] [ 1868.179068][T10106] spca508: probe of 4-1:0.0 failed with error -71 [ 1868.184661][ T4409] [ 1868.184661][ T4409] the existing dependency chain (in reverse order) is: [ 1868.184671][ T4409] [ 1868.184671][ T4409] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 1868.184705][ T4409] percpu_down_read+0x46/0x1b0 [ 1868.184730][ T4409] ext4_writepages+0x20f/0x2df0 [ 1868.205284][T10106] usb 4-1: USB disconnect, device number 22 [ 1868.208567][ T4409] do_writepages+0x476/0x6e0 [ 1868.208596][ T4409] __writeback_single_inode+0x153/0xda0 [ 1868.236293][ T4409] writeback_single_inode+0x3cb/0x8e0 [ 1868.242215][ T4409] write_inode_now+0x23b/0x2c0 [ 1868.247523][ T4409] iput+0x5ab/0x8a0 [ 1868.251875][ T4409] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 1868.257800][ T4409] ext4_xattr_block_set+0x4fd/0x2d20 [ 1868.263627][ T4409] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 1868.269980][ T4409] __ext4_expand_extra_isize+0x301/0x3e0 [ 1868.276150][ T4409] __ext4_mark_inode_dirty+0x469/0x700 [ 1868.282151][ T4409] ext4_evict_inode+0xa8d/0x1090 [ 1868.287631][ T4409] evict+0x4c9/0x8d0 [ 1868.292077][ T4409] ext4_orphan_cleanup+0xad2/0x1320 [ 1868.297817][ T4409] ext4_fill_super+0x8e25/0x95a0 [ 1868.303298][ T4409] mount_bdev+0x287/0x3c0 [ 1868.308175][ T4409] legacy_get_tree+0xe6/0x180 [ 1868.313394][ T4409] vfs_get_tree+0x88/0x270 [ 1868.318329][ T4409] do_new_mount+0x24a/0xa40 [ 1868.323354][ T4409] __se_sys_mount+0x2e3/0x3d0 [ 1868.328563][ T4409] do_syscall_64+0x4c/0xa0 [ 1868.333495][ T4409] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1868.339917][ T4409] [ 1868.339917][ T4409] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 1868.347462][ T4409] __lock_acquire+0x2c42/0x7d10 [ 1868.352831][ T4409] lock_acquire+0x19e/0x400 [ 1868.357866][ T4409] down_write+0x38/0x60 [ 1868.362551][ T4409] ext4_destroy_inline_data+0x24/0xe0 [ 1868.368437][ T4409] ext4_writepages+0x670/0x2df0 [ 1868.373805][ T4409] do_writepages+0x476/0x6e0 [ 1868.378910][ T4409] filemap_fdatawrite_wbc+0x1eb/0x240 [ 1868.384795][ T4409] file_write_and_wait_range+0x14d/0x220 [ 1868.390940][ T4409] ext4_sync_file+0x1ff/0xae0 [ 1868.396169][ T4409] ext4_buffered_write_iter+0x338/0x3b0 [ 1868.402225][ T4409] ext4_file_write_iter+0x74d/0x1700 [ 1868.408028][ T4409] vfs_write+0x745/0xd60 [ 1868.412795][ T4409] __x64_sys_pwrite64+0x19a/0x220 [ 1868.418329][ T4409] do_syscall_64+0x4c/0xa0 [ 1868.423257][ T4409] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1868.429665][ T4409] [ 1868.429665][ T4409] other info that might help us debug this: [ 1868.429665][ T4409] [ 1868.439901][ T4409] Possible unsafe locking scenario: [ 1868.439901][ T4409] [ 1868.447352][ T4409] CPU0 CPU1 [ 1868.452702][ T4409] ---- ---- [ 1868.458059][ T4409] lock(&sbi->s_writepages_rwsem); [ 1868.463249][ T4409] lock(&ei->xattr_sem); [ 1868.470085][ T4409] lock(&sbi->s_writepages_rwsem); [ 1868.477793][ T4409] lock(&ei->xattr_sem); [ 1868.482134][ T4409] [ 1868.482134][ T4409] *** DEADLOCK *** [ 1868.482134][ T4409] [ 1868.490283][ T4409] 2 locks held by syz.4.30420/4409: [ 1868.495484][ T4409] #0: ffff888147ec8460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x295/0xd60 [ 1868.504351][ T4409] #1: ffff88814ce00bd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 1868.514844][T10108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1868.514870][ T4409] [ 1868.514870][ T4409] stack backtrace: [ 1868.514880][ T4409] CPU: 0 PID: 4409 Comm: syz.4.30420 Not tainted syzkaller #0 [ 1868.535630][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1868.545674][ T4409] Call Trace: [ 1868.548946][ T4409] [ 1868.551865][ T4409] dump_stack_lvl+0x188/0x250 [ 1868.556533][ T4409] ? load_image+0x400/0x400 [ 1868.561025][ T4409] ? show_regs_print_info+0x20/0x20 [ 1868.566219][ T4409] ? print_circular_bug+0x12b/0x1a0 [ 1868.571407][ T4409] check_noncircular+0x296/0x330 [ 1868.576344][ T4409] ? add_chain_block+0x940/0x940 [ 1868.581315][ T4409] ? lockdep_lock+0xf1/0x1f0 [ 1868.585925][ T4409] ? mark_lock+0x94/0x320 [ 1868.590249][ T4409] ? _find_first_zero_bit+0xce/0xf0 [ 1868.595442][ T4409] __lock_acquire+0x2c42/0x7d10 [ 1868.600323][ T4409] ? verify_lock_unused+0x140/0x140 [ 1868.605532][ T4409] ? mark_lock+0x94/0x320 [ 1868.609854][ T4409] ? verify_lock_unused+0x140/0x140 [ 1868.615042][ T4409] ? __lock_acquire+0x12e8/0x7d10 [ 1868.620061][ T4409] ? register_lock_class+0xc0/0x890 [ 1868.625257][ T4409] lock_acquire+0x19e/0x400 [ 1868.629769][ T4409] ? ext4_destroy_inline_data+0x24/0xe0 [ 1868.635305][ T4409] ? read_lock_is_recursive+0x10/0x10 [ 1868.640687][ T4409] ? rcu_read_lock_any_held+0xb0/0x130 [ 1868.646134][ T4409] ? ext4_journal_check_start+0x180/0x250 [ 1868.651842][ T4409] down_write+0x38/0x60 [ 1868.655985][ T4409] ? ext4_destroy_inline_data+0x24/0xe0 [ 1868.661514][ T4409] ext4_destroy_inline_data+0x24/0xe0 [ 1868.666877][ T4409] ext4_writepages+0x670/0x2df0 [ 1868.671719][ T4409] ? __lock_acquire+0x13bc/0x7d10 [ 1868.676735][ T4409] ? verify_lock_unused+0x140/0x140 [ 1868.681923][ T4409] ? mark_lock+0x94/0x320 [ 1868.686250][ T4409] ? ext4_readpage+0x2e0/0x2e0 [ 1868.691023][ T4409] ? __lock_acquire+0x7d10/0x7d10 [ 1868.696032][ T4409] ? do_raw_spin_lock+0x128/0x2f0 [ 1868.701048][ T4409] ? do_raw_spin_unlock+0x11d/0x230 [ 1868.706242][ T4409] ? ext4_readpage+0x2e0/0x2e0 [ 1868.710997][ T4409] do_writepages+0x476/0x6e0 [ 1868.715578][ T4409] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 1868.721113][ T4409] ? __writepage+0x130/0x130 [ 1868.725715][ T4409] ? __lock_acquire+0x7d10/0x7d10 [ 1868.730730][ T4409] ? __rwlock_init+0x140/0x140 [ 1868.735482][ T4409] ? generic_write_end+0x24d/0x3d0 [ 1868.740587][ T4409] ? do_raw_spin_unlock+0x11d/0x230 [ 1868.745778][ T4409] filemap_fdatawrite_wbc+0x1eb/0x240 [ 1868.751145][ T4409] file_write_and_wait_range+0x14d/0x220 [ 1868.756791][ T4409] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 1868.762177][ T4409] ext4_sync_file+0x1ff/0xae0 [ 1868.766849][ T4409] ext4_buffered_write_iter+0x338/0x3b0 [ 1868.772390][ T4409] ext4_file_write_iter+0x74d/0x1700 [ 1868.777689][ T4409] ? rcu_read_lock_any_held+0xb0/0x130 [ 1868.783139][ T4409] ? ext4_file_read_iter+0x700/0x700 [ 1868.788419][ T4409] ? end_current_label_crit_section+0x14b/0x170 [ 1868.794660][ T4409] ? memset+0x1e/0x40 [ 1868.798649][ T4409] ? iov_iter_init+0xb4/0x170 [ 1868.803312][ T4409] vfs_write+0x745/0xd60 [ 1868.807561][ T4409] ? file_end_write+0x250/0x250 [ 1868.812425][ T4409] ? __fget_files+0x40f/0x480 [ 1868.817093][ T4409] ? __fdget+0x18b/0x210 [ 1868.821330][ T4409] ? __x64_sys_pwrite64+0xf2/0x220 [ 1868.826429][ T4409] __x64_sys_pwrite64+0x19a/0x220 [ 1868.831445][ T4409] ? ksys_pwrite64+0x1c0/0x1c0 [ 1868.836205][ T4409] ? lockdep_hardirqs_on+0x94/0x140 [ 1868.841435][ T4409] do_syscall_64+0x4c/0xa0 [ 1868.845839][ T4409] ? clear_bhb_loop+0x30/0x80 [ 1868.850503][ T4409] ? clear_bhb_loop+0x30/0x80 [ 1868.855168][ T4409] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1868.861050][ T4409] RIP: 0033:0x7fb0e4458799 [ 1868.865469][ T4409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1868.885068][ T4409] RSP: 002b:00007fb0e26b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1868.893477][ T4409] RAX: ffffffffffffffda RBX: 00007fb0e46d1fa0 RCX: 00007fb0e4458799 [ 1868.899724][T10108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1868.901437][ T4409] RDX: 0000000000000001 RSI: 0000200000001380 RDI: 0000000000000004 [ 1868.901454][ T4409] RBP: 00007fb0e44eebd9 R08: 0000000000000000 R09: 0000000000000000 [ 1868.914456][T10108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1868.920258][ T4409] R10: 0000000000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 1868.920275][ T4409] R13: 00007fb0e46d2038 R14: 00007fb0e46d1fa0 R15: 00007fffe081b308 [ 1868.920297][ T4409] [ 1868.935326][T10108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1868.942594][ T4409] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.30420: bg 0: block 5: invalid block bitmap [ 1868.973274][T10108] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1868.994298][T10108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.994337][ T4409] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1869.011452][T10108] usb 2-1: config 0 descriptor?? [ 1869.038651][ T4409] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1869.038651][ T4409] [ 1869.048350][ T4409] EXT4-fs (loop4): Total free blocks count 0 [ 1869.060790][ T4409] EXT4-fs (loop4): Free/Dirty block details [ 1869.066892][ T4409] EXT4-fs (loop4): free_blocks=0 [ 1869.072899][T10108] hub 2-1:0.0: USB hub found [ 1869.082232][ T4409] EXT4-fs (loop4): dirty_blocks=2 [ 1869.095768][ T4409] EXT4-fs (loop4): Block reservation details [ 1869.102176][ T4409] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 1869.284547][T10108] hub 2-1:0.0: 14 ports detected [ 1869.305873][T10108] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1869.522351][T10108] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1869.528720][T10108] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1869.564897][T10108] usb 2-1: USB disconnect, device number 8 [ 1873.551990][ T1423] ieee802154 phy1 wpan1: encryption failed: -22