last executing test programs: 4.054935339s ago: executing program 3 (id=14215): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x2, 0x4) 3.904147613s ago: executing program 3 (id=14220): syz_usb_connect(0x5, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x28, 0xc2, 0x4d, 0x8, 0x249c, 0x9008, 0x9015, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9c, 0x5b, 0xb0, 0x8, "", [{{0x9, 0x4, 0x5b, 0x9, 0x0, 0x2a, 0xfa, 0x33, 0x4}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x12000, 0x0, &(0x7f0000007000/0x12000)=nil) 3.051920337s ago: executing program 2 (id=14243): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000040)={'macvlan1\x00', @ifru_data=0x0}) 2.93216965s ago: executing program 2 (id=14246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x404}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40805}, 0x4040040) 2.57235808s ago: executing program 4 (id=14249): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080130003000d28d8026a2c80"], 0x2c}}, 0x0) 2.368162025s ago: executing program 4 (id=14252): r0 = timerfd_create(0x8, 0x800) ppoll(&(0x7f0000000080)=[{r0, 0x440}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 2.319766767s ago: executing program 2 (id=14254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001400010000000000fdfff7ff0a004300", @ANYRES32=r0, @ANYBLOB="14000100ff010000000a00000000000000000001140006000200000069"], 0x48}}, 0x0) 2.242515559s ago: executing program 4 (id=14257): syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c040090400000103000000092109f0ff0022a0000905810340"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.103025723s ago: executing program 2 (id=14260): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240), 0x0) 2.067491554s ago: executing program 2 (id=14262): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000001c0), 0x1, 0x50f, &(0x7f0000000ac0)="$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") link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.648454255s ago: executing program 3 (id=14270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="0c0300000101010228bd7000fedbdf25030000080c0019"], 0x30c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 1.544720278s ago: executing program 2 (id=14273): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@commit}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localalloc={'localalloc', 0x3d, 0x10000}}, {@coherency_full}, {@data_writeback}, {@localflocks}]}, 0x2, 0x442c, &(0x7f00000088c0)="$eJzs3c9PHFUcAPA3A1qobYXaQ01M3MQmGjUEelJpIqW0FFqsqbYxXrYLbFt0YRtYjIce8NbEk4kH46HRxBunhoPX+id48VjPTfTgxcSkEbO7s8AMu7I2LNjm80nKMO/37nfn7Zsmw4sTlZtzS7m5pVxhIVeeub50MvdZubQ8XwzxHtnv/mlPJ+Ik9vvn0plzH1w9GcJPs788XF9fXw9V3aGpoS2///nH7Zmtx4Y4U6fabvPWdsvHIYRj28ZV1RVC+OjHEKIQwukkbTQ59oYQjoR63tXbX17L7dJo7j0onso/mrqzNnxicvXuWuvXHoXwbenFN2/M//ZK1/Cvr+9S9wAAAAAAAAAAAAAAAAAAPOHGL1+68v7gULgfhe7VaPvzuuPJsdXzseu75uXOv1gAAAAAAAAAAAAAAAAAAAD4n9p8/j8XHW3y/P9YchxpUX/93c6Pkc6ZeO/S2NnBoWT/92hb/ltJ0u+nu0J/k33fs/u/n87Ub77/+/Z+HldjfI1++0IUD6TO43hgIITvk43fj0cH41J5qfLG9fLywuyuDeOJlY5/fff+VHSSDf3bjf9opv3O7///wrZPU/X82u59xJ5q6fh3tSz3wxdRW/E/k6m3F/Gve6az3Tyl0vHvrqX1bi0wUp8AqvH/qnvn+I9l2u9U/I+EEHJRday51AxQXcNU0zfWKz4W/yod//qblZo6kzey1fX/Vyb+ZzPtN+LfuTA0n/9Xsl9ENJWO/7O1tJ5Uic3rvz/e+fo/l2l/P77/q+Nf8f3flnT8D9QTu1NFau9ku/P/eKb9TsX/SpyM80iU+gSsRvX0Vn+vjrR0/Hu25W/e/8Vtrf/OZ+rv1f1fo9/G/V9j+n8tqt//0Vw6/r0ty7V7/U9k6nV6/h+prf94XOn4H6ylpf+vr6/2s934T2ba71T8a6uSnkb8N+eTvw/U07+z/mtLOv7P1RPjrSVWaj9r679o5/X/hUz7+7H+q45/Je5sr0+LdPwPtSxXjf/PbXz/X8zU63z8Qxi01n9s6fgfblmudv337Bz/qUy9Tsf/1U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAEGE2OfSGKB1LncTwwEMKZ5Px4OBhNF2bz06XyzKdLIYwl6blwNLpRKk8XSvm5hfJsMV8olcozIZxN8o+FnmipVK7k5wu3zm201RvdLBYWK9PFQiWEMJ6kvxQON9qanqvMF26FEM5v5D0flxdv3Sws5GfnFt8ZHBwcDBMbY+iPip9XiguVeu/13BAmN+r2RVsGV8u+sDGWQ9En5eXFhUKpln5xS51SeaZQ2lJnKsn7OvRHlcXlhZlCpZgvlW80+ttPI8lxbOLyh5cvDm3LvxbVj6N7OywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/qP7w29/E0Lorp/FIYRclPwSJf9S7j0onso/mrqzNnxicvXu2sNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiHHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSO27CQBAA0PVGUdocI5Vld2kdJYqSIo6QOAEcg8PAUbgEd6CgoKVCMmsk/JHcQPVeY8+MdmekHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDpvmf1/L8ow3OKt8vdvvl5ucS/Kb/+GD7/9IAZuZ+fv/rzqyjTu2e9+ntKHarYVE/H1SIMfFubzp5c9+lGv0/X2L6Nzdf2fQ1ZzEMIVaq/ZTHm+bS7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADO7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbR9G3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CsAAP//aQIeXw==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x0) 1.543080738s ago: executing program 3 (id=14274): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000005c0)=""/171) 1.415158762s ago: executing program 3 (id=14277): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f00000000c0)='./bus\x00', 0x2, &(0x7f000009df00)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c67727071756f74612c6e6f646973636172642c696f636861727365743d6e6f6e652c6e6f646973636172642c696f636861727365743d63703835322c6e6f71756f74612c6e6f696e746567726974792c008283d279ba81174b20bb6aae5ea52f08eb98834c68ee88ba4a7465fd1dd3744c4dc490a46dd35125b04bc3a264a73f3262"], 0x5, 0x6188, &(0x7f0000004940)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 997.423473ms ago: executing program 0 (id=14283): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 847.910997ms ago: executing program 0 (id=14285): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) readv(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/82, 0x52}], 0x1) 733.60264ms ago: executing program 0 (id=14287): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 643.283913ms ago: executing program 1 (id=14288): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 611.871703ms ago: executing program 0 (id=14289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 536.471236ms ago: executing program 1 (id=14290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000094000000030a01010000000000000000010000000900030073797a320000000060000480140003006e657464657673696d30000000000000080002402e77ce0f080001400000000314000300776c616e310000000000000000000000080002402b8783ae0800024047ae78c5140003006261746164765f736c6176655f3100000900010073797a310000"], 0x254}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 506.562926ms ago: executing program 0 (id=14291): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']}) 482.217567ms ago: executing program 4 (id=14292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 383.86149ms ago: executing program 1 (id=14293): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f00000002c0)) 343.732541ms ago: executing program 4 (id=14294): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000002780)) 332.938462ms ago: executing program 1 (id=14295): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000780)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0xfa17, 0xa7ba, 0x4, 0x5e58}}, 0x118) 250.911124ms ago: executing program 0 (id=14296): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80004506, 0x0) 233.020024ms ago: executing program 1 (id=14297): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) 95.827388ms ago: executing program 4 (id=14298): migrate_pages(0xffffffffffffffff, 0xadd4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 118.17µs ago: executing program 1 (id=14299): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x28000) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000680)={0x9, 0x3, 0x100}) 0s ago: executing program 3 (id=14300): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0) kernel console output (not intermixed with test programs): ocess `syz.0.11908'. [ 982.927723][ T2936] loop4: detected capacity change from 0 to 8192 [ 983.038167][ T2983] loop3: detected capacity change from 0 to 8 [ 983.055561][ T2936] loop4: p1 p3 p4 [ 983.062883][ T2936] loop4: partition table partially beyond EOD, truncated [ 983.083603][ T2936] loop4: p1 start 393225 is beyond EOD, truncated [ 983.097725][ T2936] loop4: p3 start 16777216 is beyond EOD, truncated [ 983.137254][ T2936] loop4: p4 start 4294967295 is beyond EOD, truncated [ 983.203093][ T2983] SQUASHFS error: Unable to read directory block [629:0] [ 983.375732][ T3002] loop3: detected capacity change from 0 to 64 [ 983.414911][ T6292] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 983.436410][T11140] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 983.507418][ T3014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11930'. [ 983.637362][ T3021] ieee802154 phy0 wpan0: encryption failed: -22 [ 983.703724][T11140] usb 3-1: Using ep0 maxpacket: 32 [ 983.832136][T11140] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 983.862594][ T6292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.907539][ T6292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 983.938941][ T6292] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 984.000246][ T6292] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 984.027733][ T6292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.036593][T11140] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 984.052377][ T6292] usb 2-1: config 0 descriptor?? [ 984.057987][T11140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.058019][T11140] usb 3-1: Product: syz [ 984.058037][T11140] usb 3-1: Manufacturer: syz [ 984.058053][T11140] usb 3-1: SerialNumber: syz [ 984.081123][ T3051] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11941'. [ 984.103861][T11140] usb 3-1: config 0 descriptor?? [ 984.154253][T11140] usb 3-1: bad CDC descriptors [ 984.162497][T11140] usb 3-1: unsupported MDLM descriptors [ 984.201369][ T3057] loop0: detected capacity change from 0 to 2048 [ 984.251186][ T3057] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 984.404792][T11140] usb 3-1: USB disconnect, device number 49 [ 984.427443][ T6292] usb 2-1: USB disconnect, device number 31 [ 984.615409][ T3079] loop0: detected capacity change from 0 to 4096 [ 984.688146][ T3079] ntfs: volume version 3.1. [ 984.734288][ T3079] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 984.815950][ T3079] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 984.896262][ T3079] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 984.924364][ T3079] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 985.037081][ T3115] loop4: detected capacity change from 0 to 4096 [ 985.076490][ T3127] loop2: detected capacity change from 0 to 64 [ 985.091227][ T3079] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 985.126572][ T3079] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 985.153243][ T3129] netlink: 'syz.3.11962': attribute type 1 has an invalid length. [ 985.267418][ T3115] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 985.350584][ T3115] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 985.464706][ T3115] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 985.564272][ T3115] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 985.699888][ T3115] ntfs: volume version 3.1. [ 986.351587][ T3210] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 986.364904][ T3211] exfat: Deprecated parameter 'debug' [ 986.397449][ T3211] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 986.457333][ T3211] exFAT-fs (loop3): unable to read boot sector [ 986.485772][ T3211] exFAT-fs (loop3): failed to read boot sector [ 986.492326][ T3220] loop1: detected capacity change from 0 to 8 [ 986.510190][ T3211] exFAT-fs (loop3): failed to recognize exfat type [ 986.772778][ T3243] libceph: secret too big 289 [ 987.008641][ T6292] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 987.052351][ T3264] loop4: detected capacity change from 0 to 256 [ 987.180070][ T3264] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 987.393797][ T6292] usb 1-1: not running at top speed; connect to a high speed hub [ 987.409067][ T3281] loop2: detected capacity change from 0 to 8192 [ 987.511287][ T6292] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 987.767920][ T6292] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 987.810465][ T6292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.818856][ T6292] usb 1-1: Product: syz [ 987.876181][ T6292] usb 1-1: Manufacturer: syz [ 987.881479][ T6292] usb 1-1: SerialNumber: syz [ 987.958116][ T3271] loop1: detected capacity change from 0 to 32768 [ 988.091552][ T3271] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 988.091552][ T3271] [ 988.133951][ T3340] xt_l2tp: invalid flags combination: 0 [ 988.255548][ T6292] usb 1-1: USB disconnect, device number 49 [ 988.327134][ T3359] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 988.426612][ T3359] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 988.471271][ T3371] comedi comedi3: dac02: I/O port conflict (0x1,8) [ 988.507428][ T3368] xt_l2tp: missing protocol rule (udp|l2tpip) [ 988.736260][ T3388] x_tables: duplicate underflow at hook 2 [ 989.223779][ T3418] xt_bpf: check failed: parse error [ 989.333948][ T3432] netlink: 'syz.1.12047': attribute type 1 has an invalid length. [ 989.417917][ T3438] loop4: detected capacity change from 0 to 64 [ 989.456736][ T3852] device veth1_vlan left promiscuous mode [ 989.736921][ T3482] loop4: detected capacity change from 0 to 8 [ 990.024496][ T3509] loop0: detected capacity change from 0 to 64 [ 990.206474][ T3492] loop2: detected capacity change from 0 to 8192 [ 990.306545][ T3492] loop2: p1 p3 p4 [ 990.320775][ T3492] loop2: partition table partially beyond EOD, truncated [ 990.366650][ T3492] loop2: p1 start 393225 is beyond EOD, truncated [ 990.415556][ T3492] loop2: p3 start 16777216 is beyond EOD, truncated [ 990.489698][ T3492] loop2: p4 start 4294967295 is beyond EOD, truncated [ 990.616313][ T3558] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 990.710244][ T3558] xt_CT: You must specify a L4 protocol and not use inversions on it [ 990.773092][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 990.796354][ T3568] Timeout policy `syz1' can only be used by L3 protocol number 25944 [ 990.860630][ T3575] program syz.4.12085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.931595][ T3580] ieee802154 phy0 wpan0: encryption failed: -22 [ 991.014051][ T3585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12087'. [ 991.034898][ T3589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12088'. [ 991.115960][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12088'. [ 991.167656][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12088'. [ 991.389503][ T3596] loop0: detected capacity change from 0 to 4096 [ 991.486873][ T3596] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 991.826094][ T3611] loop1: detected capacity change from 0 to 8192 [ 991.965946][ T4428] loop1: p1 p3 p4 [ 991.969814][ T4428] loop1: partition table partially beyond EOD, truncated [ 992.014993][ T3651] loop2: detected capacity change from 0 to 256 [ 992.022767][ T4428] loop1: p1 start 393225 is beyond EOD, truncated [ 992.085212][ T3651] FAT-fs (loop2): Directory bread(block 64) failed [ 992.118789][ T4428] loop1: p3 start 16777216 is beyond EOD, truncated [ 992.156557][ T3651] FAT-fs (loop2): Directory bread(block 65) failed [ 992.168519][ T4428] loop1: p4 start 4294967295 is beyond EOD, truncated [ 992.199693][ T3651] FAT-fs (loop2): Directory bread(block 66) failed [ 992.243639][ T3611] loop1: p1 p3 p4 [ 992.247608][ T3611] loop1: partition table partially beyond EOD, truncated [ 992.303782][ T3611] loop1: p1 start 393225 is beyond EOD, [ 992.304289][ T3651] FAT-fs (loop2): Directory bread(block 67) failed [ 992.332674][ T3611] truncated [ 992.354762][ T3611] loop1: p3 start 16777216 is beyond EOD, truncated [ 992.373678][ T3611] loop1: p4 start 4294967295 is beyond EOD, truncated [ 992.384048][ T3651] FAT-fs (loop2): Directory bread(block 68) failed [ 992.443630][ T3651] FAT-fs (loop2): Directory bread(block 69) failed [ 992.481192][ T3651] FAT-fs (loop2): Directory bread(block 70) failed [ 992.502074][ T3651] FAT-fs (loop2): Directory bread(block 71) failed [ 992.529843][ T3688] tmpfs: Bad value for 'mpol' [ 992.551444][ T3651] FAT-fs (loop2): Directory bread(block 72) failed [ 992.558448][ T3651] FAT-fs (loop2): Directory bread(block 73) failed [ 992.716059][ T3697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12118'. [ 993.553727][ T4328] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 993.570344][ T3685] loop0: detected capacity change from 0 to 32768 [ 993.708242][ T3685] XFS (loop0): Mounting V5 Filesystem [ 993.875963][ T3685] XFS (loop0): Ending clean mount [ 994.013622][ T4328] usb 3-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 994.046148][ T4328] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 994.058415][ T4277] XFS (loop0): Unmounting Filesystem [ 994.291831][ T4328] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 994.312319][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.355748][ T4328] usb 3-1: Product: syz [ 994.360458][ T4328] usb 3-1: Manufacturer: syz [ 994.400904][ T4328] usb 3-1: SerialNumber: syz [ 994.499048][ T3805] device veth1 entered promiscuous mode [ 994.565807][ T3802] loop1: detected capacity change from 0 to 4096 [ 994.743746][ T4328] usb 3-1: 0:1 : does not exist [ 994.748989][ T4328] usb 3-1: unit 6 not found! [ 994.777665][ T3810] device bridge0 entered promiscuous mode [ 994.783741][ T4328] usb 3-1: unit 2 not found! [ 994.804938][ T4328] usb 3-1: USB disconnect, device number 50 [ 994.822019][ T3802] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 994.871739][ T3810] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 995.094473][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.169467][ T3849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12158'. [ 995.190841][ T3849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12158'. [ 995.231440][ T3849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12158'. [ 995.288854][ T3862] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 995.426629][ T3872] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12173'. [ 995.636072][ T3890] netlink: 'syz.2.12169': attribute type 9 has an invalid length. [ 995.664870][ T3890] netlink: 'syz.2.12169': attribute type 7 has an invalid length. [ 995.753019][ T3890] netlink: 'syz.2.12169': attribute type 8 has an invalid length. [ 995.774655][ T3899] netlink: 'syz.3.12171': attribute type 32 has an invalid length. [ 995.932885][ T3911] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 995.962663][ T3906] loop0: detected capacity change from 0 to 1764 [ 996.330581][ T3937] loop1: detected capacity change from 0 to 256 [ 996.450528][ T3937] FAT-fs (loop1): Directory bread(block 64) failed [ 996.484386][ T3937] FAT-fs (loop1): Directory bread(block 65) failed [ 996.491751][ T3937] FAT-fs (loop1): Directory bread(block 66) failed [ 996.542149][ T3937] FAT-fs (loop1): Directory bread(block 67) failed [ 996.568523][ T3874] loop4: detected capacity change from 0 to 32768 [ 996.600062][ T3937] FAT-fs (loop1): Directory bread(block 68) failed [ 996.645585][ T3937] FAT-fs (loop1): Directory bread(block 69) failed [ 996.652537][ T3937] FAT-fs (loop1): Directory bread(block 70) failed [ 996.716722][ T3874] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 996.716722][ T3874] [ 996.740655][ T3937] FAT-fs (loop1): Directory bread(block 71) failed [ 996.753468][ T3937] FAT-fs (loop1): Directory bread(block 72) failed [ 996.804831][ T3937] FAT-fs (loop1): Directory bread(block 73) failed [ 996.863289][ T3956] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12188'. [ 996.877371][ T3956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12188'. [ 996.909215][ T3956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12188'. [ 996.952716][ T3956] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12188'. [ 997.122413][ T3919] loop2: detected capacity change from 0 to 32768 [ 997.226721][ T3930] loop0: detected capacity change from 0 to 32768 [ 997.276175][ T3919] jfs_lookup: dtSearch returned -5 [ 997.337967][ T3975] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12192'. [ 997.357276][ T3930] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 997.357276][ T3930] [ 997.423134][ T3930] ERROR: (device loop0): remounting filesystem as read-only [ 997.442844][ T3930] xtLookup: xtSearch returned -5 [ 998.113589][ T4038] device bridge0 entered promiscuous mode [ 998.177605][ T4038] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 998.547539][ T4075] netlink: 'syz.4.12221': attribute type 28 has an invalid length. [ 998.601054][ T4075] netlink: 'syz.4.12221': attribute type 3 has an invalid length. [ 998.685100][ T4075] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12221'. [ 998.959815][ T4116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12234'. [ 998.976082][ T6292] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 998.976413][ T4115] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.166296][ T4128] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 999.221915][ T4128] FAT-fs (loop9): unable to read boot sector [ 999.264840][ T6292] usb 3-1: Using ep0 maxpacket: 32 [ 999.290506][ T4138] xt_l2tp: v2 doesn't support IP mode [ 999.314850][ T4140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12242'. [ 999.365328][ T4140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12242'. [ 999.398286][ T6292] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 999.425318][ T6292] usb 3-1: config 0 has no interface number 0 [ 999.425729][ T4140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12242'. [ 999.432385][ T6292] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 999.714504][ T6292] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 999.723815][ T6292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.778427][ T6292] usb 3-1: Product: syz [ 999.782755][ T6292] usb 3-1: Manufacturer: syz [ 999.787557][ T6292] usb 3-1: SerialNumber: syz [ 999.805417][ T6292] usb 3-1: config 0 descriptor?? [ 999.853271][ T4090] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1000.120278][ T6292] asix: probe of 3-1:0.188 failed with error -71 [ 1000.173743][ T6292] usb 3-1: USB disconnect, device number 51 [ 1000.409026][ T4241] netlink: 'syz.3.12273': attribute type 10 has an invalid length. [ 1000.423303][ T4241] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1000.445046][ T4241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1000.474867][ T4246] loop1: detected capacity change from 0 to 1024 [ 1000.544371][ T4246] EXT4-fs (loop1): Ignoring removed orlov option [ 1000.600843][ T4261] loop3: detected capacity change from 0 to 1024 [ 1000.640113][ T4246] EXT4-fs (loop1): mounted filesystem without journal. Opts: dax=never,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 1001.073082][ T4341] netlink: 'syz.0.12291': attribute type 21 has an invalid length. [ 1001.127060][ T4346] netlink: 'syz.1.12288': attribute type 12 has an invalid length. [ 1001.209035][ T4352] netlink: 'syz.4.12293': attribute type 1 has an invalid length. [ 1001.338196][ T4352] netlink: 'syz.4.12293': attribute type 1 has an invalid length. [ 1001.419937][ T4364] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1002.875750][ T4492] __nla_validate_parse: 6 callbacks suppressed [ 1002.875769][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12340'. [ 1002.931779][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12340'. [ 1003.675097][ T4547] loop0: detected capacity change from 0 to 64 [ 1003.710111][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 1003.710128][ T26] audit: type=1400 audit(2000525909.583:56): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=4549 comm="syz.4.12358" [ 1004.440294][ T4605] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1004.665502][ T4620] netlink: 'syz.2.12378': attribute type 1 has an invalid length. [ 1004.673384][ T4620] netlink: 'syz.2.12378': attribute type 3 has an invalid length. [ 1004.686875][ T4620] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12378'. [ 1004.764111][ T4631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12381'. [ 1004.842426][ T4636] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 1005.685606][ T4697] loop3: detected capacity change from 0 to 1024 [ 1006.255261][ T4738] device team0 entered promiscuous mode [ 1006.283305][ T4751] block nbd1: NBD_DISCONNECT [ 1006.295072][ T4738] device team_slave_0 entered promiscuous mode [ 1006.329632][ T4738] device team_slave_1 entered promiscuous mode [ 1006.362436][ T4738] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1006.389845][ T4762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12421'. [ 1006.729698][ T4328] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1006.837407][ T4816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12438'. [ 1006.947005][ T4828] loop1: detected capacity change from 0 to 256 [ 1007.018422][ T4328] usb 4-1: Using ep0 maxpacket: 8 [ 1007.157538][ T4328] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 1007.187972][ T4328] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1007.220820][ T4328] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1007.414418][ T4328] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1007.435374][ T4328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.459472][ T4328] usb 4-1: Product: syz [ 1007.466015][ T4876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1007.480002][ T4328] usb 4-1: Manufacturer: syz [ 1007.490889][ T4328] usb 4-1: SerialNumber: syz [ 1007.509369][ T4328] usb 4-1: config 0 descriptor?? [ 1007.587960][ T4328] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1007.811678][ T4891] loop1: detected capacity change from 0 to 2048 [ 1007.822368][ T4328] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1007.866587][ T4328] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1007.896067][ T4328] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 1007.947831][ T4891] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1008.024472][ T4908] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1008.041954][ T4324] usb 4-1: USB disconnect, device number 36 [ 1008.042264][ T4911] netlink: 'syz.0.12467': attribute type 2 has an invalid length. [ 1008.424906][ T4938] netlink: 'syz.0.12475': attribute type 2 has an invalid length. [ 1008.549099][ T4945] loop2: detected capacity change from 0 to 16 [ 1008.623109][ T4945] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1008.683052][ T4954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12482'. [ 1009.308873][ T5014] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12502'. [ 1009.481314][ T5030] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12507'. [ 1009.543917][ T5034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12508'. [ 1009.684093][ T5049] CIFS mount error: No usable UNC path provided in device string! [ 1009.684093][ T5049] [ 1009.730814][ T5049] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1009.845937][ T5065] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12520'. [ 1009.871559][ T5067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12521'. [ 1009.881974][ T5065] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12520'. [ 1009.923279][ T5065] netlink: 'syz.4.12520': attribute type 3 has an invalid length. [ 1010.004829][ T5065] netlink: 11 bytes leftover after parsing attributes in process `syz.4.12520'. [ 1010.134856][ T5087] overlayfs: missing 'lowerdir' [ 1010.748296][ T5147] (syz.2.12549,5147,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 1010.790039][ T5147] (syz.2.12549,5147,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1010.804326][ T4324] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1010.840324][ T5151] binfmt_misc: register: failed to install interpreter file ./file0 [ 1011.105886][ T5168] xt_TCPMSS: Only works on TCP SYN packets [ 1011.264637][ T4324] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1011.284427][ T4324] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1011.333278][ T4324] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.392440][ T4324] usb 5-1: config 220 has no interface number 2 [ 1011.411279][ T4324] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1011.467445][ T4324] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1011.475148][ T4324] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1011.483888][ T4324] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1011.493180][ T5198] loop1: detected capacity change from 0 to 64 [ 1011.503655][ T1092] block nbd2: Attempted send on invalid socket [ 1011.510252][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1011.524259][ T5191] XFS (nbd2): SB validate failed with error -5. [ 1011.664679][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.664938][ T5154] loop0: detected capacity change from 0 to 32768 [ 1011.700400][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.786517][ T4324] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1011.805723][ T5208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12566'. [ 1011.816829][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.826237][ T4324] usb 5-1: Product: syz [ 1011.852283][ T4324] usb 5-1: Manufacturer: syz [ 1011.860623][ T4324] usb 5-1: SerialNumber: syz [ 1011.865924][ T5154] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.12561 (5154) [ 1011.934738][ T5154] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1012.006885][ T5217] Invalid ELF header magic: != ELF [ 1012.012061][ T5154] BTRFS info (device loop0): using free space tree [ 1012.066714][ T5154] BTRFS info (device loop0): has skinny extents [ 1012.303271][ T4324] usb 5-1: selecting invalid altsetting 0 [ 1012.317761][ T4324] usb 5-1: selecting invalid altsetting 0 [ 1012.328423][ T4324] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1012.335436][ T4324] usb 5-1: No valid video chain found. [ 1012.462241][ T5154] BTRFS info (device loop0): enabling ssd optimizations [ 1012.463211][ T4324] usb 5-1: selecting invalid altsetting 0 [ 1012.530441][ T4324] usbtest: probe of 5-1:220.1 failed with error -22 [ 1012.590619][ T4324] usb 5-1: USB disconnect, device number 8 [ 1012.956105][ T4329] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1013.136868][ T5326] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 1013.350005][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1013.544417][ T4329] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1013.564256][ T4329] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1013.604409][ T4329] usb 3-1: Product: syz [ 1013.609263][ T4329] usb 3-1: Manufacturer: syz [ 1013.614305][ T4329] usb 3-1: SerialNumber: syz [ 1013.641536][ T4329] usb 3-1: config 0 descriptor?? [ 1013.681561][ T5277] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1013.854255][ T5374] xt_hashlimit: max too large, truncated to 1048576 [ 1013.898925][ T5374] No such timeout policy "syz1" [ 1013.912545][ T5379] loop1: detected capacity change from 0 to 8 [ 1013.946495][ T4329] usb 3-1: USB disconnect, device number 52 [ 1014.412647][ T5422] loop3: detected capacity change from 0 to 1024 [ 1014.442023][ T5432] loop0: detected capacity change from 0 to 64 [ 1014.531411][ T5422] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1014.718606][ T6442] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1014.826395][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12628'. [ 1014.971049][ T5470] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12631'. [ 1014.997091][ T6442] usb 2-1: Using ep0 maxpacket: 32 [ 1015.086233][ T5482] netlink: 'syz.0.12635': attribute type 3 has an invalid length. [ 1015.125258][ T6442] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1015.134198][ T6442] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1015.168148][ T6442] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.202998][ T6442] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1015.232267][ T6442] usb 2-1: config 1 has no interface number 0 [ 1015.260390][ T6442] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1015.279944][ T6442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.364000][ T6442] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1015.522201][ T5521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1015.529769][ T5521] IPv6: NLM_F_CREATE should be set when creating new route [ 1015.537709][ T5521] IPv6: NLM_F_CREATE should be set when creating new route [ 1015.574161][ T6295] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1015.588257][ T6442] snd_usb_pod 2-1:1.1: set_interface failed [ 1015.594350][ T6442] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1015.619460][ T6442] snd_usb_pod: probe of 2-1:1.1 failed with error -71 [ 1015.634995][ T6442] usb 2-1: USB disconnect, device number 32 [ 1015.642448][ T5529] overlayfs: workdir and upperdir must be separate subtrees [ 1015.809731][ T5549] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12654'. [ 1015.863028][ T6295] usb 3-1: Using ep0 maxpacket: 32 [ 1016.023480][ T6295] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.049618][ T6295] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1016.077151][ T6295] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1016.130909][ T6295] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1016.163899][ T6295] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1016.387130][ T6295] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1016.422165][ T6295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.441815][ T6295] usb 3-1: Product: syz [ 1016.454370][ T6295] usb 3-1: Manufacturer: syz [ 1016.483688][ T6295] usb 3-1: SerialNumber: syz [ 1016.667731][ T4328] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1016.791198][ T6442] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1016.890158][ T6295] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1016.900369][ T6295] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1016.943096][ T4323] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1017.055074][ T6295] usb 3-1: USB disconnect, device number 53 [ 1017.060797][ T6442] usb 1-1: Using ep0 maxpacket: 32 [ 1017.082494][ T4328] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1017.129260][ T4328] usb 4-1: config 1 has no interface number 0 [ 1017.149117][ T4328] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1017.191620][ T6442] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1017.201108][ T4328] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1017.201147][ T4328] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 244, changing to 11 [ 1017.232068][ T4323] usb 5-1: Using ep0 maxpacket: 32 [ 1017.271469][ T6442] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1017.284684][ T6442] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1017.305740][ T6442] usb 1-1: config 1 has no interface number 0 [ 1017.312949][ T6442] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1017.325957][ T6442] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1017.340309][ T6442] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1017.350187][ T6442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.360204][ T4323] usb 5-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.393324][ T4328] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1017.435377][ T4328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.437538][ T6442] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1017.472526][ T4328] usb 4-1: Product: syz [ 1017.509406][ T4328] usb 4-1: Manufacturer: syz [ 1017.522085][ T4328] usb 4-1: SerialNumber: syz [ 1017.533998][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12692'. [ 1017.561338][ T5700] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1017.606519][ T4323] usb 5-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 1017.618040][ T4328] usb 4-1: Error in usbnet_get_endpoints (-22) [ 1017.640167][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.649058][ T4323] usb 5-1: Product: syz [ 1017.654631][ T4323] usb 5-1: Manufacturer: syz [ 1017.664550][ T4323] usb 5-1: SerialNumber: syz [ 1017.671924][ T6442] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1017.708221][ T5712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12696'. [ 1017.736878][ T4323] pwc: Askey VC010 type 1 USB webcam detected. [ 1017.796304][ T5718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12697'. [ 1017.883543][ T4328] usb 4-1: USB disconnect, device number 37 [ 1017.944125][ T6295] usb 1-1: USB disconnect, device number 50 [ 1017.959749][ T6295] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1018.034273][ T4323] pwc: send_video_command error -71 [ 1018.048227][ T4323] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1018.067982][ T4323] Philips webcam: probe of 5-1:76.0 failed with error -71 [ 1018.085082][ T4323] usb 5-1: USB disconnect, device number 9 [ 1018.325710][ T5766] loop1: detected capacity change from 0 to 64 [ 1018.856319][ T5798] netlink: 'syz.4.12718': attribute type 1 has an invalid length. [ 1018.905193][ T5798] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12718'. [ 1018.907859][ T5801] loop1: detected capacity change from 0 to 2048 [ 1018.953335][ T5759] loop2: detected capacity change from 0 to 32768 [ 1018.955641][ T5798] block nbd0: not configured, cannot reconfigure [ 1019.070834][ T5815] netlink: 'syz.3.12722': attribute type 1 has an invalid length. [ 1019.080582][ T5815] netlink: 'syz.3.12722': attribute type 3 has an invalid length. [ 1019.082068][ T5759] JBD2: Ignoring recovery information on journal [ 1019.089761][ T5815] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12722'. [ 1019.113827][ T5801] Dev loop1: RDB in block 1 has bad checksum [ 1019.218137][ T5759] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1019.315761][ T5830] comedi comedi0: pcmda12: I/O port conflict (0x3,16) [ 1019.450456][ T4278] ocfs2: Unmounting device (7,2) on (node local) [ 1019.509794][ T4323] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1019.590956][ T5847] netlink: 'syz.1.12732': attribute type 7 has an invalid length. [ 1019.626513][ T5851] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.12733'. [ 1019.668094][ T5852] loop4: detected capacity change from 0 to 2048 [ 1019.670240][ T5847] netlink: 'syz.1.12732': attribute type 1 has an invalid length. [ 1019.716928][ T5847] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12732'. [ 1019.735882][ T5852] UDF-fs: bad mount option "shortan$uid½forget" or missing value [ 1019.787971][ T4323] usb 4-1: Using ep0 maxpacket: 32 [ 1019.795707][ T5852] cifs: Unknown parameter 'anchor' [ 1019.927020][ T4323] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1019.935573][ T4323] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1019.991197][ T4323] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1020.000209][ T4323] usb 4-1: config 1 has no interface number 0 [ 1020.058178][ T4323] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1020.113331][ T4323] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1020.156116][ T4323] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1020.194940][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.207784][ T5887] loop0: detected capacity change from 0 to 4096 [ 1020.226485][ T4329] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1020.280835][ T4323] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1020.369267][ T5887] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1020.392191][ T5887] ntfs3: loop0: Failed to load $Extend. [ 1020.417411][ T5904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12745'. [ 1020.438047][ T5904] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1020.447529][ T5887] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 1020.483178][ T4329] usb 3-1: Using ep0 maxpacket: 16 [ 1020.516057][ T4323] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1020.572992][ T4277] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 1020.583975][ T4277] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 1020.782861][ T4329] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1020.796166][ T4329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.801619][ T5920] xt_l2tp: v2 doesn't support IP mode [ 1020.830419][ T4329] usb 3-1: Product: syz [ 1020.838391][ T4329] usb 3-1: Manufacturer: syz [ 1020.855388][ T4329] usb 3-1: SerialNumber: syz [ 1020.892401][T11140] usb 4-1: USB disconnect, device number 38 [ 1020.901793][ T4329] usb 3-1: config 0 descriptor?? [ 1020.921051][T11140] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1020.946960][ T5930] loop1: detected capacity change from 0 to 164 [ 1020.952063][ T4329] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1020.977927][ T5876] loop4: detected capacity change from 0 to 40427 [ 1021.075000][ T5930] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1021.113093][ T5876] F2FS-fs (loop4): invalid crc value [ 1021.195564][ T5876] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1021.209379][ T4324] usb 3-1: USB disconnect, device number 54 [ 1021.279835][ T5968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12757'. [ 1021.331949][ T5958] loop0: detected capacity change from 0 to 4096 [ 1021.343165][ T5968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12757'. [ 1021.393194][ T5958] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1021.453924][ T5876] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1021.544426][ T5958] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1021.592729][ T5958] ntfs3: loop0: Failed to load $Extend. [ 1021.616392][ T5978] SET target dimension over the limit! [ 1021.866171][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12765'. [ 1022.198874][ T6013] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1022.529112][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12783'. [ 1022.575744][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12783'. [ 1023.021047][ T6085] loop2: detected capacity change from 0 to 256 [ 1023.212183][ T6097] loop1: detected capacity change from 0 to 64 [ 1023.232110][ T6098] usb usb7: usbfs: process 6098 (syz.4.12803) did not claim interface 0 before use [ 1023.627372][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1024.064792][ T6081] loop0: detected capacity change from 0 to 32768 [ 1024.122406][ T6081] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.12797 (6081) [ 1024.249794][ T6081] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1024.274970][ T6081] BTRFS info (device loop0): using free space tree [ 1024.320487][ T6081] BTRFS info (device loop0): has skinny extents [ 1024.409619][ T6091] loop3: detected capacity change from 0 to 40427 [ 1024.469139][ T6118] loop2: detected capacity change from 0 to 32768 [ 1024.510955][ T6091] F2FS-fs (loop3): invalid crc value [ 1024.537604][ T6118] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.12808 (6118) [ 1024.655501][ T6091] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1024.768843][ T6091] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1024.771181][ T6118] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1024.808649][ T6081] BTRFS info (device loop0): enabling ssd optimizations [ 1024.867881][ T6118] BTRFS info (device loop2): force zlib compression, level 3 [ 1024.875675][ T6118] BTRFS info (device loop2): force clearing of disk cache [ 1024.892188][ T6081] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same [ 1024.910616][ T6118] BTRFS info (device loop2): setting nodatasum [ 1024.917283][ T6118] BTRFS info (device loop2): allowing degraded mounts [ 1024.953082][ T6118] BTRFS info (device loop2): using free space tree [ 1025.017590][ T6118] BTRFS info (device loop2): has skinny extents [ 1025.369760][ T6118] BTRFS info (device loop2): clearing free space tree [ 1025.396483][ T6118] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1025.407154][ T6118] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1025.424620][T11140] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1025.481653][ T6118] BTRFS info (device loop2): creating free space tree [ 1025.500088][ T6118] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1025.520239][ T6118] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1025.702229][T11140] usb 2-1: Using ep0 maxpacket: 32 [ 1025.766704][ T6173] loop4: detected capacity change from 0 to 32768 [ 1025.841293][T11140] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1025.850160][T11140] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1025.870338][T11140] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1025.970285][T11140] usb 2-1: config 1 has no interface number 0 [ 1025.976744][T11140] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1026.012489][T11140] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1026.167959][T11140] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1026.195165][ T6118] BTRFS info (device loop2): balance: start -susage=38654705655,usage=4294967287..8,drange=6..6,vrange=8..15,limit=2,stripes=7..3 [ 1026.209530][T11140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.210676][ T6118] BTRFS info (device loop2): balance: ended with status: 0 [ 1026.274987][ T6173] XFS (loop4): Mounting V5 Filesystem [ 1026.314682][T11140] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1026.492194][ T6277] netlink: 'syz.3.12838': attribute type 5 has an invalid length. [ 1026.504519][ T6173] XFS (loop4): Ending clean mount [ 1026.517435][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12837'. [ 1026.558442][T11140] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1026.771647][ T6299] loop3: detected capacity change from 0 to 2048 [ 1026.798398][ T4327] usb 2-1: USB disconnect, device number 33 [ 1026.818338][ T4327] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1026.880922][ T6299] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1026.977273][ T6314] lo speed is unknown, defaulting to 1000 [ 1026.992147][ T6314] lo speed is unknown, defaulting to 1000 [ 1027.094023][ T6314] lo speed is unknown, defaulting to 1000 [ 1027.174694][ T6314] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1027.328200][ T6314] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1027.374295][ T4290] XFS (loop4): Unmounting Filesystem [ 1027.460150][ T6314] lo speed is unknown, defaulting to 1000 [ 1027.484138][ T6314] lo speed is unknown, defaulting to 1000 [ 1027.546254][ T6314] lo speed is unknown, defaulting to 1000 [ 1027.582652][ T6331] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 1027.583973][ T6314] lo speed is unknown, defaulting to 1000 [ 1027.649759][ T6314] lo speed is unknown, defaulting to 1000 [ 1028.034320][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12856'. [ 1028.115493][ T6363] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 1028.207304][ T6372] fuse: Invalid rootmode [ 1028.353596][ T6384] loop3: detected capacity change from 0 to 1024 [ 1028.395700][ T6391] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1028.505460][ T4335] hfsplus: b-tree write err: -5, ino 25 [ 1028.514176][ T4335] hfsplus: b-tree write err: -5, ino 4 [ 1028.524121][ T4335] hfsplus: b-tree write err: -5, ino 2 [ 1028.533395][ T4335] hfsplus: b-tree write err: -5, ino 26 [ 1028.601772][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12868'. [ 1028.759981][ T6417] netlink: 'syz.1.12873': attribute type 21 has an invalid length. [ 1028.814930][ T6417] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12873'. [ 1028.991211][ T6432] loop2: detected capacity change from 0 to 256 [ 1029.039890][ T6432] exfat: Deprecated parameter 'utf8' [ 1029.045631][ T6432] exfat: Deprecated parameter 'namecase' [ 1029.076248][ T6432] exfat: Deprecated parameter 'utf8' [ 1029.160235][ T6432] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1029.275285][ T6442] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1029.337977][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12887'. [ 1029.811130][ T6497] xt_nat: multiple ranges no longer supported [ 1029.846877][ T6442] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1029.846913][ T6442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.846937][ T6442] usb 2-1: Product: syz [ 1029.846955][ T6442] usb 2-1: Manufacturer: syz [ 1029.846972][ T6442] usb 2-1: SerialNumber: syz [ 1029.848971][ T6442] usb 2-1: config 0 descriptor?? [ 1029.884783][ T6442] hub 2-1:0.0: bad descriptor, ignoring hub [ 1029.884817][ T6442] hub: probe of 2-1:0.0 failed with error -5 [ 1029.886056][ T6442] usbsevseg 2-1:0.0: USB 7 Segment device now attached [ 1030.017225][ C1] vkms_vblank_simulate: vblank timer overrun [ 1030.241176][ T4327] usb 2-1: USB disconnect, device number 34 [ 1030.243434][ T4327] usbsevseg 2-1:0.0: USB 7 Segment now disconnected [ 1030.538666][ T6543] loop0: detected capacity change from 0 to 512 [ 1030.612885][ T6543] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1030.647240][ T6543] EXT4-fs error (device loop0): ext4_find_extent:929: inode #4: comm syz.0.12908: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 1030.687421][ T6551] loop3: detected capacity change from 0 to 256 [ 1030.764685][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12912'. [ 1030.776700][ T6559] netlink: 'syz.2.12911': attribute type 21 has an invalid length. [ 1030.846409][ T6543] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 1030.856924][ T6559] netlink: 'syz.2.12911': attribute type 6 has an invalid length. [ 1030.867699][ T6551] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1030.877171][ T6543] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1030.918856][ T6559] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12911'. [ 1030.983430][ T6569] loop1: detected capacity change from 0 to 64 [ 1030.985648][ T6543] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1031.028187][ T6543] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 1031.165062][ T6543] EXT4-fs error (device loop0): ext4_lookup:1855: inode #2: comm syz.0.12908: 'file0' linked to parent dir [ 1031.492517][ T6589] loop2: detected capacity change from 0 to 16 [ 1031.574702][ T6589] erofs: (device loop2): mounted with root inode @ nid 36. [ 1031.632158][ T6589] erofs: (device loop2): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 1032.116348][ T6567] loop4: detected capacity change from 0 to 32768 [ 1032.190580][ T6567] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.12914 (6567) [ 1032.294561][ T6567] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1032.365244][ T6567] BTRFS info (device loop4): using free space tree [ 1032.393717][ T6567] BTRFS info (device loop4): has skinny extents [ 1032.569167][ T6641] binder: 6640:6641 ioctl c018620c 200000000040 returned -1 [ 1032.624763][ T6567] BTRFS info (device loop4): enabling ssd optimizations [ 1032.875859][ T6673] libceph: resolve 'cc' (ret=-3): failed [ 1033.541681][ T6720] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1034.032359][ T6734] 9p: Unknown access argument Ø [ 1034.131233][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12962'. [ 1034.326923][T11146] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1034.652672][ T6780] netlink: 'syz.1.12972': attribute type 1 has an invalid length. [ 1034.666954][ T6728] loop3: detected capacity change from 0 to 32768 [ 1034.696527][ T6780] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.12972'. [ 1034.713860][ T6728] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.12955 (6728) [ 1034.781059][ T6728] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1034.831544][ T6728] BTRFS info (device loop3): using free space tree [ 1034.856937][ T6728] BTRFS info (device loop3): has skinny extents [ 1034.931972][T11146] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1034.963516][T11146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.017291][T11146] usb 1-1: Product: syz [ 1035.021869][T11146] usb 1-1: Manufacturer: syz [ 1035.028303][T11146] usb 1-1: SerialNumber: syz [ 1035.082598][T11146] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1035.096702][ T6728] BTRFS info (device loop3): enabling ssd optimizations [ 1035.229420][ T6825] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12979'. [ 1035.415728][ T6838] cgroup: name respecified [ 1035.659201][ T4375] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4375) [ 1035.712571][T11140] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1035.940860][ T6868] xt_TCPMSS: Only works on TCP SYN packets [ 1036.027582][ T6873] netlink: 'syz.1.12995': attribute type 10 has an invalid length. [ 1036.476354][ T7] usb 1-1: USB disconnect, device number 51 [ 1036.527759][ T6873] team0: Port device geneve1 added [ 1036.888847][T11140] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1036.896455][T11140] ath9k_htc: Failed to initialize the device [ 1036.925484][ T7] usb 1-1: ath9k_htc: USB layer deinitialized [ 1037.098498][ T6942] xt_cgroup: path and classid specified [ 1037.243347][ T6933] loop1: detected capacity change from 0 to 4096 [ 1037.309302][ T6933] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1037.429829][ T6896] loop2: detected capacity change from 0 to 32768 [ 1037.430702][ T6933] ntfs3: Cannot use different iocharset when remounting! [ 1038.441712][ T7037] netlink: 'syz.0.13041': attribute type 1 has an invalid length. [ 1038.467291][ T7037] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13041'. [ 1038.610157][ T7054] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13047'. [ 1038.985440][ T7] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1039.613732][ T7056] loop1: detected capacity change from 0 to 32768 [ 1039.637585][ T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1039.666284][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.695776][ T7075] loop3: detected capacity change from 0 to 32768 [ 1039.711592][ T7] usb 3-1: Product: syz [ 1039.728565][ T7] usb 3-1: Manufacturer: syz [ 1039.746023][ T7] usb 3-1: SerialNumber: syz [ 1039.799704][ T7] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1039.816834][ T7135] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13073'. [ 1040.001349][ T7075] XFS (loop3): Mounting V5 Filesystem [ 1040.057613][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 1040.064583][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 1040.115629][ T7075] XFS (loop3): Ending clean mount [ 1040.271454][ T4284] XFS (loop3): Unmounting Filesystem [ 1040.627495][ T7177] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13084'. [ 1040.662408][ T4327] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1040.691628][ T7146] loop1: detected capacity change from 0 to 32768 [ 1040.713045][ T7177] device bond2 entered promiscuous mode [ 1040.894187][ T7146] XFS (loop1): Mounting V5 Filesystem [ 1041.096565][ T6284] usb 3-1: USB disconnect, device number 55 [ 1041.178138][ T7146] XFS (loop1): Ending clean mount [ 1041.204253][ T7146] XFS (loop1): Quotacheck needed: Please wait. [ 1041.360334][ T7146] XFS (loop1): Quotacheck: Done. [ 1041.487788][ T4285] XFS (loop1): Unmounting Filesystem [ 1041.568080][ T7259] loop3: detected capacity change from 0 to 64 [ 1041.765701][ T4327] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1041.791803][ T4327] ath9k_htc: Failed to initialize the device [ 1041.819649][ T6284] usb 3-1: ath9k_htc: USB layer deinitialized [ 1042.003323][ T7233] loop4: detected capacity change from 0 to 32768 [ 1042.174559][ T7235] loop0: detected capacity change from 0 to 32768 [ 1042.203410][ T7235] gfs2: fsid=Ô±rÐÛ»ð_î [ 1042.203410][ T7235] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 1042.203410][ T7235] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM" [ 1042.226526][ T7235] gfs2: fsid=Ô±rÐÛ»ð_î [ 1042.226526][ T7235] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Now mounting FS (format 1801)... [ 1042.344302][ T7233] XFS (loop4): Mounting V5 Filesystem [ 1042.354603][ T7235] gfs2: fsid=Ô±rÐÛ»ð_î [ 1042.354603][ T7235] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: journal 0 mapped with 5 extents in 0ms [ 1042.480856][ T7233] XFS (loop4): Ending clean mount [ 1042.578568][ T6444] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1042.610714][ T7235] gfs2: fsid=Ô±rÐÛ»ð_î [ 1042.610714][ T7235] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: first mount done, others may mount [ 1042.636248][ T4290] XFS (loop4): Unmounting Filesystem [ 1042.720521][ C0] vkms_vblank_simulate: vblank timer overrun [ 1042.845882][ T6444] usb 3-1: Using ep0 maxpacket: 16 [ 1042.974383][ T6444] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.982125][ T7342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13115'. [ 1043.016080][ T6444] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1043.209879][ T6444] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1043.241046][ T6444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.256624][ T6444] usb 3-1: Product: syz [ 1043.260988][ T6444] usb 3-1: Manufacturer: syz [ 1043.297647][ T6444] usb 3-1: SerialNumber: syz [ 1043.338366][ T6444] r8152-cfgselector 3-1: config 0 descriptor?? [ 1043.457802][ T7362] netlink: 'syz.4.13110': attribute type 8 has an invalid length. [ 1043.616351][ T6444] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1043.696285][ T7383] tipc: Trying to set illegal importance in message [ 1043.838861][ T6284] usb 3-1: USB disconnect, device number 56 [ 1044.096508][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13135'. [ 1044.120524][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13135'. [ 1044.136637][ T7419] netlink: 7 bytes leftover after parsing attributes in process `syz.4.13135'. [ 1044.161316][ T4327] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1044.224234][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13138'. [ 1044.469954][ T7444] loop0: detected capacity change from 0 to 1024 [ 1044.572261][ T7444] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1044.605133][ T7444] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1044.612368][ T4327] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.676733][ T4327] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1044.698163][ T7444] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 1044.785733][ T7444] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1044.849826][ T7475] loop4: detected capacity change from 0 to 64 [ 1044.856144][ T7444] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 1044.882518][ T7444] EXT4-fs (loop0): 1 truncate cleaned up [ 1044.894718][ T7444] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 1044.933223][ T4327] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1044.948683][ T7444] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.13145: corrupted in-inode xattr [ 1044.964610][ T7484] netlink: 'syz.2.13158': attribute type 10 has an invalid length. [ 1044.973856][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.983325][ T4327] usb 2-1: Product: syz [ 1044.988539][ T4327] usb 2-1: Manufacturer: syz [ 1045.016940][ T4327] usb 2-1: SerialNumber: syz [ 1045.584276][ T4327] usb 2-1: 0:2 : does not exist [ 1045.647184][ T4327] usb 2-1: USB disconnect, device number 35 [ 1045.794279][ T7548] netlink: 'syz.2.13168': attribute type 8 has an invalid length. [ 1045.922755][ T7560] netlink: 'syz.2.13172': attribute type 1 has an invalid length. [ 1045.922802][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13172'. [ 1045.922829][ T7560] netlink: 'syz.2.13172': attribute type 1 has an invalid length. [ 1045.951642][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1046.015613][ T7495] loop4: detected capacity change from 0 to 32768 [ 1046.051203][ T7495] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.13169 (7495) [ 1046.066360][ T7495] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1046.150969][ T6444] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1046.154926][ T7495] BTRFS info (device loop4): force zlib compression, level 3 [ 1046.154960][ T7495] BTRFS info (device loop4): force clearing of disk cache [ 1046.154980][ T7495] BTRFS info (device loop4): setting nodatasum [ 1046.155001][ T7495] BTRFS info (device loop4): allowing degraded mounts [ 1046.155019][ T7495] BTRFS info (device loop4): using free space tree [ 1046.155036][ T7495] BTRFS info (device loop4): has skinny extents [ 1046.338238][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13176'. [ 1046.338268][ T7581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13176'. [ 1046.407305][ T6444] usb 4-1: Using ep0 maxpacket: 8 [ 1046.558392][ T7495] BTRFS info (device loop4): clearing free space tree [ 1046.568998][ T7495] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1046.579713][ T6444] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1046.589492][ T7495] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1046.684521][ T7495] BTRFS info (device loop4): creating free space tree [ 1046.717533][ T7495] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1046.760485][ T7495] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1046.848970][ T6444] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 1046.857699][ T7616] XFS (nullb0): Invalid superblock magic number [ 1046.860375][ T6444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.874207][ T6444] usb 4-1: Product: syz [ 1046.879013][ T6444] usb 4-1: Manufacturer: syz [ 1046.884048][ T6444] usb 4-1: SerialNumber: syz [ 1047.168410][ T7553] udc-core: couldn't find an available UDC or it's busy [ 1047.180332][ T7495] BTRFS info (device loop4): balance: start -susage=38654705655,usage=4294967287..8,drange=6..6,vrange=8..15,limit=2,stripes=7..3 [ 1047.220010][ T7553] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1047.236516][ T7495] BTRFS info (device loop4): balance: ended with status: 0 [ 1047.389471][ T6444] usb 4-1: invalid MIDI EP [ 1047.416871][ T6444] usb 4-1: snd-bcd2000: error during probing [ 1047.430961][ T6444] snd-bcd2000: probe of 4-1:1.1 failed with error -22 [ 1047.452626][ T6444] usb 4-1: invalid MIDI EP [ 1047.469640][ T6444] usb 4-1: snd-bcd2000: error during probing [ 1047.496730][ T6444] snd-bcd2000: probe of 4-1:1.2 failed with error -22 [ 1047.537057][ T6444] usb 4-1: USB disconnect, device number 39 [ 1047.851546][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.955410][ T7699] netlink: 'syz.3.13202': attribute type 3 has an invalid length. [ 1048.009038][ T7699] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13202'. [ 1048.520833][ T7710] device wlan0 entered promiscuous mode [ 1048.872420][ T7770] smc: removing ib device syz2 [ 1049.001661][ T26] audit: type=1400 audit(2000525951.940:57): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=262620FFFFFFFFFFFFFFFF pid=7783 comm="syz.3.13225" [ 1049.123399][ T7797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1049.595090][ T7821] loop0: detected capacity change from 0 to 4096 [ 1049.724643][ T7821] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1049.780035][ T7846] Cannot find del_set index 4 as target [ 1049.785669][ T7821] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1049.890948][ T7853] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1049.958180][ T7860] comedi comedi0: pcl724: I/O port conflict (0x7,4) [ 1049.966138][ T7821] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1049.999857][ T7821] Remounting filesystem read-only [ 1050.134148][ T7870] netlink: 'syz.0.13251': attribute type 1 has an invalid length. [ 1050.319119][ T7880] loop4: detected capacity change from 0 to 256 [ 1050.376870][ T7888] netlink: 'syz.3.13257': attribute type 3 has an invalid length. [ 1050.392090][ T7888] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.13257'. [ 1050.537585][ T7880] FAT-fs (loop4): Directory bread(block 64) failed [ 1050.609111][ T7880] FAT-fs (loop4): Directory bread(block 65) failed [ 1050.627314][ T7880] FAT-fs (loop4): Directory bread(block 66) failed [ 1050.650585][ T7880] FAT-fs (loop4): Directory bread(block 67) failed [ 1050.687309][ T7880] FAT-fs (loop4): Directory bread(block 68) failed [ 1050.724516][ T7880] FAT-fs (loop4): Directory bread(block 69) failed [ 1050.752743][ T7880] FAT-fs (loop4): Directory bread(block 70) failed [ 1050.802917][ T7880] FAT-fs (loop4): Directory bread(block 71) failed [ 1050.810060][ T7880] FAT-fs (loop4): Directory bread(block 72) failed [ 1050.849938][ T7880] FAT-fs (loop4): Directory bread(block 73) failed [ 1051.167658][ T7934] loop1: detected capacity change from 0 to 512 [ 1051.216011][ T7934] EXT4-fs (loop1): inline encryption not supported [ 1051.357765][ T7934] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,errors=remount-ro,abort,. Quota mode: writeback. [ 1051.371487][ T7934] ext4 filesystem being mounted at /2707/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.438074][ T7934] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.13272: invalid size [ 1051.476684][ T7934] EXT4-fs (loop1): Remounting filesystem read-only [ 1051.785728][ T7964] loop0: detected capacity change from 0 to 2048 [ 1051.855249][ T7964] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1051.919195][ T7964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1052.008013][ T7975] loop4: detected capacity change from 0 to 256 [ 1052.121590][ T7975] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1052.339987][ T7993] loop0: detected capacity change from 0 to 512 [ 1052.538325][ T7993] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1052.621107][ T7993] ext4 filesystem being mounted at /2627/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.137328][ T7958] loop3: detected capacity change from 0 to 32768 [ 1053.220819][ T7958] gfs2: fsid=Ô±rÐÛ»ð_î [ 1053.220819][ T7958] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 1053.220819][ T7958] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM" [ 1053.249056][ T5948] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1053.315609][ T7958] gfs2: fsid=Ô±rÐÛ»ð_î [ 1053.315609][ T7958] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Now mounting FS (format 1801)... [ 1053.443547][ T7958] gfs2: fsid=Ô±rÐÛ»ð_î [ 1053.443547][ T7958] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: journal 0 mapped with 5 extents in 0ms [ 1053.542320][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 1053.567960][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13312'. [ 1053.611267][ T7958] gfs2: fsid=Ô±rÐÛ»ð_î [ 1053.611267][ T7958] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: first mount done, others may mount [ 1053.623222][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13312'. [ 1053.701243][ T5948] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1053.753370][ T5948] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1053.979309][ T5948] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1053.989588][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.991201][ T8091] loop4: detected capacity change from 0 to 8 [ 1054.011464][ T5948] usb 1-1: Product: syz [ 1054.030805][ T5948] usb 1-1: Manufacturer: syz [ 1054.037046][ T5948] usb 1-1: SerialNumber: syz [ 1054.077561][ T5948] usb 1-1: config 0 descriptor?? [ 1054.354554][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13326'. [ 1054.385400][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1054.396494][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13326'. [ 1054.400572][ T5948] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input57 [ 1054.498802][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13326'. [ 1054.521501][ T5948] imon:send_packet: packet tx failed (-71) [ 1054.567792][ T5948] imon 1-1:0.0: panel buttons/knobs setup failed [ 1054.706426][ T5948] rc_core: IR keymap rc-imon-pad not found [ 1054.713153][ T5948] Registered IR keymap rc-empty [ 1054.731898][ T8144] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1054.745070][ T5948] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1054.802568][ T5948] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1054.845445][ T8151] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1054.877506][ T5948] imon:send_packet: packet tx failed (-71) [ 1054.898922][ T5948] imon 1-1:0.0: remote input dev register failed [ 1054.918003][ T8155] netlink: 'syz.2.13336': attribute type 21 has an invalid length. [ 1054.941773][ T5948] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 1054.961952][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13336'. [ 1054.981831][ T8162] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.13338'. [ 1055.047573][ T5948] imon 1-1:0.0: unable to initialize intf0, err 0 [ 1055.092406][ T5948] imon:imon_probe: failed to initialize context! [ 1055.127758][ T5948] imon 1-1:0.0: unable to register, err -19 [ 1055.178920][ T5948] usb 1-1: USB disconnect, device number 52 [ 1055.537088][ T8200] netlink: 100 bytes leftover after parsing attributes in process `syz.0.13347'. [ 1055.590638][ T8200] netlink: 100 bytes leftover after parsing attributes in process `syz.0.13347'. [ 1055.767478][ T8217] nftables ruleset with unbound chain [ 1055.881384][ T8128] loop4: detected capacity change from 0 to 32768 [ 1055.943661][ T8128] gfs2: fsid=Ô±rÐÛ»ð_î [ 1055.943661][ T8128] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 1055.943661][ T8128] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM" [ 1056.065720][ T8128] gfs2: fsid=Ô±rÐÛ»ð_î [ 1056.065720][ T8128] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Now mounting FS (format 1801)... [ 1056.142952][ T8128] gfs2: fsid=Ô±rÐÛ»ð_î [ 1056.142952][ T8128] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: journal 0 mapped with 5 extents in 0ms [ 1056.254033][ T8254] loop0: detected capacity change from 0 to 256 [ 1056.296677][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13365'. [ 1056.321964][ T8128] gfs2: fsid=Ô±rÐÛ»ð_î [ 1056.321964][ T8128] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: first mount done, others may mount [ 1056.329558][ T8258] loop2: detected capacity change from 0 to 1024 [ 1056.390827][ T8254] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1056.416037][ T8257] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1056.493616][ T8258] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1056.618217][ T8258] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 1056.795659][ T8285] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 1057.571037][ T8347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1057.702852][ T8363] CIFS: VFS: Malformed UNC in devname [ 1057.886807][ T8379] device bridge6 entered promiscuous mode [ 1057.922006][ T8383] netlink: 'syz.1.13402': attribute type 1 has an invalid length. [ 1058.492453][ T4327] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1058.802699][ T4327] usb 4-1: Using ep0 maxpacket: 16 [ 1058.974005][ T4327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.009120][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1059.053728][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1059.078739][ T4327] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1059.103212][ T4327] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1059.214345][ T26] audit: type=1400 audit(2000525961.487:58): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=8514 comm="syz.2.13445" [ 1059.271232][ T4327] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1059.319789][ T4327] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1059.342834][ T4327] usb 4-1: Manufacturer: syz [ 1059.375137][ T4327] usb 4-1: config 0 descriptor?? [ 1059.768784][ T4327] usb 4-1: USB disconnect, device number 40 [ 1059.877710][ T8561] loop2: detected capacity change from 0 to 256 [ 1060.092647][ T8575] loop0: detected capacity change from 0 to 64 [ 1060.203444][ T5948] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1060.238883][ T8575] attempt to access beyond end of device [ 1060.238883][ T8575] loop0: rw=0, want=8194, limit=64 [ 1060.290900][ T8575] Buffer I/O error on dev loop0, logical block 4096, async page read [ 1060.310890][ T8575] attempt to access beyond end of device [ 1060.310890][ T8575] loop0: rw=0, want=8194, limit=64 [ 1060.374259][ T8575] Buffer I/O error on dev loop0, logical block 4096, async page read [ 1060.415929][ T26] audit: type=1800 audit(2000525962.609:59): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.13464" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1060.437048][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.637164][ T5948] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1060.658673][ T5948] usb 5-1: config 0 has no interface number 0 [ 1060.692137][ T5948] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 51720, setting to 64 [ 1060.867000][ T5948] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1060.893401][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1060.926428][ T5948] usb 5-1: Product: syz [ 1060.937874][ T5948] usb 5-1: SerialNumber: syz [ 1060.957599][ T5948] usb 5-1: config 0 descriptor?? [ 1060.995094][ T8564] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1061.019818][ T5948] cm109 5-1:0.8: invalid payload size 64, expected 4 [ 1061.038811][ T5948] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input59 [ 1061.219027][ T8660] __nla_validate_parse: 2 callbacks suppressed [ 1061.219050][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13489'. [ 1061.337376][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1061.431404][ T8680] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13494'. [ 1061.432726][ T8679] loop1: detected capacity change from 0 to 16 [ 1061.525622][ T4327] usb 5-1: USB disconnect, device number 10 [ 1061.532570][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1061.532638][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1061.583768][ T8679] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1061.603327][ T4327] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1061.993910][ T8726] trusted_key: encrypted_key: hex blob is missing [ 1062.541967][ T8769] loop1: detected capacity change from 0 to 256 [ 1062.558321][ T8771] netlink: 'syz.0.13523': attribute type 27 has an invalid length. [ 1062.695581][ T8779] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13525'. [ 1062.745773][ T8779] openvswitch: netlink: Key type 541 is out of range max 29 [ 1062.757272][ T8783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13526'. [ 1062.966780][ T8800] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13531'. [ 1063.269861][ T8828] loop0: detected capacity change from 0 to 1024 [ 1063.328860][ T8828] EXT4-fs (loop0): Ignoring removed nobh option [ 1063.339352][ T8828] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1063.424225][ T8828] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c01c, mo2=0003] [ 1063.440813][ T8828] System zones: 0-1, 3-8 [ 1063.455668][ T8828] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000007,delalloc,noinit_itable,nogrpid,jqfmt=vfsv0,nobh,grpid,mb_optimize_scan=0x0000000000000000,jqfmt=vfsv0,dioread_nolock,,errors=continue. Quota mode: none. [ 1063.473551][ T8850] netlink: 'syz.1.13549': attribute type 4 has an invalid length. [ 1063.485760][ T8828] ext4 filesystem being mounted at /2680/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.524370][ T8828] EXT4-fs error (device loop0): ext4_xattr_block_list:713: inode #15: comm syz.0.13542: corrupted xattr block 128 [ 1063.543391][ T8850] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13549'. [ 1063.556839][ T8850] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1063.841829][ T8878] IPv6: Can't replace route, no match found [ 1063.944646][ T8887] netlink: 'syz.3.13560': attribute type 10 has an invalid length. [ 1063.965978][ T8887] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13560'. [ 1063.979301][ T8894] netlink: 76 bytes leftover after parsing attributes in process `syz.4.13562'. [ 1064.001301][ T8887] netlink: 'syz.3.13560': attribute type 10 has an invalid length. [ 1064.035009][ T8887] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13560'. [ 1064.168488][ T8907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1064.283640][ T8922] netlink: 'syz.0.13573': attribute type 1 has an invalid length. [ 1064.336046][ T8929] loop2: detected capacity change from 0 to 8 [ 1064.348751][ T8925] loop1: detected capacity change from 0 to 1024 [ 1064.402171][ T8934] kAFS: unparsable volume name [ 1064.432384][ T8929] SQUASHFS error: Failed to read block 0x636: -5 [ 1064.440059][ T8925] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1064.462467][ T8925] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1064.481525][ T8929] SQUASHFS error: Unable to read metadata cache entry [634] [ 1064.509910][ T8929] SQUASHFS error: Unable to read metadata cache entry [634] [ 1064.520418][ T8925] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #5: comm syz.1.13571: unexpected bad inode w/o EXT4_IGET_BAD [ 1064.554559][ T8929] SQUASHFS error: Unable to read directory block [629:0] [ 1064.567665][ T8925] EXT4-fs (loop1): no journal found [ 1064.573261][ T8925] EXT4-fs (loop1): can't get journal size [ 1064.633943][ T8925] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 1064.743732][ T8957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13581'. [ 1064.966049][ T8979] device batadv0 entered promiscuous mode [ 1065.244747][ T9001] tmpfs: Bad value for 'mpol' [ 1065.330520][ T9014] loop1: detected capacity change from 0 to 64 [ 1065.418390][ T9014] attempt to access beyond end of device [ 1065.418390][ T9014] loop1: rw=0, want=8194, limit=64 [ 1065.447031][ T9014] Buffer I/O error on dev loop1, logical block 4096, async page read [ 1065.476102][ T9014] attempt to access beyond end of device [ 1065.476102][ T9014] loop1: rw=0, want=8194, limit=64 [ 1065.503743][ T9014] Buffer I/O error on dev loop1, logical block 4096, async page read [ 1065.529112][ T9031] loop4: detected capacity change from 0 to 512 [ 1065.542496][ T26] audit: type=1800 audit(2000525967.406:60): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13601" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1065.735917][ T9031] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1065.742087][ T5948] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1065.764781][ T9031] ext4 filesystem being mounted at /2663/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.315704][ T9083] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 58986 - 0 [ 1066.329993][ T5948] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1066.353088][ T9083] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 58986 - 0 [ 1066.353671][ T5948] usb 3-1: config 0 has no interface number 0 [ 1066.361936][ T9083] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 58986 - 0 [ 1066.390474][ T5948] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 51720, setting to 64 [ 1066.560800][ T9083] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 58986 - 0 [ 1066.599116][ T5948] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1066.621344][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1066.626918][ T9083] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 50120 - 0 [ 1066.651194][ T5948] usb 3-1: Product: syz [ 1066.662308][ T5948] usb 3-1: SerialNumber: syz [ 1066.682688][ T9083] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 50120 - 0 [ 1066.711000][ T5948] usb 3-1: config 0 descriptor?? [ 1066.711138][ T9083] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 50120 - 0 [ 1066.754661][ T9023] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1066.777536][ T9083] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 50120 - 0 [ 1066.789678][ T5948] cm109 3-1:0.8: invalid payload size 64, expected 4 [ 1066.807715][ T9083] device geneve4 entered promiscuous mode [ 1066.821995][ T5948] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input60 [ 1066.881664][ T150] block nbd4: Attempted send on invalid socket [ 1066.888746][ T150] blk_update_request: I/O error, dev nbd4, sector 8388608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1066.933721][ T150] block nbd4: Attempted send on invalid socket [ 1066.940426][ T150] blk_update_request: I/O error, dev nbd4, sector 8388608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1066.953666][ T150] Buffer I/O error on dev nbd4p4, logical block 1048560, async page read [ 1067.093124][ T9156] libceph: resolve '0' (ret=-3): failed [ 1067.251252][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1067.340037][ T4375] udevd[4375]: inotify_add_watch(7, /dev/nbd4p4, 10) failed: No such file or directory [ 1067.446042][T11140] usb 3-1: USB disconnect, device number 57 [ 1067.465162][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1067.472881][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1067.485352][T11140] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1067.668702][ T6444] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1067.925188][ T6444] usb 4-1: Using ep0 maxpacket: 8 [ 1068.097574][ T6444] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1068.163385][ T9251] loop0: detected capacity change from 0 to 512 [ 1068.192880][ T6444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1068.223816][ T6444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 1068.256645][ T6444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1068.296334][ T9251] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 1068.331801][ T6444] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1068.351891][ T9251] ext4 filesystem being mounted at /2711/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1068.393630][ T6444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1068.448102][ T6444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8669, setting to 64 [ 1068.455057][ T9274] loop4: detected capacity change from 0 to 164 [ 1068.669393][ T6444] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1068.720597][ T6444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.741111][ T9291] device geneve1 entered promiscuous mode [ 1068.772540][ T6444] usb 4-1: Product: syz [ 1068.776777][ T6444] usb 4-1: Manufacturer: syz [ 1068.800209][ T6444] usb 4-1: SerialNumber: syz [ 1068.847323][ T6444] usb 4-1: config 0 descriptor?? [ 1068.866703][ T9184] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1069.026772][ T6292] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1069.073405][ T4403] udevd[4403]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1069.108926][ T6444] usb 4-1: USB disconnect, device number 41 [ 1069.161712][ T9336] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13680'. [ 1069.495352][ T6292] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1069.518936][ T6292] usb 1-1: config 0 has no interface number 0 [ 1069.537756][ T6292] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 51720, setting to 64 [ 1069.711428][ T6292] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1069.730087][ T6292] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1069.765534][ T6292] usb 1-1: Product: syz [ 1069.770114][ T6292] usb 1-1: SerialNumber: syz [ 1069.777669][ T9385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13697'. [ 1069.797893][ T6292] usb 1-1: config 0 descriptor?? [ 1069.829158][ T9294] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1069.873716][ T6292] cm109 1-1:0.8: invalid payload size 64, expected 4 [ 1069.900488][ T6292] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input61 [ 1070.059999][ T9404] loop2: detected capacity change from 0 to 2048 [ 1070.129303][ T9414] usb usb9: usbfs: process 9414 (syz.4.13704) did not claim interface 0 before use [ 1070.181988][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1070.239724][ T9404] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1070.303877][ T9404] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1070.381369][ T6444] usb 1-1: USB disconnect, device number 53 [ 1070.406217][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 1070.413855][ T6444] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1070.543063][ T9445] binder: 9442:9445 unknown command 1077961712 [ 1070.586765][ T9445] binder: 9442:9445 ioctl c0306201 200000000480 returned -22 [ 1070.612081][ T9447] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1070.905326][ T9472] loop4: detected capacity change from 0 to 512 [ 1071.036277][ T9472] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 1071.093751][ T9472] ext4 filesystem being mounted at /2699/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.379193][ T9510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13729'. [ 1071.542222][ T9521] loop4: detected capacity change from 0 to 128 [ 1071.626901][ T9521] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1071.723365][ T9521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1071.919799][ T9541] loop2: detected capacity change from 0 to 1764 [ 1071.948104][ T9459] loop1: detected capacity change from 0 to 32768 [ 1072.015387][ T9550] xt_ecn: cannot match TCP bits for non-tcp packets [ 1072.203969][ T9459] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1072.203969][ T9459] [ 1072.299925][ T9459] ERROR: (device loop1): remounting filesystem as read-only [ 1072.400359][ T9566] loop2: detected capacity change from 0 to 4096 [ 1072.422833][ T9577] netlink: 'syz.0.13752': attribute type 4 has an invalid length. [ 1072.453365][ T9577] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13752'. [ 1072.843041][ T4278] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 1072.868642][ T4278] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1072.900479][ T9613] loop1: detected capacity change from 0 to 16 [ 1072.995820][ T9613] erofs: (device loop1): mounted with root inode @ nid 36. [ 1073.156339][ T9634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13770'. [ 1073.335359][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13775'. [ 1073.372507][ T9654] netlink: 31 bytes leftover after parsing attributes in process `syz.0.13775'. [ 1073.433459][ T9654] netlink: 'syz.0.13775': attribute type 3 has an invalid length. [ 1073.441861][ T9654] netlink: 'syz.0.13775': attribute type 2 has an invalid length. [ 1073.494654][ T9654] netlink: 31 bytes leftover after parsing attributes in process `syz.0.13775'. [ 1073.518555][ T5948] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1073.978768][ T5948] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1074.032301][ T5948] usb 2-1: not running at top speed; connect to a high speed hub [ 1074.102005][ T9628] loop3: detected capacity change from 0 to 32768 [ 1074.129505][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.158846][ T5948] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1074.180618][ T5948] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1074.204408][ T9628] (syz.3.13769,9628,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1074.269304][ T9628] (syz.3.13769,9628,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1074.309341][ T9705] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1074.371416][ T9628] JBD2: Ignoring recovery information on journal [ 1074.440065][ T5948] usb 2-1: New USB device found, idVendor=0582, idProduct=1f14, bcdDevice= 0.40 [ 1074.450517][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.459260][ T5948] usb 2-1: Product: syz [ 1074.466491][ T5948] usb 2-1: Manufacturer: syz [ 1074.471908][ T5948] usb 2-1: SerialNumber: syz [ 1074.581392][ T9628] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1074.772187][ T4284] ocfs2: Unmounting device (7,3) on (node local) [ 1074.903279][ T9748] loop4: detected capacity change from 0 to 64 [ 1074.941307][ T5948] usb 2-1: MIDIStreaming interface descriptor not found [ 1075.022738][ T9748] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1075.038561][ T5948] usb 2-1: USB disconnect, device number 36 [ 1075.351831][ T9799] loop2: detected capacity change from 0 to 1024 [ 1075.473216][ T9799] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 1075.496718][ T9799] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1075.509338][ T9799] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.13812: Failed to acquire dquot type 0 [ 1075.564827][ T9799] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 1075.666255][ T9799] EXT4-fs (loop2): 1 truncate cleaned up [ 1075.678507][ T4760] udevd[4760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1075.711024][ T9799] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1075.773320][ T9836] loop3: detected capacity change from 0 to 1024 [ 1075.809120][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13825'. [ 1075.869195][ T9836] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1075.894096][ T9836] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1075.895640][ T9799] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 1075.920723][ T9836] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1075.978479][ T9836] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1076.031878][ T6292] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1076.046343][ T9799] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1076.112523][ T9799] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.13812: Failed to acquire dquot type 0 [ 1076.142684][ T9836] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback. [ 1076.320424][ T6292] usb 2-1: Using ep0 maxpacket: 8 [ 1076.450148][ T6292] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1076.479591][ T6292] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1076.525471][ T6292] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1076.650052][ T9875] loop4: detected capacity change from 0 to 4096 [ 1076.724628][ T9875] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1076.737778][ T6292] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1076.753939][ T6292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.776065][ T9875] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 1076.802207][ T6292] usb 2-1: Product: syz [ 1076.812752][ T6292] usb 2-1: Manufacturer: syz [ 1076.822612][ T6292] usb 2-1: SerialNumber: syz [ 1076.952631][ T9912] netlink: 'syz.0.13846': attribute type 2 has an invalid length. [ 1076.961629][ T9912] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13846'. [ 1077.168890][ T6246] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1077.179043][ T6292] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1077.190545][ T6292] cdc_ncm 2-1:1.0: bind() failure [ 1077.230180][ T6292] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1077.237886][ T6292] cdc_ncm 2-1:1.1: bind() failure [ 1077.283465][ T6292] usb 2-1: USB disconnect, device number 37 [ 1077.475174][ T6246] usb 4-1: Using ep0 maxpacket: 32 [ 1077.619137][ T9973] --map-set only usable from mangle table [ 1077.636395][ T6246] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.643337][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13864'. [ 1077.672884][ T6246] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.727221][ T9982] netlink: 204 bytes leftover after parsing attributes in process `syz.0.13866'. [ 1077.850269][ T6246] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1077.860303][ T6246] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1077.904757][ T6246] usb 4-1: Product: syz [ 1077.909579][ T6246] usb 4-1: Manufacturer: syz [ 1078.022448][ T6246] hub 4-1:4.0: USB hub found [ 1078.054195][ T26] audit: type=1400 audit(2000525979.103:61): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=10011 comm="syz.4.13876" [ 1078.138924][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13878'. [ 1078.146661][T10022] loop0: detected capacity change from 0 to 256 [ 1078.148740][T10020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13878'. [ 1078.242554][T10022] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x41f366b4, utbl_chksum : 0xe619d30d) [ 1078.256540][ T6246] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 1078.256972][ T6444] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1078.481122][T10040] loop0: detected capacity change from 0 to 512 [ 1078.549793][T10040] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1078.562303][ T6444] usb 3-1: Using ep0 maxpacket: 8 [ 1078.684476][ T6246] usb 4-1: USB disconnect, device number 42 [ 1078.694796][ T6444] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.727099][ T6444] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1078.784125][ T6444] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1078.848318][ T6444] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1079.007040][T10076] netlink: 'syz.4.13892': attribute type 79 has an invalid length. [ 1079.058551][ T6444] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1079.083458][ T6444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.110134][ T6444] usb 3-1: Product: syz [ 1079.137061][ T6444] usb 3-1: Manufacturer: syz [ 1079.163789][ T6444] usb 3-1: SerialNumber: syz [ 1079.193729][ T6444] usb 3-1: config 0 descriptor?? [ 1079.229688][ T6246] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1079.259563][ T6444] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1079.498588][ T6444] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1079.526811][ T6444] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1079.549971][ T6444] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 1079.610239][ T6617] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1079.626613][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13908'. [ 1079.662696][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13908'. [ 1079.689491][ T6246] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1079.754080][ T6246] usb 2-1: not running at top speed; connect to a high speed hub [ 1079.773140][T10137] netlink: 88 bytes leftover after parsing attributes in process `syz.0.13910'. [ 1079.801403][ T6444] usb 3-1: USB disconnect, device number 58 [ 1079.860723][ T6246] usb 2-1: config 1 has an invalid interface number: 181 but max is 0 [ 1079.871442][ T6246] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.928201][ T6246] usb 2-1: config 1 has no interface number 0 [ 1079.954790][ T6246] usb 2-1: config 1 interface 181 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1079.988968][ T6246] usb 2-1: config 1 interface 181 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 1080.011134][ T6617] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1080.012077][ T6246] usb 2-1: config 1 interface 181 altsetting 5 endpoint 0xD has invalid wMaxPacketSize 0 [ 1080.021825][ T6617] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1080.051016][ T6246] usb 2-1: config 1 interface 181 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 14 [ 1080.078249][ T6246] usb 2-1: config 1 interface 181 has no altsetting 0 [ 1080.202850][ T6617] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1080.212498][ T6617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.232582][ T6617] usb 5-1: Product: syz [ 1080.247864][ T6617] usb 5-1: Manufacturer: syz [ 1080.253329][ T6617] usb 5-1: SerialNumber: syz [ 1080.266846][T11146] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1080.301503][ T6617] usb 5-1: config 0 descriptor?? [ 1080.308674][ T6246] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0018, bcdDevice=58.e1 [ 1080.320277][ T6246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.329616][ T6246] usb 2-1: Product: syz [ 1080.344020][ T6617] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1080.351552][ T6246] usb 2-1: Manufacturer: syz [ 1080.360052][ T6246] usb 2-1: SerialNumber: syz [ 1080.523677][T11146] usb 4-1: Using ep0 maxpacket: 8 [ 1080.662947][T11146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1080.698123][T11146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1080.730916][T11146] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1080.761156][T11146] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1080.778600][T11146] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1080.791504][ T6246] kvaser_usb 2-1:1.181: Cannot get usb endpoint(s) [ 1080.802637][T11146] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1080.826048][T11146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.856570][T11146] usb 4-1: config 0 descriptor?? [ 1080.865589][ T6246] usb 2-1: USB disconnect, device number 38 [ 1080.877357][T10157] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1080.901441][ T6292] usb 5-1: USB disconnect, device number 11 [ 1081.186990][T10256] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1081.244872][T21624] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 1081.435418][ T6246] usb 4-1: USB disconnect, device number 43 [ 1081.554601][T10282] loop1: detected capacity change from 0 to 64 [ 1081.762289][T10302] loop0: detected capacity change from 0 to 256 [ 1081.863126][T10302] FAT-fs (loop0): Directory bread(block 64) failed [ 1081.870495][T10302] FAT-fs (loop0): Directory bread(block 65) failed [ 1081.908101][T10302] FAT-fs (loop0): Directory bread(block 66) failed [ 1081.928035][T10318] netlink: 'syz.1.13959': attribute type 10 has an invalid length. [ 1081.932319][T10302] FAT-fs (loop0): Directory bread(block 67) failed [ 1081.948862][T10302] FAT-fs (loop0): Directory bread(block 68) failed [ 1081.980163][T10318] device macvlan0 entered promiscuous mode [ 1081.983456][T10302] FAT-fs (loop0): Directory bread(block 69) failed [ 1082.053450][T10302] FAT-fs (loop0): Directory bread(block 70) failed [ 1082.097416][T10302] FAT-fs (loop0): Directory bread(block 71) failed [ 1082.150065][T10302] FAT-fs (loop0): Directory bread(block 72) failed [ 1082.175495][T10318] team0: Port device macvlan0 added [ 1082.191283][T10302] FAT-fs (loop0): Directory bread(block 73) failed [ 1082.518502][T10351] loop4: detected capacity change from 0 to 1024 [ 1082.577462][T10351] EXT4-fs (loop4): Ignoring removed orlov option [ 1082.630722][T10351] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1082.642386][T10351] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1082.689098][T10351] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.13970: Invalid inode table block 0 in block_group 0 [ 1082.708648][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1082.776197][T10351] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1082.789837][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1082.815054][T10351] EXT4-fs error (device loop4): ext4_quota_write:6648: inode #3: comm syz.4.13970: mark_inode_dirty error [ 1082.837634][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1082.854747][T10351] Quota error (device loop4): write_blk: dquota write failed [ 1082.887497][T10351] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1082.945901][T10351] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.13970: Failed to acquire dquot type 0 [ 1082.993178][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.013784][T10351] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.13970: Invalid inode table block 0 in block_group 0 [ 1083.040316][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.047910][T10351] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1083.079050][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.094157][T10391] syz.2.13979: vmalloc error: size 9007199254740992, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1083.107390][T10351] EXT4-fs error (device loop4): ext4_ext_truncate:4472: inode #15: comm syz.4.13970: mark_inode_dirty error [ 1083.122649][T10391] CPU: 0 PID: 10391 Comm: syz.2.13979 Not tainted syzkaller #0 [ 1083.133189][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1083.145589][T10391] Call Trace: [ 1083.148988][T10391] [ 1083.152313][T10391] dump_stack_lvl+0x188/0x250 [ 1083.157557][T10391] ? rcu_lock_release+0x5/0x20 [ 1083.162942][T10391] ? show_regs_print_info+0x20/0x20 [ 1083.169155][T10391] ? load_image+0x400/0x400 [ 1083.174016][T10391] warn_alloc+0x243/0x320 [ 1083.175927][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.179696][T10391] ? rcu_lock_release+0x20/0x20 [ 1083.179731][T10391] ? zone_watermark_ok_safe+0x240/0x240 [ 1083.200733][T10391] ? dvb_demux_do_ioctl+0x313/0x530 [ 1083.201293][T10351] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.13970: Invalid inode table block 0 in block_group 0 [ 1083.206164][T10391] ? kfree+0xef/0x2a0 [ 1083.224090][T10391] __vmalloc_node_range+0x2b1/0x8b0 [ 1083.229607][T10391] ? mutex_lock_io_nested+0x60/0x60 [ 1083.231168][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.235126][T10391] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1083.235166][T10391] vmalloc+0x75/0x80 [ 1083.235191][T10391] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1083.249045][T10351] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1083.251858][T10391] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1083.251894][T10391] dvb_demux_do_ioctl+0x450/0x530 [ 1083.251923][T10391] dvb_usercopy+0x191/0x2b0 [ 1083.251946][T10391] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 1083.251968][T10391] ? dvb_generic_ioctl+0xb0/0xb0 [ 1083.252010][T10391] ? dvb_demux_poll+0x210/0x210 [ 1083.252033][T10391] dvb_demux_ioctl+0x25/0x30 [ 1083.268317][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.273781][T10391] __se_sys_ioctl+0xfa/0x170 [ 1083.273816][T10391] do_syscall_64+0x4c/0xa0 [ 1083.273837][T10391] ? clear_bhb_loop+0x30/0x80 [ 1083.273858][T10391] ? clear_bhb_loop+0x30/0x80 [ 1083.273880][T10391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1083.273903][T10391] RIP: 0033:0x7f26f16c1dd9 [ 1083.273925][T10391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.273944][T10391] RSP: 002b:00007f26ef91b028 EFLAGS: 00000246 [ 1083.282375][T10351] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1083.283985][T10391] ORIG_RAX: 0000000000000010 [ 1083.283998][T10391] RAX: ffffffffffffffda RBX: 00007f26f193afa0 RCX: 00007f26f16c1dd9 [ 1083.284016][T10391] RDX: 0020000000000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1083.284032][T10391] RBP: 00007f26f1757d69 R08: 0000000000000000 R09: 0000000000000000 [ 1083.284047][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.284062][T10391] R13: 00007f26f193b038 R14: 00007f26f193afa0 R15: 00007ffc11d27ac8 [ 1083.284095][T10391] [ 1083.352632][T10391] Mem-Info: [ 1083.380028][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.466599][T10351] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.13970: Invalid inode table block 0 in block_group 0 [ 1083.494800][T10391] active_anon:343 inactive_anon:8106 isolated_anon:0 [ 1083.494800][T10391] active_file:18657 inactive_file:40806 isolated_file:0 [ 1083.494800][T10391] unevictable:768 dirty:85 writeback:0 [ 1083.494800][T10391] slab_reclaimable:21600 slab_unreclaimable:100955 [ 1083.494800][T10391] mapped:30945 shmem:1771 pagetables:746 bounce:0 [ 1083.494800][T10391] kernel_misc_reclaimable:0 [ 1083.494800][T10391] free:1352883 free_pcp:10192 free_cma:0 [ 1083.494848][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.494870][T10351] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1083.571521][T10391] Node 0 active_anon:1340kB inactive_anon:31916kB active_file:74428kB inactive_file:163224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123780kB dirty:340kB writeback:0kB shmem:5008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11832kB pagetables:2884kB all_unreclaimable? no [ 1083.610865][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.618652][T10351] EXT4-fs error (device loop4): ext4_truncate:4286: inode #15: comm syz.4.13970: mark_inode_dirty error [ 1083.631585][T10391] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 1083.665242][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.672456][T10351] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1083.684409][T10391] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1083.684512][T10351] EXT4-fs (loop4): Remounting filesystem read-only [ 1083.696853][T10413] netlink: 'syz.1.13985': attribute type 4 has an invalid length. [ 1083.732251][T10391] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 1083.738999][T10391] Node 0 DMA32 free:1481048kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1340kB inactive_anon:31916kB active_file:74428kB inactive_file:163224kB unevictable:1536kB writepending:312kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:33248kB local_pcp:21024kB free_cma:0kB [ 1083.771044][T10413] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13985'. [ 1083.773746][T10351] EXT4-fs (loop4): 1 truncate cleaned up [ 1083.791054][T10351] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000040,stripe=0x0000000000000007,errors=remount-ro,lazytime,data_err=ignore,noblock_validity,minixdf,orlov,. Quota mode: writeback. [ 1083.828297][T10391] lowmem_reserve[]: 0 0 0 0 0 [ 1083.835228][T10391] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1083.929435][T10391] lowmem_reserve[]: 0 0 0 0 0 [ 1083.953971][T10391] Node 1 Normal free:3915124kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:7152kB local_pcp:540kB free_cma:0kB [ 1084.006331][T10351] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.13970: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1084.026576][T10391] lowmem_reserve[]: 0 0 0 0 0 [ 1084.026649][T10391] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1084.065990][T10391] Node 0 DMA32: 1793*4kB (UME) 1185*8kB (UME) 1029*16kB (UME) 568*32kB (UME) 268*64kB (UME) 168*128kB (UM) 125*256kB (UM) 80*512kB (UME) 49*1024kB (UM) 13*2048kB (UM) 303*4096kB (UM) = 1480796kB [ 1084.095666][T10391] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1084.170456][T10391] Node 1 Normal: 147*4kB (UE) 45*8kB (UE) 32*16kB (UE) 190*32kB (UME) 88*64kB (UME) 28*128kB (UME) 18*256kB (UM) 7*512kB (UM) 3*1024kB (UME) 2*2048kB (UM) 948*4096kB (M) = 3915124kB [ 1084.286843][T10391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1084.300234][T10391] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1084.328713][T10391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1084.341016][T10391] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1084.363019][T10391] 60905 total pagecache pages [ 1084.373856][T10391] 1 pages in swap cache [ 1084.378374][T10391] Swap cache stats: add 489, delete 488, find 75/132 [ 1084.395005][T10391] Free swap = 124472kB [ 1084.406979][T10391] Total swap = 124996kB [ 1084.422392][T10391] 2097051 pages RAM [ 1084.426759][T10391] 0 pages HighMem/MovableOnly [ 1084.443339][T10391] 411492 pages reserved [ 1084.447967][T10391] 0 pages cma reserved [ 1084.455879][T10434] loop4: detected capacity change from 0 to 4096 [ 1084.579701][T10434] ntfs: volume version 3.1. [ 1084.613742][T10434] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1084.674754][T10434] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1084.743739][T10434] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 1084.834081][T10434] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1084.919310][T10434] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 1084.956799][T10434] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1085.038564][T10479] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.14005'. [ 1085.270558][T10490] dlm: Unknown command passed to DLM device : 132 [ 1085.270558][T10490] [ 1085.916914][T10472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.966294][T10472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.306857][T10472] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1086.607247][T10472] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.617137][T10472] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.637854][T10472] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.650029][T10472] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.749861][T10518] loop3: detected capacity change from 0 to 32768 [ 1086.812607][T10518] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1086.830377][T10518] BTRFS info (device loop3): using free space tree [ 1086.859446][T10518] BTRFS info (device loop3): has skinny extents [ 1086.980675][T10518] BTRFS info (device loop3): enabling ssd optimizations [ 1087.601112][T10472] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 50120 - 0 [ 1087.613933][T10472] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 50120 - 0 [ 1087.638291][T10472] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 50120 - 0 [ 1087.657115][T10472] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 50120 - 0 [ 1087.676646][T10472] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 58986 - 0 [ 1087.687118][T10472] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 58986 - 0 [ 1087.709238][T10472] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 58986 - 0 [ 1087.720234][T10472] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 58986 - 0 [ 1087.750628][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14004'. [ 1087.771872][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14007'. [ 1087.851696][T10550] xt_hashlimit: max too large, truncated to 1048576 [ 1087.884866][T10550] xt_limit: Overflow, try lower: 0/0 [ 1088.025488][T10558] loop2: detected capacity change from 0 to 1764 [ 1088.079777][T10564] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14023'. [ 1088.198564][T10558] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1088.252926][T10547] loop3: detected capacity change from 0 to 32768 [ 1088.528892][T10600] netlink: 'syz.3.14032': attribute type 1 has an invalid length. [ 1088.569091][T10604] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1088.598196][T10600] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14032'. [ 1088.643908][T10608] bond0: Error: Cannot enslave bond to itself. [ 1089.417083][T10587] loop0: detected capacity change from 0 to 32768 [ 1089.495518][T10655] delete_channel: no stack [ 1089.503551][T10587] jfs_strtoUCS: char2uni returned -22. [ 1089.545289][T10587] charset = cp932, char = 0xfc [ 1089.935522][T10681] netlink: 'syz.4.14059': attribute type 10 has an invalid length. [ 1090.004130][T10681] device macvlan0 entered promiscuous mode [ 1090.103119][T10681] team0: Port device macvlan0 added [ 1090.307064][T10702] loop1: detected capacity change from 0 to 1764 [ 1090.507764][T10720] loop0: detected capacity change from 0 to 512 [ 1090.604862][T10720] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1090.644020][T10720] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 1090.653464][T10720] System zones: 1-12 [ 1090.659071][T10720] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1090.717593][T10720] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.14073: attempt to clear invalid blocks 1024 len 1 [ 1090.757495][T10720] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.14073: bg 0: block 361: padding at end of block bitmap is not set [ 1090.768526][T10740] netlink: 'syz.2.14079': attribute type 1 has an invalid length. [ 1090.791903][T10720] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1090.837969][T10720] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.14073: invalid indirect mapped block 1811939328 (level 0) [ 1090.877009][T10720] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.14073: invalid indirect mapped block 2 (level 2) [ 1090.930357][T10720] EXT4-fs (loop0): 1 truncate cleaned up [ 1090.936239][T10720] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 1091.051927][T10755] netlink: 'syz.2.14084': attribute type 1 has an invalid length. [ 1091.279168][T10768] tmpfs: Bad value for 'mpol' [ 1091.299211][T10769] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 1091.313153][T10698] loop3: detected capacity change from 0 to 32768 [ 1091.332774][T10769] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1091.459949][T10698] jfs_strtoUCS: char2uni returned -22. [ 1091.480902][T10698] charset = cp932, char = 0xfc [ 1091.591219][T10788] tmpfs: Bad value for 'mpol' [ 1092.084773][ T4330] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1092.239976][T10853] loop3: detected capacity change from 0 to 512 [ 1092.480615][ T4330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.517678][ T4330] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1092.630361][ T4330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1092.645582][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1092.662912][ T4330] usb 3-1: SerialNumber: syz [ 1092.716807][ T4330] cdc_ether 3-1:1.0: skipping garbage [ 1092.736941][ T4330] usb 3-1: bad CDC descriptors [ 1092.857379][ T26] audit: type=1326 audit(2000525992.932:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.4.14129" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c7d588dd9 code=0x0 [ 1092.939331][ T4330] usb 3-1: USB disconnect, device number 59 [ 1092.944089][T10900] loop3: detected capacity change from 0 to 4096 [ 1093.028744][T10900] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1093.187039][T10900] ntfs: volume version 3.1. [ 1093.205211][T10900] ntfs: (device loop3): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 1093.269234][T10900] ntfs: (device loop3): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 1093.859203][T10962] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1094.072129][T10966] loop4: detected capacity change from 0 to 4096 [ 1094.196676][T10966] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1094.224774][T10966] ntfs3: loop4: Failed to load $MFT. [ 1094.633307][T11024] xt_TCPMSS: Only works on TCP SYN packets [ 1094.650017][T11015] loop3: detected capacity change from 0 to 4096 [ 1094.819772][T11033] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1095.030263][T11037] loop2: detected capacity change from 0 to 4096 [ 1095.173040][T11056] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1095.187818][T11037] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1095.235589][T11037] NILFS (loop2): mounting fs with errors [ 1095.277859][T11037] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1095.357391][T11037] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1095.552820][T10966] loop4: detected capacity change from 0 to 32768 [ 1095.615717][T10966] XFS: attr2 mount option is deprecated. [ 1095.622433][T10966] XFS (loop4): invalid logbufsize: 14336 [not 16k,32k,64k,128k or 256k] [ 1095.681535][T11092] netlink: 'syz.3.14190': attribute type 3 has an invalid length. [ 1095.737422][T11092] netlink: 232 bytes leftover after parsing attributes in process `syz.3.14190'. [ 1096.098531][T11121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14199'. [ 1096.127961][T11121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14199'. [ 1096.189192][T11130] loop3: detected capacity change from 0 to 256 [ 1096.982828][ T4330] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1097.093182][T11225] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14230'. [ 1097.122621][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14230'. [ 1097.166562][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14230'. [ 1097.207943][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14230'. [ 1097.260993][ T4330] usb 4-1: Using ep0 maxpacket: 8 [ 1097.397092][ T4330] usb 4-1: config 156 has an invalid interface number: 91 but max is 0 [ 1097.418626][ T4330] usb 4-1: config 156 has no interface number 0 [ 1097.450869][ T4330] usb 4-1: config 156 interface 91 has no altsetting 0 [ 1097.571301][T11259] smb3: Bad value for 'uid' [ 1097.664312][T11265] loop4: detected capacity change from 0 to 1764 [ 1097.727079][T11265] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1097.737259][ T4330] usb 4-1: string descriptor 0 read error: -22 [ 1097.747813][ T4330] usb 4-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice=90.15 [ 1098.034427][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.119611][ T4330] usb 4-1: can't set first interface for hiFace device. [ 1098.159895][ T4330] snd-usb-hiface: probe of 4-1:156.91 failed with error -5 [ 1098.374191][ T4330] usb 4-1: USB disconnect, device number 44 [ 1098.375736][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14254'. [ 1098.485795][T11319] ipt_CLUSTERIP: Please specify destination IP [ 1098.616107][T11331] loop2: detected capacity change from 0 to 512 [ 1098.694151][ T6617] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1098.782873][T11331] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1098.811692][T11331] ext4 filesystem being mounted at /2751/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.855031][T11331] Quota error (device loop2): find_tree_dqentry: Getting block too big (514 >= 6) [ 1098.910344][T11331] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1098.923149][T11331] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.14262: Failed to acquire dquot type 0 [ 1098.971989][ T6617] usb 5-1: Using ep0 maxpacket: 16 [ 1099.011017][T11359] netlink: 748 bytes leftover after parsing attributes in process `syz.3.14270'. [ 1099.023238][T11360] netlink: 'syz.0.14271': attribute type 13 has an invalid length. [ 1099.113126][ T6617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.135734][ T6617] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1099.149055][T11363] loop1: detected capacity change from 0 to 1764 [ 1099.156604][ T6617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.188389][ T6617] usb 5-1: config 0 descriptor?? [ 1099.272238][ T6617] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 1099.592533][ T6617] usbhid 5-1:0.0: can't add hid device: -71 [ 1099.603264][ T6617] usbhid: probe of 5-1:0.0 failed with error -71 [ 1099.666030][ T6617] usb 5-1: USB disconnect, device number 12 [ 1100.142050][T11385] loop2: detected capacity change from 0 to 32768 [ 1100.176153][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14290'. [ 1100.253548][T11373] loop3: detected capacity change from 0 to 32768 [ 1100.322596][T11385] JBD2: Ignoring recovery information on journal [ 1100.432683][T11385] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 1100.598858][ T4335] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 1100.613648][ T4335] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 1100.622760][ T4335] CPU: 1 PID: 4335 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1100.630986][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1100.645183][ T4335] Workqueue: writeback wb_workfn (flush-7:3) [ 1100.651667][ T4335] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 1100.660239][ T4335] Code: df 41 80 3c 04 00 74 08 48 89 df e8 d2 20 ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 aa 20 ec fd 41 bf 90 00 00 00 4d 03 [ 1100.680897][ T4335] RSP: 0018:ffffc90003fbf260 EFLAGS: 00010202 [ 1100.687717][ T4335] RAX: 00000000000000ba RBX: ffff888079da0288 RCX: dffffc0000000000 [ 1100.696329][ T4335] RDX: 0000000000000000 RSI: ffffffff96483e40 RDI: ffff888079da0280 [ 1100.705693][ T4335] RBP: 1ffff1100f3b4059 R08: dffffc0000000000 R09: 1ffffffff203aa18 [ 1100.715355][ T4335] R10: dffffc0000000000 R11: fffffbfff203aa19 R12: 1ffff1100f3b4051 [ 1100.715789][T11385] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 1100.724229][ T4335] R13: ffff888079da02c8 R14: 00000000000005d0 R15: ffff8880769d3bac [ 1100.724254][ T4335] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1100.724272][ T4335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1100.724287][ T4335] CR2: 00007f3243dde000 CR3: 0000000057c8c000 CR4: 00000000003506e0 [ 1100.767181][T11385] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1100.768263][ T4335] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1100.768283][ T4335] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1100.778215][T11385] OCFS2: File system is now read-only. [ 1100.787431][ T4335] Call Trace: [ 1100.787447][ T4335] [ 1100.787459][ T4335] bio_associate_blkg+0x23a/0x340 [ 1100.787488][ T4335] lbmStartIO+0x204/0x4c0 [ 1100.787520][ T4335] lbmWrite+0x361/0x480 [ 1100.787540][ T4335] jfs_flush_journal+0x537/0xec0 [ 1100.787564][ T4335] ? lmLogShutdown+0x850/0x850 [ 1100.787586][ T4335] ? __lock_acquire+0x7d10/0x7d10 [ 1100.787607][ T4335] ? do_raw_spin_lock+0x128/0x2f0 [ 1100.787626][ T4335] ? __rwlock_init+0x140/0x140 [ 1100.787645][ T4335] jfs_write_inode+0x12b/0x220 [ 1100.787664][ T4335] __writeback_single_inode+0x6c3/0xda0 [ 1100.828384][T11385] (syz.2.14273,11385,0):ocfs2_search_chain:1785 ERROR: status = -30 [ 1100.829696][ T4335] writeback_sb_inodes+0xa4e/0x1680 [ 1100.838701][T11385] (syz.2.14273,11385,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 1100.840164][ T4335] ? queue_io+0x550/0x550 [ 1100.846162][T11385] (syz.2.14273,11385,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1100.851319][ T4335] ? rcu_is_watching+0x11/0xa0 [ 1100.851355][ T4335] wb_writeback+0x45d/0xbe0 [ 1100.857638][T11385] (syz.2.14273,11385,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1100.862082][ T4335] ? rcu_lock_release+0x20/0x20 [ 1100.862116][ T4335] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1100.867585][T11385] (syz.2.14273,11385,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 1100.872951][ T4335] ? mark_lock+0x94/0x320 [ 1100.872975][ T4335] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1100.881969][T11385] (syz.2.14273,11385,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 1100.886867][ T4335] wb_workfn+0x43a/0xf20 [ 1100.886902][ T4335] ? inode_wait_for_writeback+0x220/0x220 [ 1100.886930][ T4335] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1100.886953][ T4335] ? read_lock_is_recursive+0x10/0x10 [ 1100.886973][ T4335] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1100.886993][ T4335] ? _raw_spin_unlock+0x40/0x40 [ 1100.887011][ T4335] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1100.887030][ T4335] process_one_work+0x85f/0x1010 [ 1100.887055][ T4335] ? worker_detach_from_pool+0x240/0x240 [ 1101.024516][ T4335] ? lockdep_hardirqs_off+0x70/0x100 [ 1101.030007][ T4335] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1101.035591][ T4335] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1101.041417][ T4335] ? wq_worker_running+0x97/0x170 [ 1101.046979][ T4335] worker_thread+0xaa6/0x1290 [ 1101.052316][ T4335] ? lockdep_hardirqs_on+0x94/0x140 [ 1101.058332][ T4335] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1101.064700][ T4335] kthread+0x436/0x520 [ 1101.068976][ T4335] ? rcu_lock_release+0x20/0x20 [ 1101.074217][ T4335] ? kthread_blkcg+0xd0/0xd0 [ 1101.079007][ T4335] ret_from_fork+0x1f/0x30 [ 1101.083882][ T4335] [ 1101.087188][ T4335] Modules linked in: [ 1101.092182][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.094338][T11385] (syz.2.14273,11385,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1101.110125][T11385] (syz.2.14273,11385,0):ocfs2_mknod:385 ERROR: status = -30 [ 1101.132043][T11385] (syz.2.14273,11385,0):ocfs2_mknod:502 ERROR: status = -30 [ 1101.138952][ T4335] ---[ end trace a04fb75ddabe2015 ]--- [ 1101.150480][ T4335] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 1101.154368][T11385] (syz.2.14273,11385,0):ocfs2_create:676 ERROR: status = -30 [ 1101.162042][ T4335] Code: df 41 80 3c 04 00 74 08 48 89 df e8 d2 20 ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 aa 20 ec fd 41 bf 90 00 00 00 4d 03 [ 1101.189423][ T4335] RSP: 0018:ffffc90003fbf260 EFLAGS: 00010202 [ 1101.197121][ T4335] RAX: 00000000000000ba RBX: ffff888079da0288 RCX: dffffc0000000000 [ 1101.206457][ T4335] RDX: 0000000000000000 RSI: ffffffff96483e40 RDI: ffff888079da0280 [ 1101.215430][ T4335] RBP: 1ffff1100f3b4059 R08: dffffc0000000000 R09: 1ffffffff203aa18 [ 1101.224635][ T4335] R10: dffffc0000000000 R11: fffffbfff203aa19 R12: 1ffff1100f3b4051 [ 1101.235328][ T4335] R13: ffff888079da02c8 R14: 00000000000005d0 R15: ffff8880769d3bac [ 1101.245682][ T4335] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1101.255576][ T4335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1101.263238][ T4335] CR2: 0000555590168a38 CR3: 0000000060b3b000 CR4: 00000000003506f0 [ 1101.272283][ T4335] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1101.282002][ T4335] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1101.290447][ T4335] Kernel panic - not syncing: Fatal exception [ 1101.298147][ T4335] Kernel Offset: disabled [ 1101.302826][ T4335] Rebooting in 86400 seconds..