last executing test programs: 2.951488137s ago: executing program 3 (id=1614): getgroups(0x2, &(0x7f0000000840)=[0xffffffffffffffff, 0x0]) 2.640467405s ago: executing program 3 (id=1616): mount$overlay(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8000, 0x0) 2.445941257s ago: executing program 3 (id=1618): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x6a, 0x40000004, 0x84, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.984783823s ago: executing program 2 (id=1622): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000f40)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}]}, 0x0, 0x47e, &(0x7f0000001b40)="$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") 1.771317616s ago: executing program 1 (id=1623): syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="ffff19ffffffaaaaaaaaaabb86dd60f7d8ff00403c0020010000000000150000000000000000ff0200000000000000000000000000010004000000000000c91000000001"], 0x0) 1.552597529s ago: executing program 1 (id=1625): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c850000004300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.551704809s ago: executing program 2 (id=1626): prctl$PR_SET_MM(0x43, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) 1.448918085s ago: executing program 1 (id=1627): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002f80)=""/1, 0x1) 1.405539968s ago: executing program 2 (id=1628): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x49}, [@ldst={0x4, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.279228335s ago: executing program 1 (id=1629): socketpair(0xf, 0xa, 0x0, &(0x7f00000002c0)) 1.278394895s ago: executing program 2 (id=1630): prlimit64(0x0, 0xe, 0x0, 0x0) 1.088319876s ago: executing program 1 (id=1631): syz_mount_image$iso9660(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x0, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@dmode={'dmode', 0x3d, 0xffffffff}}, {@map_off}, {@cruft}, {@mode={'mode', 0x3d, 0x8}}, {@check_relaxed}, {@nocompress}], [{@uid_eq}]}, 0x1, 0xbbb, &(0x7f0000001880)="$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") 1.083346446s ago: executing program 0 (id=1632): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000005600000095000000000000009500a50500000000eb32f997e778e8b531b0dd8b2f24645a33cbd57f0832de40ae96860483575f39d3ba435212d807a53a4f05e3f24cf39ab78670dfaff482777916bd810c9886d388a63ae13695c99553b6075f34c08004b0c554a2fa9642fa6499d6e0f55159a3aaa5c38f1337afdb2f457486c7c5cf863f4dc6b8c1ac9fc94326bd1f498df8db00000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.02064005s ago: executing program 2 (id=1633): getrlimit(0x6, &(0x7f0000000e40)) 835.151971ms ago: executing program 2 (id=1634): syz_mount_image$ocfs2(&(0x7f0000000300), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4709, &(0x7f0000008f40)="$eJzs2m2IXFfBB/BzZ/d5spsm231Jm6TpyyQRXLQsm36q1g9xrdpo2rxoW02VdXaz3azO7qy7M1owSA2CKAhKEFR8oSqUfqkFMdAvtQgFX5BWoVQUrV9EClXwg0Eb6MrM3Jude2e2d7KTtNj8fpDM3nPvOffM/Oee+3KmEKueWlgtLqwWS0vFyuyDq7cVP1Mp1xbnQuF18kbvn+5ciZxk/8Y58p73fei+20L43bGvfGBtbW0t1A2Hjg60/H3+n6dnW18ThUyderudW2v6fe2xV376f6+1RZ4TIYQdbf2q6wshfORnIWwJIYzEZaPx62AIYVsIIQohPP6rf/xwoJcutDh7/0svHDtzeN+ZqSefeO7C/NENN4xC+HZ5963ziy/v77vjxbddpt0DAMBrev/xI/cenTwQno7C0Ln+9uv1nfFrcn1891s+cc+j/evr1+hO3+sYKgAAAGSs3/8PR692mK9LZtaSKcGnHjpx7zPR+no3tv/bDt1z5M73Th6I53+3tK2/Pc767+/ua8yhZud9s/O/I5n6ned/179Aj375+Z8v/f/m+5/0L9nvcIgKE6nlQmFiIoRjU83lXdHWQrmyWn37g5Xa0snN7/fNIp1/dvZ+fUK/2/xHM9Xz5v93f+yzPxns7+UdjLV8m5rqy8VsIR2l8994LP/RF6Ku8h/L1MvL/65nt5//Rfuwcwmye+RSpPNvHoj7WjcoNgeAev5f78/Pf0em/bz8vzt17vETm/j9T32cGY7qfR1IjQCvxuUb/ISJjHT+zSBSQ2f8QW50/P8nk/91mfbz8r+78rff/KWH83/7+H+5fsl1dUjn3wyimNpi/fgfKeQf/9dn2s/L/9en/vj8x3s6V7ef/+v9H3f+70rH6//04Nn4JLsd/3dm2s/Lf9fYA48stBZc012/PzgY93MoCmMtvzo9Vz+FDa2PAmtR/BVe7q7dq006/+anljp0hpovjeN/OH/835VpPy//R/Z89V2ne/r9b+fr/8mpXtq8eqTzH2yUXUr+r2Ty351pPy//75/+658euMzjf335oPy7ks5/a9v69ec/hbbrvw5PC8INmeW85z/7Rp957M893P8n/Uv2mzz/SZ5DjEfN5z90ls5/45Nvt+f/PZl6ecf/N/714rP7exn/owFPAHqQzn9bs7DDDWC3+d+YaT8v/8/d98WP/mET93+NsWcgyb/l/n9Ls/yo8b8r6fy3NwtTt9APN/5vnP+j9tz/ncn/pkz7eflfODTR/6XLfP6v93+808mJNun8hzbcrp7/b7t4/ntzpl5e/p/f++OXb+3p+j+ESff6m5bO/9oNt2sc/wP5+d+SqZeX/7e+9sunHu6h/2/toS7Z/Jvn+tThFF+bd3v/X8y0n5f/D8bPn91/Be7/bnf+70o6/+as+aXkn73/35tpPy//7xz53kr/FXj+c5f8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANmU0fh0OUWEitVwoTEyEMBYv7wpbo5nSyemZcmX2U6sh7IjLi2E0mi9XZkrl6YWlysm56VK5XJkN4bp4/Y4wEK2WK9XpxdLy9RfbGoxOzZVWqjNzpWoIYWdcfmPYnrQ1s1BdLC03tk3qXBOVPl2rVEsTtdW5lbD7Yvm2pHx+pVJbvuFiW9cWKivLp0pL0ycXVt45OTk5GfZc7PNINPdQdW6p2uxtc229TlJ3OGp5M43VN7Xs75OV2spSqdwov7mlTrkyWyq31LmlZX/VldrSbKk6N12uzCf7K7bUbXlvjdV743XjYST1/pK6WQfj1zsPHf/w8cMH2tYXo3TeS7XFucntnb8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx5PX3HO74ZQuhrLhVCCAeTP6L4X8rZ+1964diZw/vOTD35xHMX5o922gYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrx9kdi11Ze2nX5qWtuz+Ezvzc/yGE0WR5//PejtATQvj6ZeZ0WKUt9DT1/2Zybrx81eT33v7xh9dHk7XXX3y3uG53SNKhhuOdSZoODa29/43qzuCz6cEkhDR2IUSxMPbkTC2E0BG7EKL4+XH+Yvb7/l/sQoii/8Pdruz+12IXQhRbd3/qq+XPeFTP+fqFwcb//laP4G08orMOvT155V3qplbey/z9P8k374PVMHviyPvnsYsgmtm5qaOxawAAAP6ucy3y/7Blef/+5ST0dJdz/29N+X9vU/+r5/8r7m2/MTbTVgixrTQ2mR0P72unz43v1MDV269rxnuqSv5fbfL/apP/V5v8v9rk/9Um/yfzSv5fSY9v7ll8EbsIopH/AwBA9Rw6PjFVHx7JXv43/egs5/V9eVvP8/QHt6YHHjWMG8kP/22Hj00cODg8kt/38oDgyvoP6dLZ7/l8j+a2MNk076LV+g+9Txfmr3WWP1H/w/kbRX3Fda3/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeL5/ldfF95fGSK81Ik1ll13753ia/cx9Oyzvs8eNWwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4KAAD//wr9yCQ=") 834.494891ms ago: executing program 0 (id=1635): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=@base={0x1d, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) 770.278195ms ago: executing program 1 (id=1636): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce0102829709021200010000000009040000000202", @ANYRES8], 0x0) 580.177556ms ago: executing program 0 (id=1637): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x8000000}, 0x50) 340.0803ms ago: executing program 0 (id=1638): syz_emit_ethernet(0x46, &(0x7f0000000700)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x10, 0x3a, 0xfe, @private1, @mcast2, {[], @ni={0x832aa7b37cf2b091, 0x0, 0x0, 0x4003, 0x100, 0x8a}}}}}}, 0x0) 279.385374ms ago: executing program 3 (id=1639): io_uring_setup(0x8, &(0x7f0000000380)={0x0, 0xe99d, 0x2000, 0x2, 0x24c}) 194.397798ms ago: executing program 0 (id=1640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000006b00000095"], &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) 138.883182ms ago: executing program 3 (id=1641): socketpair$unix(0x1, 0x7ffffffe, 0x0, 0x0) 317.84µs ago: executing program 0 (id=1642): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x5311}}, {@usrquota}, {@jqfmt_vfsv1}, {@debug}, {@noauto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@nouid32}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") 0s ago: executing program 3 (id=1643): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @const={0x0, 0x0, 0x0, 0x2, 0x1}]}}, 0x0, 0x32}, 0x28) kernel console output (not intermixed with test programs): ing the ext4 subsystem [ 222.148350][ T8381] EXT4-fs (loop0): orphan cleanup on readonly fs [ 222.186169][ T8381] EXT4-fs error (device loop0): mb_free_blocks:1954: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 222.241979][ T8381] EXT4-fs (loop0): Remounting filesystem read-only [ 222.279678][ T8381] EXT4-fs (loop0): 1 truncate cleaned up [ 222.311240][ T8381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 222.332938][ T5809] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 222.473581][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.536235][ T8374] loop3: detected capacity change from 0 to 40427 [ 222.542944][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 222.550482][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.581952][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.605039][ T8374] F2FS-fs (loop3): build fault injection attr: rate: 25, type: 0x7ffff [ 222.621226][ T8374] F2FS-fs (loop3): project quota file already specified [ 222.640035][ T5809] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 222.660425][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.680637][ T5809] usb 2-1: Product: syz [ 222.691461][ T5809] usb 2-1: Manufacturer: syz [ 222.700904][ T5809] usb 2-1: SerialNumber: syz [ 222.882576][ T27] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 222.973172][ T5809] cdc_ncm 2-1:1.0: bind() failure [ 222.999736][ T5809] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 223.024226][ T5809] usbtest: probe of 2-1:1.0 failed with error -22 [ 223.044128][ T5809] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 223.062625][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 223.071735][ T5809] cdc_ncm 2-1:1.1: bind() failure [ 223.077360][ T27] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 223.085332][ T5809] usbtest 2-1:1.1: couldn't get endpoints, -22 [ 223.112493][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.132972][ T5809] usbtest: probe of 2-1:1.1 failed with error -22 [ 223.144032][ T27] usb 1-1: config 0 descriptor?? [ 223.152727][ T5809] usb 2-1: USB disconnect, device number 53 [ 223.185639][ T27] hso 1-1:0.0: Can't find BULK IN endpoint [ 223.197259][ T8389] loop2: detected capacity change from 0 to 32768 [ 223.218068][ T8389] lmLogInit: exit(-22) [ 223.222349][ T8389] lmLogOpen: exit(-22) [ 223.239578][ T28] audit: type=1326 audit(1769205430.621:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.3.1115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5375f9acb9 code=0x0 [ 223.302782][ T5883] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 223.403493][ T5853] usb 1-1: USB disconnect, device number 40 [ 223.471813][ T8399] loop3: detected capacity change from 0 to 512 [ 223.514784][ T8399] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1116: invalid indirect mapped block 256 (level 2) [ 223.572816][ T8399] EXT4-fs (loop3): 2 truncates cleaned up [ 223.600432][ T8399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.705321][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.039247][ T8415] loop0: detected capacity change from 0 to 512 [ 224.182840][ T5853] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 224.222727][ T5760] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 224.277124][ T27] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 224.354736][ T8417] loop0: detected capacity change from 0 to 32768 [ 224.372537][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 224.383938][ T8417] JBD2: Unrecognised features on journal [ 224.384308][ T5853] usb 3-1: config 251 has an invalid interface number: 229 but max is 0 [ 224.398532][ T5853] usb 3-1: config 251 has no interface number 0 [ 224.405467][ T5853] usb 3-1: config 251 interface 229 altsetting 218 bulk endpoint 0xF has invalid maxpacket 8 [ 224.406505][ T8417] (syz.0.1124,8417,0):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 224.418608][ T5853] usb 3-1: config 251 interface 229 altsetting 218 bulk endpoint 0x1 has invalid maxpacket 32 [ 224.438128][ T5760] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 224.447018][ T5760] usb 2-1: config 0 has no interface number 0 [ 224.453414][ T5760] usb 2-1: config 0 interface 117 has no altsetting 0 [ 224.460354][ T5853] usb 3-1: config 251 interface 229 has no altsetting 0 [ 224.471468][ T5853] usb 3-1: New USB device found, idVendor=0bfd, idProduct=001d, bcdDevice=72.c3 [ 224.480883][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 224.489052][ T5760] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=e7.12 [ 224.499344][ T27] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 224.507654][ T8417] (syz.0.1124,8417,1):ocfs2_check_volume:2403 ERROR: Could not initialize journal! [ 224.517883][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.526013][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.534296][ T27] usb 4-1: config 0 has no interface number 0 [ 224.540624][ T8417] (syz.0.1124,8417,1):ocfs2_check_volume:2488 ERROR: status = -22 [ 224.549216][ T5853] usb 3-1: Product: syz [ 224.553684][ T5760] usb 2-1: Product: syz [ 224.558168][ T5853] usb 3-1: Manufacturer: syz [ 224.563440][ T5760] usb 2-1: Manufacturer: syz [ 224.568363][ T5853] usb 3-1: SerialNumber: syz [ 224.568936][ T8417] (syz.0.1124,8417,0):ocfs2_mount_volume:1820 ERROR: status = -22 [ 224.575759][ T27] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=9f.8c [ 224.590292][ T5760] usb 2-1: SerialNumber: syz [ 224.598579][ T8409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.609099][ T5760] usb 2-1: config 0 descriptor?? [ 224.615120][ T8409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.622503][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.635783][ T5760] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 224.643493][ T8417] (syz.0.1124,8417,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 224.657826][ T27] usb 4-1: Product: syz [ 224.662215][ T27] usb 4-1: Manufacturer: syz [ 224.681416][ T27] usb 4-1: SerialNumber: syz [ 224.690656][ T27] usb 4-1: config 0 descriptor?? [ 224.715348][ T27] flexcop_usb: set interface failed. [ 224.731122][ T27] b2c2_flexcop_usb: probe of 4-1:0.204 failed with error -22 [ 224.892184][ T5853] kvaser_usb 3-1:251.229: Cannot get usb endpoint(s) [ 224.900941][ T5809] usb 2-1: USB disconnect, device number 54 [ 224.932598][ T5760] usb 4-1: USB disconnect, device number 38 [ 224.951945][ T5853] usb 3-1: USB disconnect, device number 41 [ 224.986403][ T8422] loop0: detected capacity change from 0 to 512 [ 225.019201][ T8422] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1126: invalid indirect mapped block 256 (level 2) [ 225.035725][ T8422] EXT4-fs (loop0): 2 truncates cleaned up [ 225.045056][ T8422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.119776][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.680238][ T8438] erofs: (device loop2): mounted with root inode @ nid 36. [ 225.773737][ T8435] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 226.057035][ T8432] set_capacity_and_notify: 2 callbacks suppressed [ 226.057052][ T8432] loop0: detected capacity change from 0 to 32768 [ 226.083921][ T8432] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1130 (8432) [ 226.103251][ T5809] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 226.158885][ T8432] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.198373][ T8432] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 226.225398][ T8432] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 226.279117][ T8432] BTRFS info (device loop0): trying to use backup root at mount time [ 226.312839][ T8432] BTRFS info (device loop0): using free space tree [ 226.316266][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 226.356222][ T5809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 226.379143][ T5809] usb 4-1: config 255 has an invalid interface number: 227 but max is 0 [ 226.394780][ T5809] usb 4-1: config 255 has no interface number 0 [ 226.401664][ T5809] usb 4-1: config 255 interface 227 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 226.438618][ T8454] loop1: detected capacity change from 0 to 512 [ 226.466866][ T5809] usb 4-1: config 255 interface 227 altsetting 0 endpoint 0x88 has an invalid bInterval 165, changing to 11 [ 226.489455][ T5809] usb 4-1: config 255 interface 227 altsetting 0 endpoint 0x84 has an invalid bInterval 105, changing to 10 [ 226.507670][ T5809] usb 4-1: config 255 interface 227 altsetting 0 endpoint 0x84 has invalid maxpacket 9688, setting to 1024 [ 226.521585][ T8454] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 226.547270][ T11] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xf187ebec4c8fe808032a11c24b221f7d5f4503ce88318e4c969ae916445d9e10 level 0 [ 226.614540][ T5809] usb 4-1: config 255 interface 227 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.628531][ T8468] PKCS7: Unknown OID: [4] 4.2(bad) [ 226.634709][ T8468] PKCS7: Only support pkcs7_signedData type [ 226.706217][ T8432] BTRFS warning (device loop0): couldn't read tree root [ 226.719692][ T5809] usb 4-1: New USB device found, idVendor=12d1, idProduct=242c, bcdDevice=ee.8a [ 226.722611][ T8432] BTRFS warning (device loop0): try to load backup roots slot 1 [ 226.767440][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.782660][ T5809] usb 4-1: Product: syz [ 226.792592][ T5809] usb 4-1: Manufacturer: syz [ 226.822613][ T5809] usb 4-1: SerialNumber: syz [ 226.835980][ T1004] BTRFS warning (device loop0): checksum verify failed on logical 5292032 mirror 1 wanted 0x71e9986adce26f47d358c48a094a2713636d7db020873728b415408513a1db55 found 0x48208b0caa6da3a738f36ca92654a91d6adb8fa845866e92f2edd67ab26e4d81 level 0 [ 226.875483][ T8440] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 226.922802][ T8432] BTRFS warning (device loop0): failed to read root (objectid=9): -5 [ 226.962561][ T8432] BTRFS warning (device loop0): try to load backup roots slot 2 [ 227.012061][ T11] BTRFS warning (device loop0): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0xc6551eead63db9976b787ad49a12fd3f30ff3897923188c3553a067173bededa level 1 [ 227.066198][ T8432] BTRFS warning (device loop0): couldn't read tree root [ 227.082933][ T8432] BTRFS warning (device loop0): try to load backup roots slot 3 [ 227.103509][ T8432] BTRFS warning (device loop0): global root 2 0 already exists [ 227.119376][ T5809] option 4-1:255.227: GSM modem (1-port) converter detected [ 227.126876][ T8432] BTRFS error (device loop0): failed to load root extent [ 227.147856][ T5809] usb 4-1: USB disconnect, device number 39 [ 227.159141][ T5809] option 4-1:255.227: device disconnected [ 227.215210][ T8432] BTRFS error (device loop0): open_ctree failed: -17 [ 227.402671][ T787] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 227.537797][ T8472] loop2: detected capacity change from 0 to 32768 [ 227.560656][ T8472] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1143 (8472) [ 227.582906][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 227.598268][ T8472] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.610416][ T787] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 227.632544][ T787] usb 2-1: config 252 has no interface number 0 [ 227.641958][ T787] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 227.649537][ T8472] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 227.669468][ T8472] BTRFS info (device loop2): turning on sync discard [ 227.678232][ T8472] BTRFS info (device loop2): enabling auto defrag [ 227.684562][ T787] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 227.712503][ T8472] BTRFS info (device loop2): force clearing of disk cache [ 227.719742][ T8472] BTRFS info (device loop2): disabling auto defrag [ 227.721332][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.747293][ T8472] BTRFS info (device loop2): max_inline at 0 [ 227.753495][ T787] usb 2-1: Product: syz [ 227.753516][ T787] usb 2-1: Manufacturer: syz [ 227.753533][ T787] usb 2-1: SerialNumber: syz [ 227.782732][ T8472] BTRFS info (device loop2): enabling ssd optimizations [ 227.797430][ T8472] BTRFS info (device loop2): enabling disk space caching [ 227.816052][ T787] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 227.862300][ T8472] BTRFS info (device loop2): disabling disk space caching [ 227.930698][ T8472] BTRFS info (device loop2): disabling tree log [ 227.951277][ T8472] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 228.026060][ T8472] BTRFS error (device loop2): open_ctree failed: -22 [ 228.067098][ T5853] usb 2-1: USB disconnect, device number 55 [ 228.073373][ T11] usb 2-1: Failed to submit usb control message: -71 [ 228.080434][ T11] usb 2-1: unable to send the bmi data to the device: -71 [ 228.121278][ T11] usb 2-1: unable to get target info from device [ 228.131162][ T11] usb 2-1: could not get target info (-71) [ 228.137487][ T11] usb 2-1: could not probe fw (-71) [ 228.663204][ T5760] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 228.884704][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 228.895058][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 228.909883][ T5760] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 228.913153][ T787] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 228.927742][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.937186][ T5760] usb 4-1: Product: syz [ 228.941436][ T5760] usb 4-1: Manufacturer: syz [ 228.947151][ T5760] usb 4-1: SerialNumber: syz [ 228.955218][ T5760] usb 4-1: config 0 descriptor?? [ 228.955325][ T8514] loop0: detected capacity change from 0 to 4096 [ 228.979343][ T8514] ntfs: (device loop0): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 229.000559][ T8514] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 229.023675][ T27] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 229.122739][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 229.140440][ T787] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 229.159938][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.181685][ T787] usb 3-1: config 0 descriptor?? [ 229.201762][ T787] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 229.217901][ T787] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 229.264079][ T27] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 229.272327][ T27] usb 2-1: config 0 has no interface number 0 [ 229.312732][ T5760] usb 4-1: USB disconnect, device number 40 [ 229.318948][ T27] usb 2-1: config 0 interface 113 has no altsetting 0 [ 229.352615][ T27] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 229.361781][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.387665][ T8424] udevd[8424]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.422490][ T27] usb 2-1: Product: syz [ 229.426735][ T27] usb 2-1: Manufacturer: syz [ 229.443118][ T27] usb 2-1: SerialNumber: syz [ 229.458296][ T27] usb 2-1: config 0 descriptor?? [ 229.472952][ T787] usb 3-1: USB disconnect, device number 42 [ 229.633664][ T8524] loop0: detected capacity change from 0 to 128 [ 229.667527][ T8524] qnx6: superblock #1 checksum error [ 229.703518][ C1] usb 2-1: NFC: Urb failure (status -71) [ 229.723293][ C1] usb 2-1: NFC: Urb failure (status -71) [ 229.732835][ T27] usb 2-1: NFC: Unable to get FW version [ 229.757651][ T27] pn533_usb: probe of 2-1:0.113 failed with error -71 [ 229.789081][ T27] usb 2-1: USB disconnect, device number 56 [ 230.068898][ T8534] loop2: detected capacity change from 0 to 256 [ 230.222866][ T788] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 230.264457][ T787] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 230.422570][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 230.430669][ T788] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 230.453244][ T8544] loop2: detected capacity change from 0 to 128 [ 230.459611][ T788] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.473197][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 230.478987][ T788] usb 1-1: config 1 interface 1 has no altsetting 0 [ 230.487445][ T8544] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 230.499858][ T8544] hpfs: filesystem error: improperly stopped [ 230.503115][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 230.512308][ T788] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.531782][ T8544] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 230.539927][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.548349][ T8544] hpfs: You really don't want any checks? You are crazy... [ 230.553052][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.566910][ T8544] hpfs: hpfs_map_sector(): read error [ 230.572345][ T8544] hpfs: code page support is disabled [ 230.578147][ T788] usb 1-1: Product: syz [ 230.582403][ T788] usb 1-1: Manufacturer: syz [ 230.588056][ T788] usb 1-1: SerialNumber: syz [ 230.605102][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.613467][ T8544] hpfs: filesystem error: map_dirent: not a directory [ 230.622195][ T8544] [ 230.632777][ T8544] hpfs: hpfs_map_4sectors(): unaligned read [ 230.638736][ T8544] hpfs: filesystem error: unable to find root dir [ 230.643334][ T787] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 230.671507][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.711374][ T787] usb 4-1: Product: syz [ 230.721504][ T787] usb 4-1: Manufacturer: syz [ 230.733888][ T787] usb 4-1: SerialNumber: syz [ 230.759345][ T787] usb 4-1: config 0 descriptor?? [ 230.888350][ T788] usb 1-1: 2:1 : sample bitwidth 202 in over sample bytes 1 [ 230.911094][ T788] usb 1-1: 2:1 : invalid channels 0 [ 230.961860][ T8550] loop2: detected capacity change from 0 to 4096 [ 230.969614][ T788] usb 1-1: USB disconnect, device number 41 [ 231.017118][ T8550] NILFS (loop2): invalid segment: Checksum error in segment payload [ 231.018419][ T5809] usb 4-1: USB disconnect, device number 41 [ 231.052483][ T8550] NILFS (loop2): trying rollback from an earlier position [ 231.104106][ T8550] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 231.170900][ T8552] loop1: detected capacity change from 0 to 4096 [ 231.199625][ T8552] ntfs: (device loop1): ntfs_read_inode_mount(): $MFT/$DATA attribute not found. $MFT is corrupt. Run chkdsk. [ 231.219118][ T8552] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 231.241343][ T8552] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata. [ 231.756033][ T8560] loop2: detected capacity change from 0 to 4096 [ 231.788936][ T8560] NILFS (loop2): mounting unchecked fs [ 231.810780][ T8560] NILFS (loop2): invalid segment: Sequence number mismatch [ 231.838611][ T8560] NILFS (loop2): trying rollback from an earlier position [ 231.891715][ T8560] NILFS (loop2): recovery complete [ 231.924754][ T8567] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.941999][ T8564] loop3: detected capacity change from 0 to 8192 [ 231.986678][ T8564] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 232.042662][ T8564] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 232.077876][ T8564] REISERFS (device loop3): using ordered data mode [ 232.092752][ T8564] reiserfs: using flush barriers [ 232.108467][ T8564] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 232.129494][ T8564] REISERFS (device loop3): checking transaction log (loop3) [ 232.154967][ T8564] REISERFS (device loop3): Using r5 hash to sort names [ 232.187363][ T8564] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 232.219508][ T8564] REISERFS warning (device loop3): vs-2180 finish_unfinished: iget failed for [1 0 0x0 SD] [ 232.254248][ T8564] REISERFS error (device loop3): vs-15011 reiserfs_release_objectid: tried to free free object id (0) [ 232.290362][ T8556] loop1: detected capacity change from 0 to 32768 [ 232.298085][ T8564] REISERFS (device loop3): Remounting filesystem read-only [ 232.395226][ T8556] (syz.1.1183,8556,0):ocfs2_get_clusters:606 ERROR: status = -34 [ 232.435470][ T8556] (syz.1.1183,8556,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -34 [ 232.453664][ T8556] (syz.1.1183,8556,0):ocfs2_map_slot_buffers:378 ERROR: status = -34 [ 232.473017][ T8556] (syz.1.1183,8556,0):ocfs2_init_slot_info:426 ERROR: status = -34 [ 232.481034][ T8556] (syz.1.1183,8556,0):ocfs2_initialize_super:2278 ERROR: status = -34 [ 232.523632][ T28] audit: type=1326 audit(1769205439.911:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.2.1191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8475d9acb9 code=0x0 [ 232.526461][ T8556] (syz.1.1183,8556,0):ocfs2_fill_super:1178 ERROR: status = -34 [ 232.853117][ T28] audit: type=1326 audit(1769205440.231:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8579 comm="syz.1.1194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f198819acb9 code=0x0 [ 232.896695][ T8578] loop3: detected capacity change from 0 to 2048 [ 233.134322][ T8570] loop0: detected capacity change from 0 to 32768 [ 233.178531][ T8570] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1189 (8570) [ 233.271988][ T8570] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 233.300621][ T8570] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 233.328878][ T8570] BTRFS info (device loop0): force zlib compression, level 3 [ 233.358412][ T8570] BTRFS info (device loop0): turning on flush-on-commit [ 233.378028][ T8570] BTRFS info (device loop0): max_inline at 4096 [ 233.405031][ T8570] BTRFS info (device loop0): using free space tree [ 233.412240][ T8588] loop3: detected capacity change from 0 to 1024 [ 233.447203][ T8588] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.521851][ T8588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.622545][ T8570] BTRFS info (device loop0): enabling ssd optimizations [ 233.630409][ T8570] BTRFS info (device loop0): auto enabling async discard [ 233.783934][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.803984][ T5771] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 234.020646][ T8614] loop3: detected capacity change from 0 to 1024 [ 234.076555][ T8614] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0) [ 234.119393][ T5881] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (5881) [ 234.407792][ T8586] loop2: detected capacity change from 0 to 40427 [ 234.465601][ T8586] F2FS-fs (loop2): heap/no_heap options were deprecated [ 234.480771][ T8586] F2FS-fs (loop2): user quota file already specified [ 234.624582][ T8625] loop1: detected capacity change from 0 to 4096 [ 234.658321][ T8625] ntfs3: loop1: Primary boot: invalid index size -127. [ 234.684669][ T8625] ntfs3: loop1: try to read out of volume at offset 0x1ffe00 [ 234.808122][ T8629] NILFS (loop3): mounting unchecked fs [ 234.844751][ T8629] NILFS (loop3): invalid segment: Sequence number mismatch [ 234.888119][ T8629] NILFS (loop3): trying rollback from an earlier position [ 234.954858][ T8629] NILFS (loop3): recovery complete [ 234.983276][ T8634] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.094846][ T8633] erofs: (device loop2): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 235.431508][ T8640] hfsplus: request for non-existent node 40 in B*Tree [ 235.472763][ T8640] hfsplus: request for non-existent node 40 in B*Tree [ 235.661530][ T8646] hfs: unable to locate alternate MDB [ 235.709016][ T8646] hfs: continuing without an alternate MDB [ 235.717256][ T8646] hfs: get root inode failed [ 235.824554][ T788] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 235.979014][ T8649] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 236.029360][ T8649] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 236.039817][ T788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.070655][ T788] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 236.106552][ T788] usb 3-1: config 1 has no interface number 1 [ 236.133988][ T788] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 236.176369][ T788] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 236.252571][ T788] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.261701][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.290907][ T788] usb 3-1: Product: syz [ 236.296341][ T788] usb 3-1: Manufacturer: syz [ 236.310355][ T8658] set_capacity_and_notify: 5 callbacks suppressed [ 236.310367][ T8658] loop1: detected capacity change from 0 to 4096 [ 236.323909][ T788] usb 3-1: SerialNumber: syz [ 236.345275][ T8642] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.379759][ T8658] NILFS (loop1): mounting unchecked fs [ 236.392107][ T8658] NILFS (loop1): invalid segment: Sequence number mismatch [ 236.410121][ T8658] NILFS (loop1): trying rollback from an earlier position [ 236.522520][ T8658] NILFS (loop1): recovery complete [ 236.538082][ T8665] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.617771][ T788] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 236.630568][ T788] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 236.720328][ T788] usb 3-1: USB disconnect, device number 43 [ 236.820500][ T8424] udevd[8424]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.485038][ T8669] loop0: detected capacity change from 0 to 40427 [ 237.506524][ T8669] F2FS-fs (loop0): Mismatch start address, segment0(0) cp_blkaddr(512) [ 237.515156][ T8669] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 237.542699][ T8683] loop2: detected capacity change from 0 to 2048 [ 237.555543][ T8675] loop1: detected capacity change from 0 to 32768 [ 237.566782][ T8675] (syz.1.1230,8675,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 237.586503][ T8683] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.712682][ T787] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 237.777225][ T28] audit: type=1326 audit(1769205445.161:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8684 comm="syz.1.1236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f198819acb9 code=0x0 [ 237.942274][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 237.961677][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 237.978299][ T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.012543][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.021529][ T787] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.088791][ T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.126865][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.152527][ T787] usb 4-1: Product: syz [ 238.156757][ T787] usb 4-1: Manufacturer: syz [ 238.161925][ T787] usb 4-1: SerialNumber: syz [ 238.203369][ T8687] loop0: detected capacity change from 0 to 8192 [ 238.281033][ T8687] loop0: AHDI p3 p4 [ 238.290882][ T8687] loop0: p3 start 525312 is beyond EOD, truncated [ 238.330037][ T5139] loop0: AHDI p3 p4 [ 238.355534][ T5139] loop0: p3 start 525312 is beyond EOD, truncated [ 238.442175][ T787] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 238.462271][ T787] cdc_ncm 4-1:1.0: bind() failure [ 238.483949][ T7123] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.510666][ T787] usb 4-1: USB disconnect, device number 42 [ 238.815393][ T8689] loop2: detected capacity change from 0 to 32768 [ 238.831309][ T8689] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1238 (8689) [ 238.833160][ T5853] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 238.863214][ T8689] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.873977][ T8689] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 238.884356][ T8689] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 238.899459][ T8689] BTRFS info (device loop2): trying to use backup root at mount time [ 238.908063][ T8689] BTRFS info (device loop2): using free space tree [ 238.934602][ T59] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0xf187ebec4c8fe808032a11c24b221f7d5f4503ce88318e4c969ae916445d9e10 level 0 [ 238.970813][ T8689] BTRFS warning (device loop2): couldn't read tree root [ 238.982517][ T8689] BTRFS warning (device loop2): try to load backup roots slot 1 [ 239.005938][ T1004] BTRFS warning (device loop2): checksum verify failed on logical 5292032 mirror 1 wanted 0x71e9986adce26f47d358c48a094a2713636d7db020873728b415408513a1db55 found 0x48208b0caa6da3a738f36ca92654a91d6adb8fa845866e92f2edd67ab26e4d81 level 0 [ 239.062981][ T5809] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 239.083973][ T5853] usb 2-1: unable to get BOS descriptor or descriptor too short [ 239.112581][ T5853] usb 2-1: config 3 has an invalid interface number: 8 but max is 3 [ 239.116033][ T8689] BTRFS warning (device loop2): failed to read root (objectid=9): -5 [ 239.120623][ T5853] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 239.156950][ T8689] BTRFS warning (device loop2): try to load backup roots slot 2 [ 239.175139][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5255168 mirror 1 wanted 0xa2bc52bf83e4351a511664158b2f7d69be610068f1b706d330a0e4f01c3ea6c4 found 0xc6551eead63db9976b787ad49a12fd3f30ff3897923188c3553a067173bededa level 1 [ 239.200497][ T5853] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 239.210103][ T8689] BTRFS warning (device loop2): couldn't read tree root [ 239.219053][ T8689] BTRFS warning (device loop2): try to load backup roots slot 3 [ 239.227077][ T5853] usb 2-1: config 3 has no interface number 0 [ 239.233707][ T5853] usb 2-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 52, changing to 9 [ 239.245336][ T5853] usb 2-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid maxpacket 8241, setting to 1024 [ 239.257166][ T5853] usb 2-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 239.270593][ T8689] BTRFS warning (device loop2): global root 2 0 already exists [ 239.274565][ T5809] usb 1-1: not running at top speed; connect to a high speed hub [ 239.279787][ T8689] BTRFS error (device loop2): failed to load root extent [ 239.300175][ T5809] usb 1-1: config 101 has an invalid interface number: 83 but max is 0 [ 239.308733][ T5853] usb 2-1: config 3 interface 8 has no altsetting 0 [ 239.322625][ T5853] usb 2-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 239.340724][ T5809] usb 1-1: config 101 has no interface number 0 [ 239.345470][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.365398][ T5853] usb 2-1: Product: syz [ 239.372213][ T5809] usb 1-1: config 101 interface 83 has no altsetting 0 [ 239.379930][ T5853] usb 2-1: Manufacturer: syz [ 239.390220][ T5853] usb 2-1: SerialNumber: syz [ 239.409379][ T5809] usb 1-1: New USB device found, idVendor=056e, idProduct=4008, bcdDevice=31.a4 [ 239.419828][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.431771][ T8689] BTRFS error (device loop2): open_ctree failed: -17 [ 239.442585][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 239.460916][ T5809] usb 1-1: Product: syz [ 239.484035][ T5809] usb 1-1: Manufacturer: syz [ 239.489266][ T5809] usb 1-1: SerialNumber: syz [ 239.643311][ T5853] appledisplay 2-1:3.8: Error while getting initial brightness: -71 [ 239.654008][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 239.677249][ T5853] appledisplay: probe of 2-1:3.8 failed with error -71 [ 239.688153][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 239.706761][ T9] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 239.713847][ T5853] usb 2-1: USB disconnect, device number 57 [ 239.757411][ T9] usb 4-1: config 0 has no interface number 1 [ 239.790703][ T9] usb 4-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.805149][ T5809] usb 1-1: USB disconnect, device number 42 [ 239.833086][ T9] usb 4-1: config 0 interface 2 has no altsetting 0 [ 239.857164][ T9] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 239.866990][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.882795][ T9] usb 4-1: Product: syz [ 239.893544][ T9] usb 4-1: Manufacturer: syz [ 239.898376][ T9] usb 4-1: SerialNumber: syz [ 239.913252][ T9] usb 4-1: config 0 descriptor?? [ 240.155795][ T9] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 240.180128][ T9] usb 4-1: invalid MIDI in EP 0 [ 240.190198][ T9] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 240.203171][ T9] usb 4-1: USB disconnect, device number 43 [ 240.222210][ T5881] udevd[5881]: setting mode of /dev/bus/usb/004/043 to 020664 failed: No such file or directory [ 240.238515][ T5881] udevd[5881]: setting owner of /dev/bus/usb/004/043 to uid=0, gid=0 failed: No such file or directory [ 240.442574][ T5853] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 240.654457][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 240.674928][ T5853] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 240.699383][ T5853] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.719925][ T5853] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 240.741849][ T5853] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 240.761382][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.779654][ T5853] usb 3-1: Product: syz [ 240.783945][ T5853] usb 3-1: Manufacturer: syz [ 240.788585][ T5853] usb 3-1: SerialNumber: syz [ 240.833388][ T5853] usb 3-1: config 0 descriptor?? [ 241.056232][ T27] usb 3-1: USB disconnect, device number 44 [ 241.136255][ T8730] loop1: detected capacity change from 0 to 32768 [ 241.165829][ T8730] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 241.175049][ T8730] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 241.221454][ T8740] loop3: detected capacity change from 0 to 4096 [ 241.253107][ T8730] syz.1.1251: attempt to access beyond end of device [ 241.253107][ T8730] loop1: rw=12288, sector=154618822868, nr_sectors = 4 limit=32768 [ 241.270627][ T8730] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 241.348939][ T8740] ntfs: volume version 3.1. [ 241.371794][ T8740] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x5, type 0xb0, name_len 4). Marking corrupt inode and base inode 0x5 as bad. Run chkdsk. [ 241.433013][ T8740] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to get bitmap attribute. [ 241.442504][ T8740] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 241.472980][ T8740] ntfs: (device loop3): load_system_files(): Failed to load root directory. [ 241.514263][ T8740] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 241.759173][ T8736] loop0: detected capacity change from 0 to 32768 [ 241.816741][ T8736] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 241.859530][ T8736] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 242.004087][ T8736] gfs2: fsid=syz:syz.0: journal 0 mapped with 13 extents in 0ms [ 242.032646][ T8736] gfs2: fsid=syz:syz.0: can't find per_node directory: -2 [ 242.496439][ T8766] loop3: detected capacity change from 0 to 64 [ 242.560435][ T8766] hfs: found bad thread record in catalog [ 242.592543][ T8766] hfs: get root inode failed [ 242.642772][ T5864] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 242.853424][ T5864] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 242.882274][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.904317][ T5864] usb 3-1: Product: syz [ 242.911122][ T5864] usb 3-1: Manufacturer: syz [ 242.920890][ T5864] usb 3-1: SerialNumber: syz [ 243.005862][ T8777] loop1: detected capacity change from 0 to 4096 [ 243.028763][ T8777] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 243.082554][ T788] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 243.106449][ T8777] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 243.130953][ T8777] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 243.162944][ T8777] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 243.192157][ T8777] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 243.261779][ T8777] ntfs: volume version 3.1. [ 243.287187][ T788] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 243.289093][ T5864] rtl8150 3-1:1.0: couldn't reset the device [ 243.312210][ T5864] rtl8150: probe of 3-1:1.0 failed with error -5 [ 243.319091][ T788] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 243.362933][ T788] usb 1-1: config 8 has no interface number 0 [ 243.373976][ T5864] usb 3-1: USB disconnect, device number 45 [ 243.399731][ T788] usb 1-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.461268][ T788] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 243.487049][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.532634][ T788] usb 1-1: Product: syz [ 243.540323][ T788] usb 1-1: Manufacturer: syz [ 243.556738][ T788] usb 1-1: SerialNumber: syz [ 243.812867][ T788] usb 1-1: USB disconnect, device number 43 [ 244.108942][ T8801] loop1: detected capacity change from 0 to 4096 [ 244.145079][ T8805] loop3: detected capacity change from 0 to 64 [ 244.214288][ T8801] ntfs: volume version 3.1. [ 244.229817][ T8801] ntfs: (device loop1): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x5, type 0xb0, name_len 4). Marking corrupt inode and base inode 0x5 as bad. Run chkdsk. [ 244.273111][ T8801] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to get bitmap attribute. [ 244.304298][ T8801] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 244.392625][ T8801] ntfs: (device loop1): load_system_files(): Failed to load root directory. [ 244.402204][ T8801] ntfs: (device loop1): ntfs_fill_super(): Failed to load system files. [ 244.688735][ T8809] loop3: detected capacity change from 0 to 8192 [ 244.717010][ T8809] REISERFS warning (device loop3): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 244.778355][ T8817] loop1: detected capacity change from 0 to 512 [ 244.816744][ T8817] FAT-fs (loop1): bogus sectors per cluster 0 [ 244.844850][ T8817] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 244.890485][ T8817] FAT-fs (loop1): Can't find a valid FAT filesystem [ 244.911050][ T8803] loop2: detected capacity change from 0 to 32768 [ 244.998285][ T8803] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 245.150445][ T5881] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 245.182870][ T5782] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 245.233252][ T788] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 245.350970][ T8827] loop2: detected capacity change from 0 to 4096 [ 245.370544][ T8827] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 245.383508][ T27] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 245.417139][ T8827] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 245.424902][ T8827] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 245.472351][ T788] usb 1-1: too many configurations: 164, using maximum allowed: 8 [ 245.507069][ T788] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 245.539898][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.559686][ T788] usb 1-1: config 0 descriptor?? [ 245.586851][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 245.615469][ T27] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 245.631331][ T27] usb 2-1: config 0 has no interface number 0 [ 245.646910][ T27] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 245.677874][ T27] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 245.712505][ T27] usb 2-1: config 0 interface 126 has no altsetting 0 [ 245.728213][ T8833] loop2: detected capacity change from 0 to 1024 [ 245.735622][ T27] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 245.745423][ T8833] EXT4-fs: Ignoring removed bh option [ 245.750902][ T8833] EXT4-fs: inline encryption not supported [ 245.763483][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.771534][ T27] usb 2-1: Product: syz [ 245.783382][ T27] usb 2-1: Manufacturer: syz [ 245.788096][ T27] usb 2-1: SerialNumber: syz [ 245.796828][ T27] usb 2-1: config 0 descriptor?? [ 245.809376][ T8833] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 245.826849][ T8823] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.836275][ T8833] EXT4-fs (loop2): group descriptors corrupted! [ 245.843825][ T8823] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.867174][ T8832] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 245.892734][ T788] usb 1-1: USB disconnect, device number 44 [ 245.915777][ T8832] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 245.959526][ T8832] ntfs3: loop3: Failed to load $MFTMirr (-22). [ 246.108862][ T27] ir_usb 2-1:0.126: IR Dongle converter detected [ 246.125071][ T27] usb 2-1: IRDA class descriptor not found, device not bound [ 246.137647][ T8835] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 246.170542][ T27] usb 2-1: USB disconnect, device number 58 [ 246.243754][ T8835] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.430642][ T8841] SQUASHFS error: zlib decompression failed, data probably corrupt [ 246.463650][ T8841] SQUASHFS error: Failed to read block 0x9b: -5 [ 246.469975][ T8841] SQUASHFS error: Unable to read metadata cache entry [99] [ 246.513705][ T8841] SQUASHFS error: Unable to read inode 0x127 [ 246.947291][ T8839] set_capacity_and_notify: 4 callbacks suppressed [ 246.947306][ T8839] loop3: detected capacity change from 0 to 32768 [ 247.006601][ T8839] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 247.065623][ T8839] (syz.3.1301,8839,1):ocfs2_clear_journal_error:1147 ERROR: File system error -318767104 recorded in journal 0. [ 247.137111][ T8839] (syz.3.1301,8839,1):ocfs2_clear_journal_error:1149 ERROR: File system on device loop3 needs checking. [ 247.178781][ T8839] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 247.271614][ T8857] loop2: detected capacity change from 0 to 4096 [ 247.307393][ T8857] ntfs: volume version 3.1. [ 247.452232][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 247.643334][ T8867] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 247.899831][ T8873] loop0: detected capacity change from 0 to 64 [ 247.961087][ T8871] loop3: detected capacity change from 0 to 4096 [ 247.977779][ T8871] ntfs3: loop3: Primary boot: unsupported bytes per index 8192. [ 247.995538][ T8871] ntfs3: loop3: try to read out of volume at offset 0x1ffe00 [ 248.181515][ T8861] loop1: detected capacity change from 0 to 32768 [ 248.188561][ T5864] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 248.226942][ T8861] (syz.1.1311,8861,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb6731743. Applying ECC. [ 248.288635][ T8861] (syz.1.1311,8861,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 248.319173][ T8861] (syz.1.1311,8861,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 248.354154][ T8861] (syz.1.1311,8861,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xa7efa3e4. Applying ECC. [ 248.385500][ T5864] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 248.400355][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.416633][ T8879] loop3: detected capacity change from 0 to 4096 [ 248.423182][ T5864] usb 3-1: config 0 has no interface number 0 [ 248.429571][ T8861] (syz.1.1311,8861,0):ocfs2_verify_heartbeat:814 ERROR: Cannot heartbeat on a locally mounted device. [ 248.445284][ T5864] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 248.461119][ T8879] __ntfs_warning: 9 callbacks suppressed [ 248.461137][ T8879] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 248.489513][ T8861] (syz.1.1311,8861,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 248.508985][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.519348][ T5864] usb 3-1: Product: syz [ 248.524054][ T5864] usb 3-1: Manufacturer: syz [ 248.529590][ T5864] usb 3-1: SerialNumber: syz [ 248.553356][ T5864] usb 3-1: config 0 descriptor?? [ 248.568055][ T5864] qmi_wwan: probe of 3-1:0.207 failed with error -22 [ 248.593020][ T8879] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 248.605049][ T8879] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 248.663328][ T8879] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 248.732314][ T8879] ntfs: volume version 3.1. [ 248.751160][ T8879] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Attribute name is placed after the attribute value. [ 248.782738][ T8879] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -5 while reading attribute inode (mft_no 0x5, type 0xb0, name_len 4). Marking corrupt inode and base inode 0x5 as bad. Run chkdsk. [ 248.821781][ T8879] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to get bitmap attribute. [ 248.841817][ T8879] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 248.860545][ T5853] usb 3-1: USB disconnect, device number 46 [ 248.878989][ T8879] ntfs: (device loop3): load_system_files(): Failed to load root directory. [ 248.924242][ T8879] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 249.094425][ T8877] loop0: detected capacity change from 0 to 32768 [ 249.109091][ T8877] (syz.0.1319,8877,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "coherency=fu" or missing value [ 249.131703][ T8877] (syz.0.1319,8877,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 249.242638][ T787] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 249.445453][ T787] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 249.489027][ T787] usb 2-1: string descriptor 0 read error: -22 [ 249.505829][ T787] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.532683][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.565948][ T787] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 249.620300][ T8892] loop3: detected capacity change from 0 to 2368 [ 249.633831][ T8892] ISOFS: Unable to identify CD-ROM format. [ 249.826218][ T8896] loop2: detected capacity change from 0 to 8192 [ 249.845592][ T8896] REISERFS warning (device loop2): jmacd-7 reiserfs_fill_super: resize option for remount only [ 249.858787][ T27] usb 2-1: USB disconnect, device number 59 [ 249.957973][ T5883] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.296021][ T8909] loop3: detected capacity change from 0 to 4096 [ 250.375786][ T8909] ntfs: volume version 3.1. [ 250.813892][ T8905] jbd2_journal_init_inode: Cannot locate journal superblock [ 250.834451][ T8905] (syz.0.1333,8905,1):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 250.853119][ T8905] (syz.0.1333,8905,0):ocfs2_check_volume:2403 ERROR: Could not initialize journal! [ 250.890706][ T8905] (syz.0.1333,8905,0):ocfs2_check_volume:2488 ERROR: status = -22 [ 250.944278][ T8905] (syz.0.1333,8905,0):ocfs2_mount_volume:1820 ERROR: status = -22 [ 250.991137][ T8905] (syz.0.1333,8905,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 251.102547][ T5864] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 251.269690][ T8911] (syz.2.1335,8911,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 251.309031][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 251.320883][ T8911] (syz.2.1335,8911,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 251.334503][ T5864] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 251.366669][ T8911] (syz.2.1335,8911,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x79bdf9ad. Applying ECC. [ 251.374131][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 251.424750][ T5864] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 251.442602][ T8911] (syz.2.1335,8911,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0xa5e14d6c [ 251.453335][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.480060][ T5864] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 251.500162][ T8911] (syz.2.1335,8911,0):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 288 [ 251.519045][ T8911] (syz.2.1335,8911,0):ocfs2_read_virt_blocks:1027 ERROR: status = -5 [ 251.530601][ T5864] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 251.540879][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.559976][ T5864] usb 2-1: Product: syz [ 251.564739][ T8911] (syz.2.1335,8911,0):ocfs2_read_dir_block:511 ERROR: status = -5 [ 251.580724][ T5864] usb 2-1: Manufacturer: syz [ 251.586117][ T8911] (syz.2.1335,8911,0):ocfs2_find_entry_el:728 ERROR: reading directory 18, offset 0 [ 251.595724][ T5864] usb 2-1: SerialNumber: syz [ 251.627181][ T5864] usb 2-1: config 0 descriptor?? [ 251.643823][ T8911] (syz.2.1335,8911,0):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 251.659022][ T8911] (syz.2.1335,8911,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 251.659556][ T8918] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.706271][ T8911] (syz.2.1335,8911,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 251.725895][ T8911] (syz.2.1335,8911,0):ocfs2_initialize_super:2254 ERROR: status = -22 [ 251.741037][ T5864] mcba_usb 2-1:0.0 can0: couldn't setup read URBs [ 251.749855][ T8911] (syz.2.1335,8911,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 251.760357][ T5864] mcba_usb 2-1:0.0 can0: couldn't start device: -90 [ 251.815448][ T5864] mcba_usb: probe of 2-1:0.0 failed with error -90 [ 251.959924][ T5864] usb 2-1: USB disconnect, device number 60 [ 252.062555][ T5809] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 252.147888][ T8922] set_capacity_and_notify: 2 callbacks suppressed [ 252.147904][ T8922] loop3: detected capacity change from 0 to 32768 [ 252.175777][ T8922] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 252.186918][ T8922] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 252.227599][ T8922] gfs2: fsid=syz:syz.0: journal 0 mapped with 13 extents in 0ms [ 252.240068][ T8922] gfs2: fsid=syz:syz.0: can't find per_node directory: -2 [ 252.247420][ T5809] usb 1-1: Using ep0 maxpacket: 8 [ 252.259599][ T5809] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 252.270700][ T5809] usb 1-1: config 0 has no interface number 0 [ 252.293570][ T27] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 252.308413][ T5809] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 252.332583][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.340679][ T5809] usb 1-1: Product: syz [ 252.345084][ T5809] usb 1-1: Manufacturer: syz [ 252.349771][ T5809] usb 1-1: SerialNumber: syz [ 252.357268][ T5809] usb 1-1: config 0 descriptor?? [ 252.367826][ T5809] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 252.389282][ T5809] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 252.502773][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 252.519238][ T27] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 252.535083][ T27] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 252.562264][ T27] usb 3-1: Manufacturer: syz [ 252.588148][ T27] usb 3-1: config 0 descriptor?? [ 252.608056][ T5853] usb 1-1: USB disconnect, device number 45 [ 252.637299][ T5853] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 252.650673][ T27] go7007: probe of 3-1:0.0 failed with error -12 [ 252.679000][ T5853] kobil_sct 1-1:0.148: device disconnected [ 252.897727][ T27] usb 3-1: USB disconnect, device number 47 [ 253.112689][ T8933] loop3: detected capacity change from 0 to 32768 [ 253.161353][ T8933] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 253.361025][ T8949] loop1: detected capacity change from 0 to 512 [ 253.376980][ T8949] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.465539][ T8949] __quota_error: 6 callbacks suppressed [ 253.465557][ T8949] Quota error (device loop1): v2_read_file_info: Block with free entry 8 out of range (1, 6). [ 253.495657][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 253.544872][ T8949] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 253.560615][ T5809] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 253.624186][ T8949] EXT4-fs (loop1): mount failed [ 253.695119][ T8954] loop2: detected capacity change from 0 to 4096 [ 253.723759][ T8954] ntfs: (device loop2): parse_options(): Invalid umask option argument: 01777777777J77777777776 [ 253.763071][ T5809] usb 1-1: Using ep0 maxpacket: 8 [ 253.770542][ T5809] usb 1-1: config 4 has an invalid interface number: 244 but max is 0 [ 253.795199][ T5809] usb 1-1: config 4 has no interface number 0 [ 253.829015][ T5809] usb 1-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 253.874707][ T5809] usb 1-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 253.904305][ T5809] usb 1-1: config 4 interface 244 has no altsetting 0 [ 253.920488][ T5809] usb 1-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 253.953922][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.962004][ T5809] usb 1-1: Product: syz [ 254.000340][ T5809] usb 1-1: Manufacturer: syz [ 254.010453][ T5809] usb 1-1: SerialNumber: syz [ 254.123869][ T5760] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 254.253951][ T5809] ipheth 1-1:4.244: Unable to find endpoints [ 254.279760][ T8968] loop2: detected capacity change from 0 to 128 [ 254.281707][ T5809] usb 1-1: USB disconnect, device number 46 [ 254.303005][ T8968] omfs: sysblock number (f784317bf884317b) is out of range [ 254.342927][ T5760] usb 4-1: Using ep0 maxpacket: 16 [ 254.351611][ T5760] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 254.377325][ T5760] usb 4-1: config 254 has no interface number 0 [ 254.403726][ T5760] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 254.419992][ T5760] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.430971][ T5760] usb 4-1: config 254 interface 235 has no altsetting 0 [ 254.445953][ T5760] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 254.455235][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 254.462769][ T5864] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 254.467953][ T5760] usb 4-1: Product: syz [ 254.476572][ T5760] usb 4-1: Manufacturer: syz [ 254.481223][ T5760] usb 4-1: SerialNumber: syz [ 254.489833][ T8958] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 254.512974][ T5760] usbtest 4-1:254.235: couldn't get endpoints, -22 [ 254.540955][ T5760] usbtest: probe of 4-1:254.235 failed with error -22 [ 254.554121][ T8970] loop2: detected capacity change from 0 to 128 [ 254.580667][ T8970] ADFS-fs (loop2): error: can't find an ADFS filesystem on dev loop2. [ 254.682532][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 254.697384][ T5864] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 254.706978][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.717127][ T5864] usb 2-1: Product: syz [ 254.722395][ T5864] usb 2-1: Manufacturer: syz [ 254.731924][ T5864] usb 2-1: SerialNumber: syz [ 254.773860][ T5864] usb 2-1: config 0 descriptor?? [ 254.790901][ T5864] usb 2-1: bad CDC descriptors [ 254.798126][ T5809] usb 4-1: USB disconnect, device number 44 [ 254.808591][ T5864] usb 2-1: bad CDC descriptors [ 255.008590][ T9] usb 2-1: USB disconnect, device number 61 [ 255.182601][ T5864] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 255.372638][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 255.381079][ T5864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 255.391186][ T5864] usb 3-1: config 7 has an invalid interface number: 59 but max is 0 [ 255.399807][ T5864] usb 3-1: config 7 has no interface number 0 [ 255.407140][ T5864] usb 3-1: config 7 interface 59 has no altsetting 0 [ 255.419193][ T5864] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 255.428879][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.439461][ T5864] usb 3-1: Product: syz [ 255.444065][ T5864] usb 3-1: Manufacturer: syz [ 255.448724][ T5864] usb 3-1: SerialNumber: syz [ 255.602645][ T5853] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 255.647441][ T8999] loop1: detected capacity change from 0 to 64 [ 255.683731][ T5864] kobil_sct 3-1:7.59: required endpoints missing [ 255.716213][ T8999] hfs: get root inode failed [ 255.727750][ T5864] usb 3-1: USB disconnect, device number 48 [ 255.778915][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.785411][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.804794][ T5853] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 255.834152][ T5853] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.888561][ T5853] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 255.913475][ T5853] usb 1-1: config 1 has no interface number 1 [ 255.925634][ T5853] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 255.939417][ T5853] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.957339][ T5853] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.978192][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.000018][ T5853] usb 1-1: Product: syz [ 256.004581][ T5853] usb 1-1: Manufacturer: syz [ 256.009226][ T5853] usb 1-1: SerialNumber: syz [ 256.282906][ T5853] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 256.290410][ T5853] usb 1-1: MIDIStreaming interface descriptor not found [ 256.315200][ T5853] usb 1-1: USB disconnect, device number 47 [ 256.453359][ T9017] loop2: detected capacity change from 0 to 8 [ 256.480537][ T8424] udevd[8424]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.537572][ T9017] SQUASHFS error: zlib decompression failed, data probably corrupt [ 256.587875][ T9017] SQUASHFS error: Failed to read block 0x9b: -5 [ 256.600326][ T9017] SQUASHFS error: Unable to read metadata cache entry [99] [ 256.610280][ T9017] SQUASHFS error: Unable to read inode 0x127 [ 256.824282][ T9021] loop1: detected capacity change from 0 to 4096 [ 256.898682][ T9021] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 256.924026][ T9021] ntfs3: loop1: Failed to load $Secure (-22). [ 256.951818][ T9021] ntfs3: loop1: Failed to initialize $Secure (-22). [ 257.011724][ T9025] loop2: detected capacity change from 0 to 8192 [ 257.069385][ T9025] REISERFS warning (device loop2): super-6519 read_super_block: Unfinished reiserfsck --rebuild-tree run detected. Please run [ 257.069385][ T9025] reiserfsck --rebuild-tree and wait for a completion. If that fails [ 257.069385][ T9025] get newer reiserfsprogs package [ 257.102950][ T9025] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 257.370801][ T9031] loop3: detected capacity change from 0 to 4096 [ 257.411022][ T9031] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 257.512249][ T9031] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 257.521805][ T9032] loop0: detected capacity change from 0 to 8192 [ 257.561512][ T9031] ntfs3: loop3: Failed to load $BadClus (-22). [ 257.621065][ T9032] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 257.681093][ T9032] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 257.695344][ T9032] REISERFS (device loop0): using ordered data mode [ 257.702066][ T9032] reiserfs: using flush barriers [ 257.732730][ T9032] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 257.777129][ T9032] REISERFS (device loop0): checking transaction log (loop0) [ 257.820484][ T9032] REISERFS (device loop0): Using r5 hash to sort names [ 257.832531][ T9032] REISERFS (device loop0): using 3.5.x disk format [ 257.839221][ T9032] REISERFS warning (device loop0): jdm-2005 xattr_mount_check: xattrs/ACLs not supported on pre-v3.6 format filesystems. Failing mount. [ 258.498227][ T9050] loop3: detected capacity change from 0 to 4096 [ 258.535864][ T9050] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 258.558050][ T9050] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 258.604125][ T9050] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 258.682774][ T9050] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 258.723227][ T9050] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 258.739419][ T28] audit: type=1326 audit(1769205466.121:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9053 comm="syz.0.1400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88c7b9acb9 code=0x0 [ 258.761736][ T9050] ntfs: volume version 3.1. [ 258.786789][ T9050] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 258.800881][ T9042] loop2: detected capacity change from 0 to 32768 [ 258.808243][ T9050] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 258.832124][ T9042] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1393 (9042) [ 258.872870][ T9050] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 258.911722][ T9042] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.921981][ T9050] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 258.996655][ T9042] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 259.009700][ T9042] BTRFS info (device loop2): turning on flush-on-commit [ 259.039513][ T9042] BTRFS warning (device loop2): excessive commit interval 512 [ 259.083401][ T9042] BTRFS info (device loop2): enabling disk space caching [ 259.105831][ T9042] BTRFS info (device loop2): enabling ssd optimizations [ 259.123730][ T9039] loop1: detected capacity change from 0 to 32768 [ 259.126265][ T9042] BTRFS info (device loop2): turning off flush-on-commit [ 259.146068][ T9042] BTRFS info (device loop2): force clearing of disk cache [ 259.172338][ T9039] gfs2: fsid=commit: Trying to join cluster "lock_nolock", "commit" [ 259.195918][ T9042] BTRFS info (device loop2): allowing degraded mounts [ 259.204057][ T9039] gfs2: fsid=commit: Now mounting FS (format 1802)... [ 259.235255][ T9042] BTRFS error (device loop2): unrecognized compression value l [ 259.245639][ T9042] BTRFS error (device loop2): open_ctree failed: -22 [ 259.271229][ T9039] gfs2: fsid=commit.0: journal 0 mapped with 7 extents in 0ms [ 259.316436][ T9] gfs2: fsid=commit.0: jid=0, already locked for use [ 259.323689][ T5864] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 259.337169][ T9] gfs2: fsid=commit.0: jid=0: Looking at journal... [ 259.382729][ T9] kworker/0:1: attempt to access beyond end of device [ 259.382729][ T9] loop1: rw=0, sector=19193135816, nr_sectors = 8 limit=32768 [ 259.504908][ T9] gfs2: fsid=commit.0: jid=0: Failed [ 259.510537][ T9039] gfs2: fsid=commit.0: error recovering journal 0: -5 [ 259.546178][ T5864] usb 1-1: unable to get BOS descriptor or descriptor too short [ 259.569139][ T5864] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 259.578607][ T5864] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 259.600182][ T5864] usb 1-1: config 1 interface 0 has no altsetting 1 [ 259.610841][ T5864] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 259.631502][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.641981][ T5864] usb 1-1: Product: syz [ 259.646591][ T5864] usb 1-1: Manufacturer: syz [ 259.651396][ T5864] usb 1-1: SerialNumber: syz [ 259.663584][ T5864] smsusb:smsusb_probe: board id=8, interface number 0 [ 259.762595][ T5760] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 259.892722][ T5864] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 259.899782][ T5864] smsusb: probe of 1-1:1.0 failed with error -71 [ 259.924915][ T5864] usb 1-1: USB disconnect, device number 48 [ 259.950055][ T9058] loop3: detected capacity change from 0 to 32768 [ 259.962668][ T5760] usb 3-1: Using ep0 maxpacket: 8 [ 259.975914][ T5760] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.013614][ T9058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1402 (9058) [ 260.026300][ T5760] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 260.053842][ T5760] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 260.077681][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.086527][ T9058] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.102676][ T9058] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 260.111574][ T5760] usb 3-1: Product: syz [ 260.120704][ T5760] usb 3-1: Manufacturer: syz [ 260.135727][ T9058] BTRFS error (device loop3): superblock checksum mismatch [ 260.143092][ T5760] usb 3-1: SerialNumber: syz [ 260.160667][ T9058] BTRFS error (device loop3): open_ctree failed: -22 [ 260.161842][ T5760] usb 3-1: config 0 descriptor?? [ 260.196166][ T5760] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 260.263248][ T5760] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 260.297852][ T5881] udevd[5881]: incorrect btrfs checksum on /dev/loop3 [ 260.429655][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.456794][ T5760] usb 3-1: USB disconnect, device number 49 [ 260.672874][ T5864] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 260.682775][ T9070] loop3: detected capacity change from 0 to 4096 [ 260.722004][ T9072] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.738404][ T9070] NILFS (loop3): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0 [ 260.749125][ T9070] NILFS (loop3): error -5 getting root inode [ 260.870395][ T9076] IPv6: addrconf: prefix option has invalid lifetime [ 260.883729][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 260.890902][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.910016][ T5864] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 260.929514][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.963635][ T5864] usb 2-1: config 0 descriptor?? [ 261.001068][ T5864] usb 2-1: bad CDC descriptors [ 261.237625][ T5864] usb 2-1: USB disconnect, device number 62 [ 261.357265][ T9087] loop3: detected capacity change from 0 to 8192 [ 261.366709][ T9087] REISERFS warning (device loop3): super-6508 reiserfs_parse_options: bad value 0x0000000000000081=appraise_type=imasig for -ocommit [ 261.366709][ T9087] [ 261.482772][ T5760] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 261.592660][ T5853] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 261.672601][ T5760] usb 1-1: Using ep0 maxpacket: 32 [ 261.680826][ T5760] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 261.689823][ T5760] usb 1-1: config 1 has no interface number 0 [ 261.696102][ T5760] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.706084][ T5760] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.716009][ T5760] usb 1-1: config 1 interface 236 has no altsetting 0 [ 261.724089][ T5760] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 261.732267][ T5760] usb 1-1: config 1 has no interface number 0 [ 261.738475][ T5760] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.748605][ T5760] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.758757][ T5760] usb 1-1: config 1 interface 236 has no altsetting 0 [ 261.768449][ T5760] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 261.777653][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.786314][ T5853] usb 3-1: Using ep0 maxpacket: 8 [ 261.791947][ T5760] usb 1-1: Product: syz [ 261.797529][ T5760] usb 1-1: Manufacturer: syz [ 261.802589][ T5760] usb 1-1: SerialNumber: syz [ 261.807397][ T5853] usb 3-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 261.819837][ T5853] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 261.841203][ T5760] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected [ 261.850683][ T5853] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 261.882261][ T5853] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 261.912154][ T5853] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 261.925482][ T5853] usb 3-1: config 1 interface 0 has no altsetting 0 [ 261.934175][ T5853] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.951644][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 261.973609][ T5853] usb 3-1: SerialNumber: syz [ 261.986222][ T9092] loop3: detected capacity change from 0 to 1024 [ 261.997839][ T9089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.006650][ T9092] EXT4-fs: Ignoring removed orlov option [ 262.022775][ T9089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 262.030264][ T9092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.046420][ T9092] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 2304 [ 262.115938][ T5760] usb 1-1: USB disconnect, device number 49 [ 262.266243][ T5853] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 262.300817][ T5853] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 262.331322][ T5853] usb 3-1: USB disconnect, device number 50 [ 262.678528][ T9107] loop3: detected capacity change from 0 to 8 [ 262.703524][ T9107] SQUASHFS error: lzo decompression failed, data probably corrupt [ 262.728282][ T9107] SQUASHFS error: Failed to read block 0x91: -5 [ 262.739960][ T9107] SQUASHFS error: Unable to read metadata cache entry [8f] [ 262.750759][ T9107] SQUASHFS error: Unable to read inode 0x11f [ 263.061438][ T9114] loop2: detected capacity change from 0 to 2048 [ 263.129873][ T9114] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 263.169814][ T9114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.224529][ T9112] loop3: detected capacity change from 0 to 8192 [ 263.235712][ T9115] loop0: detected capacity change from 0 to 8192 [ 263.266340][ T9115] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 263.282655][ T9112] REISERFS warning (device loop3): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 263.314586][ T9115] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 263.341725][ T9102] loop1: detected capacity change from 0 to 32768 [ 263.352187][ T9115] REISERFS (device loop0): using ordered data mode [ 263.383766][ T9115] reiserfs: using flush barriers [ 263.411361][ T9115] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 263.436887][ T9102] jfs_mount: Failed to read FILESYSTEM_I [ 263.477051][ T9102] Mount JFS Failure: -5 [ 263.481308][ T9102] jfs_mount failed w/return code = -5 [ 263.513289][ T9115] REISERFS (device loop0): checking transaction log (loop0) [ 263.578726][ T9115] REISERFS warning: reiserfs-5083 is_leaf: wrong item type for item *3.5*[1 2 0x0 UNKNOWN], item_len 44, item_location 4052, free_space(entry_count) 0 [ 263.654641][ T9119] loop2: detected capacity change from 0 to 64 [ 263.678199][ T9115] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 263.693722][ T9119] hfs: invalid gid -1 [ 263.699054][ T9119] hfs: unable to parse mount options [ 263.723569][ T9115] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 263.805443][ T9115] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 264.272559][ T23] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 264.475576][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 264.484019][ T23] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 264.492262][ T23] usb 4-1: config 0 has no interface number 0 [ 264.529024][ T23] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=17.22 [ 264.548823][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.569398][ T9144] loop2: detected capacity change from 0 to 512 [ 264.575995][ T23] usb 4-1: Product: syz [ 264.580210][ T23] usb 4-1: Manufacturer: syz [ 264.585770][ T23] usb 4-1: SerialNumber: syz [ 264.590698][ T9143] loop1: detected capacity change from 0 to 512 [ 264.609972][ T23] usb 4-1: config 0 descriptor?? [ 264.621230][ T9143] EXT4-fs: Ignoring removed nobh option [ 264.637654][ T9144] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 264.639334][ T9143] EXT4-fs: user quota file already specified [ 264.669619][ T9144] UDF-fs: Scanning with blocksize 512 failed [ 264.714562][ T9144] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 264.723456][ T9144] UDF-fs: Scanning with blocksize 1024 failed [ 264.742960][ T9144] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 264.759946][ T9144] UDF-fs: Scanning with blocksize 2048 failed [ 264.807833][ T9144] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 264.841799][ T9144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.851050][ T23] snd-usb-audio: probe of 4-1:0.97 failed with error -71 [ 264.883101][ T23] usb 4-1: USB disconnect, device number 45 [ 265.263817][ T9155] loop1: detected capacity change from 0 to 4096 [ 265.283781][ T9155] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 265.326706][ T9155] ntfs3: loop1: Failed to load $MFT (-22). [ 265.677332][ T9168] loop1: detected capacity change from 0 to 128 [ 265.742036][ T9168] FAT-fs (loop1): bogus sectors per cluster 0 [ 265.763276][ T9168] FAT-fs (loop1): Can't find a valid FAT filesystem [ 265.814632][ T7123] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 265.950185][ T9174] NILFS (loop2): invalid segment: Sequence number mismatch [ 265.977134][ T9174] NILFS (loop2): trying rollback from an earlier position [ 266.046124][ T9174] NILFS (loop2): recovery complete [ 266.075164][ T9179] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.382611][ T23] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 266.401866][ T9187] hfs: umask requires a value [ 266.408052][ T9187] hfs: unable to parse mount options [ 266.422511][ T788] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 266.586386][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.616229][ T23] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 266.632647][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 266.645460][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.663515][ T788] usb 2-1: config 32 has an invalid interface number: 76 but max is 0 [ 266.671908][ T788] usb 2-1: config 32 has no interface number 0 [ 266.678666][ T23] usb 4-1: Product: syz [ 266.692716][ T23] usb 4-1: Manufacturer: syz [ 266.697526][ T788] usb 2-1: config 32 interface 76 altsetting 0 endpoint 0xC has an invalid bInterval 129, changing to 11 [ 266.710115][ T23] usb 4-1: SerialNumber: syz [ 266.726614][ T788] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.e3 [ 266.760913][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.788147][ T788] usbtest 2-1:32.76: Linux gadget zero [ 266.802604][ T788] usbtest 2-1:32.76: high-speed {control in/out int-out} tests (+alt) [ 266.872599][ T5809] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 266.961763][ T23] pxrc 4-1:1.0: Could not find endpoint [ 266.993029][ T23] usb 4-1: USB disconnect, device number 46 [ 267.030254][ T5864] usb 2-1: USB disconnect, device number 63 [ 267.082572][ T5809] usb 3-1: Using ep0 maxpacket: 8 [ 267.095782][ T5809] usb 3-1: config 150 has an invalid interface number: 204 but max is 0 [ 267.118052][ T9185] (syz.0.1461,9185,0):ocfs2_sb_probe:755 ERROR: incompatible version: 2.33686018 [ 267.131887][ T5809] usb 3-1: config 150 has no interface number 0 [ 267.140098][ T9185] (syz.0.1461,9185,0):ocfs2_sb_probe:768 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2 [ 267.153833][ T5809] usb 3-1: config 150 interface 204 has no altsetting 0 [ 267.170016][ T5809] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 267.180093][ T9185] (syz.0.1461,9185,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 267.189089][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.197918][ T9185] (syz.0.1461,9185,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 267.205738][ T5809] usb 3-1: Product: syz [ 267.210508][ T5809] usb 3-1: Manufacturer: syz [ 267.222828][ T5809] usb 3-1: SerialNumber: syz [ 267.480205][ T5809] usb 3-1: USB disconnect, device number 51 [ 267.684936][ T9197] SQUASHFS error: lzo decompression failed, data probably corrupt [ 267.712619][ T9197] SQUASHFS error: Failed to read block 0x1b2: -5 [ 267.719049][ T9197] SQUASHFS error: Unable to read metadata cache entry [1b0] [ 267.754726][ T9197] SQUASHFS error: Unable to read inode 0x11f [ 267.946182][ T9207] set_capacity_and_notify: 4 callbacks suppressed [ 267.946198][ T9207] loop1: detected capacity change from 0 to 128 [ 267.983980][ T9207] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 268.006017][ T9207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.203203][ T787] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 268.392638][ T5864] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 268.413563][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.428474][ T787] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 268.439849][ T787] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 268.452507][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.460574][ T787] usb 1-1: SerialNumber: syz [ 268.493349][ T787] usb 1-1: config 0 descriptor?? [ 268.569101][ T9225] Malformed UNC in devname [ 268.569101][ T9225] [ 268.576624][ T9225] CIFS: VFS: Malformed UNC in devname [ 268.612696][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 268.629579][ T5864] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 268.648809][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 268.661746][ T5864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 268.677113][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.687998][ T5864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 268.725748][ T787] usb 1-1: 0:2 : does not exist [ 268.730894][ T787] usb 1-1: unit 203 not found! [ 268.738579][ T5864] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 268.750946][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.773859][ T5864] usb 4-1: Product: syz [ 268.778297][ T5864] usb 4-1: Manufacturer: syz [ 268.783939][ T787] usb 1-1: USB disconnect, device number 50 [ 268.791820][ T5864] usb 4-1: SerialNumber: syz [ 268.826097][ T5864] usb 4-1: config 0 descriptor?? [ 268.832044][ T9209] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 268.839484][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 268.848976][ T7123] udevd[7123]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.878869][ T5864] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 268.897224][ T5864] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 268.955275][ T5864] mcba_usb: probe of 4-1:0.0 failed with error -90 [ 269.043208][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 269.050332][ T9] usb 3-1: config 0 has an invalid interface number: 233 but max is 0 [ 269.062828][ T9] usb 3-1: config 0 has no interface number 0 [ 269.069115][ T9] usb 3-1: config 0 interface 233 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 269.084936][ T9] usb 3-1: config 0 interface 233 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 269.101273][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=f0.b0 [ 269.121051][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.131189][ T9] usb 3-1: Product: syz [ 269.153982][ T9] usb 3-1: Manufacturer: syz [ 269.159677][ T9] usb 3-1: SerialNumber: syz [ 269.175282][ T9] usb 3-1: config 0 descriptor?? [ 269.190440][ T9] keyspan 3-1:0.233: Keyspan 1 port adapter converter detected [ 269.198557][ T9] keyspan 3-1:0.233: found no endpoint descriptor for endpoint 84 [ 269.210848][ T9] keyspan 3-1:0.233: found no endpoint descriptor for endpoint 81 [ 269.214879][ T5853] usb 4-1: USB disconnect, device number 47 [ 269.231587][ T9] keyspan 3-1:0.233: found no endpoint descriptor for endpoint 82 [ 269.240383][ T9] keyspan 3-1:0.233: found no endpoint descriptor for endpoint 2 [ 269.254979][ T9] keyspan 3-1:0.233: found no endpoint descriptor for endpoint 83 [ 269.276630][ T9] keyspan 3-1:0.233: found no endpoint descriptor for endpoint 3 [ 269.290300][ T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 269.329561][ T9227] loop1: detected capacity change from 0 to 32768 [ 269.383766][ T5765] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 269.417424][ T9] usb 3-1: USB disconnect, device number 52 [ 269.444013][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 269.490282][ T9] keyspan 3-1:0.233: device disconnected [ 269.597179][ T9229] loop0: detected capacity change from 0 to 2048 [ 269.610593][ T9229] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362 [ 269.630603][ T9229] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 269.656194][ T9229] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 269.679493][ T9229] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.162688][ T5853] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 270.332719][ T5864] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 270.374943][ T5853] usb 1-1: unable to get BOS descriptor or descriptor too short [ 270.395340][ T5853] usb 1-1: config 8 has too many interfaces: 240, using maximum allowed: 32 [ 270.411350][ T9233] loop1: detected capacity change from 0 to 40427 [ 270.418334][ T5853] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 270.427772][ T5853] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 270.440673][ T9233] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 270.451413][ T5853] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 240 [ 270.460845][ T9233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 270.473856][ T5853] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 270.496640][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.504831][ T9233] F2FS-fs (loop1): invalid crc value [ 270.512691][ T5853] usb 1-1: Product: syz [ 270.517044][ T5853] usb 1-1: Manufacturer: syz [ 270.521838][ T5853] usb 1-1: SerialNumber: syz [ 270.529004][ T9233] F2FS-fs (loop1): Found nat_bits in checkpoint [ 270.554537][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 270.571726][ T5864] usb 3-1: config 0 has an invalid interface number: 97 but max is 0 [ 270.593388][ T5864] usb 3-1: config 0 has no interface number 0 [ 270.625714][ T5864] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=17.22 [ 270.646441][ T9233] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 270.653710][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.653739][ T5864] usb 3-1: Product: syz [ 270.653755][ T5864] usb 3-1: Manufacturer: syz [ 270.653771][ T5864] usb 3-1: SerialNumber: syz [ 270.666029][ T5864] usb 3-1: config 0 descriptor?? [ 270.681734][ T9233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 270.765948][ T5853] usb 1-1: USB disconnect, device number 51 [ 270.839522][ T9241] loop3: detected capacity change from 0 to 32768 [ 270.903329][ T9241] (syz.3.1489,9241,1):ocfs2_init_local_system_inodes:492 ERROR: status=-30, sysfile=7, slot=6 [ 270.922669][ T9241] (syz.3.1489,9241,1):ocfs2_init_local_system_inodes:501 ERROR: status = -30 [ 270.931558][ T9241] (syz.3.1489,9241,1):ocfs2_mount_volume:1814 ERROR: status = -30 [ 270.945903][ T9241] (syz.3.1489,9241,0):ocfs2_fill_super:1178 ERROR: status = -30 [ 270.968024][ T5864] snd-usb-audio: probe of 3-1:0.97 failed with error -71 [ 271.010141][ T5864] usb 3-1: USB disconnect, device number 53 [ 271.222005][ T9248] loop3: detected capacity change from 0 to 256 [ 271.302772][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 271.437090][ T9250] loop0: detected capacity change from 0 to 512 [ 271.480958][ T9250] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.1492: bad orphan inode 11 [ 271.522388][ T9250] ext4_test_bit(bit=10, block=4) = 1 [ 271.555738][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 271.565865][ T9250] is_bad_inode(inode)=0 [ 271.570084][ T9250] NEXT_ORPHAN(inode)=2080374784 [ 271.575020][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 271.576642][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.576671][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 271.576692][ T9] usb 2-1: SerialNumber: syz [ 271.592218][ T9246] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.618747][ T9250] max_ino=32 [ 271.622097][ T9250] i_nlink=0 [ 271.625481][ T9250] EXT4-fs (loop0): 1 truncate cleaned up [ 271.632650][ T9250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.656548][ T9] usb 2-1: bad CDC descriptors [ 271.742992][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.805070][ T9258] loop3: detected capacity change from 0 to 512 [ 271.824621][ T9260] bpf: Bad value for 'mode' [ 271.856831][ T9258] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 271.913327][ T9258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 271.921479][ T9258] System zones: 1-12 [ 271.956609][ T788] usb 2-1: USB disconnect, device number 64 [ 271.979165][ T9258] EXT4-fs (loop3): orphan cleanup on readonly fs [ 272.001866][ T9258] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #11: comm syz.3.1495: corrupted in-inode xattr: e_name out of bounds [ 272.022848][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 272.064894][ T9258] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.1495: couldn't read orphan inode 11 (err -117) [ 272.085798][ T9258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 272.200427][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 272.222704][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 272.240410][ T9] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 272.253322][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 272.287567][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 272.314203][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.338157][ T9271] loop3: detected capacity change from 0 to 64 [ 272.344596][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 272.361452][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 272.370908][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.386705][ T9] usb 3-1: Product: syz [ 272.390959][ T9] usb 3-1: Manufacturer: syz [ 272.406108][ T9] usb 3-1: SerialNumber: syz [ 272.427568][ T9] usb 3-1: config 0 descriptor?? [ 272.451758][ T9257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 272.517156][ T9] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 272.534883][ T9] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 272.608835][ T9277] tmpfs: Bad value for 'mpol' [ 272.663808][ T9] mcba_usb: probe of 3-1:0.0 failed with error -90 [ 272.718429][ T9275] loop3: detected capacity change from 0 to 4096 [ 272.807741][ T9275] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 272.838300][ T23] usb 3-1: USB disconnect, device number 54 [ 272.942606][ T787] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 273.135272][ T787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 273.170373][ T787] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 273.189726][ T787] usb 2-1: config 0 has no interface number 0 [ 273.199896][ T787] usb 2-1: config 0 interface 238 has no altsetting 0 [ 273.212399][ T787] usb 2-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=f1.0d [ 273.231975][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.250450][ T787] usb 2-1: Product: syz [ 273.256240][ T787] usb 2-1: Manufacturer: syz [ 273.259684][ T9291] loop3: detected capacity change from 0 to 2048 [ 273.261170][ T787] usb 2-1: SerialNumber: syz [ 273.284891][ T787] usb 2-1: config 0 descriptor?? [ 273.312603][ T9291] UDF-fs: error (device loop3): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0) [ 273.352739][ T9291] UDF-fs: Scanning with blocksize 512 failed [ 273.402051][ T9291] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 273.431702][ T9291] UDF-fs: Scanning with blocksize 1024 failed [ 273.489978][ T9291] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 273.522259][ T9291] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 273.538873][ T9291] UDF-fs: Scanning with blocksize 2048 failed [ 273.546639][ T787] gspca_main: spca501-2.14.0 probing 1776:501c [ 273.559978][ T9296] loop2: detected capacity change from 0 to 164 [ 273.568202][ T787] gspca_spca501: reg write: error -71 [ 273.576924][ T9291] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 273.597598][ T787] spca501 2-1:0.238: Reg write failed for 0x02,0x07,0x05 [ 273.610826][ T9296] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 273.621402][ T9291] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 273.631492][ T787] spca501: probe of 2-1:0.238 failed with error -22 [ 273.659415][ T787] usb 2-1: USB disconnect, device number 65 [ 273.668841][ T9291] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 273.697217][ T9291] UDF-fs: Scanning with blocksize 4096 failed [ 273.712068][ T9291] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 274.012939][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 274.035808][ T9304] loop2: detected capacity change from 0 to 4096 [ 274.051072][ T9304] __ntfs_error: 3 callbacks suppressed [ 274.051091][ T9304] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 274.066973][ T9304] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 274.081375][ T9304] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 274.236092][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 274.262657][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 102, changing to 7 [ 274.288188][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24624, setting to 1024 [ 274.294102][ T5853] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 274.312376][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 274.322224][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.353362][ T9309] loop2: detected capacity change from 0 to 8192 [ 274.359212][ T9] usb 1-1: Product: syz [ 274.370413][ T9] usb 1-1: Manufacturer: syz [ 274.384427][ T9309] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 274.398143][ T9309] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 274.399876][ T9] usb 1-1: SerialNumber: syz [ 274.414283][ T9309] REISERFS (device loop2): using ordered data mode [ 274.421045][ T9309] reiserfs: using flush barriers [ 274.428899][ T9] usb 1-1: config 0 descriptor?? [ 274.480453][ T9314] loop1: detected capacity change from 0 to 128 [ 274.490882][ T9314] befs: (loop1): No write support. Marking filesystem read-only [ 274.499358][ T5853] usb 4-1: Using ep0 maxpacket: 8 [ 274.506924][ T9] usb 1-1: 0:0 : invalid sync pipe. bmAttributes b9, bLength 9, bSynchAddress 66 [ 274.506933][ T5853] usb 4-1: config 2 has an invalid interface number: 25 but max is 0 [ 274.534960][ T5853] usb 4-1: config 2 has no interface number 0 [ 274.541166][ T5853] usb 4-1: config 2 interface 25 has no altsetting 0 [ 274.550818][ T9314] befs: (loop1): invalid blocksize: 2066842815 [ 274.559158][ T5853] usb 4-1: New USB device found, idVendor=413c, idProduct=4004, bcdDevice=33.1b [ 274.572282][ T9309] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 274.574170][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.643345][ T9309] REISERFS (device loop2): checking transaction log (loop2) [ 274.648434][ T5853] usb 4-1: Product: syz [ 274.666266][ T5853] usb 4-1: Manufacturer: syz [ 274.672155][ T9309] REISERFS (device loop2): Using r5 hash to sort names [ 274.691998][ T5853] usb 4-1: SerialNumber: syz [ 274.726273][ T9309] REISERFS (device loop2): using 3.5.x disk format [ 274.741404][ T5853] ipaq 4-1:2.25: PocketPC PDA converter detected [ 274.758331][ T9309] REISERFS warning (device loop2): jdm-2005 xattr_mount_check: xattrs/ACLs not supported on pre-v3.6 format filesystems. Failing mount. [ 274.772951][ T5853] usb 4-1: active config #2 != 1 ?? [ 274.841237][ T9] usb 1-1: USB disconnect, device number 52 [ 274.973377][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.066994][ T5853] usb 4-1: USB disconnect, device number 48 [ 275.187747][ T9318] loop1: detected capacity change from 0 to 2048 [ 275.235947][ T9318] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 275.249168][ T9318] UDF-fs: Scanning with blocksize 512 failed [ 275.283589][ T9318] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.435215][ T9322] loop2: detected capacity change from 0 to 4096 [ 275.448091][ T9322] ntfs: (device loop2): parse_options(): The nls option requires an argument. [ 275.618000][ T9326] loop0: detected capacity change from 0 to 8 [ 275.629710][ T9326] SQUASHFS error: zlib decompression failed, data probably corrupt [ 275.672672][ T9326] SQUASHFS error: Failed to read block 0x9b: -5 [ 275.679010][ T9326] SQUASHFS error: Unable to read metadata cache entry [99] [ 275.722697][ T9326] SQUASHFS error: Unable to read inode 0x127 [ 275.933700][ T9336] loop0: detected capacity change from 0 to 8 [ 275.957234][ T9336] SQUASHFS error: zlib decompression failed, data probably corrupt [ 275.978111][ T9336] SQUASHFS error: Failed to read block 0x9b: -5 [ 275.999174][ T9336] SQUASHFS error: Unable to read metadata cache entry [99] [ 276.018729][ T9336] SQUASHFS error: Unable to read inode 0x127 [ 276.052553][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 276.128378][ T5864] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 276.149342][ T9340] loop2: detected capacity change from 0 to 128 [ 276.160060][ T9340] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 276.188663][ T9340] hpfs: filesystem error: improperly stopped [ 276.197786][ T9340] hpfs: You really don't want any checks? You are crazy... [ 276.210791][ T9340] hpfs: hpfs_map_sector(): read error [ 276.216769][ T9340] hpfs: code page support is disabled [ 276.225566][ T9340] hpfs: hpfs_map_4sectors(): unaligned read [ 276.233073][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 276.239918][ T9340] hpfs: hpfs_map_4sectors(): unaligned read [ 276.248118][ T9340] hpfs: filesystem error: unable to find root dir [ 276.255923][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 276.282543][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 276.314432][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 276.325735][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 276.340694][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 276.355918][ T5864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 276.374710][ T5864] usb 4-1: config 14 has an invalid interface number: 12 but max is 0 [ 276.384417][ T5864] usb 4-1: config 14 has no interface number 0 [ 276.390681][ T5864] usb 4-1: config 14 interface 12 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 276.402978][ T5864] usb 4-1: config 14 interface 12 has no altsetting 0 [ 276.412692][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.421795][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 276.458434][ T5864] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=fa.8c [ 276.467874][ T9] usb 2-1: SerialNumber: syz [ 276.472966][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.484237][ T5864] usb 4-1: Product: syz [ 276.489008][ T9330] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 276.498239][ T9330] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 276.506227][ T5864] usb 4-1: Manufacturer: syz [ 276.518598][ T5864] usb 4-1: SerialNumber: syz [ 276.738523][ T787] usb 2-1: USB disconnect, device number 66 [ 276.774096][ T5864] kvaser_usb 4-1:14.12: Cannot get usb endpoint(s) [ 276.813743][ T5864] usb 4-1: USB disconnect, device number 49 [ 276.894972][ T5765] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.092550][ T5853] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 277.285802][ T23] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 277.301484][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 277.310086][ T5853] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.323886][ T5853] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.333913][ T5853] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 277.343837][ T5853] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 277.374458][ T5853] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.392496][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 277.422363][ T5853] usb 3-1: SerialNumber: syz [ 277.436159][ T9352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 277.468488][ T5853] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 277.496973][ T5853] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 277.534756][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 277.550920][ T23] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 277.563683][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.574218][ T23] usb 1-1: config 0 has no interface number 0 [ 277.589034][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 277.598273][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.606458][ T23] usb 1-1: Product: syz [ 277.610765][ T23] usb 1-1: Manufacturer: syz [ 277.613835][ T9360] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=4096, location=4096 [ 277.617421][ T23] usb 1-1: SerialNumber: syz [ 277.643520][ T23] usb 1-1: config 0 descriptor?? [ 277.648731][ T9360] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 277.676479][ T23] usb 1-1: Found UVC 0.00 device syz (046d:08d3) [ 277.693253][ T9360] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 277.708850][ T23] usb 1-1: No valid video chain found. [ 277.724707][ T5853] usb 3-1: USB disconnect, device number 55 [ 277.755301][ T9360] UDF-fs: Scanning with blocksize 512 failed [ 277.799355][ T9360] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 277.822620][ T9360] UDF-fs: Scanning with blocksize 1024 failed [ 277.842060][ T9360] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 277.860209][ T9360] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 277.869709][ T9360] UDF-fs: Scanning with blocksize 2048 failed [ 277.882751][ T9360] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 277.895992][ T23] usb 1-1: USB disconnect, device number 53 [ 277.913075][ T9360] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 277.937299][ T9360] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 277.948782][ T9360] UDF-fs: Scanning with blocksize 4096 failed [ 277.957962][ T9360] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 278.353228][ T787] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 278.363638][ T9379] set_capacity_and_notify: 2 callbacks suppressed [ 278.363654][ T9379] loop2: detected capacity change from 0 to 8 [ 278.386247][ T9379] SQUASHFS error: zlib decompression failed, data probably corrupt [ 278.394481][ T9379] SQUASHFS error: Failed to read block 0x9b: -5 [ 278.401061][ T9379] SQUASHFS error: Unable to read metadata cache entry [99] [ 278.452213][ T9379] SQUASHFS error: Unable to read inode 0x127 [ 278.542532][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 278.555132][ T787] usb 2-1: config 4 has an invalid interface number: 8 but max is 0 [ 278.575818][ T787] usb 2-1: config 4 has no interface number 0 [ 278.595355][ T787] usb 2-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 278.627555][ T787] usb 2-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 278.652945][ T787] usb 2-1: config 4 interface 8 has no altsetting 0 [ 278.662709][ T787] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 278.673032][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.698646][ T787] usb 2-1: Product: syz [ 278.703701][ T787] usb 2-1: Manufacturer: syz [ 278.708355][ T787] usb 2-1: SerialNumber: syz [ 278.956129][ T787] opticon 2-1:4.8: opticon converter detected [ 278.990946][ T787] usb 2-1: opticon converter now attached to ttyUSB0 [ 279.017443][ T787] usb 2-1: USB disconnect, device number 67 [ 279.038380][ T787] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 279.074285][ T787] opticon 2-1:4.8: device disconnected [ 279.288794][ T9380] loop3: detected capacity change from 0 to 40427 [ 279.307568][ T9380] F2FS-fs (loop3): heap/no_heap options were deprecated [ 279.325509][ T9380] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 279.336966][ T9380] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 279.357046][ T9380] F2FS-fs (loop3): invalid crc value [ 279.392557][ T23] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 279.412911][ T9380] F2FS-fs (loop3): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x453b/0x6be0 [ 279.429618][ T9380] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 279.583470][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 279.595182][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 279.625351][ T23] usb 1-1: config 7 has an invalid interface number: 58 but max is 0 [ 279.644464][ T23] usb 1-1: config 7 has no interface number 0 [ 279.672435][ T23] usb 1-1: config 7 interface 58 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.692639][ T9409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.712407][ T23] usb 1-1: config 7 interface 58 has no altsetting 0 [ 279.735160][ T23] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 279.762374][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.781275][ T23] usb 1-1: Product: syz [ 279.790859][ T23] usb 1-1: Manufacturer: syz [ 279.800982][ T23] usb 1-1: SerialNumber: syz [ 280.042782][ T23] usb 1-1: USB disconnect, device number 54 [ 280.408770][ T9405] loop2: detected capacity change from 0 to 65536 [ 280.425839][ T9405] XFS: attr2 mount option is deprecated. [ 280.442157][ T9405] XFS (loop2): invalid logbufs value: 1 [not 2-8] [ 280.742286][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 280.853396][ T9421] loop0: detected capacity change from 0 to 1764 [ 280.909915][ T9423] loop2: detected capacity change from 0 to 512 [ 280.924008][ T5765] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.942248][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 280.952556][ T9] usb 4-1: descriptor type invalid, skip [ 280.971385][ T9] usb 4-1: descriptor type invalid, skip [ 280.972624][ T9423] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 280.994576][ T9] usb 4-1: descriptor type invalid, skip [ 281.000299][ T9] usb 4-1: descriptor type invalid, skip [ 281.018221][ T9423] EXT4-fs (loop2): orphan cleanup on readonly fs [ 281.036036][ T9423] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 281.052584][ T9423] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 281.088252][ T9] usb 4-1: descriptor type invalid, skip [ 281.106864][ T9] usb 4-1: descriptor type invalid, skip [ 281.112770][ T9423] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1575: Failed to acquire dquot type 1 [ 281.149721][ T9413] loop1: detected capacity change from 0 to 32768 [ 281.182315][ T9] usb 4-1: config 14 has an invalid interface number: 237 but max is 0 [ 281.190667][ T9] usb 4-1: config 14 has no interface number 0 [ 281.202859][ T9423] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1575: bg 0: block 40: padding at end of block bitmap is not set [ 281.220180][ T9] usb 4-1: config 14 interface 237 has no altsetting 0 [ 281.245541][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1503, bcdDevice=da.5f [ 281.260094][ T9423] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 281.269071][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.292788][ T9] usb 4-1: Product: syz [ 281.293742][ T9413] (syz.1.1569,9413,1):ocfs2_init_local_system_inodes:492 ERROR: status=-30, sysfile=7, slot=6 [ 281.297098][ T9] usb 4-1: Manufacturer: syz [ 281.329323][ T9423] EXT4-fs (loop2): 1 truncate cleaned up [ 281.336642][ T9423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 281.363641][ T9413] (syz.1.1569,9413,0):ocfs2_init_local_system_inodes:501 ERROR: status = -30 [ 281.392984][ T9] usb 4-1: SerialNumber: syz [ 281.396647][ T9413] (syz.1.1569,9413,1):ocfs2_mount_volume:1814 ERROR: status = -30 [ 281.407117][ T9413] (syz.1.1569,9413,1):ocfs2_fill_super:1178 ERROR: status = -30 [ 281.428808][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.695025][ T9] iowarrior 4-1:14.237: no interrupt-in endpoint found [ 281.732396][ T9] usb 4-1: USB disconnect, device number 50 [ 282.342146][ T788] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 282.399588][ T9436] loop2: detected capacity change from 0 to 32768 [ 282.415922][ T9449] loop3: detected capacity change from 0 to 8 [ 282.439083][ T9447] loop1: detected capacity change from 0 to 128 [ 282.449614][ T9436] (syz.2.1581,9436,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: directory entry too close to end - offset=220, inode=74, rec_len=284, name_len=16 [ 282.467432][ T9436] (syz.2.1581,9436,1):ocfs2_init_local_system_inodes:492 ERROR: status=-22, sysfile=9, slot=0 [ 282.479153][ T9436] (syz.2.1581,9436,1):ocfs2_init_local_system_inodes:501 ERROR: status = -22 [ 282.488106][ T9436] (syz.2.1581,9436,1):ocfs2_mount_volume:1814 ERROR: status = -22 [ 282.499282][ T9436] (syz.2.1581,9436,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 282.574946][ T788] usb 1-1: unable to get BOS descriptor or descriptor too short [ 282.594908][ T9449] SQUASHFS error: xz decompression failed, data probably corrupt [ 282.613303][ T788] usb 1-1: config 81 has an invalid interface number: 13 but max is 0 [ 282.622709][ T788] usb 1-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 282.645241][ T9449] SQUASHFS error: Failed to read block 0x108: -5 [ 282.654724][ T788] usb 1-1: config 81 has no interface number 0 [ 282.660989][ T788] usb 1-1: config 81 interface 13 has no altsetting 0 [ 282.668461][ T9449] SQUASHFS error: Unable to read metadata cache entry [106] [ 282.692695][ T788] usb 1-1: New USB device found, idVendor=12d1, idProduct=0ec1, bcdDevice=29.23 [ 282.707714][ T9449] SQUASHFS error: Unable to read inode 0x11f [ 282.732092][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.775341][ T788] usb 1-1: Product: syz [ 282.781650][ T788] usb 1-1: Manufacturer: syz [ 282.807865][ T788] usb 1-1: SerialNumber: syz [ 282.872084][ T5853] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 283.070636][ T788] qmi_wwan: probe of 1-1:81.13 failed with error -22 [ 283.090453][ T788] usb 1-1: USB disconnect, device number 55 [ 283.110806][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 283.132369][ T9458] loop3: detected capacity change from 0 to 512 [ 283.143220][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 283.165230][ T9458] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 283.174217][ T5853] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 283.209780][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.235191][ T5853] usb 3-1: config 0 descriptor?? [ 283.269756][ T9458] block device autoloading is deprecated and will be removed. [ 283.303874][ T9458] syz.3.1590: attempt to access beyond end of device [ 283.303874][ T9458] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 283.317832][ T9458] EXT4-fs (loop3): couldn't read superblock of external journal [ 283.478090][ T9] usb 3-1: USB disconnect, device number 56 [ 283.542000][ T787] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 283.579833][ T9462] loop3: detected capacity change from 0 to 4096 [ 283.603376][ T9462] ntfs3: loop3: Failed to load $MFT (-22). [ 283.739165][ T787] usb 2-1: config 128 has an invalid interface number: 138 but max is 0 [ 283.752465][ T787] usb 2-1: config 128 has no interface number 0 [ 283.767726][ T787] usb 2-1: config 128 interface 138 has no altsetting 0 [ 283.808474][ T787] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=c1.78 [ 283.828171][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.850092][ T787] usb 2-1: Product: syz [ 283.860364][ T787] usb 2-1: Manufacturer: syz [ 283.877178][ T787] usb 2-1: SerialNumber: syz [ 284.150056][ T787] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.138/input/input22 [ 284.160162][ T5809] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 284.176626][ T5124] bcm5974 2-1:128.138: could not read from device [ 284.196244][ T5124] bcm5974 2-1:128.138: could not read from device [ 284.206700][ T787] usb 2-1: USB disconnect, device number 68 [ 284.219401][ T9476] loop0: detected capacity change from 0 to 8 [ 284.242549][ T5124] bcm5974 2-1:128.138: could not read from device [ 284.307027][ T9476] SQUASHFS error: xz decompression failed, data probably corrupt [ 284.320602][ T9476] SQUASHFS error: Failed to read block 0x108: -5 [ 284.330737][ T9476] SQUASHFS error: Unable to read metadata cache entry [106] [ 284.351037][ T9476] SQUASHFS error: Unable to read inode 0x11f [ 284.363332][ T5809] usb 4-1: config 10 has an invalid interface number: 75 but max is 0 [ 284.376979][ T5809] usb 4-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 284.397613][ T5809] usb 4-1: config 10 has no interface number 0 [ 284.410598][ T5809] usb 4-1: config 10 interface 75 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 32 [ 284.429124][ T5809] usb 4-1: config 10 interface 75 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 1024 [ 284.441094][ T5809] usb 4-1: config 10 interface 75 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 284.464061][ T5809] usb 4-1: config 10 interface 75 has no altsetting 0 [ 284.487080][ T5809] usb 4-1: string descriptor 0 read error: -22 [ 284.500149][ T5809] usb 4-1: Dual-Role OTG device on HNP port [ 284.525023][ T5809] usb 4-1: New USB device found, idVendor=0424, idProduct=4913, bcdDevice=ca.aa [ 284.553982][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.582560][ T9468] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 284.607450][ T9468] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 284.626154][ T5809] hub 4-1:10.75: bad descriptor, ignoring hub [ 284.638883][ T5809] hub: probe of 4-1:10.75 failed with error -5 [ 284.657855][ T9482] loop2: detected capacity change from 0 to 64 [ 284.671870][ T9482] hfs: bad allocation block size 56 [ 284.677387][ T9482] hfs: can't find a HFS filesystem on dev loop2 [ 284.953256][ T9486] loop0: detected capacity change from 0 to 4096 [ 284.972951][ T9486] ntfs: (device loop0): ntfs_read_inode_mount(): $MFT must be uncompressed, non-sparse, and unencrypted but a compressed/sparse/encrypted extent was found. $MFT is corrupt. Run chkdsk. [ 285.009420][ T9486] ntfs: (device loop0): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 285.038865][ T9486] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. [ 285.048335][ T787] usb 4-1: USB disconnect, device number 51 [ 285.571480][ T5782] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 285.735405][ T9490] loop2: detected capacity change from 0 to 32768 [ 285.740626][ T9488] loop1: detected capacity change from 0 to 40427 [ 285.773971][ T9488] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 285.808059][ T9488] F2FS-fs (loop1): Image doesn't support compression [ 285.817104][ T9488] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xeffa [ 285.817273][ T9490] XFS (loop2): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 285.841780][ T5853] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 285.859508][ T9488] F2FS-fs (loop1): invalid crc value [ 285.909326][ C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 285.928203][ T9488] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4575/0x6be0 [ 285.950412][ T9488] F2FS-fs (loop1): Failed to initialize F2FS node manager (-12) [ 286.052236][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 286.103616][ T5853] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.120208][ T5853] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.137608][ T5853] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.152191][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.171620][ T5853] usb 1-1: Product: syz [ 286.175859][ T5853] usb 1-1: Manufacturer: syz [ 286.180504][ T5853] usb 1-1: SerialNumber: syz [ 286.237785][ T9490] XFS (loop2): Ending clean mount [ 286.465436][ T5853] usb 1-1: skipping empty audio interface (v1) [ 286.465467][ T5776] XFS (loop2): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 286.596279][ T5853] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 286.623879][ T5853] usb 1-1: USB disconnect, device number 56 [ 286.772267][ T7123] udevd[7123]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.788865][ T9523] tmpfs: Bad value for 'mpol' [ 287.076119][ T9529] loop2: detected capacity change from 0 to 512 [ 287.135867][ T9529] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 287.176523][ T9529] syz.2.1622: attempt to access beyond end of device [ 287.176523][ T9529] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 287.226060][ T9529] EXT4-fs (loop2): couldn't read superblock of external journal [ 287.592308][ T9534] loop0: detected capacity change from 0 to 4096 [ 287.615231][ T9534] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 287.675972][ T9534] ntfs3: loop0: Failed to load $LogFile (-22). [ 287.850636][ T9547] loop1: detected capacity change from 0 to 1164 [ 287.972759][ T5881] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 288.761560][ T787] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 288.957458][ T9569] loop0: detected capacity change from 0 to 512 [ 288.977355][ T9569] EXT4-fs: Ignoring removed i_version option [ 288.987551][ T787] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 289.013156][ T9569] ================================================================== [ 289.021298][ T9569] BUG: KASAN: slab-out-of-bounds in __ext4_iget+0x2c0/0x3f40 [ 289.028745][ T9569] Read of size 8 at addr ffff888078de7f30 by task syz.0.1642/9569 [ 289.036601][ T9569] [ 289.038955][ T9569] CPU: 1 PID: 9569 Comm: syz.0.1642 Not tainted syzkaller #0 [ 289.046373][ T9569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.056469][ T9569] Call Trace: [ 289.059785][ T9569] [ 289.062756][ T9569] dump_stack_lvl+0x18c/0x250 [ 289.067484][ T9569] ? __lock_acquire+0x7d40/0x7d40 [ 289.072561][ T9569] ? show_regs_print_info+0x20/0x20 [ 289.077824][ T9569] ? load_image+0x400/0x400 [ 289.082382][ T9569] ? __virt_addr_valid+0x469/0x540 [ 289.087540][ T9569] print_report+0xa8/0x210 [ 289.092002][ T9569] ? __ext4_iget+0x2c0/0x3f40 [ 289.096736][ T9569] kasan_report+0x117/0x150 [ 289.101288][ T9569] ? do_raw_spin_unlock+0x121/0x230 [ 289.106535][ T9569] ? __ext4_iget+0x2c0/0x3f40 [ 289.111264][ T9569] __ext4_iget+0x2c0/0x3f40 [ 289.115819][ T9569] ? free_unref_page+0x190/0x2e0 [ 289.120814][ T9569] ? apply_workqueue_attrs+0x180/0x180 [ 289.126312][ T9569] ? ext4_get_projid+0x140/0x140 [ 289.131296][ T9569] ? mb_cache_create+0x433/0x530 [ 289.136278][ T9569] ext4_fill_super+0x5020/0x6790 [ 289.141265][ T9569] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 289.147544][ T9569] ? __might_sleep+0xe0/0xe0 [ 289.152176][ T9569] ? read_lock_is_recursive+0x20/0x20 [ 289.157591][ T9569] ? snprintf+0xe9/0x140 [ 289.161884][ T9569] ? down_read_killable+0x340/0x340 [ 289.167140][ T9569] ? setup_bdev_super+0x56b/0x660 [ 289.172200][ T9569] get_tree_bdev+0x3f3/0x520 [ 289.176831][ T9569] ? vfs_parse_fs_string+0x170/0x170 [ 289.182163][ T9569] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 289.188448][ T9569] ? setup_bdev_super+0x660/0x660 [ 289.193511][ T9569] ? apparmor_capable+0x137/0x1a0 [ 289.198575][ T9569] ? bpf_lsm_capable+0x9/0x10 [ 289.203296][ T9569] ? security_capable+0x89/0xb0 [ 289.208197][ T9569] vfs_get_tree+0x8c/0x280 [ 289.212650][ T9569] do_new_mount+0x24b/0xa40 [ 289.216583][ T9553] loop2: detected capacity change from 0 to 32768 [ 289.217202][ T9569] __se_sys_mount+0x2e7/0x3d0 [ 289.217231][ T9569] ? __x64_sys_mount+0xc0/0xc0 [ 289.233164][ T9569] ? lockdep_hardirqs_on+0x98/0x150 [ 289.238412][ T9569] ? __x64_sys_mount+0x20/0xc0 [ 289.243215][ T9569] do_syscall_64+0x55/0xa0 [ 289.247678][ T9569] ? clear_bhb_loop+0x40/0x90 [ 289.252399][ T9569] ? clear_bhb_loop+0x40/0x90 [ 289.257116][ T9569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.263048][ T9569] RIP: 0033:0x7f88c7b9bf4a [ 289.267497][ T9569] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.287148][ T9569] RSP: 002b:00007f88c8a3ae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 289.295616][ T9569] RAX: ffffffffffffffda RBX: 00007f88c8a3aee0 RCX: 00007f88c7b9bf4a [ 289.303635][ T9569] RDX: 0000200000000ac0 RSI: 0000200000000240 RDI: 00007f88c8a3aea0 [ 289.311655][ T9569] RBP: 0000200000000ac0 R08: 00007f88c8a3aee0 R09: 0000000003810744 [ 289.319679][ T9569] R10: 0000000003810744 R11: 0000000000000246 R12: 0000200000000240 [ 289.327697][ T9569] R13: 00007f88c8a3aea0 R14: 0000000000000453 R15: 00002000000000c0 [ 289.335719][ T9569] [ 289.338779][ T9569] [ 289.341140][ T9569] Allocated by task 5771: [ 289.345497][ T9569] kasan_set_track+0x4e/0x70 [ 289.350140][ T9569] __kasan_slab_alloc+0x6c/0x80 [ 289.355028][ T9569] slab_post_alloc_hook+0x6e/0x4b0 [ 289.360186][ T9569] kmem_cache_alloc_lru+0x111/0x2d0 [ 289.365433][ T9569] sock_alloc_inode+0x28/0xc0 [ 289.370158][ T9569] new_inode_pseudo+0x63/0x1d0 [ 289.374968][ T9569] __sock_create+0x12d/0x940 [ 289.379608][ T9569] __sys_socket+0xd7/0x1a0 [ 289.384070][ T9569] __x64_sys_socket+0x7a/0x90 [ 289.388799][ T9569] do_syscall_64+0x55/0xa0 [ 289.393268][ T9569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.399199][ T9569] [ 289.401547][ T9569] Freed by task 22: [ 289.404676][ T787] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 289.405360][ T9569] kasan_set_track+0x4e/0x70 [ 289.419025][ T9569] kasan_save_free_info+0x2e/0x50 [ 289.424136][ T9569] ____kasan_slab_free+0x126/0x1e0 [ 289.425187][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 289.429274][ T9569] slab_free_freelist_hook+0x130/0x1a0 [ 289.442939][ T9569] kmem_cache_free+0xf8/0x270 [ 289.447659][ T9569] rcu_core+0xcfb/0x1770 [ 289.451938][ T9569] handle_softirqs+0x280/0x820 [ 289.456742][ T9569] run_ksoftirqd+0xa8/0x100 [ 289.460061][ T787] usb 2-1: Product: syz [ 289.461264][ T9569] smpboot_thread_fn+0x635/0xa00 [ 289.461296][ T9569] kthread+0x2fa/0x390 [ 289.461311][ T9569] ret_from_fork+0x48/0x80 [ 289.461334][ T9569] ret_from_fork_asm+0x11/0x20 [ 289.461359][ T9569] [ 289.461364][ T9569] Last potentially related work creation: [ 289.461371][ T9569] kasan_save_stack+0x3e/0x60 [ 289.465812][ T787] usb 2-1: Manufacturer: syz [ 289.470480][ T9569] __kasan_record_aux_stack+0xaf/0xc0 [ 289.486333][ T787] usb 2-1: SerialNumber: syz [ 289.491831][ T9569] call_rcu+0x153/0x950 [ 289.491863][ T9569] evict+0x835/0x8d0 [ 289.491890][ T9569] __dentry_kill+0x431/0x650 [ 289.523907][ T9569] dentry_kill+0xb8/0x290 [ 289.528287][ T9569] dput+0xfe/0x1e0 [ 289.532054][ T9569] __fput+0x5e5/0x970 [ 289.536084][ T9569] __se_sys_close+0x15f/0x220 [ 289.540818][ T9569] do_syscall_64+0x55/0xa0 [ 289.545293][ T9569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.551228][ T9569] [ 289.553587][ T9569] Second to last potentially related work creation: [ 289.560202][ T9569] kasan_save_stack+0x3e/0x60 [ 289.564415][ T787] usb 2-1: config 0 descriptor?? [ 289.564947][ T9569] __kasan_record_aux_stack+0xaf/0xc0 [ 289.575311][ T9569] call_rcu+0x153/0x950 [ 289.579520][ T9569] evict+0x835/0x8d0 [ 289.583461][ T9569] __dentry_kill+0x431/0x650 [ 289.588095][ T9569] dentry_kill+0xb8/0x290 [ 289.592471][ T9569] dput+0xfe/0x1e0 [ 289.593613][ T9553] (syz.2.1634,9553,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0x5bee9555. Applying ECC. [ 289.596220][ T9569] __fput+0x5e5/0x970 [ 289.613534][ T9569] __se_sys_close+0x15f/0x220 [ 289.618258][ T9569] do_syscall_64+0x55/0xa0 [ 289.622720][ T9569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.628680][ T9569] [ 289.631033][ T9569] The buggy address belongs to the object at ffff888078de7800 [ 289.631033][ T9569] which belongs to the cache sock_inode_cache of size 1408 [ 289.645647][ T9569] The buggy address is located 432 bytes to the right of [ 289.645647][ T9569] allocated 1408-byte region [ffff888078de7800, ffff888078de7d80) [ 289.660454][ T9569] [ 289.662814][ T9569] The buggy address belongs to the physical page: [ 289.669267][ T9569] page:ffffea0001e37800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78de0 [ 289.671407][ T9553] (syz.2.1634,9553,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc2d589a7, computed 0x4b9c4e7d [ 289.679437][ T9569] head:ffffea0001e37800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 289.700955][ T9569] memcg:ffff88803014e501 [ 289.705227][ T9569] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 289.713261][ T9569] page_type: 0xffffffff() [ 289.717626][ T9569] raw: 00fff00000000840 ffff888142e61b40 ffffea0001e38600 dead000000000002 [ 289.726254][ T9569] raw: 0000000000000000 0000000000150015 00000001ffffffff ffff88803014e501 [ 289.734873][ T9569] page dumped because: kasan: bad access detected [ 289.741333][ T9569] page_owner tracks the page as allocated [ 289.741920][ T9553] (syz.2.1634,9553,0):ocfs2_validate_inode_block:1382 ERROR: Checksum failed for dinode 17 [ 289.747057][ T9569] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5434, tgid 5434 (dhcpcd), ts 57432797328, free_ts 25339624942 [ 289.779674][ T9569] post_alloc_hook+0x1c1/0x200 [ 289.781652][ T9553] (syz.2.1634,9553,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 289.784473][ T9569] get_page_from_freelist+0x1951/0x19e0 [ 289.798143][ T9569] __alloc_pages+0x1f0/0x460 [ 289.798374][ T9553] (syz.2.1634,9553,0):ocfs2_init_global_system_inodes:440 ERROR: status = -5 [ 289.802804][ T9569] alloc_slab_page+0x5d/0x160 [ 289.802825][ T9569] new_slab+0x87/0x2d0 [ 289.802858][ T9569] ___slab_alloc+0xc5d/0x12f0 [ 289.802885][ T9569] kmem_cache_alloc_lru+0x1aa/0x2d0 [ 289.802912][ T9569] sock_alloc_inode+0x28/0xc0 [ 289.814405][ T9553] (syz.2.1634,9553,0):ocfs2_init_global_system_inodes:472 ERROR: status = -5 [ 289.816355][ T9569] new_inode_pseudo+0x63/0x1d0 [ 289.820434][ T9553] (syz.2.1634,9553,0):ocfs2_initialize_super:2254 ERROR: status = -5 [ 289.825114][ T9569] __sock_create+0x12d/0x940 [ 289.825141][ T9569] __sys_socketpair+0x236/0x550 [ 289.825166][ T9569] __x64_sys_socketpair+0x9b/0xb0 [ 289.825192][ T9569] do_syscall_64+0x55/0xa0 [ 289.825217][ T9569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.825238][ T9569] page last free stack trace: [ 289.834062][ T9553] (syz.2.1634,9553,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 289.835106][ T9569] free_unref_page_prepare+0x7b2/0x8c0 [ 289.899377][ T9569] free_unref_page+0x32/0x2e0 [ 289.904114][ T9569] free_contig_range+0xa1/0x150 [ 289.908992][ T9569] destroy_args+0x80/0x850 [ 289.913452][ T9569] debug_vm_pgtable+0x411/0x440 [ 289.918318][ T9569] do_one_initcall+0x242/0x790 [ 289.923108][ T9569] do_initcall_level+0x137/0x1f0 [ 289.928062][ T9569] do_initcalls+0x69/0xd0 [ 289.932413][ T9569] kernel_init_freeable+0x3ed/0x580 [ 289.937629][ T9569] kernel_init+0x1d/0x1c0 [ 289.941980][ T9569] ret_from_fork+0x48/0x80 [ 289.946419][ T9569] ret_from_fork_asm+0x11/0x20 [ 289.951216][ T9569] [ 289.953557][ T9569] Memory state around the buggy address: [ 289.959202][ T9569] ffff888078de7e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.967274][ T9569] ffff888078de7e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.975353][ T9569] >ffff888078de7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.983430][ T9569] ^ [ 289.989075][ T9569] ffff888078de7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.997151][ T9569] ffff888078de8000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 290.005226][ T9569] ================================================================== [ 290.072910][ T9569] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 290.074713][ T788] usb 2-1: USB disconnect, device number 69 [ 290.086097][ T9569] CPU: 0 PID: 9569 Comm: syz.0.1642 Not tainted syzkaller #0 [ 290.093503][ T9569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.103600][ T9569] Call Trace: [ 290.106916][ T9569] [ 290.109883][ T9569] dump_stack_lvl+0x18c/0x250 [ 290.114627][ T9569] ? show_regs_print_info+0x20/0x20 [ 290.119881][ T9569] ? load_image+0x400/0x400 [ 290.124441][ T9569] panic+0x2dc/0x730 [ 290.128382][ T9569] ? bpf_jit_dump+0xd0/0xd0 [ 290.132934][ T9569] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 290.138955][ T9569] ? _raw_spin_unlock+0x40/0x40 [ 290.143849][ T9569] ? print_memory_metadata+0x314/0x400 [ 290.149364][ T9569] ? __ext4_iget+0x2c0/0x3f40 [ 290.154095][ T9569] check_panic_on_warn+0x84/0xa0 [ 290.159092][ T9569] ? __ext4_iget+0x2c0/0x3f40 [ 290.163819][ T9569] end_report+0x6f/0x130 [ 290.168203][ T9569] kasan_report+0x128/0x150 [ 290.172752][ T9569] ? do_raw_spin_unlock+0x121/0x230 [ 290.178006][ T9569] ? __ext4_iget+0x2c0/0x3f40 [ 290.182747][ T9569] __ext4_iget+0x2c0/0x3f40 [ 290.187307][ T9569] ? free_unref_page+0x190/0x2e0 [ 290.192296][ T9569] ? apply_workqueue_attrs+0x180/0x180 [ 290.197883][ T9569] ? ext4_get_projid+0x140/0x140 [ 290.202871][ T9569] ? mb_cache_create+0x433/0x530 [ 290.207873][ T9569] ext4_fill_super+0x5020/0x6790 [ 290.212873][ T9569] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 290.219161][ T9569] ? __might_sleep+0xe0/0xe0 [ 290.223804][ T9569] ? read_lock_is_recursive+0x20/0x20 [ 290.229232][ T9569] ? snprintf+0xe9/0x140 [ 290.233527][ T9569] ? down_read_killable+0x340/0x340 [ 290.238778][ T9569] ? setup_bdev_super+0x56b/0x660 [ 290.243852][ T9569] get_tree_bdev+0x3f3/0x520 [ 290.248492][ T9569] ? vfs_parse_fs_string+0x170/0x170 [ 290.253831][ T9569] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 290.260121][ T9569] ? setup_bdev_super+0x660/0x660 [ 290.265192][ T9569] ? apparmor_capable+0x137/0x1a0 [ 290.270351][ T9569] ? bpf_lsm_capable+0x9/0x10 [ 290.275081][ T9569] ? security_capable+0x89/0xb0 [ 290.279984][ T9569] vfs_get_tree+0x8c/0x280 [ 290.284459][ T9569] do_new_mount+0x24b/0xa40 [ 290.289016][ T9569] __se_sys_mount+0x2e7/0x3d0 [ 290.293756][ T9569] ? __x64_sys_mount+0xc0/0xc0 [ 290.298567][ T9569] ? lockdep_hardirqs_on+0x98/0x150 [ 290.303807][ T9569] ? __x64_sys_mount+0x20/0xc0 [ 290.308647][ T9569] do_syscall_64+0x55/0xa0 [ 290.313120][ T9569] ? clear_bhb_loop+0x40/0x90 [ 290.317844][ T9569] ? clear_bhb_loop+0x40/0x90 [ 290.322568][ T9569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.328504][ T9569] RIP: 0033:0x7f88c7b9bf4a [ 290.332963][ T9569] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.352625][ T9569] RSP: 002b:00007f88c8a3ae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 290.361097][ T9569] RAX: ffffffffffffffda RBX: 00007f88c8a3aee0 RCX: 00007f88c7b9bf4a [ 290.369116][ T9569] RDX: 0000200000000ac0 RSI: 0000200000000240 RDI: 00007f88c8a3aea0 [ 290.377130][ T9569] RBP: 0000200000000ac0 R08: 00007f88c8a3aee0 R09: 0000000003810744 [ 290.385147][ T9569] R10: 0000000003810744 R11: 0000000000000246 R12: 0000200000000240 [ 290.393183][ T9569] R13: 00007f88c8a3aea0 R14: 0000000000000453 R15: 00002000000000c0 [ 290.401223][ T9569] [ 290.404863][ T9569] Kernel Offset: disabled [ 290.409200][ T9569] Rebooting in 86400 seconds..