last executing test programs: 6m0.989409024s ago: executing program 1 (id=132): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) 6m0.567008162s ago: executing program 1 (id=137): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2d]}}}, 0x4e}]}) 6m0.318069397s ago: executing program 1 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xecc, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m0.15124679s ago: executing program 1 (id=144): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@keep_last_dots}, {@keep_last_dots}, {@namecase}, {@errors_continue}, {}]}, 0x1, 0x1524, &(0x7f0000007640)="$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") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) 5m59.674065309s ago: executing program 1 (id=150): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000900000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x1}, 0xfffffffffffffeaf}, 0x94) 5m59.251847527s ago: executing program 1 (id=155): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000000)={0x0, [[0x5, 0xfff], [0x0, 0x1], [0x4, 0x0, 0xffffffff]], '\x00', [{}, {}, {0xd, 0x1}, {0x0, 0x8}], '\x00', 0x0, 0x0, 0x0, 0x2}) 5m58.972457823s ago: executing program 32 (id=155): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000000)={0x0, [[0x5, 0xfff], [0x0, 0x1], [0x4, 0x0, 0xffffffff]], '\x00', [{}, {}, {0xd, 0x1}, {0x0, 0x8}], '\x00', 0x0, 0x0, 0x0, 0x2}) 5m22.442652286s ago: executing program 2 (id=581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 5m22.077083783s ago: executing program 2 (id=585): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffd, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, 0x1c) 5m21.836076248s ago: executing program 2 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 5m21.659605571s ago: executing program 2 (id=589): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)={[{@keep_last_dots}, {@umask={'umask', 0x3d, 0x5}}, {@utf8}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@discard}, {@errors_remount}, {@errors_remount}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x151a, &(0x7f0000002280)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x200000, 0x0) 5m21.290228818s ago: executing program 2 (id=593): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') 5m20.825136507s ago: executing program 2 (id=598): r0 = socket$inet(0x2, 0x802, 0x1) write(r0, &(0x7f0000002700)="0867f5b2abcbf4f5", 0x8) 5m20.1886822s ago: executing program 33 (id=598): r0 = socket$inet(0x2, 0x802, 0x1) write(r0, &(0x7f0000002700)="0867f5b2abcbf4f5", 0x8) 4m16.038632715s ago: executing program 0 (id=1253): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/36) 4m15.78160636s ago: executing program 0 (id=1257): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 4m15.390493627s ago: executing program 0 (id=1262): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@loopback, 0xfffd, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@private2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x3}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@mcast2, 0xfffffffd, 0x33}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffe, 0x33}, 0x2, @in=@broadcast, 0x0, 0x0, 0x2}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 4m14.935854286s ago: executing program 0 (id=1267): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x152a, &(0x7f0000003000)="$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") mount(0x0, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) 4m14.508793804s ago: executing program 0 (id=1272): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 4m14.027567444s ago: executing program 0 (id=1277): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file2\x00', 0x41c, &(0x7f00000001c0)=ANY=[], 0x1, 0xa93, &(0x7f0000002000)="$eJzs3V2IXNUdAPBzZ3c2X2szsUldNWpaW7Qf7roxabWpJmKglEII9KGgLTTEmKZZ09KIVBGa+lD6IgpinvoQS1/6orSlqC8l+FCkoJTSIvTJSl9TEPogBV3Z3XtmZ/+Z4c5sdndmdn4/OHPm3nPnnnNn7ty5c+/5SMDIqi0+HjiwNaX00hsvHr3l5beeX5hzuLlEY/FxvGWqnlIqyunxsL73xpbijz545mS7uEj7Fx/zdDp2pfnaHSmlC2lfupwa6blHLo6/+9qxd15JZ588fvTt19dn65cV650BAAAMgOOXDx3Y8++/3bzr/6/eeiRtac7P5+eNcnqyPO8/Up4o5/PlWlo5XbSEVhNhufEy1MJyY22Wa82nHpYb75D/RFhvvcNyWyryH2uZ1267YZjl/biRitr0iulabXp66T95WvxfP1FMnzsz99j5PhUUWHP/uy2ltE8QhD6Fnf3Mf35nv49AAEvi/cKrXFjbO3XNtY13l/+VB2vtX9+ivqYlZCRsXYo2ev+P5D/Y+f/2F2oqsHY24d70j+tatit/jybL6XgfIdZf6vX7n9cX70d0PAcINyY63UcYlvsLnco5tsHlWK1O5Y/7xWZ1fxnn9+GBkF5+Dxb32viZDstnDLT3oev/QxR+MABlGLKQNi6vG4sB2N4ew3yfjz/A4Ir15uZLOT3W64vpWyrSt1akb6tI316RvqMiHUbZH594Pr1QLF/viv/pe70eNhlW8akeyxOvR/aaf6z326trzT/WJ4aBtuMvF+999OG/L9X/L5r7/8fl/p7/QjXK79blcoF8vTBeV2/W/W+szKbWYbnrQ3Gua7P84vPdK5crdi+vJ7UcZ64qx1R+xdIV3Z2dltu7cv2NsNy2MmwN5Y3nJ9vD6/L5Rz4oTq4ozfL21sN2TIRy5OPKrjKO5YDVyPvjyvr/C3vfYv3/5m2sqVQvHjszd+rucjrvp2+N1bcszJ/d6IID16zb9j9TaWX7n8nm/Hqt9biwc3l+0XpcaIT5+zvMv6eczr9zPxzbtjh/+uSP5x5d642HEXf+qafPnpibO/VTTwbtSbqQ0gAUw5NRepKPCyfm+ntcAtbfzBOP/2Tm/FNP33Xm8ROnT50+dW724Oy99x2cnf3qfTOL5/UzrWf3m7G6MIyu5V//fpcEAAAAAAAAAAAA6Nbp92cu/fPNr/1rqf3/cvu/3P4/1/zN7f9/Fdr/h2b+zQrCuR1gbsd3VXv70MHqRFiuXoZPh/XvDvnsCa/7TBk3x/Er2//n7GK/rrk8N4T5sf/evNxUmB/7S5kIfZAU6ZfbW8v3uTJ+tox/k6B/Jr6/re38OM5lp/6t876e+6fQL8Vwyp9b3htyPya5/Xdu7537K8n9P+Tj/64NKCNrbyPaFfZ7G4H2/ruZ+//OJzH9LocgDGiYN1gdMCD6Pf5nvu6Z43N//tbWhZAXu/Lgyit+sf9SuBaDPv7kRuf/ox39zf8q/R//c03P2Jrj33V9/Asj5sUbQF069Oy3/9OSbbqp2/zj+Ke5H+jdveX/jTL/vDV3pO7yn3855B9vCHXp/pD/9i7zv2r7964u/wfK/PPbduft3ea/VOKitrIc8bpxvv+Xrxt/N+R/OGx/7tuz5+1f5UCNR8r8YZQNyzizvRrY8X+7FOthHCyn84Ew13OI4530Wv5cvyL/DuwJ6y8qft824fi/8z+fn//1qIzj8vUyrvo+TJafad4fG22may3T9Tbv7WY91sCwem8z3/8Thj9sG4AyXHtY+lltnZd/DPtctvn5+b726atD4f7q9/vf7/8Jq85/ja7C9vv9rxLH/43n8HH835gex//9TkiP4//G18fx9WJ6HP83vp9x/N+YfkNYbxwfeKoi/caK9Jsq0m+uSN9bkX5LRfpnK9JvrUi/rSL9+or02yvSP1+R/oXO6R+2Ltrp9XdWrP+LFembXW6PMqrbD6Msts/z/YfRke//dPr+765IB4bXxVdnH3r4D99rLLX/n2heD8n38Y6U0/Xyv/PPyul43zu1TC+kvVlOvx/SB/16B4yS2H9G/H2/oyIdGF65npfvN4ygon2PPfF+W6d+qzqd5zNcvlTGXy7jr5TxXWU8XcYzZTxbxvs3qHysj4d+/6dDLxTL//d3hvRu65PH9kCxn6h7uixPvD7Qa3322I9fr641/1U2BwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOib2uLjgQNTRUovvfHi0Ut//ebvFuYcbi7RWHwcb5mqN1+X0t1lPFbGl8onH33wzMnW+OMyLtL+VKSiOT8du9LMaUdK6ULaly6nRnrukYvj77527J1X0tknjx99+/X1eweWFOudAQAAAPTRJwEAAP//wUYO1A==") creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa6) 4m13.418741345s ago: executing program 34 (id=1277): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file2\x00', 0x41c, &(0x7f00000001c0)=ANY=[], 0x1, 0xa93, &(0x7f0000002000)="$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") creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa6) 3m46.890977016s ago: executing program 3 (id=1567): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000006c0)={0x1, 0xfffffff8, 0xffffffff, 0x8}) 3m46.555706313s ago: executing program 3 (id=1573): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0) 3m46.19196662s ago: executing program 3 (id=1579): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 3m44.788400096s ago: executing program 3 (id=1591): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x30e, &(0x7f0000000900)="$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") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101040, 0x0) 3m44.347344215s ago: executing program 3 (id=1595): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000300)="2648e802", 0x4}], 0x2}, 0xc4) 3m43.287641335s ago: executing program 3 (id=1606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x15, &(0x7f0000000a40)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @loopback}}}, 0x108) 3m42.652351548s ago: executing program 35 (id=1606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x15, &(0x7f0000000a40)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @loopback}}}, 0x108) 2m55.061377945s ago: executing program 5 (id=2098): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000002680)='./file2\x00', &(0x7f00000026c0), 0x4000) 2m54.531438255s ago: executing program 5 (id=2108): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000001c0)={0xc, 0x7, 0x6}) 2m54.322251289s ago: executing program 5 (id=2111): r0 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) finit_module(r0, 0x0, 0x0) 2m53.880990337s ago: executing program 5 (id=2125): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x30e, &(0x7f0000000900)="$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") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101040, 0x0) 2m53.513405444s ago: executing program 5 (id=2117): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090d, 0x2, '\x00', @p_u32=0x0}}) 2m52.797931518s ago: executing program 5 (id=2137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2m52.21156274s ago: executing program 36 (id=2137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 4.956662434s ago: executing program 8 (id=4119): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff], [0x0, 0x0, 0x0, 0xfffffffd], [0x9]}) 4.63599825s ago: executing program 8 (id=4124): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000"], 0x48) 4.587635631s ago: executing program 9 (id=4125): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x3e, &(0x7f0000000080)=""/217, &(0x7f0000003080)=0x9c) 4.318348306s ago: executing program 9 (id=4126): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 4.318040606s ago: executing program 8 (id=4128): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9817, &(0x7f000001c700)="$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") llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)=""/169, 0xa9) 3.893604885s ago: executing program 6 (id=4132): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/190, 0xbe}], 0x1, 0x7, 0xffffffff) 3.335947025s ago: executing program 6 (id=4137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000013c0)=@newpolicy={0x27c, 0x13, 0x429, 0x0, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@algo_auth={0x1c4, 0x5, {{'streebog512-generic\x00'}, 0xbe0, "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"}}]}, 0x27c}}, 0x0) 3.329627176s ago: executing program 7 (id=4138): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, [@FRA_DST={0x14, 0x7, @loopback}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x38}}, 0x0) 2.923983914s ago: executing program 7 (id=4140): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 2.883842214s ago: executing program 6 (id=4142): syz_usb_connect(0x0, 0x35, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x32, 0x44, 0x16, 0x20, 0xe8d, 0x43, 0x6358, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0xb, 0xfa, 0x20, 0xa, [{{0x9, 0x4, 0x4, 0x4, 0x1, 0xa, 0x0, 0x0, 0x9, [], [{{0x9, 0x5, 0x4, 0xc, 0x440, 0x5, 0xa4, 0x1, [@generic={0x8, 0xb, "fedef38f7c72"}]}}]}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) truncate(0x0, 0x80000000008008) 2.685463748s ago: executing program 9 (id=4143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x40) 2.484100222s ago: executing program 7 (id=4145): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 2.298009715s ago: executing program 9 (id=4146): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.138044329s ago: executing program 8 (id=4148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) 1.923967443s ago: executing program 9 (id=4150): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 1.737307827s ago: executing program 9 (id=4151): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x4703, &(0x7f0000008f40)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) 1.464058561s ago: executing program 4 (id=4153): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x32402) 1.448172342s ago: executing program 7 (id=4154): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) 1.355517264s ago: executing program 4 (id=4155): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x30, 0x9, 0x40, 0xfffff002}]}, 0x10) 1.136062168s ago: executing program 7 (id=4156): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000300)) 1.04048667s ago: executing program 4 (id=4157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000180)={0x4, 0x0, [{0x80000008, 0x5a04, 0x6, 0x822, 0x3, 0x5, 0xfb23}, {0x40000000, 0x7ff, 0x2, 0x4, 0x9, 0xa5, 0xea8b}, {0x7, 0x9, 0x0, 0x9, 0x5, 0x5, 0x7}, {0x0, 0x3, 0x4, 0x60c1, 0x3, 0x4, 0x8001}]}) 1.002651991s ago: executing program 8 (id=4158): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000001440)) 911.936583ms ago: executing program 7 (id=4159): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x0, 0x445d, &(0x7f0000008900)="$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") listxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 911.764623ms ago: executing program 6 (id=4160): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x4, 0xfc, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x32, 0x0, 0xe, @in6={0xa, 0x4e20, 0xe3d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e20, 0x4, @remote, 0x8000}}]}, 0x70}}, 0x4) 797.335105ms ago: executing program 4 (id=4161): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044941, &(0x7f0000003d00)) 771.156655ms ago: executing program 8 (id=4162): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="00000400000076003e70"], 0x0, 0x0, 0x0, 0x0, 0x0}) 568.041399ms ago: executing program 4 (id=4163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 551.34651ms ago: executing program 6 (id=4164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x4d0, 0xffffffff, 0x260, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x4000, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x1a0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x6, "65fc40a233a7b914be92764f0ceb353756b2413f57420741e4728a055ad3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530) 114.338698ms ago: executing program 4 (id=4165): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) 0s ago: executing program 6 (id=4166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x9025}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x6c}}, 0x0) kernel console output (not intermixed with test programs): write_blk: dquota write failed [ 311.749847][T10870] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 311.804426][T10870] EXT4-fs error (device loop6): ext4_acquire_dquot:6816: comm syz.6.2421: Failed to acquire dquot type 1 [ 311.871182][T10870] EXT4-fs (loop6): 1 truncate cleaned up [ 311.899102][T10870] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 312.215528][ T5888] EXT4-fs (loop6): unmounting filesystem. [ 313.187565][T10881] loop8: detected capacity change from 0 to 32768 [ 313.300585][T10935] loop9: detected capacity change from 0 to 256 [ 313.390040][T10881] XFS (loop8): Mounting V5 Filesystem [ 313.574195][ T4362] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 313.614936][T10881] XFS (loop8): Ending clean mount [ 313.774037][ T4362] usb 5-1: Using ep0 maxpacket: 16 [ 313.781100][ T4362] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 313.824104][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.837279][T10951] loop9: detected capacity change from 0 to 512 [ 313.872288][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.898991][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2445'. [ 313.902543][ T4362] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.943702][T10951] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 313.963762][ T4362] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 313.973672][T10951] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 313.994324][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.004379][T10951] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 314.032006][ T4362] usb 5-1: config 0 descriptor?? [ 314.060697][T10951] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 314.090355][ T4362] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 314.112014][T10951] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 314.151873][ T3623] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 314.154028][T10951] EXT4-fs (loop9): orphan cleanup on readonly fs [ 314.185736][ T8677] XFS (loop8): Unmounting Filesystem [ 314.192470][ T3623] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 314.230116][T10951] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2444: bg 0: block 34: padding at end of block bitmap is not set [ 314.263802][T10947] loop6: detected capacity change from 0 to 32768 [ 314.283230][T10951] Quota error (device loop9): write_blk: dquota write failed [ 314.304964][T10951] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 314.316400][T10947] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2443 (10947) [ 314.316550][ T4362] usb 5-1: USB disconnect, device number 11 [ 314.375189][T10951] EXT4-fs error (device loop9): ext4_acquire_dquot:6816: comm syz.9.2444: Failed to acquire dquot type 1 [ 314.405614][T10947] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.433570][T10951] EXT4-fs (loop9): 1 truncate cleaned up [ 314.451895][T10947] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 314.471694][T10951] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 314.483856][T10947] BTRFS info (device loop6): using free space tree [ 314.774846][T10105] EXT4-fs (loop9): unmounting filesystem. [ 314.984069][T10947] BTRFS info (device loop6): enabling ssd optimizations [ 315.064308][ T4332] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 315.111188][T10991] device bond1 entered promiscuous mode [ 315.118758][T10991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 315.213071][ T5888] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 315.265892][ T4332] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 315.295752][ T4332] usb 8-1: config 0 has no interface number 0 [ 315.301919][ T4332] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 315.397636][ T4332] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.462481][ T4332] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 315.485998][ T6521] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop6 scanned by udevd (6521) [ 315.518777][ T4332] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.549709][ T4332] usb 8-1: Product: syz [ 315.559829][ T4332] usb 8-1: Manufacturer: syz [ 315.575353][ T4332] usb 8-1: SerialNumber: syz [ 315.601219][ T4332] usb 8-1: config 0 descriptor?? [ 315.624939][T10979] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 315.645789][ T4332] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 315.769528][ T4332] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 315.864072][ T6529] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 315.998429][T11012] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 316.084175][ T6529] usb 9-1: Using ep0 maxpacket: 16 [ 316.091968][ T6529] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 316.114109][ T6529] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 316.157893][ T129] usb 8-1: USB disconnect, device number 5 [ 316.174038][ T6529] usb 9-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 316.183890][ T6529] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 316.201218][ T6529] usb 9-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 316.205161][ T129] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 316.259728][ T6529] usb 9-1: config 1 interface 0 has no altsetting 0 [ 316.284886][T11017] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 316.286623][ T6529] usb 9-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 316.307899][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2459'. [ 316.308775][ T129] cyberjack 8-1:0.69: device disconnected [ 316.371410][ T6529] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.419896][ T6529] ums-sddr09 9-1:1.0: USB Mass Storage device detected [ 316.639663][ T6529] scsi host1: usb-storage 9-1:1.0 [ 316.868749][ T6529] usb 9-1: USB disconnect, device number 3 [ 316.931957][T11033] device bond1 entered promiscuous mode [ 316.952785][T11033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.177820][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.184389][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.194111][ T4332] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 317.400657][ T4332] usb 7-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 317.427780][ T4332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.474991][ T4332] usb 7-1: config 0 descriptor?? [ 317.618474][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2476'. [ 317.722026][ T4332] snd-usb-hiface: probe of 7-1:0.0 failed with error -22 [ 317.821151][T11069] loop7: detected capacity change from 0 to 256 [ 317.829322][T11072] loop4: detected capacity change from 0 to 16 [ 317.877196][T11072] cramfs: empty filesystem [ 317.936647][ T4332] usb 7-1: USB disconnect, device number 12 [ 318.374126][ T6529] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 318.583380][ T6529] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 318.607151][ T6529] usb 10-1: config 0 has no interface number 0 [ 318.623698][ T6529] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 318.664055][ T6529] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.714353][ T6529] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 318.741411][ T6529] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.785322][ T6529] usb 10-1: Product: syz [ 318.789645][ T6529] usb 10-1: Manufacturer: syz [ 318.824065][ T6529] usb 10-1: SerialNumber: syz [ 318.835112][ T6529] usb 10-1: config 0 descriptor?? [ 318.854777][T11079] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 318.865399][ T6529] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 318.900157][ T6529] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 319.031579][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2492'. [ 319.075011][T11100] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2492'. [ 319.134107][T11100] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2492'. [ 319.243571][T11069] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 319.298961][T11069] FAT-fs (loop7): Filesystem has been set read-only [ 319.324590][T11069] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 319.334226][ T129] usb 10-1: USB disconnect, device number 2 [ 319.348152][ T129] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 319.395837][ T129] cyberjack 10-1:0.69: device disconnected [ 319.425896][T11108] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 319.513081][T11081] loop4: detected capacity change from 0 to 40427 [ 319.557881][T11081] F2FS-fs (loop4): invalid crc value [ 319.633081][T11081] F2FS-fs (loop4): Found nat_bits in checkpoint [ 319.884081][T11081] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 319.999385][T11123] loop8: detected capacity change from 0 to 4096 [ 320.471365][T11135] loop7: detected capacity change from 0 to 4096 [ 320.499087][T11139] netlink: 'syz.8.2505': attribute type 10 has an invalid length. [ 320.549081][T11139] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2505'. [ 320.574074][T11139] device dummy0 entered promiscuous mode [ 320.619093][T11139] bridge0: port 3(dummy0) entered blocking state [ 320.691910][T11139] bridge0: port 3(dummy0) entered disabled state [ 320.763746][T11139] bridge0: port 3(dummy0) entered blocking state [ 320.770459][T11139] bridge0: port 3(dummy0) entered forwarding state [ 321.353898][T11160] netlink: 'syz.4.2504': attribute type 1 has an invalid length. [ 321.364010][T11160] netlink: 'syz.4.2504': attribute type 3 has an invalid length. [ 321.432862][T11160] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2504'. [ 321.466923][T11164] binder: 11163:11164 ioctl c018620c 200000000380 returned -22 [ 321.552340][T11169] bridge0: port 3(bond0) entered blocking state [ 321.600203][T11169] bridge0: port 3(bond0) entered disabled state [ 321.635020][T11169] device bond0 entered promiscuous mode [ 321.664077][T11169] device bond_slave_0 entered promiscuous mode [ 321.696436][T11169] device bond_slave_1 entered promiscuous mode [ 321.723067][T11169] bridge0: port 3(bond0) entered blocking state [ 321.729528][T11169] bridge0: port 3(bond0) entered forwarding state [ 321.802475][T11173] loop6: detected capacity change from 0 to 2048 [ 321.900952][T11173] NILFS (loop6): invalid segment: Magic number mismatch [ 321.941775][T11173] NILFS (loop6): trying rollback from an earlier position [ 321.990303][T11179] loop4: detected capacity change from 0 to 4096 [ 322.023341][T11173] NILFS (loop6): recovery complete [ 322.059790][T11184] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.120973][T11173] NILFS (loop6): unrecognized mount option "01777777777777777777777ÿÿÿñ¼ÊíXc¥vÌ:ýQºòœÞ" [ 322.216078][T11188] netlink: 'syz.7.2524': attribute type 10 has an invalid length. [ 322.270319][T11188] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2524'. [ 322.383094][T11188] device dummy0 entered promiscuous mode [ 322.426205][T11188] bridge0: port 4(dummy0) entered blocking state [ 322.432783][T11188] bridge0: port 4(dummy0) entered disabled state [ 322.493223][T11188] bridge0: port 4(dummy0) entered blocking state [ 322.499763][T11188] bridge0: port 4(dummy0) entered forwarding state [ 322.741255][T11204] binder: 11203:11204 ioctl c018620c 200000000380 returned -22 [ 322.928367][T11209] netlink: 'syz.6.2532': attribute type 1 has an invalid length. [ 322.943084][T11209] netlink: 'syz.6.2532': attribute type 3 has an invalid length. [ 322.951567][T11209] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2532'. [ 323.137946][T11220] loop6: detected capacity change from 0 to 256 [ 323.608852][T11233] loop7: detected capacity change from 0 to 64 [ 323.749831][T11235] loop8: detected capacity change from 0 to 2048 [ 323.789242][T11235] NILFS (loop8): invalid segment: Magic number mismatch [ 323.890463][T11235] NILFS (loop8): trying rollback from an earlier position [ 323.997242][T11235] NILFS (loop8): recovery complete [ 324.053385][T11243] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.101392][T11235] NILFS (loop8): unrecognized mount option "01777777777777777777777ÿÿÿñ¼ÊíXc¥vÌ:ýQºòœÞ" [ 324.116225][T11245] xt_nat: multiple ranges no longer supported [ 324.173239][T11247] netlink: 'syz.9.2546': attribute type 1 has an invalid length. [ 324.213671][T11247] netlink: 'syz.9.2546': attribute type 3 has an invalid length. [ 324.248494][T11247] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2546'. [ 324.374709][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 324.899092][T11220] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 324.940602][T11228] loop4: detected capacity change from 0 to 40427 [ 324.949636][T11220] FAT-fs (loop6): Filesystem has been set read-only [ 324.984359][T11228] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 324.984504][T11220] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 194) [ 324.991003][T11228] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 325.103278][T11228] F2FS-fs (loop4): Found nat_bits in checkpoint [ 325.298633][T11228] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 325.356448][T11228] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 325.480468][T11228] F2FS-fs (loop4): switch extent_cache option is not allowed [ 325.636391][ T6908] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 325.765846][T11254] loop7: detected capacity change from 0 to 32768 [ 325.795193][T11254] XFS: ikeep mount option is deprecated. [ 325.874693][T11254] XFS (loop7): Mounting V5 Filesystem [ 325.881140][ T6908] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 325.902841][ T6908] usb 7-1: config 0 has no interface number 0 [ 325.915734][T11284] loop8: detected capacity change from 0 to 4096 [ 325.956505][ T6908] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 326.061645][ T6908] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.113785][T11254] XFS (loop7): Ending clean mount [ 326.126042][T11284] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 326.141187][ T6908] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 326.152954][T11284] ntfs3: loop8: Failed to load $Extend. [ 326.167598][T11254] XFS (loop7): Quotacheck needed: Please wait. [ 326.191076][ T6908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.233702][ T6908] usb 7-1: Product: syz [ 326.240432][ T6908] usb 7-1: Manufacturer: syz [ 326.258129][ T6908] usb 7-1: SerialNumber: syz [ 326.281139][ T6908] usb 7-1: config 0 descriptor?? [ 326.299612][T11276] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 326.357747][T11254] XFS (loop7): Quotacheck: Done. [ 326.376881][ T6908] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 326.388080][ T6908] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 326.628770][T11303] netlink: 'syz.8.2562': attribute type 1 has an invalid length. [ 326.737383][ T7804] XFS (loop7): Unmounting Filesystem [ 326.739026][T11303] netlink: 'syz.8.2562': attribute type 3 has an invalid length. [ 326.790784][T11303] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2562'. [ 326.832731][ T4332] usb 7-1: USB disconnect, device number 13 [ 326.857344][ T4332] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 326.920119][ T4332] cyberjack 7-1:0.69: device disconnected [ 327.160106][T11319] ptrace attach of "./syz-executor exec"[10105] was attempted by "./syz-executor exec"[11319] [ 328.429683][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 328.484083][T11361] netlink: 'syz.4.2588': attribute type 1 has an invalid length. [ 329.494291][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 329.644193][ T4366] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 329.856263][ T4366] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 329.868997][ T4366] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 329.933531][ T4366] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 329.964718][ T4366] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 329.994073][ T4366] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 330.013633][ T4366] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.039145][ T4366] usb 10-1: config 0 descriptor?? [ 330.081772][T11411] loop7: detected capacity change from 0 to 4096 [ 330.091174][T11418] loop8: detected capacity change from 0 to 4096 [ 330.165546][T11418] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 330.219555][T11411] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 330.253162][ T4366] hdpvr 10-1:0.0: firmware version 0x12 dated [ 330.282834][T11411] ntfs3: loop7: Failed to load $Extend. [ 330.466706][ T4366] hdpvr 10-1:0.0: device init failed [ 330.472129][ T4366] hdpvr: probe of 10-1:0.0 failed with error -12 [ 330.516676][ T4366] usb 10-1: USB disconnect, device number 3 [ 330.669561][T11432] device veth3 entered promiscuous mode [ 331.011633][ T27] audit: type=1326 audit(1757620249.025:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.8.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 331.101994][ T27] audit: type=1326 audit(1757620249.055:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.8.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 331.189407][ T27] audit: type=1326 audit(1757620249.055:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.8.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 331.220255][T11448] loop7: detected capacity change from 0 to 128 [ 331.347804][T11448] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 331.396464][T11459] loop6: detected capacity change from 0 to 1024 [ 331.408341][ T27] audit: type=1326 audit(1757620249.055:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.8.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 331.431273][ T27] audit: type=1326 audit(1757620249.055:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.8.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 331.453836][T11448] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 331.537538][T11459] hfsplus: catalog name length corrupted [ 331.604370][T11448] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:106: comm syz.7.2624: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 331.748184][ T7804] EXT4-fs (loop7): unmounting filesystem. [ 332.110849][T11475] loop4: detected capacity change from 0 to 1024 [ 332.288236][T11475] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 332.356139][T11475] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz.4.2634: directory missing '.' [ 332.593357][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 332.800212][T11507] loop6: detected capacity change from 0 to 16 [ 332.863213][T11507] erofs: (device loop6): mounted with root inode @ nid 36. [ 333.212691][T11519] netlink: 'syz.6.2652': attribute type 2 has an invalid length. [ 333.494103][T11526] netlink: 45 bytes leftover after parsing attributes in process `syz.6.2654'. [ 334.157903][T11513] loop7: detected capacity change from 0 to 32768 [ 334.217256][T11515] loop4: detected capacity change from 0 to 32768 [ 334.248996][T11513] XFS (loop7): Mounting V5 Filesystem [ 334.374258][T11515] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 334.374258][T11515] [ 334.437173][T11513] XFS (loop7): Ending clean mount [ 334.441699][T11515] ERROR: (device loop4): remounting filesystem as read-only [ 334.474985][T11513] XFS (loop7): Quotacheck needed: Please wait. [ 334.479715][T11517] loop8: detected capacity change from 0 to 40427 [ 334.499536][T11515] ialloc: diAlloc returned -5! [ 334.554187][T11517] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 334.591735][T11517] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 334.616469][T11513] XFS (loop7): Quotacheck: Done. [ 334.644504][T11517] F2FS-fs (loop8): build fault injection attr: rate: 17008, type: 0x3ffff [ 334.653233][T11517] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x5 [ 334.680858][ T52] block nbd9: Attempted send on invalid socket [ 334.688082][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.732729][T11517] F2FS-fs (loop8): invalid crc value [ 334.859906][T11517] F2FS-fs (loop8): Found nat_bits in checkpoint [ 334.947432][ T7804] XFS (loop7): Unmounting Filesystem [ 335.253326][T11517] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 335.307072][T11517] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 335.486696][T11572] VFS: could not find a valid V7 on nullb0. [ 335.516607][ T8677] syz-executor: attempt to access beyond end of device [ 335.516607][ T8677] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 336.049640][T11585] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2665'. [ 336.396867][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2677'. [ 336.694547][T11605] netlink: 'syz.7.2681': attribute type 7 has an invalid length. [ 337.403814][T11633] loop6: detected capacity change from 0 to 512 [ 337.606608][T11633] EXT4-fs (loop6): 1 truncate cleaned up [ 337.685174][T11633] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 337.711107][T11646] netdevsim netdevsim7: Firmware load for './file0/../file0' refused, path contains '..' component [ 337.748188][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2696'. [ 337.773165][T11648] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2696'. [ 337.885303][ T5888] EXT4-fs (loop6): unmounting filesystem. [ 338.111104][T11661] autofs4:pid:11661:autofs_fill_super: called with bogus options [ 338.222218][T11667] VFS: could not find a valid V7 on nullb0. [ 338.358141][T11671] netlink: 'syz.9.2708': attribute type 2 has an invalid length. [ 338.633388][T11682] loop8: detected capacity change from 0 to 512 [ 338.680386][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2714'. [ 338.688624][T11682] EXT4-fs (loop8): 1 truncate cleaned up [ 338.714248][T11685] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2714'. [ 338.740485][T11682] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 338.885351][ T8677] EXT4-fs (loop8): unmounting filesystem. [ 339.053852][T11697] netlink: 'syz.8.2717': attribute type 7 has an invalid length. [ 339.055657][T11691] loop4: detected capacity change from 0 to 4096 [ 339.129619][T11691] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 339.232711][T11691] ntfs3: loop4: Failed to load $Extend. [ 339.553297][T11707] ALSA: mixer_oss: invalid OSS volume 'Ô¸{' [ 339.570250][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2722'. [ 339.826818][ T27] audit: type=1326 audit(1757620257.845:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.9.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f55b8eba9 code=0x7ffc0000 [ 339.866171][ T52] block nbd4: Attempted send on invalid socket [ 339.873219][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.889363][ T27] audit: type=1326 audit(1757620257.875:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.9.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f1f55b8eba9 code=0x7ffc0000 [ 339.915801][ T27] audit: type=1326 audit(1757620257.875:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.9.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f55b8eba9 code=0x7ffc0000 [ 339.940020][ T27] audit: type=1326 audit(1757620257.875:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.9.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f55b8eba9 code=0x7ffc0000 [ 340.165661][T11730] loop8: detected capacity change from 0 to 1024 [ 340.543447][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 340.796983][T11751] kAFS: No cell specified [ 341.042863][T11764] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 341.759894][T11781] loop9: detected capacity change from 0 to 4096 [ 341.813162][T11781] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 341.900614][T11790] loop7: detected capacity change from 0 to 512 [ 341.937579][T11781] ntfs3: loop9: failed to convert "c46c" to macturkish [ 341.980067][T11790] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 342.061979][T11797] loop8: detected capacity change from 0 to 256 [ 342.071522][T11790] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.111732][T11797] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 342.175395][T11797] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 342.228203][T11790] EXT4-fs error (device loop7): ext4_get_first_dir_block:3605: inode #12: comm syz.7.2760: directory missing '..' [ 342.254400][T11797] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 342.284358][ T27] audit: type=1800 audit(1757620260.295:71): pid=11797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2763" name="file1" dev="loop8" ino=1048682 res=0 errno=0 [ 342.348649][T11797] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 342.434399][T11797] syz.8.2763 (11797) used greatest stack depth: 20704 bytes left [ 342.516877][ T7804] EXT4-fs (loop7): unmounting filesystem. [ 342.587678][T11774] loop6: detected capacity change from 0 to 32768 [ 342.666863][T11776] loop4: detected capacity change from 0 to 32768 [ 342.708045][T11774] ERROR: (device loop6): dbAllocNext: Corrupt dmap page [ 342.708045][T11774] [ 342.770734][T11774] ERROR: (device loop6): remounting filesystem as read-only [ 342.774784][T11807] loop7: detected capacity change from 0 to 2048 [ 342.797018][T11807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.810035][T11776] XFS (loop4): Mounting V5 Filesystem [ 342.832878][T11774] ialloc: diAlloc returned -5! [ 342.904686][T11776] XFS (loop4): Ending clean mount [ 342.941293][T11776] XFS (loop4): Quotacheck needed: Please wait. [ 343.054522][T11776] XFS (loop4): Quotacheck: Done. [ 343.206783][ T4277] XFS (loop4): Unmounting Filesystem [ 343.318392][T11821] ALSA: mixer_oss: invalid OSS volume 'Ô¸{' [ 343.709418][T11832] netlink: 45 bytes leftover after parsing attributes in process `syz.8.2773'. [ 343.880146][T11837] loop9: detected capacity change from 0 to 256 [ 344.043333][T11841] netlink: 'syz.8.2778': attribute type 4 has an invalid length. [ 344.086094][T11841] netlink: 'syz.8.2778': attribute type 3 has an invalid length. [ 344.106276][T11841] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2778'. [ 344.313475][T11847] loop9: detected capacity change from 0 to 2048 [ 344.341159][T11847] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 344.403309][T11822] loop7: detected capacity change from 0 to 32768 [ 344.461618][T11854] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.553096][T11822] ERROR: (device loop7): dbAllocNext: Corrupt dmap page [ 344.553096][T11822] [ 344.581129][T11847] syz.9.2779: attempt to access beyond end of device [ 344.581129][T11847] loop9: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 344.634176][T11822] ERROR: (device loop7): remounting filesystem as read-only [ 344.647346][T11822] ialloc: diAlloc returned -5! [ 344.652479][T11847] NILFS (loop9): I/O error reading meta-data file (ino=6, block-offset=1) [ 345.096206][T11870] loop9: detected capacity change from 0 to 1024 [ 345.206813][T11870] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 345.252705][T11870] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #11: comm syz.9.2789: directory missing '.' [ 345.495717][T10105] EXT4-fs (loop9): unmounting filesystem. [ 345.823102][T11862] loop6: detected capacity change from 0 to 32768 [ 345.854902][T11862] XFS: ikeep mount option is deprecated. [ 345.911308][T11901] netlink: 'syz.9.2800': attribute type 8 has an invalid length. [ 346.023682][T11862] XFS (loop6): Mounting V5 Filesystem [ 346.199020][T11862] XFS (loop6): Ending clean mount [ 346.212894][T11862] XFS (loop6): Quotacheck needed: Please wait. [ 346.355811][ T3654] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 346.375935][T11862] XFS (loop6): Quotacheck: Done. [ 346.545812][ T3654] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 346.572018][ T3654] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.601187][ T3654] usb 10-1: config 0 descriptor?? [ 346.606506][ T5888] XFS (loop6): Unmounting Filesystem [ 346.838521][ T3654] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 346.857512][ T3654] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 347.048538][ T3654] [drm:udl_init] *ERROR* Selecting channel failed [ 347.136831][ T3654] [drm] Initialized udl 0.0.1 20120220 for 10-1:0.0 on minor 2 [ 347.194005][ T3654] [drm] Initialized udl on minor 2 [ 347.242322][ T3654] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.290774][ T3654] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 347.357339][ T3654] usb 10-1: USB disconnect, device number 4 [ 347.393188][ T6531] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 347.457013][ T6531] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 347.498151][ T6531] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 347.691288][T11958] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2819'. [ 347.717134][T11959] syz.7.2820 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 348.381357][ T27] audit: type=1326 audit(1757620266.395:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.6.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845b18eba9 code=0x7ffc0000 [ 348.479323][ T27] audit: type=1326 audit(1757620266.455:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.6.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f845b18eba9 code=0x7ffc0000 [ 348.614578][ T27] audit: type=1326 audit(1757620266.455:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.6.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845b18eba9 code=0x7ffc0000 [ 348.745196][ T27] audit: type=1326 audit(1757620266.455:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.6.2831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845b18eba9 code=0x7ffc0000 [ 349.402298][T12026] loop8: detected capacity change from 0 to 1024 [ 349.469937][T12026] hfsplus: Filesystem is marked locked, mounting read-only. [ 349.572124][T12026] hfsplus: filesystem is marked locked, leaving read-only. [ 350.217420][T12010] loop7: detected capacity change from 0 to 32768 [ 350.243385][T12053] xt_ecn: cannot match TCP bits for non-tcp packets [ 350.953560][T12067] loop8: detected capacity change from 0 to 4096 [ 351.056282][T12067] ntfs: (device loop8): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 351.144167][T12067] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 351.206136][T12067] ntfs: (device loop8): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 351.272168][T12067] ntfs: volume version 3.1. [ 351.299425][T12067] ntfs: (device loop8): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 351.756185][T12092] loop7: detected capacity change from 0 to 4096 [ 351.810917][T12092] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 351.830922][T12101] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 351.963559][T12092] ntfs3: loop7: failed to convert "c46c" to iso8859-9 [ 352.404069][ T6908] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 352.544215][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2889'. [ 352.628144][ T6908] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 352.654137][ T6908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.692839][ T6908] usb 9-1: Product: syz [ 352.713221][ T6908] usb 9-1: Manufacturer: syz [ 352.753672][ T6908] usb 9-1: SerialNumber: syz [ 353.208399][ T6908] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 353.260154][ T6908] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 353.300359][ T6908] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 353.342940][ T6908] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 353.410362][ T6908] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 353.455203][ T6908] lan78xx: probe of 9-1:1.0 failed with error -71 [ 353.503406][ T6908] usb 9-1: USB disconnect, device number 4 [ 354.014581][T12179] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 354.328545][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2918'. [ 354.650255][T12206] loop4: detected capacity change from 0 to 512 [ 354.657120][T12205] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2924'. [ 354.686674][T12206] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 354.806635][T12199] loop6: detected capacity change from 0 to 8192 [ 354.823754][T12206] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 354.868554][T12199] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 355.104042][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 355.304260][ T6531] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 355.364072][T12228] netlink: 276 bytes leftover after parsing attributes in process `syz.8.2932'. [ 355.373274][T12228] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2932'. [ 355.494130][ T6531] usb 8-1: Using ep0 maxpacket: 32 [ 355.507841][ T6531] usb 8-1: unable to get BOS descriptor or descriptor too short [ 355.557479][ T6531] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 355.617488][ T6531] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 355.660439][ T6531] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.697485][ T6531] usb 8-1: Product: syz [ 355.705070][ T6531] usb 8-1: Manufacturer: syz [ 355.714192][ T6531] usb 8-1: SerialNumber: syz [ 355.959963][ T6531] usb 8-1: Invalid number of CPorts: 0 [ 355.965679][ T6531] es2_ap_driver: probe of 8-1:7.0 failed with error -22 [ 356.062588][T12250] device geneve2 entered promiscuous mode [ 356.180652][ T6531] usb 8-1: USB disconnect, device number 6 [ 357.113357][T12289] loop4: detected capacity change from 0 to 512 [ 357.211281][T12289] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 357.294171][T12294] loop9: detected capacity change from 0 to 2048 [ 357.379441][T12294] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 357.424772][T12289] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.2958: iget: bad i_size value: 360287970189639680 [ 357.478336][T12294] EXT4-fs error (device loop9): ext4_find_extent:936: inode #2: comm syz.9.2960: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 357.503601][T12289] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2958: couldn't read orphan inode 15 (err -117) [ 357.550902][T12289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 357.560991][T12294] EXT4-fs (loop9): Remounting filesystem read-only [ 357.650320][T12289] EXT4-fs error (device loop4): ext4_get_first_dir_block:3591: inode #12: block 13: comm syz.4.2958: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 357.724220][T12289] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: comm syz.4.2958: directory missing '.' [ 357.795509][T10105] EXT4-fs (loop9): unmounting filesystem. [ 357.959869][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 358.045040][T12321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.222015][T12366] trusted_key: encrypted_key: master key parameter '' is invalid [ 359.415578][T12374] x_tables: ip_tables: osf match: only valid for protocol 6 [ 359.713036][T12378] loop7: detected capacity change from 0 to 4096 [ 359.771215][T12378] ntfs: (device loop7): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 359.827177][T12378] ntfs: (device loop7): ntfs_read_locked_inode(): $DATA attribute is missing. [ 359.843508][T12343] loop9: detected capacity change from 0 to 32768 [ 359.867214][T12389] loop4: detected capacity change from 0 to 64 [ 359.874098][T12378] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 359.983622][T12343] ERROR: (device loop9): diAllocAG: ipimap->i_size is wrong [ 359.983622][T12343] [ 359.988438][T12378] ntfs: (device loop7): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 360.029554][T12387] loop6: detected capacity change from 0 to 4096 [ 360.083441][T12387] ntfs: (device loop6): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 360.124523][T12343] ERROR: (device loop9): remounting filesystem as read-only [ 360.136998][T12387] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 360.138820][T12343] ialloc: diAlloc returned -5! [ 360.190327][T12378] ntfs: volume version 3.1. [ 360.198060][T12387] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 360.243025][T12391] loop8: detected capacity change from 0 to 4096 [ 360.274285][T12378] ntfs: (device loop7): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 360.283284][T12378] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 360.312463][T12387] ntfs: (device loop6): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 360.341424][T12391] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 360.503798][T12387] ntfs: volume version 3.1. [ 361.243165][T12411] sock: sock_timestamping_bind_phc: sock not bind to device [ 361.702369][T12426] loop6: detected capacity change from 0 to 256 [ 361.779767][T12426] FAT-fs (loop6): Directory bread(block 64) failed [ 361.810190][T12426] FAT-fs (loop6): Directory bread(block 65) failed [ 361.822012][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3011'. [ 361.869053][T12426] FAT-fs (loop6): Directory bread(block 66) failed [ 361.890407][T12398] loop9: detected capacity change from 0 to 32768 [ 361.898484][T12426] FAT-fs (loop6): Directory bread(block 67) failed [ 361.949262][T12426] FAT-fs (loop6): Directory bread(block 68) failed [ 361.959388][T12398] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop9 scanned by syz.9.2998 (12398) [ 362.005218][T12426] FAT-fs (loop6): Directory bread(block 69) failed [ 362.012030][T12426] FAT-fs (loop6): Directory bread(block 70) failed [ 362.039549][T12426] FAT-fs (loop6): Directory bread(block 71) failed [ 362.056657][T12426] FAT-fs (loop6): Directory bread(block 72) failed [ 362.084740][T12398] BTRFS info (device loop9): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 362.123090][T12426] FAT-fs (loop6): Directory bread(block 73) failed [ 362.147961][T12398] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 362.203632][T12398] BTRFS info (device loop9): enabling ssd optimizations [ 362.242972][T12398] BTRFS info (device loop9): not using ssd optimizations [ 362.271320][T12398] BTRFS info (device loop9): turning off barriers [ 362.294096][T12398] BTRFS info (device loop9): using free space tree [ 362.892887][T10105] BTRFS info (device loop9): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 363.423727][T12495] loop6: detected capacity change from 0 to 1024 [ 364.697663][T12542] netlink: 'syz.9.3047': attribute type 4 has an invalid length. [ 364.754123][T12542] netlink: 'syz.9.3047': attribute type 3 has an invalid length. [ 364.788257][T12542] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3047'. [ 364.926707][T12544] loop6: detected capacity change from 0 to 4096 [ 364.972460][T12544] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 365.127940][T12559] bond0: (slave bond0): Error: Device is in use and cannot be enslaved [ 365.167615][T12561] loop4: detected capacity change from 0 to 512 [ 365.362496][T12561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 365.418772][T12561] ext4 filesystem being mounted at /641/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.486446][T12561] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #12: comm syz.4.3054: directory missing '..' [ 365.752711][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 366.299648][T12600] netlink: 'syz.7.3071': attribute type 1 has an invalid length. [ 366.329880][T12600] netlink: 'syz.7.3071': attribute type 2 has an invalid length. [ 366.528438][T12606] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.574114][T12606] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.588669][T12606] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.659482][T12606] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 366.684550][T12606] device geneve2 entered promiscuous mode [ 367.169243][T12588] loop6: detected capacity change from 0 to 40427 [ 367.238252][T12588] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 367.265286][T12588] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 367.294751][T12588] F2FS-fs (loop6): build fault injection attr: rate: 17008, type: 0x3ffff [ 367.344044][T12588] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x5 [ 367.359592][T12625] loop8: detected capacity change from 0 to 256 [ 367.392323][T12588] F2FS-fs (loop6): invalid crc value [ 367.435633][T12588] F2FS-fs (loop6): Found nat_bits in checkpoint [ 367.656190][T12588] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 367.663389][T12588] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 367.721040][T12609] loop7: detected capacity change from 0 to 32768 [ 367.884746][T12609] XFS (loop7): Mounting V5 Filesystem [ 367.922271][ T5888] syz-executor: attempt to access beyond end of device [ 367.922271][ T5888] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 368.046294][ T4366] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 368.072398][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3086'. [ 368.093159][ T4366] XFS (loop7): Unmount and run xfs_repair [ 368.169598][ T4366] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 368.199964][ T4366] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 368.243847][ T4366] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 368.297290][ T4366] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 368.328677][ T4366] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 368.349650][T12652] nvme_fabrics: missing parameter 'transport=%s' [ 368.384120][T12652] nvme_fabrics: missing parameter 'nqn=%s' [ 368.404029][ T4366] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 368.413044][ T4366] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 368.449070][T12628] loop9: detected capacity change from 0 to 40427 [ 368.484691][ T4366] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ................ [ 368.503987][ T4366] 00000070: 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 368.514883][T12609] XFS (loop7): metadata I/O error in "xfs_read_agf+0x2a0/0x620" at daddr 0x1 len 1 error 74 [ 368.532777][T12628] F2FS-fs (loop9): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 368.547289][T12609] XFS (loop7): Error -117 reserving per-AG metadata reserve pool. [ 368.578106][T12628] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 368.596619][T12609] XFS (loop7): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1c6/0x1f0 (fs/xfs/xfs_fsops.c:587). Shutting down filesystem. [ 368.634788][T12628] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x6 [ 368.657238][T12609] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 368.672735][T12628] F2FS-fs (loop9): invalid crc value [ 368.708758][T12628] F2FS-fs (loop9): Found nat_bits in checkpoint [ 368.715290][T12609] XFS (loop7): Ending clean mount [ 368.721032][T12609] XFS (loop7): Unmounting Filesystem [ 368.968321][T12628] F2FS-fs (loop9): Start checkpoint disabled! [ 368.988029][T12628] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 369.017979][T12628] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 369.291493][T12673] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3094'. [ 369.490686][T12676] loop4: detected capacity change from 0 to 4096 [ 369.521758][T12676] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 369.822374][T12686] loop6: detected capacity change from 0 to 512 [ 369.930387][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3100'. [ 369.998144][T12686] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 370.079690][T12686] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.228429][T12686] EXT4-fs error (device loop6): ext4_get_first_dir_block:3605: inode #12: comm syz.6.3109: directory missing '..' [ 370.415076][ T5888] EXT4-fs (loop6): unmounting filesystem. [ 370.575892][T12716] loop7: detected capacity change from 0 to 64 [ 370.660498][T12708] loop4: detected capacity change from 0 to 4096 [ 370.724236][T12708] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 370.857673][T12708] ntfs3: loop4: failed to convert "c46c" to macturkish [ 371.636419][T12742] loop4: detected capacity change from 0 to 4096 [ 371.650784][T12742] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 371.650811][T12742] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 371.650837][T12742] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 371.650889][T12742] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 371.705825][T12742] ntfs: volume version 3.1. [ 371.758102][T12742] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 371.758186][T12742] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 372.285856][T12764] loop4: detected capacity change from 0 to 256 [ 372.739825][T12780] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3139'. [ 372.744581][T12778] loop8: detected capacity change from 0 to 1764 [ 372.955334][ T129] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 373.155222][ T129] usb 7-1: Using ep0 maxpacket: 32 [ 373.166631][ T129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 373.201862][ T129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 373.214647][T12796] netlink: 'syz.8.3147': attribute type 3 has an invalid length. [ 373.239101][ T129] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 373.265222][ T129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.288412][ T129] usb 7-1: Product: syz [ 373.292652][ T129] usb 7-1: Manufacturer: syz [ 373.318367][ T129] usb 7-1: SerialNumber: syz [ 373.333321][ T129] usb 7-1: config 0 descriptor?? [ 373.366750][ T129] usb 7-1: no audio or video endpoints found [ 373.622865][ T4345] usb 7-1: USB disconnect, device number 14 [ 373.903046][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 373.930059][T12818] loop4: detected capacity change from 0 to 1764 [ 373.936853][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 373.945101][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 373.954638][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 373.962123][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 373.971483][T12818] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 374.000281][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 374.017015][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 374.044074][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 374.051551][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 374.074059][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 374.081655][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 374.096469][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 374.114109][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 374.121625][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 374.129426][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 374.142004][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 374.154004][ T6536] hid-generic C990:0003:007F.0001: unknown main item tag 0x0 [ 374.197813][ T6536] hid-generic C990:0003:007F.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 374.203777][T12825] loop7: detected capacity change from 0 to 512 [ 374.442525][T12825] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 374.452512][T12827] loop4: detected capacity change from 0 to 8192 [ 374.523137][T12825] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.664556][T12825] EXT4-fs error (device loop7): ext4_empty_dir:3139: inode #12: comm syz.7.3162: Directory hole found for htree leaf block 0 [ 374.942367][T12836] fido_id[12836]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 374.955381][T12844] loop8: detected capacity change from 0 to 4096 [ 374.991399][ T7804] EXT4-fs (loop7): unmounting filesystem. [ 375.275862][T12844] ntfs3: loop8: ino=1e, "file1" attr_set_size [ 375.291319][T12844] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 375.595402][T12862] loop6: detected capacity change from 0 to 2048 [ 375.644925][T12862] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.472690][T12856] loop4: detected capacity change from 0 to 32768 [ 376.526308][T12856] XFS: ikeep mount option is deprecated. [ 376.534506][ T6536] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 376.679693][T12856] XFS (loop4): Mounting V5 Filesystem [ 376.735783][ T6536] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 376.770207][ T6536] usb 7-1: config 220 has an invalid interface descriptor of length 5, skipping [ 376.809723][T12882] loop8: detected capacity change from 0 to 32768 [ 376.827625][T12882] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9 [ 376.855879][ T6536] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 376.911683][ T6536] usb 7-1: config 220 has no interface number 2 [ 376.962820][ T6536] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 377.003796][ T6536] usb 7-1: config 220 interface 0 has no altsetting 0 [ 377.024217][ T6536] usb 7-1: config 220 interface 76 has no altsetting 0 [ 377.031192][ T6536] usb 7-1: config 220 interface 1 has no altsetting 0 [ 377.073192][T12856] XFS (loop4): Ending clean mount [ 377.075669][ T6536] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 377.088612][T12908] loop7: detected capacity change from 0 to 2048 [ 377.094017][ T6536] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.120045][ T6536] usb 7-1: Product: syz [ 377.125028][T12856] XFS (loop4): Quotacheck needed: Please wait. [ 377.146075][ T6536] usb 7-1: Manufacturer: syz [ 377.150745][ T6536] usb 7-1: SerialNumber: syz [ 377.160816][T12908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.312077][T12856] XFS (loop4): Quotacheck: Done. [ 377.360099][ T6521] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9 [ 377.445221][ T6536] usb 7-1: selecting invalid altsetting 0 [ 377.452166][ T6536] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 377.510438][ T6536] usb 7-1: No valid video chain found. [ 377.605252][ T6536] usb 7-1: selecting invalid altsetting 0 [ 377.611086][ T6536] usbtest: probe of 7-1:220.1 failed with error -22 [ 377.664485][ T6536] usb 7-1: USB disconnect, device number 15 [ 377.690301][ T4277] XFS (loop4): Unmounting Filesystem [ 377.703961][T12922] xt_bpf: check failed: parse error [ 378.531608][T12940] netlink: 'syz.9.3208': attribute type 5 has an invalid length. [ 378.560864][T12940] device ip6erspan0 entered promiscuous mode [ 378.617964][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.624834][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.836517][T12946] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3211'. [ 378.882712][T12946] netlink: 'syz.9.3211': attribute type 1 has an invalid length. [ 378.885708][T12925] loop7: detected capacity change from 0 to 32768 [ 378.922327][T12925] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 scanned by syz.7.3201 (12925) [ 379.000817][T12925] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 379.031630][T12925] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 379.059126][T12925] BTRFS info (device loop7): using free space tree [ 379.221937][T12928] loop8: detected capacity change from 0 to 32768 [ 379.344535][T12925] BTRFS info (device loop7): enabling ssd optimizations [ 379.358846][T12928] XFS (loop8): Mounting V5 Filesystem [ 379.468481][T12985] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.3217'. [ 379.520477][ T7804] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 379.545255][T12985] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 379.589896][T12928] XFS (loop8): Ending clean mount [ 379.623072][T12928] XFS (loop8): Quotacheck needed: Please wait. [ 380.099719][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 380.195862][T13000] loop9: detected capacity change from 0 to 1024 [ 380.291903][T12928] XFS (loop8): Quotacheck: Done. [ 380.531547][ T8677] XFS (loop8): Unmounting Filesystem [ 380.537880][ T33] hfsplus: b-tree write err: -5, ino 4 [ 380.953606][T13022] loop9: detected capacity change from 0 to 256 [ 380.997830][T13022] FAT-fs (loop9): Directory bread(block 64) failed [ 381.031647][T13022] FAT-fs (loop9): Directory bread(block 65) failed [ 381.055178][T13022] FAT-fs (loop9): Directory bread(block 66) failed [ 381.061791][T13022] FAT-fs (loop9): Directory bread(block 67) failed [ 381.096884][T13022] FAT-fs (loop9): Directory bread(block 68) failed [ 381.102759][T13020] loop7: detected capacity change from 0 to 4096 [ 381.103476][T13022] FAT-fs (loop9): Directory bread(block 69) failed [ 381.151258][T13020] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 381.160642][T13022] FAT-fs (loop9): Directory bread(block 70) failed [ 381.184142][T13022] FAT-fs (loop9): Directory bread(block 71) failed [ 381.190845][T13022] FAT-fs (loop9): Directory bread(block 72) failed [ 381.214054][T13022] FAT-fs (loop9): Directory bread(block 73) failed [ 381.467213][T13007] loop4: detected capacity change from 0 to 32768 [ 381.637388][T13007] XFS (loop4): Mounting V5 Filesystem [ 381.854267][T13046] netlink: 'syz.9.3244': attribute type 8 has an invalid length. [ 381.897179][T13007] XFS (loop4): Ending clean mount [ 382.081242][ T4277] XFS (loop4): Unmounting Filesystem [ 382.900370][T13074] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 382.913309][T13073] loop9: detected capacity change from 0 to 512 [ 383.006275][T13073] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 383.024029][T13073] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 383.059912][T13073] EXT4-fs (loop9): warning: maximal mount count reached, running e2fsck is recommended [ 383.130035][T13073] EXT4-fs error (device loop9): ext4_orphan_get:1400: comm syz.9.3257: inode #15: comm syz.9.3257: iget: illegal inode # [ 383.185126][T13085] loop4: detected capacity change from 0 to 2048 [ 383.198821][T13073] EXT4-fs (loop9): Remounting filesystem read-only [ 383.214066][T13073] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.3257: couldn't read orphan inode 15 (err -117) [ 383.230471][T13073] EXT4-fs (loop9): Remounting filesystem read-only [ 383.238346][T13073] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 383.262400][T13073] EXT4-fs error (device loop9): ext4_lookup:1858: comm syz.9.3257: inode #15: comm syz.9.3257: iget: illegal inode # [ 383.280614][T13073] EXT4-fs (loop9): Remounting filesystem read-only [ 383.288962][T13089] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.358076][T13085] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 383.376309][T10105] EXT4-fs (loop9): unmounting filesystem. [ 383.393071][ T5904] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 383.481866][T13085] Remounting filesystem read-only [ 383.524865][T13085] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 383.572480][T13085] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 383.581104][T13085] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 383.581364][T13085] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 383.581427][T13085] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 383.581524][T13085] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 383.581659][T13085] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 383.582741][ T5904] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.582768][ T5904] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 383.582813][ T5904] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 383.582839][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.598616][ T5904] usb 9-1: config 0 descriptor?? [ 383.605200][T13085] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 383.605265][T13085] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 383.605431][ T27] audit: type=1800 audit(1757620301.625:76): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3263" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 383.830677][T13085] syz.4.3263 (13085) used greatest stack depth: 19360 bytes left [ 384.109722][T13100] loop9: detected capacity change from 0 to 4096 [ 384.146919][ T5904] Bluetooth: Can't get state to change to load configuration err [ 384.146939][ T5904] Bluetooth: Loading sysconfig file failed [ 384.146962][ T5904] ath3k: probe of 9-1:0.0 failed with error -16 [ 384.153648][ T5904] usb 9-1: USB disconnect, device number 5 [ 384.211036][T13100] ntfs: volume version 3.1. [ 384.738630][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3275'. [ 384.836607][T13118] loop6: detected capacity change from 0 to 256 [ 384.902047][T13118] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 384.923631][T13118] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 385.065376][T13118] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 385.131653][T13124] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3280'. [ 385.493842][T13134] loop8: detected capacity change from 0 to 64 [ 385.569176][T13136] netlink: 'syz.4.3286': attribute type 3 has an invalid length. [ 385.677779][T13113] loop9: detected capacity change from 0 to 32768 [ 385.697840][T13140] netlink: 'syz.6.3288': attribute type 7 has an invalid length. [ 385.706263][T13113] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 9 [ 385.754174][T13140] netlink: 'syz.6.3288': attribute type 8 has an invalid length. [ 386.451384][T13163] netlink: 'syz.8.3299': attribute type 6 has an invalid length. [ 386.960116][T13152] loop4: detected capacity change from 0 to 32768 [ 387.112770][T13152] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 387.177468][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3309'. [ 387.212753][T13188] loop9: detected capacity change from 0 to 2048 [ 387.250344][T13152] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 387.269472][T13188] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 387.289655][T13152] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 387.335506][T13152] OCFS2: File system is now read-only. [ 387.374539][T13152] (syz.4.3294,13152,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 387.404211][T13188] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 387.438938][T13152] (syz.4.3294,13152,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 387.479472][T13152] (syz.4.3294,13152,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 387.489075][T13188] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 387.519957][T13188] UDF-fs: Scanning with blocksize 512 failed [ 387.553413][T13188] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.561143][T13152] (syz.4.3294,13152,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 387.594301][T13152] (syz.4.3294,13152,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 387.625689][T13152] (syz.4.3294,13152,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 387.664643][T13152] (syz.4.3294,13152,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 387.672546][T13152] (syz.4.3294,13152,1):ocfs2_mknod:385 ERROR: status = -30 [ 387.751788][T13152] (syz.4.3294,13152,1):ocfs2_mknod:502 ERROR: status = -30 [ 387.772613][T13201] loop7: detected capacity change from 0 to 256 [ 387.792372][T13152] (syz.4.3294,13152,1):ocfs2_create:676 ERROR: status = -30 [ 387.863256][T13201] FAT-fs (loop7): Directory bread(block 64) failed [ 387.893765][T13201] FAT-fs (loop7): Directory bread(block 65) failed [ 387.940087][T13201] FAT-fs (loop7): Directory bread(block 66) failed [ 387.962984][ T4277] ocfs2: Unmounting device (7,4) on (node local) [ 387.972971][T13201] FAT-fs (loop7): Directory bread(block 67) failed [ 387.984244][T13201] FAT-fs (loop7): Directory bread(block 68) failed [ 387.990847][T13201] FAT-fs (loop7): Directory bread(block 69) failed [ 388.009677][T13205] loop6: detected capacity change from 0 to 4096 [ 388.037804][T13201] FAT-fs (loop7): Directory bread(block 70) failed [ 388.071448][T13205] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 388.098321][T13201] FAT-fs (loop7): Directory bread(block 71) failed [ 388.144533][T13201] FAT-fs (loop7): Directory bread(block 72) failed [ 388.145347][T13204] loop8: detected capacity change from 0 to 8192 [ 388.188334][T13201] FAT-fs (loop7): Directory bread(block 73) failed [ 388.227598][T13205] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 388.251038][T13205] ntfs3: loop6: ino=1f, "file2" failed to open parent directory r=5 to update [ 388.301892][T13204] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 388.425367][T13204] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 388.464716][T13204] REISERFS (device loop8): using ordered data mode [ 388.471302][T13204] reiserfs: using flush barriers [ 388.552590][T13204] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 388.571783][ T11] ntfs3: loop6: ino=1f, failed to open parent directory r=5 to update [ 388.665665][T13204] REISERFS (device loop8): checking transaction log (loop8) [ 388.710554][T13204] REISERFS (device loop8): Using r5 hash to sort names [ 388.730679][T13204] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 388.995984][T13218] loop4: detected capacity change from 0 to 128 [ 389.013209][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3324'. [ 389.050275][T13218] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 389.071075][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3324'. [ 389.124898][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3324'. [ 389.228820][T13220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.368365][T13226] loop6: detected capacity change from 0 to 16 [ 389.429123][T13226] erofs: (device loop6): mounted with root inode @ nid 36. [ 389.527636][T13226] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 389.565140][T13226] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 389.611240][T13226] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 389.804033][ T5904] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 389.850186][T13236] loop4: detected capacity change from 0 to 4096 [ 389.885473][T13236] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 389.993976][ T5904] usb 8-1: Using ep0 maxpacket: 16 [ 390.000962][ T5904] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 390.049172][T13236] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 390.056586][ T5904] usb 8-1: config 0 has no interface number 0 [ 390.062736][ T5904] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 390.077209][ T5904] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 390.088619][T13236] ntfs3: loop4: ino=1f, "file2" failed to open parent directory r=5 to update [ 390.127613][ T5904] usb 8-1: config 0 interface 41 has no altsetting 0 [ 390.166960][ T5904] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 390.214130][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.222208][ T5904] usb 8-1: Product: syz [ 390.249024][ T2959] ntfs3: loop4: ino=1f, failed to open parent directory r=5 to update [ 390.254229][ T5904] usb 8-1: Manufacturer: syz [ 390.261864][ T5904] usb 8-1: SerialNumber: syz [ 390.286008][ T5904] usb 8-1: config 0 descriptor?? [ 390.304491][T13230] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 390.311811][T13230] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 390.577843][ T5904] CoreChips: probe of 8-1:0.41 failed with error -71 [ 390.607685][ T5904] usb 8-1: USB disconnect, device number 7 [ 390.622376][ T6521] udevd[6521]: setting mode of /dev/bus/usb/008/007 to 020664 failed: No such file or directory [ 390.658030][ T6521] udevd[6521]: setting owner of /dev/bus/usb/008/007 to uid=0, gid=0 failed: No such file or directory [ 390.689991][ T6528] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 390.720057][T13257] loop8: detected capacity change from 0 to 512 [ 390.785598][T13257] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3342: bg 0: block 248: padding at end of block bitmap is not set [ 390.800201][ T6529] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 390.823022][T13257] Quota error (device loop8): write_blk: dquota write failed [ 390.841465][T13257] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 390.852458][T13257] EXT4-fs error (device loop8): ext4_acquire_dquot:6816: comm syz.8.3342: Failed to acquire dquot type 1 [ 390.868135][T13257] EXT4-fs (loop8): 1 truncate cleaned up [ 390.873843][T13257] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 390.883087][T13257] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.893505][ T6528] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 390.893540][ T6528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.893561][ T6528] usb 5-1: Product: syz [ 390.893575][ T6528] usb 5-1: Manufacturer: syz [ 390.893591][ T6528] usb 5-1: SerialNumber: syz [ 390.925790][ T6528] usb 5-1: config 0 descriptor?? [ 390.942047][ T6528] hub 5-1:0.0: bad descriptor, ignoring hub [ 390.961270][ T6528] hub: probe of 5-1:0.0 failed with error -5 [ 390.982165][ T6528] f81232 5-1:0.0: f81534a converter detected [ 390.997343][T13245] loop6: detected capacity change from 0 to 32768 [ 391.004630][ T6529] usb 10-1: Using ep0 maxpacket: 32 [ 391.007386][ T8677] EXT4-fs (loop8): unmounting filesystem. [ 391.014545][ T6529] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 391.031844][ T75] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-5 [ 391.043565][ T75] EXT4-fs error (device loop8): ext4_release_dquot:6852: comm kworker/u4:4: Failed to release dquot type 1 [ 391.060099][ T6529] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.076584][T13245] [ 391.076584][T13245] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.076584][T13245] [ 391.128292][T13245] ERROR: (device loop6): ea_get: invalid ea.flag [ 391.128292][T13245] [ 391.143862][ T6529] usb 10-1: config 0 descriptor?? [ 391.151227][ T6528] usb 5-1: f81534a converter now attached to ttyUSB0 [ 391.164578][ T6529] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 391.226970][T13245] ERROR: (device loop6): remounting filesystem as read-only [ 391.474945][ T5908] usb 5-1: USB disconnect, device number 12 [ 391.492802][ T5908] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 391.527194][ T5908] f81232 5-1:0.0: device disconnected [ 391.567872][ T6529] gspca_nw80x: reg_r err -71 [ 391.577504][ T6529] nw80x: probe of 10-1:0.0 failed with error -71 [ 391.588766][T13264] loop7: detected capacity change from 0 to 4096 [ 391.619335][ T6529] usb 10-1: USB disconnect, device number 5 [ 391.633290][T13264] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 391.739996][T13264] ntfs: volume version 3.1. [ 392.074678][T13279] comedi comedi0: dmm32at: a I/O base address must be specified [ 392.263013][T13284] xt_l2tp: missing protocol rule (udp|l2tpip) [ 392.644889][T13298] netlink: 'syz.9.3360': attribute type 9 has an invalid length. [ 393.460598][T13333] loop4: detected capacity change from 0 to 256 [ 393.571013][T13333] FAT-fs (loop4): Directory bread(block 64) failed [ 393.609840][T13333] FAT-fs (loop4): Directory bread(block 65) failed [ 393.636852][T13333] FAT-fs (loop4): Directory bread(block 66) failed [ 393.643453][T13333] FAT-fs (loop4): Directory bread(block 67) failed [ 393.688983][T13333] FAT-fs (loop4): Directory bread(block 68) failed [ 393.724070][T13333] FAT-fs (loop4): Directory bread(block 69) failed [ 393.731250][T13333] FAT-fs (loop4): Directory bread(block 70) failed [ 393.774359][T13333] FAT-fs (loop4): Directory bread(block 71) failed [ 393.781064][T13333] FAT-fs (loop4): Directory bread(block 72) failed [ 393.836219][T13333] FAT-fs (loop4): Directory bread(block 73) failed [ 394.027028][T13347] loop6: detected capacity change from 0 to 1024 [ 394.158483][T13347] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 394.203958][T13347] hfsplus: xattr searching failed [ 394.493039][T13354] loop8: detected capacity change from 0 to 4096 [ 394.519795][T13360] netlink: 'syz.6.3390': attribute type 10 has an invalid length. [ 394.557912][T13360] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3390'. [ 394.690076][T13336] loop9: detected capacity change from 0 to 32768 [ 394.700363][T13360] team0: Port device geneve0 added [ 394.850707][T13336] ea_get: invalid extended attribute [ 394.880204][T13336] ffff88804a65f230: 04 00 00 00 .... [ 395.350780][T13378] loop4: detected capacity change from 0 to 2048 [ 395.358710][T13370] loop6: detected capacity change from 0 to 4096 [ 395.430178][T13378] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 395.474045][T13378] UDF-fs: Scanning with blocksize 512 failed [ 395.545503][T13378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.742777][T13382] loop9: detected capacity change from 0 to 2368 [ 395.898186][T13391] loop8: detected capacity change from 0 to 256 [ 395.997182][T13391] FAT-fs (loop8): Directory bread(block 64) failed [ 396.006305][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3409'. [ 396.040274][T13391] FAT-fs (loop8): Directory bread(block 65) failed [ 396.064161][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3409'. [ 396.087038][T13391] FAT-fs (loop8): Directory bread(block 66) failed [ 396.093644][T13391] FAT-fs (loop8): Directory bread(block 67) failed [ 396.151515][T13391] FAT-fs (loop8): Directory bread(block 68) failed [ 396.204276][T13391] FAT-fs (loop8): Directory bread(block 69) failed [ 396.210970][T13391] FAT-fs (loop8): Directory bread(block 70) failed [ 396.259791][T13391] FAT-fs (loop8): Directory bread(block 71) failed [ 396.272324][T13391] FAT-fs (loop8): Directory bread(block 72) failed [ 396.302835][T13391] FAT-fs (loop8): Directory bread(block 73) failed [ 396.504122][ T6529] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 396.697794][ T6529] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 396.716313][ T6529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.755830][ T6529] usb 5-1: config 0 descriptor?? [ 396.929498][T13421] loop7: detected capacity change from 0 to 128 [ 396.960272][T13421] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 397.069665][T13421] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 397.185640][ T6529] [drm:udl_init] *ERROR* Selecting channel failed [ 397.228212][ T6529] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 397.256235][ T6529] [drm] Initialized udl on minor 2 [ 397.285808][ T6529] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 397.324199][ T6529] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 397.344213][ T6529] usb 5-1: USB disconnect, device number 13 [ 397.350664][ T6536] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 397.364346][ T6536] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 397.396406][ T6536] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 397.918510][T13448] netlink: 'syz.8.3434': attribute type 4 has an invalid length. [ 398.341696][T13462] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3442'. [ 398.362935][T13466] loop8: detected capacity change from 0 to 256 [ 398.442244][T13466] FAT-fs (loop8): Directory bread(block 64) failed [ 398.464239][T13466] FAT-fs (loop8): Directory bread(block 65) failed [ 398.485726][T13466] FAT-fs (loop8): Directory bread(block 66) failed [ 398.547452][T13466] FAT-fs (loop8): Directory bread(block 67) failed [ 398.579381][T13466] FAT-fs (loop8): Directory bread(block 68) failed [ 398.598313][T13466] FAT-fs (loop8): Directory bread(block 69) failed [ 398.634565][T13466] FAT-fs (loop8): Directory bread(block 70) failed [ 398.641179][T13466] FAT-fs (loop8): Directory bread(block 71) failed [ 398.683628][T13466] FAT-fs (loop8): Directory bread(block 72) failed [ 398.709752][T13466] FAT-fs (loop8): Directory bread(block 73) failed [ 398.963522][T13450] loop4: detected capacity change from 0 to 32768 [ 399.055927][T13450] [ 399.055927][T13450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 399.055927][T13450] [ 399.119575][T13450] [ 399.119575][T13450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 399.119575][T13450] [ 399.183814][T13450] [ 399.183814][T13450] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 399.183814][T13450] [ 399.275754][ T108] [ 399.275754][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 399.275754][ T108] [ 399.405595][ T4277] [ 399.405595][ T4277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 399.405595][ T4277] [ 399.460803][ T4277] [ 399.460803][ T4277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 399.460803][ T4277] [ 399.497418][T13494] netlink: 'syz.7.3458': attribute type 10 has an invalid length. [ 399.538289][T13494] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3458'. [ 399.685945][T13494] team0: Port device geneve0 added [ 399.818037][T13504] mmap: syz.6.3463 (13504): VmData 37470208 exceed data ulimit 1023. Update limits or use boot option ignore_rlimit_data. [ 400.115797][T13514] syz.6.3468 (13514): /proc/13513/oom_adj is deprecated, please use /proc/13513/oom_score_adj instead. [ 400.842398][T13544] loop7: detected capacity change from 0 to 2048 [ 400.909931][T13544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.105854][T13590] netlink: 'syz.8.3503': attribute type 1 has an invalid length. [ 403.326740][T13637] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3528'. [ 403.453860][T13643] xt_bpf: check failed: parse error [ 403.477188][T13645] xt_hashlimit: size too large, truncated to 1048576 [ 403.504266][T13645] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 403.799441][ T27] audit: type=1326 audit(1757620321.815:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40feb8eba9 code=0x7ffc0000 [ 403.884058][ T27] audit: type=1326 audit(1757620321.835:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40feb8eba9 code=0x7ffc0000 [ 403.984016][ T27] audit: type=1326 audit(1757620321.865:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f40feb8eba9 code=0x7ffc0000 [ 404.063965][ T27] audit: type=1326 audit(1757620321.865:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40feb8eba9 code=0x7ffc0000 [ 404.164112][ T27] audit: type=1326 audit(1757620321.865:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.3538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40feb8eba9 code=0x7ffc0000 [ 404.286947][T13672] loop6: detected capacity change from 0 to 512 [ 404.773397][T13691] tc_dump_action: action bad kind [ 404.793855][T13672] EXT4-fs (loop6): Test dummy encryption mode enabled [ 404.831966][T13672] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 404.856525][T13695] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3555'. [ 404.865819][T13672] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 404.957699][T13672] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.3544: corrupted in-inode xattr [ 405.018547][T13672] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 405.064612][T13672] EXT4-fs (loop6): 1 orphan inode deleted [ 405.070473][T13672] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 405.381993][T13717] loop8: detected capacity change from 0 to 256 [ 405.401963][ T5888] EXT4-fs (loop6): unmounting filesystem. [ 405.498071][T13717] FAT-fs (loop8): Directory bread(block 64) failed [ 405.528943][T13717] FAT-fs (loop8): Directory bread(block 65) failed [ 405.555088][T13717] FAT-fs (loop8): Directory bread(block 66) failed [ 405.561787][T13717] FAT-fs (loop8): Directory bread(block 67) failed [ 405.620956][T13717] FAT-fs (loop8): Directory bread(block 68) failed [ 405.666365][T13717] FAT-fs (loop8): Directory bread(block 69) failed [ 405.712122][T13717] FAT-fs (loop8): Directory bread(block 70) failed [ 405.730690][T13717] FAT-fs (loop8): Directory bread(block 71) failed [ 405.760254][T13717] FAT-fs (loop8): Directory bread(block 72) failed [ 405.770286][T13717] FAT-fs (loop8): Directory bread(block 73) failed [ 405.860569][T13731] loop6: detected capacity change from 0 to 512 [ 405.882083][T13731] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 405.959289][T13731] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 406.064059][T13731] System zones: 0-2, 18-18, 34-34 [ 406.075434][T13731] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 406.118615][T13731] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.202593][T13741] netlink: 'syz.8.3575': attribute type 10 has an invalid length. [ 406.294086][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 406.296771][T13741] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3575'. [ 406.324481][T13741] bridge0: port 4(ipvlan1) entered blocking state [ 406.342905][ T27] audit: type=1326 audit(1757620324.355:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40feb8eba9 code=0x7ffc0000 [ 406.381174][T13741] bridge0: port 4(ipvlan1) entered disabled state [ 406.421176][T13741] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 406.445960][ T27] audit: type=1326 audit(1757620324.385:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40feb8eba9 code=0x7ffc0000 [ 406.516681][ T5888] EXT4-fs (loop6): unmounting filesystem. [ 406.642772][ T27] audit: type=1326 audit(1757620324.405:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f40feb8eba9 code=0x7ffc0000 [ 406.738062][T13733] loop9: detected capacity change from 0 to 32768 [ 406.744072][ T27] audit: type=1326 audit(1757620324.435:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40feb8eba9 code=0x7ffc0000 [ 406.806126][T13733] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 9 [ 406.864240][ T27] audit: type=1326 audit(1757620324.505:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13742 comm="syz.4.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40feb8eba9 code=0x7ffc0000 [ 407.308717][ T7191] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 9 [ 407.467076][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3591'. [ 407.662716][T13780] loop6: detected capacity change from 0 to 128 [ 407.711159][T13780] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 407.750967][T13780] ext4 filesystem being mounted at /594/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 407.856118][T13780] EXT4-fs warning (device loop6): verify_group_input:151: Cannot add at group 32775 (only 1 groups) [ 408.074868][ T5888] EXT4-fs (loop6): unmounting filesystem. [ 408.790985][T13827] loop4: detected capacity change from 0 to 128 [ 409.096426][T13833] loop8: detected capacity change from 0 to 1024 [ 409.137890][T13833] EXT4-fs: Ignoring removed orlov option [ 409.167538][T13833] EXT4-fs (loop8): Test dummy encryption mode enabled [ 409.250199][T13833] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 409.326267][T13845] loop7: detected capacity change from 0 to 512 [ 409.441386][T13845] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 409.535818][T13845] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 409.552654][ T8677] EXT4-fs (loop8): unmounting filesystem. [ 409.589179][ T7804] EXT4-fs (loop7): unmounting filesystem. [ 409.841274][T13861] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3627'. [ 409.848988][T13860] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3628'. [ 410.091019][T13868] xt_policy: output policy not valid in PREROUTING and INPUT [ 410.138226][T13871] netlink: 'syz.6.3633': attribute type 13 has an invalid length. [ 410.942779][T13901] qrtr: Invalid version 195 [ 411.169492][T13908] dlm: non-version read from control device 0 [ 411.427750][T13918] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 411.972267][T13939] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in; [ 411.972267][T13939] program syz.8.3665 not setting count and/or reply_len properly [ 412.514336][ T6529] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 412.551562][T13962] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3676'. [ 412.590218][T13962] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3676'. [ 412.710548][ T6529] usb 9-1: Using ep0 maxpacket: 8 [ 412.717646][ T6529] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 412.744659][ T6529] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.763995][ T6529] usb 9-1: config 0 has no interface number 0 [ 412.770574][ T6529] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 412.799524][T13967] loop4: detected capacity change from 0 to 1764 [ 412.817445][ T6529] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 412.846715][T13969] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3680'. [ 412.862189][ T6529] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.914788][T13967] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 412.923254][T13971] syz.7.3679 uses old SIOCAX25GETINFO [ 412.927372][T13973] loop6: detected capacity change from 0 to 512 [ 412.930232][ T6529] usb 9-1: config 0 interface 52 has no altsetting 0 [ 412.950854][ T6529] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 412.991034][ T6529] usb 9-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 413.049963][ T6529] usb 9-1: Product: syz [ 413.083598][ T6529] usb 9-1: Manufacturer: syz [ 413.087449][T13975] loop9: detected capacity change from 0 to 47 [ 413.089652][ T6529] usb 9-1: SerialNumber: syz [ 413.132562][ T6529] usb 9-1: config 0 descriptor?? [ 413.326564][T13979] ceph: Path missing in source [ 413.612632][ T6529] usb 9-1: USB disconnect, device number 6 [ 413.807174][T13992] loop9: detected capacity change from 0 to 512 [ 413.842851][T13992] EXT4-fs (loop9): Test dummy encryption mode enabled [ 413.867274][T13992] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 413.884137][T13996] netlink: 'syz.6.3693': attribute type 5 has an invalid length. [ 413.957507][T13992] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.3690: corrupted in-inode xattr [ 413.976428][T13992] EXT4-fs (loop9): 1 orphan inode deleted [ 413.983270][T13992] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 414.069907][T14001] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.240651][T10105] EXT4-fs (loop9): unmounting filesystem. [ 414.549031][T14017] netlink: 'syz.8.3703': attribute type 3 has an invalid length. [ 414.723421][T14021] loop9: detected capacity change from 0 to 1024 [ 414.756134][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3707'. [ 414.793360][T14026] bridge0: port 3(dummy0) entered disabled state [ 414.834388][T14026] device bridge_slave_1 left promiscuous mode [ 414.854916][T14026] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.891652][T14026] device bridge_slave_0 left promiscuous mode [ 414.906723][T14026] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.952819][ T11] hfsplus: b-tree write err: -5, ino 4 [ 415.084103][T14031] netlink: 'syz.4.3709': attribute type 1 has an invalid length. [ 415.225962][T14037] netlink: 193 bytes leftover after parsing attributes in process `syz.7.3711'. [ 415.382222][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3715'. [ 415.415489][T14043] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3715'. [ 415.444143][T14043] tc_dump_action: action bad kind [ 415.521895][T14049] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3717'. [ 415.757691][T14057] loop6: detected capacity change from 0 to 256 [ 415.828765][T14057] FAT-fs (loop6): Directory bread(block 64) failed [ 415.847744][T14057] FAT-fs (loop6): Directory bread(block 65) failed [ 415.872076][T14057] FAT-fs (loop6): Directory bread(block 66) failed [ 415.889099][T14057] FAT-fs (loop6): Directory bread(block 67) failed [ 415.903313][T14062] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 415.951681][T14057] FAT-fs (loop6): Directory bread(block 68) failed [ 415.971992][T14057] FAT-fs (loop6): Directory bread(block 69) failed [ 416.001359][T14057] FAT-fs (loop6): Directory bread(block 70) failed [ 416.029405][T14064] loop8: detected capacity change from 0 to 256 [ 416.041403][T14057] FAT-fs (loop6): Directory bread(block 71) failed [ 416.049857][T14057] FAT-fs (loop6): Directory bread(block 72) failed [ 416.070049][T14064] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 416.091618][T14057] FAT-fs (loop6): Directory bread(block 73) failed [ 416.298175][T14069] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 416.337660][T14069] overlayfs: conflicting options: userxattr,redirect_dir=off [ 416.688980][ T27] audit: type=1326 audit(1757620334.705:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 416.759496][T14079] kAFS: unable to lookup cell '/' [ 416.784033][ T27] audit: type=1326 audit(1757620334.745:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 416.848995][ T27] audit: type=1326 audit(1757620334.745:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 416.954033][ T27] audit: type=1326 audit(1757620334.755:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.8.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 417.074029][ T4311] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 417.090355][T14087] loop6: detected capacity change from 0 to 256 [ 417.189489][T14087] FAT-fs (loop6): Directory bread(block 64) failed [ 417.216555][T14087] FAT-fs (loop6): Directory bread(block 65) failed [ 417.223310][T14087] FAT-fs (loop6): Directory bread(block 66) failed [ 417.264248][T14087] FAT-fs (loop6): Directory bread(block 67) failed [ 417.264289][ T4311] usb 8-1: Using ep0 maxpacket: 16 [ 417.294229][T14087] FAT-fs (loop6): Directory bread(block 68) failed [ 417.300844][T14087] FAT-fs (loop6): Directory bread(block 69) failed [ 417.308810][ T4311] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 417.344114][T14087] FAT-fs (loop6): Directory bread(block 70) failed [ 417.377931][ T4311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.382725][T14087] FAT-fs (loop6): Directory bread(block 71) failed [ 417.405933][ T4311] usb 8-1: Product: syz [ 417.410176][ T4311] usb 8-1: Manufacturer: syz [ 417.424477][T14087] FAT-fs (loop6): Directory bread(block 72) failed [ 417.431093][T14087] FAT-fs (loop6): Directory bread(block 73) failed [ 417.431609][ T4311] usb 8-1: SerialNumber: syz [ 417.481495][ T4311] usb 8-1: config 0 descriptor?? [ 417.548944][ T4311] usb_ehset_test: probe of 8-1:0.0 failed with error -32 [ 417.704163][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3740'. [ 417.747399][ T4311] usb 8-1: USB disconnect, device number 8 [ 418.528468][T14112] loop9: detected capacity change from 0 to 2048 [ 418.580462][T14112] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.167373][T14130] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3757'. [ 419.650446][T14146] loop9: detected capacity change from 0 to 512 [ 419.690549][T14146] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 419.751297][T14151] loop8: detected capacity change from 0 to 16 [ 419.773429][T14151] erofs: (device loop8): mounted with root inode @ nid 36. [ 419.817929][T14151] erofs: (device loop8): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 419.820804][T14146] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 419.873996][T14151] erofs: (device loop8): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 419.883805][T14151] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 419.954562][T14146] Quota error (device loop9): write_blk: dquota write failed [ 419.967005][T14146] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 420.014040][T14146] EXT4-fs error (device loop9): ext4_acquire_dquot:6816: comm syz.9.3766: Failed to acquire dquot type 0 [ 420.054518][T14146] EXT4-fs (loop9): 1 truncate cleaned up [ 420.060264][T14146] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 420.195175][T14146] Quota error (device loop9): write_blk: dquota write failed [ 420.230247][T14164] device netdevsim0 entered promiscuous mode [ 420.277492][T14146] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 420.303662][ T93] block nbd8: Attempted send on invalid socket [ 420.309961][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.333622][T14146] EXT4-fs error (device loop9): ext4_acquire_dquot:6816: comm syz.9.3766: Failed to acquire dquot type 0 [ 420.341513][T14166] FAT-fs (nbd8): unable to read boot sector [ 420.467203][T10105] EXT4-fs (loop9): unmounting filesystem. [ 420.681819][T14175] loop8: detected capacity change from 0 to 64 [ 421.260028][T14191] loop6: detected capacity change from 0 to 256 [ 421.339339][T14191] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 421.659565][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3788'. [ 421.771565][T14198] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 421.832389][T14198] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 421.952902][T14205] binder: 14203:14205 ioctl c018620b 0 returned -14 [ 422.491335][T14220] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3798'. [ 423.502784][T14250] loop9: detected capacity change from 0 to 64 [ 424.144094][ T4311] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 424.345026][T14268] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 424.352048][ T4311] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 424.384131][ T4311] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.394366][ T4311] usb 9-1: Product: syz [ 424.398691][ T4311] usb 9-1: Manufacturer: syz [ 424.413649][ T4311] usb 9-1: SerialNumber: syz [ 424.459985][ T4311] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 424.506444][ T4311] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 424.564765][T14254] loop7: detected capacity change from 0 to 32768 [ 424.670842][T14254] XFS (loop7): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 424.728277][ C1] usb 9-1: ath: unknown panic pattern! [ 424.935782][ T4366] usb 9-1: USB disconnect, device number 7 [ 424.968931][ T7804] XFS (loop7): Unmounting Filesystem [ 425.574042][ T4311] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 425.590354][ T4311] ath9k_htc: Failed to initialize the device [ 425.644090][ T4366] usb 9-1: ath9k_htc: USB layer deinitialized [ 425.660531][ T27] audit: type=1326 audit(1757620343.675:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14295 comm="syz.8.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 425.673744][T14260] loop4: detected capacity change from 0 to 32768 [ 425.754135][ T27] audit: type=1326 audit(1757620343.675:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14295 comm="syz.8.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 425.864082][ T27] audit: type=1326 audit(1757620343.675:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14295 comm="syz.8.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 425.988745][ T27] audit: type=1326 audit(1757620343.675:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14295 comm="syz.8.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 426.067216][ T27] audit: type=1326 audit(1757620343.675:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14295 comm="syz.8.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab518eba9 code=0x7ffc0000 [ 426.091578][T14260] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 426.687548][T14320] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3844'. [ 426.990340][ T4277] ocfs2: Unmounting device (7,4) on (node local) [ 427.144411][ T4366] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 427.287415][T14327] xt_limit: Overflow, try lower: 1207959552/384 [ 427.345974][ T4366] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.373994][ T4366] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.411005][ T4366] usb 8-1: config 1 interface 1 has no altsetting 0 [ 427.435928][ T4366] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.501040][ T4366] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.510123][ T4366] usb 8-1: Product: syz [ 427.514934][ T4366] usb 8-1: Manufacturer: syz [ 427.519568][ T4366] usb 8-1: SerialNumber: syz [ 427.557862][ T4366] usb 8-1: selecting invalid altsetting 1 [ 427.563675][ T4366] usb 8-1: selecting invalid altsetting 0 [ 427.580431][ T4366] usb 8-1: selecting invalid altsetting 0 [ 427.587740][ T4366] cdc_ncm 8-1:1.0: bind() failure [ 427.609366][ T4366] usb 8-1: selecting invalid altsetting 0 [ 427.624108][ T4366] usbtest: probe of 8-1:1.1 failed with error -22 [ 427.784033][T14343] tipc: Can't bind to reserved service type 0 [ 427.792204][ T6529] usb 8-1: USB disconnect, device number 9 [ 427.930259][T14341] loop4: detected capacity change from 0 to 4096 [ 427.979001][T14341] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 428.586599][T14337] loop8: detected capacity change from 0 to 32768 [ 428.593170][T14357] netlink: 'syz.7.3861': attribute type 2 has an invalid length. [ 428.610029][T14357] netlink: 'syz.7.3861': attribute type 3 has an invalid length. [ 428.728430][T14337] XFS (loop8): Mounting V5 Filesystem [ 428.746246][T14359] loop9: detected capacity change from 0 to 4096 [ 428.968281][T14337] XFS (loop8): Ending clean mount [ 428.983804][T14337] XFS (loop8): Quotacheck needed: Please wait. [ 428.987741][T14359] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 429.083980][T14359] ntfs3: loop9: Failed to load $Extend. [ 429.109273][T14337] XFS (loop8): Quotacheck: Done. [ 429.422635][ T8677] XFS (loop8): Unmounting Filesystem [ 430.245184][T14405] loop6: detected capacity change from 0 to 64 [ 430.575120][ T6529] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 430.620420][T14414] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 430.785745][ T6529] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 430.825498][ T6529] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7 [ 430.857042][ T6529] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024 [ 430.884334][T14417] sctp: [Deprecated]: syz.6.3887 (pid 14417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.884334][T14417] Use struct sctp_sack_info instead [ 430.888938][ T6529] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.934269][ T6529] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 430.953738][ T6529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.984981][ T6529] usb 5-1: config 0 descriptor?? [ 431.024711][ T6529] em28xx 5-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 431.054011][ T6529] em28xx 5-1:0.0: DVB interface 0 found: isoc [ 431.068579][T14402] loop7: detected capacity change from 0 to 32768 [ 431.202700][T14402] XFS (loop7): Mounting V5 Filesystem [ 431.298249][ T6529] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 431.394483][ T6529] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 431.446361][ T6529] em28xx 5-1:0.0: board has no eeprom [ 431.492283][T14402] XFS (loop7): Ending clean mount [ 431.554012][ T6529] em28xx 5-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 431.572357][ T6529] em28xx 5-1:0.0: dvb set to isoc mode. [ 431.589064][ T6529] usb 5-1: USB disconnect, device number 14 [ 431.611841][ T4311] em28xx 5-1:0.0: Binding DVB extension [ 431.634526][ T6529] em28xx 5-1:0.0: Disconnecting em28xx [ 431.704660][ T7804] XFS (loop7): Unmounting Filesystem [ 432.011031][T14451] loop4: detected capacity change from 0 to 512 [ 432.107129][ T4311] DVB: Unable to find symbol drxk_attach() [ 432.128508][ T4311] em28xx 5-1:0.0: Registering input extension [ 432.149488][T14451] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 432.159674][ T6529] em28xx 5-1:0.0: Closing input extension [ 432.160324][T14453] loop9: detected capacity change from 0 to 512 [ 432.252914][ T6529] em28xx 5-1:0.0: Freeing device [ 432.278219][T14453] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 432.303341][T14426] loop6: detected capacity change from 0 to 32768 [ 432.341175][T14451] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 432.415738][T14453] EXT4-fs (loop9): orphan cleanup on readonly fs [ 432.441273][T14451] Quota error (device loop4): write_blk: dquota write failed [ 432.467225][T14453] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3901: bg 0: block 248: padding at end of block bitmap is not set [ 432.514935][T14426] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 432.562957][T14451] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 432.574117][T14426] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 432.593073][T14426] BTRFS info (device loop6): using free space tree [ 432.619133][T14453] Quota error (device loop9): write_blk: dquota write failed [ 432.647388][T14451] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.3900: Failed to acquire dquot type 0 [ 432.681291][T14453] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 432.694410][T14453] EXT4-fs error (device loop9): ext4_acquire_dquot:6816: comm syz.9.3901: Failed to acquire dquot type 1 [ 432.709842][T14451] EXT4-fs (loop4): 1 truncate cleaned up [ 432.736494][T14451] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 432.737458][T14455] loop8: detected capacity change from 0 to 32768 [ 432.838742][T14455] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 432.853395][T14453] EXT4-fs (loop9): 1 truncate cleaned up [ 432.920636][T14453] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 432.992507][T14426] BTRFS info (device loop6): enabling ssd optimizations [ 433.176716][T10105] EXT4-fs (loop9): unmounting filesystem. [ 433.184814][ T5888] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 433.256829][ T8677] ocfs2: Unmounting device (7,8) on (node local) [ 433.334275][ T4366] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 433.526228][ T4366] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 433.577675][ T4366] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 62709, setting to 1024 [ 433.623979][ T4366] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 433.624028][ T4366] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 433.624055][ T4366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.641688][T14451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 433.651672][ T4366] usb 5-1: invalid MIDI out EP 0 [ 433.821366][ T4366] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 433.900545][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.929984][ T6527] usb 5-1: USB disconnect, device number 15 [ 434.292911][T14507] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3914'. [ 434.387854][T14505] block device autoloading is deprecated and will be removed. [ 434.507984][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 435.064245][T14533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3927'. [ 435.290180][T14540] libceph: resolve '4' (ret=-3): failed [ 435.648583][T14516] loop6: detected capacity change from 0 to 32768 [ 435.679736][T14554] loop7: detected capacity change from 0 to 16 [ 435.720591][T14554] erofs: (device loop7): mounted with root inode @ nid 36. [ 435.755031][T14516] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 435.851607][T14560] loop8: detected capacity change from 0 to 128 [ 435.877123][T14554] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 435.953449][T14554] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 435.973101][T14560] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 436.054021][T14560] hpfs: filesystem error: improperly stopped [ 436.063251][T14560] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 436.096564][ T5888] ocfs2: Unmounting device (7,6) on (node local) [ 436.112057][T14560] hpfs: You really don't want any checks? You are crazy... [ 436.145322][T14560] hpfs: hpfs_map_sector(): read error [ 436.150973][T14560] hpfs: code page support is disabled [ 436.212582][T14560] hpfs: hpfs_map_4sectors(): unaligned read [ 436.254151][T14560] hpfs: hpfs_map_4sectors(): unaligned read [ 436.260156][T14560] hpfs: filesystem error: unable to find root dir [ 436.613769][T14578] loop8: detected capacity change from 0 to 64 [ 436.639764][T14575] loop6: detected capacity change from 0 to 1024 [ 436.711417][ T27] audit: type=1800 audit(1757620354.725:96): pid=14578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3947" name="file1" dev="loop8" ino=21 res=0 errno=0 [ 436.799136][T14581] device netdevsim0 entered promiscuous mode [ 436.820343][T14581] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 436.927282][ T75] hfsplus: b-tree write err: -5, ino 4 [ 437.355826][T14600] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3958'. [ 437.696089][T14610] loop8: detected capacity change from 0 to 1764 [ 437.930208][T14623] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 438.385867][ T4311] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 438.589219][ T4311] usb 10-1: config 0 has an invalid interface number: 200 but max is 0 [ 438.613773][ T4311] usb 10-1: config 0 has no interface number 0 [ 438.627504][ T4311] usb 10-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=91.6f [ 438.654047][ T4311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.676240][ T4311] usb 10-1: config 0 descriptor?? [ 438.910379][ T4311] RobotFuzz Open Source InterFace, OSIF 10-1:0.200: version 91.6f found at bus 010 address 006 [ 439.110039][T14659] loop7: detected capacity change from 0 to 1024 [ 439.114308][ T14] usb 10-1: USB disconnect, device number 6 [ 439.132277][T14659] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 440.056646][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.063001][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.167220][T14696] loop7: detected capacity change from 0 to 8 [ 440.485055][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4009'. [ 440.501050][T14703] netlink: 332 bytes leftover after parsing attributes in process `syz.7.4009'. [ 440.766780][T14714] loop7: detected capacity change from 0 to 24 [ 440.892246][T14685] loop8: detected capacity change from 0 to 32768 [ 441.024358][T14721] netlink: 'syz.4.4017': attribute type 2 has an invalid length. [ 441.050326][T14685] ERROR: (device loop8): dbFindCtl: Corrupt dmapctl page [ 441.050326][T14685] [ 441.076073][T14721] netlink: 'syz.4.4017': attribute type 8 has an invalid length. [ 441.106952][T14685] ERROR: (device loop8): remounting filesystem as read-only [ 441.119493][T14685] ialloc: diAlloc returned -5! [ 441.124657][T14721] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4017'. [ 441.470603][T14730] loop8: detected capacity change from 0 to 2048 [ 441.528241][T14730] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 441.570524][T14737] loop9: detected capacity change from 0 to 1024 [ 441.589262][T14738] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 441.805397][T14737] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 441.853298][T14737] EXT4-fs warning (device loop9): ext4_rmdir:3243: inode #11: comm syz.9.4024: empty directory 'file1' has too many links (111) [ 442.046614][T10105] EXT4-fs (loop9): unmounting filesystem. [ 442.251195][T14758] loop7: detected capacity change from 0 to 256 [ 442.300598][T14758] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 442.929401][ T6536] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 443.092871][T14786] loop8: detected capacity change from 0 to 512 [ 443.115937][ T6536] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 443.145179][ T6536] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.153420][T14786] EXT4-fs (loop8): Test dummy encryption mode enabled [ 443.170289][T14786] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 443.175942][ T6536] usb 8-1: config 0 has no interface number 0 [ 443.200315][ T6536] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 443.235138][T14786] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.4046: bad orphan inode 131083 [ 443.269307][ T6536] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 443.280761][T14786] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 443.351508][ T6536] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.427359][ T6536] usb 8-1: config 0 interface 52 has no altsetting 0 [ 443.460143][ T6536] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 443.500199][ T6536] usb 8-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 443.530598][ T6536] usb 8-1: Product: syz [ 443.540722][ T6536] usb 8-1: Manufacturer: syz [ 443.555580][ T6536] usb 8-1: SerialNumber: syz [ 443.588526][T14786] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 443.592839][ T6536] usb 8-1: config 0 descriptor?? [ 443.605403][T14786] EXT4-fs error (device loop8): __ext4_new_inode:1075: comm syz.8.4046: reserved inode found cleared - inode=18 [ 443.752204][ T8677] EXT4-fs (loop8): unmounting filesystem. [ 443.844077][ T6536] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 443.880478][ T6536] synaptics_usb: probe of 8-1:0.52 failed with error -5 [ 443.972761][T14810] loop4: detected capacity change from 0 to 512 [ 444.065668][T14810] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 444.123730][ T6536] usb 8-1: USB disconnect, device number 10 [ 444.134165][T14810] ext4 filesystem being mounted at /819/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.167140][T14789] loop6: detected capacity change from 0 to 32768 [ 444.243692][T14810] EXT4-fs error (device loop4): ext4_xattr_block_find:1837: inode #15: comm syz.4.4055: corrupted xattr block 19 [ 444.269653][ T27] audit: type=1800 audit(1757620362.285:97): pid=14789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4047" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 444.290029][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.310585][T14810] EXT4-fs (loop4): Remounting filesystem read-only [ 444.919654][T14822] device vxcan3 entered promiscuous mode [ 445.092792][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 445.626617][ T4311] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 445.818669][ T4311] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.849947][ T4311] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 445.894153][ T4311] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.928993][ T4311] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.964036][ T4311] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 446.004706][ T4311] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.058885][ T4311] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.091855][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4075'. [ 446.092338][T14859] loop8: detected capacity change from 0 to 256 [ 446.108725][ T4311] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 446.128993][ T4311] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.153379][T14859] exfat: Deprecated parameter 'utf8' [ 446.172756][ T4311] usb 8-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 446.190726][T14859] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 446.223324][ T4311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.254155][ T4311] usb 8-1: Product: syz [ 446.258429][ T4311] usb 8-1: Manufacturer: syz [ 446.291024][ T4311] usb 8-1: SerialNumber: syz [ 446.317050][ T4311] usb 8-1: config 0 descriptor?? [ 446.370619][ T4311] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 446.410333][ T4311] usb 8-1: Detected SIO [ 446.430514][ T4311] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 446.451376][ T4311] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 446.596808][ T4311] usb 8-1: USB disconnect, device number 11 [ 446.616335][ T4311] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 446.635230][T14875] loop8: detected capacity change from 0 to 16 [ 446.661171][ T4311] ftdi_sio 8-1:0.0: device disconnected [ 446.714474][T14875] erofs: (device loop8): mounted with root inode @ nid 36. [ 448.416583][T14926] __vm_enough_memory: pid: 14926, comm: syz.6.4108, no enough memory for the allocation [ 448.425274][T14903] loop7: detected capacity change from 0 to 32768 [ 448.491887][T14903] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 448.679448][T14902] loop4: detected capacity change from 0 to 40427 [ 448.689045][ T7804] ocfs2: Unmounting device (7,7) on (node local) [ 448.739376][T14902] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 448.796375][T14902] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 448.875520][T14902] F2FS-fs (loop4): invalid crc value [ 448.948800][T14902] F2FS-fs (loop4): Found nat_bits in checkpoint [ 449.115285][T14902] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 449.122398][T14902] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 449.964507][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4129'. [ 450.014165][T14968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4129'. [ 450.064655][T14968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4129'. [ 450.371320][T14976] loop4: detected capacity change from 0 to 256 [ 450.978023][T14989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 450.985393][T14989] IPv6: NLM_F_CREATE should be set when creating new route [ 451.085216][T14970] loop9: detected capacity change from 0 to 32768 [ 451.169594][T14964] loop8: detected capacity change from 0 to 32768 [ 451.266453][T14970] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 451.395117][T14964] XFS (loop8): Mounting V5 Filesystem [ 451.531835][T10105] ocfs2: Unmounting device (7,9) on (node local) [ 451.594151][T14964] XFS (loop8): Ending clean mount [ 451.645881][T14964] XFS (loop8): Quotacheck needed: Please wait. [ 451.814210][ T5913] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 451.859104][T15017] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 451.892781][T14964] XFS (loop8): Quotacheck: Done. [ 451.974755][T15017] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 452.034925][ T5913] usb 7-1: Using ep0 maxpacket: 32 [ 452.050208][ T8677] XFS (loop8): Unmounting Filesystem [ 452.059101][ T5913] usb 7-1: unable to get BOS descriptor or descriptor too short [ 452.080065][ T5913] usb 7-1: config 11 has an invalid interface number: 4 but max is 0 [ 452.099931][ T5913] usb 7-1: config 11 has no interface number 0 [ 452.114426][ T5913] usb 7-1: config 11 interface 4 altsetting 4 endpoint 0x4 has invalid maxpacket 1088, setting to 64 [ 452.146345][ T5913] usb 7-1: config 11 interface 4 has no altsetting 0 [ 452.174270][ T5913] usb 7-1: New USB device found, idVendor=0e8d, idProduct=0043, bcdDevice=63.58 [ 452.217306][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.241441][ T5913] usb 7-1: Product: syz [ 452.256208][ T5913] usb 7-1: Manufacturer: syz [ 452.274490][ T5913] usb 7-1: SerialNumber: syz [ 452.524937][ T5913] option 7-1:11.4: GSM modem (1-port) converter detected [ 452.558594][ T5913] usb 7-1: USB disconnect, device number 16 [ 452.569182][ T5913] option 7-1:11.4: device disconnected [ 453.658810][T15029] loop9: detected capacity change from 0 to 32768 [ 453.704426][T15029] (syz.9.4151,15029,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 453.742487][T15029] (syz.9.4151,15029,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 453.764060][ T6536] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 453.813002][T15029] JBD2: Ignoring recovery information on journal [ 453.957869][ T6536] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 453.974625][ T6536] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.992940][ T6536] usb 9-1: Product: syz [ 453.997507][ T6536] usb 9-1: Manufacturer: syz [ 454.002150][ T6536] usb 9-1: SerialNumber: syz [ 454.044570][ T6536] r8152-cfgselector 9-1: config 0 descriptor?? [ 454.060383][T15029] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 454.189579][T15029] [ 454.191999][T15029] ====================================================== [ 454.199056][T15029] WARNING: possible circular locking dependency detected [ 454.206121][T15029] syzkaller #0 Not tainted [ 454.210568][T15029] ------------------------------------------------------ [ 454.217624][T15029] syz.9.4151/15029 is trying to acquire lock: [ 454.223718][T15029] ffff88807038c2c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 454.237379][T15029] [ 454.237379][T15029] but task is already holding lock: [ 454.244776][T15029] ffff888053d90660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 454.255723][T15029] [ 454.255723][T15029] which lock already depends on the new lock. [ 454.255723][T15029] [ 454.266158][T15029] [ 454.266158][T15029] the existing dependency chain (in reverse order) is: [ 454.275264][T15029] [ 454.275264][T15029] -> #7 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 454.284144][T15029] down_write+0x36/0x60 [ 454.288859][T15029] ocfs2_lock_global_qf+0x1e5/0x270 [ 454.294611][T15029] ocfs2_acquire_dquot+0x2a0/0xb10 [ 454.300267][T15029] dqget+0x778/0xeb0 [ 454.304702][T15029] ocfs2_setattr+0xf16/0x1cf0 [ 454.309921][T15029] notify_change+0xc74/0xf40 [ 454.315045][T15029] chown_common+0x486/0x620 [ 454.320341][T15029] do_fchownat+0x164/0x270 [ 454.325298][T15029] __x64_sys_fchownat+0xb1/0xc0 [ 454.330771][T15029] do_syscall_64+0x4c/0xa0 [ 454.335725][T15029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.342162][T15029] [ 454.342162][T15029] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 454.352701][T15029] down_write+0x36/0x60 [ 454.357396][T15029] ocfs2_lock_global_qf+0x1c7/0x270 [ 454.363136][T15029] ocfs2_acquire_dquot+0x2a0/0xb10 [ 454.368776][T15029] dqget+0x778/0xeb0 [ 454.373200][T15029] ocfs2_setattr+0xf16/0x1cf0 [ 454.378416][T15029] notify_change+0xc74/0xf40 [ 454.383544][T15029] chown_common+0x486/0x620 [ 454.388580][T15029] do_fchownat+0x164/0x270 [ 454.393526][T15029] __x64_sys_fchownat+0xb1/0xc0 [ 454.398918][T15029] do_syscall_64+0x4c/0xa0 [ 454.403869][T15029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.410313][T15029] [ 454.410313][T15029] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 454.417972][T15029] __mutex_lock+0x120/0xaf0 [ 454.423022][T15029] dquot_commit+0x5a/0x410 [ 454.428085][T15029] ext4_write_dquot+0x1f0/0x360 [ 454.433666][T15029] mark_all_dquot_dirty+0xf9/0x400 [ 454.439357][T15029] __dquot_free_space+0x7ec/0xbc0 [ 454.444925][T15029] ext4_free_blocks+0x1bab/0x2640 [ 454.450486][T15029] ext4_ext_remove_space+0x1f0d/0x4490 [ 454.456478][T15029] ext4_ext_truncate+0x211/0x370 [ 454.461957][T15029] ext4_truncate+0xa0b/0x1230 [ 454.467185][T15029] ext4_evict_inode+0xb35/0x1100 [ 454.472686][T15029] evict+0x485/0x870 [ 454.477117][T15029] do_unlinkat+0x377/0x560 [ 454.482074][T15029] __x64_sys_unlink+0x45/0x50 [ 454.487285][T15029] do_syscall_64+0x4c/0xa0 [ 454.492260][T15029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.498724][T15029] [ 454.498724][T15029] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 454.506424][T15029] down_write+0x36/0x60 [ 454.511126][T15029] ext4_truncate+0x987/0x1230 [ 454.516351][T15029] ext4_setattr+0x10cb/0x19f0 [ 454.521577][T15029] notify_change+0xc74/0xf40 [ 454.526701][T15029] do_truncate+0x197/0x220 [ 454.531650][T15029] do_sys_ftruncate+0x312/0x3c0 [ 454.537039][T15029] do_syscall_64+0x4c/0xa0 [ 454.542072][T15029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.548510][T15029] [ 454.548510][T15029] -> #3 (jbd2_handle){++++}-{0:0}: [ 454.555820][T15029] start_this_handle+0x1f49/0x2150 [ 454.561470][T15029] jbd2__journal_start+0x2b7/0x5a0 [ 454.567121][T15029] jbd2_journal_start+0x26/0x30 [ 454.572508][T15029] ocfs2_start_trans+0x372/0x6c0 [ 454.578073][T15029] ocfs2_modify_bh+0xe5/0x460 [ 454.583375][T15029] ocfs2_local_read_info+0x13b1/0x16e0 [ 454.589397][T15029] dquot_load_quota_sb+0x756/0xac0 [ 454.595045][T15029] dquot_load_quota_inode+0x2d8/0x5d0 [ 454.600948][T15029] ocfs2_enable_quotas+0x1c3/0x440 [ 454.606602][T15029] ocfs2_fill_super+0x409f/0x4d00 [ 454.612167][T15029] mount_bdev+0x287/0x3c0 [ 454.617042][T15029] legacy_get_tree+0xe6/0x180 [ 454.622279][T15029] vfs_get_tree+0x88/0x270 [ 454.627243][T15029] do_new_mount+0x24a/0xa40 [ 454.632280][T15029] __se_sys_mount+0x2d6/0x3c0 [ 454.637487][T15029] do_syscall_64+0x4c/0xa0 [ 454.642435][T15029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.648872][T15029] [ 454.648872][T15029] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 454.657409][T15029] down_read+0x42/0x2d0 [ 454.662098][T15029] ocfs2_start_trans+0x366/0x6c0 [ 454.667574][T15029] ocfs2_modify_bh+0xe5/0x460 [ 454.672779][T15029] ocfs2_local_read_info+0x13b1/0x16e0 [ 454.678762][T15029] dquot_load_quota_sb+0x756/0xac0 [ 454.684408][T15029] dquot_load_quota_inode+0x2d8/0x5d0 [ 454.690313][T15029] ocfs2_enable_quotas+0x1c3/0x440 [ 454.695962][T15029] ocfs2_fill_super+0x409f/0x4d00 [ 454.701524][T15029] mount_bdev+0x287/0x3c0 [ 454.706384][T15029] legacy_get_tree+0xe6/0x180 [ 454.711590][T15029] vfs_get_tree+0x88/0x270 [ 454.716538][T15029] do_new_mount+0x24a/0xa40 [ 454.721573][T15029] __se_sys_mount+0x2d6/0x3c0 [ 454.726780][T15029] do_syscall_64+0x4c/0xa0 [ 454.731725][T15029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.738158][T15029] [ 454.738158][T15029] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 454.745652][T15029] ocfs2_start_trans+0x267/0x6c0 [ 454.751132][T15029] ocfs2_mknod+0xe6a/0x2350 [ 454.756169][T15029] ocfs2_create+0x1b6/0x4a0 [ 454.761204][T15029] path_openat+0x1187/0x2e70 [ 454.766319][T15029] do_filp_open+0x1c1/0x3c0 [ 454.771358][T15029] do_sys_openat2+0x142/0x490 [ 454.776571][T15029] __x64_sys_openat+0x135/0x160 [ 454.781957][T15029] do_syscall_64+0x4c/0xa0 [ 454.786904][T15029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.793429][T15029] [ 454.793429][T15029] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 454.803957][T15029] __lock_acquire+0x2cf8/0x7c50 [ 454.809346][T15029] lock_acquire+0x1b4/0x490 [ 454.814387][T15029] down_write+0x36/0x60 [ 454.819076][T15029] ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 454.825761][T15029] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 454.832629][T15029] ocfs2_lock_allocators+0x2f7/0x5b0 [ 454.838456][T15029] ocfs2_extend_allocation+0x394/0x1840 [ 454.844537][T15029] ocfs2_extend_no_holes+0x20b/0x490 [ 454.850361][T15029] ocfs2_acquire_dquot+0x5e8/0xb10 [ 454.856001][T15029] dqget+0x778/0xeb0 [ 454.860432][T15029] ocfs2_setattr+0xf16/0x1cf0 [ 454.865649][T15029] notify_change+0xc74/0xf40 [ 454.870773][T15029] chown_common+0x486/0x620 [ 454.875809][T15029] do_fchownat+0x164/0x270 [ 454.880760][T15029] __x64_sys_fchownat+0xb1/0xc0 [ 454.886141][T15029] do_syscall_64+0x4c/0xa0 [ 454.891088][T15029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.897531][T15029] [ 454.897531][T15029] other info that might help us debug this: [ 454.897531][T15029] [ 454.907764][T15029] Chain exists of: [ 454.907764][T15029] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 454.907764][T15029] [ 454.927779][T15029] Possible unsafe locking scenario: [ 454.927779][T15029] [ 454.935232][T15029] CPU0 CPU1 [ 454.940598][T15029] ---- ---- [ 454.945964][T15029] lock(&ocfs2_quota_ip_alloc_sem_key); [ 454.951604][T15029] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 454.961423][T15029] lock(&ocfs2_quota_ip_alloc_sem_key); [ 454.969589][T15029] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 454.976884][T15029] [ 454.976884][T15029] *** DEADLOCK *** [ 454.976884][T15029] [ 454.985032][T15029] 5 locks held by syz.9.4151/15029: [ 454.990278][T15029] #0: ffff888028a10460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 454.999542][T15029] #1: ffff888053e789c8 (&type->i_mutex_dir_key#31){+.+.}-{3:3}, at: chown_common+0x320/0x620 [ 455.009844][T15029] #2: ffff88804a66c0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 455.019864][T15029] #3: ffff888053d909c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 455.032846][T15029] #4: ffff888053d90660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 455.044191][T15029] [ 455.044191][T15029] stack backtrace: [ 455.050169][T15029] CPU: 1 PID: 15029 Comm: syz.9.4151 Not tainted syzkaller #0 [ 455.057635][T15029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 455.067706][T15029] Call Trace: [ 455.070997][T15029] [ 455.073939][T15029] dump_stack_lvl+0x168/0x22e [ 455.078634][T15029] ? load_image+0x3b0/0x3b0 [ 455.083156][T15029] ? show_regs_print_info+0x12/0x12 [ 455.088369][T15029] ? print_circular_bug+0x12b/0x1a0 [ 455.093609][T15029] check_noncircular+0x274/0x310 [ 455.098565][T15029] ? add_chain_block+0x940/0x940 [ 455.103517][T15029] ? lockdep_lock+0xdc/0x1e0 [ 455.108122][T15029] ? verify_lock_unused+0x140/0x140 [ 455.113340][T15029] ? lock_acquire+0x20f/0x490 [ 455.118033][T15029] ? _find_first_zero_bit+0xcf/0x100 [ 455.123372][T15029] __lock_acquire+0x2cf8/0x7c50 [ 455.128271][T15029] ? verify_lock_unused+0x140/0x140 [ 455.133500][T15029] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 455.139156][T15029] ? do_raw_spin_lock+0x11d/0x280 [ 455.144206][T15029] ? mutex_unlock+0x10/0x10 [ 455.148724][T15029] ? __rwlock_init+0x140/0x140 [ 455.153508][T15029] ? __rwlock_init+0x140/0x140 [ 455.158292][T15029] ? do_raw_spin_unlock+0x11d/0x230 [ 455.163517][T15029] lock_acquire+0x1b4/0x490 [ 455.168037][T15029] ? ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 455.174471][T15029] ? __might_sleep+0xd0/0xd0 [ 455.179083][T15029] ? mark_lock+0x94/0x320 [ 455.183434][T15029] ? read_lock_is_recursive+0x10/0x10 [ 455.188826][T15029] ? mark_lock+0x94/0x320 [ 455.193176][T15029] ? __lock_acquire+0x13c0/0x7c50 [ 455.198220][T15029] ? lock_chain_count+0x20/0x20 [ 455.203091][T15029] down_write+0x36/0x60 [ 455.207264][T15029] ? ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 455.213607][T15029] ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 455.219774][T15029] ? _raw_spin_unlock+0x40/0x40 [ 455.224643][T15029] ? stack_trace_save+0x98/0xe0 [ 455.229510][T15029] ? verify_lock_unused+0x140/0x140 [ 455.234730][T15029] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 455.241445][T15029] ? kasan_set_track+0x60/0x70 [ 455.246226][T15029] ? kasan_set_track+0x4b/0x70 [ 455.251002][T15029] ? __kasan_kmalloc+0x8e/0xa0 [ 455.255781][T15029] ? ocfs2_reserve_clusters_with_limit+0xe7/0xba0 [ 455.262212][T15029] ? ocfs2_lock_allocators+0x2f7/0x5b0 [ 455.267698][T15029] ? ocfs2_extend_allocation+0x394/0x1840 [ 455.273553][T15029] ? ocfs2_extend_no_holes+0x20b/0x490 [ 455.279046][T15029] ? ocfs2_acquire_dquot+0x5e8/0xb10 [ 455.284366][T15029] ? dqget+0x778/0xeb0 [ 455.288899][T15029] ? ocfs2_setattr+0xf16/0x1cf0 [ 455.293771][T15029] ? notify_change+0xc74/0xf40 [ 455.298549][T15029] ? chown_common+0x486/0x620 [ 455.303325][T15029] ? do_fchownat+0x164/0x270 [ 455.307950][T15029] ? do_syscall_64+0x4c/0xa0 [ 455.312568][T15029] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.318689][T15029] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 455.324782][T15029] ? __lock_acquire+0x7c50/0x7c50 [ 455.329828][T15029] ? do_raw_spin_lock+0x11d/0x280 [ 455.334886][T15029] ? __rwlock_init+0x140/0x140 [ 455.339671][T15029] ? do_raw_spin_unlock+0x11d/0x230 [ 455.344942][T15029] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 455.351025][T15029] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 455.357462][T15029] ? ocfs2_reserve_clusters+0x30/0x30 [ 455.362854][T15029] ? lock_chain_count+0x20/0x20 [ 455.367723][T15029] ? rcu_is_watching+0x11/0xa0 [ 455.372504][T15029] ? ocfs2_num_free_extents+0x2fa/0x620 [ 455.378072][T15029] ? ocfs2_validate_extent_block+0x5e0/0x5e0 [ 455.384086][T15029] ? ocfs2_read_blocks_sync+0xc50/0xc50 [ 455.389649][T15029] ? stack_trace_save+0x98/0xe0 [ 455.394518][T15029] ocfs2_lock_allocators+0x2f7/0x5b0 [ 455.399835][T15029] ? _ocfs2_clear_bit+0x30/0x30 [ 455.404710][T15029] ? ocfs2_read_inode_block+0x11a/0x180 [ 455.410274][T15029] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 455.416277][T15029] ? ocfs2_acquire_dquot+0x2e8/0xb10 [ 455.421571][T15029] ? ocfs2_setattr+0xf16/0x1cf0 [ 455.426457][T15029] ? notify_change+0xc74/0xf40 [ 455.431237][T15029] ? chown_common+0x486/0x620 [ 455.435937][T15029] ? __x64_sys_fchownat+0xb1/0xc0 [ 455.440992][T15029] ? do_syscall_64+0x4c/0xa0 [ 455.445602][T15029] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.451711][T15029] ocfs2_extend_allocation+0x394/0x1840 [ 455.457285][T15029] ? __lock_acquire+0x13c0/0x7c50 [ 455.462332][T15029] ? ocfs2_extend_no_holes+0x490/0x490 [ 455.467808][T15029] ? kasan_quarantine_put+0xd4/0x220 [ 455.473116][T15029] ? lockdep_hardirqs_on+0x94/0x140 [ 455.478336][T15029] ? slab_free_freelist_hook+0x131/0x1a0 [ 455.483985][T15029] ? ocfs2_allocate_extend_trans+0x640/0x640 [ 455.489987][T15029] ? find_tree_dqentry+0xbb1/0xf30 [ 455.495134][T15029] ? ocfs2_qinfo_unlock+0xa4/0x140 [ 455.500262][T15029] ocfs2_extend_no_holes+0x20b/0x490 [ 455.505566][T15029] ? ocfs2_zero_extend+0x2950/0x2950 [ 455.510870][T15029] ? do_raw_spin_unlock+0x11d/0x230 [ 455.516092][T15029] ? _raw_spin_unlock+0x24/0x40 [ 455.520959][T15029] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 455.526173][T15029] ocfs2_acquire_dquot+0x5e8/0xb10 [ 455.531300][T15029] ? ocfs2_destroy_dquot+0x40/0x40 [ 455.536421][T15029] ? percpu_counter_add_batch+0x13b/0x160 [ 455.542160][T15029] dqget+0x778/0xeb0 [ 455.546075][T15029] ocfs2_setattr+0xf16/0x1cf0 [ 455.550777][T15029] ? ocfs2_extend_allocation+0x1840/0x1840 [ 455.556597][T15029] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 455.562419][T15029] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 455.568680][T15029] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 455.574586][T15029] ? current_time+0x197/0x2b0 [ 455.579275][T15029] ? atime_needs_update+0x780/0x780 [ 455.584487][T15029] ? common_perm_cond+0x2ad/0x340 [ 455.589530][T15029] ? evm_inode_setattr+0x91/0x790 [ 455.594568][T15029] ? bpf_lsm_inode_setattr+0x5/0x10 [ 455.599782][T15029] ? security_inode_setattr+0xd8/0x140 [ 455.605250][T15029] ? try_break_deleg+0x79/0x120 [ 455.610114][T15029] ? ocfs2_extend_allocation+0x1840/0x1840 [ 455.615945][T15029] notify_change+0xc74/0xf40 [ 455.620555][T15029] chown_common+0x486/0x620 [ 455.625085][T15029] ? __ia32_sys_chmod+0x70/0x70 [ 455.629948][T15029] ? rcu_read_lock_any_held+0xb0/0x120 [ 455.635529][T15029] ? __mnt_want_write+0x21f/0x2a0 [ 455.640574][T15029] do_fchownat+0x164/0x270 [ 455.645030][T15029] ? chown_common+0x620/0x620 [ 455.649898][T15029] ? lock_chain_count+0x20/0x20 [ 455.654785][T15029] __x64_sys_fchownat+0xb1/0xc0 [ 455.659648][T15029] do_syscall_64+0x4c/0xa0 [ 455.664084][T15029] ? clear_bhb_loop+0x60/0xb0 [ 455.668774][T15029] ? clear_bhb_loop+0x60/0xb0 [ 455.673478][T15029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.679391][T15029] RIP: 0033:0x7f1f55b8eba9 [ 455.683819][T15029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.703439][T15029] RSP: 002b:00007f1f56ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 455.711862][T15029] RAX: ffffffffffffffda RBX: 00007f1f55dd5fa0 RCX: 00007f1f55b8eba9 [ 455.719839][T15029] RDX: 000000000000ee01 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 455.727833][T15029] RBP: 00007f1f55c11e19 R08: 0000000000001000 R09: 0000000000000000 [ 455.735811][T15029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.743787][T15029] R13: 00007f1f55dd6038 R14: 00007f1f55dd5fa0 R15: 00007ffdfb807b18 [ 455.751775][T15029] [ 455.754916][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.778740][T15045] loop7: detected capacity change from 0 to 32768 [ 455.833497][T15045] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 455.871338][T15045] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 455.954908][ T7804] ocfs2: Unmounting device (7,7) on (node local) [ 455.986594][T10105] ocfs2: Unmounting device (7,9) on (node local) [ 456.012297][ T6536] r8152-cfgselector 9-1: Unknown version 0x0000 [ 456.033407][ T6536] r8152-cfgselector 9-1: USB disconnect, device number 8