last executing test programs: 9m13.708070362s ago: executing program 2 (id=3925): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 9m13.406171097s ago: executing program 2 (id=3930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) 9m13.151161773s ago: executing program 2 (id=3932): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet(r0, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)=[{0x0, 0xea}, {&(0x7f0000004500)="91e9bf3c82", 0x5}], 0x2}, 0x80) 9m12.90248511s ago: executing program 2 (id=3936): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x3, 0x1510, &(0x7f0000003640)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 9m12.280311363s ago: executing program 2 (id=3945): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000018007f5e29bd7000ffdbdf25020010a7"], 0x34}, 0x1, 0xffffff7f, 0x0, 0x20000800}, 0x0) 9m11.427474685s ago: executing program 2 (id=3958): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "a36b2342093d97baa03e1e21c4e2d950c9c7ebe68327dcef2cc74535e5b5cb82bd22a0bbe3d6843eded8baee6bf12979bddac74b8228d02db6565722852d8eff", 0x25}, 0x48, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r0, 0x10000) 9m10.910743201s ago: executing program 32 (id=3958): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "a36b2342093d97baa03e1e21c4e2d950c9c7ebe68327dcef2cc74535e5b5cb82bd22a0bbe3d6843eded8baee6bf12979bddac74b8228d02db6565722852d8eff", 0x25}, 0x48, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r0, 0x10000) 3m36.132185323s ago: executing program 1 (id=8615): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x891b, 0x0) 3m35.873271869s ago: executing program 1 (id=8620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000) 3m35.302384724s ago: executing program 1 (id=8630): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080), 0x4) 3m35.027257749s ago: executing program 1 (id=8635): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp932'}}, {@nodecompose}, {@nobarrier}, {@uid}, {@part={'part', 0x3d, 0xff}}, {@gid}, {}, {@nobarrier}]}, 0xff, 0x6b3, &(0x7f0000000780)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 3m34.621593217s ago: executing program 1 (id=8643): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180100001f00010000000000000096000601008014000300fc010000000000000000000000000000140001"], 0x118}], 0x1}, 0x0) 3m33.780495038s ago: executing program 1 (id=8653): r0 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r0, 0xffffffffffffffff, 0x0) 3m33.161226253s ago: executing program 33 (id=8653): r0 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r0, 0xffffffffffffffff, 0x0) 6.636472793s ago: executing program 3 (id=11463): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write(r0, &(0x7f0000000380)="f4acaf2297729d46cfe3a19fe9996f1d06a30213e011cda6c9cb488642f76fe5d25145cb4df8a66cac5382e221ad", 0x2e) 6.411300216s ago: executing program 3 (id=11466): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f00000002c0)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 6.02660993s ago: executing program 3 (id=11473): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x8000000000000000, 0xffffffff, 0x2000000000000000, 0x3, 0x2, 0x5, 0x7b, 0xfffffffffffffffd, 0x3a7b60ae}) 5.682187155s ago: executing program 7 (id=11479): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) 5.425212284s ago: executing program 7 (id=11481): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x625c, &(0x7f000000bdc0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21c0, 0x103) 3.741041047s ago: executing program 3 (id=11499): mlockall(0x7) io_setup(0x200, &(0x7f0000000140)) 3.246727056s ago: executing program 7 (id=11503): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x800000, &(0x7f0000000180)=ANY=[], 0x1, 0x5a05, &(0x7f0000000180)="$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") 2.407823027s ago: executing program 6 (id=11511): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x2d, 0x0, 0x2, 0x983a}]}, 0x10) 2.321869924s ago: executing program 0 (id=11513): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x4000, 0x0, 0x0, 0x18, 0x0, 0x60, 0x2}}) 2.136259393s ago: executing program 3 (id=11516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x309, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'R'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) 2.063276163s ago: executing program 6 (id=11517): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.035462677s ago: executing program 0 (id=11518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) 1.807724545s ago: executing program 3 (id=11521): r0 = syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000180)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c67727071756f74612c696e6f646536342c61636c2c6c6f63616c666c6f636b732c005ea7501d3984f30800000034dd9b5f52523eb71133652077aca5d26b513822020aa04ceba373f5ce95c0d1d4d8d88b077307143bab05b944c8717fae9043000a828674b0cdb1a82528e59e857c2049a73f8389f4eb91af6e2f93e4894cc0e776da52222dc59219"], 0x0, 0x4703, &(0x7f0000004800)="$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") fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 1.694235925s ago: executing program 4 (id=11522): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x86a305) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 1.647579065s ago: executing program 0 (id=11523): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x400000000}, {}, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x5, 0x0, 0x0, 0x2000000}}, 0xe8) 1.547763415s ago: executing program 5 (id=11524): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000037c0000040000000c000180060006"], 0x528}}, 0xc000) 1.389549421s ago: executing program 0 (id=11525): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) 1.260854202s ago: executing program 5 (id=11526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 1.144060733s ago: executing program 4 (id=11527): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @remote}, 0x10) 1.102092052s ago: executing program 0 (id=11528): futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x4000000) 870.400824ms ago: executing program 4 (id=11529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x4004) 864.191779ms ago: executing program 7 (id=11530): r0 = openat$udambuf(0xffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0xb92744578577b4eb, 0x1000000000000}) 823.956231ms ago: executing program 5 (id=11531): r0 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x0, 0xf8a7, 0x8000, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x67, 0x0, 0x91, 0x29, 0x0, @remote, @multicast2}}}}) 727.96682ms ago: executing program 6 (id=11532): r0 = memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x1) tee(r0, r0, 0x1, 0x5) 653.943962ms ago: executing program 4 (id=11533): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000001b40)=0x7fff, 0x4) 551.761263ms ago: executing program 7 (id=11534): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}, 0xfffffffd}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) 529.203069ms ago: executing program 6 (id=11535): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000000)) 517.646679ms ago: executing program 5 (id=11536): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r0, &(0x7f0000000c00)=""/144, 0x90, 0x80) 397.068943ms ago: executing program 4 (id=11537): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x14, 0x55, 0x1, 0x400, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) 322.787846ms ago: executing program 7 (id=11538): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, 0x11, 0x0, 0x401, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4}]}, 0x20}}, 0x0) 273.681165ms ago: executing program 5 (id=11539): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x5, @win={{0x4009, 0x8001, 0x2000000b, 0x4}, 0x0, 0x101, 0x0, 0x6, 0x0, 0x8}}) 272.943505ms ago: executing program 4 (id=11540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206030300000000000000000000000005000100070000000900020073797a3100000000140007800500150003000000080012400000000013000300686173683a6e65742c696661636500000500050002000000050004"], 0x60}}, 0x0) 256.194377ms ago: executing program 6 (id=11541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 167.081074ms ago: executing program 6 (id=11542): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000040)={0xb}) 15.361764ms ago: executing program 5 (id=11543): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO") open(&(0x7f00000000c0)='.\x00', 0xc8000, 0x0) 0s ago: executing program 0 (id=11544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24054000) kernel console output (not intermixed with test programs): loop4): failed to decompress -46 in[60, 4036] out[1851] [ 973.809912][T28540] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 973.847314][ T24] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 973.852026][T28537] erofs (device loop4): read error -117 @ 43 of nid 36 [ 973.875738][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.895691][T28540] SQUASHFS error: Failed to read block 0x4e8: -5 [ 973.957561][ T24] usb 1-1: config 0 has no interface number 0 [ 973.977478][ T24] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 973.990775][T28540] SQUASHFS error: Failed to read block 0x4de: -5 [ 974.025673][ T24] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 974.061551][T28540] SQUASHFS error: Failed to read block 0x4de: -5 [ 974.077824][ T24] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 974.090610][T28540] SQUASHFS error: Failed to read block 0x4de: -5 [ 974.144506][T28540] SQUASHFS error: Failed to read block 0x4de: -5 [ 974.152393][ T24] usb 1-1: config 0 interface 52 has no altsetting 0 [ 974.175458][T28540] SQUASHFS error: Failed to read block 0x4de: -5 [ 974.184526][ T24] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 974.212616][T28540] SQUASHFS error: Failed to read block 0x4de: -5 [ 974.224088][ T24] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 974.249582][T28540] SQUASHFS error: Failed to read block 0x4de: -5 [ 974.260358][ T24] usb 1-1: Product: syz [ 974.284574][T28540] SQUASHFS error: Failed to read block 0x4de: -5 [ 974.286426][ T24] usb 1-1: Manufacturer: syz [ 974.308624][ T24] usb 1-1: SerialNumber: syz [ 974.312637][T28540] SQUASHFS error: Failed to read block 0x4e8: -5 [ 974.356556][ T24] usb 1-1: config 0 descriptor?? [ 974.366684][ T30] audit: type=1800 audit(1758540413.723:1580): pid=28540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.9801" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 974.600339][ T24] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 974.639012][ T24] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5 [ 974.869762][ T5945] usb 1-1: USB disconnect, device number 97 [ 975.285206][T28586] loop5: detected capacity change from 0 to 1024 [ 975.324141][T28586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 975.363716][T28586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 975.393055][T28586] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 975.451545][ T30] audit: type=1326 audit(1758540414.738:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28589 comm="syz.6.9826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 975.477414][T28586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.519622][ T30] audit: type=1326 audit(1758540414.738:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28589 comm="syz.6.9826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 975.544491][ T30] audit: type=1326 audit(1758540414.738:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28589 comm="syz.6.9826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 975.567266][ T30] audit: type=1326 audit(1758540414.738:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28589 comm="syz.6.9826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 975.591223][ T30] audit: type=1326 audit(1758540414.738:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28589 comm="syz.6.9826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 975.749241][T28560] loop7: detected capacity change from 0 to 32768 [ 975.798042][ T5876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.947597][T28560] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 976.009569][T28560] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 976.100685][T28560] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 976.193106][T28560] OCFS2: File system is now read-only. [ 976.221009][T28560] (syz.7.9811,28560,0):ocfs2_search_chain:1817 ERROR: status = -30 [ 976.240794][T28615] loop0: detected capacity change from 0 to 2048 [ 976.270923][T28560] (syz.7.9811,28560,0):ocfs2_search_chain:1940 ERROR: status = -30 [ 976.307034][T28560] (syz.7.9811,28560,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 976.339806][T28615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 976.357216][T28560] (syz.7.9811,28560,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 976.429572][T28560] (syz.7.9811,28560,0):ocfs2_claim_new_inode:2298 ERROR: status = -30 [ 976.454817][T28630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9843'. [ 976.529704][T28560] (syz.7.9811,28560,0):ocfs2_claim_new_inode:2313 ERROR: status = -30 [ 976.585086][T28560] (syz.7.9811,28560,1):ocfs2_mknod_locked:641 ERROR: status = -30 [ 976.665868][T28560] (syz.7.9811,28560,1):ocfs2_symlink:1956 ERROR: status = -30 [ 976.694742][T13689] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 976.704942][T28560] (syz.7.9811,28560,1):ocfs2_symlink:2080 ERROR: status = -30 [ 976.713209][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.733576][T28637] loop3: detected capacity change from 0 to 1024 [ 976.795574][T28637] EXT4-fs: inline encryption not supported [ 976.801490][T28637] EXT4-fs: Ignoring removed bh option [ 976.873618][T28637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.918982][T13689] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 976.987407][T13689] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.997540][T13689] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 977.038779][T25761] ocfs2: Unmounting device (7,7) on (node local) [ 977.116014][T13689] usb 5-1: config 1 has no interface number 1 [ 977.157949][T13689] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 977.184232][ T5862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.211848][T13689] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 977.265750][T13689] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 977.302734][T13689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.354631][T13689] usb 5-1: Product: syz [ 977.365594][T13689] usb 5-1: Manufacturer: syz [ 977.395638][T13689] usb 5-1: SerialNumber: syz [ 977.691735][T13689] usb 5-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 977.722204][T26281] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 977.726722][ T24] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 977.734529][T13689] usb 5-1: MIDIStreaming interface descriptor not found [ 977.827142][T13689] usb 5-1: USB disconnect, device number 110 [ 977.931266][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 977.931531][T26281] usb 4-1: Using ep0 maxpacket: 16 [ 977.956403][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.965433][T26281] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 977.979930][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 977.990806][T26281] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.990834][T26281] usb 4-1: config 1 has no interface number 0 [ 977.990881][T26281] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 977.990909][T26281] usb 4-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 977.990941][T26281] usb 4-1: config 1 interface 105 has no altsetting 0 [ 977.994648][T26281] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08 [ 978.075036][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.116406][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 978.133440][T26281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.163144][T26281] usb 4-1: Product: syz [ 978.167409][T26281] usb 4-1: Manufacturer: syz [ 978.189447][ T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=0114, bcdDevice=33.c7 [ 978.211310][T26281] usb 4-1: SerialNumber: syz [ 978.216129][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.252945][ T24] usb 6-1: Product: syz [ 978.270933][ T24] usb 6-1: Manufacturer: syz [ 978.288540][ T24] usb 6-1: SerialNumber: syz [ 978.305252][ T24] usb 6-1: config 0 descriptor?? [ 978.356050][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 978.387982][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 978.419157][ T24] keyspan 6-1:0.0: Keyspan - (without firmware) converter detected [ 978.496357][T26281] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 978.718928][T26281] usb 4-1: USB disconnect, device number 116 [ 978.731989][ T5969] usb 6-1: USB disconnect, device number 107 [ 978.772654][T28694] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 978.778651][ T5969] keyspan 6-1:0.0: device disconnected [ 978.974926][T28702] lo speed is unknown, defaulting to 1000 [ 979.488454][T28718] loop0: detected capacity change from 0 to 256 [ 979.537633][T28723] cgroup: none used incorrectly [ 979.684181][T28718] FAT-fs (loop0): Directory bread(block 64) failed [ 979.717523][T28718] FAT-fs (loop0): Directory bread(block 65) failed [ 979.738841][T28718] FAT-fs (loop0): Directory bread(block 66) failed [ 979.752715][T28728] loop3: detected capacity change from 0 to 16 [ 979.782728][T28718] FAT-fs (loop0): Directory bread(block 67) failed [ 979.789401][T28718] FAT-fs (loop0): Directory bread(block 68) failed [ 979.824904][T28728] erofs (device loop3): mounted with root inode @ nid 36. [ 979.833650][T28718] FAT-fs (loop0): Directory bread(block 69) failed [ 979.847583][T28718] FAT-fs (loop0): Directory bread(block 70) failed [ 979.883594][T28718] FAT-fs (loop0): Directory bread(block 71) failed [ 979.914221][T28718] FAT-fs (loop0): Directory bread(block 72) failed [ 979.942602][T28718] FAT-fs (loop0): Directory bread(block 73) failed [ 980.057459][T28726] loop7: detected capacity change from 0 to 4096 [ 980.092378][T28726] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 980.147570][T28726] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 980.190367][T28726] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 980.232293][T28726] ntfs3(loop7): try to read out of volume at offset 0x3fffffc0c00 [ 980.285173][T28726] ntfs3(loop7): try to read out of volume at offset 0x3fffffc1c00 [ 980.316461][T28740] loop6: detected capacity change from 0 to 128 [ 980.341398][T28740] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 980.368003][T28726] ntfs3(loop7): try to read out of volume at offset 0x3fffffc2c00 [ 980.375908][T28726] ntfs3(loop7): try to read out of volume at offset 0x3fffffc4c00 [ 980.415790][T28740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 980.444305][T28726] ntfs3(loop7): try to read out of volume at offset 0x3fffffc8c00 [ 980.478802][T28726] ntfs3(loop7): try to read out of volume at offset 0x3fffffd0c00 [ 980.521945][T28726] ntfs3(loop7): try to read out of volume at offset 0x3fffffe0c00 [ 980.829056][T28755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9902'. [ 980.939844][T28759] loop5: detected capacity change from 0 to 512 [ 981.033398][T28759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.104410][T28759] ext4 filesystem being mounted at /1724/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 981.264706][T28773] loop0: detected capacity change from 0 to 1024 [ 981.311696][T28759] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.9904: corrupted xattr block 33: overlapping e_value [ 981.431602][T28773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.560504][T28773] EXT4-fs error (device loop0): ext4_empty_dir:3109: inode #11: block 38: comm syz.0.9910: Attempting to read directory block (38) that is past i_size (39680) [ 981.609038][ T5876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.622392][T28783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9914'. [ 981.742725][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.284784][T28811] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9927'. [ 982.789385][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9940'. [ 982.848576][ T24] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 982.867507][T28840] loop3: detected capacity change from 0 to 128 [ 982.921315][T28840] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 983.034460][ T24] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 983.056047][ T24] usb 5-1: config 2 interface 0 has no altsetting 0 [ 983.068963][ T24] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 983.104234][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.149992][ T24] usb 5-1: Product: syz [ 983.167427][ T24] usb 5-1: Manufacturer: syz [ 983.191714][ T24] usb 5-1: SerialNumber: syz [ 983.223973][ T24] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 983.253956][ T24] usb 5-1: selecting invalid altsetting 0 [ 983.280731][ T24] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 983.450223][ T24] usb 5-1: USB disconnect, device number 111 [ 983.456347][ T5959] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 983.473704][T28849] loop6: detected capacity change from 0 to 4096 [ 983.580807][T28849] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 983.630632][T28863] loop7: detected capacity change from 0 to 64 [ 983.658664][T28849] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 983.680359][ T5959] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.704280][T28849] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 983.712586][T28863] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 983.728139][ T5959] usb 6-1: config 0 interface 0 has no altsetting 0 [ 983.766071][ T5959] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 983.786684][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.801435][T28849] ntfs3(loop6): ino=1b, mi_enum_attr [ 983.811395][ T5959] usb 6-1: Product: syz [ 983.828092][ T5959] usb 6-1: Manufacturer: syz [ 983.854781][ T5959] usb 6-1: SerialNumber: syz [ 983.885184][ T5959] usb 6-1: config 0 descriptor?? [ 983.927579][ T5959] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 983.968514][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 984.020492][ T5959] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 984.065439][ T5959] usb 6-1: media controller created [ 984.224529][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 984.568675][ T5959] DVB: Unable to find symbol tda10046_attach() [ 984.609371][ T5959] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 984.661949][ T5959] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 984.805146][T28899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9970'. [ 984.929880][ T5959] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 984.984843][ T5959] usb 6-1: USB disconnect, device number 108 [ 985.021464][T28907] netlink: 'syz.6.9974': attribute type 1 has an invalid length. [ 985.035004][T28907] nbd: couldn't find a device at index 20 [ 985.097027][T28903] loop7: detected capacity change from 0 to 256 [ 985.805776][T28936] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 986.289670][T28956] loop7: detected capacity change from 0 to 1024 [ 986.325031][T28956] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 986.355869][T28962] netlink: 88 bytes leftover after parsing attributes in process `syz.6.10000'. [ 986.371238][ T5959] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 986.405475][T28956] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 986.439090][T28956] EXT4-fs (loop7): orphan cleanup on readonly fs [ 986.471828][T28956] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz.7.9998: Invalid inode table block 0 in block_group 0 [ 986.516082][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.536351][T28956] EXT4-fs (loop7): Remounting filesystem read-only [ 986.557104][T28956] Quota error (device loop7): write_blk: dquota write failed [ 986.566754][T28956] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 986.583635][T28956] EXT4-fs (loop7): 1 truncate cleaned up [ 986.614658][T28956] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 986.615510][ T5959] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 986.673460][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.682604][ T5959] usb 4-1: Product: syz [ 986.723721][ T5959] usb 4-1: Manufacturer: syz [ 986.735888][ T5959] usb 4-1: SerialNumber: syz [ 986.751036][ C1] sd 0:0:1:0: [sda] tag#1815 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 986.761556][ C1] sd 0:0:1:0: [sda] tag#1815 CDB: Read(6) 08 00 bc b2 00 00 [ 986.820685][ T5959] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 986.848942][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 987.050137][T25761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.126137][T28983] dummy0: entered promiscuous mode [ 987.170277][T28981] dummy0: left promiscuous mode [ 987.371657][T28988] [U] v3f"S/4:XTzWtlW= [ 987.396284][T28988] [U] J"e:" [ 987.667071][T28994] sctp: [Deprecated]: syz.6.10016 (pid 28994) Use of int in maxseg socket option. [ 987.667071][T28994] Use struct sctp_assoc_value instead [ 988.022415][T29000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10019'. [ 988.334077][ T30] audit: type=1326 audit(1758540426.635:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.6.10023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 988.580019][ T30] audit: type=1326 audit(1758540426.635:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.6.10023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 988.812748][ T30] audit: type=1326 audit(1758540426.672:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.6.10023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 989.013491][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 989.020614][ T24] ath9k_htc: Failed to initialize the device [ 989.073881][ T30] audit: type=1326 audit(1758540426.672:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.6.10023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 989.321651][ T55] usb 4-1: USB disconnect, device number 117 [ 989.337492][ T30] audit: type=1326 audit(1758540426.672:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29007 comm="syz.6.10023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 989.372205][ T55] usb 4-1: ath9k_htc: USB layer deinitialized [ 989.638784][T29039] netlink: 'syz.0.10034': attribute type 21 has an invalid length. [ 989.682948][T29039] netlink: 'syz.0.10034': attribute type 1 has an invalid length. [ 989.686973][T29041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10036'. [ 989.713359][T29039] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10034'. [ 990.397795][ T30] audit: type=1326 audit(1758540428.527:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29071 comm="syz.6.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 990.477900][ T30] audit: type=1326 audit(1758540428.527:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29071 comm="syz.6.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 990.552814][T29074] loop3: detected capacity change from 0 to 512 [ 990.562233][ T30] audit: type=1326 audit(1758540428.555:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29071 comm="syz.6.10051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 990.645075][T29074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.688124][T29074] ext4 filesystem being mounted at /1670/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 990.976867][ T5862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.047715][T29087] loop5: detected capacity change from 0 to 4096 [ 991.208274][T29104] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 991.222047][T29087] ntfs3(loop5): try to read out of volume at offset 0x3fffffc7000 [ 991.248535][T29104] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 991.255968][T29087] ntfs3(loop5): ino=21, The size of extended attributes must not exceed 64KiB [ 991.299239][T29104] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 991.339384][T29104] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 991.379924][T29104] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 991.450247][T29104] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 991.503101][T29104] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 991.512947][T29113] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 991.548434][T29104] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 991.615055][T29104] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 991.621531][T29104] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 991.698057][T29104] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 991.721483][T29104] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 991.755154][T29104] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 991.807935][T29104] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 991.854961][T29104] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 991.891835][T29104] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 991.948432][T29104] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 992.008153][T29104] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 992.053819][T29104] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 992.118573][T29104] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 992.209383][T29104] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 992.257881][T29104] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 992.372734][T29140] loop0: detected capacity change from 0 to 128 [ 992.458601][T29140] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 992.512811][T29140] hpfs: filesystem error: improperly stopped [ 992.518849][T29140] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 992.554791][T29146] loop3: detected capacity change from 0 to 64 [ 992.574714][T29140] hpfs: You really don't want any checks? You are crazy... [ 992.615777][T29140] hpfs: hpfs_map_sector(): read error [ 992.647510][T29140] hpfs: code page support is disabled [ 992.681665][T29140] hpfs: hpfs_map_4sectors(): unaligned read [ 992.722475][T29140] hpfs: hpfs_map_4sectors(): unaligned read [ 992.768257][T29140] hpfs: filesystem error: unable to find root dir [ 993.130645][T29164] loop0: detected capacity change from 0 to 256 [ 993.150934][T29164] exfat: Deprecated parameter 'utf8' [ 993.173663][T29164] exfat: Deprecated parameter 'utf8' [ 993.199822][T29164] exfat: Deprecated parameter 'utf8' [ 993.279281][T29164] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d) [ 993.443542][T29176] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 993.486864][T29176] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 993.682892][T29181] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10102'. [ 993.995235][T29193] netlink: 'syz.0.10108': attribute type 10 has an invalid length. [ 994.026774][T29185] loop4: detected capacity change from 0 to 4096 [ 994.072169][T29193] macvlan0: entered promiscuous mode [ 994.096443][T29193] bond0: (slave macvlan0): Error -22 calling dev_set_mtu [ 994.103020][T29185] ntfs3(loop4): Unsupported bytes per MFT record 8192. [ 994.171226][T29185] ntfs3(loop4): try to read out of volume at offset 0x1ffe00 [ 994.262508][T29197] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10110'. [ 994.305649][T29185] ISOFS: Unable to identify CD-ROM format. [ 994.455602][T29161] loop3: detected capacity change from 0 to 32768 [ 994.562928][T29161] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 994.756442][T29161] XFS (loop3): Ending clean mount [ 994.794433][T29161] XFS (loop3): Quotacheck needed: Please wait. [ 994.815397][T29188] loop7: detected capacity change from 0 to 32768 [ 994.971782][T29188] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 995.046637][T29188] (syz.7.10106,29188,0):ocfs2_mknod:505 ERROR: status = -2 [ 995.059235][T29188] (syz.7.10106,29188,1):ocfs2_mkdir:661 ERROR: status = -2 [ 995.075615][T29161] XFS (loop3): Quotacheck: Done. [ 995.313492][T25761] (syz-executor,25761,1):ocfs2_inode_is_valid_to_delete:928 ERROR: Skipping delete of root inode. [ 995.389528][ T5862] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 995.442420][T25761] ocfs2: Unmounting device (7,7) on (node local) [ 996.058724][T29255] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10135'. [ 996.135961][T29255] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10135'. [ 996.163826][T29255] netlink: 38 bytes leftover after parsing attributes in process `syz.6.10135'. [ 996.498757][T29271] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 [ 996.733789][T29281] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 996.796393][T29281] overlayfs: missing 'lowerdir' [ 996.906456][T29278] loop5: detected capacity change from 0 to 4096 [ 996.978544][T29278] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 997.118330][T29278] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 997.154273][T29278] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 997.285456][T29278] ntfs3(loop5): ino=1b, mi_enum_attr [ 997.449433][T29307] loop4: detected capacity change from 0 to 256 [ 997.486142][T29307] exfat: Deprecated parameter 'utf8' [ 997.518535][ T24] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 997.554142][T29307] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 997.734070][ T24] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 997.758912][ T24] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 997.804401][ T24] usb 4-1: config 220 has no interface number 2 [ 997.829748][ T24] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 997.881402][ T24] usb 4-1: config 220 interface 0 has no altsetting 0 [ 997.897504][T26281] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 997.908813][ T24] usb 4-1: config 220 interface 76 has no altsetting 0 [ 997.919037][T13689] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 997.951983][ T24] usb 4-1: config 220 interface 1 has no altsetting 0 [ 997.971969][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 998.001356][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.028171][ T24] usb 4-1: Product: syz [ 998.043376][ T24] usb 4-1: Manufacturer: syz [ 998.048640][ T24] usb 4-1: SerialNumber: syz [ 998.100186][T26281] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 998.111009][T13689] usb 6-1: Using ep0 maxpacket: 32 [ 998.139181][T13689] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 998.165588][T26281] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.174791][T13689] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 998.187055][T26281] usb 7-1: Product: syz [ 998.187078][T26281] usb 7-1: Manufacturer: syz [ 998.187097][T26281] usb 7-1: SerialNumber: syz [ 998.197540][T26281] usb 7-1: config 0 descriptor?? [ 998.217741][T13689] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 998.232395][T13689] usb 6-1: config 1 has no interface number 0 [ 998.242698][T26281] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 998.258538][T13689] usb 6-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 998.310590][T13689] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 998.317099][ T24] usb 4-1: selecting invalid altsetting 0 [ 998.347535][T13689] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 998.360016][ T24] usb 4-1: selecting invalid altsetting 0 [ 998.389895][ T24] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 998.402020][T13689] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 998.439633][ T24] usb 4-1: No valid video chain found. [ 998.454576][T13689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.490986][ T24] usb 4-1: selecting invalid altsetting 0 [ 998.500087][T13689] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 998.542209][ T24] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 998.582429][T29336] loop0: detected capacity change from 0 to 1024 [ 998.590991][ T24] usb 4-1: USB disconnect, device number 118 [ 998.744675][T26281] usb 7-1: USB disconnect, device number 13 [ 998.755301][T13689] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 998.763792][T13689] snd_usb_pod 6-1:1.1: invalid control EP [ 998.804401][T13689] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 998.830706][T13689] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 998.848368][ T36] hfsplus: b-tree write err: -5, ino 4 [ 998.867045][T13689] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 999.022250][T13689] usb 6-1: USB disconnect, device number 109 [ 999.031420][T29346] IPv6: Can't replace route, no match found [ 999.153319][T29348] loop3: detected capacity change from 0 to 512 [ 999.244256][T29348] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 999.268737][T29348] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 999.279089][T29348] System zones: 0-1, 15-15, 18-18, 34-34 [ 999.285322][T29348] EXT4-fs (loop3): orphan cleanup on readonly fs [ 999.291747][T29348] __quota_error: 2 callbacks suppressed [ 999.291766][T29348] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 999.307826][T29348] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 999.346127][T29348] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 999.367115][T29348] EXT4-fs (loop3): 1 truncate cleaned up [ 999.388910][T29348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 999.486663][T29348] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 999.591673][ T5862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.406473][T29396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10203'. [ 1000.760827][T29412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10209'. [ 1000.980728][T29420] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10214'. [ 1001.018560][T29420] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10214'. [ 1001.067511][T29420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1001.476764][T29440] wireguard0: entered allmulticast mode [ 1001.837091][T29459] loop4: detected capacity change from 0 to 128 [ 1001.909809][T29459] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1001.917650][T29454] loop0: detected capacity change from 0 to 4096 [ 1001.975186][T29459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1002.317851][T29472] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10239'. [ 1002.626481][T29481] usb usb8: check_ctrlrecip: process 29481 (syz.6.10244) requesting ep 01 but needs 81 [ 1002.668465][T29481] usb usb8: usbfs: process 29481 (syz.6.10244) did not claim interface 0 before use [ 1002.725440][T29481] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1002.778125][T29488] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10247'. [ 1003.078627][T29501] loop5: detected capacity change from 0 to 64 [ 1003.163473][T29497] overlayfs: cannot append lower layer [ 1003.479468][T29513] C: renamed from team_slave_0 (while UP) [ 1003.540990][T29515] loop3: detected capacity change from 0 to 2048 [ 1003.559917][T29513] netlink: 'syz.0.10261': attribute type 1 has an invalid length. [ 1003.580884][T29513] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10261'. [ 1003.619609][T29513] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1003.641028][T29519] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10262'. [ 1003.650115][T29519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10262'. [ 1003.677061][T29515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.748021][T29519] netlink: 31 bytes leftover after parsing attributes in process `syz.5.10262'. [ 1003.761881][T29519] netlink: 'syz.5.10262': attribute type 3 has an invalid length. [ 1003.770822][T29519] netlink: 'syz.5.10262': attribute type 2 has an invalid length. [ 1003.787298][T29515] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1003.990537][T29531] netlink: 'syz.6.10266': attribute type 1 has an invalid length. [ 1004.074282][ T5862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.097902][T29538] tmpfs: Bad value for 'mpol' [ 1004.353312][T29544] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1004.506267][T29550] netlink: 'syz.7.10275': attribute type 21 has an invalid length. [ 1004.514350][T29550] netlink: 'syz.7.10275': attribute type 1 has an invalid length. [ 1004.688367][T29558] fuse: Unknown parameter 'smackfsdef' [ 1004.749012][T29560] loop6: detected capacity change from 0 to 256 [ 1004.952571][T29560] FAT-fs (loop6): Directory bread(block 64) failed [ 1004.995123][T29560] FAT-fs (loop6): Directory bread(block 65) failed [ 1005.001807][T29560] FAT-fs (loop6): Directory bread(block 66) failed [ 1005.069675][T29560] FAT-fs (loop6): Directory bread(block 67) failed [ 1005.076339][T29560] FAT-fs (loop6): Directory bread(block 68) failed [ 1005.128663][T29560] FAT-fs (loop6): Directory bread(block 69) failed [ 1005.142656][T29573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1005.164595][T29560] FAT-fs (loop6): Directory bread(block 70) failed [ 1005.192593][T29560] FAT-fs (loop6): Directory bread(block 71) failed [ 1005.222772][T29560] FAT-fs (loop6): Directory bread(block 72) failed [ 1005.244565][T29560] FAT-fs (loop6): Directory bread(block 73) failed [ 1005.409249][T29560] FAT-fs (loop6): Filesystem has been set read-only [ 1006.155022][T29610] loop5: detected capacity change from 0 to 256 [ 1006.166039][ T30] audit: type=1326 audit(1758540443.092:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29611 comm="syz.6.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 1006.240678][T29610] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 1006.261698][ T30] audit: type=1326 audit(1758540443.111:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29611 comm="syz.6.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 1006.285444][ T30] audit: type=1326 audit(1758540443.111:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29611 comm="syz.6.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 1006.308769][ T30] audit: type=1326 audit(1758540443.111:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29611 comm="syz.6.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 1006.333531][ T30] audit: type=1326 audit(1758540443.111:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29611 comm="syz.6.10307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 1006.434520][T29616] bond3: entered allmulticast mode [ 1006.450626][T29623] loop6: detected capacity change from 0 to 512 [ 1006.513171][T29623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.526023][T29623] ext4 filesystem being mounted at /1054/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.534965][T29620] loop4: detected capacity change from 0 to 2048 [ 1006.612632][T29620] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1006.625699][T29629] netlink: 'syz.5.10314': attribute type 1 has an invalid length. [ 1006.688069][T29630] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1006.690688][T15152] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.705966][T29620] syz.4.10310: attempt to access beyond end of device [ 1006.705966][T29620] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1006.898826][T29636] vxcan3: entered promiscuous mode [ 1006.921506][T29636] vxcan3: entered allmulticast mode [ 1007.168349][ T30] audit: type=1326 audit(1758540444.006:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.4.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead578eec9 code=0x7ffc0000 [ 1007.306486][ T30] audit: type=1326 audit(1758540444.006:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.4.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead578eec9 code=0x7ffc0000 [ 1007.370332][ T30] audit: type=1326 audit(1758540444.043:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.4.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fead578eec9 code=0x7ffc0000 [ 1007.399924][ T30] audit: type=1326 audit(1758540444.043:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.4.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead578eec9 code=0x7ffc0000 [ 1007.447605][ T30] audit: type=1326 audit(1758540444.043:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.4.10322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead578eec9 code=0x7ffc0000 [ 1007.470121][ C0] vkms_vblank_simulate: vblank timer overrun [ 1007.568889][T29655] loop7: detected capacity change from 0 to 256 [ 1007.608696][T29655] exfat: Deprecated parameter 'utf8' [ 1007.614061][T29655] exfat: Deprecated parameter 'utf8' [ 1007.673467][T29655] exfat: Deprecated parameter 'utf8' [ 1007.679205][T29655] exfat: Deprecated parameter 'utf8' [ 1007.772707][T29655] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 1008.127073][T29681] tmpfs: Bad value for 'mpol' [ 1008.261390][T29688] __nla_validate_parse: 3 callbacks suppressed [ 1008.261413][T29688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10342'. [ 1008.395686][T26281] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 1008.596630][T26281] usb 6-1: config 1 has an invalid interface number: 236 but max is 1 [ 1008.617183][T26281] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.646646][T26281] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1008.662947][T26281] usb 6-1: config 1 has no interface number 2 [ 1008.689253][T26281] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1008.730923][T26281] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1008.770825][T26281] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1008.780357][T26281] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1008.805085][T26281] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.825603][T26281] usb 6-1: Product: syz [ 1008.843007][T26281] usb 6-1: Manufacturer: syz [ 1008.847602][T26281] usb 6-1: SerialNumber: syz [ 1008.886493][T29684] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1008.906386][T26281] cdc_ncm 6-1:1.0: skipping garbage [ 1008.911591][T26281] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 1008.935994][T26281] cdc_ncm 6-1:1.0: bind() failure [ 1008.965028][T26281] cdc_ncm 6-1:1.236: CDC Union missing and no IAD found [ 1009.004950][T26281] cdc_ncm 6-1:1.236: bind() failure [ 1009.438187][T26281] usb 6-1: USB disconnect, device number 110 [ 1009.575262][T29686] loop7: detected capacity change from 0 to 32768 [ 1009.651236][T29686] [ 1009.651236][T29686] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1009.651236][T29686] [ 1009.695013][T29731] netlink: 'syz.0.10361': attribute type 1 has an invalid length. [ 1009.729899][T29731] netlink: 'syz.0.10361': attribute type 3 has an invalid length. [ 1009.741874][T29686] ERROR: (device loop7): ea_get: invalid ea.flag [ 1009.741874][T29686] [ 1009.765527][T29731] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10361'. [ 1009.828627][T29686] ERROR: (device loop7): remounting filesystem as read-only [ 1011.174199][T29736] loop4: detected capacity change from 0 to 32768 [ 1011.214286][T29736] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.10365 (29736) [ 1011.290847][T29736] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1011.306655][T29736] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 1011.544422][T29736] BTRFS info (device loop4): enabling ssd optimizations [ 1011.594773][T29736] BTRFS info (device loop4): enabling free space tree [ 1011.613947][T29801] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1011.860686][ T5860] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1012.290038][T29817] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1012.357846][T29820] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 1012.358547][T29822] loop4: detected capacity change from 0 to 512 [ 1012.576953][T29765] loop7: detected capacity change from 0 to 32768 [ 1012.586501][T29822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.654754][T29765] XFS: attr2 mount option is deprecated. [ 1012.679932][T29829] netlink: 'syz.3.10400': attribute type 10 has an invalid length. [ 1012.697537][T29822] ext4 filesystem being mounted at /1717/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.755573][T29829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.762943][T29829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.785582][T29829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.786862][T29765] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1012.792810][T29829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.808813][T29829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.816036][T29829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.873810][T29829] bridge0: entered promiscuous mode [ 1012.880587][T29829] team0: Port device bridge0 added [ 1013.012425][T29765] XFS (loop7): Ending clean mount [ 1013.071425][T29765] XFS (loop7): Quotacheck needed: Please wait. [ 1013.150478][ T5860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.265625][T29765] XFS (loop7): Quotacheck: Done. [ 1013.310027][T29850] loop4: detected capacity change from 0 to 256 [ 1013.494682][T29850] FAT-fs (loop4): Directory bread(block 64) failed [ 1013.546744][T29850] FAT-fs (loop4): Directory bread(block 65) failed [ 1013.601243][T29850] FAT-fs (loop4): Directory bread(block 66) failed [ 1013.650517][T29850] FAT-fs (loop4): Directory bread(block 67) failed [ 1013.657170][T29850] FAT-fs (loop4): Directory bread(block 68) failed [ 1013.692098][T29850] FAT-fs (loop4): Directory bread(block 69) failed [ 1013.748717][T29850] FAT-fs (loop4): Directory bread(block 70) failed [ 1013.766793][T25761] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1013.780331][T29850] FAT-fs (loop4): Directory bread(block 71) failed [ 1013.832602][T29850] FAT-fs (loop4): Directory bread(block 72) failed [ 1013.871342][T29850] FAT-fs (loop4): Directory bread(block 73) failed [ 1014.312950][T29869] loop5: detected capacity change from 0 to 16 [ 1014.395039][T29869] erofs (device loop5): mounted with root inode @ nid 36. [ 1014.445230][T29872] loop0: detected capacity change from 0 to 256 [ 1014.467407][T29869] erofs (device loop5): corrupted dir block 0 @ nid 36 [ 1014.521965][T29872] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1015.041454][T29859] loop3: detected capacity change from 0 to 32768 [ 1015.131136][T29859] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.10411 (29859) [ 1015.232053][T29859] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1015.242354][T29859] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1015.338447][T29901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10432'. [ 1015.365373][T29908] loop0: detected capacity change from 0 to 512 [ 1015.544902][T29908] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1015.588150][T29908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 1015.617013][T29859] BTRFS info (device loop3): enabling ssd optimizations [ 1015.655475][T29859] BTRFS info (device loop3): enabling free space tree [ 1015.692596][T29908] System zones: 1-12 [ 1015.711516][T29908] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1015.734087][T29928] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1015.798998][T29928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.811088][T29908] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.10428: invalid indirect mapped block 12 (level 1) [ 1015.916649][ T5862] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1015.963762][T29908] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.10428: invalid indirect mapped block 2 (level 2) [ 1016.074462][T29908] EXT4-fs (loop0): 1 truncate cleaned up [ 1016.188892][T29908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 1016.365327][T29942] loop4: detected capacity change from 0 to 2048 [ 1016.472908][T29942] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1016.476883][T29948] loop5: detected capacity change from 0 to 128 [ 1016.499740][T25763] Bluetooth: hci2: command 0x0406 tx timeout [ 1016.588806][T29948] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1016.718502][T29948] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1016.761674][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1016.823631][T29948] ext4 filesystem being mounted at /1804/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.837165][T29956] netlink: 'syz.4.10448': attribute type 2 has an invalid length. [ 1017.111147][T29960] loop3: detected capacity change from 0 to 512 [ 1017.175521][ T5876] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1017.177185][T29960] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1017.953565][T29989] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10465'. [ 1018.036006][T29991] netlink: 'syz.7.10466': attribute type 16 has an invalid length. [ 1018.077672][T29991] netlink: 'syz.7.10466': attribute type 17 has an invalid length. [ 1019.058618][T30036] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10487'. [ 1019.256269][T30041] loop3: detected capacity change from 0 to 256 [ 1019.311822][T30041] exfat: Deprecated parameter 'namecase' [ 1019.370265][T30041] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1019.506812][T30046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10492'. [ 1019.604492][T30046] netlink: 660 bytes leftover after parsing attributes in process `syz.0.10492'. [ 1019.677200][T30049] bond1: entered promiscuous mode [ 1019.704429][T30049] bond1: entered allmulticast mode [ 1019.758505][T30049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1020.154647][T30034] loop6: detected capacity change from 0 to 32768 [ 1020.216117][T30034] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10486 (30034) [ 1020.297077][T30034] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1020.317192][T30065] loop5: detected capacity change from 0 to 4096 [ 1020.366837][T30065] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1020.375699][T30034] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 1020.542127][T30034] BTRFS info (device loop6): enabling ssd optimizations [ 1020.614315][T30090] loop7: detected capacity change from 0 to 1024 [ 1020.649339][T30034] BTRFS info (device loop6): enabling free space tree [ 1020.736368][T30090] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1020.941466][T15152] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1021.009068][T30101] netlink: 'syz.5.10511': attribute type 1 has an invalid length. [ 1021.691537][T30117] kernel profiling enabled (shift: 9) [ 1021.960654][ T5945] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1022.019471][T30130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1022.144331][ T5945] usb 4-1: Using ep0 maxpacket: 8 [ 1022.184798][ T5945] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1022.211233][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.266703][ T5945] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1022.273799][ T5945] pvrusb2: ********** [ 1022.315614][ T5945] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1022.364954][ T5945] pvrusb2: Important functionality might not be entirely working. [ 1022.435028][ T5945] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1022.458492][ T5945] pvrusb2: ********** [ 1022.512198][ T2343] pvrusb2: Invalid write control endpoint [ 1022.562279][T30141] loop7: detected capacity change from 0 to 512 [ 1022.770628][T30107] loop5: detected capacity change from 0 to 32768 [ 1022.778793][T30141] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.10531: corrupted in-inode xattr: invalid ea_ino [ 1022.795988][ T5945] usb 4-1: USB disconnect, device number 119 [ 1022.860724][ T2343] pvrusb2: Invalid write control endpoint [ 1022.868285][T30141] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.10531: couldn't read orphan inode 15 (err -117) [ 1022.880787][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1022.906825][T30107] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1022.918975][T30141] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1022.974904][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1023.016584][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1023.095446][T30107] XFS (loop5): Ending clean mount [ 1023.097639][ T2343] pvrusb2: Device being rendered inoperable [ 1023.103548][T30107] XFS (loop5): Quotacheck needed: Please wait. [ 1023.119398][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1023.128089][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1023.140822][T30159] loop4: detected capacity change from 0 to 8192 [ 1023.213868][T25761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.243209][T30107] XFS (loop5): Quotacheck: Done. [ 1023.313264][T30159] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1023.333294][ T2343] pvrusb2: Attached sub-driver cx25840 [ 1023.398461][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1023.418413][T30159] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 1023.427774][T30159] FAT-fs (loop4): Filesystem has been set read-only [ 1023.455467][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1023.583922][ T5876] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1023.964476][ T5945] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 1024.060112][T30144] loop6: detected capacity change from 0 to 32768 [ 1024.153471][T30144] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1024.181799][ T5945] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1024.230068][ T5945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.276384][ T5945] usb 4-1: config 0 has no interface number 0 [ 1024.309741][T30144] XFS (loop6): Ending clean mount [ 1024.340684][T30144] XFS (loop6): Quotacheck needed: Please wait. [ 1024.356344][ T5945] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1024.409068][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.448289][ T5945] usb 4-1: Product: syz [ 1024.460307][T30144] XFS (loop6): Quotacheck: Done. [ 1024.474175][ T5945] usb 4-1: Manufacturer: syz [ 1024.483593][ T5945] usb 4-1: SerialNumber: syz [ 1024.536971][ T5945] usb 4-1: config 0 descriptor?? [ 1024.704943][T15152] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1024.820062][ T5945] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1024.884227][ T5945] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 1024.922034][ T5945] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1024.941246][ T5945] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1024.990149][ T5945] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1025.054176][ T5945] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1025.102452][ T5945] usb 4-1: USB disconnect, device number 120 [ 1025.168139][ T5945] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1025.221750][ T5945] keyspan 4-1:0.133: device disconnected [ 1025.273174][T30222] loop4: detected capacity change from 0 to 16 [ 1025.348416][T30222] erofs (device loop4): mounted with root inode @ nid 36. [ 1025.426502][T30222] erofs (device loop4): corrupted dir block 8200 @ nid 36 [ 1025.861934][T30234] loop3: detected capacity change from 0 to 4096 [ 1025.871428][T30241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10570'. [ 1025.892560][T30234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1025.935829][T30243] netlink: 'syz.0.10571': attribute type 1 has an invalid length. [ 1025.973507][T30234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1026.003856][T30234] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1026.063319][T30234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.240151][T30234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1026.247660][T30234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1026.342209][T30234] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1026.361517][T30257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.470465][T30253] loop4: detected capacity change from 0 to 4096 [ 1026.549210][ T5862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.169942][T30231] loop6: detected capacity change from 0 to 32768 [ 1027.213793][T30231] XFS: noikeep mount option is deprecated. [ 1027.280678][T30231] XFS: ikeep mount option is deprecated. [ 1027.417617][T30231] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 1027.441583][T30231] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1027.530868][T30295] loop3: detected capacity change from 0 to 16 [ 1027.649572][T30295] erofs (device loop3): mounted with root inode @ nid 36. [ 1027.687828][T30295] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1027.743067][T30295] erofs (device loop3): read error -117 @ 43 of nid 36 [ 1027.754092][T30231] XFS (loop6): Ending clean mount [ 1027.798171][T30231] XFS (loop6): Quotacheck needed: Please wait. [ 1027.961272][T30231] XFS (loop6): Quotacheck: Done. [ 1028.131740][T15152] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1029.274426][T30355] loop6: detected capacity change from 0 to 256 [ 1029.337067][T30358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10619'. [ 1029.368559][T30355] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1029.380779][T30358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10619'. [ 1029.634786][T30363] bond4: entered promiscuous mode [ 1029.640445][T30363] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1029.737277][T30336] loop5: detected capacity change from 0 to 32768 [ 1029.865818][T30336] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1029.928575][T30336] XFS (loop5): Ending clean mount [ 1029.953064][T30336] XFS (loop5): Quotacheck needed: Please wait. [ 1029.966742][T26281] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 1030.150001][T30336] XFS (loop5): Quotacheck: Done. [ 1030.175694][T26281] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1030.184865][T26281] usb 4-1: config 64 has an invalid interface number: 227 but max is 0 [ 1030.242655][T26281] usb 4-1: config 64 has no interface number 0 [ 1030.264535][T26281] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0x4 is Bulk; changing to Interrupt [ 1030.284153][T26281] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0xC has an invalid bInterval 226, changing to 4 [ 1030.297056][T26281] usb 4-1: config 64 interface 227 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 0 [ 1030.308700][T26281] usb 4-1: config 64 interface 227 has no altsetting 0 [ 1030.339986][T26281] usb 4-1: string descriptor 0 read error: -22 [ 1030.400100][T26281] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=cc.bf [ 1030.409185][T26281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.464793][T30369] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1030.509904][T26281] imon_raw 4-1:64.227: IR endpoint missing [ 1030.555731][ T5876] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1030.778578][T26281] usb 4-1: USB disconnect, device number 121 [ 1030.847646][T30405] loop6: detected capacity change from 0 to 128 [ 1030.879570][T30405] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1030.919361][T30405] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1031.191235][T30405] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 1031.359711][T15152] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1031.660502][T30432] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10648'. [ 1031.973105][T30443] usb usb1: usbfs: process 30443 (syz.3.10657) did not claim interface 0 before use [ 1032.265323][T30454] netlink: 'syz.3.10663': attribute type 3 has an invalid length. [ 1032.296219][T30454] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10663'. [ 1032.335730][T30458] loop4: detected capacity change from 0 to 256 [ 1032.405306][T30458] exfat: Deprecated parameter 'namecase' [ 1032.411194][T30458] exfat: Deprecated parameter 'utf8' [ 1032.467504][T30459] loop7: detected capacity change from 0 to 4096 [ 1032.524792][ T5945] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1032.551766][T30458] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1032.707754][T30459] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1032.756432][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1032.779937][ T5945] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1032.853310][T30459] ntfs3(loop7): ino=1f, "file2" attr_set_size [ 1032.863918][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1032.935228][ T5945] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1032.983223][ T5945] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1032.997360][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.078781][ T5945] usb 6-1: config 0 descriptor?? [ 1033.113800][T25761] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22. [ 1033.151524][T30480] loop0: detected capacity change from 0 to 16 [ 1033.194216][T30480] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1033.204582][T30484] loop3: detected capacity change from 0 to 256 [ 1033.303006][T30484] FAT-fs (loop3): Directory bread(block 64) failed [ 1033.337728][ T5945] hdpvr 6-1:0.0: firmware version 0x1e dated [ 1033.348615][T30484] FAT-fs (loop3): Directory bread(block 65) failed [ 1033.355226][T30484] FAT-fs (loop3): Directory bread(block 66) failed [ 1033.362122][T30487] netlink: 'syz.4.10680': attribute type 2 has an invalid length. [ 1033.379833][T30484] FAT-fs (loop3): Directory bread(block 67) failed [ 1033.389825][T30484] FAT-fs (loop3): Directory bread(block 68) failed [ 1033.439141][T30484] FAT-fs (loop3): Directory bread(block 69) failed [ 1033.462902][T30487] : entered promiscuous mode [ 1033.472615][T30484] FAT-fs (loop3): Directory bread(block 70) failed [ 1033.531125][T30484] FAT-fs (loop3): Directory bread(block 71) failed [ 1033.537799][T30484] FAT-fs (loop3): Directory bread(block 72) failed [ 1033.548764][ T5945] hdpvr 6-1:0.0: device init failed [ 1033.564800][ T5945] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1033.581415][T30484] FAT-fs (loop3): Directory bread(block 73) failed [ 1033.604396][T30492] netlink: 'syz.0.10682': attribute type 30 has an invalid length. [ 1033.630354][ T5945] usb 6-1: USB disconnect, device number 111 [ 1033.768317][ T30] audit: type=1800 audit(1758540468.558:1606): pid=30484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10677" name="file7" dev="loop3" ino=1048719 res=0 errno=0 [ 1033.914642][T30500] loop0: detected capacity change from 0 to 64 [ 1034.066542][T30505] loop4: detected capacity change from 0 to 1024 [ 1034.100126][T30505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1034.160128][T30505] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1034.217902][T30505] EXT4-fs (loop4): stripe (3675) is not aligned with cluster size (16), stripe is disabled [ 1034.330923][T30505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1034.470242][ T5860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.647287][ T974] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1034.841990][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 1034.859409][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1034.909347][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1034.942962][ T974] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1035.004469][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1035.061643][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1035.135164][ T974] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1035.159510][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.177885][ T974] usb 4-1: Product: syz [ 1035.200157][ T974] usb 4-1: Manufacturer: syz [ 1035.204793][ T974] usb 4-1: SerialNumber: syz [ 1035.250392][ T974] usb 4-1: config 0 descriptor?? [ 1035.283205][ T974] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input64 [ 1035.551070][T30559] loop7: detected capacity change from 0 to 512 [ 1035.587234][ T24] usb 4-1: USB disconnect, device number 122 [ 1035.598817][T30559] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1035.759217][T30559] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.10714: invalid indirect mapped block 83886080 (level 1) [ 1035.871260][T30559] EXT4-fs (loop7): Remounting filesystem read-only [ 1035.905969][T30559] EXT4-fs (loop7): 1 orphan inode deleted [ 1035.911753][T30559] EXT4-fs (loop7): 1 truncate cleaned up [ 1035.954549][T30559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.181187][T25761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.216054][T30558] loop0: detected capacity change from 0 to 16384 [ 1036.726246][T30558] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=xxhash,erasure_code,grpquota,prjquota,norecovery,reconstruct_alloc,version_upgrade=none,nocow [ 1036.726282][T30558] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1036.853367][T30606] loop7: detected capacity change from 0 to 256 [ 1036.959115][T30558] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 1036.967277][T30606] FAT-fs (loop7): Directory bread(block 64) failed [ 1036.967314][T30606] FAT-fs (loop7): Directory bread(block 65) failed [ 1036.967404][T30606] FAT-fs (loop7): Directory bread(block 66) failed [ 1036.967433][T30606] FAT-fs (loop7): Directory bread(block 67) failed [ 1036.967524][T30606] FAT-fs (loop7): Directory bread(block 68) failed [ 1036.967553][T30606] FAT-fs (loop7): Directory bread(block 69) failed [ 1036.967640][T30606] FAT-fs (loop7): Directory bread(block 70) failed [ 1036.967670][T30606] FAT-fs (loop7): Directory bread(block 71) failed [ 1036.967759][T30606] FAT-fs (loop7): Directory bread(block 72) failed [ 1037.037318][T30558] bcachefs (loop0): invalid journal entry, version=1.13: inode_has_child_snapshots type=clock in superblock: bad size, fixing [ 1037.095285][T30606] FAT-fs (loop7): Directory bread(block 73) failed [ 1037.208873][T30558] bcachefs (loop0): recovering from clean shutdown, journal seq 18 [ 1037.263699][T30558] bcachefs (loop0): dropping and reconstructing all alloc info [ 1037.447174][T30558] bcachefs (loop0): accounting_read... [ 1037.448972][T30620] loop3: detected capacity change from 0 to 8 [ 1037.494657][T30620] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1037.503265][T30558] done [ 1037.511618][T30558] bcachefs (loop0): alloc_read... done [ 1037.539935][T30620] SQUASHFS error: Failed to read block 0x9b: -5 [ 1037.546395][T30558] bcachefs (loop0): snapshots_read... done [ 1037.584397][T30558] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 1037.593766][T30558] bcachefs (loop0): reading quotas [ 1037.594001][T30620] SQUASHFS error: Unable to read metadata cache entry [99] [ 1037.594026][T30620] SQUASHFS error: Unable to read inode 0x104 [ 1037.676097][T30558] bcachefs (loop0): quotas done [ 1037.709290][T30558] bcachefs (loop0): done starting filesystem [ 1037.735310][T30626] netlink: 'syz.5.10744': attribute type 1 has an invalid length. [ 1037.788997][T30626] netlink: 'syz.5.10744': attribute type 2 has an invalid length. [ 1037.802651][T30580] loop6: detected capacity change from 0 to 32768 [ 1037.886242][T30629] netlink: 'syz.7.10745': attribute type 7 has an invalid length. [ 1037.894675][T30580] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 1037.920779][ T5945] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1037.938311][T30629] netlink: 'syz.7.10745': attribute type 8 has an invalid length. [ 1037.960578][T30629] netlink: 'syz.7.10745': attribute type 9 has an invalid length. [ 1037.971122][T30580] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1038.105935][T30580] ocfs2: Unmounting device (7,6) on (node local) [ 1038.125663][ T5858] bcachefs (loop0): shutting down [ 1038.183216][ T5945] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1038.192299][ T5945] usb 4-1: config 0 has no interface number 0 [ 1038.198425][ T5945] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1038.263130][ T5945] usb 4-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0x6D, changing to 0xD [ 1038.335179][ T5945] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0xD has invalid maxpacket 14309, setting to 64 [ 1038.351481][ T5945] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1038.354315][ T5858] bcachefs (loop0): shutdown complete [ 1038.367390][ T5945] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1038.381845][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.381959][T30637] loop5: detected capacity change from 0 to 4096 [ 1038.416570][ T5945] usb 4-1: Product: syz [ 1038.449913][ T5945] usb 4-1: Manufacturer: syz [ 1038.460403][ T5945] usb 4-1: SerialNumber: syz [ 1038.470783][T30637] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1038.503750][ T5945] usb 4-1: config 0 descriptor?? [ 1038.548829][T30620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1038.556143][T30620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1038.688976][T30641] loop4: detected capacity change from 0 to 8192 [ 1038.700967][T30637] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1038.720751][T30637] ntfs3(loop5): Failed to load $Extend (-22). [ 1038.731544][T30637] ntfs3(loop5): Failed to initialize $Extend. [ 1038.776681][T30641] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1038.824758][ T5945] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1038.874212][ T5945] usb 4-1: invalid MIDI in EP 0 [ 1039.033637][ T5945] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1039.119556][ T5945] usb 4-1: USB disconnect, device number 123 [ 1039.233165][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1039.659574][ T30] audit: type=1800 audit(1758540474.004:1607): pid=30655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.10759" name="/newroot/1123/file0" dev="tmpfs" ino=5745 res=0 errno=0 [ 1040.096803][T13689] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1040.280943][T13689] usb 5-1: Using ep0 maxpacket: 32 [ 1040.296827][T13689] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1040.328890][T30690] loop7: detected capacity change from 0 to 512 [ 1040.328991][T13689] usb 5-1: config 0 has no interface number 0 [ 1040.364524][T30687] loop3: detected capacity change from 0 to 2048 [ 1040.374519][T13689] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1040.399385][T13689] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1040.413997][T13689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.422452][T13689] usb 5-1: Product: syz [ 1040.426612][T13689] usb 5-1: Manufacturer: syz [ 1040.431191][T13689] usb 5-1: SerialNumber: syz [ 1040.441052][T13689] usb 5-1: config 0 descriptor?? [ 1040.461188][T13689] smsc75xx v1.0.0 [ 1040.461410][T30690] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.464836][T13689] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1040.491851][T13689] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1040.512395][T30690] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.514652][T30687] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1040.567824][T30687] UDF-fs: Scanning with blocksize 512 failed [ 1040.621772][T30687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1040.770372][T25761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.030080][ T24] usb 5-1: USB disconnect, device number 112 [ 1041.092990][T30711] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.10781'. [ 1041.404384][T30723] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠rXY (pid: 30723 comm: syz.7.10789) [ 1041.447716][ T30] audit: type=1800 audit(1758540475.656:1608): pid=30723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10789" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0727F185805599819 dev="mqueue" ino=85405 res=0 errno=0 [ 1041.932973][T30740] netlink: 172 bytes leftover after parsing attributes in process `syz.7.10797'. [ 1041.992611][T30740] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10797'. [ 1042.001668][T30740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10797'. [ 1042.209138][T30749] loop0: detected capacity change from 0 to 1024 [ 1043.271337][T30787] netlink: 'syz.3.10820': attribute type 7 has an invalid length. [ 1043.279192][T30787] netlink: 'syz.3.10820': attribute type 8 has an invalid length. [ 1043.352448][T30793] netlink: 'syz.0.10822': attribute type 41 has an invalid length. [ 1043.780853][T30763] loop6: detected capacity change from 0 to 32768 [ 1043.811845][T30807] loop7: detected capacity change from 0 to 256 [ 1043.872233][T30763] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 1043.997433][T30763] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1044.178241][T30821] loop5: detected capacity change from 0 to 16 [ 1044.221366][T30821] erofs (device loop5): mounted with root inode @ nid 36. [ 1044.327915][T15152] ocfs2: Unmounting device (7,6) on (node local) [ 1044.402507][T30828] netlink: 'syz.3.10841': attribute type 11 has an invalid length. [ 1044.892122][ T30] audit: type=1107 audit(1758540478.822:1609): pid=30845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1045.416565][T30864] loop7: detected capacity change from 0 to 1024 [ 1045.425136][T30867] loop4: detected capacity change from 0 to 764 [ 1045.447589][T30861] loop5: detected capacity change from 0 to 4096 [ 1045.461090][T30867] rock: directory entry would overflow storage [ 1045.478168][T30864] hfsplus: extend alloc file! (8192,327680,366) [ 1045.499932][T30867] rock: sig=0x4654, size=5, remaining=4 [ 1046.997573][T30876] loop6: detected capacity change from 0 to 32768 [ 1047.090734][T30876] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1047.136235][T30932] netlink: 'syz.3.10888': attribute type 15 has an invalid length. [ 1047.185052][T30932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10888'. [ 1047.457912][T30876] XFS (loop6): Ending clean mount [ 1047.570183][T30946] loop4: detected capacity change from 0 to 256 [ 1047.751705][T15152] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1047.821958][T30955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10898'. [ 1048.547891][T30980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10901'. [ 1048.857136][T30988] loop3: detected capacity change from 0 to 2048 [ 1048.975880][T30988] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1049.219235][T31005] loop6: detected capacity change from 0 to 512 [ 1049.226762][T31007] netlink: 'syz.5.10924': attribute type 1 has an invalid length. [ 1049.283092][T31007] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10924'. [ 1049.389191][T31005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.475241][T31022] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10930'. [ 1049.485063][T31005] ext4 filesystem being mounted at /1143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1049.561359][T31005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.728333][T31030] netlink: 'syz.4.10933': attribute type 4 has an invalid length. [ 1050.007889][T31041] loop5: detected capacity change from 0 to 164 [ 1050.030026][T31042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10938'. [ 1050.056094][T31041] Unsupported NM flag settings (8) [ 1050.328143][T31056] loop5: detected capacity change from 0 to 8 [ 1050.398207][T31056] SQUASHFS error: Failed to read block 0x34e: -5 [ 1050.433021][T31056] SQUASHFS error: Unable to read metadata cache entry [34c] [ 1050.514544][ T30] audit: type=1800 audit(1758540484.018:1610): pid=31056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10947" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 1050.814400][T31072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.904014][T31075] loop6: detected capacity change from 0 to 4096 [ 1051.269616][T31082] loop0: detected capacity change from 0 to 1024 [ 1051.276948][T31082] EXT4-fs: Ignoring removed bh option [ 1051.366161][T31082] EXT4-fs: inline encryption not supported [ 1051.409706][T31082] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1051.579531][T31082] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.10960: lblock 2 mapped to illegal pblock 2 (length 1) [ 1051.695142][T31082] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1051.727797][T31082] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.10960: lblock 0 mapped to illegal pblock 48 (length 1) [ 1051.806927][T31082] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1051.864533][T31082] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.10960: Failed to acquire dquot type 0 [ 1051.916247][T31082] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1051.931784][T31106] loop6: detected capacity change from 0 to 1024 [ 1051.981067][T31082] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.10960: mark_inode_dirty error [ 1052.051395][T31104] loop7: detected capacity change from 0 to 4096 [ 1052.066624][T31082] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1052.089509][T31082] EXT4-fs (loop0): 1 orphan inode deleted [ 1052.111352][T31104] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 1052.131679][T31082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.153193][ T1150] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 1052.174904][T31112] loop3: detected capacity change from 0 to 1024 [ 1052.193588][T31104] ntfs3(loop7): ino=3, mi_enum_attr [ 1052.217785][ T1150] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1052.230430][T31116] loop5: detected capacity change from 0 to 256 [ 1052.263162][ T1150] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 1052.314205][T31082] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.10960: Invalid inode table block 1 in block_group 0 [ 1052.314979][T31112] hfsplus: xattr searching failed [ 1052.371395][T31116] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1052.396997][T31082] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1052.622545][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.643320][ T1150] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 1052.656496][ T13] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1052.710492][ T1150] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1052.774730][ T1150] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 1052.803791][ T5858] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1052.845284][ T5858] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1052.919615][ T5858] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 1052.963492][T31130] loop4: detected capacity change from 0 to 128 [ 1053.027710][T31130] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1053.085710][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.149260][T31130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1053.390235][ T55] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1053.442123][T31147] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10992'. [ 1053.601777][ T55] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1053.628611][ T55] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1053.671865][ T55] usb 4-1: config 220 has an invalid descriptor of length 184, skipping remainder of the config [ 1053.715181][ T55] usb 4-1: config 220 has no interface number 2 [ 1053.750000][ T55] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1053.813605][ T55] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1053.848518][ T55] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1053.887549][ T55] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1053.914146][ T55] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1053.942798][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.961926][ T55] usb 4-1: Product: syz [ 1053.972857][ T55] usb 4-1: Manufacturer: syz [ 1053.983998][ T55] usb 4-1: SerialNumber: syz [ 1054.176877][T31171] loop6: detected capacity change from 0 to 128 [ 1054.196227][T31169] ALSA: mixer_oss: invalid OSS volume '' [ 1054.279848][ T55] usb 4-1: selecting invalid altsetting 0 [ 1054.314479][ T55] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1054.366082][ T55] usb 4-1: No valid video chain found. [ 1054.402822][ T55] usb 4-1: selecting invalid altsetting 0 [ 1054.411349][ T55] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1054.436431][ T55] usb 4-1: USB disconnect, device number 124 [ 1054.946052][T31181] loop5: detected capacity change from 0 to 4096 [ 1054.983407][T31158] loop0: detected capacity change from 0 to 32768 [ 1054.990968][ T30] audit: type=1326 audit(1758540488.153:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31186 comm="syz.6.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 1055.116607][ T30] audit: type=1326 audit(1758540488.199:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31186 comm="syz.6.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 1055.248837][T31161] loop7: detected capacity change from 0 to 32768 [ 1055.264585][ T30] audit: type=1326 audit(1758540488.199:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31186 comm="syz.6.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 1055.304203][T31161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.10998 (31161) [ 1055.399146][ T30] audit: type=1326 audit(1758540488.199:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31186 comm="syz.6.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 1055.529952][T31161] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1055.546270][ T30] audit: type=1326 audit(1758540488.199:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31186 comm="syz.6.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7feebc58eec9 code=0x7ffc0000 [ 1055.596434][T31161] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1055.774287][T31210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11020'. [ 1055.961627][T31161] BTRFS info (device loop7): enabling ssd optimizations [ 1055.991461][T31161] BTRFS info (device loop7): enabling free space tree [ 1056.204009][T25761] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1056.218220][T31232] netlink: 'syz.4.11026': attribute type 21 has an invalid length. [ 1056.439023][T31238] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11030'. [ 1056.478164][T31238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11030'. [ 1056.523985][T31238] netlink: 'syz.3.11030': attribute type 1 has an invalid length. [ 1056.642136][T31245] loop6: detected capacity change from 0 to 2048 [ 1056.694938][T31245] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1056.757096][T31248] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1056.770502][T31245] syz.6.11033: attempt to access beyond end of device [ 1056.770502][T31245] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1056.945532][T31245] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 16777227 [ 1056.956023][T31253] loop4: detected capacity change from 0 to 1764 [ 1057.028036][T31245] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1057.084791][T31245] Remounting filesystem read-only [ 1057.103573][T31245] NILFS (loop6): error -5 truncating bmap (ino=16) [ 1057.227101][T31256] loop3: detected capacity change from 0 to 1024 [ 1057.370181][T15152] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 1057.679350][T31269] loop5: detected capacity change from 0 to 256 [ 1057.757997][T31269] FAT-fs (loop5): Directory bread(block 64) failed [ 1057.764563][T31269] FAT-fs (loop5): Directory bread(block 65) failed [ 1057.842161][T31269] FAT-fs (loop5): Directory bread(block 66) failed [ 1057.869622][T31269] FAT-fs (loop5): Directory bread(block 67) failed [ 1057.903070][T31269] FAT-fs (loop5): Directory bread(block 68) failed [ 1057.940782][T31269] FAT-fs (loop5): Directory bread(block 69) failed [ 1057.947402][T31269] FAT-fs (loop5): Directory bread(block 70) failed [ 1057.965011][T31269] FAT-fs (loop5): Directory bread(block 71) failed [ 1057.967995][T31246] loop7: detected capacity change from 0 to 32768 [ 1057.971601][T31269] FAT-fs (loop5): Directory bread(block 72) failed [ 1058.016943][T31269] FAT-fs (loop5): Directory bread(block 73) failed [ 1058.158746][ T974] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1058.184851][ T55] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1058.321332][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1058.321362][ T30] audit: type=1326 audit(1758540491.236:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31282 comm="syz.5.11051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b02d8eec9 code=0x0 [ 1058.375189][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 1058.394070][ T974] usb 5-1: Using ep0 maxpacket: 8 [ 1058.401661][ T974] usb 5-1: config 0 has an invalid interface number: 150 but max is 0 [ 1058.407997][ T55] usb 7-1: config 0 has an invalid interface number: 111 but max is 0 [ 1058.433651][ T974] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1058.461784][ T55] usb 7-1: config 0 has no interface number 0 [ 1058.479454][ T974] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.494055][T31285] tmpfs: Bad value for 'mpol' [ 1058.497085][ T55] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1058.529814][ T974] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1058.529977][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.550900][T31287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11053'. [ 1058.572016][ T974] usb 5-1: config 0 has no interface number 0 [ 1058.578663][ T974] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1058.590704][ T55] usb 7-1: Product: syz [ 1058.595763][ T55] usb 7-1: Manufacturer: syz [ 1058.600351][ T55] usb 7-1: SerialNumber: syz [ 1058.669119][ T974] usb 5-1: config 0 interface 150 has no altsetting 0 [ 1058.678951][ T974] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 1058.684176][ T55] usb 7-1: config 0 descriptor?? [ 1058.720730][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.751785][ T974] usb 5-1: config 0 descriptor?? [ 1059.015485][ T55] snd-usb-6fire 7-1:0.111: unknown device firmware state received from device: [ 1059.050625][ T55] 67 eb 04 ea 69 e8 4d 89 [ 1059.072924][ T55] snd-usb-6fire 7-1:0.111: probe with driver snd-usb-6fire failed with error -5 [ 1059.244391][T31301] netlink: 'syz.0.11060': attribute type 1 has an invalid length. [ 1059.295914][ T974] usb 5-1: USB disconnect, device number 113 [ 1059.371320][ T55] usb 7-1: USB disconnect, device number 14 [ 1059.527129][T31279] loop7: detected capacity change from 0 to 32768 [ 1059.621002][T31279] ERROR: (device loop7): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 1059.621002][T31279] [ 1059.689076][T31279] ERROR: (device loop7): remounting filesystem as read-only [ 1059.742885][T31279] ERROR: (device loop7): jfs_unlink: [ 1059.742885][T31279] [ 1059.749590][T31309] loop0: detected capacity change from 0 to 256 [ 1059.842816][T31309] FAT-fs (loop0): Directory bread(block 64) failed [ 1059.880000][T31309] FAT-fs (loop0): Directory bread(block 65) failed [ 1059.892044][T31309] FAT-fs (loop0): Directory bread(block 66) failed [ 1059.898590][T31309] FAT-fs (loop0): Directory bread(block 67) failed [ 1059.956569][T25761] ERROR: (device loop7): xtTruncate: xt_getpage: xtree page corrupt [ 1059.956569][T25761] [ 1059.977604][T31309] FAT-fs (loop0): Directory bread(block 68) failed [ 1060.000648][T31309] FAT-fs (loop0): Directory bread(block 69) failed [ 1060.042540][T31309] FAT-fs (loop0): Directory bread(block 70) failed [ 1060.049113][T31309] FAT-fs (loop0): Directory bread(block 71) failed [ 1060.128468][T31309] FAT-fs (loop0): Directory bread(block 72) failed [ 1060.184064][T31309] FAT-fs (loop0): Directory bread(block 73) failed [ 1060.456454][T31324] loop4: detected capacity change from 0 to 512 [ 1060.539755][T31324] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1060.800544][ T5860] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1061.861397][T31385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11100'. [ 1061.870540][T31381] loop4: detected capacity change from 0 to 1024 [ 1061.885972][T31381] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1061.933153][T31385] netlink: 336 bytes leftover after parsing attributes in process `syz.7.11100'. [ 1061.962834][T31387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11101'. [ 1062.013237][T31381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.299179][ T5860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.507674][T31408] loop0: detected capacity change from 0 to 2048 [ 1062.598046][T31408] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1062.693662][T31419] loop7: detected capacity change from 0 to 512 [ 1062.719671][T31419] EXT4-fs: Ignoring removed oldalloc option [ 1062.725762][T31420] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1062.825353][T31419] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.11116: Parent and EA inode have the same ino 15 [ 1062.935323][T31419] EXT4-fs (loop7): 1 orphan inode deleted [ 1062.970979][T31419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.161475][T31433] loop6: detected capacity change from 0 to 128 [ 1063.248706][T31433] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1063.324311][T25761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.340009][T31436] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1063.357435][T31433] ext4 filesystem being mounted at /1176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.535756][T31433] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.11122: No space for directory leaf checksum. Please run e2fsck -D. [ 1063.666636][T31433] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.11122: checksumming directory block 0 [ 1063.725519][T31443] loop4: detected capacity change from 0 to 1764 [ 1063.903395][T31409] loop3: detected capacity change from 0 to 32768 [ 1063.947239][T31409] (syz.3.11113,31409,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1063.980210][T15152] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1064.016061][T31409] (syz.3.11113,31409,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1064.201549][T31409] (syz.3.11113,31409,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1064.252975][T31409] JBD2: Ignoring recovery information on journal [ 1064.485760][T31409] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1064.578119][T31463] loop4: detected capacity change from 0 to 4096 [ 1064.620566][T31463] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1064.663323][T31473] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1064.680001][T31463] ntfs3(loop4): ino=3, mi_enum_attr [ 1064.721088][T31473] overlayfs: missing 'lowerdir' [ 1064.818372][T31463] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1064.860482][T31463] ntfs3(loop4): ino=1f, "file2" failed to open parent directory r=5 to update [ 1064.875551][ T5862] ocfs2: Unmounting device (7,3) on (node local) [ 1065.047408][ T36] ntfs3(loop4): ino=1f, failed to open parent directory r=5 to update [ 1065.418483][T31495] loop6: detected capacity change from 0 to 1024 [ 1065.569069][T31495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.705912][T31495] EXT4-fs error (device loop6): ext4_xattr_set_entry:1660: inode #16: comm syz.6.11152: corrupted xattr entries [ 1065.757739][T31495] EXT4-fs (loop6): Remounting filesystem read-only [ 1065.896881][T15152] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.072934][T31512] loop7: detected capacity change from 0 to 256 [ 1066.108120][T31512] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1066.163560][T31512] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1066.189373][T31493] loop4: detected capacity change from 0 to 32768 [ 1066.215486][T31512] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1066.322413][T31493] JBD2: Ignoring recovery information on journal [ 1066.540124][T31493] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1066.540456][T31518] loop0: detected capacity change from 0 to 4096 [ 1066.670893][T31518] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1066.677348][T31493] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 1066.679968][T31493] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1066.754952][T31493] OCFS2: File system is now read-only. [ 1066.776557][T31493] (syz.4.11148,31493,1):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 1066.785876][T31493] (syz.4.11148,31493,1):ocfs2_mknod:337 ERROR: status = -117 [ 1066.798549][T31484] loop5: detected capacity change from 0 to 32768 [ 1066.858691][T31518] ntfs3(loop0): ino=19, mi_enum_attr [ 1066.879850][T31493] (syz.4.11148,31493,1):ocfs2_mknod:505 ERROR: status = -117 [ 1066.900485][T31518] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1066.924996][T31493] (syz.4.11148,31493,1):ocfs2_create:678 ERROR: status = -117 [ 1067.018256][T31518] ntfs3(loop0): failed to convert "c46c" to iso8859-14 [ 1067.078251][T31518] ntfs3(loop0): ino=20, mi_enum_attr [ 1067.261496][ T5860] ocfs2: Unmounting device (7,4) on (node local) [ 1067.652124][T31548] loop6: detected capacity change from 0 to 16 [ 1067.839688][T31555] loop7: detected capacity change from 0 to 256 [ 1067.887026][T31555] exfat: Deprecated parameter 'namecase' [ 1068.033780][T31555] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1068.174274][T31562] loop5: detected capacity change from 0 to 16 [ 1068.209266][T31562] erofs (device loop5): mounted with root inode @ nid 36. [ 1068.283224][T31562] syz.5.11183: attempt to access beyond end of device [ 1068.283224][T31562] loop5: rw=0, sector=48, nr_sectors = 16 limit=16 [ 1068.369215][T31562] erofs (device loop5): read error -5 @ 43 of nid 36 [ 1068.402243][T31568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11186'. [ 1068.507368][T31548] erofs (device loop6): mounted with root inode @ nid 36. [ 1068.766624][T31578] loop3: detected capacity change from 0 to 1764 [ 1068.977630][T31588] netlink: 1284 bytes leftover after parsing attributes in process `syz.7.11196'. [ 1069.164873][ T974] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1069.352516][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 1069.391845][ T974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1069.402434][ T974] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 1069.425099][ T974] usb 4-1: config 13 has no interface number 0 [ 1069.431341][ T974] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1069.496510][ T974] usb 4-1: config 13 interface 50 has no altsetting 0 [ 1069.524449][ T974] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1069.541600][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.583013][ T974] usb 4-1: Product: syz [ 1069.601626][ T974] usb 4-1: Manufacturer: syz [ 1069.620046][ T974] usb 4-1: SerialNumber: syz [ 1069.652796][T31578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1069.763593][T31612] loop7: detected capacity change from 0 to 2048 [ 1069.815047][ T5945] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1069.874904][T31616] netlink: 212 bytes leftover after parsing attributes in process `syz.6.11209'. [ 1069.929148][T31616] netlink: 'syz.6.11209': attribute type 1 has an invalid length. [ 1069.963826][T31612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.978569][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 1069.999803][ T974] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1070.006810][ T974] usb 4-1: MIDIStreaming interface descriptor not found [ 1070.031718][ T5945] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.094451][ T5945] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1070.170324][ T5945] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 253, changing to 11 [ 1070.207446][ T974] usb 4-1: USB disconnect, device number 125 [ 1070.223447][ T5945] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 58047, setting to 1024 [ 1070.229677][T31627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11212'. [ 1070.272313][ T5945] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1070.288399][T25761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.369092][ T5945] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1070.400325][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.442844][ T5945] usb 6-1: Product: syz [ 1070.465279][ T5945] usb 6-1: Manufacturer: syz [ 1070.469900][ T5945] usb 6-1: SerialNumber: syz [ 1070.512810][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1070.662136][ T5945] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input67 [ 1070.833691][ T5945] imon:send_packet: packet tx failed (-71) [ 1070.912670][ T5945] imon 6-1:155.0: panel buttons/knobs setup failed [ 1070.919442][ T5945] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1070.995938][T31641] vivid-000: disconnect [ 1071.003286][ T5945] (id 0x00) [ 1071.028278][T31640] vivid-000: reconnect [ 1071.365605][ T5945] rc_core: IR keymap rc-imon-pad not found [ 1071.371636][ T5945] Registered IR keymap rc-empty [ 1071.412088][T31654] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.11225'. [ 1071.454940][T31656] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11227'. [ 1071.463371][ T5945] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1071.517211][ T5945] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1071.594868][ T5945] imon:send_packet: packet tx failed (-71) [ 1071.617441][ T5945] imon 6-1:155.0: remote input dev register failed [ 1071.646287][ T5945] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 1071.727238][T31653] loop0: detected capacity change from 0 to 4096 [ 1071.830209][T31653] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1072.043139][ T5945] imon 6-1:155.0: unable to initialize intf0, err 0 [ 1072.090227][ T5945] imon:imon_probe: failed to initialize context! [ 1072.096607][ T5945] imon 6-1:155.0: unable to register, err -19 [ 1072.195595][ T5945] usb 6-1: USB disconnect, device number 112 [ 1072.496618][T31678] loop3: detected capacity change from 0 to 4096 [ 1072.706996][T31689] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1072.774581][T31678] NILFS error (device loop3): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 1072.833980][T31678] Remounting filesystem read-only [ 1073.250567][T31695] loop7: detected capacity change from 0 to 4096 [ 1073.298338][T31662] loop5: detected capacity change from 0 to 32768 [ 1073.347886][T31662] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11230 (31662) [ 1073.465333][T31662] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1073.520298][T31662] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 1073.540603][T31712] loop0: detected capacity change from 0 to 256 [ 1073.709343][T31712] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1073.795902][T31662] BTRFS info (device loop5): enabling ssd optimizations [ 1073.834563][T31662] BTRFS info (device loop5): enabling free space tree [ 1074.148058][T31744] netlink: 'syz.4.11262': attribute type 1 has an invalid length. [ 1074.269112][T31746] netlink: 'syz.7.11263': attribute type 1 has an invalid length. [ 1074.428767][ T5876] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1074.648593][T31752] loop6: detected capacity change from 0 to 4096 [ 1074.656486][T31752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1074.808517][T31752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.905545][T31767] loop7: detected capacity change from 0 to 512 [ 1074.972426][T31752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1074.991630][T31767] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1075.039382][T31752] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 1075.134234][T31767] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 1075.179447][T31767] System zones: 0-2, 18-18, 34-34 [ 1075.269512][T31767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.329583][T31767] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1075.382751][ T5881] Bluetooth: hci5: unexpected cc 0x0809 length: 31 > 4 [ 1075.389759][ T5881] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 1075.428955][T15152] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.649526][T31755] loop4: detected capacity change from 0 to 32768 [ 1075.663555][T25761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.819315][T31755] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 1076.117915][ T5860] ocfs2: Unmounting device (7,4) on (node local) [ 1076.453266][T31797] loop0: detected capacity change from 0 to 4096 [ 1076.502779][T31797] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1076.728584][T31797] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 1076.983169][ T64] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 1077.049770][ T5858] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 1077.079914][ T5858] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1077.154368][ T5858] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 1077.205304][ T13] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 1077.364662][T31836] netlink: 'syz.0.11300': attribute type 2 has an invalid length. [ 1077.398149][T31839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11306'. [ 1077.485558][ T55] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1077.698008][ T55] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1077.719979][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.782807][ T55] usb 5-1: config 0 descriptor?? [ 1077.806493][ T55] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1077.938009][T31815] loop7: detected capacity change from 0 to 32768 [ 1078.090606][T31849] loop5: detected capacity change from 0 to 4096 [ 1078.119077][T31849] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1078.142585][T31857] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11315'. [ 1078.188429][T31857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11315'. [ 1078.224056][T31860] loop0: detected capacity change from 0 to 256 [ 1078.230935][ T55] gspca_spca508: reg_read err -71 [ 1078.240196][T31857] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11315'. [ 1078.247619][ T55] gspca_spca508: reg_read err -71 [ 1078.250210][T31849] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1078.284794][ T55] gspca_spca508: reg_read err -71 [ 1078.308956][ T55] gspca_spca508: reg_read err -71 [ 1078.310011][T31849] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 1078.336095][ T55] gspca_spca508: reg write: error -71 [ 1078.351395][ T55] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 1078.439314][ T55] usb 5-1: USB disconnect, device number 114 [ 1078.456888][T31849] ntfs3(loop5): ino=1b, mi_enum_attr [ 1079.142226][T31889] netlink: 'syz.3.11330': attribute type 30 has an invalid length. [ 1079.349475][T31893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1079.624831][T31905] loop4: detected capacity change from 0 to 1024 [ 1079.693277][T31915] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11342'. [ 1080.476013][T13689] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1080.587067][T31948] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11357'. [ 1080.676108][T13689] usb 6-1: Using ep0 maxpacket: 32 [ 1080.726903][T13689] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1080.750077][T13689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.784706][T13689] usb 6-1: config 0 descriptor?? [ 1080.810074][T13689] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1080.925065][T31963] loop0: detected capacity change from 0 to 512 [ 1081.014657][T31963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1081.115778][T31963] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.11365: Unimplemented hash flags: 0x0001 [ 1081.202160][T31963] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.11365: Corrupt directory, running e2fsck is recommended [ 1081.255988][T13689] gspca_sq930x: ucbus_write failed -71 [ 1081.289105][T13689] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 1081.332503][T13689] usb 6-1: USB disconnect, device number 113 [ 1081.435569][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.866041][T31996] loop0: detected capacity change from 0 to 64 [ 1081.956344][T31996] Trying to free block not in datazone [ 1082.054387][T32000] loop5: detected capacity change from 0 to 1024 [ 1082.082800][T32000] EXT4-fs: Ignoring removed oldalloc option [ 1082.124889][T32000] EXT4-fs: Ignoring removed orlov option [ 1082.130686][T32000] EXT4-fs: Ignoring removed oldalloc option [ 1082.141938][T32000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1082.179829][T32004] can0: slcan on ttyS3. [ 1082.207210][T32000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.303440][T32000] EXT4-fs error (device loop5): ext4_xattr_set_entry:1660: inode #13: comm syz.5.11383: corrupted xattr entries [ 1082.461668][T32003] can0 (unregistered): slcan off ttyS3. [ 1082.470197][ T5876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.936330][T32035] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1083.086662][T32043] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11399'. [ 1083.146602][T32046] CIFS mount error: No usable UNC path provided in device string! [ 1083.146602][T32046] [ 1083.168921][T32035] bond7: entered allmulticast mode [ 1083.206081][T32046] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1083.208609][T32035] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1083.260257][ T5945] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1083.463190][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 1083.481943][ T5945] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 1083.512320][ T5945] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.548828][ T5945] usb 6-1: config 6 has no interface number 0 [ 1083.567052][T32060] netlink: 'syz.6.11404': attribute type 1 has an invalid length. [ 1083.597895][ T5945] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1083.645284][T32060] netlink: 1 bytes leftover after parsing attributes in process `syz.6.11404'. [ 1083.650010][ T5945] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1083.724545][ T5945] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1083.788982][ T5945] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1083.848122][ T5945] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1083.877214][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.922761][ T5945] usb 6-1: Product: syz [ 1083.926963][ T5945] usb 6-1: Manufacturer: syz [ 1083.954904][ T5945] usb 6-1: SerialNumber: syz [ 1083.986214][T32075] loop6: detected capacity change from 0 to 16 [ 1083.991349][ T5945] hso 6-1:6.2: Failed to find BULK IN ep [ 1084.013577][T32075] erofs (device loop6): mounted with root inode @ nid 36. [ 1084.028538][ T30] audit: type=1326 audit(1758540514.957:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.7.11412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eaf98eec9 code=0x7ffc0000 [ 1084.147202][ T30] audit: type=1326 audit(1758540514.985:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.7.11412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7eaf98d710 code=0x7ffc0000 [ 1084.281668][ T30] audit: type=1326 audit(1758540514.985:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.7.11412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eaf98eacb code=0x7ffc0000 [ 1084.281736][ T30] audit: type=1326 audit(1758540514.985:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.7.11412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eaf98eacb code=0x7ffc0000 [ 1084.281787][ T30] audit: type=1326 audit(1758540515.040:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.7.11412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eaf98eacb code=0x7ffc0000 [ 1084.281838][ T30] audit: type=1326 audit(1758540515.040:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32073 comm="syz.7.11412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eaf98eacb code=0x7ffc0000 [ 1084.287132][ T5945] usb 6-1: USB disconnect, device number 114 [ 1084.806864][T32101] loop0: detected capacity change from 0 to 512 [ 1084.823940][T32101] EXT4-fs: Ignoring removed orlov option [ 1084.837690][T32101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1084.863374][T32101] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1084.885211][T32101] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11421: bg 0: block 248: padding at end of block bitmap is not set [ 1084.893070][T32101] Quota error (device loop0): write_blk: dquota write failed [ 1084.893169][T32101] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1084.893212][T32101] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.11421: Failed to acquire dquot type 1 [ 1084.942984][T32101] EXT4-fs (loop0): 1 truncate cleaned up [ 1085.019474][T32101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1085.154903][T32101] EXT4-fs: Ignoring removed orlov option [ 1085.187818][T32101] EXT4-fs: can't change dax mount option while remounting [ 1085.216073][T32112] loop5: detected capacity change from 0 to 1764 [ 1085.410268][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.020435][T32143] loop0: detected capacity change from 0 to 64 [ 1086.181647][T32150] loop5: detected capacity change from 0 to 256 [ 1086.274294][T32150] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1086.463027][T32154] loop0: detected capacity change from 0 to 256 [ 1086.769951][T32163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11446'. [ 1086.927593][T32165] netlink: 1 bytes leftover after parsing attributes in process `syz.0.11447'. [ 1086.993606][T32165] netlink: 1 bytes leftover after parsing attributes in process `syz.0.11447'. [ 1087.050767][T32171] loop4: detected capacity change from 0 to 47 [ 1087.120804][T32132] loop6: detected capacity change from 0 to 32768 [ 1087.187625][T32132] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1087.483255][T32132] XFS (loop6): Ending clean mount [ 1087.561122][T32132] XFS (loop6): Quotacheck needed: Please wait. [ 1087.801601][T32132] XFS (loop6): Quotacheck: Done. [ 1087.892907][T32206] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11462'. [ 1088.106773][T15152] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1088.160303][T32217] netlink: 'syz.0.11468': attribute type 7 has an invalid length. [ 1088.280608][T32217] : entered promiscuous mode [ 1088.419903][T32222] loop7: detected capacity change from 0 to 64 [ 1088.535275][T32222] hfs: request for non-existent node -117440513 in B*Tree [ 1088.572249][T32222] hfs: request for non-existent node -117440513 in B*Tree [ 1088.999593][T32240] loop6: detected capacity change from 0 to 256 [ 1089.175721][T32240] FAT-fs (loop6): Directory bread(block 64) failed [ 1089.182310][T32240] FAT-fs (loop6): Directory bread(block 65) failed [ 1089.236914][T32240] FAT-fs (loop6): Directory bread(block 66) failed [ 1089.255399][T32240] FAT-fs (loop6): Directory bread(block 67) failed [ 1089.270624][T32240] FAT-fs (loop6): Directory bread(block 68) failed [ 1089.296699][T32240] FAT-fs (loop6): Directory bread(block 69) failed [ 1089.311270][T32240] FAT-fs (loop6): Directory bread(block 70) failed [ 1089.321180][T32240] FAT-fs (loop6): Directory bread(block 71) failed [ 1089.345648][T32240] FAT-fs (loop6): Directory bread(block 72) failed [ 1089.352830][T32240] FAT-fs (loop6): Directory bread(block 73) failed [ 1089.844198][T32228] loop3: detected capacity change from 0 to 32768 [ 1089.901122][T32228] (syz.3.11473,32228,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1089.979850][T32228] (syz.3.11473,32228,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1090.044475][T32262] Invalid option length (0) for dns_resolver key [ 1090.104484][T32228] JBD2: Ignoring recovery information on journal [ 1090.232725][T32228] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1090.319021][T32243] loop4: detected capacity change from 0 to 32768 [ 1090.371761][T32243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.11480 (32243) [ 1090.467371][T32243] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1090.530815][T32243] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 1090.649246][T32244] loop7: detected capacity change from 0 to 32768 [ 1090.756596][T32244] [ 1090.756596][T32244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1090.756596][T32244] [ 1090.807227][T32243] BTRFS info (device loop4): enabling ssd optimizations [ 1090.822877][T32243] BTRFS info (device loop4): enabling free space tree [ 1090.830098][T32296] loop0: detected capacity change from 0 to 128 [ 1090.840603][ T5862] ocfs2: Unmounting device (7,3) on (node local) [ 1090.851940][T32244] ERROR: (device loop7): diWrite: ixpxd invalid [ 1090.851940][T32244] [ 1090.896339][T32296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1090.927332][T32244] ERROR: (device loop7): txCommit: [ 1090.927332][T32244] [ 1090.984663][T32296] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1091.008088][T32300] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11501'. [ 1091.017157][T32300] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11501'. [ 1091.091767][T32296] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1091.189064][ T5860] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1091.207024][T32296] ext4 filesystem being mounted at /1938/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1091.277503][T25761] [ 1091.277503][T25761] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1091.277503][T25761] [ 1091.297069][T25761] [ 1091.297069][T25761] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1091.297069][T25761] [ 1091.555680][ T5858] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1091.894253][T32320] cgroup: name respecified [ 1092.946620][T32352] netlink: 'syz.5.11524': attribute type 1 has an invalid length. [ 1092.965622][T32352] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.11524'. [ 1093.321645][T32324] loop7: detected capacity change from 0 to 32768 [ 1093.338112][T32324] bcachefs (/dev/loop7): error validating superblock: Invalid option shard_inode_numbers_bits: too big (max 8) [ 1093.364209][T32324] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big [ 1093.864042][T32346] loop3: detected capacity change from 0 to 32768 [ 1093.933199][T32346] (syz.3.11521,32346,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1093.986955][T32346] (syz.3.11521,32346,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1094.101012][T32346] JBD2: Ignoring recovery information on journal [ 1094.318664][T32346] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1094.419869][T32346] [ 1094.422234][T32346] ====================================================== [ 1094.429247][T32346] WARNING: possible circular locking dependency detected [ 1094.436260][T32346] syzkaller #0 Not tainted [ 1094.440673][T32346] ------------------------------------------------------ [ 1094.447682][T32346] syz.3.11521/32346 is trying to acquire lock: [ 1094.453823][T32346] ffff88805356df40 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_xattr_set+0xadd/0x11f0 [ 1094.466216][T32346] [ 1094.466216][T32346] but task is already holding lock: [ 1094.473575][T32346] ffff8880753eeab8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0 [ 1094.483080][T32346] [ 1094.483080][T32346] which lock already depends on the new lock. [ 1094.483080][T32346] [ 1094.493485][T32346] [ 1094.493485][T32346] the existing dependency chain (in reverse order) is: [ 1094.502484][T32346] [ 1094.502484][T32346] -> #2 (&oi->ip_xattr_sem){++++}-{4:4}: [ 1094.510315][T32346] lock_acquire+0x120/0x360 [ 1094.515357][T32346] down_read+0x46/0x2e0 [ 1094.520029][T32346] ocfs2_init_acl+0x2f9/0x720 [ 1094.525225][T32346] ocfs2_mknod+0x1321/0x2050 [ 1094.530325][T32346] vfs_mknod+0x37f/0x3c0 [ 1094.535082][T32346] do_mknodat+0x385/0x4d0 [ 1094.539921][T32346] __x64_sys_mknod+0x8c/0xa0 [ 1094.545029][T32346] do_syscall_64+0xfa/0x3b0 [ 1094.550045][T32346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.556446][T32346] [ 1094.556446][T32346] -> #1 (jbd2_handle){++++}-{0:0}: [ 1094.563746][T32346] lock_acquire+0x120/0x360 [ 1094.568773][T32346] jbd2_journal_lock_updates+0xaa/0x360 [ 1094.574838][T32346] __ocfs2_flush_truncate_log+0x2ba/0x10e0 [ 1094.581160][T32346] ocfs2_truncate_log_shutdown+0x141/0x2f0 [ 1094.587489][T32346] ocfs2_dismount_volume+0x209/0x8d0 [ 1094.593341][T32346] generic_shutdown_super+0x135/0x2c0 [ 1094.599241][T32346] kill_block_super+0x44/0x90 [ 1094.604439][T32346] deactivate_locked_super+0xbc/0x130 [ 1094.610325][T32346] cleanup_mnt+0x425/0x4c0 [ 1094.615250][T32346] task_work_run+0x1d4/0x260 [ 1094.620359][T32346] exit_to_user_mode_loop+0xec/0x110 [ 1094.626159][T32346] do_syscall_64+0x2bd/0x3b0 [ 1094.631261][T32346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.637668][T32346] [ 1094.637668][T32346] -> #0 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}: [ 1094.648354][T32346] validate_chain+0xb9b/0x2140 [ 1094.653624][T32346] __lock_acquire+0xab9/0xd20 [ 1094.658818][T32346] lock_acquire+0x120/0x360 [ 1094.663838][T32346] down_write+0x96/0x1f0 [ 1094.668591][T32346] ocfs2_xattr_set+0xadd/0x11f0 [ 1094.673955][T32346] __vfs_setxattr+0x43c/0x480 [ 1094.679150][T32346] __vfs_setxattr_noperm+0x12d/0x660 [ 1094.684953][T32346] vfs_setxattr+0x16b/0x2f0 [ 1094.689973][T32346] file_setxattr+0x1da/0x2b0 [ 1094.695065][T32346] path_setxattrat+0x327/0x3a0 [ 1094.700342][T32346] __x64_sys_fsetxattr+0xbc/0xe0 [ 1094.705785][T32346] do_syscall_64+0xfa/0x3b0 [ 1094.710802][T32346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.717219][T32346] [ 1094.717219][T32346] other info that might help us debug this: [ 1094.717219][T32346] [ 1094.727430][T32346] Chain exists of: [ 1094.727430][T32346] &ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem [ 1094.727430][T32346] [ 1094.743339][T32346] Possible unsafe locking scenario: [ 1094.743339][T32346] [ 1094.750773][T32346] CPU0 CPU1 [ 1094.756130][T32346] ---- ---- [ 1094.761478][T32346] lock(&oi->ip_xattr_sem); [ 1094.766061][T32346] lock(jbd2_handle); [ 1094.772644][T32346] lock(&oi->ip_xattr_sem); [ 1094.779744][T32346] lock(&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]); [ 1094.787194][T32346] [ 1094.787194][T32346] *** DEADLOCK *** [ 1094.787194][T32346] [ 1094.795320][T32346] 3 locks held by syz.3.11521/32346: [ 1094.800584][T32346] #0: ffff888050366428 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write_file+0x60/0x200 [ 1094.810355][T32346] #1: ffff8880753eed80 (&type->i_mutex_dir_key#24){++++}-{4:4}, at: vfs_setxattr+0x144/0x2f0 [ 1094.820648][T32346] #2: ffff8880753eeab8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0 [ 1094.830582][T32346] [ 1094.830582][T32346] stack backtrace: [ 1094.836451][T32346] CPU: 0 UID: 0 PID: 32346 Comm: syz.3.11521 Not tainted syzkaller #0 PREEMPT(full) [ 1094.836476][T32346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1094.836490][T32346] Call Trace: [ 1094.836500][T32346] [ 1094.836509][T32346] dump_stack_lvl+0x189/0x250 [ 1094.836540][T32346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1094.836567][T32346] ? __pfx__printk+0x10/0x10 [ 1094.836598][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.836624][T32346] ? print_lock_name+0xde/0x100 [ 1094.836655][T32346] print_circular_bug+0x2ee/0x310 [ 1094.836682][T32346] check_noncircular+0x134/0x160 [ 1094.836709][T32346] validate_chain+0xb9b/0x2140 [ 1094.836732][T32346] ? kasan_save_track+0x4f/0x80 [ 1094.836762][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.836787][T32346] ? __lock_acquire+0xab9/0xd20 [ 1094.836818][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.836843][T32346] ? look_up_lock_class+0x74/0x170 [ 1094.836867][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.836892][T32346] ? register_lock_class+0x51/0x320 [ 1094.836926][T32346] __lock_acquire+0xab9/0xd20 [ 1094.836961][T32346] ? ocfs2_xattr_set+0xadd/0x11f0 [ 1094.836990][T32346] lock_acquire+0x120/0x360 [ 1094.837021][T32346] ? ocfs2_xattr_set+0xadd/0x11f0 [ 1094.837052][T32346] ? ocfs2_xattr_block_find+0x153/0x4c0 [ 1094.837085][T32346] down_write+0x96/0x1f0 [ 1094.837112][T32346] ? ocfs2_xattr_set+0xadd/0x11f0 [ 1094.837140][T32346] ? __pfx_down_write+0x10/0x10 [ 1094.837165][T32346] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 1094.837195][T32346] ? ocfs2_xattr_set+0x334/0x11f0 [ 1094.837226][T32346] ocfs2_xattr_set+0xadd/0x11f0 [ 1094.837267][T32346] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 1094.837310][T32346] ? __lock_acquire+0xab9/0xd20 [ 1094.837345][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.837369][T32346] ? look_up_lock_class+0x74/0x170 [ 1094.837392][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.837417][T32346] ? register_lock_class+0x51/0x320 [ 1094.837450][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.837476][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.837500][T32346] ? posix_xattr_acl+0x93/0xc0 [ 1094.837530][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.837555][T32346] ? evm_protect_xattr+0x4d4/0xa90 [ 1094.837583][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.837610][T32346] ? __pfx_evm_protect_xattr+0x10/0x10 [ 1094.837637][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.837663][T32346] ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10 [ 1094.837694][T32346] __vfs_setxattr+0x43c/0x480 [ 1094.837732][T32346] __vfs_setxattr_noperm+0x12d/0x660 [ 1094.837769][T32346] vfs_setxattr+0x16b/0x2f0 [ 1094.837800][T32346] ? mnt_get_write_access+0x68/0x2a0 [ 1094.837827][T32346] ? __pfx_vfs_setxattr+0x10/0x10 [ 1094.837860][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.837885][T32346] ? mnt_want_write_file+0x172/0x200 [ 1094.837911][T32346] file_setxattr+0x1da/0x2b0 [ 1094.837933][T32346] path_setxattrat+0x327/0x3a0 [ 1094.837963][T32346] ? __pfx_path_setxattrat+0x10/0x10 [ 1094.838001][T32346] ? do_futex+0x333/0x420 [ 1094.838044][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.838069][T32346] ? rcu_is_watching+0x15/0xb0 [ 1094.838094][T32346] __x64_sys_fsetxattr+0xbc/0xe0 [ 1094.838117][T32346] do_syscall_64+0xfa/0x3b0 [ 1094.838141][T32346] ? lockdep_hardirqs_on+0x9c/0x150 [ 1094.838162][T32346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.838183][T32346] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1094.838208][T32346] ? exc_page_fault+0x9f/0xf0 [ 1094.838230][T32346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.838251][T32346] RIP: 0033:0x7f37a7f8eec9 [ 1094.838271][T32346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.838290][T32346] RSP: 002b:00007f37a8d85038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1094.838317][T32346] RAX: ffffffffffffffda RBX: 00007f37a81e5fa0 RCX: 00007f37a7f8eec9 [ 1094.838333][T32346] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1094.838347][T32346] RBP: 00007f37a8011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1094.838362][T32346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.838375][T32346] R13: 00007f37a81e6038 R14: 00007f37a81e5fa0 R15: 00007fff428edf68 [ 1094.838400][T32346] [ 1095.284491][T32393] loop5: detected capacity change from 0 to 512 [ 1095.396017][T32393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 1095.412480][T32393] System zones: 1-12 [ 1095.418217][T32393] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.11543: Directory hole found for htree index block 0 [ 1095.421623][ T5862] ocfs2: Unmounting device (7,3) on (node local) [ 1095.433879][T32393] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 1095.496634][T32393] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.11543: Directory hole found for htree index block 0 [ 1095.517237][T32393] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1095.527333][T32393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.571031][ T5876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.