last executing test programs: 3m10.326623009s ago: executing program 0 (id=8003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 3m10.063707614s ago: executing program 0 (id=8008): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "5787bf81b98cc4a0222ec99008bc425c9df5304b9f3073b319afc7cbcb1068a2", "310fc62ad78d8296bcff744c205c42608193da5ba12ea145e0f4dc7c70b0dbd5", "61771aeff517dcab1cf522f6b6f17becb3ca7f1ae4fc2981a4cdf4f284cdd48d", "0bd5e32d54b14c371601b3704c14053e4341e499445b693bdaa880b9ad025903", "871c0649dc04c429f5d2327cf65188d113b47a750431dc0897052a2d5255843b", "4b80c31b89acc9a83f537d25", 0x8a5, 0x6ea, 0x6, 0x5d, 0x7}}) 3m9.804718868s ago: executing program 0 (id=8013): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8], [0x10000], [0x7]], '\x00', [{0xffff}, {0x0, 0xfffffffb}, {}, {0x4, 0x80000000}, {0x3, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x800}, {0x0, 0xfffffffe}], '\x00', 0x1000}) 3m9.607393791s ago: executing program 0 (id=8015): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 3m9.231779567s ago: executing program 0 (id=8020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x800) 3m8.822550663s ago: executing program 0 (id=8024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@dellinkprop={0x88, 0x2e, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x68}]}, 0x88}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 3m8.444144829s ago: executing program 32 (id=8024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@dellinkprop={0x88, 0x2e, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x68}]}, 0x88}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 2.556223008s ago: executing program 4 (id=10625): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x40}]}}}]}, 0x3c}}, 0x0) 2.234522713s ago: executing program 4 (id=10631): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x2f08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x50) 2.101906806s ago: executing program 5 (id=10633): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000280)={0x80, 0x8, 0x0, 0x80}) 2.025518387s ago: executing program 4 (id=10636): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0505405, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x1, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 1.861041209s ago: executing program 4 (id=10638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000400}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="a314472a3ebf07662bb26a717f3b", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.82610347s ago: executing program 5 (id=10640): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x18, 0x0, 0x404, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.669771223s ago: executing program 4 (id=10643): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 1.537398565s ago: executing program 5 (id=10645): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000020000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x29}, 0x10) 1.458248296s ago: executing program 4 (id=10647): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)={0x6, 0x7, 0x0, 0x7}) 1.390379267s ago: executing program 3 (id=10649): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'trylock', ' ', 'io+mem'}, 0xf) 1.293799149s ago: executing program 5 (id=10650): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r0, 0x0, 0x3) 1.293395609s ago: executing program 1 (id=10651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 1.20402481s ago: executing program 3 (id=10652): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) read(r0, 0x0, 0x0) 1.129819312s ago: executing program 5 (id=10653): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1.033424943s ago: executing program 1 (id=10655): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 924.743145ms ago: executing program 2 (id=10656): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2014c48, &(0x7f0000000540)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d6f6666006e6f726f636b2c73657373696f6e3d3078303030303030303030303030303031662c636865636b3d72656c617865642c636865636b3d72656c61786564416e6f726f636b2c6e6f726f636b2c756e6869642ca757b2b584caaebfda96545499652c6d61703d61636f726e036f76657272696465726f63"], 0xfe, 0x6b6, &(0x7f0000000f00)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 924.272135ms ago: executing program 3 (id=10657): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000080)={0x2, 0x40, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000480)="a90500000080f70e0001208bb3350100000000c7e600000000000000000000004717f2af6e70dc63d1c4bc40", 0x2c}], 0x1}}], 0x1, 0x84) 824.770207ms ago: executing program 1 (id=10658): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000009df00)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) 716.016359ms ago: executing program 2 (id=10659): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x50, 0x0, &(0x7f0000000180)) 585.94969ms ago: executing program 3 (id=10660): r0 = syz_io_uring_setup(0x27f7, &(0x7f0000000340)={0x0, 0xf638, 0x1000, 0x0, 0x3}, &(0x7f0000000300), &(0x7f0000000500)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x16, 0x20000000, 0x0) 573.51278ms ago: executing program 2 (id=10661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x4c, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 530.360142ms ago: executing program 1 (id=10662): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x0, 0xff, {"2a4332c3fefcb7080000000000000037"}, 0x101, 0xfffffffffffffff3, 0xfff}, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4e0}}}, 0x118) 348.059384ms ago: executing program 1 (id=10663): io_setup(0x202, &(0x7f0000000200)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000300)=[{}, {}], &(0x7f00000000c0)={0x0, 0x989680}) 347.031004ms ago: executing program 2 (id=10664): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000100)=0x1) 244.714446ms ago: executing program 3 (id=10665): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x5385, 0x1000000000000) 122.266668ms ago: executing program 5 (id=10666): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_mrelease(0xffffffffffffffff, 0x0) 109.361858ms ago: executing program 2 (id=10667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000000001010400000000000000000200000024000180150001800800010063915e13752a98b6ac1414000c000280050001"], 0x68}}, 0x0) 21.0978ms ago: executing program 3 (id=10668): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8bada11e96d0e585cbec4110", "c292f1caf1b90000fb75e4c1", "000000ff0000000000000020", "00b495699769c2fdd7947f00"]}) 20.39564ms ago: executing program 1 (id=10669): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e24, @empty}}) 0s ago: executing program 2 (id=10670): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) kernel console output (not intermixed with test programs): T4764] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 764.362007][ T5291] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 764.374503][ T4251] syz-executor: attempt to access beyond end of device [ 764.374503][ T4251] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 764.466590][ T4852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 764.481996][ T4805] loop2: detected capacity change from 0 to 32768 [ 764.575302][ T5291] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 764.604644][ T4805] XFS (loop2): Mounting V5 Filesystem [ 764.628698][ T5291] usb 2-1: config 0 has no interface number 0 [ 764.672244][ T5291] usb 2-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 764.729202][ T4874] ceph: No source [ 764.760525][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.784840][ T5291] usb 2-1: Product: syz [ 764.789088][ T5291] usb 2-1: Manufacturer: syz [ 764.823905][ T4879] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9217'. [ 764.829804][ T5291] usb 2-1: SerialNumber: syz [ 764.866814][ T4805] XFS (loop2): Ending clean mount [ 764.873772][ T5291] usb 2-1: config 0 descriptor?? [ 764.905382][ T4805] XFS (loop2): Quotacheck needed: Please wait. [ 764.929541][ T5291] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 764.950174][ T4887] xt_CT: You must specify a L4 protocol and not use inversions on it [ 764.965171][ T5291] dvb-usb: bulk message failed: -22 (4/0) [ 764.981208][ T5291] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 765.011897][ T5291] dvb-usb: bulk message failed: -22 (5/0) [ 765.018123][ T5291] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 765.071991][ T5291] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 765.101742][ T4805] XFS (loop2): Quotacheck: Done. [ 765.139921][ T5291] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 765.177772][ T5291] usb 2-1: USB disconnect, device number 37 [ 765.220129][ T4255] XFS (loop2): Unmounting Filesystem [ 765.577957][ T4932] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 765.645079][ T5200] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 765.673293][ T5243] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 765.853635][ T5200] usb 4-1: Using ep0 maxpacket: 16 [ 765.861244][ T5200] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 765.869916][ T5243] usb 6-1: Using ep0 maxpacket: 32 [ 765.877960][ T5243] usb 6-1: config 0 has an invalid interface number: 250 but max is 2 [ 765.900929][ T5200] usb 4-1: config 0 has no interface number 0 [ 765.908688][ T5243] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.937507][ T5243] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 765.951709][ T5200] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d [ 765.971681][ T5200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.980830][ T5243] usb 6-1: config 0 has no interface number 0 [ 765.987736][ T5200] usb 4-1: Product: syz [ 765.992166][ T5200] usb 4-1: Manufacturer: syz [ 765.997315][ T5200] usb 4-1: SerialNumber: syz [ 766.005801][ T5243] usb 6-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 766.017650][ T5200] usb 4-1: config 0 descriptor?? [ 766.022849][ T5243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.035574][ T5200] i2c-tiny-usb 4-1:0.39: version 70.6d found at bus 004 address 034 [ 766.043850][ T5243] usb 6-1: Product: syz [ 766.048037][ T5243] usb 6-1: Manufacturer: syz [ 766.052651][ T5243] usb 6-1: SerialNumber: syz [ 766.075960][ T5243] usb 6-1: config 0 descriptor?? [ 766.297876][ T5109] usb 6-1: USB disconnect, device number 4 [ 766.455940][ T5200] (null): failure reading functionality [ 766.466721][ T5200] i2c i2c-1: failure reading functionality [ 766.473581][ T5291] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 766.479559][ T5200] i2c i2c-1: connected i2c-tiny-usb device [ 766.490516][ T5200] usb 4-1: USB disconnect, device number 34 [ 766.665085][ T5291] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 766.673331][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9241'. [ 766.693420][ T5291] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 766.701587][ T5291] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 766.731789][ T5291] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 766.753346][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 766.773460][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 766.793269][ T5291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 766.860160][ T5291] usb 5-1: string descriptor 0 read error: -22 [ 766.873427][ T5291] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 766.882524][ T5291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.941542][ T5291] usb 5-1: config 0 descriptor?? [ 766.948769][ T5291] hub 5-1:0.0: bad descriptor, ignoring hub [ 766.965173][ T5291] hub: probe of 5-1:0.0 failed with error -5 [ 767.021759][ T5291] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input36 [ 767.260121][ T5200] usb 5-1: USB disconnect, device number 36 [ 767.305690][ T5037] overlayfs: empty lowerdir [ 767.707868][ T5060] loop2: detected capacity change from 0 to 4096 [ 767.816707][ T5071] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 767.842456][ T5060] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 767.931489][ T5060] Remounting filesystem read-only [ 768.087179][ T5083] No such timeout policy "syz0" [ 768.104199][ T4255] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 768.326501][ T5091] netlink: 'syz.4.9262': attribute type 10 has an invalid length. [ 768.366719][ T5093] loop1: detected capacity change from 0 to 64 [ 768.423484][ T5091] team0: Device veth1_macvtap failed to register rx_handler [ 768.511861][ T5097] tmpfs: Bad value for 'mpol' [ 768.810382][ T5066] loop3: detected capacity change from 0 to 32768 [ 768.854511][ T5066] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 768.862964][ T5066] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 768.937408][ T5066] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 768.969251][ T5243] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 768.977999][ T5243] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 769.080056][ T5127] loop1: detected capacity change from 0 to 4096 [ 769.091607][ T5243] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 113ms [ 769.112237][ T5243] gfs2: fsid=syz:syz.0: jid=0: Done [ 769.123317][ T5066] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 769.281865][ T5127] ntfs: (device loop1): parse_options(): NLS character set maccenteuroAdma not found. Using previous one koi8-u. [ 769.392064][ T5127] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 769.486659][ T5127] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 769.503971][ T5151] loop4: detected capacity change from 0 to 512 [ 769.543955][ T5127] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 769.555226][ T4252] Bluetooth: hci2: command 0x0406 tx timeout [ 769.613465][ T5151] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 769.621441][ T5151] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 769.647774][ T5127] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 769.650043][ T5151] System zones: [ 769.683425][ T5127] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 769.741901][ T5151] 0-1, 15-15, 18-18, 34-34 [ 769.767846][ T5127] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 769.795047][ T5151] EXT4-fs (loop4): orphan cleanup on readonly fs [ 769.801612][ T5151] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 769.850019][ T5151] EXT4-fs warning (device loop4): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 769.873467][ T5127] ntfs: (device loop1): check_mft_mirror(): Failed to read $MFTMirr. [ 769.892208][ T5127] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 769.913338][ T5151] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 769.930865][ T5151] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.9275: bad orphan inode 16 [ 769.949432][ T5127] ntfs: volume version 3.1. [ 769.973377][ T5151] ext4_test_bit(bit=15, block=18) = 1 [ 769.983267][ T5151] is_bad_inode(inode)=0 [ 769.987475][ T5151] NEXT_ORPHAN(inode)=0 [ 770.012999][ T5151] max_ino=32 [ 770.034363][ T5151] i_nlink=2 [ 770.037639][ T5151] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 770.131689][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9281'. [ 770.161365][ T5151] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 770.176869][ T5171] netlink: 332 bytes leftover after parsing attributes in process `syz.3.9281'. [ 770.194374][ T5151] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 770.205935][ T5145] loop5: detected capacity change from 0 to 32768 [ 770.301154][ T5145] XFS (loop5): Mounting V5 Filesystem [ 770.311854][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 770.443347][ T5243] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 770.476406][ T5145] XFS (loop5): Ending clean mount [ 770.496190][ T5145] XFS (loop5): Quotacheck needed: Please wait. [ 770.593670][ T5145] XFS (loop5): Quotacheck: Done. [ 770.653347][ T5243] usb 3-1: Using ep0 maxpacket: 16 [ 770.660403][ T5243] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 770.718646][ T5243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.749135][ T5243] usb 3-1: config 0 descriptor?? [ 770.787605][T32142] XFS (loop5): Unmounting Filesystem [ 770.807075][ T5243] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 770.992606][ T5243] usb 3-1: Detected FT232B [ 771.208272][ T5243] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 771.222596][ T5243] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 771.245791][ T5254] loop4: detected capacity change from 0 to 2048 [ 771.253895][ T5243] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 771.265750][ T5243] usb 3-1: USB disconnect, device number 37 [ 771.285150][ T5264] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 771.308163][ T5243] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 771.345381][ T5243] ftdi_sio 3-1:0.0: device disconnected [ 771.365527][ T5269] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 771.391130][ T5254] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 771.430267][ T5254] Remounting filesystem read-only [ 771.480537][ T5280] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 772.084462][ T5201] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 772.287287][ T5201] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 772.318555][ T5201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.354152][ T5201] usb 5-1: Product: syz [ 772.358383][ T5201] usb 5-1: Manufacturer: syz [ 772.373476][ T5201] usb 5-1: SerialNumber: syz [ 772.384934][ T5201] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 772.438916][ T5201] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 772.465201][ T5338] loop3: detected capacity change from 0 to 8 [ 772.544184][ T5338] SQUASHFS error: Unable to read inode 0xa7 [ 772.871985][ T5291] usb 5-1: USB disconnect, device number 37 [ 773.035909][ T5324] loop2: detected capacity change from 0 to 32768 [ 773.136576][ T5368] loop5: detected capacity change from 0 to 4096 [ 773.170711][ T5368] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 773.204381][ T5324] XFS (loop2): Mounting V5 Filesystem [ 773.213961][ T5380] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 773.370806][ T5324] XFS (loop2): Ending clean mount [ 773.429572][ T5324] XFS (loop2): Quotacheck needed: Please wait. [ 773.553642][ T5201] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 773.560806][ T5201] ath9k_htc: Failed to initialize the device [ 773.577820][ T5291] usb 5-1: ath9k_htc: USB layer deinitialized [ 773.592171][ T5324] XFS (loop2): Quotacheck: Done. [ 773.883019][ T4255] XFS (loop2): Unmounting Filesystem [ 774.026110][ T5374] loop1: detected capacity change from 0 to 40427 [ 774.099514][ T5374] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 774.107603][ T5374] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 774.135150][ T5374] F2FS-fs (loop1): invalid crc value [ 774.209342][ T5374] F2FS-fs (loop1): Found nat_bits in checkpoint [ 774.415390][ T5374] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 774.434351][ T5374] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 774.622439][ T4249] syz-executor: attempt to access beyond end of device [ 774.622439][ T4249] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 774.705019][ T5443] loop3: detected capacity change from 0 to 64 [ 774.716177][ T5403] loop4: detected capacity change from 0 to 32768 [ 774.910879][ T5403] XFS (loop4): Mounting V5 Filesystem [ 775.123529][ T5464] loop3: detected capacity change from 0 to 4096 [ 775.128849][ T5403] XFS (loop4): Ending clean mount [ 775.161708][ T5464] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 775.167157][ T5403] XFS (loop4): Quotacheck needed: Please wait. [ 775.308009][ T5403] XFS (loop4): Quotacheck: Done. [ 775.420272][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 775.420289][ T26] audit: type=1326 audit(775.860:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5478 comm="syz.2.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 775.550097][ T26] audit: type=1326 audit(775.860:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5478 comm="syz.2.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 775.613863][ T4254] XFS (loop4): Unmounting Filesystem [ 775.631236][ T26] audit: type=1326 audit(775.860:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5478 comm="syz.2.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 775.673420][ T26] audit: type=1326 audit(775.860:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5478 comm="syz.2.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 775.736525][ T26] audit: type=1326 audit(775.860:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5478 comm="syz.2.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 775.947452][ T5505] loop1: detected capacity change from 0 to 256 [ 775.995611][ T5505] MINIX-fs: mounting file system with errors, running fsck is recommended [ 776.033715][ T5505] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 776.286377][ T5523] loop3: detected capacity change from 0 to 128 [ 776.546032][ T26] audit: type=1326 audit(776.990:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5535 comm="syz.3.9359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 776.611849][ T26] audit: type=1326 audit(777.020:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5535 comm="syz.3.9359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 776.716466][ T26] audit: type=1326 audit(777.020:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5535 comm="syz.3.9359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 776.734809][ T5502] loop5: detected capacity change from 0 to 32768 [ 776.820091][ T26] audit: type=1326 audit(777.020:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5535 comm="syz.3.9359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 776.975172][ T5558] loop1: detected capacity change from 0 to 512 [ 777.037697][ T5558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 777.050950][ T5502] XFS (loop5): Mounting V5 Filesystem [ 777.075659][ T5558] System zones: 1-12 [ 777.080774][ T5558] EXT4-fs (loop1): orphan cleanup on readonly fs [ 777.108110][ T5558] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9366: bg 0: block 328: padding at end of block bitmap is not set [ 777.128513][ T5558] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 777.143346][ T5558] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.9366: invalid indirect mapped block 65280 (level 0) [ 777.229634][ T5558] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.9366: attempt to clear invalid blocks 33619980 len 1 [ 777.253765][ T5558] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.9366: invalid indirect mapped block 1819239214 (level 0) [ 777.284021][ T5558] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.9366: invalid indirect mapped block 1819239214 (level 1) [ 777.306212][ T5502] XFS (loop5): Ending clean mount [ 777.333576][ T5558] EXT4-fs (loop1): 1 orphan inode deleted [ 777.339425][ T5558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 777.429732][ T5558] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 2: comm syz.1.9366: lblock 0 mapped to illegal pblock 2 (length 1) [ 777.493410][ T5558] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.9366: error -117 reading directory block [ 777.628954][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 777.655988][T32142] XFS (loop5): Unmounting Filesystem [ 777.675940][ T5590] device geneve4 entered promiscuous mode [ 778.264855][ T5623] cgroup: Unexpected value for 'cpuset_v2_mode' [ 778.350867][ T5626] loop1: detected capacity change from 0 to 1764 [ 778.742589][ T5656] loop2: detected capacity change from 0 to 256 [ 778.745762][ T5992] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 778.836501][ T5656] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 778.955041][ T5992] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.988643][ T5992] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 779.030351][ T5992] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 779.058764][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 779.079160][ T5992] usb 6-1: SerialNumber: syz [ 779.312145][ T5992] usb 6-1: 0:2 : does not exist [ 779.353801][ T5992] usb 6-1: USB disconnect, device number 5 [ 779.552343][ T5715] loop3: detected capacity change from 0 to 64 [ 779.598711][ T7315] udevd[7315]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.646289][ T5715] hfs: request for non-existent node -117440513 in B*Tree [ 779.678733][ T5715] hfs: request for non-existent node -117440513 in B*Tree [ 780.066105][ T5747] loop2: detected capacity change from 0 to 128 [ 780.176609][ T5747] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 780.413263][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 780.601907][ T5785] vivid-000: ================= START STATUS ================= [ 780.620163][ T5785] vivid-000: Generate PTS: true [ 780.651802][ T5785] vivid-000: Generate SCR: true [ 780.667714][ T5785] tpg source WxH: 320x180 (R'G'B) [ 780.723362][ T5785] tpg field: 1 [ 780.726974][ T5785] tpg crop: 320x180@0x0 [ 780.731254][ T5785] tpg compose: 320x180@0x0 [ 780.760011][ T5785] tpg colorspace: 9 [ 780.800432][ T5785] tpg transfer function: 7/7 [ 780.818015][ T5785] tpg quantization: 2/2 [ 780.823039][ T5785] tpg RGB range: 0/2 [ 780.824959][ T5799] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9423'. [ 780.836553][ T5796] device geneve4 entered promiscuous mode [ 780.842822][ T5785] vivid-000: ================== END STATUS ================== [ 781.114347][ T5815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9429'. [ 781.133446][ T5815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9429'. [ 781.183420][ T5815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9429'. [ 781.462453][ T5834] loop4: detected capacity change from 0 to 64 [ 781.487338][ T5835] loop1: detected capacity change from 0 to 1024 [ 781.511326][ T5837] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 781.568124][ T5841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9438'. [ 781.587985][ T5834] hfs: request for non-existent node -117440513 in B*Tree [ 781.614402][ T5834] hfs: request for non-existent node -117440513 in B*Tree [ 781.640979][ T5845] loop5: detected capacity change from 0 to 1024 [ 781.820405][T26311] hfsplus: b-tree write err: -5, ino 4 [ 782.010634][ T5865] loop4: detected capacity change from 0 to 2048 [ 782.058033][ T5865] EXT4-fs: Ignoring removed mblk_io_submit option [ 782.129140][ T5865] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 782.193408][ T5992] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 782.393562][ T5992] usb 2-1: Using ep0 maxpacket: 16 [ 782.399867][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 782.409261][ T5992] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 782.439945][ T5992] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 782.473105][ T5992] usb 2-1: config 0 interface 0 has no altsetting 0 [ 782.512005][ T5992] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 782.552547][ T5992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.573293][ T5992] usb 2-1: Product: syz [ 782.577903][ T5992] usb 2-1: Manufacturer: syz [ 782.605526][ T5992] usb 2-1: SerialNumber: syz [ 782.621166][ T5992] usb 2-1: config 0 descriptor?? [ 782.839273][ T5992] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input37 [ 782.874669][ T5926] CIFS mount error: No usable UNC path provided in device string! [ 782.874669][ T5926] [ 782.918160][ T5926] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 782.983410][ T4240] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 783.091282][ T5992] usb 2-1: USB disconnect, device number 38 [ 783.158888][ T5951] loop2: detected capacity change from 0 to 256 [ 783.195207][ T4240] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 783.214022][ T4240] usb 4-1: config 8 has no interface number 0 [ 783.222336][ T4240] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 783.239224][ T4240] usb 4-1: config 8 interface 177 has no altsetting 0 [ 783.247186][ T4240] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 783.257715][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.295073][ T5913] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 783.310145][ T5951] FAT-fs (loop2): Directory bread(block 64) failed [ 783.341322][ T5951] FAT-fs (loop2): Directory bread(block 65) failed [ 783.352764][ T5951] FAT-fs (loop2): Directory bread(block 66) failed [ 783.365869][ T5951] FAT-fs (loop2): Directory bread(block 67) failed [ 783.372533][ T5951] FAT-fs (loop2): Directory bread(block 68) failed [ 783.385621][ T5960] loop4: detected capacity change from 0 to 512 [ 783.398864][ T5951] FAT-fs (loop2): Directory bread(block 69) failed [ 783.413646][ T5960] EXT4-fs: Ignoring removed nomblk_io_submit option [ 783.415049][ T5951] FAT-fs (loop2): Directory bread(block 70) failed [ 783.430440][ T5962] loop5: detected capacity change from 0 to 764 [ 783.439619][ T5951] FAT-fs (loop2): Directory bread(block 71) failed [ 783.451736][ T5951] FAT-fs (loop2): Directory bread(block 72) failed [ 783.459990][ T5960] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 783.460025][ T5951] FAT-fs (loop2): Directory bread(block 73) failed [ 783.484371][ T5962] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 783.528151][ T5960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 783.544225][ T4240] usb 4-1: string descriptor 0 read error: -71 [ 783.563087][ C1] ir_toy 4-1:8.177: out urb status: -71 [ 783.573997][ T5960] System zones: 0-2, 18-18, 34-34 [ 783.609556][ T5960] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 783.658651][ T5960] EXT4-fs (loop4): 1 truncate cleaned up [ 783.674872][ T5960] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 783.741306][ T5960] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.9464: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 783.770422][ T5960] EXT4-fs (loop4): Remounting filesystem read-only [ 783.823354][ T5992] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 783.836891][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 784.045303][ T5992] usb 6-1: config 0 has an invalid interface number: 30 but max is 0 [ 784.074196][ T5992] usb 6-1: config 0 has no interface number 0 [ 784.080346][ T5992] usb 6-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 784.100224][ T4240] ir_toy 4-1:8.177: could not write reset command: -110 [ 784.111969][ T6006] netlink: 'syz.2.9474': attribute type 2 has an invalid length. [ 784.114422][ T4240] ir_toy: probe of 4-1:8.177 failed with error -110 [ 784.126883][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.128906][ T5992] usb 6-1: config 0 descriptor?? [ 784.150173][ T6006] netlink: 'syz.2.9474': attribute type 1 has an invalid length. [ 784.172083][ T5992] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 784.193606][ T5992] usb 6-1: setting power ON [ 784.198461][ T4240] usb 4-1: USB disconnect, device number 35 [ 784.223464][ T5992] dvb-usb: bulk message failed: -22 (2/0) [ 784.373476][ T5992] dvb-usb: bulk message failed: -22 (1/0) [ 784.401962][ T6031] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 784.497708][ T5992] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 784.538873][ T5992] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 784.561688][ T5992] dvb_usb_cxusb: probe of 6-1:0.30 failed with error -22 [ 784.590580][ T5992] usb 6-1: USB disconnect, device number 6 [ 784.789290][ T6056] loop3: detected capacity change from 0 to 512 [ 784.791478][ T6060] loop1: detected capacity change from 0 to 164 [ 784.812541][ T6056] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 784.841584][ T6059] program syz.4.9485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 784.858707][ T6056] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.9483: casefold flag without casefold feature [ 784.893330][ T6056] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.9483: couldn't read orphan inode 15 (err -117) [ 784.914073][ T6056] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 785.009994][ T6056] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 4: comm syz.3.9483: lblock 0 mapped to illegal pblock 4 (length 1) [ 785.172054][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 785.313029][ T6094] loop1: detected capacity change from 0 to 64 [ 785.337334][ T6095] loop2: detected capacity change from 0 to 256 [ 785.383335][ T5992] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 785.462184][ T6103] loop5: detected capacity change from 0 to 256 [ 785.591296][ T5992] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 785.621920][ T5992] usb 5-1: config 8 has no interface number 0 [ 785.664061][ T5992] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 785.709796][ T5992] usb 5-1: config 8 interface 177 has no altsetting 0 [ 785.737145][ T5992] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 785.762234][ T5992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.785790][ T6075] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 785.963280][ T5109] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 786.013015][ T5992] usb 5-1: string descriptor 0 read error: -71 [ 786.025397][ C0] ir_toy 5-1:8.177: out urb status: -71 [ 786.165874][ T5109] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 786.194036][ T5109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.212265][ T5109] usb 4-1: Product: syz [ 786.223674][ T5109] usb 4-1: Manufacturer: syz [ 786.228319][ T5109] usb 4-1: SerialNumber: syz [ 786.244889][ T5109] r8152-cfgselector 4-1: config 0 descriptor?? [ 786.355107][ T6153] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 786.533323][ T5992] ir_toy 5-1:8.177: could not write reset command: -110 [ 786.540470][ T5992] ir_toy: probe of 5-1:8.177 failed with error -110 [ 786.593602][ T5992] usb 5-1: USB disconnect, device number 38 [ 786.661941][ T26] audit: type=1326 audit(787.100:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.5.9510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40f18d169 code=0x7ffc0000 [ 786.685574][ T5109] r8152-cfgselector 4-1: Unknown version 0x0000 [ 786.707010][ T5109] r8152-cfgselector 4-1: USB disconnect, device number 36 [ 786.735270][ T26] audit: type=1326 audit(787.100:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.5.9510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fc40f18d169 code=0x7ffc0000 [ 786.802179][ T26] audit: type=1326 audit(787.100:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.5.9510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40f18d169 code=0x7ffc0000 [ 786.824742][ T26] audit: type=1326 audit(787.100:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.5.9510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40f18d169 code=0x7ffc0000 [ 787.028508][ T6179] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 787.428759][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9521'. [ 787.437734][ T6213] program syz.4.9520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 787.485969][ T6217] loop2: detected capacity change from 0 to 1024 [ 787.575777][ T6217] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 787.690010][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 788.170375][ T6261] device batadv_slave_0 entered promiscuous mode [ 788.287703][ T6264] loop3: detected capacity change from 0 to 2048 [ 788.344308][ T6264] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 788.920518][ T6256] loop5: detected capacity change from 0 to 32768 [ 788.950306][ T6256] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.9534 (6256) [ 788.966739][ T6295] loop4: detected capacity change from 0 to 128 [ 789.005717][ T6256] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 789.042164][ T6256] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 789.070147][ T6295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 789.088738][ T6256] BTRFS info (device loop5): force clearing of disk cache [ 789.167463][ T6256] BTRFS info (device loop5): setting nodatasum [ 789.168710][ T6270] loop1: detected capacity change from 0 to 32768 [ 789.234354][ T6256] BTRFS info (device loop5): use zlib compression, level 3 [ 789.241658][ T6256] BTRFS info (device loop5): allowing degraded mounts [ 789.280790][ T6306] loop3: detected capacity change from 0 to 8 [ 789.283568][ T6256] BTRFS info (device loop5): enabling disk space caching [ 789.296056][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 789.323519][ T6256] BTRFS info (device loop5): disk space caching is enabled [ 789.597875][ T6256] BTRFS info (device loop5): enabling ssd optimizations [ 789.635488][ T6256] BTRFS info (device loop5): rebuilding free space tree [ 789.657107][ T6337] loop3: detected capacity change from 0 to 8 [ 789.676715][ T6337] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 789.715905][ T6256] BTRFS info (device loop5): disabling free space tree [ 789.743604][ T6256] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 789.813371][ T6256] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 789.845997][ T6287] loop2: detected capacity change from 0 to 32768 [ 789.905693][ T6287] JBD2: Ignoring recovery information on journal [ 789.983499][T32142] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 790.095744][ T6287] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 790.178240][ T6360] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.9556'. [ 790.683342][ T26] audit: type=1326 audit(791.120:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 790.711243][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 790.760002][ T26] audit: type=1326 audit(791.120:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 790.853512][ T26] audit: type=1326 audit(791.120:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 790.944459][ T26] audit: type=1326 audit(791.120:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 791.021826][ T26] audit: type=1326 audit(791.120:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 791.101728][ T26] audit: type=1326 audit(791.120:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 791.668564][ T26] kauditd_printk_skb: 521 callbacks suppressed [ 791.668581][ T26] audit: type=1326 audit(792.110:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 791.794248][ T26] audit: type=1326 audit(792.140:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 791.803449][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9574'. [ 791.869995][ T26] audit: type=1326 audit(792.140:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 791.922976][ T6394] loop4: detected capacity change from 0 to 32768 [ 791.952275][ T6394] [ 791.952275][ T6394] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 791.952275][ T6394] [ 791.969334][ T26] audit: type=1326 audit(792.140:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 792.063467][ T26] audit: type=1326 audit(792.140:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 792.093041][ T4254] [ 792.093041][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 792.093041][ T4254] [ 792.109431][ T4254] [ 792.109431][ T4254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 792.109431][ T4254] [ 792.123096][ T26] audit: type=1326 audit(792.140:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 792.146779][ T26] audit: type=1326 audit(792.140:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 792.230136][ T26] audit: type=1326 audit(792.140:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 792.306805][ T26] audit: type=1326 audit(792.140:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 792.398555][ T26] audit: type=1326 audit(792.140:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6371 comm="syz.1.9561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x50000 [ 792.712359][ T6446] loop3: detected capacity change from 0 to 4096 [ 792.738200][ T6446] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 792.834100][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9585'. [ 793.435691][ T22] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 793.526755][ T6496] loop2: detected capacity change from 0 to 256 [ 793.564855][ T6496] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 793.662280][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 793.676126][ T22] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 793.706431][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.740409][ T22] usb 6-1: config 0 descriptor?? [ 793.966857][ T22] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 794.041155][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9604'. [ 794.174783][ T22] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 794.198109][ T22] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 794.232725][ T22] asix: probe of 6-1:0.0 failed with error -71 [ 794.270030][ T22] usb 6-1: USB disconnect, device number 7 [ 794.707523][ T6512] loop4: detected capacity change from 0 to 32768 [ 794.762705][ T6512] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 794.762705][ T6512] [ 794.817957][ T6512] ERROR: (device loop4): remounting filesystem as read-only [ 794.840645][ T6512] xtLookup: xtSearch returned -5 [ 794.850426][ T6512] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 794.850426][ T6512] [ 794.867044][ T6525] loop1: detected capacity change from 0 to 32768 [ 794.977779][ T6525] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 795.270016][ T4249] (syz-executor,4249,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 795.306872][ T6560] loop5: detected capacity change from 0 to 32768 [ 795.335403][ T4249] ocfs2: Unmounting device (7,1) on (node local) [ 795.368105][ T6560] [ 795.368105][ T6560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 795.368105][ T6560] [ 795.510323][T32142] [ 795.510323][T32142] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 795.510323][T32142] [ 795.544345][T32142] [ 795.544345][T32142] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 795.544345][T32142] [ 795.931997][ T6603] loop2: detected capacity change from 0 to 1024 [ 795.984106][ T6603] EXT4-fs: Ignoring removed orlov option [ 796.010179][ T6603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 796.095546][ T6603] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 796.103986][ T6603] System zones: 0-1, 3-36 [ 796.189847][ T6603] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 796.293578][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9628'. [ 796.330761][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 796.518009][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9631'. [ 796.547855][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9631'. [ 797.069062][ T6676] loop1: detected capacity change from 0 to 256 [ 797.123271][ T5243] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 797.151657][ T26] kauditd_printk_skb: 1350 callbacks suppressed [ 797.151676][ T26] audit: type=1326 audit(797.590:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 797.180019][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.291864][ T26] audit: type=1326 audit(797.590:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 797.321212][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9646'. [ 797.345085][ T5243] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 797.369273][ T5243] usb 3-1: config 220 descriptor has 1 excess byte, ignoring [ 797.388487][ T5243] usb 3-1: config 220 has no interface number 2 [ 797.400818][ T26] audit: type=1326 audit(797.650:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 797.432989][ T5243] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 797.473542][ T26] audit: type=1326 audit(797.650:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 797.481342][ T5243] usb 3-1: config 220 interface 0 has no altsetting 0 [ 797.495308][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.525584][ T5243] usb 3-1: config 220 interface 76 has no altsetting 0 [ 797.542171][ T5243] usb 3-1: config 220 interface 1 has no altsetting 0 [ 797.551187][ T26] audit: type=1326 audit(797.650:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.3.9645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 797.599244][ T5243] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 797.618869][ T5243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.643416][ T5243] usb 3-1: Product: syz [ 797.649309][ T5243] usb 3-1: Manufacturer: syz [ 797.669591][ T5243] usb 3-1: SerialNumber: syz [ 797.902438][ T5243] usb 3-1: selecting invalid altsetting 0 [ 797.918570][ T5243] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 797.946959][ T5243] usb 3-1: No valid video chain found. [ 797.988351][ T6726] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 797.999499][ T5243] usb 3-1: selecting invalid altsetting 0 [ 798.009394][ T5243] usbtest: probe of 3-1:220.1 failed with error -22 [ 798.036299][ T5243] usb 3-1: USB disconnect, device number 38 [ 798.886636][ T6769] loop5: detected capacity change from 0 to 256 [ 798.916984][ T6769] exfat: Deprecated parameter 'namecase' [ 798.943351][ T6769] exfat: Deprecated parameter 'namecase' [ 798.963657][ T6772] netlink: 'syz.3.9668': attribute type 10 has an invalid length. [ 798.981433][ T6769] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xec411bf1, utbl_chksum : 0xe619d30d) [ 799.083431][ T6772] team0: Device veth1_vlan failed to register rx_handler [ 799.225756][ T6787] loop1: detected capacity change from 0 to 256 [ 799.515021][ T6788] loop4: detected capacity change from 0 to 4096 [ 799.937616][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9683'. [ 799.973109][ T6833] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 799.977384][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9683'. [ 800.000409][ T6833] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 800.013473][ T5243] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 800.021668][ T6833] overlayfs: missing 'lowerdir' [ 800.042639][ T6828] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 800.243472][ T5243] usb 2-1: config 0 has an invalid interface number: 234 but max is 0 [ 800.251722][ T5243] usb 2-1: config 0 has no interface number 0 [ 800.287690][ T6828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 800.302699][ T5243] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=b7.44 [ 800.355177][ T5243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.393215][ T5243] usb 2-1: Product: syz [ 800.407169][ T5243] usb 2-1: Manufacturer: syz [ 800.411822][ T5243] usb 2-1: SerialNumber: syz [ 800.451331][ T5243] usb 2-1: config 0 descriptor?? [ 800.480805][ T5243] usb 2-1: bad CDC descriptors [ 800.503925][ T5243] usb 2-1: unsupported MDLM descriptors [ 800.691093][ T5109] usb 2-1: USB disconnect, device number 39 [ 800.883248][ T5243] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 801.073415][ T5243] usb 3-1: Using ep0 maxpacket: 16 [ 801.080555][ T5243] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 801.098973][ T5243] usb 3-1: config 0 has no interface number 0 [ 801.108415][ T5243] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 801.149961][ T5243] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 801.186576][ T5243] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 801.225537][ T5243] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 801.244208][ T5243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.252333][ T5243] usb 3-1: Product: syz [ 801.262644][ T5243] usb 3-1: Manufacturer: syz [ 801.272592][ T5243] usb 3-1: SerialNumber: syz [ 801.288346][ T5243] usb 3-1: config 0 descriptor?? [ 801.310148][ T6899] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 801.433610][ T6945] tmpfs: Bad value for 'mpol' [ 801.544095][ T5243] usb 3-1: USB disconnect, device number 39 [ 802.814326][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9730'. [ 803.067314][ T7037] delete_channel: no stack [ 803.119576][ T7040] loop4: detected capacity change from 0 to 8 [ 803.170043][ T7027] loop3: detected capacity change from 0 to 4096 [ 803.183860][ T7040] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 803.283785][ T7040] cramfs: Error -3 while decompressing! [ 803.293559][ T7040] cramfs: ffffffff97551548(18)->ffff888046733000(4096) [ 803.313903][ T7040] cramfs: Error -3 while decompressing! [ 803.334132][ T7040] cramfs: ffffffff97551548(18)->ffff888046733000(4096) [ 803.377386][ T26] audit: type=1800 audit(803.820:4506): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9735" name="file1" dev="loop4" ino=324 res=0 errno=0 [ 803.437781][ T7027] ntfs: volume version 3.1. [ 803.663265][ T5992] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 803.796034][ T7078] affs: No valid root block on device nbd2 [ 803.853534][ T5992] usb 2-1: Using ep0 maxpacket: 8 [ 803.870034][ T5992] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 803.909857][ T5992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.940903][ T5992] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 803.968528][ T5992] usb 2-1: config 0 has no interface number 0 [ 803.998753][ T5992] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 804.055366][ T5992] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 804.072589][ T5992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.087904][ T7094] netlink: 'syz.4.9749': attribute type 5 has an invalid length. [ 804.096757][ T5992] usb 2-1: Product: syz [ 804.100953][ T5992] usb 2-1: Manufacturer: syz [ 804.106290][ T5992] usb 2-1: SerialNumber: syz [ 804.121330][ T7096] loop2: detected capacity change from 0 to 1024 [ 804.135242][ T7094] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9749'. [ 804.159467][ T5992] usb 2-1: config 0 descriptor?? [ 804.182097][ T5992] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 804.196201][ T7100] netlink: 'syz.5.9751': attribute type 5 has an invalid length. [ 804.214340][ T7096] EXT4-fs: Ignoring removed bh option [ 804.219805][ T7096] EXT4-fs: inline encryption not supported [ 804.226638][ T7100] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9751'. [ 804.250973][ T7096] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 804.301088][ T7096] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 2: comm syz.2.9750: lblock 2 mapped to illegal pblock 2 (length 1) [ 804.377047][ T2309] pvrusb2: Invalid write control endpoint [ 804.394361][ T7096] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 804.402523][ T7096] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 48: comm syz.2.9750: lblock 0 mapped to illegal pblock 48 (length 1) [ 804.421402][ T2309] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 804.449988][ T2309] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 804.491778][ T7096] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 804.522988][ T7096] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.9750: Failed to acquire dquot type 0 [ 804.555730][ T7096] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 804.584240][ T7096] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.9750: mark_inode_dirty error [ 804.591792][ T5992] usb 2-1: USB disconnect, device number 40 [ 804.633247][ T7096] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 804.661568][ T7096] EXT4-fs (loop2): 1 orphan inode deleted [ 804.679267][ T7096] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 804.680788][ T7425] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 804.769463][ T7425] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 804.797329][ T7425] EXT4-fs error (device loop2): ext4_release_dquot:6818: comm kworker/u4:8: Failed to release dquot type 0 [ 804.823109][ T7133] netlink: 'syz.4.9757': attribute type 32 has an invalid length. [ 804.845382][ T7096] EXT4-fs (loop2): unmounting filesystem. [ 804.852210][ T7096] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.9750: Invalid inode table block 1 in block_group 0 [ 804.873703][ T7096] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 804.893912][ T7132] loop3: detected capacity change from 0 to 2048 [ 804.912933][ T7096] EXT4-fs error (device loop2): ext4_quota_off:7084: inode #3: comm syz.2.9750: mark_inode_dirty error [ 804.984858][ T7132] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 805.286868][ T7157] loop5: detected capacity change from 0 to 64 [ 805.296747][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9763'. [ 805.312931][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 805.318880][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9763'. [ 805.319047][ T7155] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 805.519850][ T7155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 805.875376][ T7216] 8021q: adding VLAN 0 to HW filter on device bond4 [ 806.122835][ T7262] device bond0 entered promiscuous mode [ 806.161739][ T7262] device batadv_slave_0 entered promiscuous mode [ 806.260401][ T7271] loop4: detected capacity change from 0 to 512 [ 806.338788][ T7273] loop1: detected capacity change from 0 to 764 [ 806.347364][ T7271] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 806.386628][ T7271] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 806.403523][ T7271] System zones: 0-1, 15-15, 18-18, 34-34 [ 806.410460][ T7271] EXT4-fs (loop4): orphan cleanup on readonly fs [ 806.440535][ T7273] Symlink component flag not implemented [ 806.463547][ T7271] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 806.483423][ T7273] Symlink component flag not implemented (116) [ 806.494063][ T7271] EXT4-fs warning (device loop4): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 806.583743][ T7271] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 806.601376][ T7271] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.9777: bg 0: block 40: padding at end of block bitmap is not set [ 806.605206][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9780'. [ 806.646390][ T7271] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 806.689311][ T7271] EXT4-fs (loop4): 1 truncate cleaned up [ 806.703966][ T7271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 806.874453][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 807.546460][ T7335] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 807.972034][ T7362] x_tables: duplicate underflow at hook 1 [ 808.115839][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.122300][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.182218][ T7373] loop1: detected capacity change from 0 to 256 [ 808.255231][ T7373] FAT-fs (loop1): Directory bread(block 64) failed [ 808.261821][ T7373] FAT-fs (loop1): Directory bread(block 65) failed [ 808.308325][ T7373] FAT-fs (loop1): Directory bread(block 66) failed [ 808.325644][ T7373] FAT-fs (loop1): Directory bread(block 67) failed [ 808.340089][ T7373] FAT-fs (loop1): Directory bread(block 68) failed [ 808.369186][ T7373] FAT-fs (loop1): Directory bread(block 69) failed [ 808.390638][ T7373] FAT-fs (loop1): Directory bread(block 70) failed [ 808.407306][ T7373] FAT-fs (loop1): Directory bread(block 71) failed [ 808.430817][ T7373] FAT-fs (loop1): Directory bread(block 72) failed [ 808.448078][ T7373] FAT-fs (loop1): Directory bread(block 73) failed [ 808.531546][ T7386] loop3: detected capacity change from 0 to 4096 [ 808.558646][ T7386] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 808.741634][ T7386] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 808.774201][ T7386] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 808.910613][ T4251] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 808.928992][ T4251] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 809.167172][ T7415] loop3: detected capacity change from 0 to 2048 [ 809.200908][ T7415] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 809.285827][ T7415] UDF-fs: unknown compression code (0) [ 809.316298][ T7372] loop5: detected capacity change from 0 to 32768 [ 809.373545][ T7372] XFS: ikeep mount option is deprecated. [ 809.482311][ T7441] loop3: detected capacity change from 0 to 16 [ 809.489885][ T7441] erofs: (device loop3): mounted with root inode @ nid 36. [ 809.505933][ T7441] loop3: Can't mount, would change RO state [ 809.532395][ T7372] XFS (loop5): Mounting V5 Filesystem [ 809.760726][ T7372] XFS (loop5): Ending clean mount [ 809.802885][ T7372] XFS (loop5): Quotacheck needed: Please wait. [ 809.896117][ T7372] XFS (loop5): Quotacheck: Done. [ 809.993498][T32142] XFS (loop5): Unmounting Filesystem [ 810.091033][ T7479] loop4: detected capacity change from 0 to 2048 [ 810.198050][ T7486] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 810.237223][ T7479] NILFS error (device loop4): nilfs_check_page: bad entry in directory #12: rec_len is too small for name_len - offset=0, inode=12, rec_len=16, name_len=39 [ 810.248172][ T7489] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9836'. [ 810.337877][ T7479] Remounting filesystem read-only [ 810.513446][ T621] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 810.703455][ T621] usb 4-1: Using ep0 maxpacket: 32 [ 810.720450][ T621] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.766327][ T621] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 810.787972][ T7523] netlink: 180 bytes leftover after parsing attributes in process `syz.4.9842'. [ 810.806613][ T621] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 810.823236][ T621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.837007][ T621] usb 4-1: Product: syz [ 810.842026][ T621] usb 4-1: Manufacturer: syz [ 810.847706][ T621] usb 4-1: SerialNumber: syz [ 810.855357][ T621] usb 4-1: config 0 descriptor?? [ 810.877520][ T7518] loop2: detected capacity change from 0 to 4096 [ 810.963626][ T7530] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 811.018622][ T7518] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 811.031805][ T5243] kernel write not supported for file /675/net/sockstat (pid: 5243 comm: kworker/1:16) [ 811.069001][ T621] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 811.082333][ T7518] Remounting filesystem read-only [ 811.085162][ T621] ea af d9 87 ad fc c9 53 [ 811.109668][ T621] snd-usb-6fire: probe of 4-1:0.0 failed with error -5 [ 811.171353][ T4255] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 811.296521][ T621] usb 4-1: USB disconnect, device number 37 [ 811.429890][ T7558] loop5: detected capacity change from 0 to 512 [ 811.494806][ T7558] EXT4-fs: Ignoring removed nobh option [ 811.564590][ T7571] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9852'. [ 811.612795][ T7558] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #3: comm syz.5.9849: corrupted inode contents [ 811.733332][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 811.767473][ T7558] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #3: comm syz.5.9849: mark_inode_dirty error [ 811.794126][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 811.827239][ T7558] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #3: comm syz.5.9849: corrupted inode contents [ 811.883106][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 811.890581][ T7558] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.9849: mark_inode_dirty error [ 811.960572][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 811.991215][ T7558] Quota error (device loop5): write_blk: dquota write failed [ 812.017674][ T7558] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 812.083263][ T7558] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.9849: Failed to acquire dquot type 0 [ 812.120203][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 812.180686][ T7558] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.9849: corrupted inode contents [ 812.223903][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 812.230476][ T7558] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #16: comm syz.5.9849: mark_inode_dirty error [ 812.263338][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 812.271104][ T7558] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.9849: corrupted inode contents [ 812.300410][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 812.344955][ T7558] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.9849: mark_inode_dirty error [ 812.405838][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 812.425536][ T7558] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.9849: corrupted inode contents [ 812.489341][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 812.496231][ T4262] Bluetooth: hci0: Malformed Event: 0x02 [ 812.522309][ T7558] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 812.548198][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 812.565274][ T7558] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.9849: corrupted inode contents [ 812.625282][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 812.656285][ T7605] device bond1 entered promiscuous mode [ 812.719248][ T7558] EXT4-fs error (device loop5): ext4_truncate:4311: inode #16: comm syz.5.9849: mark_inode_dirty error [ 812.813074][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 812.823276][ T7558] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 812.853375][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 812.874210][ T7558] EXT4-fs (loop5): 1 truncate cleaned up [ 812.879929][ T7558] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 812.993549][ T7558] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #12: block 13: comm syz.5.9849: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 813.089549][ T7558] EXT4-fs (loop5): Remounting filesystem read-only [ 813.262143][T32142] EXT4-fs (loop5): unmounting filesystem. [ 813.273889][ T4315] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 813.313331][ T4315] EXT4-fs error (device loop5): ext4_release_dquot:6818: comm kworker/u4:6: Failed to release dquot type 1 [ 813.413266][ T4315] EXT4-fs (loop5): Remounting filesystem read-only [ 813.450884][ T7563] loop4: detected capacity change from 0 to 32768 [ 813.489929][ T7675] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 813.679115][ T7563] XFS (loop4): Mounting V5 Filesystem [ 814.392347][ T7729] loop1: detected capacity change from 0 to 512 [ 814.405517][ T7727] loop5: detected capacity change from 0 to 512 [ 814.414877][ T7563] XFS (loop4): Ending clean mount [ 814.425289][ T7729] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.9890: casefold flag without casefold feature [ 814.446397][ T7727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 814.470096][ T7729] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.9890: couldn't read orphan inode 15 (err -117) [ 814.504126][ T7727] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 814.603498][ T7729] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 814.723548][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 814.726961][ T4254] XFS (loop4): Unmounting Filesystem [ 814.852948][ T7754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9895'. [ 814.862059][ T7754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9895'. [ 814.936556][T32142] EXT4-fs (loop5): unmounting filesystem. [ 815.094582][ T26] audit: type=1326 audit(815.540:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 815.162801][ T26] audit: type=1326 audit(815.560:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 815.259899][ T26] audit: type=1326 audit(815.570:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 815.356311][ T26] audit: type=1326 audit(815.580:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 815.453224][ T26] audit: type=1326 audit(815.580:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.3.9900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684438d169 code=0x7ffc0000 [ 815.475260][ C1] vkms_vblank_simulate: vblank timer overrun [ 815.490389][ T7781] netlink: 'syz.5.9903': attribute type 10 has an invalid length. [ 815.524598][ T7781] device veth1_macvtap left promiscuous mode [ 815.590498][ T7781] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 816.370846][ T7824] loop5: detected capacity change from 0 to 256 [ 816.398367][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9918'. [ 816.423753][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9918'. [ 816.489047][ T7824] FAT-fs (loop5): Directory bread(block 64) failed [ 816.529804][ T7824] FAT-fs (loop5): Directory bread(block 65) failed [ 816.564523][ T7824] FAT-fs (loop5): Directory bread(block 66) failed [ 816.571114][ T7824] FAT-fs (loop5): Directory bread(block 67) failed [ 816.613673][ T7824] FAT-fs (loop5): Directory bread(block 68) failed [ 816.642530][ T7824] FAT-fs (loop5): Directory bread(block 69) failed [ 816.663500][ T7824] FAT-fs (loop5): Directory bread(block 70) failed [ 816.693393][ T7824] FAT-fs (loop5): Directory bread(block 71) failed [ 816.713523][ T7824] FAT-fs (loop5): Directory bread(block 72) failed [ 816.753348][ T7824] FAT-fs (loop5): Directory bread(block 73) failed [ 816.934408][ T7855] usb usb8: usbfs: process 7855 (syz.4.9925) did not claim interface 4 before use [ 817.397566][ T7882] No such timeout policy "syz1" [ 817.410994][ T7881] loop4: detected capacity change from 0 to 1024 [ 817.690148][ T7425] hfsplus: b-tree write err: -5, ino 4 [ 817.944480][ T7906] loop2: detected capacity change from 0 to 2048 [ 817.977866][ T7911] bond0: Error: Cannot enslave bond to itself. [ 817.985783][ T7315] udevd[7315]: incorrect nilfs2 checksum on /dev/loop2 [ 818.007050][ T7906] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 818.103609][ T7918] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 818.347566][ T7918] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 818.417759][ T7918] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 818.464283][ T7918] Remounting filesystem read-only [ 818.481831][ T4255] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 818.737743][ T7951] loop3: detected capacity change from 0 to 128 [ 818.958755][ T4251] sysv_free_block: flc_count > flc_size [ 818.973273][ T4251] sysv_free_block: flc_count > flc_size [ 819.003404][ T4251] sysv_free_block: flc_count > flc_size [ 819.009242][ T4251] sysv_free_block: flc_count > flc_size [ 819.022532][ T4251] sysv_free_block: flc_count > flc_size [ 819.050343][ T4251] sysv_free_block: flc_count > flc_size [ 819.084427][ T4251] sysv_free_block: flc_count > flc_size [ 819.090024][ T4251] sysv_free_block: flc_count > flc_size [ 819.123271][ T4251] sysv_free_block: flc_count > flc_size [ 819.128864][ T4251] sysv_free_block: flc_count > flc_size [ 819.154504][ T4251] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 819.629199][ T7997] loop2: detected capacity change from 0 to 256 [ 819.697655][ T7997] FAT-fs (loop2): Directory bread(block 64) failed [ 819.735123][ T7997] FAT-fs (loop2): Directory bread(block 65) failed [ 819.741822][ T7997] FAT-fs (loop2): Directory bread(block 66) failed [ 819.793813][ T7997] FAT-fs (loop2): Directory bread(block 67) failed [ 819.800472][ T7997] FAT-fs (loop2): Directory bread(block 68) failed [ 819.866526][ T7997] FAT-fs (loop2): Directory bread(block 69) failed [ 819.896614][ T7997] FAT-fs (loop2): Directory bread(block 70) failed [ 819.933256][ T7997] FAT-fs (loop2): Directory bread(block 71) failed [ 819.983969][ T7997] FAT-fs (loop2): Directory bread(block 72) failed [ 819.990551][ T7997] FAT-fs (loop2): Directory bread(block 73) failed [ 820.434881][ T8038] loop4: detected capacity change from 0 to 256 [ 820.438456][ T8039] netlink: 'syz.2.9982': attribute type 1 has an invalid length. [ 820.502060][ T8038] FAT-fs (loop4): Directory bread(block 64) failed [ 820.520910][ T8038] FAT-fs (loop4): Directory bread(block 65) failed [ 820.541283][ T8038] FAT-fs (loop4): Directory bread(block 66) failed [ 820.583281][ T8038] FAT-fs (loop4): Directory bread(block 67) failed [ 820.589951][ T8038] FAT-fs (loop4): Directory bread(block 68) failed [ 820.617289][ T8038] FAT-fs (loop4): Directory bread(block 69) failed [ 820.653401][ T8038] FAT-fs (loop4): Directory bread(block 70) failed [ 820.659989][ T8038] FAT-fs (loop4): Directory bread(block 71) failed [ 820.701315][ T8038] FAT-fs (loop4): Directory bread(block 72) failed [ 820.723295][ T8038] FAT-fs (loop4): Directory bread(block 73) failed [ 821.146780][ T8073] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 821.202484][ T8073] overlayfs: missing 'lowerdir' [ 821.282173][ T8030] loop1: detected capacity change from 0 to 32768 [ 821.297945][ T8080] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 821.428563][ T8030] XFS (loop1): Mounting V5 Filesystem [ 821.669217][ T8030] XFS (loop1): Ending clean mount [ 821.677166][ T8030] XFS (loop1): Quotacheck needed: Please wait. [ 821.798076][ T8030] XFS (loop1): Quotacheck: Done. [ 821.866246][ T8142] loop4: detected capacity change from 0 to 256 [ 821.936026][ T8142] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb080095b, utbl_chksum : 0xe619d30d) [ 822.067125][ T4249] XFS (loop1): Unmounting Filesystem [ 822.679727][ T26] audit: type=1326 audit(823.120:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.2.10015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 822.748917][ T26] audit: type=1326 audit(823.140:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.2.10015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 822.809707][ T26] audit: type=1326 audit(823.140:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.2.10015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 822.897015][ T26] audit: type=1326 audit(823.140:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.2.10015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 823.498560][ T8228] dlm: no locking on control device [ 824.262380][ T8273] PKCS8: Unsupported PKCS#8 version [ 824.933997][ T8309] netlink: 'syz.4.10054': attribute type 12 has an invalid length. [ 824.963445][ T8309] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 825.175438][ T8323] ipt_REJECT: ECHOREPLY no longer supported. [ 825.318329][ T8275] loop3: detected capacity change from 0 to 32768 [ 825.364131][ T26] audit: type=1326 audit(825.810:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.10061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x7ffc0000 [ 825.386052][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.423674][ T8275] ea_get: invalid extended attribute [ 825.429739][ T8275] ffff888056787230: 04 00 00 00 .... [ 825.438767][ T26] audit: type=1326 audit(825.850:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.10061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f986bd8d169 code=0x7ffc0000 [ 825.546055][ T26] audit: type=1326 audit(825.850:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.10061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x7ffc0000 [ 825.567919][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.667928][ T26] audit: type=1326 audit(825.850:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8330 comm="syz.1.10061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986bd8d169 code=0x7ffc0000 [ 825.902525][ T26] audit: type=1326 audit(826.340:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.10071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 825.969412][ T26] audit: type=1326 audit(826.370:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.4.10071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 826.201550][ T8370] loop1: detected capacity change from 0 to 2048 [ 826.239795][ T8370] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.329051][ T8386] netlink: 'syz.5.10077': attribute type 1 has an invalid length. [ 826.351832][ T7315] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 826.377205][ T8386] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.10077'. [ 826.473306][ T621] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 826.601869][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10082'. [ 826.663411][ T621] usb 4-1: Using ep0 maxpacket: 16 [ 826.674741][ T621] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 826.703342][ T621] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 826.723326][ T621] usb 4-1: config 0 interface 0 has no altsetting 0 [ 826.739146][ T621] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 826.783940][ T621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.791993][ T621] usb 4-1: Product: syz [ 826.814775][ T8399] loop5: detected capacity change from 0 to 4096 [ 826.846252][ T8399] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 826.862226][ T621] usb 4-1: Manufacturer: syz [ 826.873342][ T621] usb 4-1: SerialNumber: syz [ 826.909640][ T621] usb 4-1: config 0 descriptor?? [ 826.964181][ T8399] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 827.359168][ T4240] usb 4-1: USB disconnect, device number 38 [ 827.843948][ T5291] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 828.043517][ T5291] usb 5-1: Using ep0 maxpacket: 32 [ 828.055239][ T5291] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 828.066956][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 828.066974][ T26] audit: type=1326 audit(828.510:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8486 comm="syz.2.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 828.082159][ T5291] usb 5-1: config 0 has no interface number 0 [ 828.136858][ T5291] usb 5-1: config 0 interface 29 has no altsetting 0 [ 828.156885][ T26] audit: type=1326 audit(828.510:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8486 comm="syz.2.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 828.186749][ T5291] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 828.216698][ T8498] netlink: 'syz.1.10109': attribute type 15 has an invalid length. [ 828.228105][ T5291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.253297][ T8498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10109'. [ 828.262659][ T5291] usb 5-1: Product: syz [ 828.274212][ T26] audit: type=1326 audit(828.510:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8486 comm="syz.2.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 828.297276][ T26] audit: type=1326 audit(828.510:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8486 comm="syz.2.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 828.299325][ T5291] usb 5-1: Manufacturer: syz [ 828.319095][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.340903][ T26] audit: type=1326 audit(828.510:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8486 comm="syz.2.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 828.407862][ T5291] usb 5-1: SerialNumber: syz [ 828.429218][ T26] audit: type=1326 audit(828.830:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.5.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40f18d169 code=0x7ffc0000 [ 828.435861][ T5291] usb 5-1: config 0 descriptor?? [ 828.451119][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.498280][ T26] audit: type=1326 audit(828.850:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.5.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fc40f18d169 code=0x7ffc0000 [ 828.644871][ T26] audit: type=1326 audit(829.020:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.5.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40f18d169 code=0x7ffc0000 [ 828.666706][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.722010][ T5291] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 828.742549][ T8521] loop3: detected capacity change from 0 to 512 [ 828.754206][ T26] audit: type=1326 audit(829.020:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8502 comm="syz.5.10111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40f18d169 code=0x7ffc0000 [ 828.807410][ T8521] EXT4-fs (loop3): orphan cleanup on readonly fs [ 828.832079][ T8521] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.10115: corrupted in-inode xattr [ 828.860188][ T8521] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.10115: couldn't read orphan inode 15 (err -117) [ 828.904338][ T8521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 828.931627][ T5291] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 828.945896][ T5291] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 829.001805][ T5291] peak_usb: probe of 5-1:0.29 failed with error -71 [ 829.024028][ T5291] usb 5-1: USB disconnect, device number 39 [ 829.144661][ T4251] EXT4-fs (loop3): unmounting filesystem. [ 829.493371][ T8573] netlink: 'syz.3.10127': attribute type 21 has an invalid length. [ 829.501903][ T8573] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10127'. [ 829.526179][ T8575] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 829.584241][ T8575] overlayfs: conflicting options: userxattr,redirect_dir=off [ 829.618014][ T26] audit: type=1326 audit(830.060:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.2.10130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418cd8d169 code=0x7ffc0000 [ 830.047464][ T8604] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 830.080504][ T8605] loop1: detected capacity change from 0 to 8 [ 830.107968][ T8605] cramfs: Error -3 while decompressing! [ 830.141180][ T8605] cramfs: ffffffff9754d568(26)->ffff888054114000(4096) [ 830.157661][ T8605] cramfs: Error -3 while decompressing! [ 830.158606][ T8614] loop3: detected capacity change from 0 to 16 [ 830.173308][ T8605] cramfs: ffffffff9754d582(26)->ffff88804fe85000(4096) [ 830.193951][ T8605] cramfs: Error -3 while decompressing! [ 830.210743][ T8605] cramfs: ffffffff9754d59c(16)->ffff8880469ce000(4096) [ 830.235453][ T8605] cramfs: Error -3 while decompressing! [ 830.253411][ T8605] cramfs: ffffffff9754d568(26)->ffff888054114000(4096) [ 830.273667][ T8614] erofs: (device loop3): mounted with root inode @ nid 36. [ 830.420984][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10143'. [ 830.628965][ T8631] loop5: detected capacity change from 0 to 4096 [ 830.725921][ T8645] device gtp0 entered promiscuous mode [ 830.731997][ T8631] ntfs: volume version 3.1. [ 831.001984][ T8655] loop3: detected capacity change from 0 to 4096 [ 831.022639][ T8661] loop1: detected capacity change from 0 to 1024 [ 831.103099][ T8661] syz.1.10154: attempt to access beyond end of device [ 831.103099][ T8661] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 831.243543][ T8661] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 831.323692][ T8661] syz.1.10154: attempt to access beyond end of device [ 831.323692][ T8661] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 831.415456][ T8661] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 831.542559][ T8693] device sit0 left promiscuous mode [ 831.579812][ T8688] loop4: detected capacity change from 0 to 4096 [ 831.582366][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 831.622454][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 831.667597][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 831.683767][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 831.707491][ T8688] ntfs: volume version 3.1. [ 831.711844][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 831.749615][ T8693] device bridge_slave_1 left promiscuous mode [ 831.802130][ T8693] device batadv_slave_0 left promiscuous mode [ 831.859129][ T8693] device ipvlan1 left promiscuous mode [ 831.907497][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 831.936064][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 831.978520][ T8693] device netdevsim0 left promiscuous mode [ 832.005991][ T8715] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 832.008058][ T8693] device bridge1 left promiscuous mode [ 832.011999][ T8715] [U] J"—e:ÀÆ" [ 832.021175][ T8693] device bond1 left promiscuous mode [ 832.060207][ T8693] device bond3 left promiscuous mode [ 832.074877][ T8693] device bridge6 left promiscuous mode [ 832.080989][ T8693] device geneve3 left promiscuous mode [ 832.114951][ T8693] device gtp0 left promiscuous mode [ 832.661463][ T8755] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 832.753826][ T4294] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 832.954931][ T4294] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 832.993297][ T4294] usb 5-1: config 0 has no interface number 1 [ 833.013337][ T4294] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 833.048049][ T4294] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 833.075770][ T4294] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 833.120350][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 833.150028][ T4294] usb 5-1: SerialNumber: syz [ 833.181812][ T4294] usb 5-1: config 0 descriptor?? [ 833.200950][ T4294] usb 5-1: Found UVC 0.00 device (0002:0000) [ 833.211414][ T4294] usb 5-1: No valid video chain found. [ 833.222932][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10190'. [ 833.436305][ T4294] usb 5-1: USB disconnect, device number 40 [ 833.696693][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10199'. [ 833.951670][ T8836] loop2: detected capacity change from 0 to 512 [ 833.962262][ T8836] EXT4-fs: Ignoring removed mblk_io_submit option [ 834.012749][ T8836] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 834.065327][ T8836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 834.083484][ T8836] System zones: 1-12 [ 834.145567][ T8836] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.10204: corrupted in-inode xattr [ 834.234730][ T8836] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.10204: couldn't read orphan inode 15 (err -117) [ 834.273422][ T8853] loop5: detected capacity change from 0 to 256 [ 834.294966][ T8836] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 834.390060][ T8853] FAT-fs (loop5): Directory bread(block 64) failed [ 834.423628][ T8853] FAT-fs (loop5): Directory bread(block 65) failed [ 834.450004][ T8853] FAT-fs (loop5): Directory bread(block 66) failed [ 834.468741][ T8853] FAT-fs (loop5): Directory bread(block 67) failed [ 834.493416][ T8853] FAT-fs (loop5): Directory bread(block 68) failed [ 834.500218][ T8853] FAT-fs (loop5): Directory bread(block 69) failed [ 834.534164][ T8853] FAT-fs (loop5): Directory bread(block 70) failed [ 834.550882][ T8853] FAT-fs (loop5): Directory bread(block 71) failed [ 834.570611][ T8853] FAT-fs (loop5): Directory bread(block 72) failed [ 834.588718][ T8853] FAT-fs (loop5): Directory bread(block 73) failed [ 834.624026][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 834.793858][ T8873] netlink: 'syz.4.10214': attribute type 1 has an invalid length. [ 834.801110][ T8833] loop3: detected capacity change from 0 to 32768 [ 834.823284][ T8833] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.10202 (8833) [ 834.887354][ T8833] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 834.921403][ T8833] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 834.939714][ T8833] BTRFS info (device loop3): setting nodatacow, compression disabled [ 834.993804][ T8833] BTRFS info (device loop3): force clearing of disk cache [ 835.000984][ T8833] BTRFS info (device loop3): enabling ssd optimizations [ 835.053313][ T8833] BTRFS info (device loop3): using spread ssd allocation scheme [ 835.079936][ T8833] BTRFS info (device loop3): doing ref verification [ 835.097643][ T8833] BTRFS info (device loop3): force zlib compression, level 3 [ 835.131149][ T8833] BTRFS info (device loop3): not using ssd optimizations [ 835.141516][ T8893] No such timeout policy "syz0" [ 835.151358][ T8833] BTRFS info (device loop3): not using spread ssd allocation scheme [ 835.202108][ T8833] BTRFS info (device loop3): using free space tree [ 835.325605][ T8902] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 835.410393][ T8902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 835.525227][ T8833] BTRFS info (device loop3): rebuilding free space tree [ 835.888581][ T4251] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 836.405183][ T8969] xt_NFQUEUE: number of total queues is 0 [ 836.609566][ T8982] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10238'. [ 836.637795][ T8985] netlink: 'syz.5.10239': attribute type 4 has an invalid length. [ 836.769203][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10242'. [ 836.790828][ T8993] loop3: detected capacity change from 0 to 256 [ 836.881346][ T8993] FAT-fs (loop3): Directory bread(block 64) failed [ 836.893252][ T8993] FAT-fs (loop3): Directory bread(block 65) failed [ 836.899894][ T8993] FAT-fs (loop3): Directory bread(block 66) failed [ 836.927479][ T8993] FAT-fs (loop3): Directory bread(block 67) failed [ 836.947852][ T8993] FAT-fs (loop3): Directory bread(block 68) failed [ 836.976861][ T8993] FAT-fs (loop3): Directory bread(block 69) failed [ 836.991994][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 836.992010][ T26] audit: type=1326 audit(837.430:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.4.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 836.996334][ T8993] FAT-fs (loop3): Directory bread(block 70) failed [ 837.009291][ T26] audit: type=1326 audit(837.430:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.4.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 837.097366][ T26] audit: type=1326 audit(837.430:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.4.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 837.113265][ T8993] FAT-fs (loop3): Directory bread(block 71) failed [ 837.170242][ T8993] FAT-fs (loop3): Directory bread(block 72) failed [ 837.181356][ T26] audit: type=1326 audit(837.430:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.4.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 837.197624][ T8993] FAT-fs (loop3): Directory bread(block 73) failed [ 837.283567][ T26] audit: type=1326 audit(837.430:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.4.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 837.500584][ T9030] xt_nfacct: accounting object `syz0' does not exists [ 837.797661][ T9048] loop5: detected capacity change from 0 to 16 [ 837.854941][ T9048] erofs: (device loop5): mounted with root inode @ nid 36. [ 838.551443][ T9096] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551459) [ 838.600638][ T9096] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 838.647531][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10276'. [ 838.677358][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10276'. [ 839.014775][ T9127] loop2: detected capacity change from 0 to 64 [ 840.821152][ T9245] loop2: detected capacity change from 0 to 256 [ 840.904072][ T9245] exfat: Deprecated parameter 'namecase' [ 840.948350][ T9245] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 840.995690][ T9245] exFAT-fs (loop2): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 841.585502][ T9288] loop4: detected capacity change from 0 to 512 [ 841.644885][ T9288] EXT4-fs (loop4): orphan cleanup on readonly fs [ 841.657454][ T9228] loop5: detected capacity change from 0 to 32768 [ 841.679550][ T9288] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 841.737614][ T9228] [ 841.737614][ T9228] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 841.737614][ T9228] [ 841.748369][ T9288] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 841.777228][ T9288] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.10330: attempt to clear invalid blocks 2 len 1 [ 841.782551][ T9228] [ 841.782551][ T9228] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 841.782551][ T9228] [ 841.808330][ T9288] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.10330: invalid indirect mapped block 1819239214 (level 0) [ 841.847821][ T9288] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.10330: invalid indirect mapped block 1819239214 (level 1) [ 841.876925][ T9228] [ 841.876925][ T9228] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 841.876925][ T9228] [ 841.903190][ T9288] EXT4-fs (loop4): 1 truncate cleaned up [ 841.909014][ T9288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 841.941233][ T9228] [ 841.941233][ T9228] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 841.941233][ T9228] [ 841.960371][ T9228] [ 841.960371][ T9228] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 841.960371][ T9228] [ 841.973026][ T9288] EXT4-fs (loop4): unmounting filesystem. [ 842.011101][ T9304] x_tables: duplicate underflow at hook 2 [ 842.031673][ T9308] loop2: detected capacity change from 0 to 1024 [ 842.038701][ T108] [ 842.038701][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 842.038701][ T108] [ 842.136868][ T9308] syz.2.10337: attempt to access beyond end of device [ 842.136868][ T9308] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 842.184725][ T9308] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 842.195439][T32142] [ 842.195439][T32142] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 842.195439][T32142] [ 842.211874][ T9308] hfsplus: unable to mark blocks free: error -5 [ 842.215063][ T9306] loop3: detected capacity change from 0 to 4096 [ 842.251549][ T9308] hfsplus: can't free extent [ 842.271255][ T9306] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 842.280770][T32142] [ 842.280770][T32142] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 842.280770][T32142] [ 842.385053][ T9306] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 842.924613][ T9354] loop1: detected capacity change from 0 to 256 [ 843.101982][ T9360] loop5: detected capacity change from 0 to 2048 [ 843.174008][ T9370] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 843.615133][ T9401] loop3: detected capacity change from 0 to 64 [ 843.651437][ T9402] loop2: detected capacity change from 0 to 1024 [ 843.679759][ T9402] hfsplus: failed to load root directory [ 843.977352][ T9421] loop3: detected capacity change from 0 to 128 [ 844.056776][ T9426] Option ' ' to dns_resolver key: bad/missing value [ 844.074718][ T9429] loop4: detected capacity change from 0 to 128 [ 844.093437][ T9429] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 844.136210][ T9429] sysv_count_free_blocks: >flc_size entries in free-list block [ 844.229233][ T9429] sysv_count_free_inodes: unable to read inode table [ 844.417516][ T4254] sysv_free_block: flc_count > flc_size [ 844.423126][ T4254] sysv_free_block: flc_count > flc_size [ 844.430594][ T4254] sysv_free_block: flc_count > flc_size [ 844.440870][ T4254] sysv_free_block: flc_count > flc_size [ 844.452538][ T4254] sysv_free_block: flc_count > flc_size [ 844.458765][ T4254] sysv_free_block: flc_count > flc_size [ 844.471445][ T4254] sysv_free_block: flc_count > flc_size [ 844.508804][ T4254] sysv_free_block: flc_count > flc_size [ 844.530904][ T9452] netlink: 920 bytes leftover after parsing attributes in process `syz.3.10374'. [ 844.543287][ T4254] sysv_free_block: flc_count > flc_size [ 844.548877][ T4254] sysv_free_block: flc_count > flc_size [ 844.570929][ T4254] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 844.577822][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10374'. [ 844.766525][ T9466] loop4: detected capacity change from 0 to 512 [ 844.799267][ T9469] loop5: detected capacity change from 0 to 22 [ 844.826760][ T9469] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 844.835143][ T9466] EXT4-fs (loop4): orphan cleanup on readonly fs [ 844.862263][ T9466] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.10375: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 32767, max 0(0), depth 0(0) [ 844.883355][ T9469] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 844.933410][ T9466] EXT4-fs error (device loop4): ext4_quota_enable:6989: comm syz.4.10375: Bad quota inode: 4, type: 1 [ 844.953833][ T9466] EXT4-fs warning (device loop4): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 844.983567][ T9466] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 844.990359][ T9466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 845.104158][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 845.353341][ T22] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 845.553380][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 845.580908][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 845.615583][ T22] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 845.636207][ T22] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 845.669172][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.694826][ T22] usb 3-1: Product: syz [ 845.699166][ T22] usb 3-1: Manufacturer: syz [ 845.730158][ T22] usb 3-1: SerialNumber: syz [ 845.745182][ T22] usb 3-1: config 0 descriptor?? [ 845.782210][ T9528] loop3: detected capacity change from 0 to 2048 [ 845.824460][ T9526] loop1: detected capacity change from 0 to 4096 [ 845.859246][ T9526] ntfs: (device loop1): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 845.883080][ T9528] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 845.891830][ T9526] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 845.909197][ T9526] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 845.931995][ T9528] UDF-fs: Scanning with blocksize 512 failed [ 845.945532][ T9526] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 845.980976][ T9528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 846.019905][ T9526] ntfs: volume version 3.1. [ 846.063607][ T9526] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 846.181240][ T5243] usb 3-1: USB disconnect, device number 40 [ 846.456141][ T9572] loop1: detected capacity change from 0 to 128 [ 846.477044][ T26] audit: type=1326 audit(846.920:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.4.10403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 846.518312][ T26] audit: type=1326 audit(846.950:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.4.10403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 846.540190][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.621605][ T26] audit: type=1326 audit(846.950:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.4.10403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 846.643475][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.673484][ T26] audit: type=1326 audit(846.950:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.4.10403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 846.767623][ T9589] loop1: detected capacity change from 0 to 256 [ 847.059885][ T9608] program syz.4.10412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 847.127800][ T9608] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 847.182505][ T9616] loop5: detected capacity change from 0 to 256 [ 847.250381][ T9616] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 847.717517][ T9645] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 847.771385][ T9653] loop2: detected capacity change from 0 to 128 [ 848.615334][ T9641] loop1: detected capacity change from 0 to 32768 [ 848.671262][ T9641] [ 848.671262][ T9641] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 848.671262][ T9641] [ 848.735967][ T9641] [ 848.735967][ T9641] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 848.735967][ T9641] [ 848.797509][ T5291] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 848.799645][ T9641] [ 848.799645][ T9641] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 848.799645][ T9641] [ 848.832809][ T9641] [ 848.832809][ T9641] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 848.832809][ T9641] [ 848.852901][ T9641] [ 848.852901][ T9641] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 848.852901][ T9641] [ 848.877140][ T108] [ 848.877140][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 848.877140][ T108] [ 848.984881][ T5291] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 848.996193][ T4249] [ 848.996193][ T4249] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 848.996193][ T4249] [ 849.029696][ T4249] [ 849.029696][ T4249] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 849.029696][ T4249] [ 849.036712][ T5291] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 849.056330][ T5291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.066118][ T5291] usb 3-1: Product: syz [ 849.070721][ T5291] usb 3-1: Manufacturer: syz [ 849.119433][ T5291] usb 3-1: SerialNumber: syz [ 849.155988][ T5291] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 849.436537][ T9743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10447'. [ 849.467120][ T9743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10447'. [ 849.560579][ T5291] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 849.622489][ T5291] usb 3-1: USB disconnect, device number 41 [ 849.817023][ T9773] netlink: 'syz.4.10457': attribute type 15 has an invalid length. [ 850.056139][ T9785] loop4: detected capacity change from 0 to 1024 [ 850.139429][ T9785] EXT4-fs error (device loop4): ext4_map_blocks:744: inode #3: block 1: comm syz.4.10461: lblock 1 mapped to illegal pblock 1 (length 1) [ 850.182295][ T9785] Quota error (device loop4): write_blk: dquota write failed [ 850.223651][ T9785] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.10461: Failed to acquire dquot type 0 [ 850.280468][ T9785] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.10461: Freeing blocks not in datazone - block = 0, count = 4096 [ 850.331105][ T9785] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.10461: Invalid inode bitmap blk 0 in block_group 0 [ 850.350161][ T4533] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 850.388690][ T4533] EXT4-fs error (device loop4): ext4_release_dquot:6818: comm kworker/u4:7: Failed to release dquot type 0 [ 850.412438][ T9808] loop5: detected capacity change from 0 to 64 [ 850.414896][ T9785] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 850.431544][ T9785] EXT4-fs (loop4): 1 orphan inode deleted [ 850.438925][ T9785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 850.462870][ T9785] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 850.510883][ T9808] Trying to free block not in datazone [ 850.523630][ T9808] Trying to free block not in datazone [ 850.544686][ T9808] Trying to free block not in datazone [ 850.585887][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 851.090880][ T9846] loop5: detected capacity change from 0 to 128 [ 851.123738][ T9846] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 851.200044][ T9846] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 851.255032][ T9846] FAT-fs (loop5): Filesystem has been set read-only [ 851.367769][ T9861] loop1: detected capacity change from 0 to 256 [ 851.382828][T32142] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 851.446510][ T9866] loop2: detected capacity change from 0 to 64 [ 851.464977][ T9861] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 851.868504][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10490'. [ 851.939926][ T9899] loop1: detected capacity change from 0 to 256 [ 852.102571][ T9899] FAT-fs (loop1): Directory bread(block 64) failed [ 852.128345][ T9899] FAT-fs (loop1): Directory bread(block 65) failed [ 852.153660][ T9899] FAT-fs (loop1): Directory bread(block 66) failed [ 852.180591][ T9899] FAT-fs (loop1): Directory bread(block 67) failed [ 852.216916][ T9948] loop5: detected capacity change from 0 to 512 [ 852.224736][ T9899] FAT-fs (loop1): Directory bread(block 68) failed [ 852.231329][ T9899] FAT-fs (loop1): Directory bread(block 69) failed [ 852.267951][ T9899] FAT-fs (loop1): Directory bread(block 70) failed [ 852.312924][ T9899] FAT-fs (loop1): Directory bread(block 71) failed [ 852.348628][ T9899] FAT-fs (loop1): Directory bread(block 72) failed [ 852.400893][ T9960] loop2: detected capacity change from 0 to 256 [ 852.403501][ T9899] FAT-fs (loop1): Directory bread(block 73) failed [ 852.456274][ T9948] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.10497: corrupted inode contents [ 852.463531][ T9964] ieee802154 phy0 wpan0: encryption failed: -22 [ 852.534014][ T9960] FAT-fs (loop2): Directory bread(block 64) failed [ 852.541036][ T9948] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #16: comm syz.5.10497: mark_inode_dirty error [ 852.568605][ T9960] FAT-fs (loop2): Directory bread(block 65) failed [ 852.579955][ T9948] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.10497: corrupted inode contents [ 852.619588][ T9960] FAT-fs (loop2): Directory bread(block 66) failed [ 852.642707][ T9960] FAT-fs (loop2): Directory bread(block 67) failed [ 852.644071][ T9948] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.10497: mark_inode_dirty error [ 852.667643][ T9960] FAT-fs (loop2): Directory bread(block 68) failed [ 852.683560][ T9960] FAT-fs (loop2): Directory bread(block 69) failed [ 852.700512][ T9960] FAT-fs (loop2): Directory bread(block 70) failed [ 852.708871][ T9948] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.10497: corrupted inode contents [ 852.710583][ T9960] FAT-fs (loop2): Directory bread(block 71) failed [ 852.768846][ T9948] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 852.793286][ T9948] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.10497: corrupted inode contents [ 852.795114][ T9960] FAT-fs (loop2): Directory bread(block 72) failed [ 852.832325][ T9977] xt_hashlimit: max too large, truncated to 1048576 [ 852.851073][ T9948] EXT4-fs error (device loop5): ext4_truncate:4311: inode #16: comm syz.5.10497: mark_inode_dirty error [ 852.878021][ T9960] FAT-fs (loop2): Directory bread(block 73) failed [ 852.884284][ T9948] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 852.911589][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10507'. [ 852.925658][ T9948] EXT4-fs (loop5): 1 truncate cleaned up [ 852.943753][ T33] __quota_error: 2 callbacks suppressed [ 852.943770][ T33] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 852.973445][ T9948] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 852.999634][ T33] EXT4-fs error (device loop5): ext4_release_dquot:6818: comm kworker/u4:2: Failed to release dquot type 1 [ 853.208917][T32142] EXT4-fs (loop5): unmounting filesystem. [ 853.405258][T10004] netlink: 300 bytes leftover after parsing attributes in process `syz.3.10514'. [ 853.600288][T10019] loop1: detected capacity change from 0 to 64 [ 853.836178][T10033] loop1: detected capacity change from 0 to 16 [ 853.843476][ T5291] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 853.871132][T10033] erofs: (device loop1): mounted with root inode @ nid 36. [ 854.035848][ T5291] usb 6-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 854.057987][ T5291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.124545][ T5291] pwc: Logitech ViewPort AV 100 webcam detected. [ 854.143011][T10056] loop4: detected capacity change from 0 to 256 [ 854.189170][T10056] exfat: Deprecated parameter 'namecase' [ 854.215376][T10056] exfat: Deprecated parameter 'namecase' [ 854.271258][T10056] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 854.440387][T10067] x_tables: unsorted entry at hook 2 [ 854.525372][ T5291] pwc: send_video_command error -71 [ 854.530654][ T5291] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 854.567758][ T5291] Philips webcam: probe of 6-1:127.0 failed with error -71 [ 854.587631][ T5291] usb 6-1: USB disconnect, device number 8 [ 854.816600][T10100] device batadv0 entered promiscuous mode [ 854.892527][T10103] loop2: detected capacity change from 0 to 128 [ 854.956940][ T7315] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 855.023482][ T5243] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 855.151279][ T26] audit: type=1326 audit(855.590:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.4.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 855.177956][ T26] audit: type=1326 audit(855.620:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.4.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 855.182120][T10119] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10540'. [ 855.216491][T10119] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10540'. [ 855.223327][ T26] audit: type=1326 audit(855.660:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.4.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 855.253206][ T5243] usb 4-1: Using ep0 maxpacket: 8 [ 855.260160][ T5243] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 855.313310][ T5243] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 855.323955][ T5243] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 855.338120][ T26] audit: type=1326 audit(855.660:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.4.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 855.362207][ T5243] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 855.404496][ T5243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.421620][ T26] audit: type=1326 audit(855.660:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.4.10539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf9d8d169 code=0x7ffc0000 [ 855.433219][ T5243] usb 4-1: Product: syz [ 855.491987][ T5243] usb 4-1: Manufacturer: syz [ 855.507291][ T5243] usb 4-1: SerialNumber: syz [ 855.543836][T10135] loop5: detected capacity change from 0 to 1024 [ 855.628968][T10135] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 855.644229][T10135] hfsplus: cannot replace xattr [ 855.666084][T10140] loop4: detected capacity change from 0 to 256 [ 855.830027][T10149] Scaler: ================= START STATUS ================= [ 855.837743][T10149] Scaler: ================== END STATUS ================== [ 855.907339][T10143] loop2: detected capacity change from 0 to 8192 [ 855.945105][ T5243] usb 4-1: 0:2 : does not exist [ 855.951041][T10143] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 855.977632][T10143] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 856.003335][T10143] REISERFS (device loop2): using ordered data mode [ 856.009894][T10143] reiserfs: using flush barriers [ 856.022603][ T5243] usb 4-1: USB disconnect, device number 39 [ 856.032629][T10143] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 856.063705][T10143] REISERFS (device loop2): checking transaction log (loop2) [ 856.263608][T10143] REISERFS (device loop2): Using tea hash to sort names [ 856.276447][T10143] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 856.500720][T10195] UBIFS error (pid: 10195): cannot open "(null)", error -22 [ 856.703475][ T5243] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 856.800512][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10561'. [ 856.810165][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10561'. [ 856.820067][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10561'. [ 856.929234][T10223] cgroup: Need name or subsystem set [ 856.947045][ T621] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 856.947884][ T5243] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 856.983210][ T5243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.991435][ T5243] usb 6-1: Product: syz [ 857.001555][ T5243] usb 6-1: Manufacturer: syz [ 857.020675][ T5243] usb 6-1: SerialNumber: syz [ 857.050443][ T5243] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 857.114391][ T5243] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 857.143318][ T621] usb 4-1: Using ep0 maxpacket: 8 [ 857.150602][ T621] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 857.181626][ T621] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.227403][ T621] usb 4-1: config 0 has no interface number 0 [ 857.252774][ T621] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 857.300226][ T621] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 857.329928][ T621] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 857.369648][T10235] loop4: detected capacity change from 0 to 8192 [ 857.376234][ T621] usb 4-1: config 0 interface 52 has no altsetting 0 [ 857.390378][ C1] usb 6-1: ath9k_htc: invalid pkt_len (ffa5) [ 857.392620][ T621] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 857.410914][ T621] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 857.419419][ T621] usb 4-1: Product: syz [ 857.423836][ T621] usb 4-1: SerialNumber: syz [ 857.428740][T10235] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 857.449193][T10235] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 857.461234][ T621] usb 4-1: config 0 descriptor?? [ 857.483127][T10235] REISERFS (device loop4): using ordered data mode [ 857.498322][T10235] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 857.515655][T10235] REISERFS (device loop4): checking transaction log (loop4) [ 857.552978][T10235] REISERFS (device loop4): Using r5 hash to sort names [ 857.617577][T10235] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 857.634129][ T5200] usb 6-1: USB disconnect, device number 9 [ 857.658255][T10235] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 857.695613][ T621] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input41 [ 857.724562][ T3608] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 857.736150][ T3608] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 857.813644][ T3608] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 857.844066][ T3608] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 857.915816][ T4243] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 857.934861][ T3608] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 857.957231][ T621] usb 4-1: USB disconnect, device number 40 [ 858.195208][ T5243] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 858.202661][ T5243] ath9k_htc: Failed to initialize the device [ 858.275435][ T5200] usb 6-1: ath9k_htc: USB layer deinitialized [ 858.327784][T10307] netlink: 'syz.4.10578': attribute type 12 has an invalid length. [ 858.333031][T10305] openvswitch: netlink: Key type 29 is not supported [ 858.702555][T10323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10584'. [ 859.190075][T10298] loop1: detected capacity change from 0 to 32768 [ 859.230319][T10298] [ 859.230319][T10298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.230319][T10298] [ 859.243295][ T5200] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 859.305086][T10298] [ 859.305086][T10298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.305086][T10298] [ 859.344125][T10298] [ 859.344125][T10298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.344125][T10298] [ 859.377936][T10298] [ 859.377936][T10298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.377936][T10298] [ 859.399996][T10298] [ 859.399996][T10298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.399996][T10298] [ 859.415062][T10361] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10595'. [ 859.443270][ T5200] usb 3-1: Using ep0 maxpacket: 16 [ 859.450321][ T5200] usb 3-1: config 0 has an invalid interface number: 185 but max is 0 [ 859.477293][ T5200] usb 3-1: config 0 has no interface number 0 [ 859.493849][ T5200] usb 3-1: config 0 interface 185 has no altsetting 0 [ 859.506203][ T5200] usb 3-1: New USB device found, idVendor=1ae7, idProduct=2001, bcdDevice=6c.3b [ 859.509519][T10298] [ 859.509519][T10298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.509519][T10298] [ 859.525851][ T5200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.566486][ T5200] usb 3-1: Product: syz [ 859.570708][ T5200] usb 3-1: Manufacturer: syz [ 859.598364][T10363] loop3: detected capacity change from 0 to 4096 [ 859.603242][ T5200] usb 3-1: SerialNumber: syz [ 859.641082][ T5200] usb 3-1: config 0 descriptor?? [ 859.648694][T10363] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 859.651398][ T5200] gspca_main: gspca_pac7302-2.14.0 probing 1ae7:2001 [ 859.666873][T26311] [ 859.666873][T26311] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.666873][T26311] [ 859.698138][T26311] [ 859.698138][T26311] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.698138][T26311] [ 859.719608][ T108] [ 859.719608][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.719608][ T108] [ 859.730608][T10373] loop4: detected capacity change from 0 to 2048 [ 859.740842][ T4249] [ 859.740842][ T4249] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.740842][ T4249] [ 859.784611][ T4249] [ 859.784611][ T4249] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.784611][ T4249] [ 859.837806][T10373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 859.859335][T10363] ntfs3: loop3: failed to convert "c46c" to iso8859-4 [ 860.067912][ T5200] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 860.093811][ T5200] gspca_pac7302: probe of 3-1:0.185 failed with error -71 [ 860.111116][ T5200] usb 3-1: USB disconnect, device number 42 [ 860.173337][T10394] loop5: detected capacity change from 0 to 256 [ 860.253005][T10394] FAT-fs (loop5): Directory bread(block 64) failed [ 860.290679][T10394] FAT-fs (loop5): Directory bread(block 65) failed [ 860.333462][T10394] FAT-fs (loop5): Directory bread(block 66) failed [ 860.341261][T10394] FAT-fs (loop5): Directory bread(block 67) failed [ 860.373793][T10394] FAT-fs (loop5): Directory bread(block 68) failed [ 860.380390][T10394] FAT-fs (loop5): Directory bread(block 69) failed [ 860.412178][T10394] FAT-fs (loop5): Directory bread(block 70) failed [ 860.443369][T10394] FAT-fs (loop5): Directory bread(block 71) failed [ 860.450056][T10394] FAT-fs (loop5): Directory bread(block 72) failed [ 860.483284][T10394] FAT-fs (loop5): Directory bread(block 73) failed [ 861.087864][T10440] loop4: detected capacity change from 0 to 4096 [ 861.121348][T10440] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 861.151966][T10452] netlink: 404 bytes leftover after parsing attributes in process `syz.5.10620'. [ 861.170287][T10451] netlink: 'syz.1.10618': attribute type 10 has an invalid length. [ 861.184529][T10452] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10620'. [ 861.203244][T10451] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 861.221102][T10452] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10620'. [ 861.237235][T10451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 861.263306][T10440] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 861.263489][T10452] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10620'. [ 861.360508][T10459] bridge0: port 2(netdevsim0) entered blocking state [ 861.372602][T10459] bridge0: port 2(netdevsim0) entered disabled state [ 861.833764][T10486] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 862.173586][T10507] netlink: 'syz.3.10637': attribute type 1 has an invalid length. [ 862.181474][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10637'. [ 863.174372][T10565] loop2: detected capacity change from 0 to 164 [ 863.214142][T10558] loop5: detected capacity change from 0 to 8192 [ 863.252388][T10558] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 863.283532][T10558] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 863.346184][T10558] REISERFS (device loop5): using ordered data mode [ 863.352752][T10558] reiserfs: using flush barriers [ 863.383452][T10558] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 863.432253][T10558] REISERFS (device loop5): checking transaction log (loop5) [ 863.612115][T10539] loop4: detected capacity change from 0 to 32768 [ 863.644786][T10539] (syz.4.10647,10539,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 863.713427][T10558] REISERFS (device loop5): Using tea hash to sort names [ 863.733558][T10539] (syz.4.10647,10539,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 863.752292][T10558] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 863.839041][T10539] JBD2: Ignoring recovery information on journal [ 863.939988][T10601] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10667'. [ 864.017263][T10539] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 864.131701][T10539] [ 864.134119][T10539] ====================================================== [ 864.141162][T10539] WARNING: possible circular locking dependency detected [ 864.148204][T10539] 6.1.131-syzkaller #0 Not tainted [ 864.153336][T10539] ------------------------------------------------------ [ 864.160367][T10539] syz.4.10647/10539 is trying to acquire lock: [ 864.166552][T10539] ffff88804e1d4650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_write_info+0x124/0x3a0 [ 864.175742][T10539] [ 864.175742][T10539] but task is already holding lock: [ 864.183120][T10539] ffff88806f8e94a0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x221/0x2a0 [ 864.194044][T10539] [ 864.194044][T10539] which lock already depends on the new lock. [ 864.194044][T10539] [ 864.204466][T10539] [ 864.204466][T10539] the existing dependency chain (in reverse order) is: [ 864.213510][T10539] [ 864.213510][T10539] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 864.222439][T10539] lock_acquire+0x1f8/0x5a0 [ 864.227514][T10539] down_write+0x36/0x60 [ 864.232235][T10539] ocfs2_lock_global_qf+0x221/0x2a0 [ 864.237990][T10539] ocfs2_acquire_dquot+0x2ad/0xb60 [ 864.243664][T10539] dqget+0x762/0xe90 [ 864.248115][T10539] __dquot_initialize+0x2d9/0xea0 [ 864.253706][T10539] ocfs2_get_init_inode+0x154/0x1c0 [ 864.259454][T10539] ocfs2_mknod+0xe32/0x2e20 [ 864.264505][T10539] ocfs2_mkdir+0x1c0/0x4e0 [ 864.269462][T10539] vfs_mkdir+0x3b6/0x590 [ 864.274251][T10539] do_mkdirat+0x225/0x360 [ 864.279153][T10539] __x64_sys_mkdirat+0x85/0x90 [ 864.284469][T10539] do_syscall_64+0x3b/0xb0 [ 864.289429][T10539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.295872][T10539] [ 864.295872][T10539] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 864.306430][T10539] lock_acquire+0x1f8/0x5a0 [ 864.311491][T10539] down_write+0x36/0x60 [ 864.316202][T10539] ocfs2_lock_global_qf+0x202/0x2a0 [ 864.321953][T10539] ocfs2_acquire_dquot+0x2ad/0xb60 [ 864.327613][T10539] dqget+0x762/0xe90 [ 864.332057][T10539] __dquot_initialize+0x2d9/0xea0 [ 864.337634][T10539] ocfs2_get_init_inode+0x154/0x1c0 [ 864.343378][T10539] ocfs2_mknod+0xe32/0x2e20 [ 864.348417][T10539] ocfs2_mkdir+0x1c0/0x4e0 [ 864.353376][T10539] vfs_mkdir+0x3b6/0x590 [ 864.358168][T10539] do_mkdirat+0x225/0x360 [ 864.363048][T10539] __x64_sys_mkdirat+0x85/0x90 [ 864.368368][T10539] do_syscall_64+0x3b/0xb0 [ 864.373328][T10539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.379784][T10539] [ 864.379784][T10539] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 864.387462][T10539] lock_acquire+0x1f8/0x5a0 [ 864.392526][T10539] __mutex_lock+0x132/0xd80 [ 864.397588][T10539] dquot_commit+0x57/0x510 [ 864.402561][T10539] ext4_write_dquot+0x1fd/0x360 [ 864.407954][T10539] mark_all_dquot_dirty+0xf7/0x400 [ 864.413625][T10539] __dquot_free_space+0x956/0xe70 [ 864.419219][T10539] ext4_free_blocks+0x1fb4/0x3020 [ 864.424791][T10539] ext4_ext_remove_space+0x25c6/0x4f40 [ 864.430830][T10539] ext4_ext_truncate+0x201/0x360 [ 864.436337][T10539] ext4_truncate+0xa1d/0x1290 [ 864.441614][T10539] ext4_evict_inode+0xb68/0x1150 [ 864.447113][T10539] evict+0x529/0x930 [ 864.451568][T10539] do_unlinkat+0x509/0x820 [ 864.456541][T10539] __x64_sys_unlink+0x45/0x50 [ 864.461778][T10539] do_syscall_64+0x3b/0xb0 [ 864.466739][T10539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.473180][T10539] [ 864.473180][T10539] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 864.480861][T10539] lock_acquire+0x1f8/0x5a0 [ 864.485927][T10539] down_write+0x36/0x60 [ 864.490633][T10539] ext4_map_blocks+0x955/0x1cb0 [ 864.496037][T10539] ext4_writepages+0x1643/0x3de0 [ 864.501543][T10539] do_writepages+0x3a2/0x670 [ 864.506692][T10539] __writeback_single_inode+0x15d/0x11e0 [ 864.512881][T10539] writeback_sb_inodes+0xc2b/0x1b20 [ 864.518624][T10539] __writeback_inodes_wb+0x114/0x400 [ 864.524458][T10539] wb_writeback+0x4b1/0xe10 [ 864.529510][T10539] wb_workfn+0xc9e/0x1020 [ 864.534386][T10539] process_one_work+0x917/0x1260 [ 864.539868][T10539] worker_thread+0xa47/0x1200 [ 864.545102][T10539] kthread+0x28d/0x320 [ 864.549717][T10539] ret_from_fork+0x1f/0x30 [ 864.554686][T10539] [ 864.554686][T10539] -> #2 (jbd2_handle){++++}-{0:0}: [ 864.562023][T10539] lock_acquire+0x1f8/0x5a0 [ 864.567097][T10539] start_this_handle+0x1f71/0x21b0 [ 864.572767][T10539] jbd2__journal_start+0x2d1/0x5c0 [ 864.578436][T10539] jbd2_journal_start+0x25/0x30 [ 864.583845][T10539] ocfs2_start_trans+0x3c0/0x6f0 [ 864.589343][T10539] ocfs2_reserve_local_alloc_bits+0xc4c/0x2a10 [ 864.596046][T10539] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 864.602955][T10539] ocfs2_symlink+0x14e9/0x2f00 [ 864.608238][T10539] vfs_symlink+0x247/0x3d0 [ 864.613183][T10539] do_symlinkat+0x21e/0x390 [ 864.618209][T10539] __x64_sys_symlinkat+0x95/0xa0 [ 864.623669][T10539] do_syscall_64+0x3b/0xb0 [ 864.628603][T10539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.635035][T10539] [ 864.635035][T10539] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 864.643598][T10539] lock_acquire+0x1f8/0x5a0 [ 864.648642][T10539] down_read+0xad/0xa30 [ 864.653335][T10539] ocfs2_start_trans+0x3b5/0x6f0 [ 864.658801][T10539] ocfs2_reserve_local_alloc_bits+0xc4c/0x2a10 [ 864.665473][T10539] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 864.672328][T10539] ocfs2_symlink+0x14e9/0x2f00 [ 864.677609][T10539] vfs_symlink+0x247/0x3d0 [ 864.682547][T10539] do_symlinkat+0x21e/0x390 [ 864.687577][T10539] __x64_sys_symlinkat+0x95/0xa0 [ 864.693056][T10539] do_syscall_64+0x3b/0xb0 [ 864.697988][T10539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.704425][T10539] [ 864.704425][T10539] -> #0 (sb_internal#5){.+.+}-{0:0}: [ 864.711917][T10539] validate_chain+0x1661/0x5950 [ 864.717292][T10539] __lock_acquire+0x125b/0x1f80 [ 864.722668][T10539] lock_acquire+0x1f8/0x5a0 [ 864.727713][T10539] ocfs2_start_trans+0x2b0/0x6f0 [ 864.733208][T10539] ocfs2_write_info+0x124/0x3a0 [ 864.738595][T10539] dquot_set_dqinfo+0x488/0x6f0 [ 864.743974][T10539] quota_setinfo+0x3d6/0x4f0 [ 864.749096][T10539] __se_sys_quotactl+0x2b1/0x770 [ 864.754548][T10539] do_syscall_64+0x3b/0xb0 [ 864.759484][T10539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.765896][T10539] [ 864.765896][T10539] other info that might help us debug this: [ 864.765896][T10539] [ 864.776131][T10539] Chain exists of: [ 864.776131][T10539] sb_internal#5 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 864.776131][T10539] [ 864.793117][T10539] Possible unsafe locking scenario: [ 864.793117][T10539] [ 864.800571][T10539] CPU0 CPU1 [ 864.805929][T10539] ---- ---- [ 864.811285][T10539] lock(&ocfs2_quota_ip_alloc_sem_key); [ 864.816917][T10539] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 864.826721][T10539] lock(&ocfs2_quota_ip_alloc_sem_key); [ 864.834878][T10539] lock(sb_internal#5); [ 864.839237][T10539] [ 864.839237][T10539] *** DEADLOCK *** [ 864.839237][T10539] [ 864.847405][T10539] 3 locks held by syz.4.10647/10539: [ 864.852685][T10539] #0: ffff88804e1d40e0 (&type->s_umount_key#91){++++}-{3:3}, at: user_get_super+0x11a/0x250 [ 864.862893][T10539] #1: ffff88806f8e9808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 864.875861][T10539] #2: ffff88806f8e94a0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x221/0x2a0 [ 864.887185][T10539] [ 864.887185][T10539] stack backtrace: [ 864.893080][T10539] CPU: 0 PID: 10539 Comm: syz.4.10647 Not tainted 6.1.131-syzkaller #0 [ 864.901325][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 864.911378][T10539] Call Trace: [ 864.914653][T10539] [ 864.917582][T10539] dump_stack_lvl+0x1e3/0x2cb [ 864.922272][T10539] ? nf_tcp_handle_invalid+0x647/0x647 [ 864.927740][T10539] ? print_circular_bug+0x12b/0x1a0 [ 864.932980][T10539] check_noncircular+0x2fa/0x3b0 [ 864.937931][T10539] ? add_chain_block+0x850/0x850 [ 864.942870][T10539] ? lockdep_lock+0x11f/0x2a0 [ 864.947587][T10539] ? do_raw_spin_unlock+0x137/0x8a0 [ 864.952795][T10539] ? _find_first_zero_bit+0xd0/0x100 [ 864.958090][T10539] validate_chain+0x1661/0x5950 [ 864.962971][T10539] ? reacquire_held_locks+0x660/0x660 [ 864.968349][T10539] ? mark_lock+0x9a/0x340 [ 864.972687][T10539] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 864.978689][T10539] ? print_irqtrace_events+0x210/0x210 [ 864.984168][T10539] ? mark_lock+0x9a/0x340 [ 864.988510][T10539] __lock_acquire+0x125b/0x1f80 [ 864.993370][T10539] lock_acquire+0x1f8/0x5a0 [ 864.997875][T10539] ? ocfs2_write_info+0x124/0x3a0 [ 865.002900][T10539] ? read_lock_is_recursive+0x10/0x10 [ 865.008282][T10539] ? __lock_acquire+0x1f80/0x1f80 [ 865.013313][T10539] ? __might_sleep+0xb0/0xb0 [ 865.017899][T10539] ? do_raw_spin_unlock+0x137/0x8a0 [ 865.023111][T10539] ? do_raw_spin_unlock+0x137/0x8a0 [ 865.028351][T10539] ocfs2_start_trans+0x2b0/0x6f0 [ 865.033305][T10539] ? ocfs2_write_info+0x124/0x3a0 [ 865.038346][T10539] ? down_write+0x42/0x60 [ 865.042681][T10539] ? ocfs2_recovery_exit+0x280/0x280 [ 865.048067][T10539] ocfs2_write_info+0x124/0x3a0 [ 865.052935][T10539] ? ocfs2_mark_dquot_dirty+0xd10/0xd10 [ 865.058480][T10539] ? do_raw_spin_unlock+0x137/0x8a0 [ 865.063680][T10539] dquot_set_dqinfo+0x488/0x6f0 [ 865.068555][T10539] quota_setinfo+0x3d6/0x4f0 [ 865.073157][T10539] ? quota_getinfo+0x420/0x420 [ 865.077949][T10539] ? security_capable+0x86/0xb0 [ 865.082803][T10539] ? bpf_lsm_quotactl+0x5/0x10 [ 865.087568][T10539] ? security_quotactl+0x86/0xb0 [ 865.092514][T10539] ? do_quotactl+0x496/0x6c0 [ 865.097103][T10539] __se_sys_quotactl+0x2b1/0x770 [ 865.102052][T10539] ? __x64_sys_quotactl+0xa0/0xa0 [ 865.107094][T10539] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 865.113084][T10539] ? print_irqtrace_events+0x210/0x210 [ 865.118559][T10539] ? print_irqtrace_events+0x210/0x210 [ 865.124026][T10539] ? syscall_enter_from_user_mode+0x2e/0x230 [ 865.130006][T10539] ? lockdep_hardirqs_on+0x94/0x130 [ 865.135232][T10539] ? syscall_enter_from_user_mode+0x2e/0x230 [ 865.141238][T10539] do_syscall_64+0x3b/0xb0 [ 865.145650][T10539] ? clear_bhb_loop+0x45/0xa0 [ 865.150325][T10539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 865.156226][T10539] RIP: 0033:0x7fdbf9d8d169 [ 865.160640][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.180241][T10539] RSP: 002b:00007fdbfabb0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 865.188665][T10539] RAX: ffffffffffffffda RBX: 00007fdbf9fa5fa0 RCX: 00007fdbf9d8d169 [ 865.196636][T10539] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffff80000601 [ 865.204605][T10539] RBP: 00007fdbf9e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 865.212574][T10539] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 865.220547][T10539] R13: 0000000000000000 R14: 00007fdbf9fa5fa0 R15: 00007fff47d673c8 [ 865.228541][T10539] [ 865.231648][ C0] vkms_vblank_simulate: vblank timer overrun [ 865.261623][ T4254] ocfs2: Unmounting device (7,4) on (node local) [ 865.855029][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.554992][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.561353][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.568471][ T2309] pvrusb2: request_firmware fatal error with code=-110 [ 869.576872][ T2309] pvrusb2: Failure uploading firmware1 [ 869.582355][ T2309] pvrusb2: Device initialization was not successful. [ 869.589057][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 869.599233][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 869.608631][ T5992] pvrusb2: Device being rendered inoperable