last executing test programs: 1m37.244218412s ago: executing program 5 (id=5351): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, 0x0) 1m36.994098969s ago: executing program 5 (id=5356): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002fc0)=@newtaction={0xac, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 1m36.613866119s ago: executing program 5 (id=5360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000002, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x80, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1m36.341518439s ago: executing program 5 (id=5363): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58b, &(0x7f00000006c0)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003640)='./file0\x00', &(0x7f0000003680)='ext4\x00', 0x0, 0x0) 1m35.858350284s ago: executing program 5 (id=5368): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000000)={0x53, 0x701c83d8a1dfb969, 0x0, 0xc, 0x8000000000000400}) 1m32.915545351s ago: executing program 5 (id=5395): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@acl}, {@heartbeat_none}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0x6b2}}, {@acl}, {@localflocks}, {@coherency_full}, {@noacl}]}, 0x1, 0x4450, &(0x7f0000008900)="$eJzs3c9vHGcZAOB3Jia1Qxvs0EORkFiJSiBAlt0T4Eo4jhPXbkxQIBXislnb28Sw9kb2GnGohLlV4oTEAXGoQOLmU+UD1yLxD3DhWK5UggMXJKSIRbs7a++Md/ESdus6eh4pHs/3a971uzPzzWHypZnG4+390vZ+qbJbqm++vf9a6cf12sFONdKPyUUfn+GMPk9JyP3FuXfrznffei3iD1t//qjZbDajZSL6mu/5/Z//eGezd9uVFvq0xu0/2qj8ICJePhNXy5WI+P7vI5KIuJmVLWXbqYi4Hp26t975+cPSiKJ5/8Pq6+Wn6+8eL7y6dvTe8eDPnkT8uva5rz3a+dsXryz85SsjOjwAAAAAAAAAAAAAAAAAAJfcyv17D74zNx8fJDFxlJx9X3cl2w56P7Y5Ml8Y/4cFAAAAAAAAAAAAAAAAAACAT6jT9/9LyY1kIiLy7/8vZ9vFAf2b3xp/jIzP6rfvLd+em8/Wf0/O1H89K/r7zSsx02fd9+L67zcL/fuv//7CyOLvxtc97nQk6WxuP01nZyN+my38/kpyLa3V9xtffbt+sLs1sjAurXz+O6v3574F2YL+w+Z/qTD++Nf//2wUv7Wt/Ydnv8r0kc//lYHtfvezZKj83yr0+zjyz7PL53+iXTbV22CxcwFo5f8XE+fnf7kw/rjyfz0iSkkr1lLubnIj6ZQPmq+Ql8//p9pluUtn9occdP7/q5D/24XxL+r6f1i8EdFXPv9X22WTuRan5/9Mev75f6cw/kXkvxX/ofv/UPL5z66kE7km7b/ksNf/lcL448r/g7Qd51/jepL7BhwlnfgH/X915OXzP3mm/vT5Lx1q/vdGoX///I/u5OzG1z1u+/mv2Wz+NNv/ctJ5/qO/fP6nBrYb9vxfLfQb9/V/MUpDPwFcHWcgl1Q+/9faZfm583T757D5X+vdeTq+/LdnJZPd/J9eT/79Qqf8Nz3zvwfjCOA5kc//pzuFaW+Lw/bP9vwvOX/+/2Zh/P+S/+RwJJ/g7PyvFf9hOpLBn3v5/L84sF0r/38a4v5/t9Bv/PP/iDlz/WeWz/9LA9u1z//J8/O/Xug37vx/aZyDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwCS9l2OpJ0NrefprOzEbey/VfiWrJR2Spv1OqbP9qPWM7KS3EjeVSrb1Rq5e3d+la1XKnV6psRt7P6l2My2a/VG+WdypM7J2NNJY+rlb3GRrXSiIiVrPzz8VJ3rI3txk7lSUS8cVL3mbS+9+RxZbe8tb33zbm5ublYPYlhJqn+pFHdbXSO3qmNWDvpO530BNeufvMklheTH9YP9nYrtXb53Z4+tfpmpdbTZz2r+2XMJI29g93NSqNartUfdY83yB+vPmNy/geL2XZ59f737t+dP1P/MOlsl8YfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/hw8WvvGriJjo7KURUUqyX5LsX877H1ZfLz9df/d44dW1o/eOP+rXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMByj2/d+2vdRKS42l5G/H7+/R/nz6V+303fvzjDjJzO00t3/1A35d/TKL8tR6s279PN+usjJmrvZ7Anw306GPcZmtu3ufn6vteRchURbclvUs5VtewtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/AoAAP//YvMk6w==") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0xb0) 1m32.210829793s ago: executing program 32 (id=5395): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@acl}, {@heartbeat_none}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0x6b2}}, {@acl}, {@localflocks}, {@coherency_full}, {@noacl}]}, 0x1, 0x4450, &(0x7f0000008900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0xb0) 10.299772503s ago: executing program 1 (id=6254): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'new '}, 0x1c, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 10.011810333s ago: executing program 1 (id=6256): r0 = syz_io_uring_setup(0xdaa, &(0x7f0000000380)={0x0, 0x0, 0x13291, 0x0, 0x21f0}, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_enter(r0, 0x1, 0xffffffff, 0x69, 0x0, 0x0) 9.675702043s ago: executing program 1 (id=6260): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2b, 0xb, 0x70bd2a, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@empty}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) 9.310667286s ago: executing program 1 (id=6266): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 5.361067374s ago: executing program 4 (id=6290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200403}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e0b9547ed3459d73e7645f03c9f5", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.308871175s ago: executing program 0 (id=6291): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)) 5.05815666s ago: executing program 0 (id=6294): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0x0) sendfile(r0, r0, 0x0, 0x6) 4.848747695s ago: executing program 4 (id=6298): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae5"], 0x0) 4.699344097s ago: executing program 0 (id=6300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x4, 0x2, {{0x5, 0x8, 0x8, 0x6, 0x9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) 4.367777458s ago: executing program 6 (id=6304): r0 = syz_open_dev$video(&(0x7f0000000000), 0x800000002, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x9, 0x101, 0x2, {0x400, 0x6, 0xfe, 0xfffffffb}}) 4.348589139s ago: executing program 0 (id=6305): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000008c0), 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0xd, 0x4, {0xc000000000000000, @usage, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc4, @struct={0x6, 0xce82}, 0x44000, 0x5, [0x2, 0x8, 0x8]}, {0xfffffffffffffffe, @struct={0x6, 0x8032}, 0x0, 0xee, 0x1, 0x1, 0x0, 0x0, 0x404, @struct={0x2, 0xf136}, 0x9, 0xa, [0x4, 0x3, 0x2, 0xfffffffffffffffc, 0x0, 0x1]}, {0x6, @usage=0x8, 0x0, 0x7, 0x887fe, 0xfffffffffffffffe, 0x3ff, 0xffffffffffffffff, 0x48b, @struct={0x2f, 0xa}, 0xffffffff, 0x4, [0x7ffffffc, 0x2000000000800004, 0x0, 0x3ff, 0x6, 0x3]}, {0x3, 0x0, 0x80000000000006}}) 3.948755436s ago: executing program 6 (id=6309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb0}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.480097821s ago: executing program 6 (id=6311): prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) pipe2$9p(0x0, 0x0) 3.395961337s ago: executing program 2 (id=6312): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.16771699s ago: executing program 6 (id=6313): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) 3.111520178s ago: executing program 4 (id=6314): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd02fe02e8fe50a10a000700250000000c600e41b0000900ac00080325000000160016000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 2.871691183s ago: executing program 6 (id=6315): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.691704122s ago: executing program 4 (id=6316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000440), &(0x7f0000000500)}, 0x20) 2.614148839s ago: executing program 4 (id=6317): r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x121880) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000440)={0x401, 0x8, [0x9, 0x5]}) 2.533966272s ago: executing program 4 (id=6318): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x4000000000004, 0x80082, 0x441, 0x9, 0x2000000, 0xfffffffffffffff8, 0xfffffffffffffffa, 0x3, 0x1}) 2.381923509s ago: executing program 3 (id=6319): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x34565559, 0x0, 0x1, [{}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x9a}], 0x0, 0x0, 0x7, 0x0, 0x7}}) 2.066686769s ago: executing program 0 (id=6320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601040000000000000000070000001400078008001140000000000800124000040c8f0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x20004000) 1.879598583s ago: executing program 3 (id=6321): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 1.360257845s ago: executing program 3 (id=6322): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000000)) 1.210465129s ago: executing program 0 (id=6323): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000004, &(0x7f0000000040)=ANY=[@ANYBLOB='utf8=1,iocharset=1,uni_xlate=0,rodir,utf8=1,utf8=0,flush,uni_xlate=0,nonumtail=0,tz=UTC,codepage=1251,utf8=0,shortname=lower,iocharset=cp852,iocharset=koi8-ru,nonumtail=0,\x00'/188], 0x1, 0x380, &(0x7f0000000940)="$eJzs3U+IG1UYAPAvO9lNVtDdmygI0ZugS9ubXmyRLRT3ohL8g4jBblWSVdjgYnvodj0oHgWPevKmoAcP4lEERbx58GoFqYoH7a3Q0ifJZGbSJLvdIltZ/P2g5PG99733ZuaRTMPk7UvHo3t6Ps5cvnwpms1a1I8/fjyu1GI5sihciGkLM2IAwOFwJaX4O+Um65qzU2q3YVoAwAEafv6/EhGtWM4jb3+7V/vk0x8ADr3R//8X92pTfQ/QuLHijQObFgBwgKa+/3+gPl69MPxXhupjTwUAAIfV0889/8SJtYinWq1mxMa7W+2tdjxa1Z84E69FL9bjSCzFtYj8RqG4W0jp5Km11SOtVms7fluOdkTMjRLb+Z3CiWyY34ijsRTLo/zR3UZKKTv5xdrq0dZQRFzYHo4fG7Wtq/Pl+D/fEevVjUfRyfAl4tTa6rHWqIP2RpG/HbFTPagwmP9KLMWPL5fdpFQ8wbi2ev5oMekqf6vdiNPlWZh6EmKXRyMAAAAAAAAAAAAAAAAAAAAAAGB/Vlql5XL/nDR4zXfKWVmZUT/cHyfPH+0PtJPvD5QaKVL6662H2+9l+TY9xf5AE/vzZFs2EgQAAAAAAAAAAAAAAAAAAIBS/+xCdHq99c3+2XPd8cL2Zv/sXEQMIq9//9k3izHd5iaFej5EI6IcojUa9ly3k7KiccoiptOzweBF5JMvyxmPt2mURzFzGo3dq3q9O+//9cMqcl9W9Hy9apPF7APMxqbx2ETPG3flU7qVE1UWjo1HGtOjX0wpjUXeGU8//+JE42b0oxZRv/ULd647F2VkcXSOyzZpUPju0qv3FGe/83XKPfjQ0jMXP/j4j26nNxg5z1rY7F9L3U6taLyP0UfdpeElqNZGLfJCbXwl1Hfvp9nZuTHSyX7689l73/9hfychjUfeHKzniTZZfjifT6S/MFrYg2lOVC1W6fPFaV2fn7H4b1aYuKbXU0r1uGFtTBXu/uirT1P65fd9D1GZm3rbqP37dx4AAAAAAAAAAAAAAAAAAGBS9aPfIjL6se/8XlmPPHnwMwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA26f6+/9jhZ0LMRHZT+Hq9oysxvpmP2Lhvz5MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+5/4JAAD//0slWyw=") open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) 1.067722661s ago: executing program 2 (id=6324): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080)=0x90) 951.054351ms ago: executing program 3 (id=6325): setregid(0xee00, 0x0) setresgid(0x0, 0x0, 0x0) 701.055011ms ago: executing program 2 (id=6326): r0 = socket(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000100)="8639c74d1b79334265bb32c86463f0040000000000000056585aa950b1a21434ab0000000000000029e7ffff35000000", 0x30) 692.361834ms ago: executing program 3 (id=6327): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 487.113263ms ago: executing program 2 (id=6328): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x34e, 0xfffffffffffffffd}, {0x0, 0x6, 0x0, 0x8}, 0x0, 0x0, 0x2, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x5, 0x1, 0xb7, 0x0, 0x0, 0x1}}, 0xe8) 364.845086ms ago: executing program 2 (id=6329): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 350.795137ms ago: executing program 1 (id=6330): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x38a, 0x7, 0x80400000}) 89.462755ms ago: executing program 3 (id=6331): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file1\x00', 0x30008c0, &(0x7f0000000040)={[{@file_umask={'file_umask', 0x3d, 0xfff}}, {@file_umask={'file_umask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@codepage={'codepage', 0x3d, 'cp936'}}, {@creator={'creator', 0x3d, "4ddd7175"}}]}, 0x19, 0x2fe, &(0x7f00000004c0)="$eJzs3U1rE0EcBvBndtNma0tdbUXwIFIN2ItovYiXSMmH8CRqk0JxqagtvuChiicRe/fu0aufQbwogud68iSe60FG5iXZl+xuEsnuJvr8oGGzszP7n8zOzkygWRDRf2u9dfD28nf1JwAXLvDyKuAA8IAagBM46e1u72ztBJ12XkEuTtdNLgGTU/Qds7HdScvqweawfPWuhoXoPiqGlPLat6qDoMrp3i/d+M4z+k5Qt71TJ3oVxZfl2ehZfs4B2CsimImS31LiEId4hMXSwiEiookkzPju2HF+wc7fHQdo2MFEz8Ynbfz/W4dVB1A4mZsaGf91u0qh2v2oTgrXe3oJp9Kd7ioxrax3ifczifezMFdWbHYpBq0qdSzO3OZW0LmwcTdoO3iOphU5bFm/ts2l25UXLYCVlLVpjl5pc5mHiPQZ5byuw4yqw5qJ/yGAWPxLuWcsgPgoPosbwscbtHvzv5oUqpl0S/mJljLxX8wuUdfSV0fB3jaazaYTO+SYPskpewZrQC09uFlnnLVlxr4g8AfFqXMdT+Qytbs0INdSaq41vb0KJyPXciyXqs3mVvAh+1SlEK/FdbGCH3iPVmT+76j4GsjtmWGvEQ0zFOhPXPXOeMtG1Bo2RY8cu18Pnpr9/d2l9ynWs0L/lX9PoxG8wm1cweKDx0/uuEHQua82bgXqctUbvT33FuxG0Jl5AUSTJmUDe+GeOqTWd3B3UCozsNWxFqjuHylJqmOFe1QvK7xe6j4wAe1e3Ubr03gupO60IZb0W0pZYnX2bcdIJlV3a6LyhI0+3PEpUx2abqpJhVn/heuVmpnsqRc/dZ4+5BcBtkSp5ti9FVyYV5oZOYAjI63g5rNXcP1rrr41o15znT0PnBv+jL6N8x8hWviCm/z+n4iIiIiIiIiIiIiIiIiIiIiIiIho2pTx/xJV15GIiIiIiIiIiIiIiIiIiIiIiIiIiIiIaNqtezC/e43u838x3PN/k49icc1Pgo/l+b/72+Dzf4mK9ycAAP//m053Mg==") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) 36.742748ms ago: executing program 2 (id=6332): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'dummy0\x00', @local}) 24.286419ms ago: executing program 1 (id=6333): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000840)=@ethtool_dump={0x3e, 0xfffffff8, 0xfffffff3}}) 0s ago: executing program 6 (id=6334): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000883, &(0x7f0000002ac0)=ANY=[], 0x1, 0x20c, &(0x7f0000000e00)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) kernel console output (not intermixed with test programs): ): Directory bread(block 66) failed [ 783.594609][T17212] FAT-fs (loop5): Directory bread(block 67) failed [ 783.618420][T17212] FAT-fs (loop5): Directory bread(block 68) failed [ 783.624995][T17212] FAT-fs (loop5): Directory bread(block 69) failed [ 783.718520][T17212] FAT-fs (loop5): Directory bread(block 70) failed [ 783.740349][T17212] FAT-fs (loop5): Directory bread(block 71) failed [ 783.780668][T17212] FAT-fs (loop5): Directory bread(block 72) failed [ 783.820736][T17212] FAT-fs (loop5): Directory bread(block 73) failed [ 784.293894][T17235] netlink: 'syz.4.4795': attribute type 10 has an invalid length. [ 784.315060][T17235] lo: entered promiscuous mode [ 784.344181][T17235] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 784.664302][T17247] loop0: detected capacity change from 0 to 128 [ 784.750647][T17247] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 784.789282][T17247] ext4 filesystem being mounted at /757/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 784.943517][T17247] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.4801: No space for directory leaf checksum. Please run e2fsck -D. [ 784.983732][T17259] loop1: detected capacity change from 0 to 8 [ 785.008161][T17247] EXT4-fs error (device loop0): __ext4_find_entry:1624: inode #2: comm syz.0.4801: checksumming directory block 0 [ 785.051953][T17259] SQUASHFS error: Failed to read block 0x2d7: -5 [ 785.066668][T17245] loop5: detected capacity change from 0 to 8192 [ 785.093741][T17259] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 785.123539][T17259] SQUASHFS error: Failed to read block 0x8f: -5 [ 785.134641][T17264] loop2: detected capacity change from 0 to 8 [ 785.169764][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 785.169790][ T30] audit: type=1800 audit(2000000100.087:27): pid=17259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4805" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 785.272422][T17260] loop4: detected capacity change from 0 to 4096 [ 785.288849][T17266] netlink: 'syz.3.4810': attribute type 4 has an invalid length. [ 785.315686][T17264] SQUASHFS error: xz decompression failed, data probably corrupt [ 785.336373][ T6084] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 785.345635][T17264] SQUASHFS error: Failed to read block 0xa8: -5 [ 785.389250][T17260] ntfs3(loop4): ino=0, mi_enum_attr [ 785.418962][T17260] ntfs3(loop4): ino=0, mi_enum_attr [ 785.426090][T17264] SQUASHFS error: xz decompression failed, data probably corrupt [ 785.457101][T17260] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 785.468171][T17264] SQUASHFS error: Failed to read block 0xa8: -5 [ 785.486228][ T30] audit: type=1800 audit(2000000100.387:28): pid=17264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4809" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 785.699484][T17272] loop3: detected capacity change from 0 to 256 [ 785.784422][T17274] loop5: detected capacity change from 0 to 256 [ 785.946835][T17272] FAT-fs (loop3): Directory bread(block 64) failed [ 785.974667][T17272] FAT-fs (loop3): Directory bread(block 65) failed [ 786.067006][T17272] FAT-fs (loop3): Directory bread(block 66) failed [ 786.079341][T17274] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 786.094571][T17272] FAT-fs (loop3): Directory bread(block 67) failed [ 786.133874][T17272] FAT-fs (loop3): Directory bread(block 68) failed [ 786.204864][T17272] FAT-fs (loop3): Directory bread(block 69) failed [ 786.247378][T17272] FAT-fs (loop3): Directory bread(block 70) failed [ 786.291295][T17272] FAT-fs (loop3): Directory bread(block 71) failed [ 786.318180][T17272] FAT-fs (loop3): Directory bread(block 72) failed [ 786.353444][T17272] FAT-fs (loop3): Directory bread(block 73) failed [ 787.256780][T17307] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4830'. [ 787.517478][T17314] netlink: 'syz.0.4833': attribute type 12 has an invalid length. [ 787.697847][T17322] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 788.000126][T17328] loop2: detected capacity change from 0 to 512 [ 788.124494][T17328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.140737][ T6238] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 788.173977][T17328] ext4 filesystem being mounted at /822/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.324897][ T6238] usb 1-1: Using ep0 maxpacket: 16 [ 788.345593][ T6081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.365623][ T6238] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.386766][ T6238] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 788.410992][ T6238] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 788.462646][ T6238] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.521382][ T6238] usb 1-1: config 0 interface 0 has no altsetting 0 [ 788.549699][ T6238] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 788.579816][ T6238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.620383][ T6238] usb 1-1: Product: syz [ 788.645096][ T6238] usb 1-1: Manufacturer: syz [ 788.649760][ T6238] usb 1-1: SerialNumber: syz [ 788.706038][ T6238] usb 1-1: config 0 descriptor?? [ 789.269249][ T6090] usb 1-1: USB disconnect, device number 122 [ 789.379057][T17368] block nbd0: Attempted send on invalid socket [ 789.404316][T17368] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 790.102592][T17390] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4871'. [ 790.132747][T17387] loop4: detected capacity change from 0 to 4096 [ 790.187578][T17387] EXT4-fs (loop4): Test dummy encryption mode enabled [ 790.220085][T17387] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 790.240640][T17387] System zones: 0-5 [ 790.270623][T17387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.590135][ T6085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.071248][T17432] loop2: detected capacity change from 0 to 4096 [ 792.169636][T17432] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 792.229810][T17432] ntfs3(loop2): ino=1a, mi_enum_attr [ 792.262347][T17432] ntfs3(loop2): ino=1a, mi_enum_attr [ 792.286406][T17432] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 792.511081][T17432] ntfs3(loop2): ino=1a, mi_enum_attr [ 792.554485][T17456] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 793.669730][ T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 793.793373][T17486] openvswitch: netlink: Unknown key attributes 2 [ 793.865514][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 793.901087][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 793.915741][T17489] netlink: 'syz.1.4918': attribute type 39 has an invalid length. [ 793.934408][ T9] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 793.951152][ T9] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 793.964966][ T9] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 794.026096][ T9] usb 3-1: config 7 has no interface number 0 [ 794.039888][ T9] usb 3-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 794.064013][T17492] loop4: detected capacity change from 0 to 512 [ 794.070499][ T9] usb 3-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 794.084210][ T9] usb 3-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 794.107440][ T9] usb 3-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 794.197986][ T9] usb 3-1: config 7 interface 128 has no altsetting 0 [ 794.219552][T17492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.255813][T17492] ext4 filesystem being mounted at /775/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.272595][ T9] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 794.282493][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.293496][ T9] usb 3-1: Product: syz [ 794.297697][ T9] usb 3-1: Manufacturer: syz [ 794.318187][ T9] usb 3-1: SerialNumber: syz [ 794.334708][T17476] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 794.392759][T17492] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4919: corrupted xattr block 33: invalid ea_ino [ 794.448154][T17503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4921'. [ 794.674649][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 794.683502][ T6085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.696720][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 794.701947][ T30] audit: type=1400 audit(2000000108.974:29): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=17507 comm="syz.0.4925" [ 794.860373][T17512] Device name not specified. [ 794.860373][T17512] [ 794.881617][ T9] usb 3-1: USB disconnect, device number 114 [ 795.033794][T17516] loop4: detected capacity change from 0 to 256 [ 795.160380][T17516] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 795.169315][T17520] netlink: 'syz.1.4930': attribute type 1 has an invalid length. [ 795.235203][T17523] netlink: 'syz.3.4931': attribute type 64 has an invalid length. [ 795.238820][ T6198] udevd[6198]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 795.285448][T17523] netlink: 'syz.3.4931': attribute type 4 has an invalid length. [ 795.335501][T17523] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4931'. [ 795.679541][T17532] loop5: detected capacity change from 0 to 64 [ 795.803471][T17532] Trying to free block not in datazone [ 795.854138][T17535] geneve2: entered promiscuous mode [ 796.147056][T17545] loop0: detected capacity change from 0 to 256 [ 796.214231][T17545] exfat: Deprecated parameter 'utf8' [ 796.219637][T17545] exfat: Deprecated parameter 'namecase' [ 796.333198][T17545] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 796.504696][T17549] loop5: detected capacity change from 0 to 4096 [ 796.650431][T17560] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 796.727390][T17549] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 796.867876][T17569] loop1: detected capacity change from 0 to 64 [ 797.510219][ T855] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 797.524944][T17580] loop2: detected capacity change from 0 to 4096 [ 797.610879][T17580] ntfs3(loop2): ino=0, mi_enum_attr [ 797.673132][T17580] ntfs3(loop2): ino=0, mi_enum_attr [ 797.713206][T17580] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 797.734466][ T855] usb 1-1: Using ep0 maxpacket: 8 [ 797.773544][ T855] usb 1-1: unable to get BOS descriptor or descriptor too short [ 797.806370][T17589] dlm: no local IP address has been set [ 797.841535][ T855] usb 1-1: string descriptor 0 read error: -22 [ 797.858859][T17589] dlm: cannot start dlm midcomms -107 [ 797.873095][ T855] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 797.917629][T17591] loop4: detected capacity change from 0 to 256 [ 797.999375][T17591] exfat: Deprecated parameter 'utf8' [ 798.047942][T17591] exfat: Deprecated parameter 'utf8' [ 798.214035][T17591] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x509db19e, utbl_chksum : 0xe619d30d) [ 798.451526][T17593] loop5: detected capacity change from 0 to 128 [ 798.510355][ T855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.588642][T17593] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 798.713824][T17593] ext4 filesystem being mounted at /764/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 798.767470][ T855] asix 1-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 798.806922][T17598] loop1: detected capacity change from 0 to 256 [ 798.989638][ T6100] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 799.002510][ T855] asix 1-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 799.037123][ T855] asix 1-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 799.055388][T17598] FAT-fs (loop1): Directory bread(block 64) failed [ 799.076785][T17598] FAT-fs (loop1): Directory bread(block 65) failed [ 799.116726][ T855] asix 1-1:7.0: probe with driver asix failed with error -71 [ 799.128537][T17598] FAT-fs (loop1): Directory bread(block 66) failed [ 799.194037][T17598] FAT-fs (loop1): Directory bread(block 67) failed [ 799.208644][T17606] loop4: detected capacity change from 0 to 64 [ 799.212483][ T855] usb 1-1: USB disconnect, device number 123 [ 799.259608][T17598] FAT-fs (loop1): Directory bread(block 68) failed [ 799.290883][T17598] FAT-fs (loop1): Directory bread(block 69) failed [ 799.327137][T17606] Trying to free block not in datazone [ 799.354194][T17598] FAT-fs (loop1): Directory bread(block 70) failed [ 799.400402][T17598] FAT-fs (loop1): Directory bread(block 71) failed [ 799.442736][T17598] FAT-fs (loop1): Directory bread(block 72) failed [ 799.471052][T17598] FAT-fs (loop1): Directory bread(block 73) failed [ 800.044349][T17628] loop1: detected capacity change from 0 to 256 [ 800.551995][T17644] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4988'. [ 800.898405][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4991'. [ 801.431590][T17625] loop5: detected capacity change from 0 to 32768 [ 801.582621][T17625] ERROR: (device loop5): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 801.582621][T17625] [ 801.674871][T17625] ERROR: (device loop5): remounting filesystem as read-only [ 801.682703][T17625] ERROR: (device loop5): txAbort: [ 801.682703][T17625] [ 802.014343][T17669] loop1: detected capacity change from 0 to 512 [ 802.054739][T17643] loop0: detected capacity change from 0 to 32768 [ 802.098642][T17669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.128274][ T6100] ERROR: (device loop5): xtTruncate: xt_getpage: xtree page corrupt [ 802.128274][ T6100] [ 802.148463][T17669] ext4 filesystem being mounted at /851/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.328405][T17643] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 802.328405][T17643] [ 802.349575][T17669] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.4999: corrupted xattr block 33: invalid ea_ino [ 802.552471][ T6238] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 802.667512][ T6082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.776434][ T1207] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 802.786899][ T6238] usb 4-1: Using ep0 maxpacket: 16 [ 802.821873][ T6238] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 802.842454][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5011'. [ 802.862219][ T6238] usb 4-1: config 0 has no interface number 0 [ 802.873023][ T6238] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 802.895670][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5011'. [ 802.953940][ T6238] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 802.972887][ T6238] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 803.001561][ T6238] usb 4-1: Product: syz [ 803.005948][ T6238] usb 4-1: SerialNumber: syz [ 803.006058][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 803.038081][T17691] loop1: detected capacity change from 0 to 256 [ 803.043778][ T6238] usb 4-1: config 0 descriptor?? [ 803.066024][ T1207] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 803.079538][ T6238] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 803.094759][T17691] exfat: Deprecated parameter 'utf8' [ 803.109885][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 803.135008][T17691] exfat: Deprecated parameter 'namecase' [ 803.141897][ T6238] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input50 [ 803.185206][T17691] exfat: Deprecated parameter 'utf8' [ 803.233172][ T1207] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 803.249823][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.320453][ T1207] usb 5-1: Product: syz [ 803.361084][ T1207] usb 5-1: Manufacturer: syz [ 803.384643][T17691] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 803.403146][ T1207] usb 5-1: SerialNumber: syz [ 803.506635][ T1207] usb 5-1: config 0 descriptor?? [ 803.513991][T17683] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 803.521276][T17683] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 803.530167][T17691] Invalid source name [ 803.553209][ T1207] usb 5-1: ucan: probing device on interface #0 [ 803.644716][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 803.652585][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 803.660423][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 803.667660][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 803.677400][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 803.684637][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 803.691809][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 803.699054][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 803.706444][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 803.713609][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 803.720783][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 803.736290][ T6238] usb 4-1: USB disconnect, device number 3 [ 803.742190][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 803.834683][ T1207] usb 5-1: ucan: device protocol version 0 is not supported [ 803.850045][ T1207] usb 5-1: ucan: probe failed; try to update the device firmware [ 803.863381][ T6238] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 804.185566][ T6072] usb 5-1: USB disconnect, device number 112 [ 804.241300][T17711] macvlan0: entered allmulticast mode [ 804.268728][T17711] veth1_vlan: entered allmulticast mode [ 804.618355][T17722] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5025'. [ 805.244557][T17744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.129183][T17754] loop1: detected capacity change from 0 to 4096 [ 806.174804][T17754] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 806.226103][T17765] capability: warning: `syz.0.5048' uses 32-bit capabilities (legacy support in use) [ 806.401577][T17754] ntfs3(loop1): ino=5, "/" ntfs_readdir [ 806.453682][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5049'. [ 806.465633][T17737] loop2: detected capacity change from 0 to 32768 [ 806.502072][T17737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5032 (17737) [ 806.601937][T17737] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 806.678193][T17737] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 806.755747][T17776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5051'. [ 806.777546][T17776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5051'. [ 807.016045][T17800] loop3: detected capacity change from 0 to 1764 [ 807.028509][T17737] BTRFS info (device loop2): enabling ssd optimizations [ 807.052194][T17737] BTRFS info (device loop2): enabling free space tree [ 807.148540][ T6072] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 807.259127][T17737] BTRFS error: failed to open device for path nhؤo6:ƾ+@W4xF 2i{!Xg]C with flags 0x1: -2 [ 807.353005][ T6072] usb 6-1: unable to get BOS descriptor or descriptor too short [ 807.385578][ T6072] usb 6-1: not running at top speed; connect to a high speed hub [ 807.447781][ T6072] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.470201][ T6072] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 807.482902][ T6072] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 807.504668][ T6081] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 807.542412][ T6072] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 807.597675][ T6072] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 807.704474][ T6072] usb 6-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 807.743199][ T6072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.775924][ T6072] usb 6-1: Product: syz [ 807.811160][ T6072] usb 6-1: Manufacturer: syz [ 807.833221][ T6072] usb 6-1: SerialNumber: syz [ 807.933862][ T6072] ipaq 6-1:1.0: PocketPC PDA converter detected [ 808.159334][ T6072] usb 6-1: PocketPC PDA converter now attached to ttyUSB0 [ 808.415760][T13869] usb 6-1: USB disconnect, device number 114 [ 808.452642][ T855] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 808.507163][T13869] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 808.516178][T13869] ipaq 6-1:1.0: device disconnected [ 808.670441][ T855] usb 4-1: unable to get BOS descriptor or descriptor too short [ 808.681423][T17793] loop1: detected capacity change from 0 to 32768 [ 808.704843][ T855] usb 4-1: not running at top speed; connect to a high speed hub [ 808.737108][ T855] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 808.762414][ T855] usb 4-1: config 1 has no interface number 0 [ 808.785613][ T855] usb 4-1: config 1 interface 138 has no altsetting 0 [ 808.820293][T17793] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 808.820293][T17793] [ 808.821416][ T855] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 808.863059][ T6307] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 808.906660][T17831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5072'. [ 808.917506][ T855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.917554][ T855] usb 4-1: Product: syz [ 808.917583][ T855] usb 4-1: Manufacturer: syz [ 808.917611][ T855] usb 4-1: SerialNumber: syz [ 808.951438][T17831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5072'. [ 808.972005][T17831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5072'. [ 808.997565][T17833] netlink: 'syz.4.5073': attribute type 2 has an invalid length. [ 809.023800][T17833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5073'. [ 809.118269][ T6307] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 809.148667][ T6307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.197649][ T6307] usb 3-1: config 0 descriptor?? [ 809.212059][ T855] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 809.247842][ T6307] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 809.382798][ T855] usb 4-1: USB disconnect, device number 4 [ 809.717301][ T6307] gp8psk: usb in 138 operation failed. [ 809.730728][ T6307] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 809.775036][ T6307] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 809.810599][ T6307] usb 3-1: USB disconnect, device number 115 [ 810.184277][T17849] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5081'. [ 810.193736][T17848] loop4: detected capacity change from 0 to 64 [ 810.914687][T17837] loop1: detected capacity change from 0 to 32768 [ 810.954372][T17839] loop5: detected capacity change from 0 to 32768 [ 810.975786][T17837] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5074 (17837) [ 811.074975][T17839] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 5886e830-7198-4f42-9645-dda7b0178557 [ 811.084764][T17837] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 811.114802][T17837] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 811.139279][T17839] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5076 (17839) [ 811.200159][T17839] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 811.224481][T17839] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 811.578476][T17839] BTRFS info (device loop5): enabling ssd optimizations [ 811.614991][T17837] BTRFS info (device loop1): enabling ssd optimizations [ 811.627863][T17839] BTRFS info (device loop5): enabling free space tree [ 811.649660][T17837] BTRFS info (device loop1): enabling free space tree [ 811.711657][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5097'. [ 811.853253][T17837] BTRFS error: failed to open device for path nhؤo6:ƾ+@W4xF 2i{!Xg]C with flags 0x1: -2 [ 812.045321][ T6100] BTRFS info (device loop5): last unmount of filesystem 5886e830-7198-4f42-9645-dda7b0178557 [ 812.176223][T17922] loop4: detected capacity change from 0 to 512 [ 812.210068][ T6082] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 812.276296][T17922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 812.315395][T17925] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5104'. [ 812.537636][T17922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 812.622177][T17922] ext4 filesystem being mounted at /809/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.813195][T17922] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 812.862320][T17922] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 813.001093][T17922] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5101: Failed to acquire dquot type 0 [ 813.398994][ T6085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 813.552544][T17954] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5115'. [ 814.514425][ T6307] IPVS: starting estimator thread 0... [ 814.632012][T17976] IPVS: using max 23 ests per chain, 55200 per kthread [ 814.653977][T17984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5130'. [ 814.677063][T17983] loop0: detected capacity change from 0 to 512 [ 814.780189][T17983] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 814.789479][T17941] loop2: detected capacity change from 0 to 32768 [ 814.889147][T17941] JBD2: Ignoring recovery information on journal [ 814.895759][T17983] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 814.937236][T17983] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 815.008623][T17983] System zones: 0-1, 15-15, 18-18, 34-34 [ 815.014896][T17983] EXT4-fs (loop0): orphan cleanup on readonly fs [ 815.061022][T17983] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 815.083223][T17995] loop1: detected capacity change from 0 to 16 [ 815.124352][T17941] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 815.128039][T17995] erofs (device loop1): mounted with root inode @ nid 36. [ 815.167936][T17983] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 815.248070][T17995] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 815.257713][T17983] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 815.318447][T17983] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.5129: bg 0: block 40: padding at end of block bitmap is not set [ 815.326462][T17995] erofs (device loop1): readahead error at folio 1 @ nid 89 [ 815.399706][T17983] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 815.435935][T17983] EXT4-fs (loop0): 1 truncate cleaned up [ 815.444671][T17995] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 815.464353][T17995] syz.1.5134: attempt to access beyond end of device [ 815.464353][T17995] loop1: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 815.486113][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5136'. [ 815.500526][T17983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 815.541626][T17995] erofs (device loop1): read error -117 @ 0 of nid 89 [ 815.560393][ T30] audit: type=1800 audit(2000000128.514:30): pid=17995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5134" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 815.811259][ T6081] ocfs2: Unmounting device (7,2) on (node local) [ 815.819108][T17983] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.5129: bad symlink. [ 816.088467][ T6084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.009011][T18035] loop3: detected capacity change from 0 to 1024 [ 817.076643][T18035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.492525][T18049] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5159'. [ 817.554280][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5160'. [ 817.583104][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.866480][T18053] loop2: detected capacity change from 0 to 4096 [ 818.066721][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5167'. [ 818.296851][T18068] loop0: detected capacity change from 0 to 4096 [ 818.348428][T18068] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 818.468880][T18068] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 818.865318][T13869] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 819.050147][T18084] loop1: detected capacity change from 0 to 2048 [ 819.080984][T13869] usb 6-1: Using ep0 maxpacket: 32 [ 819.088505][T18090] netlink: 'syz.2.5177': attribute type 39 has an invalid length. [ 819.095001][T13869] usb 6-1: unable to get BOS descriptor or descriptor too short [ 819.124547][T18084] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 819.124798][T13869] usb 6-1: config 7 has an invalid interface number: 128 but max is 0 [ 819.132272][T18084] UDF-fs: Scanning with blocksize 512 failed [ 819.184166][T18084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 819.214616][T13869] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 819.229560][T18092] random: crng reseeded on system resumption [ 819.253556][T13869] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 819.290576][T13869] usb 6-1: config 7 has no interface number 0 [ 819.312317][T13869] usb 6-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 819.364967][T13869] usb 6-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 819.386370][T13869] usb 6-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 819.413857][T13869] usb 6-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 819.450918][T13869] usb 6-1: config 7 interface 128 has no altsetting 0 [ 819.469612][T13869] usb 6-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 819.494000][T13869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.540436][T13869] usb 6-1: Product: syz [ 819.544651][T13869] usb 6-1: Manufacturer: syz [ 819.595957][T13869] usb 6-1: SerialNumber: syz [ 819.633867][T18076] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 819.860161][T18101] loop1: detected capacity change from 0 to 512 [ 819.938095][T13869] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 819.966545][T13869] usb 6-1: MIDIStreaming interface descriptor not found [ 819.973324][T18101] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 820.122634][T18101] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 820.191067][T18101] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 820.223220][T13869] usb 6-1: USB disconnect, device number 115 [ 820.367888][ T6584] udevd[6584]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.478007][T18117] netlink: 664 bytes leftover after parsing attributes in process `syz.0.5190'. [ 820.520407][T18119] netlink: 'syz.3.5191': attribute type 11 has an invalid length. [ 820.546329][ T6082] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 820.675002][ T855] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 820.688823][T18121] loop4: detected capacity change from 0 to 512 [ 820.769570][T18123] netlink: 'syz.1.5193': attribute type 1 has an invalid length. [ 820.790302][T18121] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 820.817132][T18121] EXT4-fs (loop4): 1 truncate cleaned up [ 820.828416][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5193'. [ 820.867197][T18121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.896469][ T855] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 820.905727][ T855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.914367][ T855] usb 3-1: Product: syz [ 820.918936][ T855] usb 3-1: Manufacturer: syz [ 820.923548][ T855] usb 3-1: SerialNumber: syz [ 820.946883][T18121] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.5194: Logical block already allocated [ 820.961711][ T855] usb 3-1: config 0 descriptor?? [ 820.976979][ T855] ch341 3-1:0.0: ch341-uart converter detected [ 821.024632][T18121] EXT4-fs (loop4): Remounting filesystem read-only [ 821.229562][ T855] usb 3-1: failed to receive control message: -71 [ 821.233349][T18134] loop0: detected capacity change from 0 to 256 [ 821.267247][ T855] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 821.285918][ T6085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.295508][ T855] usb 3-1: USB disconnect, device number 116 [ 821.317462][ T855] ch341 3-1:0.0: device disconnected [ 821.710920][T18145] loop5: detected capacity change from 0 to 16 [ 821.751272][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 821.778298][T18145] erofs (device loop5): mounted with root inode @ nid 36. [ 821.997113][T18152] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5207'. [ 822.295536][T18160] loop4: detected capacity change from 0 to 64 [ 822.439274][T18164] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 822.525087][T18167] ieee802154 phy0 wpan0: encryption failed: -22 [ 822.822702][T18173] loop0: detected capacity change from 0 to 256 [ 822.866134][T18173] exfat: Deprecated parameter 'namecase' [ 822.871881][T18173] exfat: Deprecated parameter 'namecase' [ 823.028131][T18173] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 823.155578][T18179] nvme_fabrics: missing parameter 'transport=%s' [ 823.183365][T18182] loop2: detected capacity change from 0 to 1024 [ 823.185046][T18179] nvme_fabrics: missing parameter 'nqn=%s' [ 823.280003][T18182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.409203][ T855] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 823.514771][ T6081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.585429][ T855] usb 5-1: Using ep0 maxpacket: 16 [ 823.606795][ T855] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 823.627636][ T855] usb 5-1: config 0 has no interface number 0 [ 823.644194][ T855] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 823.654751][ T855] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 823.676472][ T855] usb 5-1: config 0 interface 41 has no altsetting 0 [ 823.687176][ T855] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 823.708747][ T855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.716817][ T855] usb 5-1: Product: syz [ 823.742914][ T855] usb 5-1: Manufacturer: syz [ 823.747594][ T855] usb 5-1: SerialNumber: syz [ 823.820978][ T855] usb 5-1: config 0 descriptor?? [ 823.832601][T18200] loop5: detected capacity change from 0 to 2048 [ 823.847681][T18184] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 823.890238][T18184] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 823.993904][T18205] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 824.141148][T18200] syz.5.5230: attempt to access beyond end of device [ 824.141148][T18200] loop5: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 824.169403][T18184] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 824.232162][T18184] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 824.237107][T18200] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15) [ 824.360689][T18200] NILFS (loop5): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 824.403848][T18200] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 824.485075][ T855] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 824.488768][T18200] Remounting filesystem read-only [ 824.528172][T18200] NILFS (loop5): error -5 truncating bmap (ino=16) [ 824.561874][ T855] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 824.633746][ T855] usb 5-1: USB disconnect, device number 113 [ 824.866942][ T6100] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 825.998610][T18239] netlink: set zone limit has 4 unknown bytes [ 826.379549][T18257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5256'. [ 826.423889][T18260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5255'. [ 826.711946][T18268] loop2: detected capacity change from 0 to 512 [ 826.764518][T18269] loop0: detected capacity change from 0 to 1024 [ 826.814424][T18269] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 826.901384][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5264'. [ 826.918486][T18268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.011734][T18268] ext4 filesystem being mounted at /882/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.193414][T18233] loop5: detected capacity change from 0 to 32768 [ 827.239909][T18268] EXT4-fs error (device loop2): ext4_get_inode_usage:884: inode #12: comm syz.2.5259: corrupted xattr block 6: invalid header [ 827.492820][T18284] netlink: 'syz.0.5267': attribute type 1 has an invalid length. [ 827.545127][T18284] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5267'. [ 827.562757][T18290] IPv6: Can't replace route, no match found [ 827.617062][ T6081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.834829][T18294] ieee802154 phy0 wpan0: encryption failed: -22 [ 827.924428][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5275'. [ 828.269963][T18305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5277'. [ 828.415047][T18310] loop3: detected capacity change from 0 to 256 [ 828.466166][T18310] FAT-fs (loop3): Directory bread(block 1285) failed [ 828.556780][T18310] FAT-fs (loop3): Directory bread(block 1285) failed [ 828.601221][T18310] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 829.014360][T18324] ieee802154 phy0 wpan0: encryption failed: -22 [ 829.276394][T18336] loop3: detected capacity change from 0 to 64 [ 829.330136][T18336] hfs: unable to locate alternate MDB [ 829.367686][T18336] hfs: continuing without an alternate MDB [ 829.547671][T18340] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 830.402411][T18356] loop3: detected capacity change from 0 to 4096 [ 830.466241][T18363] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 830.508439][T18320] loop0: detected capacity change from 0 to 32768 [ 830.518807][T18320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5285 (18320) [ 830.540106][T18362] loop4: detected capacity change from 0 to 1764 [ 830.557719][T18320] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 830.557819][T18320] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 830.805137][T18320] BTRFS info (device loop0): enabling ssd optimizations [ 830.805178][T18320] BTRFS info (device loop0): enabling free space tree [ 830.940506][T18378] loop2: detected capacity change from 0 to 1024 [ 831.056441][T18378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.234887][ T6084] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 831.443876][ T6081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.010756][ T6072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 832.022055][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 832.934462][T18458] netlink: 'syz.4.5320': attribute type 21 has an invalid length. [ 832.942409][T18458] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5320'. [ 833.819133][T18394] loop5: detected capacity change from 0 to 32768 [ 833.864712][T18394] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5311 (18394) [ 833.930298][T18394] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 833.966296][T18394] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 834.024950][T13869] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 834.194259][T18394] BTRFS info (device loop5): turning off barriers [ 834.207047][T18394] BTRFS info (device loop5): turning on flush-on-commit [ 834.218341][T18394] BTRFS info (device loop5): turning on sync discard [ 834.225157][T18394] BTRFS info (device loop5): enabling free space tree [ 834.249470][T13869] usb 1-1: Using ep0 maxpacket: 32 [ 834.288863][T13869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 834.309923][T13869] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 834.329763][T18496] ieee802154 phy0 wpan0: encryption failed: -22 [ 834.361804][T13869] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 834.398425][T13869] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 834.452417][T13869] usb 1-1: config 7 has no interface number 0 [ 834.458630][T13869] usb 1-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 834.520083][T13869] usb 1-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 834.541606][ T6100] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 834.553436][T18439] loop1: detected capacity change from 0 to 32768 [ 834.562931][T13869] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 834.618157][T13869] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 834.643926][T18439] ERROR: (device loop1): diAllocAG: nfreeinos = 0, but iag on freelist [ 834.643926][T18439] [ 834.689671][T13869] usb 1-1: config 7 interface 128 has no altsetting 0 [ 834.725894][T13869] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 834.741475][T18439] ialloc: diAlloc returned -5! [ 834.754962][T13869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.810661][T13869] usb 1-1: Product: syz [ 834.815194][T13869] usb 1-1: Manufacturer: syz [ 834.824538][ T6092] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 834.843346][T13869] usb 1-1: SerialNumber: syz [ 834.926564][T18473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 834.997602][T18505] netlink: 'syz.5.5333': attribute type 1 has an invalid length. [ 835.274652][T13869] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 835.334894][T13869] usb 1-1: MIDIStreaming interface descriptor not found [ 835.528065][T13869] usb 1-1: USB disconnect, device number 124 [ 835.664252][T18515] loop3: detected capacity change from 0 to 164 [ 835.742440][ T6162] udevd[6162]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.042439][T18517] wireguard0: entered promiscuous mode [ 836.070005][T18517] wireguard0: entered allmulticast mode [ 836.698285][T13869] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 836.911092][T13869] usb 1-1: Using ep0 maxpacket: 16 [ 836.945061][T13869] usb 1-1: config 0 has an invalid interface number: 161 but max is 0 [ 836.985878][T13869] usb 1-1: config 0 has no interface number 0 [ 837.024701][T13869] usb 1-1: config 0 interface 161 has no altsetting 0 [ 837.053865][T13869] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 837.070733][T18552] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 837.101409][T13869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.123376][T18552] overlayfs: missing 'lowerdir' [ 837.135692][T13869] usb 1-1: Product: syz [ 837.158006][T13869] usb 1-1: Manufacturer: syz [ 837.173173][T13869] usb 1-1: SerialNumber: syz [ 837.222901][T13869] usb 1-1: config 0 descriptor?? [ 837.241167][T13869] ums-jumpshot 1-1:0.161: USB Mass Storage device detected [ 837.297850][T13869] ums-jumpshot 1-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 837.567389][ T6072] usb 1-1: USB disconnect, device number 125 [ 837.586062][T18566] loop5: detected capacity change from 0 to 1024 [ 837.697197][T18566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 837.765298][T18574] loop2: detected capacity change from 0 to 4096 [ 837.773673][T18566] ext4 filesystem being mounted at /817/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 837.834856][ T6100] EXT4-fs error (device loop5): ext4_readdir:262: inode #2: block 16: comm syz-executor: path /817/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 837.873275][T18575] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 837.924175][ T6100] EXT4-fs error (device loop5): ext4_readdir:262: inode #11: block 37: comm syz-executor: path /817/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 838.034381][ T6100] EXT4-fs error (device loop5): ext4_empty_dir:3119: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 838.113131][ T6100] EXT4-fs error (device loop5): ext4_readdir:262: inode #11: block 37: comm syz-executor: path /817/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 838.205757][ T6100] EXT4-fs error (device loop5): ext4_empty_dir:3119: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 838.269401][T18538] loop3: detected capacity change from 0 to 32768 [ 838.277075][ T6100] EXT4-fs error (device loop5): ext4_readdir:262: inode #11: block 37: comm syz-executor: path /817/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 838.373469][T18538] JBD2: Ignoring recovery information on journal [ 838.409733][ T6100] EXT4-fs error (device loop5): ext4_empty_dir:3119: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 838.551010][ T6100] EXT4-fs error (device loop5): ext4_readdir:262: inode #11: block 37: comm syz-executor: path /817/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 838.629600][ T6100] EXT4-fs error (device loop5): ext4_empty_dir:3119: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 838.658664][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5372'. [ 838.711966][ T6100] EXT4-fs error (device loop5): ext4_readdir:262: inode #11: block 37: comm syz-executor: path /817/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 838.716862][T18538] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 839.376183][ T6083] ocfs2: Unmounting device (7,3) on (node local) [ 839.486541][T18611] tmpfs: Bad value for 'mpol' [ 839.527546][T18609] loop2: detected capacity change from 0 to 1024 [ 839.547901][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 839.554430][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.572096][T18609] EXT4-fs: Ignoring removed mblk_io_submit option [ 839.603587][T18609] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 839.687127][T18614] loop0: detected capacity change from 0 to 2048 [ 839.695766][T18609] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.5382: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 839.723785][T18609] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.5382: couldn't read orphan inode 11 (err -117) [ 839.779402][T18614] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 839.822896][T18609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.199515][ T6081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.481136][T18623] loop1: detected capacity change from 0 to 4096 [ 840.582198][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.593641][T18632] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 841.118543][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.274520][T18629] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 841.292596][T18629] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 841.340797][T18625] loop0: detected capacity change from 0 to 32768 [ 841.382077][T18625] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5391 (18625) [ 841.449905][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.461264][T18625] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 841.497814][T18625] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 841.788228][T18625] BTRFS info (device loop0): rebuilding free space tree [ 841.918969][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.957597][T18625] BTRFS info (device loop0): enabling ssd optimizations [ 841.964616][T18625] BTRFS info (device loop0): using spread ssd allocation scheme [ 842.024562][T18625] BTRFS info (device loop0): enabling free space tree [ 842.068709][T18625] BTRFS info (device loop0): force clearing of disk cache [ 842.096230][T18667] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5403'. [ 842.495104][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.541359][ T6084] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 842.620298][ T6091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.635515][ T6091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.649899][ T6091] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.669250][ T6091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.704367][ T6091] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 843.766569][ T13] bridge_slave_1: left allmulticast mode [ 843.772467][ T13] bridge_slave_1: left promiscuous mode [ 843.829939][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.953916][ T13] bridge_slave_0: left allmulticast mode [ 843.974174][ T13] bridge_slave_0: left promiscuous mode [ 843.984993][ T30] audit: type=1400 audit(2000000155.108:31): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=18705 comm="syz.3.5421" [ 844.021280][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.472733][T18720] Invalid source name [ 844.507321][T18720] UBIFS error (pid: 18720): cannot open "/dev/sg0", error -22 [ 845.004203][ T6091] Bluetooth: hci5: command tx timeout [ 845.716998][T18727] loop2: detected capacity change from 0 to 32768 [ 845.739779][T18727] btrfs: Unknown parameter 'noinode_cache' [ 845.884571][ T9] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 846.052140][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.094449][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 846.102440][ T9] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 846.115846][ T9] usb 1-1: config 0 has no interface number 0 [ 846.128057][ T9] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 846.142182][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.152323][ T9] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 846.173318][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 846.183688][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.193835][ T13] bond0 (unregistering): Released all slaves [ 846.199972][ T9] usb 1-1: Product: syz [ 846.208473][ T9] usb 1-1: Manufacturer: syz [ 846.213474][ T9] usb 1-1: SerialNumber: syz [ 846.259244][ T9] usb 1-1: config 0 descriptor?? [ 846.260610][T18727] loop2: detected capacity change from 0 to 512 [ 846.370624][T18708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5420'. [ 846.541309][ T9] radio-si470x 1-1:0.35: this is not a si470x device. [ 846.748747][ T9] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 846.806754][ T9] usb 1-1: USB disconnect, device number 126 [ 847.230127][ T6091] Bluetooth: hci5: command tx timeout [ 847.250836][T18677] chnl_net:caif_netlink_parms(): no params data found [ 847.787986][T18795] loop4: detected capacity change from 0 to 512 [ 847.882228][T18795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.916612][T18795] ext4 filesystem being mounted at /883/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.363574][T18814] openvswitch: netlink: Flow key attribute not present in set flow. [ 848.484342][ T6085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.558231][T18677] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.613577][T18677] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.633197][T18677] bridge_slave_0: entered allmulticast mode [ 848.647232][T18819] loop2: detected capacity change from 0 to 128 [ 848.654127][T18677] bridge_slave_0: entered promiscuous mode [ 848.703759][T18819] FAT-fs (loop2): Invalid FSINFO signature: 0x41075252, 0x80417272 (sector = 1) [ 848.729346][T18819] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00070003) [ 848.796383][T18819] FAT-fs (loop2): Filesystem has been set read-only [ 848.812056][ T13] hsr_slave_0: left promiscuous mode [ 848.818290][ T13] hsr_slave_1: left promiscuous mode [ 848.831929][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.862483][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.915844][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.955783][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.048385][ T13] veth1_macvtap: left promiscuous mode [ 849.054167][ T13] veth0_macvtap: left promiscuous mode [ 849.084033][ T13] veth1_vlan: left allmulticast mode [ 849.109731][ T13] veth1_vlan: left promiscuous mode [ 849.120379][ T13] veth0_vlan: left promiscuous mode [ 849.140877][T18806] loop1: detected capacity change from 0 to 32768 [ 849.149050][T18829] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5470'. [ 849.166026][T18829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5470'. [ 849.462534][ T6091] Bluetooth: hci5: command tx timeout [ 849.844493][T18841] netlink: 'syz.2.5476': attribute type 1 has an invalid length. [ 850.047053][T18847] netlink: 'syz.1.5479': attribute type 9 has an invalid length. [ 850.210357][ T6238] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 850.381454][ T6238] usb 1-1: Using ep0 maxpacket: 32 [ 850.393867][ T6238] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 850.411102][ T6238] usb 1-1: config 4 has no interface number 0 [ 850.420630][ T6238] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.439207][ T6238] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.450201][ T6238] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 850.459464][ T6238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.485991][ T6238] hub 1-1:4.128: USB hub found [ 850.608152][ T13] team0 (unregistering): Port device team_slave_1 removed [ 850.668809][ T13] team0 (unregistering): Port device team_slave_0 removed [ 850.708261][ T6238] hub 1-1:4.128: 6 ports detected [ 850.713951][ T6238] hub 1-1:4.128: Using single TT (err -22) [ 850.720397][ T6238] hub 1-1:4.128: insufficient power available to use all downstream ports [ 850.927795][ T6238] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 850.943093][ T6238] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 850.982671][ T6238] usb 1-1: USB disconnect, device number 127 [ 851.217013][T18677] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.224357][T18677] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.232486][T18677] bridge_slave_1: entered allmulticast mode [ 851.241041][T18677] bridge_slave_1: entered promiscuous mode [ 851.263042][T18827] geneve2: entered promiscuous mode [ 851.280123][T18827] geneve2: entered allmulticast mode [ 851.363829][T18851] netlink: 'syz.3.5481': attribute type 1 has an invalid length. [ 851.386368][T18851] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5481'. [ 851.497188][T18677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.571830][T18677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.593433][T18853] bond_slave_0: entered allmulticast mode [ 851.683522][ T6091] Bluetooth: hci5: command tx timeout [ 851.947922][T18859] loop0: detected capacity change from 0 to 1024 [ 852.068802][T18677] team0: Port device team_slave_0 added [ 852.116820][T18677] team0: Port device team_slave_1 added [ 852.734827][T18677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.741847][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.776908][ T855] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 852.892707][T18677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.952611][ T13] IPVS: stop unused estimator thread 0... [ 852.976871][T18677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.982348][ T855] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 853.002144][T18892] siw: device registration error -23 [ 853.005950][T18677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.050410][ T855] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 853.093055][T18677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.093224][ T855] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 853.176771][ T855] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 853.213697][ T855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.274516][ T855] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 853.301506][ T855] usb 1-1: invalid MIDI out EP 0 [ 853.725287][ T6344] udevd[6344]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 853.747287][ T855] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 853.773502][T18906] loop3: detected capacity change from 0 to 4096 [ 853.814355][T18677] hsr_slave_0: entered promiscuous mode [ 853.821277][T18677] hsr_slave_1: entered promiscuous mode [ 853.857213][ T855] usb 1-1: USB disconnect, device number 2 [ 853.884743][T18677] debugfs: 'hsr0' already exists in 'hsr' [ 853.908371][T18677] Cannot create hsr debugfs directory [ 854.087265][T18916] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5506'. [ 854.123469][T18916] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5506'. [ 855.324279][T18946] loop3: detected capacity change from 0 to 4096 [ 855.459748][T18946] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 855.535907][T18677] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 855.601776][T18677] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 855.695704][T18677] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 855.760937][T18677] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 856.484355][T18677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.683870][T18677] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.746446][T18430] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.753899][T18430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.889360][T18442] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.896862][T18442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.812986][T19014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5542'. [ 858.544724][T18677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.943123][T19034] loop2: detected capacity change from 0 to 4096 [ 858.975130][T19045] loop1: detected capacity change from 0 to 8 [ 859.183724][T19048] loop3: detected capacity change from 0 to 1764 [ 859.195301][T19045] SQUASHFS error: xz decompression failed, data probably corrupt [ 859.245881][T19045] SQUASHFS error: Failed to read block 0x60: -5 [ 859.310904][T19045] SQUASHFS error: xz decompression failed, data probably corrupt [ 859.363571][T19045] SQUASHFS error: Failed to read block 0x60: -5 [ 859.433850][ T30] audit: type=1800 audit(2000000169.559:32): pid=19045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5554" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 859.632959][T19056] loop0: detected capacity change from 0 to 512 [ 859.882436][T19056] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.5557: bg 0: block 248: padding at end of block bitmap is not set [ 859.934946][T19056] Quota error (device loop0): write_blk: dquota write failed [ 859.975369][T19056] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 860.046560][T19056] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5557: Failed to acquire dquot type 1 [ 860.125825][T19056] EXT4-fs (loop0): 1 truncate cleaned up [ 860.168725][T19056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.247249][T19056] ext4 filesystem being mounted at /885/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.415216][T19082] loop1: detected capacity change from 0 to 512 [ 860.470679][T18677] veth0_vlan: entered promiscuous mode [ 860.534824][T19082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 860.555030][T18677] veth1_vlan: entered promiscuous mode [ 860.625977][ T6084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.626515][T19082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.662462][T19082] ext4 filesystem being mounted at /944/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.962952][T19082] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 861.024062][T18677] veth0_macvtap: entered promiscuous mode [ 861.192635][T18677] veth1_macvtap: entered promiscuous mode [ 861.431030][ T6082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.559690][T18677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.647201][T18677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.728248][T18445] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.788248][T18449] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.832579][T18449] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.891701][T18449] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.561375][T18430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.589959][T18430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.615068][T19134] netlink: 'syz.0.5586': attribute type 8 has an invalid length. [ 862.707987][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5587'. [ 862.886161][T18435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.933956][T18435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.154652][T19188] loop2: detected capacity change from 0 to 256 [ 864.532566][T19197] loop0: detected capacity change from 0 to 2048 [ 864.605254][T19202] loop4: detected capacity change from 0 to 256 [ 864.623922][T19197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 864.863384][T19202] FAT-fs (loop4): Directory bread(block 64) failed [ 864.922463][T19202] FAT-fs (loop4): Directory bread(block 65) failed [ 864.984701][T19202] FAT-fs (loop4): Directory bread(block 66) failed [ 864.991300][T19202] FAT-fs (loop4): Directory bread(block 67) failed [ 865.068933][T19202] FAT-fs (loop4): Directory bread(block 68) failed [ 865.107157][T19202] FAT-fs (loop4): Directory bread(block 69) failed [ 865.159592][T19202] FAT-fs (loop4): Directory bread(block 70) failed [ 865.166199][T19202] FAT-fs (loop4): Directory bread(block 71) failed [ 865.205641][T19202] FAT-fs (loop4): Directory bread(block 72) failed [ 865.273557][T19202] FAT-fs (loop4): Directory bread(block 73) failed [ 865.621066][T13869] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 865.829466][T13869] usb 4-1: Using ep0 maxpacket: 32 [ 865.845484][T13869] usb 4-1: unable to get BOS descriptor or descriptor too short [ 865.907196][T13869] usb 4-1: config 7 has an invalid interface number: 128 but max is 0 [ 865.939195][T13869] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 865.977862][T19237] sit1: entered allmulticast mode [ 865.983130][T13869] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 866.025869][T13869] usb 4-1: config 7 has no interface number 0 [ 866.057507][T13869] usb 4-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 866.111058][T13869] usb 4-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 866.125723][T13869] usb 4-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 866.142793][T13869] usb 4-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 866.216117][T13869] usb 4-1: config 7 interface 128 has no altsetting 0 [ 866.250758][T13869] usb 4-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 866.287507][T13869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.335886][T13869] usb 4-1: Product: syz [ 866.340095][T13869] usb 4-1: Manufacturer: syz [ 866.379665][T13869] usb 4-1: SerialNumber: syz [ 866.416893][T19221] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 866.707386][T13869] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 866.714424][T13869] usb 4-1: MIDIStreaming interface descriptor not found [ 866.755201][T19254] netlink: 'syz.6.5640': attribute type 3 has an invalid length. [ 866.783965][T19254] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5640'. [ 866.893650][T13869] usb 4-1: USB disconnect, device number 5 [ 866.973551][T19262] loop0: detected capacity change from 0 to 8 [ 867.038941][T19262] SQUASHFS error: Failed to read block 0x1ec: -5 [ 867.095348][T19262] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 867.149719][T19265] loop6: detected capacity change from 0 to 256 [ 867.258311][T19265] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 867.308723][ T6584] udevd[6584]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.473820][T19273] loop4: detected capacity change from 0 to 512 [ 867.522583][T19273] EXT4-fs: Ignoring removed oldalloc option [ 867.558254][T19273] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 867.614985][T19273] EXT4-fs (loop4): 1 truncate cleaned up [ 867.690693][T19273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.120360][ T6085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.713715][T19304] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 868.907392][T19310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5664'. [ 868.963832][T19310] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 869.983211][T19295] loop4: detected capacity change from 0 to 32768 [ 869.988249][T19343] loop3: detected capacity change from 0 to 256 [ 870.014920][T19343] vfat: Deprecated parameter 'posix' [ 870.062691][T19343] FAT-fs: "posix" option is obsolete, not supported now [ 870.090774][T19344] loop2: detected capacity change from 0 to 1764 [ 870.132074][ T30] audit: type=1800 audit(2000000179.568:33): pid=19295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5657" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 870.346653][T19351] loop0: detected capacity change from 0 to 256 [ 870.863040][T19367] loop3: detected capacity change from 0 to 8 [ 870.964377][T19367] SQUASHFS error: Failed to read block 0x1ec: -5 [ 871.015122][T19367] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 871.473546][T19383] netlink: 'syz.1.5698': attribute type 5 has an invalid length. [ 872.135785][T19357] loop4: detected capacity change from 0 to 32768 [ 872.177231][T19357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5687 (19357) [ 872.243809][ T6358] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 872.291743][T19357] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 872.313645][T19357] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 872.425273][ T6358] usb 4-1: Using ep0 maxpacket: 32 [ 872.432574][ T6358] usb 4-1: config 155 has an invalid descriptor of length 249, skipping remainder of the config [ 872.450963][ T6358] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 872.472896][ T6358] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 216, changing to 11 [ 872.485559][ T6358] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 42027, setting to 1024 [ 872.497957][ T6358] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 872.514794][ T6358] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 872.575343][ T6358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.583465][ T6358] usb 4-1: Product: syz [ 872.588002][ T6358] usb 4-1: Manufacturer: syz [ 872.592614][ T6358] usb 4-1: SerialNumber: syz [ 872.604526][T19391] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 872.680522][T19426] netlink: 'syz.6.5714': attribute type 1 has an invalid length. [ 872.680526][T19357] BTRFS info (device loop4): enabling ssd optimizations [ 872.680559][T19357] BTRFS info (device loop4): enabling free space tree [ 872.763239][ T6358] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input52 [ 872.966061][ T6358] imon:send_packet: packet tx failed (-71) [ 873.060746][ T6358] imon 4-1:155.0: panel buttons/knobs setup failed [ 873.088413][ T6085] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 873.098765][ T6358] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 873.139990][ T6358] (id 0x00) [ 873.221074][T19437] netlink: 'syz.1.5717': attribute type 22 has an invalid length. [ 873.260025][T19435] xfrm1: entered allmulticast mode [ 873.580088][ T6358] rc_core: IR keymap rc-imon-pad not found [ 873.586167][ T6358] Registered IR keymap rc-empty [ 873.644228][ T6358] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 873.729679][ T6358] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 873.832262][ T6358] imon:send_packet: packet tx failed (-71) [ 873.915583][T19451] warning: `syz.6.5724' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 873.933997][ T6358] imon 4-1:155.0: remote input dev register failed [ 873.940924][ T6358] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 874.488613][ T6358] imon 4-1:155.0: unable to initialize intf0, err 0 [ 874.495270][ T6358] imon:imon_probe: failed to initialize context! [ 874.563745][ T6358] imon 4-1:155.0: unable to register, err -19 [ 874.642691][ T6358] usb 4-1: USB disconnect, device number 6 [ 875.312296][ T6358] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 875.322934][ T6072] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 875.375308][T19496] loop3: detected capacity change from 0 to 1024 [ 875.547174][ T6072] usb 3-1: Using ep0 maxpacket: 32 [ 875.559798][ T6358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 875.605861][ T6072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 875.628835][ T6358] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 875.704051][ T6072] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 875.714606][ T6358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 875.727131][ T6072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.765594][ T6072] usb 3-1: Product: syz [ 875.769846][ T6072] usb 3-1: Manufacturer: syz [ 875.775166][ T6358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 875.821651][ T6072] usb 3-1: SerialNumber: syz [ 875.839072][ T6358] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 875.873449][ T6072] usb 3-1: config 0 descriptor?? [ 875.899000][ T6358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.949191][ T6358] usb 1-1: Product: syz [ 875.949233][ T6358] usb 1-1: Manufacturer: syz [ 875.949269][ T6358] usb 1-1: SerialNumber: syz [ 875.972527][ T6072] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 875.976055][ T6358] usb 1-1: config 0 descriptor?? [ 876.236823][ T6358] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 61, bLength 9, bSynchAddress 61 [ 876.263552][ T6072] usb 3-1: USB disconnect, device number 117 [ 876.434437][ T6358] usb 1-1: USB disconnect, device number 3 [ 876.470320][T19520] ceph: No source [ 876.620737][ T6344] udevd[6344]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.637220][ T6435] udevd[6435]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 877.126059][T19530] loop3: detected capacity change from 0 to 4096 [ 877.335438][T19539] loop6: detected capacity change from 0 to 1024 [ 877.377484][T19539] EXT4-fs: Ignoring removed orlov option [ 877.412856][T19539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 877.491717][T19539] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 877.589254][T19539] System zones: 0-1, 3-36 [ 877.637740][T19539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 877.956281][T18677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.301212][T19564] kAFS: unable to lookup cell '.,' [ 878.348243][T13869] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 878.562000][T13869] usb 3-1: Using ep0 maxpacket: 8 [ 878.626499][T13869] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 878.634631][T13869] usb 3-1: config 0 has no interface number 0 [ 878.695802][T13869] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2f.b1 [ 878.735807][T13869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.775486][T13869] usb 3-1: Product: syz [ 878.779710][T13869] usb 3-1: Manufacturer: syz [ 878.818220][T13869] usb 3-1: SerialNumber: syz [ 878.860226][T13869] usb 3-1: config 0 descriptor?? [ 878.874186][T19525] loop4: detected capacity change from 0 to 32768 [ 878.899953][T13869] usbsevseg 3-1:0.11: USB 7 Segment device now attached [ 879.050833][T19525] syz.4.5753: attempt to access beyond end of device [ 879.050833][T19525] loop4: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 879.136629][T19525] metapage_write_end_io: I/O error [ 879.180624][ T6358] usb 3-1: USB disconnect, device number 118 [ 879.187211][T19525] ERROR: (device loop4): release_metapage: metapage_write_one() failed [ 879.187211][T19525] [ 879.201315][ T6358] usbsevseg 3-1:0.11: USB 7 Segment now disconnected [ 879.251520][T19525] ERROR: (device loop4): remounting filesystem as read-only [ 879.260147][T19525] ERROR: (device loop4): diWrite: ixpxd invalid [ 879.260147][T19525] [ 879.269310][T19525] ERROR: (device loop4): txAbort: [ 879.269310][T19525] [ 879.299575][T19525] blkno = 8f7c0, nblocks = 1 [ 879.323195][T19525] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 879.323195][T19525] [ 879.374714][T19525] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 879.374714][T19525] [ 879.409769][T19525] ialloc: diAlloc returned -5! [ 879.421184][T19589] loop0: detected capacity change from 0 to 1024 [ 879.485288][T19589] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 879.627665][T19589] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.5778: lblock 1 mapped to illegal pblock 1 (length 1) [ 879.696743][ T6085] syz-executor: attempt to access beyond end of device [ 879.696743][ T6085] loop4: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 879.718645][T19589] Quota error (device loop0): write_blk: dquota write failed [ 879.742434][ T6085] metapage_write_end_io: I/O error [ 879.777852][T19589] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 879.844644][T19589] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.5778: Failed to acquire dquot type 0 [ 879.849569][T19593] loop3: detected capacity change from 0 to 4096 [ 879.928734][T19589] EXT4-fs error (device loop0): ext4_free_blocks:6695: comm syz.0.5778: Freeing blocks not in datazone - block = 0, count = 4096 [ 880.023456][T19603] loop6: detected capacity change from 0 to 512 [ 880.048338][T19589] EXT4-fs error (device loop0): ext4_read_inode_bitmap:138: comm syz.0.5778: Invalid inode bitmap blk 0 in block_group 0 [ 880.075508][T18430] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 880.144396][T19589] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 880.149156][T19593] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 880.186230][T18430] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 880.186465][T19603] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 880.222617][T18430] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 0 [ 880.250587][T19603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 880.255873][T19589] EXT4-fs (loop0): 1 orphan inode deleted [ 880.288103][T19603] System zones: 1-12 [ 880.327709][T19589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.348012][T19593] ntfs3(loop3): Failed to load $Extend (-22). [ 880.354138][T19593] ntfs3(loop3): Failed to initialize $Extend. [ 880.392911][T19603] EXT4-fs (loop6): 1 truncate cleaned up [ 880.416103][T19603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.173959][T19625] vivid-004: ================= START STATUS ================= [ 881.189370][T18677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.221703][T19624] loop1: detected capacity change from 0 to 512 [ 881.230626][ T6084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.262593][T19625] vivid-004: Radio HW Seek Mode: Bounded [ 881.324538][T19625] vivid-004: Radio Programmable HW Seek: false [ 881.331891][T19624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.379309][T19624] ext4 filesystem being mounted at /991/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.382277][T19625] vivid-004: RDS Rx I/O Mode: Block I/O [ 881.382359][T19625] vivid-004: Generate RBDS Instead of RDS: false [ 881.382408][T19625] vivid-004: RDS Reception: true [ 881.382447][T19625] vivid-004: RDS Program Type: 0 inactive [ 881.382497][T19625] vivid-004: RDS PS Name: inactive [ 881.382545][T19625] vivid-004: RDS Radio Text: inactive [ 881.382591][T19625] vivid-004: RDS Traffic Announcement: false inactive [ 881.382640][T19625] vivid-004: RDS Traffic Program: false inactive [ 881.382689][T19625] vivid-004: RDS Music: false inactive [ 881.382739][T19625] vivid-004: ================== END STATUS ================== [ 881.454077][T19624] EXT4-fs error (device loop1): ext4_empty_dir:3119: inode #12: block 31: comm syz.1.5794: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 881.535375][T19636] loop6: detected capacity change from 0 to 2048 [ 881.600943][T19636] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 881.781927][ T6082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.693501][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5808'. [ 882.693595][T19669] netlink: 93 bytes leftover after parsing attributes in process `syz.4.5808'. [ 883.407484][T19691] netlink: 'syz.4.5818': attribute type 1 has an invalid length. [ 883.447761][T19691] netlink: 'syz.4.5818': attribute type 1 has an invalid length. [ 883.660183][T19700] sit0: entered promiscuous mode [ 883.706817][T19700] netlink: 'syz.1.5821': attribute type 1 has an invalid length. [ 883.745116][T19700] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5821'. [ 884.440595][T19717] loop4: detected capacity change from 0 to 4096 [ 884.556504][T19717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.603072][T19730] loop6: detected capacity change from 0 to 512 [ 884.611466][T19730] EXT4-fs: inline encryption not supported [ 884.617923][T19730] EXT4-fs: Ignoring removed mblk_io_submit option [ 884.655865][T19730] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 884.746155][T19730] EXT4-fs error (device loop6): ext4_clear_blocks:874: inode #13: comm syz.6.5832: attempt to clear invalid blocks 2 len 1 [ 884.801267][T19734] loop0: detected capacity change from 0 to 2048 [ 884.823541][T19730] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 884.918151][T19730] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.5832: invalid indirect mapped block 1819239214 (level 0) [ 884.925069][T19734] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 884.995933][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5836'. [ 885.032682][T19734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 885.081864][T19730] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.5832: invalid indirect mapped block 1819239214 (level 1) [ 885.154728][T19730] EXT4-fs (loop6): 1 truncate cleaned up [ 885.162842][ T6085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.185916][T19730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 885.402288][T19746] loop1: detected capacity change from 0 to 64 [ 885.456600][T19746] hfs: Unknown parameter '&[W懢Y{)D\?A%w wYv8$O&rb\rۗ#AdҸ0177777777777777777777701777777777777777777777' [ 885.683383][T18677] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.852926][T13869] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 885.919788][T19755] loop3: detected capacity change from 0 to 1024 [ 886.005173][T19755] hfsplus: hfsplus: Invalid key length: 29235 [ 886.078445][T13869] usb 2-1: Using ep0 maxpacket: 32 [ 886.141801][T13869] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 886.150310][T13869] usb 2-1: config 0 has no interface number 0 [ 886.199742][T13869] usb 2-1: config 0 interface 63 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 8 [ 886.243025][T13869] usb 2-1: config 0 interface 63 has no altsetting 0 [ 886.256037][T19757] loop4: detected capacity change from 0 to 4096 [ 886.276728][T13869] usb 2-1: New USB device found, idVendor=1a61, idProduct=3420, bcdDevice=c4.0b [ 886.310387][T13869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.344698][T19765] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5849'. [ 886.367073][T13869] usb 2-1: Product: syz [ 886.387117][T13869] usb 2-1: Manufacturer: syz [ 886.392791][T13869] usb 2-1: SerialNumber: syz [ 886.451570][T13869] usb 2-1: config 0 descriptor?? [ 886.468627][T19746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 886.514930][T13869] ti_usb_3410_5052 2-1:0.63: TI USB 3410 1 port adapter converter detected [ 886.590801][T13869] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 886.831097][T19769] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.864654][T19769] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.871956][T19769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.897545][ T6307] usb 2-1: USB disconnect, device number 114 [ 887.002138][ T6307] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 887.059506][ T6307] ti_usb_3410_5052 2-1:0.63: device disconnected [ 887.240221][T19786] netlink: 'syz.4.5860': attribute type 1 has an invalid length. [ 887.280905][T19786] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5860'. [ 887.753512][T19800] netlink: 'syz.4.5865': attribute type 1 has an invalid length. [ 888.111031][T19810] netlink: 'syz.0.5870': attribute type 21 has an invalid length. [ 888.145120][T19810] IPv6: NLM_F_CREATE should be specified when creating new route [ 888.175498][T19813] IPv6: Can't replace route, no match found [ 888.448704][T19819] loop1: detected capacity change from 0 to 8 [ 888.559101][T19819] SQUASHFS error: zlib decompression failed, data probably corrupt [ 888.578075][T19819] SQUASHFS error: Failed to read block 0x4e8: -5 [ 888.596284][T19819] SQUASHFS error: zlib decompression failed, data probably corrupt [ 888.648425][T19819] SQUASHFS error: Failed to read block 0x4ee: -5 [ 888.679116][T19819] SQUASHFS error: zlib decompression failed, data probably corrupt [ 888.720613][T19819] SQUASHFS error: Failed to read block 0x4ef: -5 [ 888.783168][ T30] audit: type=1800 audit(2000000197.013:34): pid=19819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5875" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 889.006248][T19831] loop6: detected capacity change from 0 to 1024 [ 889.322165][T18442] hfsplus: b-tree write err: -5, ino 4 [ 889.429061][T19841] loop4: detected capacity change from 0 to 1024 [ 889.441482][T19807] loop3: detected capacity change from 0 to 32768 [ 889.528738][T19807] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5869 (19807) [ 889.591652][T19807] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 889.651755][T19807] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 889.733831][T18430] hfsplus: b-tree write err: -5, ino 4 [ 889.783165][ T9] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 889.929315][T19807] BTRFS info (device loop3): enabling ssd optimizations [ 889.970179][T19807] BTRFS info (device loop3): enabling free space tree [ 889.990456][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 890.024474][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 890.069081][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 890.128883][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 890.182381][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 890.237134][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 890.270187][ T6083] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 890.298188][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 890.342235][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.372010][ T9] usb 2-1: Product: syz [ 890.385103][ T9] usb 2-1: Manufacturer: syz [ 890.419620][ T9] usb 2-1: SerialNumber: syz [ 890.433656][ T9] usb 2-1: config 0 descriptor?? [ 890.669181][ T9] appledisplay: Apple Cinema Display connected [ 890.674395][T19887] sctp: [Deprecated]: syz.6.5902 (pid 19887) Use of int in maxseg socket option. [ 890.674395][T19887] Use struct sctp_assoc_value instead [ 890.912978][ T9] usb 2-1: USB disconnect, device number 115 [ 890.919099][ C0] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 891.006943][ T9] appledisplay: Apple Cinema Display disconnected [ 891.379622][T19904] IPv6: NLM_F_CREATE should be specified when creating new route [ 892.357196][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5921'. [ 892.430236][T19929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5921'. [ 892.482669][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5921'. [ 892.525912][T19929] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5921'. [ 892.535919][T19889] loop3: detected capacity change from 0 to 32768 [ 892.569092][T19929] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5921'. [ 892.600909][T19889] ialloc: diAlloc returned -5! [ 892.753393][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5925'. [ 892.835772][T19940] loop4: detected capacity change from 0 to 256 [ 892.886987][T19940] vfat: Deprecated parameter 'posix' [ 892.915191][T19940] FAT-fs: "posix" option is obsolete, not supported now [ 893.453958][T19957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5935'. [ 894.159062][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5946'. [ 894.482676][T19989] loop2: detected capacity change from 0 to 128 [ 894.576202][T19989] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 894.609045][T19989] hpfs: filesystem error: improperly stopped [ 894.631565][T19989] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 894.661197][T19989] hpfs: You really don't want any checks? You are crazy... [ 894.694313][T19989] hpfs: hpfs_map_sector(): read error [ 894.699758][T19989] hpfs: code page support is disabled [ 894.721604][T19989] hpfs: hpfs_map_4sectors(): unaligned read [ 894.747812][T19989] hpfs: hpfs_map_4sectors(): unaligned read [ 894.779639][T13869] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 894.790747][T19989] hpfs: filesystem error: unable to find root dir [ 895.012465][T13869] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 895.035612][T13869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.089358][T13869] usb 7-1: config 0 has no interface number 0 [ 895.122747][T13869] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 895.173209][T13869] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 895.219373][T13869] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 895.254185][T13869] usb 7-1: config 0 interface 52 has no altsetting 0 [ 895.295837][T13869] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 895.331918][T13869] usb 7-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 895.356642][ T6307] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 895.426124][T13869] usb 7-1: Product: syz [ 895.430356][T13869] usb 7-1: SerialNumber: syz [ 895.459368][T13869] usb 7-1: config 0 descriptor?? [ 895.602473][ T6307] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 895.622933][ T6307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.663933][T20017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.666068][ T6307] usb 1-1: Product: syz [ 895.720143][ T6307] usb 1-1: Manufacturer: syz [ 895.724855][ T6307] usb 1-1: SerialNumber: syz [ 895.774971][T13869] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 895.801332][ T6307] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 895.827271][T13869] synaptics_usb 7-1:0.52: probe with driver synaptics_usb failed with error -5 [ 895.946445][ T855] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 896.039760][ T6072] usb 7-1: USB disconnect, device number 2 [ 897.769956][ T855] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 898.451259][T13869] usb 1-1: USB disconnect, device number 4 [ 898.466720][ T855] ath9k_htc: Failed to initialize the device [ 898.491917][T13869] usb 1-1: ath9k_htc: USB layer deinitialized [ 898.552145][T20068] MPI: mpi too large (107144 bits) [ 898.653805][T20067] ip6erspan0: entered promiscuous mode [ 900.134123][T20122] loop6: detected capacity change from 0 to 22 [ 900.157952][T20122] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 900.210238][T20122] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 900.402650][ T6358] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 900.606457][ T6358] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 900.618670][ T6358] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 900.632191][ T6358] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 900.653250][ T6358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 900.694760][ T6358] usb 5-1: SerialNumber: syz [ 900.736728][ T6358] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 900.766766][ T6358] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 900.941164][T20112] loop2: detected capacity change from 0 to 32768 [ 900.962363][T13869] usb 5-1: USB disconnect, device number 114 [ 900.995765][T20112] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 901.133711][T20112] XFS (loop2): Ending clean mount [ 901.453885][ T6081] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 901.741624][T20158] loop0: detected capacity change from 0 to 256 [ 901.865302][T20158] FAT-fs (loop0): Directory bread(block 64) failed [ 901.900352][T20158] FAT-fs (loop0): Directory bread(block 65) failed [ 901.907075][T20158] FAT-fs (loop0): Directory bread(block 66) failed [ 901.965284][T20158] FAT-fs (loop0): Directory bread(block 67) failed [ 901.972209][T20158] FAT-fs (loop0): Directory bread(block 68) failed [ 902.055238][T20158] FAT-fs (loop0): Directory bread(block 69) failed [ 902.056629][T20166] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.6034' sets config #-1 [ 902.092229][T20158] FAT-fs (loop0): Directory bread(block 70) failed [ 902.098817][T20158] FAT-fs (loop0): Directory bread(block 71) failed [ 902.184034][T20158] FAT-fs (loop0): Directory bread(block 72) failed [ 902.217384][T20158] FAT-fs (loop0): Directory bread(block 73) failed [ 902.390484][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6027'. [ 902.829005][T20183] netlink: 'syz.0.6041': attribute type 6 has an invalid length. [ 902.907131][T20150] loop6: detected capacity change from 0 to 32768 [ 902.993637][T20150] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 903.032135][T20188] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.149746][T20200] loop1: detected capacity change from 0 to 4096 [ 903.197394][T20150] XFS (loop6): Ending clean mount [ 903.247863][T20202] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 903.269159][T20150] XFS (loop6): Quotacheck needed: Please wait. [ 903.422757][T20150] XFS (loop6): Quotacheck: Done. [ 903.540328][T20188] bridge_slave_0 (unregistering): left allmulticast mode [ 903.588617][T20188] bridge_slave_0 (unregistering): left promiscuous mode [ 903.642193][T20188] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.718185][ T6091] Bluetooth: hci2: unexpected event for opcode 0x042d [ 903.756583][T18677] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 905.221919][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.228451][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 905.427410][T20257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6071'. [ 905.837259][T20257] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 905.879831][T20257] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 905.942666][T20264] loop6: detected capacity change from 0 to 4096 [ 905.955012][T20270] loop3: detected capacity change from 0 to 128 [ 906.113508][T20270] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 906.191589][T20264] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 906.242571][T20270] ext4 filesystem being mounted at /1003/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 906.305482][T20268] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6075'. [ 906.306191][T20264] ntfs3(loop6): Failed to load $Extend (-22). [ 906.356655][T20270] EXT4-fs warning (device loop3): ext4_group_extend:1891: can't read last block, resize aborted [ 906.386046][T20268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 906.396873][T20264] ntfs3(loop6): Failed to initialize $Extend. [ 906.532341][ T6083] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 906.816052][ T6091] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 906.887262][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6081'. [ 906.896327][T20288] netlink: 660 bytes leftover after parsing attributes in process `syz.2.6081'. [ 907.070301][T20252] loop4: detected capacity change from 0 to 32768 [ 907.150043][T20252] jfs_strtoUCS: char2uni returned -22. [ 907.168621][T20252] charset = iso8859-6, char = 0xfc [ 907.688101][T20304] loop1: detected capacity change from 0 to 2048 [ 907.826908][T20304] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 907.931004][T20304] syz.1.6088: attempt to access beyond end of device [ 907.931004][T20304] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 907.932534][T20314] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 908.035728][T20318] loop6: detected capacity change from 0 to 8 [ 908.160063][T20318] process 'syz.6.6093' launched './file1' with NULL argv: empty string added [ 908.247529][T20318] SQUASHFS error: lzo decompression failed, data probably corrupt [ 908.292799][T20318] SQUASHFS error: Failed to read block 0x1c0: -5 [ 908.339989][T20318] SQUASHFS error: Unable to read metadata cache entry [1be] [ 908.431630][T20311] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 908.457814][T20325] loop3: detected capacity change from 0 to 64 [ 908.586372][T20325] hfs: filesystem is marked locked, mounting read-only. [ 908.677580][T20325] hfs: filesystem is marked locked, leaving read-only. [ 908.997077][T20339] loop4: detected capacity change from 0 to 512 [ 909.100121][T20341] loop0: detected capacity change from 0 to 1024 [ 909.143885][T20339] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.6101: casefold flag without casefold feature [ 909.234493][T20339] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.6101: couldn't read orphan inode 15 (err -117) [ 909.293997][T20339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.552381][T18449] hfsplus: b-tree write err: -5, ino 4 [ 909.630440][T20356] netlink: 'syz.3.6107': attribute type 1 has an invalid length. [ 909.638223][T20356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6107'. [ 909.679102][ T6085] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.863856][T20361] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 910.729739][ T6090] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 910.957541][ T6090] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 911.000313][ T6090] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 911.036869][ T6090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.108394][ T6090] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 911.360263][T20413] netlink: 'syz.6.6130': attribute type 21 has an invalid length. [ 911.822704][ T6091] Bluetooth: hci2: unexpected event for opcode 0x204e [ 911.851539][T20370] loop1: detected capacity change from 0 to 32768 [ 911.928602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 911.937347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 911.949234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 912.014694][T20370] ERROR: (device loop1): diAllocAG: error reading iag [ 912.014694][T20370] [ 912.058845][T20370] ialloc: diAlloc returned -5! [ 912.229315][ T6090] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 912.275523][ T6090] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 912.338760][ T6090] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 912.371118][ T6090] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 912.409083][T20441] loop4: detected capacity change from 0 to 256 [ 912.430514][ T6090] usb 1-1: USB disconnect, device number 5 [ 912.536563][T20441] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 912.602374][T20441] FAT-fs (loop4): Filesystem has been set read-only [ 913.326373][T20467] loop1: detected capacity change from 0 to 8 [ 913.347612][T20469] loop2: detected capacity change from 0 to 256 [ 913.398616][T20467] SQUASHFS error: lzo decompression failed, data probably corrupt [ 913.422766][T20467] SQUASHFS error: Failed to read block 0x1c0: -5 [ 913.450446][T20467] SQUASHFS error: Unable to read metadata cache entry [1be] [ 913.507679][T20473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6155'. [ 913.652591][T20469] FAT-fs (loop2): Directory bread(block 64) failed [ 913.707331][T20469] FAT-fs (loop2): Directory bread(block 65) failed [ 913.743779][T20469] FAT-fs (loop2): Directory bread(block 66) failed [ 913.808635][T20469] FAT-fs (loop2): Directory bread(block 67) failed [ 913.815426][T20469] FAT-fs (loop2): Directory bread(block 68) failed [ 913.898702][T20469] FAT-fs (loop2): Directory bread(block 69) failed [ 913.956285][T20469] FAT-fs (loop2): Directory bread(block 70) failed [ 913.985206][T20469] FAT-fs (loop2): Directory bread(block 71) failed [ 914.033725][T20469] FAT-fs (loop2): Directory bread(block 72) failed [ 914.062140][T20469] FAT-fs (loop2): Directory bread(block 73) failed [ 915.469286][T20524] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6175'. [ 915.490718][T20526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6177'. [ 915.777415][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6178'. [ 915.965607][T20533] loop2: detected capacity change from 0 to 2048 [ 916.151969][T20533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.403299][ T6081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.835967][T20563] loop2: detected capacity change from 0 to 512 [ 916.993910][T20563] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 917.053138][T20563] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 917.122804][T20563] System zones: 0-1, 15-15, 18-18, 34-34 [ 917.128901][T20563] EXT4-fs (loop2): orphan cleanup on readonly fs [ 917.219074][T20563] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 917.228517][T20563] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 917.306538][T20563] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 917.362062][T20563] EXT4-fs (loop2): 1 truncate cleaned up [ 917.402092][T20563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 917.525708][T20563] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 917.923159][ T6081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.491370][T20606] wireguard0: entered promiscuous mode [ 918.496897][T20606] wireguard0: entered allmulticast mode [ 918.530431][T20612] loop2: detected capacity change from 0 to 2048 [ 919.177469][T20580] loop3: detected capacity change from 0 to 32768 [ 919.265231][T20580] ERROR: (device loop3): diAllocBit: iag inconsistent [ 919.265231][T20580] [ 919.354248][T20580] ialloc: diAlloc returned -5! [ 919.367400][T20635] loop2: detected capacity change from 0 to 764 [ 919.469200][T20635] rock: directory entry would overflow storage [ 919.520277][T20635] rock: sig=0x4654, size=5, remaining=4 [ 919.913304][ T30] audit: type=1326 audit(2000000226.114:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20643 comm="syz.1.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd425f8eba9 code=0x7ff00000 [ 920.030677][ T30] audit: type=1326 audit(2000000226.114:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20643 comm="syz.1.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd425f8eba9 code=0x7ff00000 [ 920.137515][ T30] audit: type=1326 audit(2000000226.114:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20643 comm="syz.1.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd425f8eba9 code=0x7ff00000 [ 920.246478][ T30] audit: type=1326 audit(2000000226.114:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20643 comm="syz.1.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd425f8eba9 code=0x7ff00000 [ 920.297864][ T30] audit: type=1326 audit(2000000226.114:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20643 comm="syz.1.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd425f8eba9 code=0x7ff00000 [ 920.358466][ T30] audit: type=1326 audit(2000000226.114:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20643 comm="syz.1.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd425f8eba9 code=0x7ff00000 [ 920.497956][ T30] audit: type=1326 audit(2000000226.114:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20643 comm="syz.1.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd425f8eba9 code=0x7ff00000 [ 920.531703][T20660] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6225'. [ 920.618292][ T30] audit: type=1326 audit(2000000226.114:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20643 comm="syz.1.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd425f8eba9 code=0x7ff00000 [ 920.722393][ T30] audit: type=1326 audit(2000000226.114:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20643 comm="syz.1.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd425f8eba9 code=0x7ff00000 [ 921.138345][ T6092] Bluetooth: hci5: command 0x0405 tx timeout [ 921.868067][T20688] loop2: detected capacity change from 0 to 4096 [ 921.961804][T20688] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 922.111504][T20695] wireguard0: entered promiscuous mode [ 922.117370][T20695] wireguard0: entered allmulticast mode [ 922.219302][T20688] ntfs3(loop2): ino=19, mi_enum_attr [ 922.255931][ T6090] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 922.319659][T20688] ntfs3(loop2): failed to convert "c46c" to cp932 [ 922.390173][T20688] ntfs3(loop2): ino=20, mi_enum_attr [ 922.481996][ T6090] usb 7-1: config 2 has an invalid interface number: 174 but max is 0 [ 922.526233][ T6090] usb 7-1: config 2 has no interface number 0 [ 922.534839][ T6090] usb 7-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 922.554346][T20703] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 922.573327][ T6090] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 922.593431][ T6090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.617933][ T6090] usb 7-1: Product: syz [ 922.622157][ T6090] usb 7-1: Manufacturer: syz [ 922.626769][ T6090] usb 7-1: SerialNumber: syz [ 922.714494][T20692] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 922.917602][T20707] loop2: detected capacity change from 0 to 512 [ 922.981214][T20707] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 923.127378][T20707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.159382][ T6090] usb 7-1: probing VID:PID(0424:012C) [ 923.175653][ T6090] usb 7-1: vub300 testing BULK IN EndPoint(0) 82 [ 923.182211][ T6090] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 923.193009][ T6090] vub300 7-1:2.174: probe with driver vub300 failed with error -22 [ 923.211587][ T6090] usb 7-1: USB disconnect, device number 3 [ 923.251379][T20707] ext4 filesystem being mounted at /1068/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 923.310337][T20707] EXT4-fs: Cannot change quota options when quota turned on [ 923.552640][T20725] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 923.610858][ T6081] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.624931][T20724] loop4: detected capacity change from 0 to 1764 [ 924.157545][T20735] netlink: 'syz.1.6260': attribute type 1 has an invalid length. [ 924.198087][T20735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6260'. [ 924.223665][T20738] delete_channel: no stack [ 924.460328][T20743] netlink: 'syz.3.6264': attribute type 1 has an invalid length. [ 924.499387][T20743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6264'. [ 924.508327][T20743] netlink: 'syz.3.6264': attribute type 1 has an invalid length. [ 925.256268][T20762] loop3: detected capacity change from 0 to 1024 [ 925.288080][T20762] EXT4-fs: inline encryption not supported [ 925.349036][T20762] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 925.396589][T20733] loop2: detected capacity change from 0 to 32768 [ 925.427698][T20762] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.6273: lblock 2 mapped to illegal pblock 2 (length 1) [ 925.457709][T20733] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6255 (20733) [ 925.544697][T20733] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 925.555120][T20762] EXT4-fs (loop3): Remounting filesystem read-only [ 925.588385][T20762] __quota_error: 58 callbacks suppressed [ 925.588415][T20762] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 925.594261][T20733] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 925.694851][T20762] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 925.718095][T20762] EXT4-fs (loop3): 1 orphan inode deleted [ 925.759968][T20762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.860320][T20762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.875286][T20733] BTRFS info (device loop2): enabling ssd optimizations [ 925.910702][T20733] BTRFS info (device loop2): enabling free space tree [ 926.060278][T20733] BTRFS warning (device loop2): get dev_stats failed, device not found [ 926.086619][T20757] loop0: detected capacity change from 0 to 32768 [ 926.180413][T20757] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 926.259419][T20757] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 926.430870][ T6081] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 926.630638][T20795] __vm_enough_memory: pid: 20795, comm: syz.4.6280, bytes: 4503599627366400 not enough memory for the allocation [ 926.936359][ T6084] ocfs2: Unmounting device (7,0) on (node local) [ 927.436714][T20808] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.492765][ T6238] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 927.677002][ T6238] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 927.736652][ T6238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.792562][ T6238] usb 4-1: config 0 descriptor?? [ 927.818741][ T6238] usb 4-1: unsupported MDLM descriptors [ 927.956475][T20808] bridge_slave_0 (unregistering): left allmulticast mode [ 927.973876][T20808] bridge_slave_0 (unregistering): left promiscuous mode [ 928.011757][T20808] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.072308][ T6238] usb 4-1: USB disconnect, device number 7 [ 928.141718][T20817] wireguard0: entered promiscuous mode [ 928.163337][T20817] wireguard0: entered allmulticast mode [ 928.249020][T20821] loop6: detected capacity change from 0 to 764 [ 928.418474][T20821] rock: directory entry would overflow storage [ 928.442979][T20821] rock: sig=0x4654, size=5, remaining=4 [ 929.267469][T20844] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 929.310348][ T6090] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 929.535326][ T6090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 929.545054][ T6090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 929.602189][ T6090] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 929.611625][ T6090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.619664][ T6090] usb 5-1: Product: syz [ 929.635071][ T6090] usb 5-1: Manufacturer: syz [ 929.662810][ T6090] usb 5-1: SerialNumber: syz [ 929.684682][ T6090] usb 5-1: config 0 descriptor?? [ 930.049040][ T6090] usb 5-1: USB disconnect, device number 115 [ 930.158764][ T6584] udevd[6584]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 930.678920][ T6072] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 930.704326][T20848] loop0: detected capacity change from 0 to 32768 [ 930.749991][T20848] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6305 (20848) [ 930.786451][T20869] netlink: 'syz.4.6314': attribute type 7 has an invalid length. [ 930.841685][T20848] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 930.869112][ T6072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 930.870962][T20848] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 930.908256][ T6072] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 930.936404][ T6072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 930.994225][ T6072] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 930.999676][T20854] loop3: detected capacity change from 0 to 32768 [ 931.050772][ T6072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.113358][T20854] ialloc: diAlloc returned -17! [ 931.137361][ T6072] usb 3-1: Product: syz [ 931.160672][T20848] BTRFS info (device loop0): enabling ssd optimizations [ 931.185450][ T6072] usb 3-1: Manufacturer: syz [ 931.191893][T20848] BTRFS info (device loop0): enabling free space tree [ 931.233411][ T6072] usb 3-1: SerialNumber: syz [ 931.277963][ T6072] usb 3-1: config 0 descriptor?? [ 931.288360][T20864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 931.295757][T20864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 931.320025][ T6358] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 931.357297][ T6072] usb 3-1: ucan: probing device on interface #0 [ 931.438099][T20848] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same [ 931.525066][ T6358] usb 7-1: Using ep0 maxpacket: 8 [ 931.578699][ T6358] usb 7-1: unable to get BOS descriptor or descriptor too short [ 931.601360][ T6358] usb 7-1: config 4 interface 0 has no altsetting 0 [ 931.640765][ T6358] usb 7-1: string descriptor 0 read error: -22 [ 931.641304][ T6084] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 931.651433][ T6358] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 931.727145][ T6358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.852589][ T6072] usb 3-1: ucan: failed to retrieve device info [ 931.875729][ T6072] usb 3-1: ucan: probe failed; try to update the device firmware [ 931.915944][ T6358] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 931.982943][ T6072] usb 3-1: USB disconnect, device number 119 [ 932.084807][ T6358] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 932.151676][ T6358] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 932.205663][ T6358] usb 7-1: media controller created [ 932.363162][ T6358] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 932.703917][T20905] loop0: detected capacity change from 0 to 256 [ 932.839086][T20892] loop4: detected capacity change from 0 to 32768 [ 932.912092][T20905] FAT-fs (loop0): Directory bread(block 64) failed [ 932.921862][T20892] (syz.4.6318,20892,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 932.954588][ T6090] usb 7-1: USB disconnect, device number 4 [ 932.958127][T20905] FAT-fs (loop0): Directory bread(block 65) failed [ 933.009524][T20905] FAT-fs (loop0): Directory bread(block 66) failed [ 933.016192][T20905] FAT-fs (loop0): Directory bread(block 67) failed [ 933.029350][T20892] (syz.4.6318,20892,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 933.093890][T20905] FAT-fs (loop0): Directory bread(block 68) failed [ 933.156447][T20905] FAT-fs (loop0): Directory bread(block 69) failed [ 933.175152][T20905] FAT-fs (loop0): Directory bread(block 70) failed [ 933.217713][T20892] JBD2: Ignoring recovery information on journal [ 933.224502][T20905] FAT-fs (loop0): Directory bread(block 71) failed [ 933.231137][T20905] FAT-fs (loop0): Directory bread(block 72) failed [ 933.290101][T20905] FAT-fs (loop0): Directory bread(block 73) failed [ 933.348299][T20892] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 933.723075][T20892] [ 933.725444][T20892] ====================================================== [ 933.732486][T20892] WARNING: possible circular locking dependency detected [ 933.739509][T20892] syzkaller #0 Not tainted [ 933.743934][T20892] ------------------------------------------------------ [ 933.748597][T20923] loop3: detected capacity change from 0 to 64 [ 933.750956][T20892] syz.4.6318/20892 is trying to acquire lock: [ 933.750977][T20892] ffff88803209e618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x563/0xb00 [ 933.772632][T20892] [ 933.772632][T20892] but task is already holding lock: [ 933.779999][T20892] ffff88804cbe8660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1c1/0x2d0 [ 933.790950][T20892] [ 933.790950][T20892] which lock already depends on the new lock. [ 933.790950][T20892] [ 933.801364][T20892] [ 933.801364][T20892] the existing dependency chain (in reverse order) is: [ 933.810385][T20892] [ 933.810385][T20892] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}: [ 933.810812][T20925] : renamed from dummy0 (while UP) [ 933.819289][T20892] down_write+0x92/0x200 [ 933.829687][T20892] ocfs2_lock_global_qf+0x1c1/0x2d0 [ 933.835452][T20892] ocfs2_acquire_dquot+0x258/0xb00 [ 933.841124][T20892] dqget+0x693/0x1180 [ 933.845654][T20892] dquot_set_dqblk+0x2b/0x1290 [ 933.850964][T20892] quota_setquota+0x4c4/0x5e0 [ 933.856207][T20892] do_quotactl+0xaf6/0x13d0 [ 933.861265][T20892] __x64_sys_quotactl+0x1b3/0x440 [ 933.866851][T20892] do_syscall_64+0xcd/0x4e0 [ 933.871886][T20892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.878318][T20892] [ 933.878318][T20892] -> #5 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}: [ 933.888854][T20892] down_write+0x92/0x200 [ 933.893630][T20892] ocfs2_lock_global_qf+0x194/0x2d0 [ 933.899368][T20892] ocfs2_acquire_dquot+0x258/0xb00 [ 933.905018][T20892] dqget+0x693/0x1180 [ 933.909524][T20892] dquot_set_dqblk+0x2b/0x1290 [ 933.914820][T20892] quota_setquota+0x4c4/0x5e0 [ 933.920043][T20892] do_quotactl+0xaf6/0x13d0 [ 933.925086][T20892] __x64_sys_quotactl+0x1b3/0x440 [ 933.930652][T20892] do_syscall_64+0xcd/0x4e0 [ 933.935675][T20892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.942094][T20892] [ 933.942094][T20892] -> #4 (&dquot->dq_lock){+.+.}-{4:4}: [ 933.949761][T20892] __mutex_lock+0x193/0x1060 [ 933.954899][T20892] dqget+0x5f1/0x1180 [ 933.959410][T20892] dquot_transfer+0x3a8/0x6a0 [ 933.964627][T20892] ext4_setattr+0x885/0x2ae0 [ 933.969752][T20892] notify_change+0x6a9/0x1230 [ 933.974967][T20892] chown_common+0x54e/0x680 [ 933.979998][T20892] do_fchownat+0x1a7/0x200 [ 933.984938][T20892] __x64_sys_fchownat+0xbd/0x160 [ 933.990405][T20892] do_syscall_64+0xcd/0x4e0 [ 933.995429][T20892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.001856][T20892] [ 934.001856][T20892] -> #3 (&ei->xattr_sem){++++}-{4:4}: [ 934.009430][T20892] down_read+0x9b/0x480 [ 934.014119][T20892] ext4_setattr+0x875/0x2ae0 [ 934.019421][T20892] notify_change+0x6a9/0x1230 [ 934.024637][T20892] chown_common+0x54e/0x680 [ 934.029666][T20892] do_fchownat+0x1a7/0x200 [ 934.034607][T20892] __x64_sys_chown+0x7b/0xc0 [ 934.039722][T20892] do_syscall_64+0xcd/0x4e0 [ 934.044746][T20892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.051349][T20892] [ 934.051349][T20892] -> #2 (jbd2_handle){++++}-{0:0}: [ 934.058664][T20892] start_this_handle+0x5ea/0x1410 [ 934.064235][T20892] jbd2__journal_start+0x394/0x6a0 [ 934.069886][T20892] jbd2_journal_start+0x29/0x40 [ 934.075280][T20892] ocfs2_start_trans+0x3b9/0x970 [ 934.080762][T20892] ocfs2_modify_bh+0xbd/0x490 [ 934.085973][T20892] ocfs2_local_read_info+0xdad/0x16b0 [ 934.091875][T20892] dquot_load_quota_sb+0x83d/0x1050 [ 934.097688][T20892] dquot_load_quota_inode+0x2a3/0x470 [ 934.103598][T20892] ocfs2_enable_quotas+0x28a/0x5a0 [ 934.109237][T20892] ocfs2_fill_super+0x1d7c/0x43b0 [ 934.114785][T20892] get_tree_bdev_flags+0x38c/0x620 [ 934.120443][T20892] vfs_get_tree+0x8e/0x340 [ 934.125405][T20892] path_mount+0x1513/0x2000 [ 934.130436][T20892] __x64_sys_mount+0x28d/0x310 [ 934.135734][T20892] do_syscall_64+0xcd/0x4e0 [ 934.140757][T20892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.147175][T20892] [ 934.147175][T20892] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 934.155708][T20892] down_read+0x9b/0x480 [ 934.160394][T20892] ocfs2_start_trans+0x3ae/0x970 [ 934.165884][T20892] ocfs2_modify_bh+0xbd/0x490 [ 934.171098][T20892] ocfs2_local_read_info+0xdad/0x16b0 [ 934.177003][T20892] dquot_load_quota_sb+0x83d/0x1050 [ 934.182728][T20892] dquot_load_quota_inode+0x2a3/0x470 [ 934.188629][T20892] ocfs2_enable_quotas+0x28a/0x5a0 [ 934.194267][T20892] ocfs2_fill_super+0x1d7c/0x43b0 [ 934.199815][T20892] get_tree_bdev_flags+0x38c/0x620 [ 934.205476][T20892] vfs_get_tree+0x8e/0x340 [ 934.210427][T20892] path_mount+0x1513/0x2000 [ 934.215468][T20892] __x64_sys_mount+0x28d/0x310 [ 934.220848][T20892] do_syscall_64+0xcd/0x4e0 [ 934.225879][T20892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.232302][T20892] [ 934.232302][T20892] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 934.239800][T20892] __lock_acquire+0x12a6/0x1ce0 [ 934.245203][T20892] lock_acquire+0x179/0x350 [ 934.250251][T20892] ocfs2_start_trans+0x29d/0x970 [ 934.255732][T20892] ocfs2_acquire_dquot+0x563/0xb00 [ 934.261386][T20892] dqget+0x693/0x1180 [ 934.265896][T20892] dquot_set_dqblk+0x2b/0x1290 [ 934.271186][T20892] quota_setquota+0x4c4/0x5e0 [ 934.276405][T20892] do_quotactl+0xaf6/0x13d0 [ 934.281453][T20892] __x64_sys_quotactl+0x1b3/0x440 [ 934.287025][T20892] do_syscall_64+0xcd/0x4e0 [ 934.292054][T20892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.298511][T20892] [ 934.298511][T20892] other info that might help us debug this: [ 934.298511][T20892] [ 934.308727][T20892] Chain exists of: [ 934.308727][T20892] sb_internal#2 --> &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> &ocfs2_quota_ip_alloc_sem_key [ 934.308727][T20892] [ 934.325716][T20892] Possible unsafe locking scenario: [ 934.325716][T20892] [ 934.333155][T20892] CPU0 CPU1 [ 934.338511][T20892] ---- ---- [ 934.344034][T20892] lock(&ocfs2_quota_ip_alloc_sem_key); [ 934.349682][T20892] lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]); [ 934.359490][T20892] lock(&ocfs2_quota_ip_alloc_sem_key); [ 934.367729][T20892] rlock(sb_internal#2); [ 934.372155][T20892] [ 934.372155][T20892] *** DEADLOCK *** [ 934.372155][T20892] [ 934.380374][T20892] 4 locks held by syz.4.6318/20892: [ 934.385565][T20892] #0: ffff88803209e0e0 (&type->s_umount_key#105){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 934.395558][T20892] #1: ffff88808c8d60a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x24b/0xb00 [ 934.405626][T20892] #2: ffff88804cbe89c0 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x194/0x2d0 [ 934.418644][T20892] #3: ffff88804cbe8660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1c1/0x2d0 [ 934.430142][T20892] [ 934.430142][T20892] stack backtrace: [ 934.436028][T20892] CPU: 0 UID: 0 PID: 20892 Comm: syz.4.6318 Not tainted syzkaller #0 PREEMPT(full) [ 934.436068][T20892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 934.436090][T20892] Call Trace: [ 934.436103][T20892] [ 934.436117][T20892] dump_stack_lvl+0x116/0x1f0 [ 934.436174][T20892] print_circular_bug+0x275/0x350 [ 934.436230][T20892] check_noncircular+0x14c/0x170 [ 934.436287][T20892] __lock_acquire+0x12a6/0x1ce0 [ 934.436348][T20892] lock_acquire+0x179/0x350 [ 934.436400][T20892] ? ocfs2_acquire_dquot+0x563/0xb00 [ 934.436449][T20892] ? __pfx___might_resched+0x10/0x10 [ 934.436503][T20892] ocfs2_start_trans+0x29d/0x970 [ 934.436555][T20892] ? ocfs2_acquire_dquot+0x563/0xb00 [ 934.436602][T20892] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 934.436655][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.436696][T20892] ? do_raw_spin_unlock+0x172/0x230 [ 934.436733][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.436773][T20892] ? _raw_spin_unlock+0x28/0x50 [ 934.436823][T20892] ocfs2_acquire_dquot+0x563/0xb00 [ 934.436873][T20892] ? __pfx_ocfs2_acquire_dquot+0x10/0x10 [ 934.436920][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.436966][T20892] dqget+0x693/0x1180 [ 934.437005][T20892] ? __pfx_dqget+0x10/0x10 [ 934.437039][T20892] ? map_id_range_down+0x2bc/0x3b0 [ 934.437076][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.437116][T20892] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 934.437157][T20892] dquot_set_dqblk+0x2b/0x1290 [ 934.437199][T20892] quota_setquota+0x4c4/0x5e0 [ 934.437251][T20892] ? __pfx_quota_setquota+0x10/0x10 [ 934.437301][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.437358][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.437397][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.437437][T20892] ? security_capable+0x7e/0x260 [ 934.437469][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.437518][T20892] do_quotactl+0xaf6/0x13d0 [ 934.437568][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.437609][T20892] ? __pfx_do_quotactl+0x10/0x10 [ 934.437660][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.437705][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.437745][T20892] ? user_get_super+0x109/0x1b0 [ 934.437803][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.437843][T20892] ? quotactl_block+0x17e/0x690 [ 934.437892][T20892] ? __pfx_quotactl_block+0x10/0x10 [ 934.437948][T20892] __x64_sys_quotactl+0x1b3/0x440 [ 934.438001][T20892] ? __pfx___x64_sys_quotactl+0x10/0x10 [ 934.438052][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.438092][T20892] ? xfd_validate_state+0x61/0x180 [ 934.438149][T20892] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.438194][T20892] do_syscall_64+0xcd/0x4e0 [ 934.438225][T20892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.438260][T20892] RIP: 0033:0x7fa36278eba9 [ 934.438286][T20892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.438320][T20892] RSP: 002b:00007fa363636038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 934.438351][T20892] RAX: ffffffffffffffda RBX: 00007fa3629d5fa0 RCX: 00007fa36278eba9 [ 934.438374][T20892] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffff80000800 [ 934.438396][T20892] RBP: 00007fa362811e19 R08: 0000000000000000 R09: 0000000000000000 [ 934.438417][T20892] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 934.438438][T20892] R13: 00007fa3629d6038 R14: 00007fa3629d5fa0 R15: 00007ffdf5f2cbb8 [ 934.438479][T20892] [ 934.813617][T20923] hfs: unable to locate alternate MDB [ 934.837874][T20923] hfs: continuing without an alternate MDB [ 934.872394][T20928] loop6: detected capacity change from 0 to 16 [ 934.885674][ T6085] ocfs2: Unmounting device (7,4) on (node local) [ 934.926239][T20928] erofs (device loop6): mounted with root inode @ nid 36. [ 934.969493][T20928] erofs (device loop6): read error -22 @ 8200 of nid 36