last executing test programs: 3.779438352s ago: executing program 3 (id=2065): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x601}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xcbf2b2b85a7692bb}, 0x40) 3.386283507s ago: executing program 3 (id=2070): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)={[{@commit}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localalloc={'localalloc', 0x3d, 0x10000}}, {@coherency_full}, {@acl}, {@localflocks}]}, 0x2, 0x442c, &(0x7f00000088c0)="$eJzs3c9PHFUcAPA3A1qobYXaQ01M3MQmGjUEelJpIqW0FFqsqbYxXrYLbFt0YRtYjIce8NbEk4kH46HRxBunhoPX+id48VjPTfTgxcSkEbO7s8AMu7I2LNjm80nKMO/37nfn7Zsmw4sTlZtzS7m5pVxhIVeeub50MvdZubQ8XwzxHtnv/mlPJ+Ik9vvn0plzH1w9GcJPs788XF9fXw9V3aGpoS2///nH7Zmtx4Y4U6fabvPWdsvHIYRj28ZV1RVC+OjHEKIQwukkbTQ59oYQjoR63tXbX17L7dJo7j0onso/mrqzNnxicvXuWuvXHoXwbenFN2/M//ZK1/Cvr+9S9wAAAAAAAAAAAAAAAAAAPOHGL1+68v7gULgfhe7VaPvzuuPJsdXzseu75uXOv1gAAAAAAAAAAAAAAAAAAAD4n9p8/j8XHW3y/P9YchxpUX/93c6Pkc6ZeO/S2NnBoWT/92hb/ltJ0u+nu0J/k33fs/u/n87Ub77/+/Z+HldjfI1++0IUD6TO43hgIITvk43fj0cH41J5qfLG9fLywuyuDeOJlY5/fff+VHSSDf3bjf9opv3O7///wrZPU/X82u59xJ5q6fh3tSz3wxdRW/E/k6m3F/Gve6az3Tyl0vHvrqX1bi0wUp8AqvH/qnvn+I9l2u9U/I+EEHJRday51AxQXcNU0zfWKz4W/yod//qblZo6kzey1fX/Vyb+ZzPtN+LfuTA0n/9Xsl9ENJWO/7O1tJ5Uic3rvz/e+fo/l2l/P77/q+Nf8f3flnT8D9QTu1NFau9ku/P/eKb9TsX/SpyM80iU+gSsRvX0Vn+vjrR0/Hu25W/e/8Vtrf/OZ+rv1f1fo9/G/V9j+n8tqt//0Vw6/r0ty7V7/U9k6nV6/h+prf94XOn4H6ylpf+vr6/2s934T2ba71T8a6uSnkb8N+eTvw/U07+z/mtLOv7P1RPjrSVWaj9r679o5/X/hUz7+7H+q45/Je5sr0+LdPwPtSxXjf/PbXz/X8zU63z8Qxi01n9s6fgfblmudv337Bz/qUy9Tsf/1U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAEGE2OfSGKB1LncTwwEMKZ5Px4OBhNF2bz06XyzKdLIYwl6blwNLpRKk8XSvm5hfJsMV8olcozIZxN8o+FnmipVK7k5wu3zm201RvdLBYWK9PFQiWEMJ6kvxQON9qanqvMF26FEM5v5D0flxdv3Sws5GfnFt8ZHBwcDBMbY+iPip9XiguVeu/13BAmN+r2RVsGV8u+sDGWQ9En5eXFhUKpln5xS51SeaZQ2lJnKsn7OvRHlcXlhZlCpZgvlW80+ttPI8lxbOLyh5cvDm3LvxbVj6N7OywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/qP7w29/E0Lorp/FIYRclPwSJf9S7j0onso/mrqzNnxicvXu2sNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiHHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSO27CQBAA0PVGUdocI5Vld2kdJYqSIo6QOAEcg8PAUbgEd6CgoKVCMmsk/JHcQPVeY8+MdmekHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDpvmf1/L8ow3OKt8vdvvl5ucS/Kb/+GD7/9IAZuZ+fv/rzqyjTu2e9+ntKHarYVE/H1SIMfFubzp5c9+lGv0/X2L6Nzdf2fQ1ZzEMIVaq/ZTHm+bS7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADO7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbR9G3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CsAAP//aQIeXw==") symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.226090161s ago: executing program 1 (id=2082): setrlimit(0x2, &(0x7f00000000c0)={0xa, 0x2400000}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) 1.995641284s ago: executing program 1 (id=2084): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newroute={0x30, 0x18, 0xa01, 0x70bd2c, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xc8, 0x0, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x8, 0x8}}, @RTA_PREF={0x5, 0x14, 0x2d}]}, 0x30}, 0x1, 0x2}, 0x10) 1.869318176s ago: executing program 1 (id=2085): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_targets\x00') pread64(r0, &(0x7f00000000c0)=""/196, 0xc4, 0x2) 1.669843788s ago: executing program 1 (id=2088): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) 1.462515411s ago: executing program 1 (id=2091): openat$dir(0xffffffffffffff9c, &(0x7f0000002e40)='./file0\x00', 0xc0240, 0x0) mount$9p_unix(&(0x7f0000004ac0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00', &(0x7f0000005a00), 0x0, &(0x7f0000005a40)) 1.263598204s ago: executing program 1 (id=2094): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2804080, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x5, 0x4430, &(0x7f0000000240)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x80243, 0x1) 1.144388045s ago: executing program 3 (id=2095): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rfc1337\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) 1.044064136s ago: executing program 0 (id=2097): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x1, 0x2c6, &(0x7f0000000c80)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x1a10c1, 0x9c37611dc13d0d83) 1.019199427s ago: executing program 2 (id=2098): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000002600)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x48001) 823.018669ms ago: executing program 2 (id=2099): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) 759.6651ms ago: executing program 0 (id=2100): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000004c0)={{0xfffffffffffffffe, 0x2000004}, {0x0, 0x1}, 0x6, 0x3}) 568.688333ms ago: executing program 2 (id=2101): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x200, 0x0, @empty, 0x40000}, 0x1c) 524.506003ms ago: executing program 3 (id=2102): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 513.001733ms ago: executing program 0 (id=2103): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="b400000002000000660000000000000073014c000000000095000000000000004bb5eea0a6ec9fcd4b0a008a8443f22702000000e63bde9e4a0587536a966992ae7011d6e6c03175717e9912e0dd1a59541f7cbb1548ee5bd627f5b0b8ec77bd6d5f7b543f9aafaabe53339b12fbbe7decc4aa61b8aad0359083bdd61543fbeee8d560bb4b5925fae801f4c91e31674b124a1b38000000bc4da4a9b3d5cc9e0000f6a7a729009973ff07000000000000ac79e5d84abbec7d96629490727375b853f6308a980fba61fbe0131f3c7a026d8f000008000000000000000b20d7ac2df89d7989bf53bec908213d396edf24e9fc3cc004a1097fddc65c1b1b328277ff85ed56b9261eb7bcee28ec2d3616689ab3f31f849eebce6f21e6302003c0467844e000000000db0700bd694a09b253a1c6c7c138b3ec6ee9b83edcc55d3403acd5c50e2740a7ab7069790da79b7ab45184caffff00009bab066bf7a4ab148d44c7e2e4d219cdd7ebeb51511d9df85a648b1b85f93cb6cd21f93d5ea3da2b31657c065d052d9b9ee00320def97ebac25b929b3c15e33be6e7d54e622b427ee8d181d2f18d772fb5c58a936620ba1f5fbb48703ab211f442697edc165b449db2e3c221fbf270a6db414516949b97c200000096a1cbe81a38a23f03bd741a3e60c2e294f828e06f1b2cb70328f151f949e369efed52a28b87aae9d7d2800c8eff7f93c05adc9086d3f143a7b87d06838c6525cafdc01820a8912a131ff1f6acb9439f2d95a746291641b38333ce1c84b0d9d033edc9da00c8a2b42e8adfeff69fce7a35f79748e3e5b235269310988a05bf7c4e4cef3d1aa550c83d6328eb000000044a6458c31431d58973c93f5e9452258a7098bc3d014afe638a40948498fa9561213bc20845526e054d6b3ba5ca8f357df67c41acc28edacb31d38994544c3511ea1e8a448e66039425cfb03efb5d5eb81a306746adb8809ef969187763c00085e2dc401325327e54cbfceb400c2663466cd4a79c94b62c9882626499a8a29c564464f2a7aee6a929f831c93d23005787d272b5eaf0c6e11a7f0f1f39f68df44f6bf2d9b51d99c89e327b4bf7b96ad33abbd3a8b5814b5e7f85d1a47ee604ccef20bda53c9ce06910568fc200eee12fc6ef2734a6e9af5132f0c507e277fd97f9b48c840697289d38e454467f4d2f94b2f76d06edd083dafefd76deb251b5818de9c27d0df6e7b8862fe42f6c453f551f35b6d76395a1d205f276ae628fbdb8081905a1d7c2805532d3387b88f2997e8ce41c5dca83659cfb7f3a1c7b2bec8a7575dc4241dde6c680ee9a27b197739f4ad86f3bad3e42d4954bef864586ad02c27858d63efc495bcfb6ed49a5ca8987b0f2a8b14054e30f30fedf536d63769a196fc3b472195d0a1a13ecf803136d751cefb0edb5794cab8681214b39f86d88f3aebea4d465ef05f975b09f264d6c8d8e3bb6ea7d21c6602bcc8f76f2546cccc074f55c22aa8b502968040000000000000047c8a50036dd268a1aeff951f5090492b5e941feb1d3785aafe1655876e5a36c40fb5afcfd1eb28952662782097836a4d1aa3de0c06bb7dc27cf1a546b6aa6ce9932f3c6a013bc3791da4d8a33680ba8f1334d75a43e991ebd4582d786ec05cdd3152d52ab15fc7595cbd339f730d2ec8e37e6c500c4c30280a6af986f62a22d9c5c275e7798c165545abfcd304243274db15924a136a0896d56576ed7de90b1bda90f4024b9a0b3b33f688db8e38f784ae3942aba874f95d10c47e2405ceb0438cc272133fac718a6553710e4ca97df646b21d02652c54eade2e99344e11a2671cf274d397650fba8fcfb7e51a926e37b3980a1732111175dd99b9d979042b3ea411a7b4f9081ae9b82974d5eb6fd4e4bcd95e4f897dfba4e44777e6d02a896b650a66d9139696b926c36a33eb3bdc092bf4586bfab34002f802bbfe6a7679cec20cc25e01f129bbe92a65961fac7bffa3d8feda2ac927743d2bce57ee39b671948576337535180aa754e035421cf1709bc1b5e46c35515fb1fcda637a6405e9b216d2ca09795c5d2f27665da5b17bcf0f387e6dd58202a3a1148e46e55ac7ea027eb3022eee4a000ca543ab566921e5db4f741a762e5705f942855a9fa30b912045f78ab1e3fdeada84bc8ac36cc1223901e56f6ecbabbc3263098c9c47a1f505a8299b5715a455e834ddddc430f387cafa07bf915522f9a42e34eea5169b796320e892d27924045bcf56135684ca96ada82749371d5766c0d0cae8772f140eef001ca39dc28aef8a5236393fce29b0531cbd3265c209761ed41a2e473fbd84ca9b67e3ceb58a4b774ee127628faba8702c0a73f8311d269429aaadf74c439404fc9f864e69807dfe257c0c4a26c60bfa77f89bae2bd4c498a10d4e17dddb1f7539bfeb392e22e7b93d0ecf66cd253a4062bbc8a437f8924ee7a89ab73dd7c11be13707482c369f02d7b6f242599f95dbfcb55bea158665231f8fe04ed2a8c407fed1a8702e2486386f2ae6347231128be789186ff5651208c80781f85d3fb51bd28b939a8bc88a471c36fa17fd04c3fbdbd3f7bf144b1466014a77c582aa0380e612cd101d557dd1e5b7bae3da3ea2659f66a3641eaa3b008b9788a63c8f7009f9149fd9c740eddd300000000000000000000e620e3657ac82a5bd27dfa4f2add31a402346571e87b2644edb73d4affdcbbe2b8e2539b44554c10dc0ac8ba67ab9901c8e9564b4c26a87cf59b11978a86d4938ca4db01a9d8426aed32eb0d0d1dd894bbf3197f3b5744b5a4f813fd7330"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x47) 405.554985ms ago: executing program 2 (id=2104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e000000208000740000000001c00188008000140"], 0xa4}}, 0x0) 379.956325ms ago: executing program 0 (id=2105): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) 337.075235ms ago: executing program 3 (id=2106): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x104, 0x104, 0x1}) 197.709427ms ago: executing program 0 (id=2107): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x2d0102, 0x0) fcntl$getflags(r0, 0x1) 153.132128ms ago: executing program 3 (id=2108): r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000300)={[{@swalloc}, {@dax}, {@grpid}]}, 0x0, 0x9732, &(0x7f0000013240)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0xc0385868, &(0x7f00000000c0)=ANY=[]) 108.059118ms ago: executing program 0 (id=2109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 91.270349ms ago: executing program 2 (id=2110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x494}}, 0x0) 0s ago: executing program 2 (id=2111): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x8200, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=bind:0-N:3/7', @ANYRES64]) kernel console output (not intermixed with test programs): .289199][ T5853] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 149.296589][ T27] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 149.330790][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.339209][ T27] usb 4-1: config 179 has no interface number 0 [ 149.348893][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 149.354661][ T5853] usb 1-1: config 0 descriptor?? [ 149.381928][ T5853] hub 1-1:0.0: USB hub found [ 149.391252][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 149.433459][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.461894][ T27] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 149.467153][ T5796] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.491382][ T27] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 149.525300][ T27] usb 4-1: config 179 interface 65 has no altsetting 0 [ 149.548973][ T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 149.587508][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.615268][ T5853] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 149.729584][ T27] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 149.838661][ T5853] usbhid 1-1:0.0: can't add hid device: -71 [ 149.870738][ T5853] usbhid: probe of 1-1:0.0 failed with error -71 [ 149.922498][ T5853] usb 1-1: USB disconnect, device number 6 [ 149.978386][ T9] usb 4-1: USB disconnect, device number 7 [ 149.995650][ T9] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 150.088773][ T7410] loop2: detected capacity change from 0 to 1024 [ 150.143475][ T7410] hfsplus: bad catalog entry type [ 150.272496][ T7416] loop2: detected capacity change from 0 to 1024 [ 150.688116][ T7433] loop3: detected capacity change from 0 to 512 [ 150.757210][ T7435] loop0: detected capacity change from 0 to 1024 [ 150.827681][ T7433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.853324][ T7433] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.859371][ T7435] hfsplus: bad catalog entry type [ 151.073094][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.412488][ T5781] usb 3-1: USB disconnect, device number 6 [ 152.215707][ T7489] loop2: detected capacity change from 0 to 512 [ 152.278391][ T7489] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.727: bg 0: block 248: padding at end of block bitmap is not set [ 152.290396][ T7493] sctp: [Deprecated]: syz.3.729 (pid 7493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.290396][ T7493] Use struct sctp_sack_info instead [ 152.330899][ T7489] Quota error (device loop2): write_blk: dquota write failed [ 152.338462][ T7489] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 152.348747][ T7489] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.727: Failed to acquire dquot type 1 [ 152.362405][ T7489] EXT4-fs (loop2): 1 truncate cleaned up [ 152.370866][ T7489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.384197][ T7489] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.405361][ T7489] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 152.417212][ T7489] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 152.428872][ T7489] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.727: Failed to acquire dquot type 1 [ 152.531790][ T7489] syz.2.727 (7489) used greatest stack depth: 20240 bytes left [ 152.556714][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.577901][ T1144] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 152.600277][ T1144] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:11: Failed to release dquot type 1 [ 153.027383][ T7510] loop2: detected capacity change from 0 to 512 [ 153.127630][ T7510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.152186][ T7510] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.195255][ T7519] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 153.201849][ T7519] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 153.289128][ T7519] vhci_hcd vhci_hcd.0: Device attached [ 153.361650][ T7519] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 153.368241][ T7519] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.397748][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.408901][ T7519] vhci_hcd vhci_hcd.0: Device attached [ 153.428991][ T7524] vhci_hcd: connection closed [ 153.433089][ T7520] vhci_hcd: connection closed [ 153.439531][ T1113] vhci_hcd: stop threads [ 153.457969][ T1113] vhci_hcd: release socket [ 153.479469][ T1113] vhci_hcd: disconnect device [ 153.497588][ T1113] vhci_hcd: stop threads [ 153.507778][ T1113] vhci_hcd: release socket [ 153.510038][ T967] vhci_hcd: vhci_device speed not set [ 153.539634][ T1113] vhci_hcd: disconnect device [ 153.579288][ T28] audit: type=1326 audit(1752698912.677:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x7ffc0000 [ 153.610720][ T967] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 153.629153][ T967] usb 35-1: enqueue for inactive port 0 [ 153.669489][ T7515] loop3: detected capacity change from 0 to 32768 [ 153.676306][ T28] audit: type=1326 audit(1752698912.677:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x7ffc0000 [ 153.721189][ T28] audit: type=1326 audit(1752698912.677:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fad3658e929 code=0x7ffc0000 [ 153.725369][ T967] vhci_hcd: vhci_device speed not set [ 153.743386][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.789317][ T28] audit: type=1326 audit(1752698912.677:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x7ffc0000 [ 153.805724][ T7515] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.821266][ T28] audit: type=1326 audit(1752698912.717:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x7ffc0000 [ 153.887954][ T7541] netlink: 'syz.2.744': attribute type 12 has an invalid length. [ 153.973626][ T7515] XFS (loop3): Ending clean mount [ 153.982902][ T7515] XFS (loop3): Quotacheck needed: Please wait. [ 154.071409][ T7515] XFS (loop3): Quotacheck: Done. [ 154.265751][ T5795] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.405712][ T7551] loop1: detected capacity change from 0 to 64 [ 154.753635][ T7553] loop0: detected capacity change from 0 to 4096 [ 154.805692][ T7557] loop1: detected capacity change from 0 to 256 [ 154.819850][ T7553] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 154.830287][ T7557] exfat: Deprecated parameter 'debug' [ 154.931695][ T7557] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa6c8c8ab, utbl_chksum : 0xe619d30d) [ 154.974100][ T7553] ntfs3: loop0: failed to convert "c46c" to iso8859-15 [ 154.986786][ T7557] exFAT-fs (loop1): error, invalid access to FAT bad cluster (entry 0x00000005) [ 155.011530][ T7557] exFAT-fs (loop1): failed to initialize root inode [ 155.186209][ T7563] netlink: 'syz.3.755': attribute type 12 has an invalid length. [ 155.205631][ T7546] loop2: detected capacity change from 0 to 32768 [ 155.342464][ T7569] loop1: detected capacity change from 0 to 512 [ 155.379905][ T7546] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.470792][ T7569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.569350][ T7569] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.569523][ T7546] XFS (loop2): Ending clean mount [ 155.710564][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.729322][ T7580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.759'. [ 155.838121][ T5796] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.102559][ T7561] loop0: detected capacity change from 0 to 32768 [ 156.175188][ T7561] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.764 (7561) [ 156.296767][ T7561] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.345422][ T7561] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 156.389175][ T7561] BTRFS info (device loop0): setting nodatacow, compression disabled [ 156.400215][ T7561] BTRFS info (device loop0): force zlib compression, level 3 [ 156.426531][ T7561] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 156.462561][ T7561] BTRFS info (device loop0): trying to use backup root at mount time [ 156.477361][ T7588] xt_CT: No such helper "snmp" [ 156.521058][ T7561] BTRFS info (device loop0): enabling auto defrag [ 156.527643][ T7561] BTRFS info (device loop0): max_inline at 0 [ 156.576104][ T7561] BTRFS info (device loop0): setting nodatacow [ 156.609181][ T7561] BTRFS info (device loop0): using free space tree [ 156.663453][ T7597] loop3: detected capacity change from 0 to 512 [ 156.818813][ T7597] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.768: bg 0: block 248: padding at end of block bitmap is not set [ 156.820089][ T7561] BTRFS info (device loop0): enabling ssd optimizations [ 156.844962][ T7597] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.768: Failed to acquire dquot type 1 [ 156.865526][ T7561] BTRFS info (device loop0): auto enabling async discard [ 156.879579][ T7597] EXT4-fs (loop3): 1 truncate cleaned up [ 156.902137][ T7561] BTRFS info (device loop0): checking UUID tree [ 156.914231][ T7597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.984173][ T7597] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.075292][ T7597] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.768: Failed to acquire dquot type 1 [ 157.220852][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.231427][ T5792] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.269297][ T1113] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:8: Failed to release dquot type 1 [ 157.586436][ T7633] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 157.644958][ T7635] loop3: detected capacity change from 0 to 1764 [ 157.884609][ T7641] loop0: detected capacity change from 0 to 128 [ 157.980491][ T7641] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.103646][ T7641] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.224423][ T7651] geneve2: entered promiscuous mode [ 158.245613][ T7651] geneve2: entered allmulticast mode [ 158.297237][ T5792] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.753390][ T7666] loop3: detected capacity change from 0 to 256 [ 158.891753][ T7666] FAT-fs (loop3): Directory bread(block 64) failed [ 158.913438][ T7666] FAT-fs (loop3): Directory bread(block 65) failed [ 158.947617][ T7666] FAT-fs (loop3): Directory bread(block 66) failed [ 158.979203][ T7666] FAT-fs (loop3): Directory bread(block 67) failed [ 158.985914][ T7666] FAT-fs (loop3): Directory bread(block 68) failed [ 159.029253][ T7666] FAT-fs (loop3): Directory bread(block 69) failed [ 159.058398][ T7666] FAT-fs (loop3): Directory bread(block 70) failed [ 159.075804][ T7666] FAT-fs (loop3): Directory bread(block 71) failed [ 159.097094][ T7666] FAT-fs (loop3): Directory bread(block 72) failed [ 159.103983][ T7666] FAT-fs (loop3): Directory bread(block 73) failed [ 159.412673][ T7689] geneve2: entered promiscuous mode [ 159.449379][ T7689] geneve2: entered allmulticast mode [ 160.140175][ T7713] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 160.370043][ T7715] loop2: detected capacity change from 0 to 4096 [ 160.397716][ T7715] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 160.538583][ T7727] netlink: 'syz.0.821': attribute type 30 has an invalid length. [ 160.659943][ T7715] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 161.770112][ T7771] loop2: detected capacity change from 0 to 128 [ 161.816696][ T7771] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.878117][ T7771] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 161.947835][ T7771] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 5 (only 1 groups) [ 162.005846][ T5796] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.009217][ T5853] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.168010][ T7767] loop3: detected capacity change from 0 to 32768 [ 162.178190][ T7767] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.839 (7767) [ 162.202008][ T7767] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.212488][ T7767] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 162.222708][ T7767] BTRFS info (device loop3): setting nodatacow, compression disabled [ 162.231348][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 162.236763][ T7767] BTRFS info (device loop3): force zlib compression, level 3 [ 162.246103][ T7767] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 162.267934][ T7767] BTRFS info (device loop3): trying to use backup root at mount time [ 162.277678][ T5853] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 162.292076][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.301822][ T7767] BTRFS info (device loop3): enabling auto defrag [ 162.308341][ T7767] BTRFS info (device loop3): max_inline at 0 [ 162.316010][ T5853] usb 2-1: Product: syz [ 162.320921][ T5853] usb 2-1: Manufacturer: syz [ 162.325653][ T7767] BTRFS info (device loop3): setting nodatacow [ 162.332324][ T5853] usb 2-1: SerialNumber: syz [ 162.338338][ T7767] BTRFS info (device loop3): using free space tree [ 162.348876][ T5853] usb 2-1: config 0 descriptor?? [ 162.362712][ T5853] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 162.406113][ T7767] BTRFS info (device loop3): enabling ssd optimizations [ 162.420253][ T7767] BTRFS info (device loop3): auto enabling async discard [ 162.438788][ T7767] BTRFS info (device loop3): checking UUID tree [ 162.551954][ T5795] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.594293][ T7795] loop2: detected capacity change from 0 to 512 [ 162.645839][ T7795] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.795706][ T5853] gspca_sn9c20x: Write register 1001 failed -71 [ 162.817904][ T5853] gspca_sn9c20x: Device initialization failed [ 162.827045][ T5853] gspca_sn9c20x: probe of 2-1:0.0 failed with error -71 [ 162.836992][ T5796] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 162.902773][ T5853] usb 2-1: USB disconnect, device number 6 [ 163.832403][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.861'. [ 163.910682][ T7831] loop1: detected capacity change from 0 to 128 [ 163.959781][ T7831] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.997133][ T7831] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.042346][ T7811] loop2: detected capacity change from 0 to 32768 [ 164.051098][ T7831] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 5 (only 1 groups) [ 164.118179][ T5793] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.186377][ T7811] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.462655][ T7811] XFS (loop2): Ending clean mount [ 164.488095][ T7811] XFS (loop2): Quotacheck needed: Please wait. [ 164.557360][ T7811] XFS (loop2): Quotacheck: Done. [ 164.602804][ T7857] loop1: detected capacity change from 0 to 4096 [ 164.628735][ T7857] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 164.669361][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 164.709195][ T7857] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 164.744485][ T5796] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.879286][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 164.927867][ T27] usb 1-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 164.949129][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.957721][ T27] usb 1-1: Product: syz [ 164.974666][ T27] usb 1-1: Manufacturer: syz [ 164.989259][ T27] usb 1-1: SerialNumber: syz [ 165.012944][ T27] usb 1-1: config 0 descriptor?? [ 165.031637][ T27] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 165.348056][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 165.369451][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 165.453789][ T27] gspca_sn9c20x: Write register 1001 failed -71 [ 165.472205][ T27] gspca_sn9c20x: Device initialization failed [ 165.478426][ T27] gspca_sn9c20x: probe of 1-1:0.0 failed with error -71 [ 165.530115][ T27] usb 1-1: USB disconnect, device number 7 [ 165.624422][ T7879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.881'. [ 165.958973][ T7893] netlink: 'syz.1.889': attribute type 2 has an invalid length. [ 165.984196][ T7893] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.889'. [ 166.132152][ T7899] tmpfs: Bad value for 'mpol' [ 166.734354][ T7925] tmpfs: Bad value for 'mpol' [ 166.739279][ T7926] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 67108897, id = 0 [ 166.813501][ T7930] loop3: detected capacity change from 0 to 512 [ 166.847272][ T7930] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.080942][ T5795] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 167.876119][ T7970] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 167.886842][ T7974] netlink: 'syz.0.926': attribute type 22 has an invalid length. [ 168.058325][ T7978] netlink: 'syz.2.927': attribute type 2 has an invalid length. [ 168.081879][ T7978] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.927'. [ 168.711418][ T8004] loop1: detected capacity change from 0 to 512 [ 168.813533][ T8004] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 168.833035][ T8004] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 168.843985][ T8004] System zones: 0-1 [ 168.849332][ T8013] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 67108897, id = 0 [ 168.867992][ T8004] , 15-15, 18-18, 34-34 [ 168.919487][ T8004] EXT4-fs (loop1): orphan cleanup on readonly fs [ 168.926028][ T8004] __quota_error: 5 callbacks suppressed [ 168.926044][ T8004] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 169.004189][ T8004] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 169.049439][ T8004] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 169.071609][ T8004] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.942: bad orphan inode 16 [ 169.094910][ T8004] ext4_test_bit(bit=15, block=18) = 1 [ 169.100951][ T8004] is_bad_inode(inode)=0 [ 169.105265][ T8004] NEXT_ORPHAN(inode)=0 [ 169.109938][ T8004] max_ino=32 [ 169.113273][ T8004] i_nlink=2 [ 169.117133][ T8019] loop2: detected capacity change from 0 to 128 [ 169.127243][ T8004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.156578][ T8019] autofs4:pid:8019:autofs_fill_super: called with bogus options [ 169.244360][ T8021] comedi: No check for data length of config insn id 4 is implemented [ 169.252959][ T8004] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 169.319178][ T8021] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 169.355480][ T8021] comedi: Assuming n=15 is correct [ 169.378265][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.615818][ T8027] loop3: detected capacity change from 0 to 2048 [ 169.703998][ T8034] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.926344][ T8034] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 169.964500][ T8034] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 169.991008][ T8034] Remounting filesystem read-only [ 170.004956][ T58] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 170.023944][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.043667][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.076829][ T58] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 170.089059][ T58] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 170.096530][ T58] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 170.118710][ T58] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 170.145086][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.182766][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.216212][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.235332][ T58] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 170.251924][ T58] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 170.270504][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.290404][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.323564][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.362221][ T58] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 170.368977][ T58] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 170.398168][ T8056] netlink: 'syz.1.967': attribute type 22 has an invalid length. [ 170.398737][ T58] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 170.432153][ T58] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 170.440234][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.450145][ T58] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 170.457739][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.467651][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.504523][ T8058] loop2: detected capacity change from 0 to 256 [ 170.505594][ T58] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 170.519525][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.544028][ T5795] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 170.577596][ T5795] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 170.604360][ T5795] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 170.629104][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.658646][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.678342][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.691214][ T5795] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 170.697964][ T5795] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 170.705472][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.714521][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.772360][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 171.274781][ T8083] loop0: detected capacity change from 0 to 4096 [ 171.290821][ T8083] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.324373][ T8083] EXT4-fs (loop0): Test dummy encryption mode enabled [ 171.381035][ T8083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.436872][ T8090] loop3: detected capacity change from 0 to 512 [ 171.554763][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.618966][ T8090] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 171.670882][ T8090] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 171.681923][ T8090] System zones: 0-1, 15-15, 18-18, 34-34 [ 171.688028][ T8090] EXT4-fs (loop3): orphan cleanup on readonly fs [ 171.695086][ T8090] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 171.705196][ T8090] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 171.720116][ T8090] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 171.731660][ T8090] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.981: bad orphan inode 16 [ 171.759480][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.781117][ T8090] ext4_test_bit(bit=15, block=18) = 1 [ 171.809345][ T8090] is_bad_inode(inode)=0 [ 171.813573][ T8090] NEXT_ORPHAN(inode)=0 [ 171.839734][ T8090] max_ino=32 [ 171.843228][ T8090] i_nlink=2 [ 171.847825][ T8090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.951296][ T8090] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 171.959309][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 171.966881][ T27] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 171.991385][ T27] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 172.023296][ T27] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 172.040386][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.047686][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.092381][ T27] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 172.113100][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.143469][ T27] usb 2-1: Product: syz [ 172.147709][ T27] usb 2-1: Manufacturer: syz [ 172.167330][ T27] usb 2-1: SerialNumber: syz [ 172.180582][ T27] usb 2-1: config 0 descriptor?? [ 172.207459][ T8092] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.268889][ T8084] loop2: detected capacity change from 0 to 32768 [ 172.292726][ T8084] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.979 (8084) [ 172.333212][ T8084] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 172.366751][ T8084] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 172.384887][ T8084] BTRFS info (device loop2): force zlib compression, level 3 [ 172.394752][ T8084] BTRFS info (device loop2): force clearing of disk cache [ 172.402476][ T8084] BTRFS info (device loop2): setting nodatasum [ 172.408837][ T8084] BTRFS info (device loop2): allowing degraded mounts [ 172.465404][ T8092] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.472848][ T8084] BTRFS info (device loop2): enabling disk space caching [ 172.486521][ T8084] BTRFS info (device loop2): disk space caching is enabled [ 172.508137][ T27] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 172.647901][ T8084] BTRFS info (device loop2): auto enabling async discard [ 172.719537][ T9] usb 2-1: USB disconnect, device number 7 [ 172.721150][ T8084] BTRFS info (device loop2): rebuilding free space tree [ 172.813698][ T8084] BTRFS info (device loop2): disabling free space tree [ 172.831350][ T8084] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.881015][ T8084] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.897846][ T8132] loop0: detected capacity change from 0 to 256 [ 172.958507][ T8132] FAT-fs (loop0): Directory bread(block 64) failed [ 172.981506][ T8132] FAT-fs (loop0): Directory bread(block 65) failed [ 172.988850][ T8132] FAT-fs (loop0): Directory bread(block 66) failed [ 172.999519][ T8132] FAT-fs (loop0): Directory bread(block 67) failed [ 173.022927][ T8132] FAT-fs (loop0): Directory bread(block 68) failed [ 173.055165][ T8132] FAT-fs (loop0): Directory bread(block 69) failed [ 173.063914][ T8132] FAT-fs (loop0): Directory bread(block 70) failed [ 173.089239][ T8132] FAT-fs (loop0): Directory bread(block 71) failed [ 173.103028][ T8132] FAT-fs (loop0): Directory bread(block 72) failed [ 173.127286][ T8132] FAT-fs (loop0): Directory bread(block 73) failed [ 173.179988][ T5796] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 173.576975][ T8143] loop3: detected capacity change from 0 to 512 [ 173.619806][ T8143] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.1000: corrupted in-inode xattr: invalid ea_ino [ 173.687443][ T8143] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1000: couldn't read orphan inode 15 (err -117) [ 173.773839][ T8143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.857459][ T8149] loop0: detected capacity change from 0 to 2048 [ 173.964292][ T8154] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.001613][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.204549][ T8154] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 174.214001][ T8158] loop2: detected capacity change from 0 to 256 [ 174.239679][ T8154] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 174.266634][ T8158] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.287145][ T8154] Remounting filesystem read-only [ 174.288019][ T8158] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.304984][ T1092] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 174.315016][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.339141][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.384152][ T1092] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 174.409122][ T1092] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 174.416590][ T1092] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 174.431328][ T1092] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 174.453597][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.472122][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.501702][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.521241][ T1092] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 174.537002][ T1092] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 174.555754][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.578512][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.603608][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.633895][ T1092] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 174.652860][ T1092] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 174.662690][ T1092] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 174.671466][ T1092] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 174.679647][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.688737][ T1092] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 174.696776][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.716035][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.734922][ T1092] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 174.742572][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.752146][ T1092] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 174.758875][ T1092] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 174.766798][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.775767][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.785438][ T1092] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.795261][ T5792] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 174.805564][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 174.812418][ T5792] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 174.820531][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.830791][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 174.848721][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 175.069766][ T8156] loop1: detected capacity change from 0 to 32768 [ 175.078413][ T8156] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1005 (8156) [ 175.106435][ T8156] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 175.132162][ T8156] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 175.153713][ T8156] BTRFS info (device loop1): force zlib compression, level 3 [ 175.158867][ T8174] loop2: detected capacity change from 0 to 2048 [ 175.188903][ T8156] BTRFS info (device loop1): force clearing of disk cache [ 175.199730][ T8156] BTRFS info (device loop1): setting nodatasum [ 175.206474][ T8156] BTRFS info (device loop1): allowing degraded mounts [ 175.255682][ T8156] BTRFS info (device loop1): enabling disk space caching [ 175.261980][ T8174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.300896][ T8156] BTRFS info (device loop1): disk space caching is enabled [ 175.509962][ T8156] BTRFS info (device loop1): auto enabling async discard [ 175.571525][ T8156] BTRFS info (device loop1): rebuilding free space tree [ 175.597800][ T8199] loop0: detected capacity change from 0 to 256 [ 175.616183][ T8156] BTRFS info (device loop1): disabling free space tree [ 175.617336][ T8199] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.639397][ T8156] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.679263][ T8156] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.726303][ T8199] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.909418][ T5794] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.935483][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 175.977160][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 175.986973][ T5793] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 176.257482][ T5812] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop1 scanned by udevd (5812) [ 176.757625][ T8232] loop2: detected capacity change from 0 to 64 [ 176.877495][ T8232] hfs: request for non-existent node 262144 in B*Tree [ 176.931292][ T8232] hfs: request for non-existent node 262144 in B*Tree [ 177.435811][ T8242] loop3: detected capacity change from 0 to 4096 [ 177.706786][ T8249] loop1: detected capacity change from 0 to 4096 [ 177.727966][ T8229] loop0: detected capacity change from 0 to 32768 [ 177.736689][ T8249] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.789566][ T8229] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 177.802468][ T8249] EXT4-fs (loop1): Test dummy encryption mode enabled [ 177.853885][ T8249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.903817][ T8256] loop2: detected capacity change from 0 to 512 [ 177.942435][ T8256] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.1043: corrupted in-inode xattr: invalid ea_ino [ 178.018904][ T8256] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1043: couldn't read orphan inode 15 (err -117) [ 178.066476][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.107852][ T8256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.172339][ T5798] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 178.343764][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.410920][ T8269] tmpfs: Bad value for 'mpol' [ 178.780373][ T8280] dlm: Unknown command passed to DLM device : 11 [ 178.780373][ T8280] [ 178.955155][ T8285] loop1: detected capacity change from 0 to 2048 [ 179.021962][ T8285] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.269121][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.469140][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 179.489423][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 179.527189][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 179.548756][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 179.569926][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.601399][ T9] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 179.623121][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.642798][ T9] usb 4-1: Product: syz [ 179.654581][ T9] usb 4-1: Manufacturer: syz [ 179.664712][ T9] usb 4-1: SerialNumber: syz [ 179.672887][ T9] usb 4-1: config 0 descriptor?? [ 179.679693][ T8291] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.879857][ T5867] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 179.922762][ T8291] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.961279][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 180.085849][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 180.114360][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 180.126598][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 180.145942][ T5867] usb 2-1: language id specifier not provided by device, defaulting to English [ 180.211449][ T5867] usb 2-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 180.242902][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.272824][ T5867] usb 2-1: Manufacturer: ‰ [ 180.280347][ T9] usb 4-1: USB disconnect, device number 8 [ 180.289872][ T5867] usb 2-1: SerialNumber: syz [ 180.324440][ T5867] usb 2-1: config 0 descriptor?? [ 180.352503][ T5867] em28xx 2-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 180.389432][ T5867] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 180.413103][ T8329] loop2: detected capacity change from 0 to 64 [ 180.644016][ T5867] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 180.650720][ T5867] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 180.666853][ T5867] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 180.679358][ T5867] em28xx 2-1:0.0: No AC97 audio processor [ 180.712087][ T5867] usb 2-1: USB disconnect, device number 8 [ 180.743945][ T5867] em28xx 2-1:0.0: Disconnecting em28xx [ 180.781418][ T5867] em28xx 2-1:0.0: Freeing device [ 180.784089][ T8339] dlm: Unknown command passed to DLM device : 11 [ 180.784089][ T8339] [ 180.801190][ T8338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1092'. [ 180.991195][ T8345] loop2: detected capacity change from 0 to 512 [ 181.080183][ T8345] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 181.104868][ T8345] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 181.129657][ T8345] System zones: 0-1, 15-15, 18-18, 34-34 [ 181.159997][ T8345] EXT4-fs (loop2): orphan cleanup on readonly fs [ 181.194755][ T8345] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 181.206990][ T8345] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 181.221720][ T8345] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 181.239890][ T8345] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1087: bg 0: block 40: padding at end of block bitmap is not set [ 181.289443][ T8345] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 181.333668][ T8345] EXT4-fs (loop2): 1 truncate cleaned up [ 181.370175][ T8345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.387491][ T8358] loop0: detected capacity change from 0 to 64 [ 181.477666][ T8345] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.1087: bad symlink. [ 181.603163][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.686549][ T8367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1096'. [ 181.711871][ T8365] tc_dump_action: action bad kind [ 181.997756][ T8377] loop2: detected capacity change from 0 to 128 [ 182.111526][ T8383] loop3: detected capacity change from 0 to 64 [ 182.516105][ T8393] tc_dump_action: action bad kind [ 182.736044][ T8399] loop1: detected capacity change from 0 to 764 [ 182.769838][ T8399] Symlink component flag not implemented [ 182.791794][ T8399] Symlink component flag not implemented (7) [ 183.477889][ T8430] netlink: 'syz.3.1127': attribute type 21 has an invalid length. [ 183.507255][ T8432] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1126'. [ 183.700370][ T8438] loop3: detected capacity change from 0 to 256 [ 183.768373][ T8438] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 183.823360][ T8442] loop0: detected capacity change from 0 to 128 [ 184.157322][ T8453] loop0: detected capacity change from 0 to 512 [ 184.214008][ T8453] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 184.276893][ T8453] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 184.285846][ T8453] System zones: 0-1, 15-15, 18-18, 34-34 [ 184.292625][ T8453] EXT4-fs (loop0): orphan cleanup on readonly fs [ 184.299346][ T8453] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 184.308858][ T8453] EXT4-fs warning (device loop0): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 184.324223][ T8453] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 184.355675][ T8453] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1137: bg 0: block 40: padding at end of block bitmap is not set [ 184.375862][ T8453] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 184.385457][ T8453] EXT4-fs (loop0): 1 truncate cleaned up [ 184.403594][ T8453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.487583][ T8453] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1137: bad symlink. [ 184.638801][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.643249][ T8469] netlink: 'syz.2.1145': attribute type 21 has an invalid length. [ 184.830879][ T8475] bond0: (slave erspan0): Opening slave failed [ 185.339186][ T5853] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.540648][ T5853] usb 4-1: Using ep0 maxpacket: 8 [ 185.558711][ T5853] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 185.567255][ T5853] usb 4-1: config 2 has no interface number 0 [ 185.587556][ T5853] usb 4-1: config 2 interface 31 has no altsetting 0 [ 185.606615][ T5853] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 185.627533][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.650904][ T5853] usb 4-1: Product: syz [ 185.655139][ T5853] usb 4-1: Manufacturer: syz [ 185.672497][ T5853] usb 4-1: SerialNumber: syz [ 185.828481][ T8514] x_tables: unsorted underflow at hook 2 [ 185.848116][ T8515] vlan0: entered promiscuous mode [ 186.128432][ T5853] ch9200: probe of 4-1:2.31 failed with error -22 [ 186.139365][ T5781] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 186.175257][ T5853] usb 4-1: USB disconnect, device number 9 [ 186.369442][ T5781] usb 1-1: Using ep0 maxpacket: 16 [ 186.400427][ T5781] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 186.411667][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.428051][ T5781] usb 1-1: Product: syz [ 186.433182][ T5781] usb 1-1: Manufacturer: syz [ 186.440739][ T5781] usb 1-1: SerialNumber: syz [ 186.456909][ T5781] usb 1-1: config 0 descriptor?? [ 186.679839][ T5781] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 186.697595][ T5781] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 186.885447][ T967] usb 1-1: USB disconnect, device number 8 [ 187.027660][ T8543] bond0: (slave erspan0): Opening slave failed [ 187.196623][ T8548] loop2: detected capacity change from 0 to 2048 [ 187.282530][ T8548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.404516][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.644359][ T8565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.732253][ T8569] program syz.0.1192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.889269][ T8575] x_tables: unsorted underflow at hook 2 [ 187.969123][ T967] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 188.168962][ T967] usb 2-1: config 1 interface 0 altsetting 89 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 188.199467][ T967] usb 2-1: config 1 interface 0 altsetting 89 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 188.219181][ T967] usb 2-1: config 1 interface 0 has no altsetting 0 [ 188.233762][ T967] usb 2-1: string descriptor 0 read error: -22 [ 188.237260][ T8585] trusted_key: encrypted_key: master key parameter '' is invalid [ 188.240525][ T967] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.40 [ 188.278225][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.301640][ T8571] loop2: detected capacity change from 0 to 32768 [ 188.304162][ T8567] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.326146][ T8567] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.373623][ T8571] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.383112][ T5853] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 188.494016][ T8571] XFS (loop2): Ending clean mount [ 188.508443][ T8597] vlan0: entered promiscuous mode [ 188.586774][ T5853] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 188.612073][ T967] usbhid 2-1:1.0: can't add hid device: -71 [ 188.617903][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 188.632547][ T967] usbhid: probe of 2-1:1.0 failed with error -71 [ 188.653745][ T5853] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.667024][ T967] usb 2-1: USB disconnect, device number 9 [ 188.682680][ T5796] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.701620][ T5853] usb 4-1: language id specifier not provided by device, defaulting to English [ 188.731016][ T5853] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 188.745037][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.790060][ T5853] usb 4-1: Manufacturer: ‰ [ 188.794644][ T5853] usb 4-1: SerialNumber: syz [ 188.814890][ T5853] usb 4-1: config 0 descriptor?? [ 188.864389][ T5853] em28xx 4-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 188.885105][ T5853] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 189.150364][ T5853] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 189.169221][ T5853] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 189.188212][ T5853] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 189.207075][ T5853] em28xx 4-1:0.0: No AC97 audio processor [ 189.229342][ T5853] usb 4-1: USB disconnect, device number 10 [ 189.245027][ T5853] em28xx 4-1:0.0: Disconnecting em28xx [ 189.278613][ T5853] em28xx 4-1:0.0: Freeing device [ 189.334267][ T8615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.494911][ T8619] program syz.1.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.213113][ T8639] loop3: detected capacity change from 0 to 8192 [ 190.260720][ T8639] syz.3.1224: attempt to access beyond end of device [ 190.260720][ T8639] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 190.278956][ T8639] Buffer I/O error on dev loop3, logical block 57847, async page read [ 190.301718][ T8639] syz.3.1224: attempt to access beyond end of device [ 190.301718][ T8639] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 190.317873][ T8639] Buffer I/O error on dev loop3, logical block 57847, async page read [ 190.329546][ T28] audit: type=1800 audit(1752698949.437:45): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1224" name="file2" dev="loop3" ino=1048621 res=0 errno=0 [ 190.389124][ T967] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 190.600907][ T967] usb 1-1: Using ep0 maxpacket: 8 [ 190.612982][ T967] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 190.633734][ T967] usb 1-1: config 2 has no interface number 0 [ 190.652731][ T967] usb 1-1: config 2 interface 31 has no altsetting 0 [ 190.665798][ T967] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 190.686636][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.707563][ T967] usb 1-1: Product: syz [ 190.718386][ T967] usb 1-1: Manufacturer: syz [ 190.738685][ T967] usb 1-1: SerialNumber: syz [ 191.207954][ T967] ch9200: probe of 1-1:2.31 failed with error -22 [ 191.240391][ T967] usb 1-1: USB disconnect, device number 9 [ 192.399538][ T27] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 192.591323][ T27] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 192.600125][ T27] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 192.619114][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.634880][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 192.644165][ T967] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 192.654503][ T27] usb 1-1: config 1 has no interface number 0 [ 192.664163][ T27] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 192.675715][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.710333][ T27] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 192.839497][ T967] usb 2-1: Using ep0 maxpacket: 8 [ 192.847544][ T967] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 192.857714][ T967] usb 2-1: config 2 has no interface number 0 [ 192.870924][ T967] usb 2-1: config 2 interface 31 has no altsetting 0 [ 192.886955][ T967] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 192.916557][ T27] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 192.929588][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.938199][ T27] snd_usb_pod 1-1:1.1: invalid control EP [ 192.944746][ T967] usb 2-1: Product: syz [ 192.950320][ T27] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 192.957005][ T967] usb 2-1: Manufacturer: syz [ 192.963561][ T967] usb 2-1: SerialNumber: syz [ 192.968928][ T27] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 192.980623][ T27] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 193.121386][ T27] usb 1-1: USB disconnect, device number 10 [ 193.412455][ T967] ch9200: probe of 2-1:2.31 failed with error -22 [ 193.430265][ T967] usb 2-1: USB disconnect, device number 10 [ 194.273890][ T8755] loop1: detected capacity change from 0 to 1024 [ 194.280546][ T2182] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 194.496364][ T2182] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 194.529271][ T2182] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 194.559269][ T2182] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.574016][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.580455][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.597906][ T2182] usb 1-1: language id specifier not provided by device, defaulting to English [ 194.622311][ T2182] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 194.650250][ T2182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.668949][ T2182] usb 1-1: Manufacturer: ‰ [ 194.678717][ T2182] usb 1-1: SerialNumber: syz [ 194.696165][ T2182] usb 1-1: config 0 descriptor?? [ 194.718827][ T2182] em28xx 1-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 194.737699][ T2182] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 194.825828][ T8763] loop1: detected capacity change from 0 to 8192 [ 194.866016][ T8763] syz.1.1283: attempt to access beyond end of device [ 194.866016][ T8763] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 194.919589][ T8763] Buffer I/O error on dev loop1, logical block 57847, async page read [ 194.941658][ T8763] syz.1.1283: attempt to access beyond end of device [ 194.941658][ T8763] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 194.980299][ T8763] Buffer I/O error on dev loop1, logical block 57847, async page read [ 195.007437][ T28] audit: type=1800 audit(1752698954.107:46): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1283" name="file2" dev="loop1" ino=1048622 res=0 errno=0 [ 195.032923][ T2182] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 195.049217][ T2182] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 195.065953][ T8763] syz.1.1283 (8763) used greatest stack depth: 20080 bytes left [ 195.076948][ T2182] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 195.097129][ T2182] em28xx 1-1:0.0: No AC97 audio processor [ 195.145571][ T2182] usb 1-1: USB disconnect, device number 11 [ 195.183576][ T2182] em28xx 1-1:0.0: Disconnecting em28xx [ 195.209508][ T2182] em28xx 1-1:0.0: Freeing device [ 195.303096][ T8758] loop3: detected capacity change from 0 to 32768 [ 195.350877][ T8758] (syz.3.1282,8758,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.385868][ T8758] (syz.3.1282,8758,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.428678][ T8758] JBD2: Ignoring recovery information on journal [ 195.551957][ T8767] loop2: detected capacity change from 0 to 32768 [ 195.553963][ T8758] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 195.827578][ T8775] loop1: detected capacity change from 0 to 1024 [ 195.904995][ T8775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.925001][ T5795] ocfs2: Unmounting device (7,3) on (node local) [ 195.931750][ T5853] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 195.986921][ T8775] EXT4-fs error (device loop1): __ext4_remount:6741: comm syz.1.1289: Abort forced by user [ 196.062791][ T8775] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 196.122894][ T5853] usb 1-1: config 1 interface 0 altsetting 89 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 196.144190][ T5853] usb 1-1: config 1 interface 0 altsetting 89 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 196.165238][ T5853] usb 1-1: config 1 interface 0 has no altsetting 0 [ 196.177199][ T5853] usb 1-1: string descriptor 0 read error: -22 [ 196.184171][ T5853] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.40 [ 196.209113][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.230792][ T8773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.246259][ T8773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.516056][ T5853] usbhid 1-1:1.0: can't add hid device: -71 [ 196.523103][ T5853] usbhid: probe of 1-1:1.0 failed with error -71 [ 196.541079][ T5853] usb 1-1: USB disconnect, device number 12 [ 196.755603][ T8788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1295'. [ 196.824482][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.145535][ T8798] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1300'. [ 197.713072][ T28] audit: type=1326 audit(1752698956.817:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x50000 [ 197.799957][ T28] audit: type=1326 audit(1752698956.837:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x50000 [ 197.832009][ T8826] loop1: detected capacity change from 0 to 164 [ 197.838474][ T28] audit: type=1326 audit(1752698956.837:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x50000 [ 197.892977][ T28] audit: type=1326 audit(1752698956.837:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x50000 [ 197.934893][ T28] audit: type=1326 audit(1752698956.837:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x50000 [ 197.960200][ T28] audit: type=1326 audit(1752698956.837:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x50000 [ 197.982635][ T28] audit: type=1326 audit(1752698956.837:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x50000 [ 198.007255][ T28] audit: type=1326 audit(1752698956.837:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x50000 [ 198.058779][ T28] audit: type=1326 audit(1752698956.837:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x50000 [ 198.106156][ T28] audit: type=1326 audit(1752698956.837:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.2.1311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3658e929 code=0x50000 [ 198.199167][ T2182] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 198.399307][ T2182] usb 2-1: Using ep0 maxpacket: 8 [ 198.408579][ T2182] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.414403][ T8839] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1327'. [ 198.426757][ T2182] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 198.440962][ T2182] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 198.459426][ T2182] usb 2-1: config 17 has no interface number 0 [ 198.469198][ T2182] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 12592, setting to 64 [ 198.489146][ T2182] usb 2-1: config 17 interface 8 has no altsetting 0 [ 198.499494][ T2182] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 198.509668][ T2182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.525184][ T2182] usb 2-1: Product: syz [ 198.549160][ T2182] usb 2-1: Manufacturer: syz [ 198.559207][ T2182] usb 2-1: SerialNumber: syz [ 198.612724][ T8842] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1321'. [ 198.630387][ T8842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1321'. [ 198.651517][ T8842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1321'. [ 198.663625][ T8842] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1321'. [ 198.827157][ T2182] usb 2-1: selecting invalid altsetting 0 [ 198.836970][ T8847] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1331'. [ 198.874652][ T8847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1331'. [ 198.899927][ T8847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1331'. [ 198.921624][ T2182] usb 2-1: USB disconnect, device number 11 [ 199.429839][ T8860] loop0: detected capacity change from 0 to 1024 [ 199.544669][ T8860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.588086][ T8867] loop3: detected capacity change from 0 to 1024 [ 199.714483][ T8860] EXT4-fs error (device loop0): __ext4_remount:6741: comm syz.0.1329: Abort forced by user [ 199.750071][ T8860] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 199.818085][ T1127] hfsplus: b-tree write err: -5, ino 4 [ 199.881068][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.356795][ T8885] C: renamed from team_slave_0 (while UP) [ 200.580676][ T8885] netlink: 'syz.3.1340': attribute type 3 has an invalid length. [ 200.596793][ T8885] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 200.653068][ T8887] loop0: detected capacity change from 0 to 2048 [ 200.685915][ T8887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.936423][ T8891] loop3: detected capacity change from 0 to 1024 [ 201.291674][ T8906] netlink: 'syz.0.1350': attribute type 13 has an invalid length. [ 201.959220][ T8932] netlink: 'syz.1.1364': attribute type 13 has an invalid length. [ 202.224643][ T8943] __nla_validate_parse: 3 callbacks suppressed [ 202.224663][ T8943] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1377'. [ 202.287347][ T8943] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 202.573500][ T8958] loop3: detected capacity change from 0 to 256 [ 202.617409][ T8958] exfat: Deprecated parameter 'namecase' [ 202.678051][ T8958] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xeb999a00, utbl_chksum : 0xe619d30d) [ 202.703602][ T8961] loop2: detected capacity change from 0 to 256 [ 202.723631][ T8962] loop1: detected capacity change from 0 to 64 [ 202.736923][ T8961] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 203.111373][ T8970] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1383'. [ 203.176901][ T8970] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 203.346254][ T8978] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1386'. [ 203.588792][ T8989] loop3: detected capacity change from 0 to 2048 [ 203.635285][ T8989] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.674192][ T8991] loop2: detected capacity change from 0 to 1024 [ 203.867703][ T1100] hfsplus: b-tree write err: -5, ino 4 [ 204.414284][ T9013] loop1: detected capacity change from 0 to 256 [ 204.450591][ T9013] exfat: Deprecated parameter 'namecase' [ 204.513228][ T9013] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xeb999a00, utbl_chksum : 0xe619d30d) [ 204.791463][ T9023] netlink: 'syz.3.1408': attribute type 10 has an invalid length. [ 204.832664][ T8997] loop0: detected capacity change from 0 to 32768 [ 204.833976][ T9023] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1408'. [ 204.879215][ T9023] ipvlan1: entered promiscuous mode [ 204.884827][ T9023] bridge0: port 3(ipvlan1) entered blocking state [ 204.946537][ T9023] bridge0: port 3(ipvlan1) entered disabled state [ 204.987147][ T9023] ipvlan1: entered allmulticast mode [ 205.001524][ T9023] veth0_vlan: entered allmulticast mode [ 205.014420][ T9023] ipvlan1: left allmulticast mode [ 205.028593][ T9023] veth0_vlan: left allmulticast mode [ 205.160757][ T9031] loop1: detected capacity change from 0 to 256 [ 205.168338][ T9031] exfat: Deprecated parameter 'namecase' [ 205.219519][ T9031] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 206.223417][ T9040] loop3: detected capacity change from 0 to 32768 [ 206.284034][ T9062] loop2: detected capacity change from 0 to 64 [ 206.344478][ T9040] ERROR: (device loop3): dbFindCtl: Corrupt dmapctl page [ 206.344478][ T9040] [ 206.374617][ T5812] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.394245][ T9040] ERROR: (device loop3): remounting filesystem as read-only [ 206.400314][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 206.428205][ T9040] ialloc: diAlloc returned -5! [ 206.816737][ T9072] loop3: detected capacity change from 0 to 256 [ 206.913807][ T9072] FAT-fs (loop3): Directory bread(block 64) failed [ 206.939999][ T9072] FAT-fs (loop3): Directory bread(block 65) failed [ 206.959909][ T9072] FAT-fs (loop3): Directory bread(block 66) failed [ 206.966523][ T9072] FAT-fs (loop3): Directory bread(block 67) failed [ 206.999770][ T9072] FAT-fs (loop3): Directory bread(block 68) failed [ 207.023851][ T9072] FAT-fs (loop3): Directory bread(block 69) failed [ 207.051263][ T9072] FAT-fs (loop3): Directory bread(block 70) failed [ 207.067246][ T9072] FAT-fs (loop3): Directory bread(block 71) failed [ 207.084567][ T9072] FAT-fs (loop3): Directory bread(block 72) failed [ 207.109453][ T9072] FAT-fs (loop3): Directory bread(block 73) failed [ 208.045274][ T9114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1454'. [ 208.081570][ T9116] loop0: detected capacity change from 0 to 256 [ 208.091789][ T9116] exfat: Deprecated parameter 'namecase' [ 208.150545][ T9116] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 208.828776][ T9142] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 208.873410][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 208.880762][ T9145] loop0: detected capacity change from 0 to 1024 [ 209.005190][ T9145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.062700][ T9155] loop3: detected capacity change from 0 to 22 [ 209.071654][ T9153] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 209.074361][ T9157] loop1: detected capacity change from 0 to 16 [ 209.095100][ T9157] erofs: (device loop1): mounted with root inode @ nid 36. [ 209.120563][ T9155] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 209.132420][ T9155] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 209.137261][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.213070][ T9187] loop1: detected capacity change from 0 to 256 [ 210.296877][ T9187] FAT-fs (loop1): Directory bread(block 64) failed [ 210.326804][ T9187] FAT-fs (loop1): Directory bread(block 65) failed [ 210.359251][ T9187] FAT-fs (loop1): Directory bread(block 66) failed [ 210.389185][ T9187] FAT-fs (loop1): Directory bread(block 67) failed [ 210.409676][ T9187] FAT-fs (loop1): Directory bread(block 68) failed [ 210.416279][ T9187] FAT-fs (loop1): Directory bread(block 69) failed [ 210.471022][ T9187] FAT-fs (loop1): Directory bread(block 70) failed [ 210.477636][ T9187] FAT-fs (loop1): Directory bread(block 71) failed [ 210.510269][ T9187] FAT-fs (loop1): Directory bread(block 72) failed [ 210.516872][ T9187] FAT-fs (loop1): Directory bread(block 73) failed [ 211.419443][ T9219] loop1: detected capacity change from 0 to 16 [ 211.474927][ T9219] erofs: (device loop1): mounted with root inode @ nid 36. [ 211.751655][ T9197] loop0: detected capacity change from 0 to 32768 [ 211.812849][ T9197] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.003297][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 212.009636][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 212.015694][ T5799] Bluetooth: hci0: command 0x080f tx timeout [ 212.023004][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 212.031547][ T9215] loop2: detected capacity change from 0 to 32768 [ 212.047945][ T9215] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1500 (9215) [ 212.070971][ T9215] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.108292][ T9215] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 212.118313][ T9215] BTRFS info (device loop2): force clearing of disk cache [ 212.135119][ T9215] BTRFS info (device loop2): enabling auto defrag [ 212.164098][ T9215] BTRFS info (device loop2): max_inline at 0 [ 212.172439][ T9215] BTRFS info (device loop2): enabling disk space caching [ 212.180228][ T9215] BTRFS info (device loop2): disk space caching is enabled [ 212.229696][ T9197] XFS (loop0): Ending clean mount [ 212.264683][ T9245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1508'. [ 212.379513][ T9215] BTRFS info (device loop2): enabling ssd optimizations [ 212.422907][ T5792] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.444003][ T9215] BTRFS info (device loop2): rebuilding free space tree [ 212.510760][ T9215] BTRFS info (device loop2): disabling free space tree [ 212.517837][ T9215] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.581127][ T9215] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.816627][ T9215] overlayfs: missing 'lowerdir' [ 213.006558][ T5796] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.439622][ T2182] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 213.522961][ T9282] loop1: detected capacity change from 0 to 4096 [ 213.626309][ T9282] ntfs: volume version 3.1. [ 213.659914][ T2182] usb 4-1: Using ep0 maxpacket: 32 [ 213.688193][ T2182] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 213.718290][ T2182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.744669][ T2182] usb 4-1: config 0 descriptor?? [ 213.792769][ T2182] gspca_main: sq930x-2.14.0 probing 041e:403c [ 214.049775][ T9292] netlink: 'syz.0.1526': attribute type 10 has an invalid length. [ 214.132175][ T9292] team0: Cannot enslave team device to itself [ 214.236095][ T2182] gspca_sq930x: ucbus_write failed -71 [ 214.245579][ T2182] sq930x: probe of 4-1:0.0 failed with error -71 [ 214.273112][ T2182] usb 4-1: USB disconnect, device number 11 [ 214.291438][ T9296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1528'. [ 215.786249][ T9351] netlink: zone id is out of range [ 215.796049][ T9351] netlink: get zone limit has 8 unknown bytes [ 217.752501][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1594'. [ 217.933064][ T9439] JFS: discard option not supported on device [ 217.943882][ T9439] Mount JFS Failure: -22 [ 217.953248][ T28] kauditd_printk_skb: 3424 callbacks suppressed [ 217.953264][ T28] audit: type=1326 audit(1752698977.057:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb943b8e929 code=0x7ffc0000 [ 217.953936][ T9439] jfs_mount failed w/return code = -22 [ 217.963319][ T28] audit: type=1326 audit(1752698977.057:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb943b8e929 code=0x7ffc0000 [ 218.099165][ T28] audit: type=1326 audit(1752698977.097:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fb943b8e929 code=0x7ffc0000 [ 218.186627][ T28] audit: type=1326 audit(1752698977.097:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb943b8e929 code=0x7ffc0000 [ 218.269199][ T28] audit: type=1326 audit(1752698977.097:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9437 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb943b8e929 code=0x7ffc0000 [ 218.377916][ T9447] loop1: detected capacity change from 0 to 4096 [ 218.411872][ T9447] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 218.547240][ T9447] ntfs3: loop1: failed to convert "c46c" to cp855 [ 219.031896][ T9471] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 219.547371][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'. [ 219.730975][ T9498] loop0: detected capacity change from 0 to 8 [ 219.843026][ T9498] SQUASHFS error: Failed to read block 0x738: -5 [ 219.866439][ T9498] SQUASHFS error: Unable to read metadata cache entry [736] [ 219.939475][ T9506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1630'. [ 220.209106][ T2182] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 220.335655][ T9519] loop3: detected capacity change from 0 to 16 [ 220.416700][ T2182] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 220.426739][ T9519] erofs: (device loop3): mounted with root inode @ nid 36. [ 220.444534][ T2182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.457069][ T2182] usb 3-1: Product: syz [ 220.462473][ T2182] usb 3-1: Manufacturer: syz [ 220.467266][ T2182] usb 3-1: SerialNumber: syz [ 220.469338][ T9521] loop0: detected capacity change from 0 to 4096 [ 220.480756][ T2182] usb 3-1: config 0 descriptor?? [ 220.488759][ T9519] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 220.510698][ T9521] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 220.665259][ T9521] ntfs3: loop0: failed to convert "c46c" to cp855 [ 220.762717][ T2182] int51x1: probe of 3-1:0.0 failed with error -22 [ 221.025935][ T2182] usb 3-1: USB disconnect, device number 7 [ 221.208506][ T9539] loop1: detected capacity change from 0 to 64 [ 221.346987][ T9541] netlink: 'syz.0.1650': attribute type 58 has an invalid length. [ 221.365261][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 221.481188][ T9543] loop3: detected capacity change from 0 to 2048 [ 221.569380][ T9548] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.606675][ T9547] loop0: detected capacity change from 0 to 2048 [ 221.725736][ T9547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.741562][ T9547] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.827839][ T9547] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.1652: reserved inode found cleared - inode=1 [ 221.937382][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.289254][ T9563] netlink: 'syz.0.1658': attribute type 13 has an invalid length. [ 222.366592][ T9545] loop1: detected capacity change from 0 to 32768 [ 222.420451][ T9545] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 222.453744][ T9545] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 222.508242][ T9545] BTRFS info (device loop1): force zlib compression, level 3 [ 222.540253][ T9545] BTRFS info (device loop1): force clearing of disk cache [ 222.566408][ T9545] BTRFS info (device loop1): setting nodatasum [ 222.595646][ T9545] BTRFS info (device loop1): use zlib compression, level 3 [ 222.624381][ T9545] BTRFS info (device loop1): allowing degraded mounts [ 222.643443][ T9545] BTRFS info (device loop1): enabling disk space caching [ 222.689560][ T9545] BTRFS info (device loop1): disk space caching is enabled [ 222.718623][ T9574] loop3: detected capacity change from 0 to 2048 [ 222.816057][ T9589] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.845725][ T9545] BTRFS info (device loop1): enabling ssd optimizations [ 222.859095][ T9545] BTRFS info (device loop1): auto enabling async discard [ 222.881141][ T9545] BTRFS info (device loop1): rebuilding free space tree [ 222.956071][ T9574] syz.3.1662: attempt to access beyond end of device [ 222.956071][ T9574] loop3: rw=0, sector=5629499534213190, nr_sectors = 2 limit=2048 [ 222.995062][ T9574] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 223.004899][ T9545] BTRFS info (device loop1): disabling free space tree [ 223.014752][ T9545] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.049138][ T9545] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.224451][ T9589] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 223.266906][ T9589] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 223.300921][ T9545] BTRFS info (device loop1): balance: start -f -susage=0..511,devid=0,limit=68719463855 [ 223.331249][ T9589] Remounting filesystem read-only [ 223.336458][ T58] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 223.349613][ T9545] BTRFS info (device loop1): balance: ended with status: 0 [ 223.359863][ T58] NILFS (loop3): discard dirty block: blocknr=2814749767106595, size=1024 [ 223.368437][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.388013][ T58] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 223.414842][ T58] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 223.439270][ T58] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 223.446034][ T58] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 223.488265][ T58] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 223.529254][ T58] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 223.536629][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.562985][ T58] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 223.579112][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.582120][ T5793] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 223.588156][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.623978][ T58] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 223.646580][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.669183][ T58] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 223.675929][ T58] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 223.730003][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.739379][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.748291][ T58] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.778239][ T5795] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 223.787895][ T5795] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 223.813428][ T28] audit: type=1326 audit(1752698982.917:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270cb8e929 code=0x7ffc0000 [ 223.870812][ T5795] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 223.878173][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.909731][ T28] audit: type=1326 audit(1752698982.927:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270cb8e929 code=0x7ffc0000 [ 223.939554][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.958724][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.997399][ T5795] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 224.014709][ T28] audit: type=1326 audit(1752698982.937:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f270cb8e929 code=0x7ffc0000 [ 224.026095][ T5795] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 224.089556][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.098489][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.182394][ T28] audit: type=1326 audit(1752698983.007:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270cb8e929 code=0x7ffc0000 [ 224.225166][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.271852][ T28] audit: type=1326 audit(1752698983.007:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270cb8e929 code=0x7ffc0000 [ 224.353542][ T9621] loop1: detected capacity change from 0 to 256 [ 224.389336][ T28] audit: type=1326 audit(1752698983.017:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9611 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f270cbc11e5 code=0x7ffc0000 [ 224.469063][ T28] audit: type=1326 audit(1752698983.177:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9611 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f270cb8e929 code=0x7ffc0000 [ 224.568436][ T9621] FAT-fs (loop1): Directory bread(block 64) failed [ 224.585850][ T9621] FAT-fs (loop1): Directory bread(block 65) failed [ 224.609247][ T9621] FAT-fs (loop1): Directory bread(block 66) failed [ 224.629100][ T9621] FAT-fs (loop1): Directory bread(block 67) failed [ 224.635803][ T9621] FAT-fs (loop1): Directory bread(block 68) failed [ 224.656579][ T9621] FAT-fs (loop1): Directory bread(block 69) failed [ 224.698370][ T9629] loop0: detected capacity change from 0 to 256 [ 224.699664][ T9621] FAT-fs (loop1): Directory bread(block 70) failed [ 224.731364][ T9621] FAT-fs (loop1): Directory bread(block 71) failed [ 224.745674][ T9621] FAT-fs (loop1): Directory bread(block 72) failed [ 224.752827][ T9621] FAT-fs (loop1): Directory bread(block 73) failed [ 224.859525][ T9629] FAT-fs (loop0): Directory bread(block 64) failed [ 224.876596][ T9629] FAT-fs (loop0): Directory bread(block 65) failed [ 224.890489][ T9629] FAT-fs (loop0): Directory bread(block 66) failed [ 224.928507][ T9629] FAT-fs (loop0): Directory bread(block 67) failed [ 224.959236][ T9629] FAT-fs (loop0): Directory bread(block 68) failed [ 224.965838][ T9629] FAT-fs (loop0): Directory bread(block 69) failed [ 225.019417][ T9629] FAT-fs (loop0): Directory bread(block 70) failed [ 225.027291][ T9629] FAT-fs (loop0): Directory bread(block 71) failed [ 225.077367][ T9629] FAT-fs (loop0): Directory bread(block 72) failed [ 225.098897][ T9629] FAT-fs (loop0): Directory bread(block 73) failed [ 225.110074][ T9639] unsupported nlmsg_type 40 [ 225.452967][ T9645] loop2: detected capacity change from 0 to 64 [ 225.887764][ T9651] loop2: detected capacity change from 0 to 4096 [ 226.005684][ T9651] ntfs: volume version 3.1. [ 226.029474][ T9657] IPv6: Can't replace route, no match found [ 226.236860][ T9661] loop0: detected capacity change from 0 to 256 [ 226.389268][ T9661] FAT-fs (loop0): Directory bread(block 64) failed [ 226.410751][ T9661] FAT-fs (loop0): Directory bread(block 65) failed [ 226.431163][ T9661] FAT-fs (loop0): Directory bread(block 66) failed [ 226.448080][ T9661] FAT-fs (loop0): Directory bread(block 67) failed [ 226.474519][ T9661] FAT-fs (loop0): Directory bread(block 68) failed [ 226.504142][ T9661] FAT-fs (loop0): Directory bread(block 69) failed [ 226.525086][ T9661] FAT-fs (loop0): Directory bread(block 70) failed [ 226.545632][ T9661] FAT-fs (loop0): Directory bread(block 71) failed [ 226.559655][ T9665] loop2: detected capacity change from 0 to 2048 [ 226.576326][ T9661] FAT-fs (loop0): Directory bread(block 72) failed [ 226.596039][ T9661] FAT-fs (loop0): Directory bread(block 73) failed [ 226.748629][ T9668] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.329660][ T9678] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 227.411495][ T9678] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 227.672946][ T9692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1712'. [ 227.719378][ T9692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1712'. [ 227.728433][ T9692] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1712'. [ 228.934361][ T9740] loop2: detected capacity change from 0 to 256 [ 228.956681][ T9740] exfat: Deprecated parameter 'namecase' [ 228.978034][ T9740] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 229.126350][ T9744] netlink: 'syz.0.1736': attribute type 10 has an invalid length. [ 229.134717][ T9744] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1736'. [ 229.149346][ T9744] ipvlan1: entered promiscuous mode [ 229.155120][ T9744] bridge0: port 3(ipvlan1) entered blocking state [ 229.179230][ T9744] bridge0: port 3(ipvlan1) entered disabled state [ 229.186092][ T9744] ipvlan1: entered allmulticast mode [ 229.202305][ T9744] veth0_vlan: entered allmulticast mode [ 229.217557][ T9744] ipvlan1: left allmulticast mode [ 229.223001][ T9744] veth0_vlan: left allmulticast mode [ 229.281739][ T9728] loop1: detected capacity change from 0 to 32768 [ 229.351151][ T9728] ERROR: (device loop1): dbFindCtl: Corrupt dmapctl page [ 229.351151][ T9728] [ 229.378706][ T9728] ERROR: (device loop1): remounting filesystem as read-only [ 229.396499][ T9728] ialloc: diAlloc returned -5! [ 229.570984][ T9751] loop2: detected capacity change from 0 to 2048 [ 229.620409][ T9757] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.714599][ T9751] syz.2.1737: attempt to access beyond end of device [ 229.714599][ T9751] loop2: rw=0, sector=5629499534213190, nr_sectors = 2 limit=2048 [ 229.760589][ T9751] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=0) [ 229.801409][ T9755] loop0: detected capacity change from 0 to 4096 [ 229.816579][ T9760] loop3: detected capacity change from 0 to 512 [ 229.859176][ T9755] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 229.937899][ T9757] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 229.981759][ T9760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.000807][ T9757] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 230.055237][ T9760] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.084748][ T9757] Remounting filesystem read-only [ 230.094510][ T9755] ntfs3: loop0: failed to convert "c46c" to cp737 [ 230.104732][ T1100] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 230.130371][ T9760] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.1743: invalid size [ 230.142281][ T1100] NILFS (loop2): discard dirty block: blocknr=2814749767106595, size=1024 [ 230.169201][ T1100] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.184616][ T9760] EXT4-fs (loop3): Remounting filesystem read-only [ 230.203934][ T1100] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 230.237434][ T1100] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 230.280713][ T1100] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 230.299209][ T1100] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 230.306570][ T1100] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 230.334134][ T1100] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 230.346200][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.358405][ T1100] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.382307][ T1100] NILFS (loop2): discard dirty page: offset=229376, ino=3 [ 230.390115][ T1100] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.406026][ T58] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 230.425806][ T58] Quota error (device loop3): write_blk: dquota write failed [ 230.449958][ T1100] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.459925][ T58] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 230.460385][ T58] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 230.481299][ T1100] NILFS (loop2): discard dirty block: blocknr=50, size=1024 [ 230.488654][ T1100] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.497592][ T58] Quota error (device loop3): write_blk: dquota write failed [ 230.497616][ T58] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 230.576887][ T1100] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 230.597316][ T1100] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 230.615359][ T1100] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.632350][ T1100] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.646690][ T1100] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.662328][ T1100] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 230.670430][ T1100] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 230.693913][ T1100] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.703020][ T1100] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.726927][ T1100] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.744106][ T28] audit: type=1326 audit(1752698989.847:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb943b8e929 code=0x7ffc0000 [ 230.789372][ T5796] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 230.794043][ T28] audit: type=1326 audit(1752698989.877:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb943b8e929 code=0x7ffc0000 [ 230.808385][ T5796] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 230.879284][ T5796] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 230.893791][ T5796] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.903184][ T28] audit: type=1326 audit(1752698989.897:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb943b8e929 code=0x7ffc0000 [ 230.936785][ T5796] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.959816][ T5796] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.977100][ T28] audit: type=1326 audit(1752698989.897:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9776 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb943b8e929 code=0x7ffc0000 [ 231.123045][ T9788] loop3: detected capacity change from 0 to 16 [ 231.159501][ T9788] erofs: (device loop3): mounted with root inode @ nid 36. [ 231.327988][ T9793] loop1: detected capacity change from 0 to 1024 [ 231.407686][ T9793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.451210][ T9793] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.522725][ T9793] EXT4-fs error (device loop1): ext4_free_blocks:6681: comm syz.1.1759: Freeing blocks not in datazone - block = 0, count = 16 [ 231.584209][ T9793] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 231.601727][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 231.618769][ T9805] loop3: detected capacity change from 0 to 1024 [ 231.661402][ T9805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.663704][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.789146][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 231.794246][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.796653][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 231.818415][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 231.828566][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.837206][ T9] usb 3-1: Product: syz [ 231.842548][ T9] usb 3-1: Manufacturer: syz [ 231.847501][ T9] usb 3-1: SerialNumber: syz [ 231.849278][ T967] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 231.856590][ T9] usb 3-1: config 0 descriptor?? [ 231.885929][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 231.900576][ T9] usb 3-1: Detected FT232B [ 232.049687][ T967] usb 1-1: Using ep0 maxpacket: 32 [ 232.060594][ T967] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.076169][ T9812] loop3: detected capacity change from 0 to 512 [ 232.082842][ T967] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.090771][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 232.094907][ T9812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.108634][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 232.127787][ T967] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 232.131080][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 232.153611][ T967] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 232.162927][ T967] usb 1-1: Product: syz [ 232.172455][ T967] usb 1-1: Manufacturer: syz [ 232.177515][ T9] usb 3-1: USB disconnect, device number 8 [ 232.191984][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 232.226186][ T9812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.235525][ T9] ftdi_sio 3-1:0.0: device disconnected [ 232.244304][ T967] hub 1-1:4.0: USB hub found [ 232.249958][ T9812] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.309888][ T9812] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 232.322666][ T9812] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 232.332950][ T9812] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1766: Failed to acquire dquot type 1 [ 232.423500][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.462259][ T967] hub 1-1:4.0: 1 port detected [ 232.552556][ T9816] Cannot find del_set index 0 as target [ 232.676956][ T967] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 232.694268][ T967] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 232.755102][ T967] usb 1-1: USB disconnect, device number 13 [ 232.951278][ T9829] netlink: 77 bytes leftover after parsing attributes in process `syz.2.1772'. [ 233.854898][ T9858] loop2: detected capacity change from 0 to 1024 [ 233.943151][ T9858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.980302][ T9858] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.113433][ T9844] loop1: detected capacity change from 0 to 32768 [ 234.177519][ T9867] loop0: detected capacity change from 0 to 1024 [ 234.178504][ T9858] EXT4-fs error (device loop2): ext4_free_blocks:6681: comm syz.2.1786: Freeing blocks not in datazone - block = 0, count = 16 [ 234.310831][ T9858] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 234.424974][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'. [ 234.465728][ T1127] hfsplus: b-tree write err: -5, ino 4 [ 234.531393][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.736448][ T9879] netlink: 'syz.3.1797': attribute type 7 has an invalid length. [ 234.799366][ T9881] tmpfs: Bad value for 'mpol' [ 234.949546][ T9885] unsupported nla_type 36 [ 235.240176][ T9895] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1804'. [ 235.632362][ T9911] loop1: detected capacity change from 0 to 256 [ 235.667881][ T9911] exfat: Deprecated parameter 'namecase' [ 235.701635][ T9911] exfat: Deprecated parameter 'namecase' [ 235.761681][ T9911] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 235.802408][ T9915] netlink: 'syz.2.1814': attribute type 1 has an invalid length. [ 235.825991][ T9915] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1814'. [ 235.852739][ T9911] UBIFS error (pid: 9911): cannot open "./file0", error -22 [ 237.043689][ T9927] loop2: detected capacity change from 0 to 32768 [ 237.087013][ T9927] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1819 (9927) [ 237.149399][ T9927] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 237.196122][ T9927] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 237.229607][ T9927] BTRFS info (device loop2): force zlib compression, level 3 [ 237.237071][ T9927] BTRFS info (device loop2): force clearing of disk cache [ 237.267377][ T9927] BTRFS info (device loop2): setting nodatasum [ 237.299220][ T9927] BTRFS info (device loop2): use zlib compression, level 3 [ 237.319891][ T9927] BTRFS info (device loop2): allowing degraded mounts [ 237.337059][ T9927] BTRFS info (device loop2): enabling disk space caching [ 237.347164][ T9927] BTRFS info (device loop2): disk space caching is enabled [ 237.492041][ T9961] loop0: detected capacity change from 0 to 4096 [ 237.513638][ T9961] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 237.559859][ T9927] BTRFS info (device loop2): enabling ssd optimizations [ 237.566885][ T9927] BTRFS info (device loop2): auto enabling async discard [ 237.613509][ T9927] BTRFS info (device loop2): rebuilding free space tree [ 237.635844][ T9961] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 237.661801][ T9961] ntfs3: loop0: Failed to load $Extend (-22). [ 237.683761][ T9961] ntfs3: loop0: Failed to initialize $Extend. [ 237.693700][ T9927] BTRFS info (device loop2): disabling free space tree [ 237.709541][ T9927] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.738624][ T9927] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.801910][ T9953] loop3: detected capacity change from 0 to 32768 [ 237.887592][ T9979] loop0: detected capacity change from 0 to 64 [ 238.037340][ T9927] BTRFS info (device loop2): balance: start -f -susage=0..511,devid=0,limit=68719463855 [ 238.098723][ T9927] BTRFS info (device loop2): balance: ended with status: 0 [ 238.115900][ T9957] loop1: detected capacity change from 0 to 32768 [ 238.163284][ T9957] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1833 (9957) [ 238.263866][ T9957] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.315980][ T9957] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 238.339905][ T9957] BTRFS info (device loop1): setting nodatasum [ 238.347110][ T5796] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 238.359594][ T9957] BTRFS info (device loop1): force zlib compression, level 3 [ 238.369982][ T9957] BTRFS info (device loop1): metadata ratio 1 [ 238.381521][ T9957] BTRFS info (device loop1): enabling ssd optimizations [ 238.388530][ T9957] BTRFS info (device loop1): allowing degraded mounts [ 238.430034][ T9957] BTRFS info (device loop1): using free space tree [ 239.189560][T10014] xt_TCPMSS: Only works on TCP SYN packets [ 239.430673][ T5793] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.779928][T10029] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 239.788715][T10029] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 239.816875][T10028] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 239.829621][T10029] overlayfs: missing 'lowerdir' [ 239.861362][T10028] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 239.896036][T10028] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 240.171078][T10037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1856'. [ 240.208171][T10037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1856'. [ 240.240201][T10041] Illegal XDP return value 4294967282 on prog (id 88) dev N/A, expect packet loss! [ 240.269877][T10039] loop3: detected capacity change from 0 to 512 [ 240.326549][T10039] EXT4-fs (loop3): 1 truncate cleaned up [ 240.356647][T10039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.580766][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.175962][T10074] loop1: detected capacity change from 0 to 512 [ 241.194287][T10074] EXT4-fs (loop1): 1 truncate cleaned up [ 241.210148][T10074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.342831][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.352980][ C1] sd 0:0:1:0: [sda] tag#7504 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 241.363598][ C1] sd 0:0:1:0: [sda] tag#7504 CDB: Read(6) 08 00 9f d1 fe de [ 241.596242][T10090] tmpfs: Bad value for 'mpol' [ 241.913192][ T28] audit: type=1326 audit(1752699001.017:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10101 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476418e929 code=0x7ffc0000 [ 241.986907][ T28] audit: type=1326 audit(1752699001.047:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10101 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476418e929 code=0x7ffc0000 [ 242.053303][ T28] audit: type=1326 audit(1752699001.067:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10101 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f476418e929 code=0x7ffc0000 [ 242.125940][ T28] audit: type=1326 audit(1752699001.067:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10101 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476418e929 code=0x7ffc0000 [ 242.202971][ T28] audit: type=1326 audit(1752699001.067:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10101 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476418e929 code=0x7ffc0000 [ 242.225463][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.315308][T10117] loop3: detected capacity change from 0 to 1024 [ 242.359571][ T5781] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 242.449141][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 242.557567][ T5781] usb 2-1: Using ep0 maxpacket: 8 [ 242.588826][ T5781] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 242.617390][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.626014][ T5781] usb 2-1: Product: syz [ 242.628929][T10126] loop2: detected capacity change from 0 to 8 [ 242.636242][ T5781] usb 2-1: Manufacturer: syz [ 242.636492][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 242.644379][ T5781] usb 2-1: SerialNumber: syz [ 242.654327][ T23] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 242.662877][ T23] usb 1-1: config 6 has no interface number 0 [ 242.671136][ T23] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 242.684065][ T5781] usb 2-1: config 0 descriptor?? [ 242.701196][ T5781] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 242.711830][ T23] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.731506][T10126] SQUASHFS error: Failed to read block 0x6e6: -5 [ 242.767656][ T23] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 242.777635][T10126] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 242.786679][T10126] SQUASHFS error: Unable to read inode 0xa7 [ 242.801011][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.819161][ T23] usb 1-1: Product: syz [ 242.823516][ T23] usb 1-1: Manufacturer: syz [ 242.828205][ T23] usb 1-1: SerialNumber: syz [ 242.858553][ T23] hso 1-1:6.2: Failed to find INT IN ep [ 242.871020][T10128] comedi comedi2: s526: I/O port conflict (0x4f0,64) [ 243.107875][ T23] usb 1-1: USB disconnect, device number 14 [ 243.155443][ T5781] radio-usb-si4713: probe of 2-1:0.0 failed with error -71 [ 243.180810][ T5781] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 243.202638][ T5781] usb 2-1: USB disconnect, device number 12 [ 243.332875][T10141] loop3: detected capacity change from 0 to 256 [ 243.569684][ T27] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 243.761843][ T27] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 243.788854][T10153] loop3: detected capacity change from 0 to 256 [ 243.795474][ T27] usb 3-1: config 1 has no interface number 1 [ 243.802289][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 243.817162][ T27] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 243.885947][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.909024][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.947667][ T27] usb 3-1: Product: syz [ 243.955168][ T27] usb 3-1: Manufacturer: syz [ 243.966295][ T27] usb 3-1: SerialNumber: syz [ 244.231964][ T27] usb 3-1: 2:1 : unsupported format bits 0x80 [ 244.315984][T10167] loop3: detected capacity change from 0 to 1024 [ 244.326397][ T27] usb 3-1: USB disconnect, device number 9 [ 244.519905][T10172] loop1: detected capacity change from 0 to 512 [ 244.543411][T10172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.561023][T10172] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 244.589572][T10172] EXT4-fs (loop1): 1 truncate cleaned up [ 244.665700][T10172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.692141][T10179] x_tables: duplicate underflow at hook 3 [ 244.777917][ T58] hfsplus: b-tree write err: -5, ino 4 [ 244.795510][T10172] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 244.862042][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.244089][T10192] loop1: detected capacity change from 0 to 512 [ 245.277222][T10192] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.329712][T10192] EXT4-fs (loop1): 1 truncate cleaned up [ 245.345665][T10192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.429309][T10192] EXT4-fs error (device loop1): ext4_find_extent:900: inode #15: comm syz.1.1931: inode has invalid extent depth: 25964 [ 245.446979][T10192] EXT4-fs (loop1): Remounting filesystem read-only [ 245.454501][T10192] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 245.532455][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.571289][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 245.761877][T10211] xt_limit: Overflow, try lower: 65536/2147483648 [ 245.798795][T10214] loop3: detected capacity change from 0 to 8 [ 245.881559][T10214] SQUASHFS error: Failed to read block 0x6e6: -5 [ 245.887974][T10214] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 245.936364][T10214] SQUASHFS error: Unable to read inode 0xa7 [ 246.501668][T10233] loop2: detected capacity change from 0 to 64 [ 246.593388][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1952'. [ 247.225835][T10258] loop2: detected capacity change from 0 to 128 [ 247.298868][T10258] FAT-fs (loop2): error, invalid access to FAT (entry 0x0005ffff) [ 247.308325][T10258] FAT-fs (loop2): Filesystem has been set read-only [ 247.398416][T10264] loop0: detected capacity change from 0 to 512 [ 247.491483][T10264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.510093][T10264] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.822526][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.563000][T10308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1981'. [ 248.789880][T10318] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 248.843777][T10318] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 249.071192][T10332] netlink: 'syz.0.1990': attribute type 2 has an invalid length. [ 249.184585][T10334] xt_TCPMSS: Only works on TCP SYN packets [ 249.299941][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'. [ 249.356567][T10342] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1997'. [ 249.517559][T10346] kernel profiling enabled (shift: 62) [ 249.549236][T10346] profiling shift: 62 too large [ 250.592988][T10350] loop1: detected capacity change from 0 to 32768 [ 250.608563][T10383] loop0: detected capacity change from 0 to 256 [ 250.678027][T10350] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 250.712182][T10383] FAT-fs (loop0): Directory bread(block 64) failed [ 250.762434][T10383] FAT-fs (loop0): Directory bread(block 65) failed [ 250.772292][T10383] FAT-fs (loop0): Directory bread(block 66) failed [ 250.818863][T10383] FAT-fs (loop0): Directory bread(block 67) failed [ 250.875264][T10383] FAT-fs (loop0): Directory bread(block 68) failed [ 250.889118][T10383] FAT-fs (loop0): Directory bread(block 69) failed [ 250.896343][T10383] FAT-fs (loop0): Directory bread(block 70) failed [ 250.903421][T10383] FAT-fs (loop0): Directory bread(block 71) failed [ 250.911354][T10383] FAT-fs (loop0): Directory bread(block 72) failed [ 250.918037][T10383] FAT-fs (loop0): Directory bread(block 73) failed [ 251.013230][T10350] XFS (loop1): Ending clean mount [ 251.060336][T10350] XFS (loop1): Quotacheck needed: Please wait. [ 251.187910][T10398] loop3: detected capacity change from 0 to 4096 [ 251.198268][T10398] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 251.230261][T10350] XFS (loop1): Quotacheck: Done. [ 251.397829][T10398] ntfs3: loop3: failed to convert "c46c" to koi8-u [ 251.498915][ T5793] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 251.581417][T10404] loop2: detected capacity change from 0 to 256 [ 252.134851][T10400] loop0: detected capacity change from 0 to 32768 [ 252.169145][ T23] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 252.191198][T10400] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 252.292213][T10400] XFS (loop0): Ending clean mount [ 252.312525][T10400] XFS (loop0): Quotacheck needed: Please wait. [ 252.375318][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.383341][T10430] netlink: 'syz.2.2033': attribute type 30 has an invalid length. [ 252.407118][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.417325][T10400] XFS (loop0): Quotacheck: Done. [ 252.429652][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 252.439645][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.454668][ T23] usb 4-1: config 0 descriptor?? [ 252.463202][ T23] xbox_remote_probe: endpoint_in message size==0? [ 252.576118][ T5792] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 252.686168][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 252.719679][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 252.748621][ T23] usb 4-1: USB disconnect, device number 12 [ 253.333650][T10443] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2038'. [ 253.369144][T10443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2038'. [ 253.395237][T10445] ip6t_srh: unknown srh match flags 4001 [ 253.409984][T10443] vlan0: entered promiscuous mode [ 253.584554][T10450] loop3: detected capacity change from 0 to 256 [ 253.642767][T10450] FAT-fs (loop3): Directory bread(block 64) failed [ 253.660354][T10450] FAT-fs (loop3): Directory bread(block 65) failed [ 253.667083][T10450] FAT-fs (loop3): Directory bread(block 66) failed [ 253.694485][T10450] FAT-fs (loop3): Directory bread(block 67) failed [ 253.714391][T10450] FAT-fs (loop3): Directory bread(block 68) failed [ 253.730639][T10450] FAT-fs (loop3): Directory bread(block 69) failed [ 253.737407][T10450] FAT-fs (loop3): Directory bread(block 70) failed [ 253.764484][T10450] FAT-fs (loop3): Directory bread(block 71) failed [ 253.782862][T10450] FAT-fs (loop3): Directory bread(block 72) failed [ 253.809120][T10450] FAT-fs (loop3): Directory bread(block 73) failed [ 253.874881][T10455] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 253.899197][ T5846] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 254.101586][ T5846] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 254.134170][ T5846] usb 1-1: config 1 has no interface number 1 [ 254.159393][ T5846] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 254.218655][ T5846] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 254.254595][ T5846] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.279885][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.287946][ T5846] usb 1-1: Product: syz [ 254.308556][ T5846] usb 1-1: Manufacturer: syz [ 254.336930][ T5846] usb 1-1: SerialNumber: syz [ 254.400465][T10467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2050'. [ 254.425294][T10469] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.440177][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.448358][T10469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.583833][ T5846] usb 1-1: 2:1 : unsupported format bits 0x80 [ 254.654956][ T5846] usb 1-1: USB disconnect, device number 15 [ 254.710864][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.372829][T10461] loop2: detected capacity change from 0 to 32768 [ 255.424228][T10461] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 255.469019][T10461] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 255.644082][T10498] netlink: 'syz.3.2065': attribute type 5 has an invalid length. [ 255.689907][T10461] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 2ms [ 255.695320][T10498] ip6erspan0: entered allmulticast mode [ 255.730745][ T967] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 255.738298][ T967] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 255.854896][T10505] loop0: detected capacity change from 0 to 256 [ 255.871907][ T967] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 133ms [ 255.905349][ T967] gfs2: fsid=syz:syz.0: jid=0: Done [ 255.930899][T10461] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 256.004115][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.018771][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.074463][T10505] FAT-fs (loop0): Directory bread(block 64) failed [ 256.091462][T10505] FAT-fs (loop0): Directory bread(block 65) failed [ 256.098425][T10505] FAT-fs (loop0): Directory bread(block 66) failed [ 256.105953][T10505] FAT-fs (loop0): Directory bread(block 67) failed [ 256.113259][T10505] FAT-fs (loop0): Directory bread(block 68) failed [ 256.120240][T10505] FAT-fs (loop0): Directory bread(block 69) failed [ 256.127114][T10505] FAT-fs (loop0): Directory bread(block 70) failed [ 256.135172][T10505] FAT-fs (loop0): Directory bread(block 71) failed [ 256.142235][T10505] FAT-fs (loop0): Directory bread(block 72) failed [ 256.152522][T10505] FAT-fs (loop0): Directory bread(block 73) failed [ 256.903980][T10524] loop2: detected capacity change from 0 to 256 [ 257.027935][T10510] loop3: detected capacity change from 0 to 32768 [ 257.123633][T10510] JBD2: Ignoring recovery information on journal [ 257.232217][T10533] mmap: syz.1.2082 (10533): VmData 37466112 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 257.249547][T10536] loop2: detected capacity change from 0 to 256 [ 257.263109][T10510] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 257.337228][T10539] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.686905][T10510] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 257.776046][T10510] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 257.816832][T10510] OCFS2: File system is now read-only. [ 257.824803][T10510] (syz.3.2070,10510,0):ocfs2_search_chain:1785 ERROR: status = -30 [ 257.837623][T10510] (syz.3.2070,10510,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 257.865367][T10510] (syz.3.2070,10510,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 257.871039][T10552] binfmt_misc: register: failed to install interpreter file ./file0 [ 257.878845][T10510] (syz.3.2070,10510,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 257.914770][T10510] (syz.3.2070,10510,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 257.936438][T10510] (syz.3.2070,10510,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 257.945217][T10510] (syz.3.2070,10510,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 257.960695][T10510] (syz.3.2070,10510,0):ocfs2_symlink:1944 ERROR: status = -30 [ 257.971275][T10554] 9pnet_fd: p9_fd_create_unix (10554): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 257.974206][T10510] (syz.3.2070,10510,0):ocfs2_symlink:2068 ERROR: status = -30 [ 258.065885][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.153938][T10510] syz.3.2070 (10510) used greatest stack depth: 18704 bytes left [ 258.176434][ T5795] ocfs2: Unmounting device (7,3) on (node local) [ 258.386104][T10565] loop0: detected capacity change from 0 to 64 [ 258.469612][T10565] hfs: hfs: Invalid key length: 94 [ 258.557358][ T5792] hfs: node 4:3 still has 1 user(s)! [ 259.015551][T10581] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2104'. [ 259.034400][T10581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2104'. [ 259.050285][T10561] loop1: detected capacity change from 0 to 32768 [ 259.197215][T10561] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 259.339892][T10561] [ 259.342284][T10561] ====================================================== [ 259.349341][T10561] WARNING: possible circular locking dependency detected [ 259.356395][T10561] 6.6.98-syzkaller #0 Not tainted [ 259.361448][T10561] ------------------------------------------------------ [ 259.368491][T10561] syz.1.2094/10561 is trying to acquire lock: [ 259.372111][T10597] tmpfs: Bad value for 'mpol' [ 259.374570][T10561] ffff88805fd21538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x2fa/0x720 [ 259.388627][T10561] [ 259.388627][T10561] but task is already holding lock: [ 259.396020][T10561] ffff888054b8e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 259.405296][T10561] [ 259.405296][T10561] which lock already depends on the new lock. [ 259.405296][T10561] [ 259.415753][T10561] [ 259.415753][T10561] the existing dependency chain (in reverse order) is: [ 259.424794][T10561] [ 259.424794][T10561] -> #6 (jbd2_handle){++++}-{0:0}: [ 259.432150][T10561] start_this_handle+0x1e9d/0x20c0 [ 259.437834][T10561] jbd2__journal_start+0x2bb/0x5b0 [ 259.443510][T10561] jbd2_journal_start+0x2a/0x40 [ 259.448926][T10561] ocfs2_start_trans+0x376/0x6c0 [ 259.454431][T10561] ocfs2_modify_bh+0xe9/0x470 [ 259.459677][T10561] ocfs2_local_read_info+0x13fd/0x1770 [ 259.465716][T10561] dquot_load_quota_sb+0x757/0xb80 [ 259.471384][T10561] dquot_load_quota_inode+0x2dc/0x5d0 [ 259.477311][T10561] ocfs2_enable_quotas+0x1c7/0x440 [ 259.482985][T10561] ocfs2_fill_super+0x3f6d/0x4d90 [ 259.488572][T10561] mount_bdev+0x22b/0x2d0 [ 259.493466][T10561] legacy_get_tree+0xea/0x180 [ 259.498717][T10561] vfs_get_tree+0x8c/0x280 [ 259.503705][T10561] do_new_mount+0x24b/0xa40 [ 259.508804][T10561] __se_sys_mount+0x2da/0x3c0 [ 259.514044][T10561] do_syscall_64+0x55/0xb0 [ 259.519022][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.525472][T10561] [ 259.525472][T10561] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 259.534033][T10561] down_read+0x46/0x2e0 [ 259.538745][T10561] ocfs2_start_trans+0x36a/0x6c0 [ 259.544246][T10561] ocfs2_modify_bh+0xe9/0x470 [ 259.549486][T10561] ocfs2_local_read_info+0x13fd/0x1770 [ 259.555501][T10561] dquot_load_quota_sb+0x757/0xb80 [ 259.561161][T10561] dquot_load_quota_inode+0x2dc/0x5d0 [ 259.567087][T10561] ocfs2_enable_quotas+0x1c7/0x440 [ 259.572753][T10561] ocfs2_fill_super+0x3f6d/0x4d90 [ 259.578334][T10561] mount_bdev+0x22b/0x2d0 [ 259.583212][T10561] legacy_get_tree+0xea/0x180 [ 259.588441][T10561] vfs_get_tree+0x8c/0x280 [ 259.593406][T10561] do_new_mount+0x24b/0xa40 [ 259.598457][T10561] __se_sys_mount+0x2da/0x3c0 [ 259.603694][T10561] do_syscall_64+0x55/0xb0 [ 259.608673][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.615127][T10561] [ 259.615127][T10561] -> #4 (sb_internal#3){.+.+}-{0:0}: [ 259.622664][T10561] ocfs2_start_trans+0x26b/0x6c0 [ 259.628185][T10561] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 259.634479][T10561] ocfs2_dismount_volume+0x1e2/0x890 [ 259.640350][T10561] generic_shutdown_super+0x134/0x2b0 [ 259.646285][T10561] kill_block_super+0x44/0x90 [ 259.651525][T10561] deactivate_locked_super+0x97/0x100 [ 259.657458][T10561] cleanup_mnt+0x429/0x4c0 [ 259.662435][T10561] task_work_run+0x1ce/0x250 [ 259.667586][T10561] exit_to_user_mode_loop+0xe6/0x110 [ 259.673428][T10561] exit_to_user_mode_prepare+0xb1/0x140 [ 259.679538][T10561] syscall_exit_to_user_mode+0x1a/0x50 [ 259.685553][T10561] do_syscall_64+0x61/0xb0 [ 259.690543][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.696997][T10561] [ 259.696997][T10561] -> #3 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 259.707577][T10561] down_write+0x97/0x1f0 [ 259.712372][T10561] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 259.718905][T10561] ocfs2_reserve_clusters_with_limit+0x2fc/0xba0 [ 259.725789][T10561] ocfs2_reserve_suballoc_bits+0x6eb/0x4360 [ 259.732235][T10561] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 259.739111][T10561] ocfs2_extend_dir+0xc60/0x4760 [ 259.744603][T10561] ocfs2_prepare_dir_for_insert+0x2fc7/0x5480 [ 259.751231][T10561] ocfs2_symlink+0xb38/0x2550 [ 259.756461][T10561] vfs_symlink+0x138/0x2b0 [ 259.761437][T10561] do_symlinkat+0x1b2/0x3f0 [ 259.766490][T10561] __x64_sys_symlink+0x7e/0x90 [ 259.771825][T10561] do_syscall_64+0x55/0xb0 [ 259.776693][T10595] loop3: detected capacity change from 0 to 32768 [ 259.776778][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.789640][T10561] [ 259.789640][T10561] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 259.800211][T10561] down_write+0x97/0x1f0 [ 259.805015][T10561] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 259.811463][T10561] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 259.818354][T10561] ocfs2_extend_dir+0xc60/0x4760 [ 259.823858][T10561] ocfs2_prepare_dir_for_insert+0x2fc7/0x5480 [ 259.830486][T10561] ocfs2_symlink+0xb38/0x2550 [ 259.835731][T10561] vfs_symlink+0x138/0x2b0 [ 259.840710][T10561] do_symlinkat+0x1b2/0x3f0 [ 259.845774][T10561] __x64_sys_symlink+0x7e/0x90 [ 259.851098][T10561] do_syscall_64+0x55/0xb0 [ 259.856079][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.862527][T10561] [ 259.862527][T10561] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 259.871343][T10561] down_write+0x97/0x1f0 [ 259.876144][T10561] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 259.882695][T10561] ocfs2_xattr_set+0x596/0x11f0 [ 259.888104][T10561] ocfs2_set_acl+0x4e1/0x590 [ 259.893250][T10561] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 259.898752][T10561] vfs_set_acl+0x803/0xa60 [ 259.903729][T10561] path_setxattr+0x39f/0x550 [ 259.908879][T10561] __x64_sys_setxattr+0xbb/0xd0 [ 259.914296][T10561] do_syscall_64+0x55/0xb0 [ 259.919272][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.925739][T10561] [ 259.925739][T10561] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 259.933608][T10561] __lock_acquire+0x2ddb/0x7c80 [ 259.939021][T10561] lock_acquire+0x197/0x410 [ 259.944078][T10561] down_read+0x46/0x2e0 [ 259.948438][T10595] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 259.948768][T10561] ocfs2_init_acl+0x2fa/0x720 [ 259.957499][T10595] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 259.961675][T10561] ocfs2_mknod+0x12e5/0x20f0 [ 259.961705][T10561] ocfs2_create+0x196/0x410 [ 259.961729][T10561] path_openat+0x1277/0x3190 [ 259.961750][T10561] do_filp_open+0x1c5/0x3d0 [ 259.961771][T10561] do_sys_openat2+0x12c/0x1c0 [ 259.961799][T10561] __x64_sys_openat+0x139/0x160 [ 259.961827][T10561] do_syscall_64+0x55/0xb0 [ 259.961853][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.961876][T10561] [ 259.961876][T10561] other info that might help us debug this: [ 259.961876][T10561] [ 259.961884][T10561] Chain exists of: [ 259.961884][T10561] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 259.961884][T10561] [ 259.961934][T10561] Possible unsafe locking scenario: [ 259.961934][T10561] [ 259.961940][T10561] CPU0 CPU1 [ 259.961945][T10561] ---- ---- [ 259.961951][T10561] rlock(jbd2_handle); [ 259.961964][T10561] lock(&journal->j_trans_barrier); [ 259.961980][T10561] lock(jbd2_handle); [ 259.961994][T10561] rlock(&oi->ip_xattr_sem); [ 259.962007][T10561] [ 259.962007][T10561] *** DEADLOCK *** [ 259.962007][T10561] [ 259.962012][T10561] 8 locks held by syz.1.2094/10561: [ 259.962023][T10561] #0: ffff888077204418 ( [ 260.006234][T10595] XFS (loop3): Ending clean mount [ 260.006422][T10561] sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 260.108456][T10561] #1: ffff88805fd21818 (&type->i_mutex_dir_key#14){+.+.}-{3:3}, at: path_openat+0x7c6/0x3190 [ 260.118733][T10561] #2: ffff88805ff1d118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 260.132415][T10561] #3: ffff88805fd089d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 260.146090][T10561] #4: ffff88805ff1b498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 260.160035][T10561] #5: ffff888077204608 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xe47/0x20f0 [ 260.169320][T10561] #6: ffff88805f5b84e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x36a/0x6c0 [ 260.180047][T10561] #7: ffff888054b8e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e7d/0x20c0 [ 260.189722][T10561] [ 260.189722][T10561] stack backtrace: [ 260.195613][T10561] CPU: 1 PID: 10561 Comm: syz.1.2094 Not tainted 6.6.98-syzkaller #0 [ 260.203703][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.213777][T10561] Call Trace: [ 260.217064][T10561] [ 260.220003][T10561] dump_stack_lvl+0x16c/0x230 [ 260.224723][T10561] ? load_image+0x3b0/0x3b0 [ 260.229233][T10561] ? show_regs_print_info+0x20/0x20 [ 260.234443][T10561] ? print_circular_bug+0x12b/0x1a0 [ 260.239659][T10561] check_noncircular+0x2bd/0x3c0 [ 260.244614][T10561] ? print_deadlock_bug+0x5d0/0x5d0 [ 260.249922][T10561] ? lockdep_lock+0xe0/0x220 [ 260.254658][T10561] ? _find_first_zero_bit+0xd3/0x100 [ 260.259969][T10561] __lock_acquire+0x2ddb/0x7c80 [ 260.264842][T10561] ? verify_lock_unused+0x140/0x140 [ 260.270070][T10561] ? __ocfs2_mknod_locked+0xbd2/0x1440 [ 260.275570][T10561] ? __lock_acquire+0x7c80/0x7c80 [ 260.280613][T10561] ? do_raw_spin_lock+0x121/0x2c0 [ 260.285674][T10561] ? __rwlock_init+0x150/0x150 [ 260.290452][T10561] lock_acquire+0x197/0x410 [ 260.294964][T10561] ? ocfs2_init_acl+0x2fa/0x720 [ 260.299829][T10561] ? __might_sleep+0xe0/0xe0 [ 260.304427][T10561] ? read_lock_is_recursive+0x20/0x20 [ 260.309805][T10561] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 260.316395][T10561] ? mark_lock+0x94/0x320 [ 260.320739][T10561] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 260.326727][T10561] down_read+0x46/0x2e0 [ 260.330910][T10561] ? ocfs2_init_acl+0x2fa/0x720 [ 260.335768][T10561] ocfs2_init_acl+0x2fa/0x720 [ 260.340448][T10561] ? ocfs2_mknod_locked+0x149/0x250 [ 260.345659][T10561] ? ocfs2_acl_chmod+0x320/0x320 [ 260.350594][T10561] ? dquot_alloc_inode+0x211/0xa40 [ 260.355723][T10561] ? ocfs2_block_signals+0x95/0xd0 [ 260.360848][T10561] ? ocfs2_free_mem_caches+0x50/0x50 [ 260.366145][T10561] ? ocfs2_init_security_get+0x139/0x1a0 [ 260.371787][T10561] ocfs2_mknod+0x12e5/0x20f0 [ 260.376391][T10561] ? ocfs2_mkdir+0x410/0x410 [ 260.381016][T10561] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 260.386938][T10561] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 260.392846][T10561] ? ocfs2_inode_unlock+0xa5/0x140 [ 260.397980][T10561] ? __lock_acquire+0x7c80/0x7c80 [ 260.403022][T10561] ? __rwlock_init+0x150/0x150 [ 260.407807][T10561] ? do_raw_spin_unlock+0x121/0x230 [ 260.413025][T10561] ? rcu_is_watching+0x15/0xb0 [ 260.417799][T10561] ? ocfs2_lookup+0x495/0x940 [ 260.422483][T10561] ocfs2_create+0x196/0x410 [ 260.426992][T10561] ? ocfs2_update_inode_fsync_trans+0x240/0x240 [ 260.433271][T10561] ? from_kgid+0x15d/0x680 [ 260.437828][T10561] ? ocfs2_lookup+0x940/0x940 [ 260.442519][T10561] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 260.447461][T10561] ? inode_permission+0xf3/0x480 [ 260.452401][T10561] ? bpf_lsm_inode_create+0x9/0x10 [ 260.457521][T10561] ? security_inode_create+0xb7/0x100 [ 260.462901][T10561] ? ocfs2_lookup+0x940/0x940 [ 260.467582][T10561] path_openat+0x1277/0x3190 [ 260.472189][T10561] ? do_filp_open+0x3d0/0x3d0 [ 260.476875][T10561] do_filp_open+0x1c5/0x3d0 [ 260.481380][T10561] ? vfs_tmpfile+0x490/0x490 [ 260.485982][T10561] ? _raw_spin_unlock+0x28/0x40 [ 260.490847][T10561] ? alloc_fd+0x58f/0x630 [ 260.495299][T10561] do_sys_openat2+0x12c/0x1c0 [ 260.499993][T10561] ? do_sys_open+0xe0/0xe0 [ 260.504415][T10561] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 260.510401][T10561] ? lock_chain_count+0x20/0x20 [ 260.515257][T10561] __x64_sys_openat+0x139/0x160 [ 260.520117][T10561] do_syscall_64+0x55/0xb0 [ 260.524559][T10561] ? clear_bhb_loop+0x40/0x90 [ 260.529257][T10561] ? clear_bhb_loop+0x40/0x90 [ 260.533961][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.539888][T10561] RIP: 0033:0x7fb943b8e929 [ 260.544314][T10561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.563936][T10561] RSP: 002b:00007fb9439ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.572358][T10561] RAX: ffffffffffffffda RBX: 00007fb943db5fa0 RCX: 00007fb943b8e929 [ 260.580341][T10561] RDX: 0000000000080243 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 260.588316][T10561] RBP: 00007fb943c10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 260.596288][T10561] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 260.604265][T10561] R13: 0000000000000000 R14: 00007fb943db5fa0 R15: 00007fffb9b89178 [ 260.612249][T10561] [ 260.692370][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 260.781972][ T5795] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791