last executing test programs: 6m52.995665385s ago: executing program 1 (id=7647): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80809440, 0x0) 6m51.662895983s ago: executing program 1 (id=7661): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_fd={0xfffffffe, 0x6, 0x4, 0x820, 0x9, {}, {0x2, 0x2, 0x3, 0x4d, 0x2, 0x6, "e72439ac"}, 0x4, 0x4, {0x0}, 0x4000003}) 6m50.993011032s ago: executing program 1 (id=7668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x20001000) 6m50.823293829s ago: executing program 1 (id=7670): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)=ANY=[], 0x1, 0x54e, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 6m50.711217104s ago: executing program 1 (id=7671): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x4, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000380)={0x24b4, 0x1000, "e3f8c961db6bb1a52398402f0cd16ca7dc8b9d52b35ac7fc", {0x5, 0xc}, 0x81fa}) 6m50.169460148s ago: executing program 1 (id=7682): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x4) 6m49.782898224s ago: executing program 32 (id=7682): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x4) 1.663397768s ago: executing program 0 (id=13785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ecffffff0000000001000000850000005300000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.62395478s ago: executing program 2 (id=13786): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r0, &(0x7f00000006c0)=""/4124, 0x101c) 1.450265387s ago: executing program 2 (id=13790): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x298, 0x130, 0x37f, 0x148, 0x0, 0x148, 0x130, 0x240, 0x240, 0x200, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz1\x00', {0x7}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 1.357278601s ago: executing program 0 (id=13792): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_RESET(r0, 0x5514) 1.269273285s ago: executing program 2 (id=13794): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0xfffffffffffffefd) 1.191070448s ago: executing program 0 (id=13796): r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x3, 0x5, 0x4, 0x4000f, 0x803, "000000ffff0600fdff090000000c00", '\x00', "06030400", '\x00\b\x00', ['\x00', "8004000700", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', "fdffffffff40000000a600"]}) 1.105875632s ago: executing program 2 (id=13798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x190, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 1.011059486s ago: executing program 0 (id=13800): sigaltstack(&(0x7f0000000300)={&(0x7f0000001300)=""/4097, 0x80000000, 0x1001}, 0x0) sigaltstack(0x0, &(0x7f00000001c0)={0x0}) 944.823809ms ago: executing program 2 (id=13801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ecffffff0000000001000000850000005300000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 937.16561ms ago: executing program 4 (id=13802): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x298, 0x130, 0x37f, 0x148, 0x0, 0x148, 0x130, 0x240, 0x240, 0x200, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x64010101, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@inet=@multiport={{0x50}, {0x40, 0x0, [0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz1\x00', {0x7}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3, 0x0, [0x6, 0x25, 0xd, 0x13, 0x39, 0x3f, 0x38, 0x8, 0x3b, 0x5, 0x15, 0x8, 0x4, 0x20, 0x13, 0x3], 0x1, 0x8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 847.081893ms ago: executing program 0 (id=13804): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0xfd, 0x6216, &(0x7f000000cb40)="$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") lsetxattr$security_ima(&(0x7f0000000240)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x17}, 0x2, 0x0) 773.604067ms ago: executing program 4 (id=13805): r0 = syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x101842) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000001080)) 726.250209ms ago: executing program 3 (id=13806): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) 613.480893ms ago: executing program 4 (id=13807): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0xfffffffffffffefd) 613.397444ms ago: executing program 2 (id=13808): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 597.143934ms ago: executing program 3 (id=13809): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x190, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 448.17899ms ago: executing program 3 (id=13810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50f10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}}, 0x20040040) 445.352851ms ago: executing program 4 (id=13818): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x1, 0xf3, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}}) 353.090115ms ago: executing program 3 (id=13811): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x4, @mcast1, 0x9}}, 0x99, 0x93, 0x1, 0x0, 0x3}, &(0x7f0000000180)=0x98) 328.409246ms ago: executing program 4 (id=13812): r0 = eventfd2(0xff, 0x80801) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="00ffffffffffffff", 0x8}], 0x1) 222.21831ms ago: executing program 3 (id=13813): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) 122.938095ms ago: executing program 4 (id=13814): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 91.678886ms ago: executing program 3 (id=13815): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x80100, 0x100) mq_timedreceive(r0, 0x0, 0x0, 0x3, 0x0) 0s ago: executing program 0 (id=13816): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000040)={'lo\x00', @ifru_names='veth0_to_hsr\x00'}) kernel console output (not intermixed with test programs): h=c000003e syscall=202 compat=0 ip=0x7feac978f749 code=0x7ffc0000 [ 1245.112422][ T27] audit: type=1326 audit(2000000099.494:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32544 comm="syz.4.11774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1245.200486][ T27] audit: type=1326 audit(2000000099.494:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32544 comm="syz.4.11774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1245.283467][ T27] audit: type=1326 audit(2000000099.522:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32544 comm="syz.4.11774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1245.321866][T32550] loop0: detected capacity change from 0 to 164 [ 1245.368168][ T27] audit: type=1326 audit(2000000099.522:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32544 comm="syz.4.11774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1245.397243][T32550] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1245.444300][ T27] audit: type=1326 audit(2000000099.522:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32544 comm="syz.4.11774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1245.451113][T32555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1245.927407][T32571] [U] ^R [ 1246.422297][T32592] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1246.474969][T32594] sp0: Synchronizing with TNC [ 1246.496371][T32591] [U] è [ 1246.792388][T32611] loop0: detected capacity change from 0 to 1024 [ 1246.804646][T32610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11806'. [ 1247.285082][T32629] netlink: zone id is out of range [ 1247.461211][T32637] loop3: detected capacity change from 0 to 256 [ 1247.494559][T32642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1247.499883][T32637] exfat: Deprecated parameter 'namecase' [ 1247.531804][T32637] exfat: Deprecated parameter 'namecase' [ 1247.549709][T32637] exfat: Deprecated parameter 'utf8' [ 1247.573140][T32637] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5417aa89, utbl_chksum : 0xe619d30d) [ 1247.803862][T32653] x_tables: unsorted underflow at hook 2 [ 1248.072524][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1248.289095][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1248.298285][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.318670][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.335972][T32648] loop4: detected capacity change from 0 to 40427 [ 1248.343300][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1248.375613][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.390825][T32648] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1248.412681][ T8] usb 3-1: config 0 descriptor?? [ 1248.430142][ T8] hub 3-1:0.0: USB hub found [ 1248.438455][T32648] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1248.518645][T32648] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1248.656330][ T8] hub 3-1:0.0: 1 port detected [ 1248.682239][T32648] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1248.706294][T32648] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1248.773364][T32648] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 1248.877934][ T8] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1248.884340][ T8] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1248.930628][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 1248.937261][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 1249.022625][ T8] usb 3-1: USB disconnect, device number 20 [ 1249.652172][T32711] loop3: detected capacity change from 0 to 2048 [ 1249.728006][T32713] SET target dimension over the limit! [ 1249.737308][T32711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1250.024987][T32722] loop3: detected capacity change from 0 to 8 [ 1250.026404][T32723] loop4: detected capacity change from 0 to 16 [ 1250.032896][T32722] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1250.074669][T32723] erofs: (device loop4): mounted with root inode @ nid 36. [ 1250.093370][ T8356] udevd[8356]: incorrect cramfs checksum on /dev/loop3 [ 1250.122641][T32723] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 1250.124673][T32722] cramfs: Error -3 while decompressing! [ 1250.164230][T32722] cramfs: ffffffff96fdd368(1306)->ffff888056228000(4096) [ 1250.172287][T32723] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 1250.185392][T32722] cramfs: bad data blocksize 3221485966 [ 1250.216711][ T8356] udevd[8356]: incorrect cramfs checksum on /dev/loop3 [ 1250.217039][T32722] cramfs: Error -3 while decompressing! [ 1250.241733][ T27] audit: type=1800 audit(2000000104.228:149): pid=32723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11861" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 1250.247502][T32722] cramfs: ffffffff96fdd368(1306)->ffff888056228000(4096) [ 1250.304652][ T27] audit: type=1326 audit(2000000104.283:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32726 comm="syz.2.11863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feac978f749 code=0x0 [ 1250.382868][ T27] audit: type=1800 audit(2000000104.302:151): pid=32722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11860" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 1250.676594][T32717] loop0: detected capacity change from 0 to 32768 [ 1250.717159][T32717] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1250.769494][T32717] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1250.825743][ T2181] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1250.875221][T32717] (syz.0.11858,32717,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=970662608961, rec_len=0, name_len=0 [ 1250.912007][T32717] (syz.0.11858,32717,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1250.921439][T32717] (syz.0.11858,32717,0):ocfs2_mknod:298 ERROR: status = -2 [ 1250.997496][T32717] (syz.0.11858,32717,0):ocfs2_mknod:502 ERROR: status = -2 [ 1251.031342][T32717] (syz.0.11858,32717,0):ocfs2_create:676 ERROR: status = -2 [ 1251.065993][ T2181] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1251.096177][ T2181] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1251.105126][ T2181] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.130384][ T2181] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1251.143768][ T2181] usb 5-1: config 1 has no interface number 0 [ 1251.154914][ T2181] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1251.171290][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 1251.178976][ T2181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.245082][ T2181] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1251.465250][ T2181] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 1251.474088][ T2181] snd_usb_pod 5-1:1.1: invalid control EP [ 1251.492797][ T2181] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 1251.511749][ T2181] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1251.552413][ T2181] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 1251.736661][ T2181] usb 5-1: USB disconnect, device number 19 [ 1252.556008][ T338] netlink: 'syz.0.11901': attribute type 26 has an invalid length. [ 1252.666422][ T341] raw_sendmsg: syz.2.11902 forgot to set AF_INET. Fix it! [ 1252.736502][ T345] misc userio: Invalid payload size [ 1253.648791][ T384] loop4: detected capacity change from 0 to 64 [ 1253.973419][ T398] loop4: detected capacity change from 0 to 512 [ 1254.043611][ T398] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1254.095044][ T398] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.11930: bg 0: block 384: padding at end of block bitmap is not set [ 1254.202999][ T398] EXT4-fs (loop4): Remounting filesystem read-only [ 1254.259573][ T398] EXT4-fs (loop4): 1 truncate cleaned up [ 1254.294601][ T398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1254.347127][ T415] loop0: detected capacity change from 0 to 256 [ 1254.374490][T23407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.376901][ T415] exfat: Deprecated parameter 'namecase' [ 1254.384680][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1254.414314][ T415] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 1254.607779][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1254.618782][ T5792] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1254.634504][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.635175][ T420] loop4: detected capacity change from 0 to 2048 [ 1254.654601][ T8] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1254.682691][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.710906][ T8] usb 3-1: Product: syz [ 1254.711948][ T420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1254.734703][ T8] usb 3-1: Manufacturer: syz [ 1254.751128][ T8] usb 3-1: SerialNumber: syz [ 1254.780581][ T8] usb 3-1: config 0 descriptor?? [ 1254.788426][T23407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.817089][ T8] usb 3-1: bad CDC descriptors [ 1254.854440][ T8] usb 3-1: unsupported MDLM descriptors [ 1254.862939][ T5792] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1254.923859][ T5792] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 1254.933521][ T5792] usb 4-1: config 6 has no interface number 0 [ 1254.939740][ T5792] usb 4-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1254.966687][ T5792] usb 4-1: config 6 interface 200 has no altsetting 0 [ 1254.982489][ T5792] usb 4-1: string descriptor 0 read error: -22 [ 1254.989975][ T5792] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1255.004941][ T5792] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 1255.030780][ T5792] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1255.107297][ T8] usb 3-1: USB disconnect, device number 21 [ 1255.259053][ T5792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1255.283467][ T5792] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1255.301339][ T5792] usb 4-1: media controller created [ 1255.350797][ T5792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1255.404910][ T428] loop0: detected capacity change from 0 to 32768 [ 1255.414061][ T428] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.11945 (428) [ 1255.445925][ T428] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1255.474686][ T5792] dvb-usb: bulk message failed: -71 (6/0) [ 1255.488783][ T5792] dvb-usb: bulk message failed: -71 (6/0) [ 1255.495464][ T428] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1255.505175][ T5792] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1255.516566][ T428] BTRFS info (device loop0): force zlib compression, level 3 [ 1255.524694][ T428] BTRFS info (device loop0): turning off barriers [ 1255.531667][ T428] BTRFS info (device loop0): using free space tree [ 1255.542122][ T5792] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input72 [ 1255.591027][ T5792] dvb-usb: schedule remote query interval to 150 msecs. [ 1255.610519][ T5792] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1255.646880][ T5792] usb 4-1: USB disconnect, device number 9 [ 1255.690139][ T428] BTRFS info (device loop0): auto enabling async discard [ 1255.781172][ T5792] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1255.886868][ T5788] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1256.325521][ T469] netlink: 'syz.2.11957': attribute type 13 has an invalid length. [ 1256.403034][ T466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11956'. [ 1256.526273][ T466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11956'. [ 1256.542663][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1257.142990][ T500] netlink: 'syz.2.11972': attribute type 11 has an invalid length. [ 1257.263160][ T504] loop0: detected capacity change from 0 to 256 [ 1257.310416][ T506] netlink: 'syz.3.11975': attribute type 4 has an invalid length. [ 1257.335410][ T8356] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1258.184883][ T545] netlink: 180 bytes leftover after parsing attributes in process `syz.2.11994'. [ 1258.262989][ T548] ALSA: mixer_oss: invalid OSS volume '' [ 1258.407278][ T551] loop4: detected capacity change from 0 to 4096 [ 1258.511866][ T558] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1258.605094][ T560] loop2: detected capacity change from 0 to 1024 [ 1258.799625][ T2983] hfsplus: b-tree write err: -5, ino 4 [ 1259.673823][ T600] ieee802154 phy1 wpan1: encryption failed: -22 [ 1259.890236][ T612] loop4: detected capacity change from 0 to 512 [ 1259.921320][ T612] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1259.997639][ T612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1260.035713][ T612] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1260.069871][ T612] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 1260.113225][ T612] System zones: 0-1, 15-15, 18-18, 34-34 [ 1260.119639][ T612] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1260.189932][ T612] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1260.222039][ T612] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1260.260270][ T612] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1260.298751][ T612] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.12026: bg 0: block 40: padding at end of block bitmap is not set [ 1260.392309][ T612] EXT4-fs (loop4): Remounting filesystem read-only [ 1260.417358][ T612] EXT4-fs (loop4): 1 truncate cleaned up [ 1260.459627][ T612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1260.682785][T23407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.791952][ T645] netlink: 'syz.3.12044': attribute type 10 has an invalid length. [ 1260.961855][ T652] cgroup: subsys name conflicts with all [ 1261.443360][ T671] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12057'. [ 1261.605968][ T680] loop4: detected capacity change from 0 to 256 [ 1261.635521][ T677] loop3: detected capacity change from 0 to 4096 [ 1261.674807][ T677] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1261.700561][ T677] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1261.749126][ T677] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1261.800997][ T677] ntfs: volume version 3.1. [ 1261.857336][ T677] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1262.118365][ T689] netlink: 'syz.3.12065': attribute type 7 has an invalid length. [ 1262.139856][ T689] netlink: 'syz.3.12065': attribute type 8 has an invalid length. [ 1262.160267][ T689] netlink: 'syz.3.12065': attribute type 15 has an invalid length. [ 1262.382354][ T675] loop2: detected capacity change from 0 to 32768 [ 1263.038566][ T723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12081'. [ 1263.446107][ T731] netlink: 'syz.4.12086': attribute type 3 has an invalid length. [ 1264.632795][ T764] loop3: detected capacity change from 0 to 4096 [ 1264.651746][ T764] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1264.817491][ T764] ntfs3: loop3: failed to convert "c46c" to cp950 [ 1265.565482][ T5792] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1265.796434][ T5792] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1265.811775][ T817] bpf: Bad value for 'mode' [ 1265.819995][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.848985][ T5792] usb 4-1: Product: syz [ 1265.860670][ T5792] usb 4-1: Manufacturer: syz [ 1265.876217][ T5792] usb 4-1: SerialNumber: syz [ 1265.887988][ T5792] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1265.924484][ T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1266.136085][ T807] loop0: detected capacity change from 0 to 32768 [ 1266.191555][ T826] loop2: detected capacity change from 0 to 256 [ 1266.278852][ C0] usb 4-1: ath: unknown panic pattern! [ 1266.664559][ T836] loop4: detected capacity change from 0 to 256 [ 1267.667461][T14646] usb 4-1: USB disconnect, device number 10 [ 1267.688652][ T8] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1267.695766][ T8] ath9k_htc: Failed to initialize the device [ 1267.747158][T14646] usb 4-1: ath9k_htc: USB layer deinitialized [ 1268.070330][ T851] sctp: [Deprecated]: syz.4.12143 (pid 851) Use of int in max_burst socket option. [ 1268.070330][ T851] Use struct sctp_assoc_value instead [ 1268.686616][ T873] netlink: 830 bytes leftover after parsing attributes in process `syz.4.12154'. [ 1268.821189][ T876] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1268.908686][ T881] bad cache= option: no%e [ 1268.908686][ T881] [ 1268.946446][ T881] CIFS: VFS: bad cache= option: no%e [ 1269.398715][ T905] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1269.437452][ T905] overlayfs: missing 'lowerdir' [ 1269.886843][ T941] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12180'. [ 1269.903643][ T941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12180'. [ 1269.921146][ T939] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 1270.038806][ T945] loop2: detected capacity change from 0 to 1024 [ 1270.068524][ T945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1270.173830][ T945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1270.238621][ T945] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1270.242413][ T955] loop0: detected capacity change from 0 to 164 [ 1270.385111][ T955] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1270.438098][ T963] loop4: detected capacity change from 0 to 8 [ 1270.452015][ T963] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1270.480713][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.488608][ T963] cramfs: Error -3 while decompressing! [ 1270.514746][T14012] udevd[14012]: incorrect cramfs checksum on /dev/loop4 [ 1270.522384][ T963] cramfs: ffffffff96fdd368(1306)->ffff88805442c000(4096) [ 1270.537263][ T963] cramfs: bad data blocksize 3221485966 [ 1270.547291][ T963] cramfs: Error -3 while decompressing! [ 1270.553694][ T963] cramfs: ffffffff96fdd368(1306)->ffff88805442c000(4096) [ 1270.561593][ T27] audit: type=1800 audit(2000000122.968:152): pid=963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12189" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1270.586267][ T965] loop3: detected capacity change from 0 to 1764 [ 1270.612466][T14012] udevd[14012]: incorrect cramfs checksum on /dev/loop4 [ 1271.034700][ T27] audit: type=1326 audit(2000000123.411:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=977 comm="syz.4.12197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1271.058047][ T983] loop3: detected capacity change from 0 to 64 [ 1271.068860][ T983] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1271.122285][ T983] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 1271.133572][ T27] audit: type=1326 audit(2000000123.411:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=977 comm="syz.4.12197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1271.208883][ T985] loop2: detected capacity change from 0 to 256 [ 1271.224065][ T27] audit: type=1326 audit(2000000123.457:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=977 comm="syz.4.12197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1271.277491][ T27] audit: type=1326 audit(2000000123.457:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=977 comm="syz.4.12197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1271.315989][ T27] audit: type=1326 audit(2000000123.457:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=977 comm="syz.4.12197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1271.770441][ T1006] loop2: detected capacity change from 0 to 512 [ 1271.801864][ T1006] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1271.903120][ T1006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1271.944954][ T1006] ext4 filesystem being mounted at /2964/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1272.092551][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.539754][ T1001] loop0: detected capacity change from 0 to 32768 [ 1272.667296][ T1001] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 1272.799313][ T1001] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 1272.826270][ T1001] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1272.859080][ T1001] OCFS2: Returning error to the calling process. [ 1272.865489][ T1001] (syz.0.12205,1001,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 1272.907756][ T1001] (syz.0.12205,1001,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 1272.945514][ T1001] (syz.0.12205,1001,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 1272.977641][ T1001] (syz.0.12205,1001,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 1272.986785][ T1001] (syz.0.12205,1001,1):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 1273.021051][ T1001] (syz.0.12205,1001,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 1273.029507][ T1001] (syz.0.12205,1001,0):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 1273.129461][ T1001] (syz.0.12205,1001,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 1273.149516][ T1001] (syz.0.12205,1001,0):ocfs2_mknod:298 ERROR: status = -5 [ 1273.176439][ T1001] (syz.0.12205,1001,0):ocfs2_mknod:502 ERROR: status = -5 [ 1273.201727][ T1001] (syz.0.12205,1001,1):ocfs2_mkdir:659 ERROR: status = -5 [ 1273.396697][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 1273.425411][ T1070] smb3: Unexpected value for 'rdma' [ 1273.698353][ T1076] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1273.915322][ T1068] loop4: detected capacity change from 0 to 32768 [ 1274.164948][T26566] read_mapping_page failed! [ 1274.191974][T26566] ERROR: (device loop4): txCommit: [ 1274.191974][T26566] [ 1274.225447][T26566] jfs_write_inode: jfs_commit_inode failed! [ 1274.836417][ T1123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12256'. [ 1274.928364][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1275.178549][ T8] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1275.199255][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.234372][ T8] usb 1-1: config 0 has no interface number 0 [ 1275.258271][ T8] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 1275.291963][ T8] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1275.326434][ T8] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 1275.380514][ T8] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 1275.402441][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.427848][ T8] usb 1-1: Product: syz [ 1275.432335][ T8] usb 1-1: Manufacturer: syz [ 1275.455864][ T8] usb 1-1: SerialNumber: syz [ 1275.476872][ T8] usb 1-1: config 0 descriptor?? [ 1275.499507][ T8] HFC-S_USB: probe of 1-1:0.117 failed with error -5 [ 1275.728407][ T8] usb 1-1: USB disconnect, device number 17 [ 1275.880450][ T1129] loop3: detected capacity change from 0 to 40427 [ 1275.901177][ T1129] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1275.912134][ T1129] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1275.947421][ T1129] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1276.076223][ T1129] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1276.097530][ T1129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1276.186865][ T1129] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 1276.676283][ T1149] loop4: detected capacity change from 0 to 40434 [ 1276.696085][ T1149] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (2981212592) [ 1276.743900][ T1149] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1276.767196][ T1149] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff [ 1276.784357][ T1163] loop0: detected capacity change from 0 to 4096 [ 1276.800332][ T1163] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1276.879550][ T1163] ntfs3: loop0: failed to convert "c46c" to koi8-r [ 1277.235371][ T1183] xt_ecn: cannot match TCP bits for non-tcp packets [ 1277.243537][ T1184] netlink: 'syz.3.12283': attribute type 5 has an invalid length. [ 1277.390439][ T1184] : entered promiscuous mode [ 1277.538861][ T1192] ieee802154 phy1 wpan1: encryption failed: -22 [ 1278.007703][ T1214] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.12295'. [ 1278.018149][ T1214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1278.309655][ T1224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12301'. [ 1278.510248][ T1230] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1278.519003][ T1232] loop2: detected capacity change from 0 to 8 [ 1278.569808][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1278.585579][ T1193] loop0: detected capacity change from 0 to 32768 [ 1278.631922][ T1193] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1278.661719][ T1232] SQUASHFS error: xz decompression failed, data probably corrupt [ 1278.673130][ T1193] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1278.726541][ T1232] SQUASHFS error: Failed to read block 0xa8: -5 [ 1278.751067][ T1193] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1278.760776][ T2181] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1278.768330][ T2181] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1278.771485][ T1232] SQUASHFS error: xz decompression failed, data probably corrupt [ 1278.816236][ T1232] SQUASHFS error: Failed to read block 0xa8: -5 [ 1278.829001][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1278.850235][ T27] audit: type=1800 audit(2000000130.626:158): pid=1232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12305" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 1278.850278][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1278.874247][ T2181] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 97ms [ 1278.909041][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1278.919005][ T2181] gfs2: fsid=syz:syz.0: jid=0: Done [ 1278.919094][ T1193] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1278.968339][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1279.018430][ T8] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1279.046936][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.066211][ T8] usb 4-1: Product: syz [ 1279.071840][ T8] usb 4-1: Manufacturer: syz [ 1279.076581][ T8] usb 4-1: SerialNumber: syz [ 1279.125878][ T8] usb 4-1: config 0 descriptor?? [ 1279.161907][ T8] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1279.394341][ T1246] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1279.404923][ T8] scsi host1: usb-storage 4-1:0.0 [ 1279.464018][ T8] usb 4-1: USB disconnect, device number 11 [ 1279.640982][ T1253] netlink: 'syz.4.12313': attribute type 30 has an invalid length. [ 1279.858468][ T1244] loop2: detected capacity change from 0 to 32768 [ 1279.876588][ T1244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.12310 (1244) [ 1279.923087][ T1244] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1279.961625][ T1244] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1279.981966][ T1244] BTRFS info (device loop2): using free space tree [ 1280.153485][ T1283] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12318'. [ 1280.193249][ T1244] BTRFS info (device loop2): enabling ssd optimizations [ 1280.212386][ T1244] BTRFS info (device loop2): auto enabling async discard [ 1280.402655][ T5787] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1280.561929][ T1299] loop4: detected capacity change from 0 to 256 [ 1280.655493][ T1299] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 1280.715523][ T1299] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1280.832118][ T1301] loop3: detected capacity change from 0 to 4096 [ 1280.894886][ T1301] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1281.072606][ T1301] ntfs: volume version 3.1. [ 1281.429133][ T1324] bond0: Unable to set up delay as MII monitoring is disabled [ 1281.896766][ T1333] loop3: detected capacity change from 0 to 4096 [ 1281.933207][ T1333] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1281.973201][ T1333] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1282.007209][ T1333] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1282.031297][ T1333] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1282.070941][ T1333] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1282.108085][ T1333] ntfs: volume version 3.1. [ 1282.116957][ T1333] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1282.145013][ T1333] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1282.187477][ T1333] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1282.645930][ T1337] loop0: detected capacity change from 0 to 32768 [ 1282.815223][ T1363] IPv6: Can't replace route, no match found [ 1282.841109][ T1365] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12356'. [ 1283.538608][ T1391] loop4: detected capacity change from 0 to 256 [ 1283.545506][ T1394] xt_TCPMSS: Only works on TCP SYN packets [ 1283.772924][ T1402] loop0: detected capacity change from 0 to 128 [ 1283.803285][ T1402] sysv_free_block: flc_count > flc_size [ 1283.838079][ T1402] sysv_free_block: flc_count > flc_size [ 1283.843806][ T1402] sysv_free_block: flc_count > flc_size [ 1283.901645][ T1402] sysv_free_block: flc_count > flc_size [ 1283.937996][ T1402] sysv_free_block: flc_count > flc_size [ 1283.944036][ T1402] sysv_free_block: flc_count > flc_size [ 1283.995333][ T1402] sysv_free_block: flc_count > flc_size [ 1284.013544][ T1402] sysv_free_block: flc_count > flc_size [ 1284.047666][ T1402] sysv_free_block: flc_count > flc_size [ 1284.065240][ T1402] sysv_free_block: flc_count > flc_size [ 1284.109027][ T1402] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1284.389847][ T1422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1285.399264][ T1460] loop0: detected capacity change from 0 to 8 [ 1285.859358][ T1472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12407'. [ 1286.000413][ T1456] loop4: detected capacity change from 0 to 32768 [ 1286.512322][ T1494] loop0: detected capacity change from 0 to 4096 [ 1286.557664][ T1494] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1286.682983][ T1494] ntfs3: loop0: failed to convert "c46c" to cp437 [ 1286.878514][ T1504] loop2: detected capacity change from 0 to 1764 [ 1286.991491][ T1504] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1287.344889][ T1522] loop2: detected capacity change from 0 to 4096 [ 1287.364058][ T1522] __ntfs_warning: 8 callbacks suppressed [ 1287.364074][ T1522] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1287.483091][ T1522] ntfs: volume version 3.1. [ 1287.554480][ T1529] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12434'. [ 1287.839336][ T1537] QAT: Invalid ioctl 1076910120 [ 1287.983637][ T1541] loop4: detected capacity change from 0 to 8 [ 1288.265597][ T1516] loop3: detected capacity change from 0 to 32768 [ 1288.331646][ T1516] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1288.352343][ T1551] loop0: detected capacity change from 0 to 512 [ 1288.363502][ T1551] EXT4-fs: Ignoring removed bh option [ 1288.373576][ T1516] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1288.392270][ T1551] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1288.410629][ T1551] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1288.457926][ T1551] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1288.497005][ T1551] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1288.500577][ T1551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1288.618191][ T1516] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1288.672013][T14646] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1288.678053][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1288.682425][T14646] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1288.891838][T14646] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 193ms [ 1288.910305][T14646] gfs2: fsid=syz:syz.0: jid=0: Done [ 1288.925097][ T1516] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1288.956765][ T1567] tipc: Can't bind to reserved service type 2 [ 1289.873885][T13794] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1290.043727][ T1600] loop3: detected capacity change from 0 to 4096 [ 1290.073111][ T1600] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1290.101787][T13794] usb 5-1: Using ep0 maxpacket: 8 [ 1290.116074][T13794] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1290.133761][T13794] usb 5-1: config 179 has no interface number 0 [ 1290.156675][T13794] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1290.173417][T13794] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1290.187385][ T1600] ntfs3: loop3: failed to convert "c46c" to cp437 [ 1290.193513][T13794] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1290.228012][T13794] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1290.255777][T13794] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1290.330177][T13794] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1290.337699][T13794] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1290.382689][T13794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.444327][T13794] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input74 [ 1290.589882][ T5144] input input74: unable to receive magic message: -110 [ 1290.699147][ T5144] input input74: unable to receive magic message: -32 [ 1290.796582][ T5144] input input74: unable to receive magic message: -32 [ 1290.836203][ T1614] netlink: 'syz.3.12476': attribute type 21 has an invalid length. [ 1290.856979][ T1614] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12476'. [ 1290.878657][ T5144] input input74: unable to receive magic message: -32 [ 1290.888059][ T5144] input input74: unable to receive magic message: -32 [ 1290.981002][ T5144] input input74: unable to receive magic message: -32 [ 1291.042142][ T1598] loop2: detected capacity change from 0 to 32768 [ 1291.080206][T13794] usb 5-1: USB disconnect, device number 20 [ 1291.086323][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1291.098272][ T1598] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1291.119006][ T1598] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1291.126040][T13794] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1291.321215][ T1598] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1291.362996][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1291.371515][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1291.514954][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 132ms [ 1291.541267][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 1291.556699][ T1598] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1292.093711][ T1650] netlink: 100 bytes leftover after parsing attributes in process `syz.4.12493'. [ 1292.228823][ T1656] loop0: detected capacity change from 0 to 164 [ 1292.308780][ T1656] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1293.463837][ T1670] loop4: detected capacity change from 0 to 32768 [ 1293.514490][ T1670] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1293.555690][ T1670] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1293.649095][ T1707] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12520'. [ 1293.659176][ T1707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12520'. [ 1293.660265][ T1670] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1293.669531][ T1707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12520'. [ 1293.702721][ T5883] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1293.710014][ T5883] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1293.829227][ T5883] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 109ms [ 1293.839579][ T5883] gfs2: fsid=syz:syz.0: jid=0: Done [ 1293.863040][ T1670] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1293.944933][ T1713] overlay: Unknown parameter '\' [ 1294.123477][ T1717] loop0: detected capacity change from 0 to 2048 [ 1294.142196][ T1717] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1294.762182][ T1741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12538'. [ 1294.763339][ T1740] loop3: detected capacity change from 0 to 512 [ 1294.836200][ T1740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 1294.859129][ T1740] System zones: 0-2, 18-18, 34-34 [ 1294.864785][ T1740] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1294.899198][ T1740] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.12537: bg 0: block 248: padding at end of block bitmap is not set [ 1294.959607][ T1740] Quota error (device loop3): write_blk: dquota write failed [ 1294.978345][ T1740] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1295.000147][ T1740] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.12537: Failed to acquire dquot type 1 [ 1295.040565][ T1740] EXT4-fs (loop3): 1 orphan inode deleted [ 1295.046925][ T1752] xt_CONNSECMARK: invalid mode: 0 [ 1295.086726][T26566] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 1295.109073][T26566] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:2: Failed to release dquot type 1 [ 1295.161655][ T1740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1295.273217][ T1740] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.12537: deleted inode referenced: 12 [ 1295.383823][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.551589][ T1771] ipt_ECN: cannot use operation on non-tcp rule [ 1295.751038][ T1778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12554'. [ 1295.948162][ T1788] loop3: detected capacity change from 0 to 2048 [ 1295.996904][ T1788] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1296.044340][ T1795] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1296.044696][ T1788] syz.3.12559: attempt to access beyond end of device [ 1296.044696][ T1788] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1296.195615][ T1788] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1296.248479][ T1788] Remounting filesystem read-only [ 1296.264275][ T1788] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1296.300434][ T1788] NILFS (loop3): error -5 truncating bmap (ino=16) [ 1296.373341][ T1802] loop0: detected capacity change from 0 to 512 [ 1296.390741][ T1802] EXT4-fs: Ignoring removed orlov option [ 1296.412324][ T1802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1296.427624][ T1804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12567'. [ 1296.428957][ T5789] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 1296.457727][ T1802] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1296.471227][ T5789] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 1296.486386][ T5789] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1296.506722][ T5789] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1296.515295][ T1802] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.12566: bg 0: block 248: padding at end of block bitmap is not set [ 1296.515834][ T5789] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1296.593972][ T5789] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1296.613542][ T1802] Quota error (device loop0): write_blk: dquota write failed [ 1296.626845][ T1802] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1296.636504][ T1809] loop2: detected capacity change from 0 to 4096 [ 1296.662614][ T1802] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.12566: Failed to acquire dquot type 1 [ 1296.707206][ T1812] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1296.730370][ T1802] EXT4-fs (loop0): 1 truncate cleaned up [ 1296.746339][ T1802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1296.897142][ T1802] EXT4-fs: Ignoring removed orlov option [ 1296.902970][ T1802] EXT4-fs: can't change dax mount option while remounting [ 1297.029881][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.229884][ T1830] SET target dimension over the limit! [ 1297.317190][ T1834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12581'. [ 1297.337050][ T1834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12581'. [ 1297.347046][T14646] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1297.356617][ T1834] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12581'. [ 1297.486932][ T1840] loop3: detected capacity change from 0 to 2048 [ 1297.502335][ T1840] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1297.557713][T14646] usb 5-1: Using ep0 maxpacket: 32 [ 1297.578128][T14646] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1297.592499][T14646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.605638][T14646] usb 5-1: Product: syz [ 1297.628140][T14646] usb 5-1: Manufacturer: syz [ 1297.637903][T14646] usb 5-1: SerialNumber: syz [ 1297.662166][T14646] usb 5-1: config 0 descriptor?? [ 1297.707383][ T1844] loop3: detected capacity change from 0 to 512 [ 1297.715607][ T1844] EXT4-fs: Ignoring removed orlov option [ 1297.733191][ T1844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1297.753322][ T1844] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1297.768256][ T1844] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.12585: bg 0: block 248: padding at end of block bitmap is not set [ 1297.784249][ T1844] Quota error (device loop3): write_blk: dquota write failed [ 1297.794977][ T1844] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1297.805929][ T1844] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.12585: Failed to acquire dquot type 1 [ 1297.827602][ T1844] EXT4-fs (loop3): 1 truncate cleaned up [ 1297.859574][ T1844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1297.897988][ T1844] EXT4-fs: Ignoring removed orlov option [ 1297.904166][ T1844] EXT4-fs: can't change dax mount option while remounting [ 1297.934943][T14646] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 1297.948966][T14646] eb 9a 47 80 9b f8 7a f0 [ 1297.953628][T14646] snd-usb-6fire: probe of 5-1:0.0 failed with error -5 [ 1297.963561][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.027961][ T1826] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1298.184083][T13794] usb 5-1: USB disconnect, device number 21 [ 1298.196680][ T1857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1298.529482][ T1873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12600'. [ 1299.114644][ T1901] openvswitch: netlink: Actions may not be safe on all matching packets [ 1299.364719][ T1912] loop3: detected capacity change from 0 to 256 [ 1299.386947][ T1912] exfat: Deprecated parameter 'namecase' [ 1299.416088][ T1912] exfat: Deprecated parameter 'utf8' [ 1299.448118][ T1912] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 1300.103120][ T27] audit: type=1326 audit(2000000150.234:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1941 comm="syz.0.12634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719598f749 code=0x7ffc0000 [ 1300.114000][ T1943] netlink: 'syz.4.12631': attribute type 75 has an invalid length. [ 1300.133260][ T27] audit: type=1326 audit(2000000150.261:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1941 comm="syz.0.12634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719598f749 code=0x7ffc0000 [ 1300.211942][ T27] audit: type=1326 audit(2000000150.289:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1941 comm="syz.0.12634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f719598f749 code=0x7ffc0000 [ 1300.437941][ T1956] netlink: 'syz.0.12640': attribute type 24 has an invalid length. [ 1300.620917][ T1966] loop2: detected capacity change from 0 to 8 [ 1300.682259][ T1966] SQUASHFS error: Unable to read directory block [1d0:0] [ 1300.787362][ T5792] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1300.999321][ T5792] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 1301.036607][ T5792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.065918][ T5792] usb 5-1: config 0 has no interface number 0 [ 1301.090941][ T5792] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1301.112502][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.141145][ T5792] usb 5-1: config 0 descriptor?? [ 1301.166070][ T1980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12652'. [ 1301.178839][ T5792] ttusbir 5-1:0.83: cannot find expected altsetting [ 1301.213813][ T1960] loop3: detected capacity change from 0 to 32768 [ 1301.250598][ T1960] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.12642 (1960) [ 1301.303400][ T1960] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1301.328057][ T1960] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1301.365189][ T1960] BTRFS info (device loop3): enabling auto defrag [ 1301.372116][ T1960] BTRFS info (device loop3): turning on sync discard [ 1301.422497][ T1960] BTRFS info (device loop3): force zlib compression, level 3 [ 1301.448497][ T1960] BTRFS info (device loop3): force clearing of disk cache [ 1301.460587][ T2181] usb 5-1: USB disconnect, device number 22 [ 1301.470133][ T1960] BTRFS info (device loop3): max_inline at 0 [ 1301.476208][ T1960] BTRFS info (device loop3): disabling free space tree [ 1301.644685][ T1960] BTRFS info (device loop3): enabling ssd optimizations [ 1301.685927][ T1960] BTRFS info (device loop3): rebuilding free space tree [ 1301.752345][ T1960] BTRFS info (device loop3): disabling free space tree [ 1301.759524][ T1960] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1301.799822][ T1960] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1301.942623][ T2018] netlink: 'syz.2.12662': attribute type 12 has an invalid length. [ 1302.016312][ T5789] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1302.339518][ T2027] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12664'. [ 1303.232792][ T2061] loop2: detected capacity change from 0 to 512 [ 1303.449125][ T2061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1303.525434][ T2061] ext4 filesystem being mounted at /3095/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.590772][ T2076] ceph: No source [ 1303.699702][ T2081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12693'. [ 1303.737678][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.786097][ T2082] loop3: detected capacity change from 0 to 4096 [ 1303.880280][ T2082] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1303.934629][ T2082] ntfs3: loop3: Failed to load $Extend (-22). [ 1303.940858][ T2082] ntfs3: loop3: Failed to initialize $Extend. [ 1304.353887][ T2104] netlink: 'syz.4.12704': attribute type 8 has an invalid length. [ 1305.283434][ T2148] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12724'. [ 1305.299831][ T2148] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1305.480096][T14646] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1305.709915][T14646] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1305.729310][ T2162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12730'. [ 1305.739058][T14646] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.767810][ T2162] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12730'. [ 1305.777467][T14646] usb 4-1: config 220 has no interface number 2 [ 1305.795619][T14646] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1305.832733][T14646] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1305.868168][T14646] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1305.897488][T14646] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1305.926648][T14646] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1305.943013][ T2170] cgroup: Invalid name [ 1305.947976][T14646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.967283][T14646] usb 4-1: Product: syz [ 1305.972559][T14646] usb 4-1: Manufacturer: syz [ 1305.977376][T14646] usb 4-1: SerialNumber: syz [ 1306.256928][T14646] usb 4-1: selecting invalid altsetting 0 [ 1306.274862][T14646] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1306.281375][T14646] usb 4-1: No valid video chain found. [ 1306.346321][T14646] usb 4-1: selecting invalid altsetting 0 [ 1306.371907][T14646] usbtest: probe of 4-1:220.1 failed with error -22 [ 1306.421360][T14646] usb 4-1: USB disconnect, device number 12 [ 1306.755003][ T2197] loop2: detected capacity change from 0 to 4096 [ 1306.803225][ T2197] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1306.821984][ T2197] ntfs3: loop2: Failed to load $Extend (-22). [ 1306.837464][ T2197] ntfs3: loop2: Failed to initialize $Extend. [ 1307.044214][ T2184] loop0: detected capacity change from 0 to 32768 [ 1307.176398][ T2184] jfs_lookup: dtSearch returned -5 [ 1307.890578][ T2238] loop2: detected capacity change from 0 to 1764 [ 1308.245008][ T2254] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12767'. [ 1308.350534][ T2258] loop2: detected capacity change from 0 to 1024 [ 1308.394199][ T2258] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1308.525478][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1308.746415][ T2270] loop0: detected capacity change from 0 to 4096 [ 1308.752969][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1308.756282][ T2270] __ntfs_warning: 2 callbacks suppressed [ 1308.756296][ T2270] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1308.804120][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1308.834130][ T2270] ntfs: volume version 3.1. [ 1308.852698][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1308.895294][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1308.931535][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1308.965796][ T2270] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1308.981219][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1309.007426][ T2270] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1309.034835][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1309.061105][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.080821][ T9] usb 5-1: config 0 descriptor?? [ 1309.088661][ T2270] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to map page. [ 1309.093224][ T2252] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1309.106429][ T2282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12781'. [ 1309.108583][ T2270] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 1309.153998][ T2270] ntfs: (device loop0): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 1309.303923][ T5788] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1309.317339][T14646] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1309.462606][ T2291] loop0: detected capacity change from 0 to 16 [ 1309.476769][ T2291] erofs: (device loop0): mounted with root inode @ nid 36. [ 1309.537896][T14646] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1309.550578][T14646] usb 4-1: config 0 has no interface number 0 [ 1309.572927][T14646] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1309.587601][ T9] usb 5-1: USB disconnect, device number 23 [ 1309.588714][T23410] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1309.608606][T14646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.638208][T14646] usb 4-1: Product: syz [ 1309.692525][T14646] usb 4-1: Manufacturer: syz [ 1309.706752][T14646] usb 4-1: SerialNumber: syz [ 1309.738440][T14646] usb 4-1: config 0 descriptor?? [ 1309.756738][T14646] hub 4-1:0.132: bad descriptor, ignoring hub [ 1309.773529][T14646] hub: probe of 4-1:0.132 failed with error -5 [ 1309.796218][T14646] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input77 [ 1310.051516][ T2303] sctp: [Deprecated]: syz.0.12791 (pid 2303) Use of int in max_burst socket option deprecated. [ 1310.051516][ T2303] Use struct sctp_assoc_value instead [ 1310.182461][ T2293] loop2: detected capacity change from 0 to 32768 [ 1310.203430][ T2293] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.12786 (2293) [ 1310.258981][ T2293] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1310.313469][ T2293] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1310.340726][ T2293] BTRFS info (device loop2): using free space tree [ 1310.488918][ T2293] BTRFS info (device loop2): enabling ssd optimizations [ 1310.508787][ T2293] BTRFS info (device loop2): auto enabling async discard [ 1310.626140][ T5787] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1310.817743][ T2336] loop4: detected capacity change from 0 to 1024 [ 1310.851302][ T2336] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1310.943539][ T2336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1311.069664][ T2347] ÿ: renamed from bond_slave_0 [ 1311.147097][ T2336] EXT4-fs error (device loop4): ext4_xattr_inode_iget:444: inode #11: comm syz.4.12800: missing EA_INODE flag [ 1311.159345][ T5792] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1311.183472][ T2336] EXT4-fs (loop4): Remounting filesystem read-only [ 1311.285444][T23407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.386965][ T5792] usb 3-1: Using ep0 maxpacket: 16 [ 1311.440855][ T5792] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1311.450527][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.477499][ T5792] usb 3-1: Product: syz [ 1311.484019][ T5792] usb 3-1: Manufacturer: syz [ 1311.488843][ T5792] usb 3-1: SerialNumber: syz [ 1311.520523][ T2358] cifs: Unknown parameter '2í¡Qƒé [ 1311.520523][ T2358] @Ý"2a×ch}#úä`Ü[TäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1311.520523][ T2358] SÃÿ' [ 1311.522269][ T5792] r8152-cfgselector 3-1: config 0 descriptor?? [ 1312.032697][ T5792] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1312.056840][ T2379] loop3: detected capacity change from 0 to 512 [ 1312.069063][ T5792] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 1312.083887][ T2379] EXT4-fs: Ignoring removed bh option [ 1312.123129][ T2379] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1312.179753][ T2379] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1312.193074][ T2379] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1312.224501][ T2379] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 1312.242833][ T2379] System zones: 0-2, 18-18, 34-35 [ 1312.250072][ T2379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1312.303658][ T2379] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #12: block 32: comm syz.3.12817: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 1312.359893][ T2384] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 1312.407696][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.504905][ T2370] loop0: detected capacity change from 0 to 32768 [ 1312.588013][ T2370] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1312.801381][ T2410] loop3: detected capacity change from 0 to 1024 [ 1312.824298][ T2410] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1312.838661][ T2370] XFS (loop0): Ending clean mount [ 1313.131631][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1313.341649][ C0] vkms_vblank_simulate: vblank timer overrun [ 1313.818406][ T2442] dlm: no locking on control device [ 1313.858176][ T2446] trusted_key: encrypted_key: keylen parameter is missing [ 1314.190832][ T2459] loop3: detected capacity change from 0 to 764 [ 1314.431681][ T2427] loop2: detected capacity change from 0 to 40427 [ 1314.462105][ T2427] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 1314.486250][ T2427] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1314.514817][ T2427] F2FS-fs (loop2): invalid crc value [ 1314.526913][ T2427] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1314.675093][ T2427] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 1314.703723][ T2427] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1314.821844][ T2427] F2FS-fs (loop2): Corrupted max_depth of 3: 255 [ 1314.857183][ T2427] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1314.884524][ T2481] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12854'. [ 1314.916691][ T2481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12854'. [ 1314.941419][ T2481] netlink: 31 bytes leftover after parsing attributes in process `syz.4.12854'. [ 1314.961582][ T2481] netlink: 'syz.4.12854': attribute type 2 has an invalid length. [ 1314.980793][ T2483] ieee802154 phy1 wpan1: encryption failed: -22 [ 1314.990731][ T2481] netlink: 31 bytes leftover after parsing attributes in process `syz.4.12854'. [ 1315.250356][T14646] usb 4-1: USB disconnect, device number 13 [ 1315.651358][ T2510] loop3: detected capacity change from 0 to 764 [ 1315.908064][ T2513] loop2: detected capacity change from 0 to 4096 [ 1315.953563][ T2513] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1316.882058][ T2563] loop2: detected capacity change from 0 to 256 [ 1316.919526][ T2563] FAT-fs (loop2): Directory bread(block 1285) failed [ 1316.983838][ T2563] FAT-fs (loop2): Directory bread(block 1285) failed [ 1317.006411][ T2563] FAT-fs (loop2): Directory bread(block 1285) failed [ 1317.028183][ T2563] FAT-fs (loop2): Directory bread(block 1285) failed [ 1317.047097][ T2574] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1317.308889][ T2584] SET target dimension over the limit! [ 1317.413090][ T2590] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 1317.439517][ T2590] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 1318.241413][ T27] audit: type=1326 audit(2000000166.971:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2637 comm="syz.4.12916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1318.284620][ T27] audit: type=1326 audit(2000000166.971:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2637 comm="syz.4.12916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1318.310362][ T27] audit: type=1326 audit(2000000166.990:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2637 comm="syz.4.12916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1318.335254][ T27] audit: type=1326 audit(2000000166.990:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2637 comm="syz.4.12916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf38f749 code=0x7ffc0000 [ 1318.615359][T14646] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1318.727437][ T2659] loop0: detected capacity change from 0 to 1024 [ 1318.756818][ T2659] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1318.777966][ T2659] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1318.849116][ T2659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1318.853805][T14646] usb 4-1: Using ep0 maxpacket: 16 [ 1318.905983][T14646] usb 4-1: config 127 has an invalid interface number: 102 but max is 2 [ 1318.928571][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.939982][T14646] usb 4-1: config 127 has no interface number 2 [ 1318.965136][T14646] usb 4-1: config 127 interface 0 has no altsetting 0 [ 1318.972080][T14646] usb 4-1: config 127 interface 1 has no altsetting 0 [ 1319.018553][T14646] usb 4-1: config 127 interface 102 has no altsetting 0 [ 1319.061988][T14646] usb 4-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 1319.075092][T14646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.099008][T14646] usb 4-1: Product: syz [ 1319.117631][T14646] usb 4-1: Manufacturer: syz [ 1319.134559][T14646] usb 4-1: SerialNumber: syz [ 1319.288088][ T2688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12935'. [ 1319.395931][T14646] usb 4-1: selecting invalid altsetting 0 [ 1319.427142][T14646] usb 4-1: Could not set interface, error -22 [ 1319.451876][T14646] usb 4-1: selecting invalid altsetting 0 [ 1319.471499][T14646] usb 4-1: Could not set interface, error -22 [ 1319.515326][T14646] usb 4-1: USB disconnect, device number 14 [ 1319.707546][ T2706] loop4: detected capacity change from 0 to 64 [ 1319.964438][ T2716] loop4: detected capacity change from 0 to 2048 [ 1319.975010][ T2720] IPVS: length: 225 != 8 [ 1320.015244][ T2721] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1320.136622][ T2723] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1320.155827][ T2716] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1320.240568][ T2716] Remounting filesystem read-only [ 1320.277682][ T2716] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1321.316909][ T2745] loop3: detected capacity change from 0 to 32768 [ 1321.344687][ T2745] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.12958 (2745) [ 1321.421929][ T2745] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1321.449084][ T2745] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1321.485322][ T2745] BTRFS info (device loop3): using free space tree [ 1321.649991][ T2745] BTRFS info (device loop3): enabling ssd optimizations [ 1321.664278][ T2745] BTRFS info (device loop3): auto enabling async discard [ 1321.864990][ T5789] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1322.537960][ T2836] loop3: detected capacity change from 0 to 1024 [ 1323.135323][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1323.167593][ T2865] loop0: detected capacity change from 0 to 256 [ 1323.175391][ T2865] exfat: Deprecated parameter 'utf8' [ 1323.253661][ T2865] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1323.861941][ T2891] cgroup: noprefix used incorrectly [ 1324.095545][ T2902] loop2: detected capacity change from 0 to 8 [ 1324.146274][ T2902] SQUASHFS error: Failed to read block 0x636: -5 [ 1324.190791][ T2902] SQUASHFS error: Unable to read metadata cache entry [634] [ 1324.203356][ T2902] SQUASHFS error: Unable to read metadata cache entry [634] [ 1324.229326][ T2902] SQUASHFS error: Unable to read directory block [629:0] [ 1324.383114][ T2912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13017'. [ 1324.496532][ T2916] loop2: detected capacity change from 0 to 2048 [ 1324.519027][ T2916] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1324.547697][ T2916] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1324.585733][ T2916] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1324.628867][ T2924] loop4: detected capacity change from 0 to 65 [ 1324.656475][ T2924] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1324.695357][ T2924] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1325.058722][ T2936] infiniband syz2: set active [ 1325.078940][ T5883] lo speed is unknown, defaulting to 1000 [ 1325.122326][ T2939] loop3: detected capacity change from 0 to 256 [ 1325.191731][ T2939] FAT-fs (loop3): Directory bread(block 64) failed [ 1325.224937][ T2939] FAT-fs (loop3): Directory bread(block 65) failed [ 1325.248309][ T2939] FAT-fs (loop3): Directory bread(block 66) failed [ 1325.281200][ T2939] FAT-fs (loop3): Directory bread(block 67) failed [ 1325.288440][ T2939] FAT-fs (loop3): Directory bread(block 68) failed [ 1325.341460][ T2939] FAT-fs (loop3): Directory bread(block 69) failed [ 1325.352672][ T2939] FAT-fs (loop3): Directory bread(block 70) failed [ 1325.367899][ T2939] FAT-fs (loop3): Directory bread(block 71) failed [ 1325.375600][ T2939] FAT-fs (loop3): Directory bread(block 72) failed [ 1325.397826][ T2939] FAT-fs (loop3): Directory bread(block 73) failed [ 1325.502104][T14646] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1325.725146][T14646] usb 3-1: Using ep0 maxpacket: 32 [ 1325.739141][T14646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.761697][T14646] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1325.789995][T14646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.820330][T14646] usb 3-1: Product: syz [ 1325.829948][T14646] usb 3-1: Manufacturer: syz [ 1325.846298][T14646] usb 3-1: SerialNumber: syz [ 1325.872365][T14646] usb 3-1: config 0 descriptor?? [ 1325.897317][T14646] cdc_ether: probe of 3-1:0.0 failed with error -22 [ 1325.916207][T14646] usb 3-1: unsupported MDLM descriptors [ 1326.185835][T14646] usb 3-1: USB disconnect, device number 23 [ 1326.263318][ T2992] delete_channel: no stack [ 1327.599568][ T3082] loop2: detected capacity change from 0 to 256 [ 1327.822539][ T3097] loop3: detected capacity change from 0 to 512 [ 1327.855981][ T3097] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1327.892750][ T3097] EXT4-fs (loop3): invalid journal inode [ 1327.900167][ T3097] EXT4-fs (loop3): can't get journal size [ 1327.952662][ T3097] EXT4-fs (loop3): 1 truncate cleaned up [ 1327.966981][ T3097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1328.121634][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.501195][ T3142] netlink: 'syz.2.13097': attribute type 1 has an invalid length. [ 1328.509564][ T3143] netlink: 'syz.3.13098': attribute type 1 has an invalid length. [ 1328.543062][ T3143] netlink: 'syz.3.13098': attribute type 3 has an invalid length. [ 1328.550940][ T3143] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13098'. [ 1328.588325][ T3143] NCSI netlink: No device for ifindex 0 [ 1328.622805][ T27] audit: type=1400 audit(2000000176.549:168): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=3149 comm="syz.4.13100" [ 1329.783587][ T3178] loop2: detected capacity change from 0 to 32768 [ 1329.853216][ T3230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13125'. [ 1329.861685][ T3178] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 1329.950053][ T3178] ocfs2: Unmounting device (7,2) on (node local) [ 1330.325418][ T3259] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1330.362889][ T3259] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1330.743462][ T3277] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13139'. [ 1331.250106][ T3314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13157'. [ 1331.378482][ T3320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13152'. [ 1331.739150][ T3303] loop0: detected capacity change from 0 to 32768 [ 1331.841765][ T3303] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 1331.922480][ T3303] ocfs2: Unmounting device (7,0) on (node local) [ 1332.038727][ T3357] loop2: detected capacity change from 0 to 512 [ 1332.082640][ T3357] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1332.105563][ T3357] EXT4-fs (loop2): invalid journal inode [ 1332.152183][ T3357] EXT4-fs (loop2): can't get journal size [ 1332.183832][ T3357] EXT4-fs (loop2): 1 truncate cleaned up [ 1332.203380][ T3357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1332.223401][ T3376] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13164'. [ 1332.293670][ T3375] loop0: detected capacity change from 0 to 512 [ 1332.302483][ T3377] sctp: [Deprecated]: syz.4.13165 (pid 3377) Use of int in max_burst socket option deprecated. [ 1332.302483][ T3377] Use struct sctp_assoc_value instead [ 1332.355189][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.355212][ T3375] EXT4-fs: Ignoring removed bh option [ 1332.475151][ T3375] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1332.516994][ T3375] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1332.583689][ T3375] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1332.651425][ T3375] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 1332.659736][ T3375] System zones: 0-2, 18-18, 34-35 [ 1332.671694][ T3401] ÿ: renamed from bond_slave_0 [ 1332.677193][ T3402] cgroup: noprefix used incorrectly [ 1332.737802][ T3375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1332.889864][ T3375] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #12: block 32: comm syz.0.13173: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 1333.024489][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.370584][ T3438] cgroup: noprefix used incorrectly [ 1333.959244][ T3433] loop3: detected capacity change from 0 to 32768 [ 1333.993286][ T3433] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.13180 (3433) [ 1334.052308][ T3433] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1334.075836][ T3433] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1334.105595][ T3433] BTRFS info (device loop3): using free space tree [ 1334.278772][ T3433] BTRFS info (device loop3): enabling ssd optimizations [ 1334.285976][ T3433] BTRFS info (device loop3): auto enabling async discard [ 1334.414294][ T3480] syz.2.13196 (3480): drop_caches: 2 [ 1334.631164][ T5789] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1334.932229][ T3527] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 1334.954312][ T3530] trusted_key: encrypted_key: keylen parameter is missing [ 1335.023832][ T3527] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 1335.316867][ T5792] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1335.532594][ T5792] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1335.565560][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.565783][ T3555] loop4: detected capacity change from 0 to 764 [ 1335.598838][ T5792] usb 4-1: config 0 descriptor?? [ 1335.855751][ T5792] snd-usb-hiface: probe of 4-1:0.0 failed with error -22 [ 1335.958890][ T3579] trusted_key: encrypted_key: keylen parameter is missing [ 1336.121551][ T5792] usb 4-1: USB disconnect, device number 15 [ 1336.150826][T14646] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1336.156643][ T3597] loop0: detected capacity change from 0 to 16 [ 1336.176126][ T3597] erofs: (device loop0): mounted with root inode @ nid 36. [ 1336.345991][T14646] usb 5-1: Using ep0 maxpacket: 16 [ 1336.362378][T14646] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1336.382867][T14646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.403530][T14646] usb 5-1: Product: syz [ 1336.410924][T14646] usb 5-1: Manufacturer: syz [ 1336.422448][T14646] usb 5-1: SerialNumber: syz [ 1336.441252][T14646] r8152-cfgselector 5-1: config 0 descriptor?? [ 1336.572681][ T3602] loop2: detected capacity change from 0 to 32768 [ 1336.600469][ T3602] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1336.701432][ T3602] XFS (loop2): Ending clean mount [ 1336.755738][ T3602] XFS (loop2): Quotacheck needed: Please wait. [ 1336.836622][ T27] audit: type=1326 audit(2000000184.115:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3625 comm="syz.0.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719598f749 code=0x7ffc0000 [ 1336.847127][ T3602] XFS (loop2): Quotacheck: Done. [ 1336.931832][ T27] audit: type=1326 audit(2000000184.115:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3625 comm="syz.0.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719598f749 code=0x7ffc0000 [ 1336.942170][T14646] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1337.008697][T14646] r8152-cfgselector 5-1: USB disconnect, device number 24 [ 1337.052755][ T27] audit: type=1326 audit(2000000184.161:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3625 comm="syz.0.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f719598f749 code=0x7ffc0000 [ 1337.128638][ T27] audit: type=1326 audit(2000000184.161:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3625 comm="syz.0.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719598f749 code=0x7ffc0000 [ 1337.150911][ T3635] syz.3.13228 (3635): drop_caches: 2 [ 1337.167539][ T3641] ieee802154 phy1 wpan1: encryption failed: -22 [ 1337.175252][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1337.455159][ C1] vkms_vblank_simulate: vblank timer overrun [ 1337.817509][ T3673] loop2: detected capacity change from 0 to 512 [ 1337.859335][ T3673] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1337.878017][ T3673] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.13238: corrupted in-inode xattr: invalid size in ea xattr [ 1337.916714][ T3673] EXT4-fs (loop2): Remounting filesystem read-only [ 1337.937044][ T3673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1337.961290][T13794] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1338.037979][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.199193][T13794] usb 1-1: Using ep0 maxpacket: 8 [ 1338.213109][T13794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1338.232224][T13794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1338.242142][T13794] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1338.291681][T13794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1338.318337][T13794] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1338.328796][T13794] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1338.372548][T13794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.396777][T13794] usb 1-1: config 0 descriptor?? [ 1338.403106][ T3661] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1338.774058][ T3676] loop4: detected capacity change from 0 to 32768 [ 1338.845326][ T3676] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1338.937022][T13794] usb 1-1: USB disconnect, device number 18 [ 1338.940461][T23410] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1339.182050][ T3676] XFS (loop4): Ending clean mount [ 1339.195938][ T3676] XFS (loop4): Quotacheck needed: Please wait. [ 1339.262337][ T3705] loop3: detected capacity change from 0 to 32768 [ 1339.270703][ T3676] XFS (loop4): Quotacheck: Done. [ 1339.365237][ T3705] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1339.460406][T23407] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1339.557952][ T3705] XFS (loop3): Ending clean mount [ 1339.641785][ T3763] loop2: detected capacity change from 0 to 764 [ 1339.721359][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1340.079840][ T3783] loop0: detected capacity change from 0 to 512 [ 1340.112451][ T3783] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1340.137417][ T3783] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2249: inode #15: comm syz.0.13260: corrupted in-inode xattr: invalid size in ea xattr [ 1340.158379][ T3783] EXT4-fs (loop0): Remounting filesystem read-only [ 1340.168922][ T3783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1340.248932][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.447464][ T3801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13263'. [ 1340.854551][T14646] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1341.000281][ T3798] loop0: detected capacity change from 0 to 32768 [ 1341.041029][ T3798] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1341.078677][T14646] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1341.108884][T14646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.200485][T14646] usb 3-1: config 0 descriptor?? [ 1341.273544][ T3798] XFS (loop0): Ending clean mount [ 1341.284636][ T3798] XFS (loop0): Quotacheck needed: Please wait. [ 1341.457500][ T3798] XFS (loop0): Quotacheck: Done. [ 1341.475407][T14646] snd-usb-hiface: probe of 3-1:0.0 failed with error -22 [ 1341.619353][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1341.739970][ T5792] usb 3-1: USB disconnect, device number 24 [ 1342.042730][ T3873] loop0: detected capacity change from 0 to 4096 [ 1342.059377][ T3873] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 1342.289004][ T3870] loop4: detected capacity change from 0 to 32768 [ 1342.341415][ T3870] __jfs_setxattr: xattr_size = 72, new_size = 12051 [ 1342.576054][ T3887] loop0: detected capacity change from 0 to 2048 [ 1342.659813][ T3898] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1342.731686][ T3887] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1342.757635][ T3887] Remounting filesystem read-only [ 1342.784113][ T3887] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1343.312126][ T3930] loop0: detected capacity change from 0 to 256 [ 1343.354035][ T3930] FAT-fs (loop0): Directory bread(block 1285) failed [ 1343.452534][ T3930] FAT-fs (loop0): Directory bread(block 1285) failed [ 1343.478100][ T3930] FAT-fs (loop0): Directory bread(block 1285) failed [ 1343.537183][ T3930] FAT-fs (loop0): Directory bread(block 1285) failed [ 1343.777456][ T3952] netlink: 'syz.0.13305': attribute type 11 has an invalid length. [ 1343.809648][ T3908] loop3: detected capacity change from 0 to 32768 [ 1343.856639][ T3908] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1344.107585][ T3908] XFS (loop3): Ending clean mount [ 1344.144235][ T3908] XFS (loop3): Quotacheck needed: Please wait. [ 1344.274629][ T3908] XFS (loop3): Quotacheck: Done. [ 1344.360361][ T3993] loop2: detected capacity change from 0 to 256 [ 1344.379414][ T3993] exfat: Deprecated parameter 'utf8' [ 1344.386941][ T3993] exfat: Deprecated parameter 'namecase' [ 1344.442697][ T3993] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1344.515956][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1345.027678][ T4023] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13316'. [ 1345.228559][ T4036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13318'. [ 1345.287491][ T27] audit: type=1326 audit(2000000191.921:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4037 comm="syz.4.13321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ebf38f749 code=0x0 [ 1345.379775][ T4033] loop0: detected capacity change from 0 to 4096 [ 1345.427921][ T4033] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1345.445233][ T4048] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13324'. [ 1345.474344][ T4033] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1345.526522][ T4033] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1345.580651][ T4033] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1345.655093][ T4033] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1345.690392][ T4033] ntfs: volume version 3.1. [ 1345.697281][ T4033] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1345.714447][ T4061] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13327'. [ 1345.738629][ T4033] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1345.827735][ T4033] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1345.850686][ T4033] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1346.160779][ T4086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13333'. [ 1346.192277][ T4086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13333'. [ 1346.220542][ T4086] ip6gretap2: entered allmulticast mode [ 1346.359338][ T4094] ieee802154 phy1 wpan1: encryption failed: -90 [ 1346.697335][ T4114] loop3: detected capacity change from 0 to 256 [ 1346.709352][ T4114] exfat: Deprecated parameter 'utf8' [ 1346.743230][ T4114] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1346.893931][ T4070] loop4: detected capacity change from 0 to 32768 [ 1346.949450][ T4070] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1347.035306][ T4141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13345'. [ 1347.173687][ T4070] XFS (loop4): Ending clean mount [ 1347.353510][ T4158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13353'. [ 1347.395280][T23407] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1347.603019][ T4173] dlm: no locking on control device [ 1347.909986][ T2181] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1347.937361][ T4189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13360'. [ 1347.939249][ T4190] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13361'. [ 1347.948147][ T4189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13360'. [ 1347.972711][ T4189] ip6gretap2: entered allmulticast mode [ 1348.120471][ T2181] usb 1-1: too many configurations: 25, using maximum allowed: 8 [ 1348.133616][ T4201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13363'. [ 1348.154342][ T2181] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1348.169261][ T2181] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.200855][ T2181] usb 1-1: config 0 descriptor?? [ 1348.217557][ T2181] pwc: Creative Labs Webcam Pro Ex detected. [ 1348.233709][ T2181] pwc: Warning: more than 1 configuration available. [ 1348.438548][ T2181] pwc: Failed to set LED on/off time (-71) [ 1348.446758][ T2181] pwc: send_video_command error -71 [ 1348.452238][ T2181] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1348.459906][ T2181] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 1348.469649][ T2181] usb 1-1: USB disconnect, device number 19 [ 1349.134642][ T4224] loop3: detected capacity change from 0 to 2048 [ 1349.208786][ T4224] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1349.232449][ T4224] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1349.247981][ T4232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13369'. [ 1349.259154][ T4224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1349.343068][ T2181] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1349.442235][ T4239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13379'. [ 1349.569149][ T2181] usb 5-1: Using ep0 maxpacket: 16 [ 1349.588011][ T2181] usb 5-1: config 127 has an invalid interface number: 102 but max is 2 [ 1349.600686][ T2181] usb 5-1: config 127 has no interface number 2 [ 1349.618386][ T2181] usb 5-1: config 127 interface 0 has no altsetting 0 [ 1349.636683][ T2181] usb 5-1: config 127 interface 1 has no altsetting 0 [ 1349.661375][ T2181] usb 5-1: config 127 interface 102 has no altsetting 0 [ 1349.673154][ T2181] usb 5-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 1349.684402][ T2181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.695850][ T2181] usb 5-1: Product: syz [ 1349.702887][ T2181] usb 5-1: Manufacturer: syz [ 1349.707839][ T2181] usb 5-1: SerialNumber: syz [ 1349.871569][T13794] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1349.978258][ T2181] usb 5-1: selecting invalid altsetting 0 [ 1349.986023][ T2181] usb 5-1: Could not set interface, error -22 [ 1350.000347][ T2181] usb 5-1: selecting invalid altsetting 0 [ 1350.010519][ T2181] usb 5-1: Could not set interface, error -22 [ 1350.028054][ T2181] usb 5-1: USB disconnect, device number 25 [ 1350.093265][T13794] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.109704][T13794] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1350.119827][T13794] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1350.137236][T13794] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1350.147381][T13794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.158192][T13794] usb 1-1: Product: syz [ 1350.162567][T13794] usb 1-1: Manufacturer: syz [ 1350.168146][T13794] usb 1-1: SerialNumber: syz [ 1350.182095][T13794] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1350.193752][T13794] cdc_ncm 1-1:1.0: bind() failure [ 1350.199425][ T4264] loop3: detected capacity change from 0 to 32768 [ 1350.239318][ T4264] jfs_lookup: dtSearch returned -5 [ 1350.475744][ T2181] usb 1-1: USB disconnect, device number 20 [ 1350.634312][ T4307] openvswitch: netlink: Actions may not be safe on all matching packets [ 1350.849394][ T4321] netlink: 'syz.4.13389': attribute type 4 has an invalid length. [ 1351.235440][ T4345] netlink: 'syz.2.13396': attribute type 30 has an invalid length. [ 1352.131519][ T4438] __nla_validate_parse: 1 callbacks suppressed [ 1352.131545][ T4438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13416'. [ 1352.328762][ T4448] netlink: 'syz.3.13419': attribute type 4 has an invalid length. [ 1352.453306][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13421'. [ 1352.653267][ T4467] netlink: 'syz.2.13425': attribute type 10 has an invalid length. [ 1352.764023][ C0] vkms_vblank_simulate: vblank timer overrun [ 1352.821475][ T4475] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13428'. [ 1353.098777][ T4489] loop4: detected capacity change from 0 to 512 [ 1353.131345][ T4489] EXT4-fs: Ignoring removed nobh option [ 1353.195758][ T4489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1353.217442][ T4489] ext4 filesystem being mounted at /1326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1353.369942][T23407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.385298][ T4472] loop0: detected capacity change from 0 to 32768 [ 1353.416959][ T4472] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.13426 (4472) [ 1353.539990][ T4472] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1353.588931][ T4472] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1353.597685][ T4472] BTRFS info (device loop0): using free space tree [ 1353.633049][ T4507] openvswitch: netlink: Actions may not be safe on all matching packets [ 1353.700998][ T4511] x_tables: duplicate entry at hook 3 [ 1353.870633][ T4472] BTRFS info (device loop0): enabling ssd optimizations [ 1353.877750][ T4472] BTRFS info (device loop0): auto enabling async discard [ 1354.030328][ T5788] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1354.289545][ T4483] loop3: detected capacity change from 0 to 40427 [ 1354.393013][ T4483] F2FS-fs (loop3): invalid crc value [ 1354.431243][ T4549] netlink: 'syz.4.13442': attribute type 30 has an invalid length. [ 1354.469942][ T4483] F2FS-fs (loop3): Mismatch valid blocks 2 vs. 3 [ 1354.562606][ T4483] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1354.922067][ T4605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13447'. [ 1355.265082][ T4623] loop0: detected capacity change from 0 to 64 [ 1355.673678][ T4646] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1355.817459][ T4611] loop4: detected capacity change from 0 to 32768 [ 1355.843778][ T4611] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.13448 (4611) [ 1355.939010][ T4611] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1355.951461][T14646] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1355.962571][ T4611] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1355.988261][ T4611] BTRFS info (device loop4): using free space tree [ 1356.168270][ T4611] BTRFS info (device loop4): enabling ssd optimizations [ 1356.175969][ T4611] BTRFS info (device loop4): auto enabling async discard [ 1356.179343][T14646] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1356.238053][T14646] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.288651][T14646] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1356.341777][T14646] usb 3-1: config 1 has no interface number 1 [ 1356.348509][T14646] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1356.362552][T23407] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1356.387390][T14646] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1356.414882][T14646] usb 3-1: New USB device strings: Mfr=20, Product=2, SerialNumber=3 [ 1356.435640][T14646] usb 3-1: Product: syz [ 1356.451830][T14646] usb 3-1: Manufacturer: syz [ 1356.475661][T14646] usb 3-1: SerialNumber: syz [ 1356.673056][ T4702] netlink: 108 bytes leftover after parsing attributes in process `syz.3.13471'. [ 1356.703370][ T4702] netlink: 108 bytes leftover after parsing attributes in process `syz.3.13471'. [ 1356.878320][T14646] usb 3-1: USB disconnect, device number 25 [ 1357.008581][ T8356] udevd[8356]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1357.384986][ T4717] loop4: detected capacity change from 0 to 32768 [ 1357.408548][ T4717] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.13469 (4717) [ 1357.449725][ T4717] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1357.475792][ T4717] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1357.503171][ T4717] BTRFS info (device loop4): enabling ssd optimizations [ 1357.511165][ T4717] BTRFS info (device loop4): turning on sync discard [ 1357.532227][ T4717] BTRFS info (device loop4): using free space tree [ 1357.752891][ T4767] loop2: detected capacity change from 0 to 64 [ 1357.761791][ T4717] BTRFS error (device loop4): balance: invalid convert data profile raid1c4 [ 1357.898718][T23407] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1357.916708][ T4765] loop0: detected capacity change from 0 to 4096 [ 1358.002268][ T4783] netlink: 'syz.3.13480': attribute type 10 has an invalid length. [ 1358.103871][ T4785] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1358.128403][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 1358.128421][ T27] audit: type=1400 audit(2000000203.769:174): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=4780 comm="syz.2.13482" [ 1358.443161][ T4765] syz.0.13477: attempt to access beyond end of device [ 1358.443161][ T4765] loop0: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 1358.511895][ T4765] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 1358.841658][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13489'. [ 1358.897784][ T4814] xt_bpf: check failed: parse error [ 1359.251614][ T4832] 9pnet_fd: p9_fd_create_tcp (4832): problem connecting socket to 127.0.0.1 [ 1359.254955][ T4834] loop0: detected capacity change from 0 to 64 [ 1359.315113][ T4833] netlink: 'syz.4.13495': attribute type 10 has an invalid length. [ 1359.457206][ T4837] loop3: detected capacity change from 0 to 4096 [ 1359.534461][ T4844] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1359.640785][ T4837] syz.3.13497: attempt to access beyond end of device [ 1359.640785][ T4837] loop3: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 1359.688308][ T4837] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 1359.818917][ T4856] delete_channel: no stack [ 1359.995205][ T4862] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.13503'. [ 1360.021987][ T4865] loop0: detected capacity change from 0 to 1764 [ 1360.578225][ T4853] loop2: detected capacity change from 0 to 32768 [ 1360.596777][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13511'. [ 1360.642850][ T4853] JBD2: Ignoring recovery information on journal [ 1360.646320][ T4892] loop4: detected capacity change from 0 to 4096 [ 1360.703983][ T4902] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1360.784274][ T4892] syz.4.13512: attempt to access beyond end of device [ 1360.784274][ T4892] loop4: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 1360.818512][ T4853] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1360.866817][ T4892] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 1360.891956][ T4909] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.13515'. [ 1360.968639][ T4853] (syz.2.13500,4853,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=7755761508285415489, rec_len=30044, name_len=0 [ 1361.045923][ T4853] (syz.2.13500,4853,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1361.082698][ T4853] (syz.2.13500,4853,0):ocfs2_mknod:298 ERROR: status = -2 [ 1361.114290][ T4853] (syz.2.13500,4853,0):ocfs2_mknod:502 ERROR: status = -2 [ 1361.137893][ T4853] (syz.2.13500,4853,0):ocfs2_create:676 ERROR: status = -2 [ 1361.297994][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 1362.226237][ T4984] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1362.250091][ T4984] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1362.887767][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1363.095292][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.115096][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1363.143021][ T8] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1363.158778][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.181560][ T8] usb 4-1: config 0 descriptor?? [ 1363.456503][ T5009] loop3: detected capacity change from 0 to 1024 [ 1363.499684][ T8] usb 4-1: USB disconnect, device number 16 [ 1363.740024][ T5088] comedi comedi1: s526: I/O port conflict (0x3c4,64) [ 1363.901665][ T5097] delete_channel: no stack [ 1363.973725][ T5041] 9pnet_fd: p9_fd_create_tcp (5041): problem connecting socket to 127.0.0.1 [ 1364.144432][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 1364.427541][ T5128] netlink: 'syz.2.13579': attribute type 5 has an invalid length. [ 1364.571742][ T5098] loop0: detected capacity change from 0 to 32768 [ 1364.615853][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13583'. [ 1364.638069][ T5098] JBD2: Ignoring recovery information on journal [ 1364.842896][ T5098] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1365.055270][ T5098] (syz.0.13572,5098,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=7755761508285415489, rec_len=30044, name_len=0 [ 1365.109517][ T5098] (syz.0.13572,5098,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1365.123017][ T5098] (syz.0.13572,5098,1):ocfs2_mknod:298 ERROR: status = -2 [ 1365.153241][ T5098] (syz.0.13572,5098,1):ocfs2_mknod:502 ERROR: status = -2 [ 1365.175619][ T5098] (syz.0.13572,5098,1):ocfs2_create:676 ERROR: status = -2 [ 1365.263289][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 1365.965640][ T2181] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1366.173821][ T2181] usb 1-1: config 0 has an invalid interface number: 36 but max is 0 [ 1366.198870][ T2181] usb 1-1: config 0 has no interface number 0 [ 1366.233327][ T2181] usb 1-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72 [ 1366.243578][ T2181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.265599][ T2181] usb 1-1: Product: syz [ 1366.279757][ T2181] usb 1-1: Manufacturer: syz [ 1366.293695][ T2181] usb 1-1: SerialNumber: syz [ 1366.309265][ T2181] usb 1-1: config 0 descriptor?? [ 1366.328851][ T2181] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1366.361418][ T5215] loop4: detected capacity change from 0 to 32768 [ 1366.385808][ T5215] JBD2: Ignoring recovery information on journal [ 1366.424448][ T5215] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1366.477939][ T5215] (syz.4.13604,5215,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=7755761508285415489, rec_len=30044, name_len=0 [ 1366.496488][ T5215] (syz.4.13604,5215,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1366.505659][ T5215] (syz.4.13604,5215,0):ocfs2_mknod:298 ERROR: status = -2 [ 1366.512993][ T5215] (syz.4.13604,5215,0):ocfs2_mknod:502 ERROR: status = -2 [ 1366.520642][ T5215] (syz.4.13604,5215,0):ocfs2_create:676 ERROR: status = -2 [ 1366.554105][T23407] ocfs2: Unmounting device (7,4) on (node local) [ 1366.772407][ T2181] gspca_spca505: reg write: error -71 [ 1366.777938][ T2181] spca505: probe of 1-1:0.36 failed with error -5 [ 1366.788009][ T2181] usb 1-1: USB disconnect, device number 21 [ 1367.426326][ T5259] netlink: 'syz.3.13613': attribute type 5 has an invalid length. [ 1367.438996][ T5260] netlink: 'syz.0.13610': attribute type 10 has an invalid length. [ 1367.704338][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1367.870287][ T5290] loop4: detected capacity change from 0 to 1024 [ 1367.921206][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1367.925304][ T5290] hfsplus: catalog name length corrupted [ 1367.950015][ T9] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 1367.976384][ T9] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 1368.013854][ T9] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1368.040325][ T9] usb 3-1: config 129 has no interface number 0 [ 1368.065455][ T9] usb 3-1: config 129 has no interface number 1 [ 1368.090357][ T9] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1368.143161][ T9] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1368.179775][ T5305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13625'. [ 1368.184667][ T9] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1368.224781][ T9] usb 3-1: config 129 interface 135 has no altsetting 0 [ 1368.252216][ T9] usb 3-1: config 129 interface 5 has no altsetting 0 [ 1368.277130][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1368.284155][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1368.328061][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.394462][ T9] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1368.401699][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 1368.475635][ T5319] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1368.533051][ T5331] xt_connbytes: Forcing CT accounting to be enabled [ 1368.554903][ T5331] xt_bpf: check failed: parse error [ 1368.610366][ T9] usb 3-1: USB disconnect, device number 26 [ 1369.010939][ T5375] netlink: 'syz.0.13639': attribute type 11 has an invalid length. [ 1369.434918][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1369.707136][ T9] usb 1-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 1369.737050][ T9] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1369.768564][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.805288][ T9] usb 1-1: config 0 descriptor?? [ 1369.832442][ T5429] netlink: 'syz.4.13656': attribute type 1 has an invalid length. [ 1369.845522][ T9] usb 1-1: bad CDC descriptors [ 1369.879055][ T5429] netlink: 232 bytes leftover after parsing attributes in process `syz.4.13656'. [ 1369.900395][ T9] usb 1-1: bad CDC descriptors [ 1370.065612][T13794] usb 1-1: USB disconnect, device number 22 [ 1370.463525][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1370.571662][T14646] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1370.680572][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1370.704316][ T9] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 1370.723383][ T9] usb 4-1: config 0 has no interface number 0 [ 1370.741251][ T9] usb 4-1: config 0 interface 237 has no altsetting 0 [ 1370.764454][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1370.774315][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.784217][ T9] usb 4-1: Product: syz [ 1370.791104][T14646] usb 3-1: config 0 has an invalid interface number: 36 but max is 0 [ 1370.800294][T14646] usb 3-1: config 0 has no interface number 0 [ 1370.809315][ T9] usb 4-1: Manufacturer: syz [ 1370.826014][ T9] usb 4-1: SerialNumber: syz [ 1370.843726][T14646] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72 [ 1370.853776][T14646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.864921][T14646] usb 3-1: Product: syz [ 1370.869869][T14646] usb 3-1: Manufacturer: syz [ 1370.874676][T14646] usb 3-1: SerialNumber: syz [ 1370.893331][ T9] usb 4-1: config 0 descriptor?? [ 1370.902987][T14646] usb 3-1: config 0 descriptor?? [ 1370.934250][T14646] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1370.941639][ T9] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 found [ 1371.068315][ T5524] geneve0: entered promiscuous mode [ 1371.190765][ T9] snd_usb_podhd 4-1:0.237: cannot get proper max packet size [ 1371.198572][ T9] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 now disconnected [ 1371.226910][ T9] snd_usb_podhd: probe of 4-1:0.237 failed with error -22 [ 1371.396060][T14646] gspca_spca505: reg write: error -71 [ 1371.416225][T14646] spca505: probe of 3-1:0.36 failed with error -5 [ 1371.433132][ T9] usb 4-1: USB disconnect, device number 17 [ 1371.446413][T14646] usb 3-1: USB disconnect, device number 27 [ 1372.087151][ T5569] loop4: detected capacity change from 0 to 1024 [ 1372.134526][ T5569] EXT4-fs: Ignoring removed nobh option [ 1372.165720][ T5569] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1372.248753][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13686'. [ 1372.260232][ T5579] netlink: 540 bytes leftover after parsing attributes in process `syz.0.13686'. [ 1372.265239][ T5569] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1372.272577][ T5579] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13686'. [ 1372.308485][ T5569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1372.389899][ T5569] overlay: filesystem on ./file0 is read-only [ 1372.417513][ T5589] loop2: detected capacity change from 0 to 8 [ 1372.430769][T23407] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.479352][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.496402][ T5589] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1372.519560][ T5589] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1372.538542][ T5599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13690'. [ 1373.051579][ T5633] loop4: detected capacity change from 0 to 256 [ 1373.092758][ T5638] loop0: detected capacity change from 0 to 1024 [ 1373.110655][ T5638] EXT4-fs: Ignoring removed nobh option [ 1373.123490][ T5640] geneve0: entered promiscuous mode [ 1373.174833][ T5638] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1373.229468][ T5638] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1373.273687][ T5638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1373.348966][ T5638] overlay: filesystem on ./file0 is read-only [ 1373.393889][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.893030][ T5685] loop0: detected capacity change from 0 to 256 [ 1373.943990][ T5637] loop3: detected capacity change from 0 to 32768 [ 1373.971850][ T5637] jfs_strtoUCS: char2uni returned -22. [ 1373.982491][ T5637] charset = cp949, char = 0xd4 [ 1374.039720][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1374.259597][ T9] usb 3-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 1374.299145][ T9] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1374.336788][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.380693][ T9] usb 3-1: config 0 descriptor?? [ 1374.413449][ T9] usb 3-1: bad CDC descriptors [ 1374.436042][ T9] usb 3-1: bad CDC descriptors [ 1374.682910][ T9] usb 3-1: USB disconnect, device number 28 [ 1374.689893][T13794] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1374.692473][ T5722] loop3: detected capacity change from 0 to 1024 [ 1374.729203][ T5722] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1374.740593][ T5722] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 1374.759521][ T5722] EXT4-fs (loop3): journal inode is deleted [ 1374.911368][T13794] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1374.921324][T13794] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1374.931077][T13794] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 1374.941328][T13794] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1374.953781][T13794] usb 1-1: config 129 has no interface number 0 [ 1374.960376][T13794] usb 1-1: config 129 has no interface number 1 [ 1374.967452][T13794] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1375.001429][T13794] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1375.015176][T13794] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1375.029147][T13794] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1375.037571][T13794] usb 1-1: config 129 interface 5 has no altsetting 0 [ 1375.067669][T13794] usb 1-1: string descriptor 0 read error: -22 [ 1375.074468][T13794] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1375.080036][T14646] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1375.084560][T13794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.118323][T13794] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1375.134542][T13794] usb 1-1: MIDIStreaming interface descriptor not found [ 1375.304492][T14646] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 44, changing to 9 [ 1375.338467][T14646] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 8240, setting to 1024 [ 1375.374506][T14646] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1375.386320][T14646] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1375.399921][T14646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.414271][T14646] usb 4-1: Product: syz [ 1375.420878][ T2181] usb 1-1: USB disconnect, device number 23 [ 1375.430182][T14646] usb 4-1: Manufacturer: syz [ 1375.438006][T14646] usb 4-1: SerialNumber: syz [ 1375.460625][T14646] usb 4-1: config 0 descriptor?? [ 1375.482771][T14646] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 1375.510624][T14646] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 1375.547426][T14646] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1375.556679][T14646] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1375.594667][T14646] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1375.613799][ T5810] loop4: detected capacity change from 0 to 8 [ 1375.630293][T14646] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 1375.642888][ T5814] loop2: detected capacity change from 0 to 64 [ 1375.656094][T14646] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 1375.656429][ T5810] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1375.702209][T14646] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1375.716380][ T5810] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1375.747081][T14646] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 1375.780043][T14646] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 1375.816481][T14646] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 1375.826445][T14646] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 1375.868768][T14646] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 1375.889999][T14646] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1375.933244][T14646] usb 4-1: USB disconnect, device number 18 [ 1375.955093][T14646] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1376.003891][T14646] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1376.020993][T14646] keyspan 4-1:0.0: device disconnected [ 1376.196481][ T5854] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1376.207334][ T5792] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1376.398317][ T5854] usb 5-1: config 0 has an invalid interface number: 36 but max is 0 [ 1376.413293][ T5854] usb 5-1: config 0 has no interface number 0 [ 1376.413935][ T5792] usb 3-1: Using ep0 maxpacket: 16 [ 1376.423961][ T2181] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1376.437366][ T5792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1376.437801][ T5854] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72 [ 1376.460468][ T5792] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1376.471406][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.485119][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.493729][ T5854] usb 5-1: Product: syz [ 1376.496001][ T5792] usb 3-1: Product: syz [ 1376.498138][ T5854] usb 5-1: Manufacturer: syz [ 1376.509986][ T5792] usb 3-1: Manufacturer: syz [ 1376.512556][ T5854] usb 5-1: SerialNumber: syz [ 1376.519163][ T5792] usb 3-1: SerialNumber: syz [ 1376.525189][ T5854] usb 5-1: config 0 descriptor?? [ 1376.541550][ T5792] usb 3-1: config 0 descriptor?? [ 1376.542908][ T5854] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1376.556378][ T5792] hub 3-1:0.0: bad descriptor, ignoring hub [ 1376.575640][ T5792] hub: probe of 3-1:0.0 failed with error -5 [ 1376.585164][ T5792] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input82 [ 1376.619471][ T2181] usb 1-1: Using ep0 maxpacket: 32 [ 1376.628497][ T2181] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1376.638124][ T2181] usb 1-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 1376.648372][ T2181] usb 1-1: Product: syz [ 1376.670733][ T2181] usb 1-1: config 0 descriptor?? [ 1376.929637][ T2181] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input83 [ 1377.034959][ T5854] gspca_spca505: reg write: error -71 [ 1377.049849][ T5854] spca505: probe of 5-1:0.36 failed with error -5 [ 1377.073393][ T5854] usb 5-1: USB disconnect, device number 26 [ 1377.275528][ T2181] input: failed to attach handler mousedev to device input83, error: -5 [ 1377.291908][T14646] usb 3-1: USB disconnect, device number 29 [ 1377.296421][ T2181] usb 1-1: USB disconnect, device number 24 [ 1377.699793][ T5968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1378.430332][ T6014] can: request_module (can-proto-3) failed. [ 1378.634858][T14646] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1378.826003][ T6042] netlink: 'syz.2.13766': attribute type 1 has an invalid length. [ 1378.851574][T14646] usb 4-1: Using ep0 maxpacket: 16 [ 1378.864468][T14646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1378.898120][T14646] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1378.920258][T14646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.949086][T14646] usb 4-1: Product: syz [ 1378.960509][T14646] usb 4-1: Manufacturer: syz [ 1378.980574][T14646] usb 4-1: SerialNumber: syz [ 1379.011319][T14646] usb 4-1: config 0 descriptor?? [ 1379.033442][T14646] hub 4-1:0.0: bad descriptor, ignoring hub [ 1379.050426][ T6008] loop4: detected capacity change from 0 to 32768 [ 1379.057591][T14646] hub: probe of 4-1:0.0 failed with error -5 [ 1379.072780][T14646] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input84 [ 1379.123034][ T6008] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1379.364627][ T6008] XFS (loop4): Ending clean mount [ 1379.429000][ T6083] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1379.505167][T23407] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1379.524322][ T6077] can: request_module (can-proto-3) failed. [ 1379.828554][ T6096] netlink: 'syz.4.13775': attribute type 21 has an invalid length. [ 1379.846995][ C0] vkms_vblank_simulate: vblank timer overrun [ 1380.426494][ T6131] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13788'. [ 1381.691061][ T5792] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1381.721399][ T6179] loop0: detected capacity change from 0 to 32768 [ 1381.790032][ T6179] [ 1381.790032][ T6179] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1381.790032][ T6179] [ 1381.876915][ T6179] __jfs_setxattr: xattr_size = 67, new_size = 161 [ 1381.897346][ T5792] usb 3-1: Using ep0 maxpacket: 32 [ 1381.916514][ T5792] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1381.939584][ T5792] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1381.962163][ T5792] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1381.971614][ T5792] usb 3-1: config 1 has no interface number 0 [ 1381.991478][ T5792] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1382.016357][ T5792] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1382.034243][ T5792] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1382.040461][ T59] [ 1382.040461][ T59] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1382.040461][ T59] [ 1382.043823][ T5792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.064763][ T59] [ 1382.064763][ T59] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1382.064763][ T59] [ 1382.086177][ T5792] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1382.093578][ T5788] [ 1382.093578][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1382.093578][ T5788] [ 1382.106173][ T5788] [ 1382.106173][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1382.106173][ T5788] [ 1382.121579][ T111] [ 1382.121579][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1382.121579][ T111] [ 1382.141881][ T111] ================================================================== [ 1382.150365][ T111] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x520 [ 1382.157248][ T111] Write of size 8 at addr ffff88805d576040 by task jfsCommit/111 [ 1382.165155][ T111] [ 1382.167489][ T111] CPU: 0 PID: 111 Comm: jfsCommit Not tainted syzkaller #0 [ 1382.175227][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1382.185480][ T111] Call Trace: [ 1382.188766][ T111] [ 1382.191723][ T111] dump_stack_lvl+0x16c/0x230 [ 1382.196445][ T111] ? __lock_acquire+0x7c80/0x7c80 [ 1382.201613][ T111] ? show_regs_print_info+0x20/0x20 [ 1382.207290][ T111] ? load_image+0x3b0/0x3b0 [ 1382.211916][ T111] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1382.217589][ T111] ? __virt_addr_valid+0x18c/0x540 [ 1382.222989][ T111] ? __virt_addr_valid+0x469/0x540 [ 1382.228821][ T111] print_report+0xac/0x220 [ 1382.233445][ T111] ? txEnd+0x32d/0x520 [ 1382.237855][ T111] kasan_report+0x117/0x150 [ 1382.242747][ T111] ? txEnd+0x32d/0x520 [ 1382.246967][ T111] kasan_check_range+0x288/0x290 [ 1382.252212][ T111] txEnd+0x32d/0x520 [ 1382.256223][ T111] jfs_lazycommit+0x5a6/0xa60 [ 1382.261009][ T111] ? txFreelock+0x5a0/0x5a0 [ 1382.265619][ T111] ? do_task_dead+0xd0/0xd0 [ 1382.270137][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 1382.275101][ T111] kthread+0x2fa/0x390 [ 1382.279181][ T111] ? txFreelock+0x5a0/0x5a0 [ 1382.283874][ T111] ? kthread_blkcg+0xd0/0xd0 [ 1382.288572][ T111] ret_from_fork+0x48/0x80 [ 1382.293227][ T111] ? kthread_blkcg+0xd0/0xd0 [ 1382.298016][ T111] ret_from_fork_asm+0x11/0x20 [ 1382.303165][ T111] [ 1382.306539][ T111] [ 1382.309039][ T111] Allocated by task 6179: [ 1382.313743][ T111] kasan_set_track+0x4e/0x70 [ 1382.318445][ T111] __kasan_kmalloc+0x8f/0xa0 [ 1382.323058][ T111] lmLogOpen+0x2df/0xfb0 [ 1382.327495][ T111] jfs_mount_rw+0xea/0x670 [ 1382.331949][ T111] jfs_fill_super+0x592/0xac0 [ 1382.336903][ T111] mount_bdev+0x22b/0x2d0 [ 1382.341247][ T111] legacy_get_tree+0xea/0x180 [ 1382.346029][ T111] vfs_get_tree+0x8c/0x280 [ 1382.350480][ T111] do_new_mount+0x24b/0xa40 [ 1382.355087][ T111] __se_sys_mount+0x2da/0x3c0 [ 1382.359932][ T111] do_syscall_64+0x55/0xb0 [ 1382.364634][ T111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.370926][ T111] [ 1382.373252][ T111] Freed by task 5788: [ 1382.377492][ T111] kasan_set_track+0x4e/0x70 [ 1382.382094][ T111] kasan_save_free_info+0x2e/0x50 [ 1382.387231][ T111] ____kasan_slab_free+0x126/0x1e0 [ 1382.392446][ T111] slab_free_freelist_hook+0x130/0x1b0 [ 1382.398032][ T111] __kmem_cache_free+0xba/0x1f0 [ 1382.402942][ T111] lmLogClose+0x297/0x520 [ 1382.407552][ T111] jfs_umount+0x2ef/0x3c0 [ 1382.412076][ T111] jfs_put_super+0x8c/0x190 [ 1382.416702][ T111] generic_shutdown_super+0x134/0x2b0 [ 1382.422317][ T111] kill_block_super+0x44/0x90 [ 1382.427008][ T111] deactivate_locked_super+0x97/0x100 [ 1382.432369][ T111] cleanup_mnt+0x429/0x4c0 [ 1382.437058][ T111] task_work_run+0x1ce/0x250 [ 1382.441748][ T111] exit_to_user_mode_loop+0xe6/0x110 [ 1382.447226][ T111] exit_to_user_mode_prepare+0xf6/0x180 [ 1382.453042][ T111] syscall_exit_to_user_mode+0x1a/0x50 [ 1382.458929][ T111] do_syscall_64+0x61/0xb0 [ 1382.463355][ T111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.469334][ T111] [ 1382.471839][ T111] The buggy address belongs to the object at ffff88805d576000 [ 1382.471839][ T111] which belongs to the cache kmalloc-1k of size 1024 [ 1382.486616][ T111] The buggy address is located 64 bytes inside of [ 1382.486616][ T111] freed 1024-byte region [ffff88805d576000, ffff88805d576400) [ 1382.500769][ T111] [ 1382.503155][ T111] The buggy address belongs to the physical page: [ 1382.509821][ T111] page:ffffea0001755c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d570 [ 1382.520663][ T111] head:ffffea0001755c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1382.529779][ T111] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1382.538374][ T111] page_type: 0xffffffff() [ 1382.542888][ T111] raw: 00fff00000000840 ffff888017841dc0 0000000000000000 dead000000000001 [ 1382.551675][ T111] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1382.560611][ T111] page dumped because: kasan: bad access detected [ 1382.567213][ T111] page_owner tracks the page as allocated [ 1382.572983][ T111] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5787, tgid 5787 (syz-executor), ts 73353427859, free_ts 22222470275 [ 1382.595300][ T111] post_alloc_hook+0x1cd/0x210 [ 1382.600235][ T111] get_page_from_freelist+0x195c/0x19f0 [ 1382.605942][ T111] __alloc_pages+0x1e3/0x460 [ 1382.610725][ T111] alloc_slab_page+0x5d/0x170 [ 1382.615587][ T111] new_slab+0x87/0x2e0 [ 1382.619682][ T111] ___slab_alloc+0xc6d/0x1300 [ 1382.624362][ T111] __kmem_cache_alloc_node+0x1a2/0x260 [ 1382.629913][ T111] __kmalloc_node+0xa4/0x230 [ 1382.634504][ T111] qdisc_alloc+0x94/0xa50 [ 1382.639011][ T111] qdisc_create_dflt+0x63/0x430 [ 1382.644037][ T111] dev_activate+0x397/0x11a0 [ 1382.648704][ T111] __dev_open+0x338/0x430 [ 1382.653137][ T111] __dev_change_flags+0x20e/0x6a0 [ 1382.658344][ T111] dev_change_flags+0x88/0x1a0 [ 1382.663098][ T111] do_setlink+0xc74/0x3fb0 [ 1382.667499][ T111] rtnl_newlink+0x175b/0x2020 [ 1382.672372][ T111] page last free stack trace: [ 1382.677074][ T111] free_unref_page_prepare+0x7ce/0x8e0 [ 1382.682732][ T111] free_unref_page+0x32/0x2e0 [ 1382.687700][ T111] free_contig_range+0xa1/0x160 [ 1382.693443][ T111] destroy_args+0x80/0x850 [ 1382.698161][ T111] debug_vm_pgtable+0x3cc/0x410 [ 1382.703226][ T111] do_one_initcall+0x1fd/0x750 [ 1382.708721][ T111] do_initcall_level+0x137/0x1f0 [ 1382.713749][ T111] do_initcalls+0x69/0xd0 [ 1382.718245][ T111] kernel_init_freeable+0x3d2/0x570 [ 1382.723533][ T111] kernel_init+0x1d/0x1c0 [ 1382.728248][ T111] ret_from_fork+0x48/0x80 [ 1382.732684][ T111] ret_from_fork_asm+0x11/0x20 [ 1382.737648][ T111] [ 1382.740227][ T111] Memory state around the buggy address: [ 1382.746017][ T111] ffff88805d575f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1382.754431][ T111] ffff88805d575f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1382.762590][ T111] >ffff88805d576000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1382.770918][ T111] ^ [ 1382.777491][ T111] ffff88805d576080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1382.785642][ T111] ffff88805d576100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1382.793736][ T111] ================================================================== [ 1382.802140][ C0] vkms_vblank_simulate: vblank timer overrun [ 1382.818542][ T111] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1382.825790][ T111] CPU: 1 PID: 111 Comm: jfsCommit Not tainted syzkaller #0 [ 1382.828159][ T5792] snd_usb_pod 3-1:1.1: invalid control EP [ 1382.828176][ T5792] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 1382.828407][ T5792] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1382.832043][ T5792] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 1382.859692][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1382.869998][ T111] Call Trace: [ 1382.873285][ T111] [ 1382.876228][ T111] dump_stack_lvl+0x16c/0x230 [ 1382.880911][ T111] ? show_regs_print_info+0x20/0x20 [ 1382.886108][ T111] ? load_image+0x3b0/0x3b0 [ 1382.890920][ T111] panic+0x2c0/0x710 [ 1382.894805][ T111] ? bpf_jit_dump+0xd0/0xd0 [ 1382.899382][ T111] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1382.905482][ T111] ? _raw_spin_unlock+0x40/0x40 [ 1382.910507][ T111] ? print_memory_metadata+0x314/0x400 [ 1382.916050][ T111] ? txEnd+0x32d/0x520 [ 1382.920280][ T111] check_panic_on_warn+0x84/0xa0 [ 1382.925208][ T111] ? txEnd+0x32d/0x520 [ 1382.929526][ T111] end_report+0x6f/0x140 [ 1382.934015][ T111] kasan_report+0x128/0x150 [ 1382.938895][ T111] ? txEnd+0x32d/0x520 [ 1382.943054][ T111] kasan_check_range+0x288/0x290 [ 1382.948519][ T111] txEnd+0x32d/0x520 [ 1382.952402][ T111] jfs_lazycommit+0x5a6/0xa60 [ 1382.957252][ T111] ? txFreelock+0x5a0/0x5a0 [ 1382.961830][ T111] ? do_task_dead+0xd0/0xd0 [ 1382.966326][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 1382.971349][ T111] kthread+0x2fa/0x390 [ 1382.975406][ T111] ? txFreelock+0x5a0/0x5a0 [ 1382.980068][ T111] ? kthread_blkcg+0xd0/0xd0 [ 1382.984818][ T111] ret_from_fork+0x48/0x80 [ 1382.989398][ T111] ? kthread_blkcg+0xd0/0xd0 [ 1382.994080][ T111] ret_from_fork_asm+0x11/0x20 [ 1382.998876][ T111] [ 1383.002260][ T111] Kernel Offset: disabled [ 1383.006781][ T111] Rebooting in 86400 seconds..