last executing test programs: 8m49.05440429s ago: executing program 1 (id=2891): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) 8m48.838558633s ago: executing program 1 (id=2894): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x84, 0x482, 0x0, 0x0) 8m48.71785118s ago: executing program 1 (id=2897): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x6}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m48.54293275s ago: executing program 1 (id=2900): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002a00)={[{@dmask={'dmask', 0x3d, 0x8}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@utf8}, {@dmask={'dmask', 0x3d, 0x80}}, {@keep_last_dots}, {@keep_last_dots}, {@sys_tz}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 8m48.047054728s ago: executing program 1 (id=2905): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 8m47.243904785s ago: executing program 1 (id=2916): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) fallocate(r0, 0x10, 0x0, 0x434) 8m46.950286403s ago: executing program 32 (id=2916): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) fallocate(r0, 0x10, 0x0, 0x434) 3.032383482s ago: executing program 3 (id=10156): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000003580)=0xf2c17809, 0x4) 2.844295503s ago: executing program 3 (id=10158): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000440)) 2.712095491s ago: executing program 3 (id=10161): syz_mount_image$ocfs2(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x88c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x8, 0x443d, &(0x7f0000008c00)="$eJzs3c9vFG0dAPBnpkVaBGyRAyYmbiKJRk3TckJLYlsKpYWKQSHGy7JtF6huu6TdGg8c6o3Ek4kH44Fo4q0n0oNX/BO8eMQziRy8mJiQd9/s7mzZmd1N9212W+D9fA6dzvO7+5159pnD9IkTlSfr27n17VxhM1defbR9JfebcmlnoxjiY9Kx/1PH1z+9GcR1ctLX3pfZ3es3f/bgSgj/WPvXm2q1Wg01w6GjqZbf//ffZ6utx6Y4U6fWbufW+uWXIYSLbeOqGQoh/OLvIUQhhNkkbS45joYQzoVG3oNnv3+Y69NoXr4uXsu/W36+P315ae/Ffve/PQrhz6Vv/ODxxn++PTT97+8d3nK1TyMEAAAAAAAAAAAAAAAAAOBDtnDv7v2fTk6FV1EY3ova39ddSI7d3o+t9s23Bv/HAgAAAAAAAAAAAAAAAAAAwAfq/fv/uehCh/f/55PjTJf61R93Tv9Kn8fJYCz+5O78jcmpZP/3qC3/alTfRj28nR0K4x32fc/u/z6bqd95//f2fo7qapTudyxE8UTqPI4nJkL4a7Lx+6XoTFwqb1e+/6i8s7nWt2F8tNLxb+zen4pOsqF/r/Gfy7Q/+P3/v952NdXOH/bvEvukpeM/1LXc334X9RT/65l6xxF/ji4d/+F62mhrgZnGBFCL/x+GD4//fKb9QcX/fAghF9XGmkvNALU1TC2923qFtHT8T9XTUlNn8kF2u///n4n/jUz7JzX/72a/iOgoHf/Gqn0kVeL9/T8eH37/38y0fxLxr41/1/d/T9LxP91IHE4VqX+Svc7/C5n2BxX/+3EyzvNR6grYixrp3f5fHWkt8Q/vqiNt+c3nq7ezcU/rv1uZ+sf1/Nfst/n815z+vxs1nv/oLH3/j3Yt1+v9v5ipN+j5f6a+/uOo0vE/U09Lr53H6j97jf9Spv1Bxb++Khlpxv/9fPLZ6Ub6X6z/epKO/1cbiXFrid36z/r6Lzp8/X870/5JrP9q49+NB9vrpyId/7Ndy9WeDP7Zw/f/nUy9lvi3Ly76ZNJa/8jS8T/XtVz9/h85PP7LmXqDvv+/M8jGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Cc8lxLERj6fM4npgI4XpyfimciVYKa/mVUnn119shzCfpuXAhelwqrxRK+fXN8loxXyiVyqsh3EjyL4aRaLtUruQ3Ck9vHrQ1Gj0pFrYqK8VCJYSwkKR/M5xrtrWyXtkoPA0h3DrI+1pc3nr6pLCZX1vf+tHk5ORkWDwYw3hU/G2luFlp9N7IDWHpoO5Y1DK4evbtg7GcjX5V3tnaLJTq6Xda6pTKq4VSS53lJO+PYTyqbO1srhYqxXyp/LjZ30maSY7zi/d+fu/OVFv+w6hxnDveYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwBb2a/uGfQgjDjbM4hDDT/CXqVP7l6+K1/Lvl5/vTl5f2Xuy/6VYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5nBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCrt0jNJAEIUB+M1YqJ3HsFp2O9sVRbRwRfAEegwPo0fxEt4hRYq0KUIgmYWw2YVtkur7mgfzM/MezAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOZ5eu8+3uomIsXV5jLi7+t/cZi/lPpzP37/4gwzcjrPr93DY92Uf09H+V05WrZ5l65X358xUnu/gz0Z7tNe3+d6cq6pfZuar+97EylXEdGW/DblXFXz3gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2LIDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgWAAAAABDmbx1F3wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCvAAAA//94Oh30") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.068610839s ago: executing program 2 (id=10168): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000f00)={0x0, @in6={{0xa, 0x4e20, 0x7b3fae04, @mcast1, 0x3}}, 0x0, 0xea}, 0x90) 1.87449814s ago: executing program 2 (id=10169): r0 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 1.743116418s ago: executing program 3 (id=10171): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/45, 0x2d}, {0x0}], 0x2, 0x0, 0x0) 1.598513826s ago: executing program 2 (id=10173): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x20) 1.447060925s ago: executing program 2 (id=10174): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7) 1.430788676s ago: executing program 3 (id=10175): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000380)) 1.233203037s ago: executing program 2 (id=10177): r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000000180)=""/161, 0xa1) 1.232470388s ago: executing program 3 (id=10178): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101", 0x32}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) 1.089852616s ago: executing program 2 (id=10180): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 891.188728ms ago: executing program 0 (id=10182): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x2c, 0x3a, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="9dfa5f8a"]}, @typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) 823.730292ms ago: executing program 4 (id=10183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x80000001}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2402}, @CTA_STATUS_MASK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24000040) 770.716185ms ago: executing program 4 (id=10184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "fefe807eb37b"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) 740.068347ms ago: executing program 0 (id=10185): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) 623.851934ms ago: executing program 4 (id=10186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="b90000000044268cb89e14f088a865e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) 618.664274ms ago: executing program 0 (id=10187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x203, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) 458.517393ms ago: executing program 0 (id=10188): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='hfsplus\x00', 0x401, 0x0) 363.846489ms ago: executing program 4 (id=10189): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @local}, 0x800, 0x0, 0x2, 0x1}, 0x20) 338.19309ms ago: executing program 0 (id=10190): iopl(0x3) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 200.450649ms ago: executing program 4 (id=10191): r0 = socket(0x2b, 0x80801, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x30, 0x0, &(0x7f0000000580)) 122.027833ms ago: executing program 4 (id=10192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) 0s ago: executing program 0 (id=10193): prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) kernel console output (not intermixed with test programs): from 0 to 512 [ 716.930001][T24377] EXT4-fs: Ignoring removed orlov option [ 716.983281][T24377] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 717.061258][T24377] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.8323: corrupted in-inode xattr: e_value size too large [ 717.135820][T24377] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.8323: couldn't read orphan inode 15 (err -117) [ 717.221243][T24377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.411848][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.514214][T24397] loop2: detected capacity change from 0 to 512 [ 717.541873][T24397] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 717.582372][T24397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.639309][T24397] ext4 filesystem being mounted at /2154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.669292][ T5812] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 717.680838][T24397] EXT4-fs error (device loop2): ext4_xattr_block_list:766: inode #15: comm syz.2.8335: corrupted xattr block 32: bad e_name length [ 717.702199][T24397] EXT4-fs (loop2): Remounting filesystem read-only [ 717.733884][T24406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8339'. [ 717.750742][T24404] xt_bpf: check failed: parse error [ 717.795903][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.889294][ T5812] usb 1-1: Using ep0 maxpacket: 16 [ 717.901049][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 717.919265][ T5812] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 717.958209][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.982589][ T5812] usb 1-1: config 0 descriptor?? [ 718.004209][ T5812] pegasus_notetaker: probe of 1-1:0.0 failed with error -22 [ 718.236039][ T5812] usb 1-1: USB disconnect, device number 33 [ 718.335415][T24424] loop4: detected capacity change from 0 to 64 [ 718.568413][T24432] loop2: detected capacity change from 0 to 256 [ 718.594571][T24432] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 719.102794][T24452] SET target dimension over the limit! [ 719.669911][T24475] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8373'. [ 719.733559][T24480] sit0: entered promiscuous mode [ 719.755786][T24480] netlink: 'syz.0.8376': attribute type 1 has an invalid length. [ 719.790136][T24480] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8376'. [ 720.179288][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 720.379304][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 720.390020][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.412066][ T9] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 720.436352][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.454614][ T9] usb 4-1: Product: syz [ 720.458987][ T9] usb 4-1: Manufacturer: syz [ 720.466890][ T9] usb 4-1: SerialNumber: syz [ 720.476505][ T9] usb 4-1: config 0 descriptor?? [ 720.488795][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 720.495648][ T5812] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 720.513818][ T9] usb 4-1: selecting invalid altsetting 1 [ 720.695419][ T5812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.722754][ T5812] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 720.735581][T24514] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13) [ 720.752433][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.762389][ T5812] usb 1-1: Product: syz [ 720.766619][ T5812] usb 1-1: Manufacturer: syz [ 720.772080][ T5812] usb 1-1: SerialNumber: syz [ 720.780545][ T5812] usb 1-1: config 0 descriptor?? [ 720.791324][ T5812] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 720.920797][ T9] usb 4-1: USB disconnect, device number 45 [ 720.987897][T24508] loop4: detected capacity change from 0 to 32768 [ 721.031345][T24508] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 721.117602][ T5812] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 721.228540][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.295493][T12372] ocfs2: Unmounting device (7,4) on (node local) [ 721.363499][ T9] usb 1-1: USB disconnect, device number 34 [ 721.388755][T24523] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 721.691427][T24533] loop4: detected capacity change from 0 to 512 [ 721.741229][T24538] loop2: detected capacity change from 0 to 16 [ 721.771327][T24540] openvswitch: netlink: IP tunnel dst address not specified [ 721.793890][T24538] erofs: (device loop2): mounted with root inode @ nid 36. [ 721.861147][T24533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.883391][T24538] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 25964 @ lcn 143 of nid 36 [ 721.957342][T24538] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 721.990588][T24533] ext4 filesystem being mounted at /1302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 722.038052][T24538] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 25964 @ lcn 143 of nid 36 [ 722.069940][T24538] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 722.073516][T24533] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 722.125931][T24538] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 71 of nid 36 [ 722.128504][T24533] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 64512 [ 722.177486][T24533] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.8399: Failed to acquire dquot type 0 [ 722.321427][T12372] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.354928][T24552] loop2: detected capacity change from 0 to 512 [ 722.372216][T24552] EXT4-fs: Ignoring removed bh option [ 722.384760][T24552] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 722.429821][T24552] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 722.462455][T24552] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 722.510917][T24552] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 722.558837][T24552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.772122][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.212685][T24586] loop3: detected capacity change from 0 to 764 [ 723.240149][T24586] rock: directory entry would overflow storage [ 723.251918][T24586] rock: sig=0x4654, size=5, remaining=4 [ 723.294630][T24584] loop4: detected capacity change from 0 to 4096 [ 723.309780][T24584] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 723.387577][T24584] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 723.518464][T24584] ntfs3: loop4: ino=21, The size of extended attributes must not exceed 64KiB [ 723.557855][ T28] audit: type=1326 audit(2000000011.340:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24594 comm="syz.3.8427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 723.608388][ T28] audit: type=1326 audit(2000000011.340:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24594 comm="syz.3.8427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 723.702455][ T28] audit: type=1326 audit(2000000011.380:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24594 comm="syz.3.8427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 723.786596][T24599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8430'. [ 723.795935][ T28] audit: type=1326 audit(2000000011.380:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24594 comm="syz.3.8427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 723.824207][ T28] audit: type=1326 audit(2000000011.380:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24594 comm="syz.3.8427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 724.367837][T24621] loop4: detected capacity change from 0 to 4096 [ 724.413259][T24621] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 724.427187][T24621] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x4 as bad. Run chkdsk. [ 724.429388][ T5812] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 724.455529][T24621] ntfs: (device loop4): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 724.659184][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 724.681933][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 724.710378][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 724.736539][ T5812] usb 1-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 724.751064][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.769118][ T5812] usb 1-1: Product: syz [ 724.774976][ T5812] usb 1-1: Manufacturer: syz [ 724.789101][ T5812] usb 1-1: SerialNumber: syz [ 724.809909][ T5812] usb 1-1: config 0 descriptor?? [ 725.038446][ T5812] usb 1-1: USB disconnect, device number 35 [ 725.098656][T24622] loop3: detected capacity change from 0 to 32768 [ 725.150692][T24622] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 725.210828][T24622] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 725.292259][T24622] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 725.329258][T24622] OCFS2: Returning error to the calling process. [ 725.343868][T24622] (syz.3.8439,24622,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 725.372418][T24622] (syz.3.8439,24622,1):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 725.389408][T24622] (syz.3.8439,24622,1):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 725.408179][T24622] (syz.3.8439,24622,1):ocfs2_mknod:306 ERROR: status = -5 [ 725.428807][T24622] (syz.3.8439,24622,1):ocfs2_mknod:502 ERROR: status = -5 [ 725.446189][T24622] (syz.3.8439,24622,1):ocfs2_mkdir:659 ERROR: status = -5 [ 725.463227][T24650] loop2: detected capacity change from 0 to 256 [ 725.531602][T24650] FAT-fs (loop2): Directory bread(block 64) failed [ 725.550587][T24650] FAT-fs (loop2): Directory bread(block 65) failed [ 725.559898][T24650] FAT-fs (loop2): Directory bread(block 66) failed [ 725.580415][T24650] FAT-fs (loop2): Directory bread(block 67) failed [ 725.604990][T24650] FAT-fs (loop2): Directory bread(block 68) failed [ 725.635985][T24650] FAT-fs (loop2): Directory bread(block 69) failed [ 725.645310][T24650] FAT-fs (loop2): Directory bread(block 70) failed [ 725.653290][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 725.653428][T24650] FAT-fs (loop2): Directory bread(block 71) failed [ 725.668127][T24650] FAT-fs (loop2): Directory bread(block 72) failed [ 725.675539][T24650] FAT-fs (loop2): Directory bread(block 73) failed [ 725.879136][ T7104] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 726.064425][ T7104] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.098789][T24664] ax25_connect(): syz.2.8459 uses autobind, please contact jreuter@yaina.de [ 726.102967][ T7104] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 726.128623][ T7104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.149603][ T7104] usb 5-1: Product: syz [ 726.155811][ T7104] usb 5-1: Manufacturer: syz [ 726.179135][ T7104] usb 5-1: SerialNumber: syz [ 726.195164][ T7104] usb 5-1: config 0 descriptor?? [ 726.206075][ T7104] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 726.249623][T24668] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8461'. [ 726.461152][ T7104] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 726.506319][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.708402][ T7104] usb 5-1: USB disconnect, device number 24 [ 726.817807][T24688] netlink: 'syz.0.8471': attribute type 10 has an invalid length. [ 726.831074][T24688] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.8471'. [ 726.864171][T24688] openvswitch: netlink: Flow key attr not present in new flow. [ 726.876616][T24690] Non-string source [ 726.993560][T24695] loop2: detected capacity change from 0 to 256 [ 727.004955][T24696] tmpfs: Bad value for 'mpol' [ 727.096410][T24695] FAT-fs (loop2): Directory bread(block 64) failed [ 727.124451][T24695] FAT-fs (loop2): Directory bread(block 65) failed [ 727.148489][T24695] FAT-fs (loop2): Directory bread(block 66) failed [ 727.159725][T24695] FAT-fs (loop2): Directory bread(block 67) failed [ 727.166469][T24695] FAT-fs (loop2): Directory bread(block 68) failed [ 727.189166][T24695] FAT-fs (loop2): Directory bread(block 69) failed [ 727.206095][T24695] FAT-fs (loop2): Directory bread(block 70) failed [ 727.221707][T24695] FAT-fs (loop2): Directory bread(block 71) failed [ 727.240239][T24695] FAT-fs (loop2): Directory bread(block 72) failed [ 727.246854][T24695] FAT-fs (loop2): Directory bread(block 73) failed [ 728.219354][T24743] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 728.522511][T24759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8506'. [ 728.551624][T24759] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8506'. [ 728.846294][T24772] netlink: 'syz.3.8512': attribute type 21 has an invalid length. [ 728.863614][T24772] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8512'. [ 728.899507][ T5812] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 729.091515][ T5812] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 729.116798][ T5812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.153817][ T5812] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 729.164258][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.180844][ T5812] usb 1-1: Product: syz [ 729.185452][ T5812] usb 1-1: Manufacturer: syz [ 729.191584][ T5812] usb 1-1: SerialNumber: syz [ 729.207267][ T5812] usb 1-1: config 0 descriptor?? [ 729.224212][ T5812] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 729.614882][T24799] loop3: detected capacity change from 0 to 16 [ 729.660007][T24799] erofs: (device loop3): mounted with root inode @ nid 36. [ 729.672164][ T5812] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 729.689469][ T5812] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 729.708190][T24799] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 729.721497][ T5812] usb 1-1: USB disconnect, device number 36 [ 729.734727][T24799] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 729.876109][T24807] vlan0: entered promiscuous mode [ 729.929276][ T7104] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 729.939379][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 730.129290][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 730.136803][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.153119][ T7104] usb 3-1: Using ep0 maxpacket: 8 [ 730.160776][ T7104] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.166836][ T9] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 730.180220][ T7104] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 730.180253][ T7104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.180284][ T7104] usb 3-1: Product: syz [ 730.180301][ T7104] usb 3-1: Manufacturer: syz [ 730.180317][ T7104] usb 3-1: SerialNumber: syz [ 730.212482][ T7104] usb 3-1: config 0 descriptor?? [ 730.226065][ T7104] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 730.249391][ T7104] usb 3-1: selecting invalid altsetting 1 [ 730.259368][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.278032][ T9] usb 5-1: Product: syz [ 730.289233][ T9] usb 5-1: Manufacturer: syz [ 730.293977][ T9] usb 5-1: SerialNumber: syz [ 730.313028][ T9] usb 5-1: config 0 descriptor?? [ 730.329847][ T9] usb 5-1: bad CDC descriptors [ 730.335418][ T9] usb 5-1: unsupported MDLM descriptors [ 730.363259][T24817] AppArmor: change_hat: Invalid input 'ˆ' [ 730.536356][ T23] usb 5-1: USB disconnect, device number 25 [ 730.671165][ T9] usb 3-1: USB disconnect, device number 40 [ 730.829973][T24815] loop3: detected capacity change from 0 to 40427 [ 730.850560][T24815] F2FS-fs (loop3): invalid crc value [ 730.868479][T24815] F2FS-fs (loop3): Found nat_bits in checkpoint [ 731.005004][T24815] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 731.824509][T24854] netlink: 'syz.4.8549': attribute type 22 has an invalid length. [ 731.838651][T24850] loop3: detected capacity change from 0 to 4096 [ 731.987623][T24850] ntfs: volume version 3.1. [ 732.031406][T24850] __ntfs_warning: 1 callbacks suppressed [ 732.031425][T24850] ntfs: (device loop3): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 732.718737][T24884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8565'. [ 732.937674][T24894] netlink: 'syz.4.8571': attribute type 16 has an invalid length. [ 733.151846][T24904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8576'. [ 733.167214][T24904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8576'. [ 733.191507][T24904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8576'. [ 733.353746][T24912] loop2: detected capacity change from 0 to 16 [ 733.373501][T24912] erofs: (device loop2): mounted with root inode @ nid 36. [ 733.618787][T24922] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 733.800184][ T28] audit: type=1326 audit(2000000021.590:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24927 comm="syz.0.8587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bcf9aeb9 code=0x7ffc0000 [ 733.836853][ T28] audit: type=1326 audit(2000000021.610:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24927 comm="syz.0.8587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bcf9aeb9 code=0x7ffc0000 [ 733.890316][ T28] audit: type=1326 audit(2000000021.650:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24927 comm="syz.0.8587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f28bcf9aeb9 code=0x7ffc0000 [ 733.941328][ T28] audit: type=1326 audit(2000000021.650:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24927 comm="syz.0.8587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bcf9aeb9 code=0x7ffc0000 [ 734.019273][T24934] netlink: 'syz.3.8590': attribute type 1 has an invalid length. [ 734.024311][ T28] audit: type=1326 audit(2000000021.650:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24927 comm="syz.0.8587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bcf9aeb9 code=0x7ffc0000 [ 734.334127][T24947] netlink: 'syz.3.8594': attribute type 1 has an invalid length. [ 734.559414][T24955] ieee802154 phy0 wpan0: encryption failed: -90 [ 734.588921][T24957] netlink: 'syz.4.8601': attribute type 5 has an invalid length. [ 734.617827][T24957] ip6erspan1: entered allmulticast mode [ 734.709177][T24961] printk: syz.0.8603 (24961): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 735.348236][T24987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 735.383342][T24989] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 735.394309][T24989] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 735.405841][T24989] overlayfs: missing 'lowerdir' [ 735.847198][T25007] loop3: detected capacity change from 0 to 16 [ 735.869380][T25007] erofs: (device loop3): mounted with root inode @ nid 36. [ 736.272575][T25025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8635'. [ 736.392536][T25029] loop2: detected capacity change from 0 to 128 [ 736.409457][ T8097] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 736.599147][ T8097] usb 5-1: Using ep0 maxpacket: 8 [ 736.612761][ T8097] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 736.629204][ T8097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.650941][ T8097] usb 5-1: config 0 has no interface number 0 [ 736.664078][ T8097] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 736.719150][ T8097] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 736.746463][ T8097] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 736.772392][ T8097] usb 5-1: config 0 interface 52 has no altsetting 0 [ 736.790113][ T8097] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 736.806260][ T8097] usb 5-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 736.829238][ T8097] usb 5-1: Product: syz [ 736.833481][ T8097] usb 5-1: SerialNumber: syz [ 736.849887][ T8097] usb 5-1: config 0 descriptor?? [ 737.081917][ T8097] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 737.117788][ T8097] synaptics_usb: probe of 5-1:0.52 failed with error -5 [ 737.266129][T25046] loop2: detected capacity change from 0 to 4096 [ 737.287533][ T23] usb 5-1: USB disconnect, device number 26 [ 737.340120][T25046] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 737.369753][T25046] UDF-fs: Scanning with blocksize 512 failed [ 737.439394][T25046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 737.505536][T25046] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 737.930453][T25068] loop3: detected capacity change from 0 to 22 [ 737.944039][T25068] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 737.976259][T25068] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 738.899965][T25097] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8670'. [ 738.917909][T25097] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8670'. [ 738.939204][T25097] netlink: 'syz.4.8670': attribute type 3 has an invalid length. [ 738.958752][T25097] netlink: 11 bytes leftover after parsing attributes in process `syz.4.8670'. [ 739.544640][T25119] vivid-007: disconnect [ 739.552883][T25118] vivid-007: reconnect [ 739.595599][T25121] loop4: detected capacity change from 0 to 256 [ 739.708206][T25121] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 739.975484][T25133] netlink: zone id is out of range [ 739.990273][T25133] netlink: zone id is out of range [ 739.995499][T25133] netlink: zone id is out of range [ 740.011960][T25133] netlink: zone id is out of range [ 740.017156][T25133] netlink: zone id is out of range [ 740.050461][T25133] netlink: get zone limit has 4 unknown bytes [ 740.427691][T25125] loop3: detected capacity change from 0 to 32768 [ 740.469228][T25125] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.8684 (25125) [ 740.562051][T25125] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 740.594541][T25125] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 740.632604][T25125] BTRFS info (device loop3): force zlib compression, level 3 [ 740.669150][T25125] BTRFS info (device loop3): turning on flush-on-commit [ 740.676247][T25125] BTRFS info (device loop3): max_inline at 4096 [ 740.711080][T25125] BTRFS info (device loop3): using free space tree [ 740.859410][T25125] BTRFS info (device loop3): enabling ssd optimizations [ 740.866516][T25125] BTRFS info (device loop3): auto enabling async discard [ 741.028887][T25125] BTRFS error (device loop3): balance: mixed groups data and metadata options must be the same [ 741.190687][ T5771] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 741.345236][ T7238] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop3 scanned by udevd (7238) [ 741.409642][ T9] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 741.612861][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 741.635960][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 741.678866][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 741.707257][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.789531][T25185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 741.796911][T25185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 741.813484][ T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 741.856781][T25199] loop4: detected capacity change from 0 to 4096 [ 741.905907][T25199] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 742.096568][T25199] ntfs3: loop4: failed to convert "076c" to cp949 [ 742.275432][ T5812] usb 1-1: USB disconnect, device number 37 [ 742.452849][T25215] ieee802154 phy0 wpan0: encryption failed: -90 [ 743.008018][T25211] loop2: detected capacity change from 0 to 32768 [ 743.039785][T25211] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 743.258511][ T5786] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 743.396897][T25244] loop4: detected capacity change from 0 to 512 [ 743.496311][T25244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.783028][T12372] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.438671][T25287] loop3: detected capacity change from 0 to 128 [ 744.463824][T25287] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 744.546868][T25287] ext4 filesystem being mounted at /2113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 744.586454][T25294] loop4: detected capacity change from 0 to 512 [ 744.653841][T25294] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec118, mo2=0002] [ 744.672991][T25287] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 49 (only 1 groups) [ 744.697828][T25294] System zones: 0-2, 18-18, 34-35 [ 744.731708][T25294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.781481][T25294] ext4 filesystem being mounted at /1381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.846968][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 744.987311][T12372] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.163847][T25313] loop4: detected capacity change from 0 to 64 [ 745.309463][ T5812] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 745.499158][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 745.520524][ T5812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.538933][ T5812] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 745.559422][ T5812] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 745.595703][ T5812] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 745.609098][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.639201][ T5812] usb 4-1: Product: syz [ 745.643451][ T5812] usb 4-1: Manufacturer: syz [ 745.648107][ T5812] usb 4-1: SerialNumber: syz [ 745.687947][ T5812] cdc_ncm 4-1:1.0: skipping garbage [ 745.694368][ T5812] cdc_ncm 4-1:1.0: skipping garbage [ 745.705044][ T5812] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 745.716895][T25335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8775'. [ 745.726212][ T5812] cdc_ncm 4-1:1.0: bind() failure [ 745.895380][ T5812] usb 4-1: USB disconnect, device number 46 [ 745.931582][T25338] loop2: detected capacity change from 0 to 4096 [ 746.004433][T25342] bridge0: port 1(bond0) entered blocking state [ 746.013564][T25342] bridge0: port 1(bond0) entered disabled state [ 746.020537][T25342] bond0: entered allmulticast mode [ 746.032171][T25342] bond0: entered promiscuous mode [ 746.044966][T25338] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 746.080523][T25338] ntfs3: loop2: Failed to load $Extend (-22). [ 746.095530][T25338] ntfs3: loop2: Failed to initialize $Extend. [ 746.945684][T14444] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 747.504242][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.513250][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.600163][T25406] loop3: detected capacity change from 0 to 256 [ 747.842707][T25412] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 748.232365][T25400] loop2: detected capacity change from 0 to 32768 [ 748.234538][T25424] loop4: detected capacity change from 0 to 4096 [ 748.282846][T25424] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 748.640881][T25434] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 748.845029][T25442] netlink: 'syz.4.8829': attribute type 2 has an invalid length. [ 748.876061][T25442] netlink: 5356 bytes leftover after parsing attributes in process `syz.4.8829'. [ 748.927206][T25444] loop3: detected capacity change from 0 to 256 [ 749.041489][T25448] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 749.858978][T25486] loop2: detected capacity change from 0 to 1024 [ 749.908154][T25486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.045688][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.408209][T25510] netlink: 'syz.2.8859': attribute type 1 has an invalid length. [ 750.426711][T25510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8859'. [ 750.662313][T25521] Non-string source [ 750.793935][T25524] loop2: detected capacity change from 0 to 1024 [ 751.086459][T25530] loop2: detected capacity change from 0 to 4096 [ 751.112356][T25530] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 751.177285][T25530] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 751.392686][T25512] loop3: detected capacity change from 0 to 32768 [ 751.475276][T25512] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 751.615651][T25512] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 751.691036][T25512] XFS (loop3): Starting recovery (logdev: internal) [ 751.739909][T25512] XFS (loop3): Ending recovery (logdev: internal) [ 751.749538][ T5812] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 751.810077][T25512] XFS (loop3): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 751.881646][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 751.945902][ T5812] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 751.978408][ T5812] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 751.999616][T25557] random: crng reseeded on system resumption [ 752.006924][ T5812] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 752.028062][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.059526][T25545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 752.079343][T25545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 752.092877][ T5812] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 752.465108][ T5812] usb 3-1: USB disconnect, device number 41 [ 752.849110][ T7104] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 753.037573][T25586] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8892'. [ 753.050521][ T7104] usb 5-1: Using ep0 maxpacket: 8 [ 753.068670][ T7104] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 753.090407][ T7104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.106472][ T7104] usb 5-1: Product: syz [ 753.111218][ T7104] usb 5-1: Manufacturer: syz [ 753.119073][ T7104] usb 5-1: SerialNumber: syz [ 753.329662][ T23] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 753.545822][ T23] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 753.557730][ T7104] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 753.569280][ T23] usb 4-1: config 179 has no interface number 0 [ 753.575650][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 753.590566][ T7104] mxuport: probe of 5-1:254.0 failed with error -5 [ 753.601282][ T7104] usb 5-1: USB disconnect, device number 27 [ 753.608132][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 753.623550][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 753.639606][ T23] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 753.652664][ T23] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 753.674850][ T23] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 753.696223][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.708388][T25587] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 753.716335][T25587] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 753.953919][ T5812] usb 4-1: USB disconnect, device number 47 [ 753.953924][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 753.954029][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 754.257141][T25615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8906'. [ 754.267967][T25613] loop2: detected capacity change from 0 to 2048 [ 754.282033][T25613] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 754.399151][ T5808] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 754.603177][ T5808] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 754.639207][ T5808] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 754.659404][ T5808] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 754.668536][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.702975][T25607] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 754.723890][T25607] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 754.743302][ T5808] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 755.098968][ T7104] usb 5-1: USB disconnect, device number 28 [ 755.666197][T25659] netlink: 'syz.3.8929': attribute type 11 has an invalid length. [ 755.928447][T25668] binder: 25667:25668 unknown command 0 [ 755.937441][T25668] binder: 25667:25668 ioctl c0306201 200000000480 returned -22 [ 756.143647][ T28] audit: type=1326 audit(2000000043.930:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25676 comm="syz.2.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6639aeb9 code=0x7ffc0000 [ 756.197413][ T28] audit: type=1326 audit(2000000043.930:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25676 comm="syz.2.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6639aeb9 code=0x7ffc0000 [ 756.237779][ T28] audit: type=1326 audit(2000000043.970:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25676 comm="syz.2.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f8a6639aeb9 code=0x7ffc0000 [ 756.265597][ T28] audit: type=1326 audit(2000000043.970:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25676 comm="syz.2.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6639aeb9 code=0x7ffc0000 [ 756.293917][ T28] audit: type=1326 audit(2000000043.970:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25676 comm="syz.2.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6639aeb9 code=0x7ffc0000 [ 756.499863][ T5808] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 756.694131][ T5808] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 756.742449][ T5808] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 756.761856][ T5808] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 756.771481][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.794991][T25680] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 756.809399][T25680] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 756.844185][ T5808] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 756.901021][T25704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8951'. [ 757.191363][ T23] usb 4-1: USB disconnect, device number 48 [ 757.199179][ T7104] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 757.389223][ T7104] usb 3-1: Using ep0 maxpacket: 16 [ 757.396932][ T7104] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 757.405443][ T7104] usb 3-1: config 0 has no interface number 0 [ 757.411744][ T7104] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 757.423364][ T7104] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 757.440678][ T7104] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 757.451376][ T7104] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 757.460138][ T7104] usb 3-1: Product: syz [ 757.464491][ T7104] usb 3-1: SerialNumber: syz [ 757.472547][ T7104] usb 3-1: config 0 descriptor?? [ 757.481649][ T7104] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 757.504250][ T7104] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input36 [ 757.913026][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 757.923674][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 757.931064][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 757.938321][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 757.946169][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 757.954874][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 757.967572][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 757.975147][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 757.982392][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 757.989597][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 757.989600][ T5808] usb 3-1: USB disconnect, device number 42 [ 758.002513][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 758.045910][ T5808] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 758.103589][T25740] loop3: detected capacity change from 0 to 1024 [ 758.173215][T25742] xt_TCPMSS: Only works on TCP SYN packets [ 758.425005][T25750] random: crng reseeded on system resumption [ 759.049443][ T27] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 759.262794][ T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 759.279955][ T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 759.319781][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 759.359521][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.384111][T25752] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 759.400298][T25752] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 759.421461][ T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 759.732544][T25767] loop3: detected capacity change from 0 to 32768 [ 759.782374][ T27] usb 1-1: USB disconnect, device number 38 [ 759.799764][T25767] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 759.922592][T25767] XFS (loop3): Ending clean mount [ 759.937748][T25767] XFS (loop3): Quotacheck needed: Please wait. [ 759.983837][T25767] XFS (loop3): Quotacheck: Done. [ 760.039936][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 760.192422][T25795] 9pnet_fd: Insufficient options for proto=fd [ 760.290577][T25798] 0ªX¹¦À: left allmulticast mode [ 760.442724][T25806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8996'. [ 761.301689][T25843] loop4: detected capacity change from 0 to 8 [ 761.364763][T25843] SQUASHFS error: lzo decompression failed, data probably corrupt [ 761.420155][T25843] SQUASHFS error: Failed to read block 0x0: -5 [ 761.469312][T25843] SQUASHFS error: lzo decompression failed, data probably corrupt [ 761.477230][T25843] SQUASHFS error: Failed to read block 0x0: -5 [ 761.549184][ T28] audit: type=1800 audit(2000000049.330:304): pid=25843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9018" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 761.748970][T25857] loop2: detected capacity change from 0 to 16 [ 761.762533][T25857] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 761.804065][T25857] erofs: (device loop2): mounted with root inode @ nid 36. [ 762.351889][T25880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9034'. [ 762.398093][T25872] loop2: detected capacity change from 0 to 4096 [ 762.425010][T25872] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 762.554393][T25885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9036'. [ 762.600509][T25886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9035'. [ 762.639280][T25886] netlink: 312 bytes leftover after parsing attributes in process `syz.3.9035'. [ 762.771171][ T5808] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 762.912246][T25894] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒHÝ&S)¨ó&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 762.912246][T25894] SÃȘØÈžZ§6ŸÂ' [ 763.040561][ T42] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 763.102238][T25902] netlink: 'syz.0.9044': attribute type 10 has an invalid length. [ 763.132057][T25902] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9044'. [ 763.569422][ T9] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 763.585636][T25917] loop4: detected capacity change from 0 to 4096 [ 763.610670][ T5812] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 763.623227][T25917] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 763.840824][ T5812] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 763.879228][ T5812] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 763.899266][ T5812] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 763.914727][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.933407][T25911] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 763.944310][T25911] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 763.958756][ T5812] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 764.050590][ T49] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 764.074468][ T49] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 764.110645][ T5812] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 764.254571][ T5812] usb 4-1: USB disconnect, device number 49 [ 764.463177][T25941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9062'. [ 765.023495][T25947] loop3: detected capacity change from 0 to 4096 [ 765.037085][T25947] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 766.202813][T26001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9091'. [ 766.366207][T26005] x_tables: unsorted entry at hook 1 [ 766.809211][T26023] netlink: 'syz.4.9101': attribute type 1 has an invalid length. [ 767.003818][T26032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9106'. [ 767.019204][T26032] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9106'. [ 767.028524][T26032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9106'. [ 767.046458][T26032] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9106'. [ 767.056389][T26032] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9106'. [ 767.172923][T26038] netlink: 'syz.3.9110': attribute type 15 has an invalid length. [ 767.182481][T26038] netlink: 666 bytes leftover after parsing attributes in process `syz.3.9110'. [ 767.721725][T26062] loop4: detected capacity change from 0 to 16 [ 767.756484][T26062] erofs: (device loop4): mounted with root inode @ nid 36. [ 767.889244][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 768.149253][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 768.220496][ T28] audit: type=1326 audit(2000000056.010:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.3.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 768.246516][ T28] audit: type=1326 audit(2000000056.010:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.3.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 768.274813][ T28] audit: type=1326 audit(2000000056.010:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.3.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 768.309539][ T28] audit: type=1326 audit(2000000056.010:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.3.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f74c4d9ac22 code=0x7ffc0000 [ 768.337495][T26082] loop3: detected capacity change from 0 to 2048 [ 768.344085][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 768.352145][ T28] audit: type=1326 audit(2000000056.060:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.3.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f74c4d5b78e code=0x7ffc0000 [ 768.360712][T26084] xt_l2tp: missing protocol rule (udp|l2tpip) [ 768.386290][ T9] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 768.396688][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 768.420741][ T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 768.433359][ T28] audit: type=1326 audit(2000000056.120:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.3.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f74c4d9ace7 code=0x7ffc0000 [ 768.459466][ T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 768.474102][ T9] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 768.488229][ T28] audit: type=1326 audit(2000000056.120:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.3.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74c4d5b78e code=0x7ffc0000 [ 768.510907][T26082] Alternate GPT is invalid, using primary GPT. [ 768.517297][T26082] loop3: p2 p3 p7 [ 768.523732][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 768.532800][ T28] audit: type=1326 audit(2000000056.120:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.3.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74c4d9ab4b code=0x7ffc0000 [ 768.537448][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 768.569582][ T28] audit: type=1326 audit(2000000056.170:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.3.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f74c4d5b78e code=0x7ffc0000 [ 768.592707][ T9] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 768.612439][ T28] audit: type=1326 audit(2000000056.170:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.3.9130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74c4d9ab4b code=0x7ffc0000 [ 768.644785][ T9] usb 1-1: Product: syz [ 768.659325][ T9] usb 1-1: Manufacturer: syz [ 768.663989][ T9] usb 1-1: SerialNumber: syz [ 768.711853][ T9] usb 1-1: config 0 descriptor?? [ 768.742853][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 768.824117][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 768.977003][T26068] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 768.995390][ T7238] udevd[7238]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 769.009282][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 769.022539][ T23] usb 1-1: USB disconnect, device number 39 [ 769.028731][ T5782] udevd[5782]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 769.055085][ T23] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 769.268192][T26081] loop4: detected capacity change from 0 to 32768 [ 769.316557][T26081] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 769.452128][T26081] XFS (loop4): Ending clean mount [ 769.480628][T26081] XFS (loop4): Quotacheck needed: Please wait. [ 769.498472][T26103] loop3: detected capacity change from 0 to 4096 [ 769.517095][T26103] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 769.590399][T26103] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 769.600580][T26081] XFS (loop4): Quotacheck: Done. [ 769.802275][T12372] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 770.416663][T26129] loop4: detected capacity change from 0 to 1024 [ 770.458183][T26133] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 770.652663][ T49] hfsplus: b-tree write err: -5, ino 4 [ 771.387729][T26138] loop2: detected capacity change from 0 to 32768 [ 771.467811][T26138] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 771.748140][T26186] netlink: 'syz.4.9175': attribute type 21 has an invalid length. [ 771.769607][T26186] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9175'. [ 771.787639][T26186] netlink: 'syz.4.9175': attribute type 4 has an invalid length. [ 771.800421][T26138] XFS (loop2): Ending clean mount [ 771.811962][T26186] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9175'. [ 771.846027][T26138] XFS (loop2): Quotacheck needed: Please wait. [ 771.964139][T26138] XFS (loop2): Quotacheck: Done. [ 772.200124][ T5770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 772.499293][T26208] tipc: Trying to set illegal importance in message [ 772.665351][T26214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9189'. [ 772.700161][ T23] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 772.723674][T26216] netlink: 'syz.2.9190': attribute type 1 has an invalid length. [ 772.849278][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 772.901789][ T23] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 772.910438][ T23] usb 5-1: config 0 has no interface number 0 [ 772.920369][ T23] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=92.c2 [ 772.929919][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.938192][ T23] usb 5-1: Product: syz [ 772.942460][ T23] usb 5-1: Manufacturer: syz [ 772.947095][ T23] usb 5-1: SerialNumber: syz [ 772.954537][ T23] usb 5-1: config 0 descriptor?? [ 772.962648][ T23] usbserial_generic 5-1:0.244: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 772.974263][ T23] usbserial_generic 5-1:0.244: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 772.985511][ T23] usbserial_generic 5-1:0.244: device has no bulk endpoints [ 772.993985][ T23] safe_serial 5-1:0.244: safe_serial converter detected [ 773.001241][ T23] safe_serial: probe of 5-1:0.244 failed with error -22 [ 773.042078][ T9] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 773.051311][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.062018][ T9] usb 1-1: config 0 has no interface number 0 [ 773.068172][ T9] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 773.078366][ T9] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.094421][ T9] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 773.103739][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.112100][ T9] usb 1-1: Product: syz [ 773.116287][ T9] usb 1-1: Manufacturer: syz [ 773.121056][ T9] usb 1-1: SerialNumber: syz [ 773.127542][ T9] usb 1-1: config 0 descriptor?? [ 773.178626][ T5812] usb 5-1: USB disconnect, device number 29 [ 773.544548][ T9] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 773.556842][ T9] usb 1-1: USB disconnect, device number 40 [ 774.418614][T26236] netlink: 'syz.4.9200': attribute type 6 has an invalid length. [ 774.430727][T26236] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9200'. [ 774.995856][T26252] IPv6: sit1: Disabled Multicast RS [ 775.324008][T26260] loop4: detected capacity change from 0 to 2048 [ 775.359792][T26260] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 775.391291][T26260] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 775.649191][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 777.192610][T26332] x_tables: duplicate entry at hook 2 [ 777.224432][T26338] loop2: detected capacity change from 0 to 64 [ 777.404034][T26340] netlink: 'syz.3.9252': attribute type 10 has an invalid length. [ 777.430473][T26340] bridge0: port 3(dummy0) entered disabled state [ 777.437152][T26340] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.444800][T26340] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.477742][T26344] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9254'. [ 777.487781][T26340] bridge0: port 3(dummy0) entered blocking state [ 777.495792][T26340] bridge0: port 3(dummy0) entered forwarding state [ 777.505437][T26346] ipt_rpfilter: unknown options [ 777.505862][T26340] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.517605][T26340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.525219][T26340] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.532608][T26340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.567303][T26340] team0: Port device bridge0 added [ 778.041890][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 778.041909][ T28] audit: type=1326 audit(2000000065.830:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.4.9262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 778.080070][ T28] audit: type=1326 audit(2000000065.830:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.4.9262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 778.109224][ T28] audit: type=1326 audit(2000000065.870:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.4.9262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 778.136756][ T28] audit: type=1326 audit(2000000065.870:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.4.9262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 778.184659][ T28] audit: type=1326 audit(2000000065.870:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26361 comm="syz.4.9262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 778.519787][T26378] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 778.592741][T26377] loop2: detected capacity change from 0 to 2048 [ 778.633634][T26377] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 778.677578][T26383] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 778.678506][T26377] syz.2.9269: attempt to access beyond end of device [ 778.678506][T26377] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 778.870786][ T28] audit: type=1326 audit(2000000066.650:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26385 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 778.874815][T26377] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 778.930087][ T28] audit: type=1326 audit(2000000066.650:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26385 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 778.984824][ T28] audit: type=1326 audit(2000000066.680:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26385 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 778.996168][T26377] Remounting filesystem read-only [ 779.034278][T26377] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 779.067354][T26377] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 779.077326][ T28] audit: type=1326 audit(2000000066.680:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26385 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 779.122341][T26377] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 16777227 [ 779.136706][T26377] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 779.149531][ T28] audit: type=1326 audit(2000000066.680:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26385 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 779.178442][T26377] NILFS (loop2): error -5 truncating bmap (ino=16) [ 779.307041][ T5770] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 779.314417][ T5770] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 779.331390][T26395] loop3: detected capacity change from 0 to 8 [ 779.337693][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 779.354922][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 779.373079][T26395] SQUASHFS error: Failed to read block 0x285: -5 [ 779.382746][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 779.402814][T26395] SQUASHFS error: Unable to read metadata cache entry [283] [ 779.421130][ T5770] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 779.433095][T26395] SQUASHFS error: Unable to read symlink [8f:60] [ 779.449606][ T5770] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 779.466674][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 779.487858][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 779.501302][ T5770] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 779.508746][ T5770] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 780.025030][T26389] loop4: detected capacity change from 0 to 32768 [ 780.284648][T26418] loop2: detected capacity change from 0 to 1024 [ 780.302602][T26418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 780.322067][T26418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 780.344390][T26418] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 780.385398][T26418] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 780.452833][T26418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.527773][T26405] loop3: detected capacity change from 0 to 32768 [ 780.539433][T26405] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.9283 (26405) [ 780.565409][T26405] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 780.622414][T26405] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 780.661169][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.670643][T26405] BTRFS info (device loop3): using free space tree [ 780.780108][T26432] netlink: 'syz.4.9295': attribute type 20 has an invalid length. [ 780.930553][T26405] BTRFS info (device loop3): enabling ssd optimizations [ 780.937651][T26405] BTRFS info (device loop3): auto enabling async discard [ 781.129418][ T5771] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 781.289677][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 781.519492][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 781.539461][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 781.567516][ T9] usb 5-1: config 0 has no interface number 0 [ 781.589108][ T9] usb 5-1: config 0 interface 1 has no altsetting 0 [ 781.616884][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 781.644665][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.663092][ T9] usb 5-1: Product: syz [ 781.667428][ T9] usb 5-1: Manufacturer: syz [ 781.709086][ T9] usb 5-1: SerialNumber: syz [ 781.737342][ T9] usb 5-1: config 0 descriptor?? [ 781.976838][ T9] i2c-cp2615: probe of 5-1:0.1 failed with error -22 [ 782.213261][ T9] usb 5-1: USB disconnect, device number 30 [ 782.247501][T26484] loop3: detected capacity change from 0 to 4096 [ 782.269602][T26484] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 782.314947][T26484] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 782.485004][T26488] loop2: detected capacity change from 0 to 4096 [ 782.495005][T26488] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 782.561952][T26488] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 782.586946][T26493] loop3: detected capacity change from 0 to 4096 [ 782.597924][T26493] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 782.677450][T26493] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 783.148598][T26501] loop3: detected capacity change from 0 to 4096 [ 783.164790][T26501] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 783.428663][T26512] loop2: detected capacity change from 0 to 4096 [ 783.493972][T26512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.645180][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.425076][T26557] ip6gretap2: entered promiscuous mode [ 784.811014][T26569] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9355'. [ 785.519994][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 785.719337][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 785.730171][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 785.750186][ T9] usb 4-1: config 129 has an invalid interface number: 249 but max is 0 [ 785.765506][ T9] usb 4-1: config 129 has no interface number 0 [ 785.772153][ T9] usb 4-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 785.783924][ T9] usb 4-1: config 129 interface 249 altsetting 247 endpoint 0xA has invalid wMaxPacketSize 0 [ 785.809344][ T9] usb 4-1: config 129 interface 249 has no altsetting 0 [ 785.837151][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 785.859284][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.867366][ T9] usb 4-1: Product: syz [ 785.882627][ T9] usb 4-1: Manufacturer: syz [ 785.887302][ T9] usb 4-1: SerialNumber: syz [ 785.925935][T26581] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 786.040500][T26614] ip6tnl3: entered allmulticast mode [ 786.173252][T26581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.191552][T26581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.220939][ T9] smsc95xx v2.0.0 [ 786.225074][ T9] smsc95xx 4-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 786.250789][ T9] smsc95xx: probe of 4-1:129.249 failed with error -71 [ 786.278369][ T9] usb 4-1: USB disconnect, device number 50 [ 786.419152][ T23] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 786.514912][T26608] loop2: detected capacity change from 0 to 32768 [ 786.557219][T26608] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 786.610028][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.629969][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 786.639289][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 786.655503][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 786.665862][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.674266][ T23] usb 1-1: Product: syz [ 786.678640][ T23] usb 1-1: Manufacturer: syz [ 786.683586][ T23] usb 1-1: SerialNumber: syz [ 786.691366][ T23] usb 1-1: config 0 descriptor?? [ 786.704661][T26608] XFS (loop2): Ending clean mount [ 786.725885][T26634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 786.768355][T26608] XFS (loop2): Quotacheck needed: Please wait. [ 786.879263][T26608] XFS (loop2): Quotacheck: Done. [ 787.008346][ T23] usb 1-1: USB disconnect, device number 41 [ 787.096544][ T5770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 788.342997][T26662] loop2: detected capacity change from 0 to 32768 [ 788.358005][T26687] IPv6: NLM_F_CREATE should be specified when creating new route [ 788.415258][T26662] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 788.605682][T26705] xt_TCPMSS: Only works on TCP SYN packets [ 788.644733][T26662] XFS (loop2): Ending clean mount [ 788.685006][T26662] XFS (loop2): Quotacheck needed: Please wait. [ 788.787797][T26662] XFS (loop2): Quotacheck: Done. [ 788.932571][ T5770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 789.989411][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 790.198725][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 790.229057][ T9] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 790.237253][ T9] usb 4-1: Product: syz [ 790.246674][ T9] usb 4-1: SerialNumber: syz [ 790.261095][ T9] usb 4-1: config 0 descriptor?? [ 790.347434][T26778] ipip0: entered promiscuous mode [ 790.515659][ T9] hso 4-1:0.0: Failed to find BULK IN ep [ 790.731235][ T9] usb 4-1: USB disconnect, device number 51 [ 790.867523][T26802] IPv6: NLM_F_CREATE should be specified when creating new route [ 791.649317][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 791.669180][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 791.869194][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 791.876791][ T9] usb 4-1: config index 0 descriptor too short (expected 18, got 14) [ 791.889899][ T9] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 791.926155][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 791.951631][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 791.962175][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.974270][ T9] usb 4-1: Product: syz [ 791.983074][ T9] usb 4-1: Manufacturer: syz [ 791.987738][ T9] usb 4-1: SerialNumber: syz [ 791.997143][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 792.226650][ T9] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 792.244142][T26844] netlink: 'syz.0.9482': attribute type 9 has an invalid length. [ 792.270287][T26844] netlink: 911 bytes leftover after parsing attributes in process `syz.0.9482'. [ 792.389705][T26829] loop2: detected capacity change from 0 to 32768 [ 792.453710][ T9] usb 4-1: USB disconnect, device number 52 [ 792.652976][T26858] loop4: detected capacity change from 0 to 1024 [ 794.193450][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 794.193467][ T28] audit: type=1326 audit(2000000081.980:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26926 comm="syz.3.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 794.222611][ T5812] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 794.259121][ T28] audit: type=1326 audit(2000000082.020:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26926 comm="syz.3.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 794.309979][ T28] audit: type=1326 audit(2000000082.040:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26926 comm="syz.3.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 794.335194][ T28] audit: type=1326 audit(2000000082.040:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26926 comm="syz.3.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 794.364978][ T28] audit: type=1326 audit(2000000082.040:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26926 comm="syz.3.9522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 794.441738][ T5812] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 794.451261][ T5812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.472404][ T5812] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 794.482651][ T5812] usb 3-1: config 1 has no interface number 1 [ 794.488817][ T5812] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 794.502096][ T5812] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 794.519066][ T5812] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 794.528771][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.538913][ T5812] usb 3-1: Product: syz [ 794.544274][ T5812] usb 3-1: Manufacturer: syz [ 794.551116][ T5812] usb 3-1: SerialNumber: syz [ 794.639638][T26937] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 794.652187][T26937] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 794.788067][ T5812] usb 3-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 794.826655][ T5812] usb 3-1: MIDIStreaming interface descriptor not found [ 794.864544][T26943] netlink: 'syz.0.9530': attribute type 2 has an invalid length. [ 794.891701][T26943] netlink: 'syz.0.9530': attribute type 1 has an invalid length. [ 794.902701][ T5812] usb 3-1: USB disconnect, device number 43 [ 794.912701][T26946] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 794.998431][ T7238] udevd[7238]: setting owner of /dev/bus/usb/003/043 to uid=0, gid=0 failed: No such file or directory [ 795.111264][ T9368] udevd[9368]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 795.112023][ T28] audit: type=1326 audit(2000000082.890:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26949 comm="syz.3.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 795.201222][ T28] audit: type=1326 audit(2000000082.940:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26949 comm="syz.3.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 795.229877][ T28] audit: type=1326 audit(2000000082.950:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26949 comm="syz.3.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 795.253107][ T28] audit: type=1326 audit(2000000082.950:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26949 comm="syz.3.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 795.276319][ T28] audit: type=1326 audit(2000000082.950:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26949 comm="syz.3.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c4d9aeb9 code=0x7ffc0000 [ 795.562685][T26966] syz.3.9541: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 795.599769][T26966] CPU: 1 PID: 26966 Comm: syz.3.9541 Not tainted syzkaller #0 [ 795.607412][T26966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.617534][T26966] Call Trace: [ 795.620876][T26966] [ 795.623853][T26966] dump_stack_lvl+0x18c/0x250 [ 795.628594][T26966] ? show_regs_print_info+0x20/0x20 [ 795.633857][T26966] ? load_image+0x400/0x400 [ 795.638417][T26966] ? __rcu_read_unlock+0x7c/0xd0 [ 795.643419][T26966] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 795.649905][T26966] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 795.656497][T26966] warn_alloc+0x246/0x340 [ 795.660899][T26966] ? stack_trace_save+0xaa/0x100 [ 795.665911][T26966] ? zone_watermark_ok_safe+0x230/0x230 [ 795.671574][T26966] ? kasan_set_track+0x5f/0x70 [ 795.676399][T26966] ? kasan_set_track+0x4e/0x70 [ 795.681229][T26966] ? __kasan_kmalloc+0x8f/0xa0 [ 795.686046][T26966] ? xsk_init_queue+0xad/0x100 [ 795.690874][T26966] ? xsk_setsockopt+0x42e/0x760 [ 795.695826][T26966] ? do_sock_setsockopt+0x175/0x1a0 [ 795.701096][T26966] ? __x64_sys_setsockopt+0x182/0x200 [ 795.706623][T26966] __vmalloc_node_range+0x126/0x1330 [ 795.712015][T26966] ? free_vm_area+0x50/0x50 [ 795.716607][T26966] vmalloc_user+0x74/0x80 [ 795.721007][T26966] ? xskq_create+0xbf/0x170 [ 795.725679][T26966] xskq_create+0xbf/0x170 [ 795.730084][T26966] xsk_init_queue+0xad/0x100 [ 795.734754][T26966] xsk_setsockopt+0x42e/0x760 [ 795.739495][T26966] ? xsk_poll+0x680/0x680 [ 795.743892][T26966] ? __fget_files+0x28/0x4b0 [ 795.748546][T26966] ? __fget_files+0x28/0x4b0 [ 795.753212][T26966] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 795.758824][T26966] ? security_socket_setsockopt+0x7e/0xa0 [ 795.764606][T26966] ? xsk_poll+0x680/0x680 [ 795.769019][T26966] do_sock_setsockopt+0x175/0x1a0 [ 795.774154][T26966] ? __fdget+0x180/0x210 [ 795.778461][T26966] __x64_sys_setsockopt+0x182/0x200 [ 795.783740][T26966] do_syscall_64+0x55/0xa0 [ 795.788237][T26966] ? clear_bhb_loop+0x40/0x90 [ 795.793049][T26966] ? clear_bhb_loop+0x40/0x90 [ 795.797807][T26966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 795.803753][T26966] RIP: 0033:0x7f74c4d9aeb9 [ 795.808219][T26966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.827893][T26966] RSP: 002b:00007f74c5bb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 795.836394][T26966] RAX: ffffffffffffffda RBX: 00007f74c5015fa0 RCX: 00007f74c4d9aeb9 [ 795.844430][T26966] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 795.852466][T26966] RBP: 00007f74c4e08c1f R08: 0000000000000004 R09: 0000000000000000 [ 795.860497][T26966] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.868563][T26966] R13: 00007f74c5016038 R14: 00007f74c5015fa0 R15: 00007ffda89e5248 [ 795.876630][T26966] [ 795.892837][T26966] Mem-Info: [ 795.896030][T26966] active_anon:6388 inactive_anon:16 isolated_anon:0 [ 795.896030][T26966] active_file:13478 inactive_file:41398 isolated_file:0 [ 795.896030][T26966] unevictable:768 dirty:378 writeback:0 [ 795.896030][T26966] slab_reclaimable:11540 slab_unreclaimable:100670 [ 795.896030][T26966] mapped:25112 shmem:1377 pagetables:734 [ 795.896030][T26966] sec_pagetables:0 bounce:0 [ 795.896030][T26966] kernel_misc_reclaimable:0 [ 795.896030][T26966] free:1335377 free_pcp:11903 free_cma:0 [ 795.943066][T26966] Node 0 active_anon:25652kB inactive_anon:64kB active_file:33900kB inactive_file:165316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100368kB dirty:1512kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11788kB pagetables:2936kB sec_pagetables:0kB all_unreclaimable? no [ 795.982417][T26966] Node 1 active_anon:0kB inactive_anon:0kB active_file:20012kB inactive_file:276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 796.019516][T26966] Node 0 DMA free:15296kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.050501][T26966] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 796.056446][T26966] Node 0 DMA32 free:1460912kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25516kB inactive_anon:64kB active_file:33900kB inactive_file:164496kB unevictable:1536kB writepending:1512kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:20296kB local_pcp:19004kB free_cma:0kB [ 796.183494][T26966] lowmem_reserve[]: 0 0 0 0 0 [ 796.192688][T26966] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 796.250450][T26966] lowmem_reserve[]: 0 0 0 0 0 [ 796.289714][T26966] Node 1 Normal free:3865292kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20012kB inactive_file:276kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:27408kB local_pcp:16800kB free_cma:0kB [ 796.342328][T26966] lowmem_reserve[]: 0 0 0 0 0 [ 796.347172][T26966] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB [ 796.389791][T26966] Node 0 DMA32: 109*4kB (ME) 838*8kB (UME) 563*16kB (ME) 453*32kB (UM) 152*64kB (UME) 96*128kB (UM) 70*256kB (UM) 39*512kB (UME) 12*1024kB (UME) 3*2048kB (M) 330*4096kB (UM) = 1460660kB [ 796.416164][T26982] loop2: detected capacity change from 0 to 512 [ 796.433358][T26982] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 796.459085][T26966] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 796.489930][T26986] loop4: detected capacity change from 0 to 256 [ 796.499462][T26966] Node 1 Normal: 343*4kB (UME) 284*8kB (UME) 321*16kB (UME) 432*32kB (UME) 90*64kB (UME) 12*128kB (UME) 6*256kB (ME) 4*512kB (ME) 6*1024kB (UME) 4*2048kB (ME) 932*4096kB (M) = 3865292kB [ 796.527137][T26966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.563020][T26966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 796.602161][T26986] FAT-fs (loop4): Directory bread(block 64) failed [ 796.609265][T26986] FAT-fs (loop4): Directory bread(block 65) failed [ 796.622631][T26966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.624103][T26986] FAT-fs (loop4): Directory bread(block 66) failed [ 796.647495][T26966] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 796.658501][T26966] 55483 total pagecache pages [ 796.664683][T26986] FAT-fs (loop4): Directory bread(block 67) failed [ 796.672862][T26986] FAT-fs (loop4): Directory bread(block 68) failed [ 796.699280][T26986] FAT-fs (loop4): Directory bread(block 69) failed [ 796.709577][T26986] FAT-fs (loop4): Directory bread(block 70) failed [ 796.716189][T26986] FAT-fs (loop4): Directory bread(block 71) failed [ 796.723214][T26966] 16 pages in swap cache [ 796.727526][T26966] Free swap = 124472kB [ 796.751870][T26966] Total swap = 124996kB [ 796.756154][T26966] 2097051 pages RAM [ 796.760558][T26986] FAT-fs (loop4): Directory bread(block 72) failed [ 796.767467][T26986] FAT-fs (loop4): Directory bread(block 73) failed [ 796.784898][T26966] 0 pages HighMem/MovableOnly [ 796.799336][T26966] 416922 pages reserved [ 796.806384][T26966] 0 pages cma reserved [ 797.590343][ T5812] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 797.779103][ T5812] usb 4-1: Using ep0 maxpacket: 16 [ 797.794288][ T5812] usb 4-1: config 0 has no interfaces? [ 797.813426][ T5812] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 797.839269][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.847769][ T5812] usb 4-1: Product: syz [ 797.871695][ T5812] usb 4-1: Manufacturer: syz [ 797.876402][ T5812] usb 4-1: SerialNumber: syz [ 797.891116][ T5812] r8152-cfgselector 4-1: config 0 descriptor?? [ 798.124517][ T5812] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 798.242797][T27052] netlink: 'syz.4.9582': attribute type 1 has an invalid length. [ 798.351682][ T7104] usb 4-1: USB disconnect, device number 53 [ 798.395168][T27058] netlink: 'syz.4.9586': attribute type 10 has an invalid length. [ 798.411644][T27058] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9586'. [ 798.430005][T27058] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 798.437293][T27058] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 798.468516][T27058] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 798.508323][T27060] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 798.549261][T27060] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 798.972153][T27078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9596'. [ 799.020222][T27078] netlink: 'syz.2.9596': attribute type 1 has an invalid length. [ 799.028540][T27078] netlink: 'syz.2.9596': attribute type 2 has an invalid length. [ 799.064656][T27078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9596'. [ 800.019192][ T7104] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 800.202422][ T7104] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.228146][ T7104] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 800.249712][ T7104] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 800.258837][ T7104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.290347][ T7104] usb 5-1: config 0 descriptor?? [ 800.711005][ T7104] Bluetooth: Can't get state to change to load configuration err [ 800.718891][ T7104] Bluetooth: Loading sysconfig file failed [ 800.737862][ T7104] ath3k: probe of 5-1:0.0 failed with error -16 [ 800.759164][ T7104] usb 5-1: USB disconnect, device number 31 [ 800.886421][T27145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9629'. [ 800.898212][T27145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9629'. [ 801.258230][T27162] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9636'. [ 801.327691][T27164] loop4: detected capacity change from 0 to 16 [ 801.347517][T27164] erofs: (device loop4): mounted with root inode @ nid 36. [ 801.481658][ T23] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 801.669200][ T7104] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 801.691361][ T23] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 801.718173][ T23] usb 3-1: config 0 has no interface number 0 [ 801.728745][ T23] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 801.749616][ T23] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid maxpacket 47698, setting to 1024 [ 801.772455][ T23] usb 3-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 801.803284][ T23] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 801.817069][ T23] usb 3-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 801.825459][ T23] usb 3-1: Product: syz [ 801.850944][ T23] usb 3-1: Manufacturer: syz [ 801.855821][ T23] usb 3-1: SerialNumber: syz [ 801.865229][ T23] usb 3-1: config 0 descriptor?? [ 801.880116][T27158] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 801.889620][ T7104] usb 1-1: Using ep0 maxpacket: 8 [ 801.897508][ T7104] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 801.922630][ T7104] usb 1-1: config 179 has no interface number 0 [ 801.931719][ T23] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 801.949849][ T7104] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 801.979114][ T7104] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 801.997126][ T7104] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 802.023148][ T7104] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 802.045305][ T7104] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 802.073716][ T7104] usb 1-1: config 179 interface 65 has no altsetting 0 [ 802.089074][ T7104] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 802.116149][ T7104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.161651][ T7104] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input38 [ 802.163628][ T9] usb 3-1: USB disconnect, device number 44 [ 802.251190][ T5122] input input38: unable to receive magic message: -110 [ 802.290917][ T5122] input input38: unable to receive magic message: -32 [ 802.342176][ T5122] input input38: unable to receive magic message: -32 [ 802.390090][ T5122] input input38: unable to receive magic message: -32 [ 802.441698][ T5122] input input38: unable to receive magic message: -32 [ 802.476749][ T5122] input input38: unable to receive magic message: -32 [ 802.598577][ T7104] usb 1-1: USB disconnect, device number 42 [ 802.604701][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 802.630566][ T7104] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 802.849742][T27206] netlink: 'syz.4.9658': attribute type 6 has an invalid length. [ 802.857579][T27206] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9658'. [ 803.072011][T27216] loop2: detected capacity change from 0 to 256 [ 803.194095][T27215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 803.224001][T27216] FAT-fs (loop2): Directory bread(block 64) failed [ 803.256860][T27216] FAT-fs (loop2): Directory bread(block 65) failed [ 803.292373][T27216] FAT-fs (loop2): Directory bread(block 66) failed [ 803.310966][T27216] FAT-fs (loop2): Directory bread(block 67) failed [ 803.317725][T27216] FAT-fs (loop2): Directory bread(block 68) failed [ 803.335376][T27216] FAT-fs (loop2): Directory bread(block 69) failed [ 803.342858][T27216] FAT-fs (loop2): Directory bread(block 70) failed [ 803.356055][T27216] FAT-fs (loop2): Directory bread(block 71) failed [ 803.389668][T27216] FAT-fs (loop2): Directory bread(block 72) failed [ 803.396281][T27216] FAT-fs (loop2): Directory bread(block 73) failed [ 804.008088][T27249] loop4: detected capacity change from 0 to 4096 [ 804.034411][T27249] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 804.149159][ T23] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 804.171816][ T7104] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 804.359282][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 804.370224][ T7104] usb 3-1: Using ep0 maxpacket: 32 [ 804.377809][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 804.395493][ T7104] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 804.405813][ T7104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.415022][ T23] usb 1-1: config 8 has an invalid interface number: 61 but max is 2 [ 804.426370][ T7104] usb 3-1: Product: syz [ 804.431504][ T23] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 804.440773][ T7104] usb 3-1: Manufacturer: syz [ 804.445437][ T7104] usb 3-1: SerialNumber: syz [ 804.452675][ T23] usb 1-1: config 8 has no interface number 0 [ 804.458841][ T23] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 804.474544][ T7104] usb 3-1: config 0 descriptor?? [ 804.481603][ T23] usb 1-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 804.498590][ T23] usb 1-1: config 8 interface 61 has no altsetting 0 [ 804.507479][T27259] loop3: detected capacity change from 0 to 4096 [ 804.519507][ T23] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 804.529460][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.534410][T27259] ntfs3: loop3: ino=3, Correct links count -> 2. [ 804.537679][ T23] usb 1-1: Product: syz [ 804.550008][ T23] usb 1-1: Manufacturer: syz [ 804.554712][ T23] usb 1-1: SerialNumber: syz [ 804.569158][ T27] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 804.759171][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 804.771624][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.796186][ T27] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 804.807561][ T23] bfusb: probe of 1-1:8.61 failed with error -5 [ 804.815560][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.847071][ T23] usb 1-1: USB disconnect, device number 43 [ 804.853685][ T27] usb 5-1: Product: syz [ 804.858110][ T27] usb 5-1: Manufacturer: syz [ 804.876091][ T27] usb 5-1: SerialNumber: syz [ 804.889676][ T27] usb 5-1: config 0 descriptor?? [ 804.922799][ T7104] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 804.936025][ T7104] airspy 3-1:0.0: Could not detect board [ 804.942930][ T7104] airspy: probe of 3-1:0.0 failed with error -71 [ 804.955596][ T7104] usb 3-1: USB disconnect, device number 45 [ 805.105032][ T27] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 805.321211][ T7104] usb 5-1: USB disconnect, device number 32 [ 805.595746][T27286] netlink: 'syz.2.9697': attribute type 5 has an invalid length. [ 805.796048][T27293] netlink: 'syz.3.9701': attribute type 3 has an invalid length. [ 806.325881][T27309] netlink: 348 bytes leftover after parsing attributes in process `syz.2.9708'. [ 806.345394][T27309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9708'. [ 806.515027][T27313] loop2: detected capacity change from 0 to 64 [ 806.589997][ T5808] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 806.607000][T27313] Trying to free block not in datazone [ 806.629495][T27313] Trying to free block not in datazone [ 806.635166][T27313] Trying to free block not in datazone [ 806.666208][T27313] Trying to free block not in datazone [ 806.674059][T27313] Trying to free block not in datazone [ 806.680270][T27313] minix_free_block (loop2:6): bit already cleared [ 806.687941][T27313] Trying to free block not in datazone [ 806.775932][T27319] xt_CT: No such helper "snmp" [ 806.814245][ T5808] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 806.823504][T27317] loop4: detected capacity change from 0 to 4096 [ 806.839873][T27317] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 806.852973][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.873958][ T5808] usb 4-1: Product: syz [ 806.878214][ T5808] usb 4-1: Manufacturer: syz [ 806.902668][ T5808] usb 4-1: SerialNumber: syz [ 806.914978][ T5808] r8152-cfgselector 4-1: config 0 descriptor?? [ 806.943988][T27317] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 807.040531][T27326] netlink: 292 bytes leftover after parsing attributes in process `syz.2.9717'. [ 807.346736][ T5808] r8152-cfgselector 4-1: Unknown version 0x0000 [ 807.370903][ T5808] r8152-cfgselector 4-1: USB disconnect, device number 54 [ 807.643315][T27346] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 807.769844][T27324] 9pnet_fd: p9_fd_create_tcp (27324): problem connecting socket to 127.0.0.1 [ 808.015987][T27359] loop2: detected capacity change from 0 to 1024 [ 808.036302][T27359] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 808.126145][T27359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.241756][T27359] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.9734: missing EA_INODE flag [ 808.261878][T27359] EXT4-fs (loop2): Remounting filesystem read-only [ 808.344051][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.405934][T27375] nfs: Unknown parameter 'ntext' [ 808.479123][T27377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9742'. [ 808.741642][T27381] 8021q: adding VLAN 0 to HW filter on device bond7 [ 808.753800][T27388] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9745'. [ 808.780371][T27391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9747'. [ 808.934637][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 808.940492][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.948505][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.031878][T27399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9750'. [ 809.060172][T27399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9750'. [ 809.652567][T27425] netlink: 'syz.4.9764': attribute type 2 has an invalid length. [ 809.689232][T27425] netlink: 'syz.4.9764': attribute type 1 has an invalid length. [ 809.699229][T27425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9764'. [ 809.797772][ T23] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 809.990511][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 810.001717][ T23] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 810.019111][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.031378][T27415] loop3: detected capacity change from 0 to 32768 [ 810.038020][ T23] usb 3-1: config 0 has no interface number 0 [ 810.058576][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 810.094757][T27415] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 810.109665][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.117724][ T23] usb 3-1: Product: syz [ 810.137578][ T23] usb 3-1: Manufacturer: syz [ 810.149525][ T23] usb 3-1: SerialNumber: syz [ 810.161039][T27446] netlink: 'syz.4.9770': attribute type 10 has an invalid length. [ 810.177969][ T23] usb 3-1: config 0 descriptor?? [ 810.179257][T27446] veth1_macvtap: left allmulticast mode [ 810.194067][T27446] veth1_macvtap: left promiscuous mode [ 810.216758][T27446] bridge0: port 1(macsec0) entered disabled state [ 810.277339][T27415] XFS (loop3): Ending clean mount [ 810.301417][T27415] XFS (loop3): Quotacheck needed: Please wait. [ 810.310606][T27446] macsec0 (unregistering): left allmulticast mode [ 810.317104][T27446] macsec0 (unregistering): left promiscuous mode [ 810.356786][T27446] bridge0: port 1(macsec0) entered disabled state [ 810.414298][ T23] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 810.422288][ T23] usb 3-1: No valid video chain found. [ 810.473045][T27415] XFS (loop3): Quotacheck: Done. [ 810.597693][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 810.648546][ T5812] usb 3-1: USB disconnect, device number 46 [ 811.118333][T27468] SET target dimension over the limit! [ 811.259685][T27471] binder: 27469:27471 ioctl c00c620f 2000000000c0 returned -22 [ 811.544698][T27483] netlink: 'syz.0.9788': attribute type 1 has an invalid length. [ 811.790064][T27491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9800'. [ 811.800228][T27491] vlan0: left promiscuous mode [ 812.000268][T27504] loop3: detected capacity change from 0 to 128 [ 812.081080][T27504] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 812.167207][T27504] ext4 filesystem being mounted at /2342/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 812.343465][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 812.372257][T27519] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9804'. [ 812.776182][T27526] xfrm0 speed is unknown, defaulting to 1000 [ 812.818637][T27536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9814'. [ 813.538388][T27538] loop2: detected capacity change from 0 to 32768 [ 813.612007][T27538] JBD2: Ignoring recovery information on journal [ 813.662518][T27564] loop3: detected capacity change from 0 to 128 [ 813.786507][T27538] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 813.892867][T27538] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 813.919639][T27538] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 813.947812][T27538] OCFS2: File system is now read-only. [ 813.975620][T27538] (syz.2.9812,27538,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 814.002348][T27538] (syz.2.9812,27538,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 814.031064][T27538] (syz.2.9812,27538,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 814.050374][T27538] (syz.2.9812,27538,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 814.089422][T27538] (syz.2.9812,27538,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 814.098119][T27538] (syz.2.9812,27538,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 814.129411][T27538] (syz.2.9812,27538,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 814.147604][T27538] (syz.2.9812,27538,0):ocfs2_mknod:385 ERROR: status = -30 [ 814.168292][T27538] (syz.2.9812,27538,0):ocfs2_mknod:502 ERROR: status = -30 [ 814.200886][T27538] (syz.2.9812,27538,0):ocfs2_mkdir:659 ERROR: status = -30 [ 814.276280][T27571] loop3: detected capacity change from 0 to 2048 [ 814.327375][T27571] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 814.360444][ T5770] ocfs2: Unmounting device (7,2) on (node local) [ 814.989662][T27583] loop2: detected capacity change from 0 to 4096 [ 815.068925][T27591] ip6erspan2: entered promiscuous mode [ 815.222892][T27595] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 815.258136][T27595] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 815.329292][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 815.329310][ T28] audit: type=1326 audit(2000000103.110:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.9843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 815.439274][ T28] audit: type=1326 audit(2000000103.110:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.9843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 815.505680][ T28] audit: type=1326 audit(2000000103.150:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.9843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 815.591793][ T28] audit: type=1326 audit(2000000103.150:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.9843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 815.689061][ T28] audit: type=1326 audit(2000000103.150:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.9843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f839aeb9 code=0x7ffc0000 [ 816.470090][T27645] loop2: detected capacity change from 0 to 16 [ 816.493360][T27645] erofs: (device loop2): mounted with root inode @ nid 36. [ 816.533718][T27645] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 816.579448][T27645] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 816.881133][T27657] loop3: detected capacity change from 0 to 1024 [ 816.888656][T27657] EXT4-fs: Ignoring removed bh option [ 816.909490][T27661] trusted_key: encrypted_key: hex blob is missing [ 816.954222][T27657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.165049][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.412615][T27675] ipvlan0: entered promiscuous mode [ 817.563677][T27666] loop2: detected capacity change from 0 to 40427 [ 817.585513][T27666] F2FS-fs (loop2): invalid crc value [ 817.605463][T27666] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 3 [ 817.644124][T27666] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 818.182680][T27702] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 818.194087][T27700] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9890'. [ 818.455061][T27714] loop4: detected capacity change from 0 to 64 [ 818.479933][T27714] hfs: uid requires an argument [ 818.487245][T27714] hfs: unable to parse mount options [ 818.541928][ T5786] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 819.526276][T27730] loop4: detected capacity change from 0 to 32768 [ 819.540023][T27730] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 819.562620][T27730] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 819.572071][ T5808] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 819.717043][T27750] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[27750] [ 819.759415][ T5808] usb 3-1: Using ep0 maxpacket: 8 [ 819.771865][ T5808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 819.788323][ T5808] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 819.809382][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.827745][ T5808] usb 3-1: Product: syz [ 819.837895][ T5808] usb 3-1: Manufacturer: syz [ 819.857169][T12372] ocfs2: Unmounting device (7,4) on (node local) [ 819.861205][ T5808] usb 3-1: SerialNumber: syz [ 819.922409][ T5808] usb 3-1: config 0 descriptor?? [ 819.933315][ T5808] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 820.157737][ T5808] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 820.229901][ T5808] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 820.262770][T27763] loop4: detected capacity change from 0 to 1024 [ 820.369066][ T5808] usb 3-1: USB disconnect, device number 47 [ 820.585339][T27773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9925'. [ 820.759603][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 820.951253][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 820.973580][ T9] usb 5-1: config 0 has an invalid interface number: 163 but max is 0 [ 820.993277][T27791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9933'. [ 820.999184][ T9] usb 5-1: config 0 has no interface number 0 [ 821.008656][ T9] usb 5-1: config 0 interface 163 has no altsetting 0 [ 821.028138][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc [ 821.048822][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.066757][ T9] usb 5-1: Product: syz [ 821.073268][ T9] usb 5-1: Manufacturer: syz [ 821.078384][ T9] usb 5-1: SerialNumber: syz [ 821.108157][ T9] usb 5-1: config 0 descriptor?? [ 821.525928][T27815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9945'. [ 821.540491][T27815] netlink: 'syz.2.9945': attribute type 1 has an invalid length. [ 821.553608][ T5812] usb 5-1: USB disconnect, device number 33 [ 821.564530][ T5812] f81534a_ctrl 5-1:0.163: failed to set register 0x116: -19 [ 821.573919][ T5812] f81534a_ctrl 5-1:0.163: failed to enable ports: -19 [ 821.669383][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 821.871393][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 821.892189][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.902855][ T9] usb 4-1: Product: syz [ 821.907135][ T9] usb 4-1: Manufacturer: syz [ 821.914175][ T9] usb 4-1: SerialNumber: syz [ 821.930618][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 821.967355][ T5808] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 822.036184][T27831] loop2: detected capacity change from 0 to 512 [ 822.044344][T27831] EXT4-fs: Ignoring removed bh option [ 822.050263][ T7104] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 822.091502][T27831] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 822.172937][T27831] EXT4-fs (loop2): 1 truncate cleaned up [ 822.191311][T27831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.216438][ C0] usb 4-1: ath9k_htc: invalid pkt_len (fd7e) [ 822.254880][ T7104] usb 1-1: config 1 has an invalid interface number: 28 but max is 0 [ 822.284280][ T7104] usb 1-1: config 1 has no interface number 0 [ 822.309304][ T7104] usb 1-1: config 1 interface 28 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 822.340816][ T7104] usb 1-1: config 1 interface 28 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 822.347815][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.372364][ T7104] usb 1-1: config 1 interface 28 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 822.389653][ T7104] usb 1-1: config 1 interface 28 has no altsetting 0 [ 822.404785][ T7104] usb 1-1: New USB device found, idVendor=045e, idProduct=0473, bcdDevice=e4.34 [ 822.420924][ T7104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.439137][ T7104] usb 1-1: Product: syz [ 822.453706][ T7104] usb 1-1: Manufacturer: syz [ 822.463847][ T7104] usb 1-1: SerialNumber: syz [ 822.472497][ T9] usb 4-1: USB disconnect, device number 55 [ 822.515530][T27825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 822.546057][ T7104] ipaq 1-1:1.28: PocketPC PDA converter detected [ 822.783737][ T7104] usb 1-1: PocketPC PDA converter now attached to ttyUSB0 [ 822.918607][T27849] loop2: detected capacity change from 0 to 64 [ 822.967116][ T5812] usb 1-1: USB disconnect, device number 44 [ 822.999715][ T5812] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 823.019263][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 823.027410][ T5808] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 823.034805][ T5808] ath9k_htc: Failed to initialize the device [ 823.041711][ T5812] ipaq 1-1:1.28: device disconnected [ 823.051394][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 823.151223][T27851] loop4: detected capacity change from 0 to 4096 [ 823.222039][T27857] usb usb8: usbfs: process 27857 (syz.2.9964) did not claim interface 0 before use [ 823.240272][T27851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.367030][T12372] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.447600][T27862] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 823.464812][T27862] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 823.730021][ T23] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 823.949181][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 823.958925][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 823.983542][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 824.000757][ T23] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 824.014913][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.025041][ T23] usb 3-1: Product: syz [ 824.033909][ T23] usb 3-1: Manufacturer: syz [ 824.038911][ T23] usb 3-1: SerialNumber: syz [ 824.055962][ T23] usb 3-1: config 0 descriptor?? [ 824.092317][ T23] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 824.328333][ T27] usb 3-1: USB disconnect, device number 48 [ 824.467606][T27889] netlink: 'syz.4.9979': attribute type 26 has an invalid length. [ 824.626336][T27874] loop3: detected capacity change from 0 to 32768 [ 824.722582][T27874] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 824.759927][T27900] loop4: detected capacity change from 0 to 1024 [ 824.772599][T27900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 824.807284][T27900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.889103][T27874] XFS (loop3): Ending clean mount [ 824.916735][T27874] XFS (loop3): Quotacheck needed: Please wait. [ 825.060956][T12372] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.159539][T27874] XFS (loop3): Quotacheck: Done. [ 825.374142][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 825.409295][T27915] netlink: 'syz.2.9987': attribute type 21 has an invalid length. [ 825.552604][T27920] loop4: detected capacity change from 0 to 1764 [ 825.599255][T27920] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 826.846269][T27950] loop2: detected capacity change from 0 to 4096 [ 826.865754][T27950] ntfs3: loop2: ino=3, Correct links count -> 2. [ 827.087122][T27959] netlink: 'syz.3.10008': attribute type 30 has an invalid length. [ 827.459463][T27971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10014'. [ 827.501613][T27973] loop3: detected capacity change from 0 to 64 [ 827.819542][T27984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10020'. [ 828.120598][T27998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10027'. [ 828.265267][T28004] netlink: 'syz.4.10031': attribute type 27 has an invalid length. [ 828.307326][T28004] netlink: 'syz.4.10031': attribute type 3 has an invalid length. [ 828.325989][T28004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10031'. [ 828.585201][T28012] loop3: detected capacity change from 0 to 2048 [ 828.630872][T28012] loop3: p1 p3 < > p4 < p5 > [ 828.650107][T28012] loop3: partition table partially beyond EOD, truncated [ 828.690089][T28012] loop3: p1 size 33024 extends beyond EOD, truncated [ 828.710711][T28012] loop3: p3 start 4284289 is beyond EOD, truncated [ 828.729566][T28012] loop3: p5 size 33024 extends beyond EOD, truncated [ 828.778389][ T5137] loop3: p1 p3 < > p4 < p5 > [ 828.786868][ T5137] loop3: partition table partially beyond EOD, truncated [ 828.802421][ T5137] loop3: p1 size 33024 extends beyond EOD, truncated [ 828.823823][ T5137] loop3: p3 start 4284289 is beyond EOD, truncated [ 828.841064][ T5137] loop3: p5 size 33024 extends beyond EOD, truncated [ 829.216412][ T5782] udevd[5782]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 829.233158][ T7238] udevd[7238]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 829.245981][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 829.313784][ T5782] udevd[5782]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 829.326368][ T7238] udevd[7238]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 829.346567][ T5786] udevd[5786]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 829.642846][T28040] loop2: detected capacity change from 0 to 4096 [ 829.726124][T28045] netlink: 424 bytes leftover after parsing attributes in process `syz.0.10049'. [ 829.737009][T28045] netlink: 'syz.0.10049': attribute type 1 has an invalid length. [ 829.773948][T28040] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 829.791067][T28040] ntfs3: loop2: Failed to load $Extend (-22). [ 829.797233][T28040] ntfs3: loop2: Failed to initialize $Extend. [ 829.834385][T28047] loop4: detected capacity change from 0 to 128 [ 830.202929][T28057] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10054'. [ 830.438360][T28063] loop3: detected capacity change from 0 to 4096 [ 830.457014][T28067] cgroup: name respecified [ 830.469727][T28063] ntfs3: loop3: ino=3, Correct links count -> 2. [ 830.543245][T28069] loop4: detected capacity change from 0 to 1024 [ 830.567128][T28071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10062'. [ 830.582936][T28069] EXT4-fs: Ignoring removed bh option [ 830.607413][T28069] EXT4-fs: inline encryption not supported [ 830.639169][T28071] netlink: 30 bytes leftover after parsing attributes in process `syz.0.10062'. [ 830.660759][T28069] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 830.710705][T28069] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce018, mo2=0000] [ 830.743662][T28069] System zones: 0-1, 3-12 [ 830.764519][T28069] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #3: block 1: comm syz.4.10061: lblock 1 mapped to illegal pblock 1 (length 1) [ 830.811567][T28069] Quota error (device loop4): write_blk: dquota write failed [ 830.834479][T28069] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 830.868923][T28069] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.10061: Failed to acquire dquot type 0 [ 830.895584][T28069] EXT4-fs error (device loop4): ext4_free_blocks:6692: comm syz.4.10061: Freeing blocks not in datazone - block = 0, count = 4096 [ 830.943983][T28069] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.10061: Invalid inode bitmap blk 0 in block_group 0 [ 830.961331][ T11] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 830.976009][T28069] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 831.010677][T28069] EXT4-fs (loop4): 1 orphan inode deleted [ 831.017956][T28069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.067593][ T11] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 831.110911][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6985: comm kworker/u4:0: Failed to release dquot type 0 [ 831.134153][T28069] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 831.183903][T28085] netlink: 'syz.2.10068': attribute type 1 has an invalid length. [ 831.266408][T12372] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.628208][T28100] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10076'. [ 832.177360][T28123] bridge11: entered promiscuous mode [ 832.489447][T28135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10092'. [ 833.387582][T28173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10111'. [ 833.402849][T28173] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10111'. [ 833.439259][ T23] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 833.522826][T28177] cgroup: Bad value for 'name' [ 833.648860][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 833.682903][ T23] usb 4-1: config 0 has an invalid interface number: 163 but max is 0 [ 833.699282][ T23] usb 4-1: config 0 has no interface number 0 [ 833.705474][ T23] usb 4-1: config 0 interface 163 has no altsetting 0 [ 833.741842][ T23] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc [ 833.775374][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.784275][ T23] usb 4-1: Product: syz [ 833.788519][ T23] usb 4-1: Manufacturer: syz [ 833.798805][ T23] usb 4-1: SerialNumber: syz [ 833.806534][ T23] usb 4-1: config 0 descriptor?? [ 834.207082][T28189] loop4: detected capacity change from 0 to 4096 [ 834.234743][T28189] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 834.323206][ T23] usb 4-1: USB disconnect, device number 56 [ 834.349912][ T23] f81534a_ctrl 4-1:0.163: failed to set register 0x116: -19 [ 834.367536][ T23] f81534a_ctrl 4-1:0.163: failed to enable ports: -19 [ 834.715455][T28197] netlink: 136 bytes leftover after parsing attributes in process `syz.4.10123'. [ 835.009381][ T27] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 835.225316][ T27] usb 3-1: config 0 has no interfaces? [ 835.237805][ T27] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 835.267922][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.289327][ T27] usb 3-1: Product: syz [ 835.293775][ T27] usb 3-1: Manufacturer: syz [ 835.298435][ T27] usb 3-1: SerialNumber: syz [ 835.325195][ T27] r8152-cfgselector 3-1: config 0 descriptor?? [ 835.564634][ T27] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 835.734988][T28207] loop4: detected capacity change from 0 to 32768 [ 835.782092][ T5812] usb 3-1: USB disconnect, device number 49 [ 835.827474][T28207] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 835.827474][T28207] [ 835.860749][T28207] ERROR: (device loop4): remounting filesystem as read-only [ 835.868120][T28207] ERROR: (device loop4): jfs_unlink: [ 835.868120][T28207] [ 835.923007][T28223] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10136'. [ 835.942878][T28223] netlink: 'syz.0.10136': attribute type 1 has an invalid length. [ 835.963647][T12372] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 835.963647][T12372] [ 836.061026][T28225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10138'. [ 836.144610][T28227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10137'. [ 836.886616][T28254] netlink: 'syz.3.10150': attribute type 21 has an invalid length. [ 837.555242][T28276] loop2: detected capacity change from 0 to 512 [ 837.606943][T28276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.667985][T28276] ext4 filesystem being mounted at /2620/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 837.883249][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.035654][T28274] loop3: detected capacity change from 0 to 32768 [ 838.124059][T28274] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 838.227881][T28274] (syz.3.10161,28274,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 838.258720][T28274] (syz.3.10161,28274,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 838.277302][T28274] (syz.3.10161,28274,1):ocfs2_symlink:2068 ERROR: status = -117 [ 838.402351][ T5771] (syz-executor,5771,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 838.423641][T28295] netlink: 'syz.2.10169': attribute type 15 has an invalid length. [ 838.442601][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10170'. [ 838.452901][T28297] openvswitch: netlink: Missing key (keys=40, expected=80) [ 838.514577][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 839.349791][ T5812] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 839.591775][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 839.604000][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 839.630447][ T5812] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 839.651338][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.672491][ T5812] usb 4-1: config 0 descriptor?? [ 839.815774][T28317] loop2: detected capacity change from 0 to 32768 [ 839.853107][T28317] (syz.2.10180,28317,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 839.884336][ T5812] ath6kl: Failed to submit usb control message: -71 [ 839.893925][T28317] (syz.2.10180,28317,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 839.917851][ T5812] ath6kl: unable to send the bmi data to the device: -71 [ 839.940159][ T5812] ath6kl: Unable to send get target info: -71 [ 839.949868][ T5812] ath6kl: Failed to init ath6kl core: -71 [ 840.007961][ T5812] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 840.009706][T28317] JBD2: Ignoring recovery information on journal [ 840.088574][T28317] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 840.119017][ T5812] usb 4-1: USB disconnect, device number 57 [ 840.200748][T28317] [ 840.203165][T28317] ====================================================== [ 840.210230][T28317] WARNING: possible circular locking dependency detected [ 840.217382][T28317] syzkaller #0 Not tainted [ 840.221843][T28317] ------------------------------------------------------ [ 840.228917][T28317] syz.2.10180/28317 is trying to acquire lock: [ 840.235125][T28317] ffff8880578bdbe0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 840.246764][T28317] [ 840.246764][T28317] but task is already holding lock: [ 840.254166][T28317] ffff8880578bdc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 840.264855][T28317] [ 840.264855][T28317] which lock already depends on the new lock. [ 840.264855][T28317] [ 840.275656][T28317] [ 840.275656][T28317] the existing dependency chain (in reverse order) is: [ 840.284722][T28317] [ 840.284722][T28317] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 840.292607][T28317] down_read+0x46/0x2e0 [ 840.297344][T28317] ocfs2_init_acl+0x30a/0x770 [ 840.302610][T28317] ocfs2_mknod+0x140f/0x2300 [ 840.307780][T28317] ocfs2_create+0x196/0x430 [ 840.312854][T28317] path_openat+0x12a0/0x3230 [ 840.318014][T28317] do_filp_open+0x1f5/0x430 [ 840.323090][T28317] do_sys_openat2+0x134/0x1d0 [ 840.328341][T28317] __x64_sys_creat+0x90/0xb0 [ 840.333503][T28317] do_syscall_64+0x55/0xa0 [ 840.338522][T28317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.345048][T28317] [ 840.345048][T28317] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 840.353634][T28317] down_read+0x46/0x2e0 [ 840.358387][T28317] ocfs2_start_trans+0x3a8/0x6f0 [ 840.363907][T28317] ocfs2_modify_bh+0xe4/0x4c0 [ 840.369163][T28317] ocfs2_local_read_info+0x1445/0x1800 [ 840.375205][T28317] dquot_load_quota_sb+0x757/0xb80 [ 840.380904][T28317] dquot_load_quota_inode+0x2dc/0x5d0 [ 840.386862][T28317] ocfs2_enable_quotas+0x1c9/0x490 [ 840.392562][T28317] ocfs2_fill_super+0x417d/0x5010 [ 840.398260][T28317] mount_bdev+0x221/0x2d0 [ 840.403262][T28317] legacy_get_tree+0xea/0x180 [ 840.408610][T28317] vfs_get_tree+0x8c/0x280 [ 840.413601][T28317] do_new_mount+0x24b/0xa40 [ 840.418771][T28317] __se_sys_mount+0x2e7/0x3d0 [ 840.424108][T28317] do_syscall_64+0x55/0xa0 [ 840.429117][T28317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.435582][T28317] [ 840.435582][T28317] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 840.443220][T28317] ocfs2_start_trans+0x2a9/0x6f0 [ 840.448737][T28317] ocfs2_setattr+0xc72/0x1bc0 [ 840.453995][T28317] notify_change+0xb0d/0xe10 [ 840.459163][T28317] chown_common+0x413/0x5d0 [ 840.464240][T28317] do_fchownat+0x14b/0x240 [ 840.469235][T28317] __x64_sys_fchownat+0xb5/0xd0 [ 840.474664][T28317] do_syscall_64+0x55/0xa0 [ 840.479754][T28317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.486224][T28317] [ 840.486224][T28317] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 840.495069][T28317] __lock_acquire+0x2df1/0x7d40 [ 840.500500][T28317] lock_acquire+0x19e/0x420 [ 840.505596][T28317] down_write+0x97/0x200 [ 840.510424][T28317] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 840.516999][T28317] ocfs2_xattr_set+0x61b/0x13e0 [ 840.522424][T28317] ocfs2_set_acl+0x4e1/0x590 [ 840.527598][T28317] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 840.533119][T28317] vfs_set_acl+0x803/0xa60 [ 840.538112][T28317] path_setxattr+0x41d/0x5d0 [ 840.543283][T28317] __x64_sys_setxattr+0xbb/0xd0 [ 840.548709][T28317] do_syscall_64+0x55/0xa0 [ 840.553702][T28317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.560169][T28317] [ 840.560169][T28317] other info that might help us debug this: [ 840.560169][T28317] [ 840.570429][T28317] Chain exists of: [ 840.570429][T28317] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 840.570429][T28317] [ 840.585709][T28317] Possible unsafe locking scenario: [ 840.585709][T28317] [ 840.593200][T28317] CPU0 CPU1 [ 840.598605][T28317] ---- ---- [ 840.604008][T28317] lock(&oi->ip_xattr_sem); [ 840.608657][T28317] lock(&journal->j_trans_barrier); [ 840.616523][T28317] lock(&oi->ip_xattr_sem); [ 840.623698][T28317] lock(&ocfs2_file_ip_alloc_sem_key); [ 840.629313][T28317] [ 840.629313][T28317] *** DEADLOCK *** [ 840.629313][T28317] [ 840.637502][T28317] 3 locks held by syz.2.10180/28317: [ 840.642836][T28317] #0: ffff88805c110418 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 840.652247][T28317] #1: ffff8880578bdf58 (&type->i_mutex_dir_key#14){++++}-{3:3}, at: vfs_set_acl+0x37a/0xa60 [ 840.662721][T28317] #2: ffff8880578bdc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 840.673858][T28317] [ 840.673858][T28317] stack backtrace: [ 840.679796][T28317] CPU: 1 PID: 28317 Comm: syz.2.10180 Not tainted syzkaller #0 [ 840.687473][T28317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 840.697585][T28317] Call Trace: [ 840.700913][T28317] [ 840.703891][T28317] dump_stack_lvl+0x18c/0x250 [ 840.708633][T28317] ? load_image+0x400/0x400 [ 840.713194][T28317] ? show_regs_print_info+0x20/0x20 [ 840.718463][T28317] ? print_circular_bug+0x12b/0x1a0 [ 840.723727][T28317] check_noncircular+0x2fc/0x400 [ 840.728722][T28317] ? look_up_lock_class+0x75/0x140 [ 840.733886][T28317] ? print_deadlock_bug+0x5d0/0x5d0 [ 840.739223][T28317] ? lockdep_lock+0xf5/0x230 [ 840.743874][T28317] ? _find_first_zero_bit+0xd3/0x100 [ 840.749309][T28317] __lock_acquire+0x2df1/0x7d40 [ 840.754232][T28317] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 840.760281][T28317] ? verify_lock_unused+0x140/0x140 [ 840.765712][T28317] ? ocfs2_inode_lock_full_nested+0xcdf/0x1b70 [ 840.771919][T28317] ? _raw_spin_unlock+0x40/0x40 [ 840.776823][T28317] ? verify_lock_unused+0x140/0x140 [ 840.782182][T28317] lock_acquire+0x19e/0x420 [ 840.786737][T28317] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 840.792950][T28317] ? __might_sleep+0xe0/0xe0 [ 840.797604][T28317] ? read_lock_is_recursive+0x20/0x20 [ 840.803029][T28317] down_write+0x97/0x200 [ 840.807337][T28317] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 840.813575][T28317] ? down_read_killable+0x340/0x340 [ 840.818831][T28317] ? ocfs2_xattr_set+0x5ef/0x13e0 [ 840.823882][T28317] ? __lock_acquire+0x7d40/0x7d40 [ 840.828924][T28317] ? ocfs2_xattr_block_find+0x15b/0x4d0 [ 840.834518][T28317] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 840.840536][T28317] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 840.846447][T28317] ? up_write+0x1c3/0x410 [ 840.850818][T28317] ocfs2_xattr_set+0x61b/0x13e0 [ 840.855722][T28317] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 840.861480][T28317] ? mark_lock+0x94/0x320 [ 840.865869][T28317] ? __lock_acquire+0x1347/0x7d40 [ 840.870957][T28317] ? __lock_acquire+0x7d40/0x7d40 [ 840.876100][T28317] ? do_raw_spin_lock+0x11f/0x2c0 [ 840.881168][T28317] ? __rwlock_init+0x150/0x150 [ 840.885946][T28317] ? do_raw_spin_unlock+0x121/0x230 [ 840.891176][T28317] ? _raw_spin_unlock+0x28/0x40 [ 840.896053][T28317] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 840.901816][T28317] ? ocfs2_inode_lock_atime+0x530/0x530 [ 840.907406][T28317] ocfs2_set_acl+0x4e1/0x590 [ 840.912054][T28317] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 840.917041][T28317] ? read_lock_is_recursive+0x20/0x20 [ 840.922439][T28317] ? ocfs2_xattr_get+0x260/0x260 [ 840.927425][T28317] ? evm_inode_set_acl+0xbc/0x430 [ 840.932509][T28317] ? down_write+0x16e/0x200 [ 840.937031][T28317] ? evm_revalidate_status+0x4f/0xb0 [ 840.942332][T28317] ? ima_inode_set_acl+0x81/0x170 [ 840.947485][T28317] ? make_vfsuid+0x51/0xb0 [ 840.951928][T28317] ? inode_owner_or_capable+0xf0/0x1c0 [ 840.957401][T28317] vfs_set_acl+0x803/0xa60 [ 840.961856][T28317] ? path_setxattr+0x3a1/0x5d0 [ 840.966685][T28317] path_setxattr+0x41d/0x5d0 [ 840.971352][T28317] ? simple_xattrs_free+0x150/0x150 [ 840.976594][T28317] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 840.982589][T28317] ? lock_chain_count+0x20/0x20 [ 840.987460][T28317] __x64_sys_setxattr+0xbb/0xd0 [ 840.992420][T28317] do_syscall_64+0x55/0xa0 [ 840.996855][T28317] ? clear_bhb_loop+0x40/0x90 [ 841.001546][T28317] ? clear_bhb_loop+0x40/0x90 [ 841.006242][T28317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.012258][T28317] RIP: 0033:0x7f8a6639aeb9 [ 841.016716][T28317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.036810][T28317] RSP: 002b:00007f8a672f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 841.045247][T28317] RAX: ffffffffffffffda RBX: 00007f8a66615fa0 RCX: 00007f8a6639aeb9 [ 841.053236][T28317] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 841.061239][T28317] RBP: 00007f8a66408c1f R08: 0000000000000000 R09: 0000000000000000 [ 841.069260][T28317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.077255][T28317] R13: 00007f8a66616038 R14: 00007f8a66615fa0 R15: 00007fffdf66bc08 [ 841.085259][T28317] [ 841.142645][ T5770] ocfs2: Unmounting device (7,2) on (node local)