last executing test programs: 16m10.388185915s ago: executing program 1 (id=9092): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x100, 0x6, 0x4, 0x0, 0xf}) 16m10.27102343s ago: executing program 1 (id=9094): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000800)=@can, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 16m10.133043986s ago: executing program 1 (id=9098): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x25dbdbfd, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x4d3}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4008040) 16m9.829572449s ago: executing program 1 (id=9102): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)=ANY=[], 0x1, 0x54e, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 16m9.556622891s ago: executing program 1 (id=9105): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @pix_mp={0x0, 0x0, 0x47524247, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x5}]}}) 16m8.907963229s ago: executing program 1 (id=9119): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x149081, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000140)=0x80000000) 16m8.578118293s ago: executing program 32 (id=9119): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x149081, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000140)=0x80000000) 2.595526689s ago: executing program 0 (id=24345): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010000000040000000000904010000020d00000904010102020e"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.353471269s ago: executing program 3 (id=24350): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x4, 0x2, 0x6, "78000000000000000000000120000000090fa622b7e232ec3f7ee3d3161300", 0x1a070634}) 2.211471716s ago: executing program 3 (id=24352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 2.148194868s ago: executing program 3 (id=24353): r0 = socket(0x1d, 0x2, 0x6) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x5, 0xffffffffffffffff}) 2.027474203s ago: executing program 3 (id=24355): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file3\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@order_strict}, {@nodiscard}, {@nodiscard}, {@order_relaxed}, {@discard}, {@nobarrier}, {@errors_remount_ro}, {@errors_remount_ro}]}, 0x1, 0xa88, &(0x7f0000002140)="$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") truncate(&(0x7f0000000900)='./file2\x00', 0x8) 1.687099208s ago: executing program 4 (id=24359): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) 1.519545325s ago: executing program 4 (id=24361): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x34325241, 0x5, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x1}, {0x4, 0x9}, {0x8, 0x6}, {0x4, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xa, 0x3, 0x4, 0x2, 0x6}}) 1.473787627s ago: executing program 3 (id=24362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048888) 1.40354912s ago: executing program 4 (id=24364): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, 0x0) 1.305507084s ago: executing program 4 (id=24366): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1c802, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5ea7, &(0x7f00000085c0)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) 1.103593273s ago: executing program 3 (id=24368): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') 1.024664796s ago: executing program 2 (id=24369): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x49400}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x288b}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x83}]}}}]}, 0x58}}, 0x0) 876.090923ms ago: executing program 2 (id=24370): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYBLOB="9f04dcff0e3290a8362c00b30069935f66000000005b8aa6823b2badb585fff1d6b6b31f21a64bc21483140600000000000000aa5a95ec", @ANYRES16, @ANYRES64, @ANYRESHEX], 0x1, 0x14e8, &(0x7f0000002a80)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 775.572207ms ago: executing program 0 (id=24371): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000880), 0x4) 611.898254ms ago: executing program 0 (id=24372): setresuid(0x0, 0xee01, 0xee00) mq_open(&(0x7f0000000000)=')\x00', 0x40, 0x44, &(0x7f0000000040)={0x100000000, 0x3, 0x10001, 0x9}) 540.898787ms ago: executing program 2 (id=24373): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000002c0)={0x0, 0x4298}) 415.545723ms ago: executing program 4 (id=24374): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b41, 0x10000000000004) 415.412212ms ago: executing program 0 (id=24375): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00000008000400", @ANYRES32, @ANYBLOB='\f\x00\t'], 0xbc}}, 0x0) 301.676468ms ago: executing program 2 (id=24376): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000006600)={@multicast1, @empty}, 0x8) 250.54539ms ago: executing program 0 (id=24377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000301010300000000000000000a0000000c00198008000180"], 0x24}}, 0x40000084) 185.257873ms ago: executing program 4 (id=24378): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x129d02, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000001c0)=@t={0x81, 0x1, 0x6, 0x7f}) 67.620587ms ago: executing program 2 (id=24379): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) 35.104969ms ago: executing program 0 (id=24380): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x0) 0s ago: executing program 2 (id=24381): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) kernel console output (not intermixed with test programs): s `syz.0.22454'. [ 2002.666815][T32186] netlink: 'syz.3.22455': attribute type 1 has an invalid length. [ 2002.712490][T32186] netlink: 228 bytes leftover after parsing attributes in process `syz.3.22455'. [ 2003.407542][ T789] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2003.622299][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 2003.629885][ T789] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2003.670527][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.693830][T32250] netlink: 'syz.3.22475': attribute type 10 has an invalid length. [ 2003.707913][ T789] usb 3-1: config 0 descriptor?? [ 2003.730522][T32250] netlink: 55 bytes leftover after parsing attributes in process `syz.3.22475'. [ 2003.731509][ T789] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2003.940189][T32262] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 2004.169745][ T789] gspca_sunplus: reg_w_riv err -71 [ 2004.198501][ T789] sunplus: probe of 3-1:0.0 failed with error -71 [ 2004.228096][ T789] usb 3-1: USB disconnect, device number 76 [ 2004.505209][T32298] netlink: 'syz.0.22486': attribute type 6 has an invalid length. [ 2004.549716][T32298] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22486'. [ 2004.622054][T32306] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.22488'. [ 2004.645318][T32306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2004.806907][T32313] netlink: 136 bytes leftover after parsing attributes in process `syz.4.22490'. [ 2005.854609][T32367] netlink: 'syz.0.22506': attribute type 32 has an invalid length. [ 2006.081666][T32316] loop3: detected capacity change from 0 to 32768 [ 2006.127126][T32316] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 2006.146114][T32316] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 2006.228972][T32316] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 2006.248147][ T789] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 2006.261768][ T789] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 2006.327491][ T789] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 61ms [ 2006.343164][ T789] gfs2: fsid=syz:syz.0: jid=0: Done [ 2006.348943][T32316] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 2006.358137][T23875] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 2006.597394][T23875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2006.611395][T23875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 154, setting to 64 [ 2006.675868][T23875] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 2006.696584][T23875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.722478][T23875] usb 3-1: config 0 descriptor?? [ 2006.739100][T32376] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2006.757175][T23875] usb 3-1: Found UVC 0.00 device (10c4:ea90) [ 2006.777470][T23875] usb 3-1: No valid video chain found. [ 2007.038276][ T5860] usb 3-1: USB disconnect, device number 77 [ 2007.110829][T32426] netlink: 'syz.3.22515': attribute type 4 has an invalid length. [ 2007.130295][T32426] netlink: 152 bytes leftover after parsing attributes in process `syz.3.22515'. [ 2007.166131][T32426] .`: renamed from bond0 (while UP) [ 2007.205972][T32403] loop4: detected capacity change from 0 to 32768 [ 2007.510013][T32445] bridge11: entered promiscuous mode [ 2007.673160][ T5850] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2007.743475][T32456] loop0: detected capacity change from 0 to 1024 [ 2007.903982][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 2007.910272][T32463] loop3: detected capacity change from 0 to 2048 [ 2007.928224][ T5850] usb 5-1: config 0 has no interfaces? [ 2007.937557][ T5850] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2007.952288][T32463] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 2007.972189][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.991410][ T5850] usb 5-1: Product: syz [ 2008.002135][ T5850] usb 5-1: Manufacturer: syz [ 2008.010366][T32463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2008.024308][ T5850] usb 5-1: SerialNumber: syz [ 2008.046225][ T5850] r8152-cfgselector 5-1: config 0 descriptor?? [ 2008.346621][ T5850] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 2008.578135][ T5850] usb 5-1: USB disconnect, device number 58 [ 2008.685669][T32510] loop2: detected capacity change from 0 to 64 [ 2009.191310][T32540] delete_channel: no stack [ 2009.736413][ T789] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2009.863250][T32580] loop4: detected capacity change from 0 to 2048 [ 2009.905671][T32580] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 2009.949243][T32580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2009.970944][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.003444][ T789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2010.035261][ T789] usb 3-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00 [ 2010.063056][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.081809][ T789] usb 3-1: Product: syz [ 2010.116084][ T789] usb 3-1: Manufacturer: syz [ 2010.127697][ T789] usb 3-1: SerialNumber: syz [ 2010.167335][ T789] cdc_mbim 3-1:1.0: MBIM functional descriptor missing [ 2010.180568][ T789] cdc_mbim 3-1:1.0: bind() failure [ 2010.440914][T32615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22569'. [ 2010.543107][T23875] usb 3-1: USB disconnect, device number 78 [ 2010.721626][T32628] Non-string source [ 2010.729964][T32625] loop4: detected capacity change from 0 to 2048 [ 2010.811825][T32625] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2010.834154][T32634] kAFS: unparsable volume name [ 2011.144034][T32652] ip6erspan1: entered promiscuous mode [ 2011.338473][T32671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22582'. [ 2011.519379][T32681] netlink: 2 bytes leftover after parsing attributes in process `syz.3.22586'. [ 2011.942857][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 2011.942873][ T27] audit: type=1326 audit(1764105342.611:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32708 comm="syz.3.22595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2012.019318][ T27] audit: type=1326 audit(1764105342.640:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32708 comm="syz.3.22595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2012.096442][ T27] audit: type=1326 audit(1764105342.640:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32708 comm="syz.3.22595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2012.129382][ T27] audit: type=1326 audit(1764105342.640:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32708 comm="syz.3.22595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2012.153579][ T27] audit: type=1326 audit(1764105342.640:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32708 comm="syz.3.22595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2012.177432][T32721] loop3: detected capacity change from 0 to 512 [ 2012.196245][T32721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2012.223017][T32721] EXT4-fs: Ignoring removed i_version option [ 2012.281768][T32726] QAT: failed to copy from user cfg_data. [ 2012.295886][T32721] EXT4-fs (loop3): 1 orphan inode deleted [ 2012.324479][T32721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2012.521281][T32747] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 2012.634039][ T23] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2012.729581][T23875] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 2012.859014][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 2012.866988][ T23] usb 3-1: config 0 has an invalid interface number: 163 but max is 0 [ 2012.889080][ T23] usb 3-1: config 0 has no interface number 0 [ 2012.907946][ T23] usb 3-1: config 0 interface 163 has no altsetting 0 [ 2012.934506][T23875] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 2012.936085][ T23] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc [ 2012.942724][T23875] usb 4-1: config 0 has no interface number 0 [ 2012.942782][T23875] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 12349, setting to 64 [ 2012.973844][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.006307][ T23] usb 3-1: Product: syz [ 2013.015594][T23875] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 2013.021618][ T23] usb 3-1: Manufacturer: syz [ 2013.041263][ T23] usb 3-1: SerialNumber: syz [ 2013.043229][T23875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.072536][ T23] usb 3-1: config 0 descriptor?? [ 2013.112128][T23875] usb 4-1: config 0 descriptor?? [ 2013.145546][T32721] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2013.201665][T23875] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input138 [ 2013.371782][ C0] usbtouchscreen 4-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 2013.547814][ T336] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 2013.592868][ T333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2013.654728][ T5860] usb 3-1: USB disconnect, device number 79 [ 2013.661613][ T5860] f81534a_ctrl 3-1:0.163: failed to set register 0x116: -19 [ 2013.668950][ T5860] f81534a_ctrl 3-1:0.163: failed to enable ports: -19 [ 2013.687957][ T23] usb 4-1: USB disconnect, device number 123 [ 2013.822787][ T362] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2014.189221][ T374] loop4: detected capacity change from 0 to 32768 [ 2014.198580][ T374] (syz.4.22627,374,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2014.212608][ T374] (syz.4.22627,374,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2014.229461][ T5860] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 2014.268536][ T374] JBD2: Ignoring recovery information on journal [ 2014.306797][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2014.382086][ T374] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2014.452910][ T5860] usb 1-1: config 0 has an invalid interface number: 3 but max is 2 [ 2014.464931][ T5860] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 2014.493634][ T5860] usb 1-1: config 0 has no interface number 1 [ 2014.509860][ T387] loop2: detected capacity change from 0 to 764 [ 2014.516640][ T5860] usb 1-1: config 0 has no interface number 2 [ 2014.535807][ T5860] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 2014.558624][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.567781][ T387] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 2014.582849][ T5860] usb 1-1: config 0 descriptor?? [ 2014.625387][T26854] ocfs2: Unmounting device (7,4) on (node local) [ 2014.646723][ T387] Symlink component flag not implemented [ 2014.652508][ T387] Symlink component flag not implemented (7) [ 2014.849222][ T5860] qcserial 1-1:0.3: Qualcomm USB modem converter detected [ 2015.155971][ T5860] usb 1-1: USB disconnect, device number 122 [ 2015.180748][ T5860] qcserial 1-1:0.3: device disconnected [ 2015.448250][ T27] audit: type=1326 audit(1764105345.885:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.3.22643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2015.481947][ T27] audit: type=1326 audit(1764105345.913:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.3.22643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2015.542807][ T448] loop2: detected capacity change from 0 to 16 [ 2015.561761][ T27] audit: type=1326 audit(1764105345.951:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.3.22643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2015.572014][ T445] loop3: detected capacity change from 0 to 2048 [ 2015.591254][ T448] erofs: (device loop2): mounted with root inode @ nid 36. [ 2015.620373][ T27] audit: type=1326 audit(1764105345.951:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.3.22643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4749d8f783 code=0x7ffc0000 [ 2015.671043][ T27] audit: type=1326 audit(1764105345.951:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=444 comm="syz.3.22643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4749d8e1ff code=0x7ffc0000 [ 2015.697362][ T445] Alternate GPT is invalid, using primary GPT. [ 2015.710918][ T445] loop3: p2 p3 p7 [ 2016.072530][ T484] openvswitch: netlink: Actions may not be safe on all matching packets [ 2016.150729][T23875] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2016.353492][T23875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.370446][T23875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2016.418544][T23875] usb 5-1: config 1 interface 1 has no altsetting 1 [ 2016.442472][T23875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2016.452085][T23875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.481268][T23875] usb 5-1: Product: syz [ 2016.487864][T23875] usb 5-1: Manufacturer: syz [ 2016.495006][T23875] usb 5-1: SerialNumber: syz [ 2016.517130][T23875] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 2016.528487][ T511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22659'. [ 2016.546784][T23875] cdc_ncm 5-1:1.0: bind() failure [ 2016.571989][T23875] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2016.598451][T23875] cdc_ncm 5-1:1.1: bind() failure [ 2016.738621][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2016.810043][T23875] usb 5-1: USB disconnect, device number 59 [ 2017.382180][ T560] loop0: detected capacity change from 0 to 1024 [ 2017.439152][ T560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2017.681358][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2018.252952][ T607] loop3: detected capacity change from 0 to 512 [ 2018.271967][ T603] loop2: detected capacity change from 0 to 4096 [ 2018.300712][ T603] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 2018.317610][ T607] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2018.425011][ T607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2018.459971][ T607] ext4 filesystem being mounted at /5477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2018.463798][ T575] loop4: detected capacity change from 0 to 40427 [ 2018.499668][ T575] F2FS-fs (loop4): invalid crc value [ 2018.543186][ T575] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2018.641092][ T575] F2FS-fs (loop4): Start checkpoint disabled! [ 2018.660608][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2018.692577][ T624] gretap1: entered promiscuous mode [ 2018.700834][ T575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2018.901553][ T636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22689'. [ 2019.280536][ T659] nft_compat: unsupported protocol 1 [ 2019.515779][ T670] loop3: detected capacity change from 0 to 512 [ 2019.551447][ T670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2019.596777][ T670] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2019.626827][ T670] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 2019.634792][ T670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 2019.659906][ T664] loop4: detected capacity change from 0 to 4096 [ 2019.669773][ T670] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 2019.680678][ T670] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 2019.691954][ T670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 2019.728514][ T670] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 2019.813696][ T664] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 2019.843703][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2019.858423][ T664] ntfs3: loop4: Failed to load $Extend (-22). [ 2019.889375][ T664] ntfs3: loop4: Failed to initialize $Extend. [ 2019.978150][ T690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22706'. [ 2020.044334][ T690] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2020.336980][ T710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22709'. [ 2020.493905][ T715] loop2: detected capacity change from 0 to 64 [ 2020.534447][ T715] syz.2.22712: attempt to access beyond end of device [ 2020.534447][ T715] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 2020.597046][ T715] Buffer I/O error on dev loop2, logical block 512, async page read [ 2020.607787][ T715] syz.2.22712: attempt to access beyond end of device [ 2020.607787][ T715] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 2020.629415][ T715] Buffer I/O error on dev loop2, logical block 56576, async page read [ 2020.720811][ T730] loop0: detected capacity change from 0 to 16 [ 2020.744930][ T730] erofs: (device loop0): mounted with root inode @ nid 36. [ 2020.782245][ T730] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 2020.809896][ T730] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 2020.848314][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 2020.848328][ T27] audit: type=1800 audit(2000000004.789:472): pid=730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.22716" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 2021.679543][ T794] netlink: 72 bytes leftover after parsing attributes in process `syz.2.22733'. [ 2021.701397][ T794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22733'. [ 2021.718179][ T794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22733'. [ 2021.765194][ T802] loop0: detected capacity change from 0 to 256 [ 2021.769018][ T801] pimreg: entered allmulticast mode [ 2021.933667][ T811] loop4: detected capacity change from 0 to 16 [ 2021.978668][ T811] erofs: (device loop4): mounted with root inode @ nid 36. [ 2022.056486][ T811] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 2022.094779][ T811] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 2022.105563][ T27] audit: type=1800 audit(2000000005.958:473): pid=811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.22738" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 2023.125264][ T889] netlink: 'syz.2.22758': attribute type 1 has an invalid length. [ 2023.146807][ T889] netlink: 220 bytes leftover after parsing attributes in process `syz.2.22758'. [ 2023.270657][ T5860] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2023.284472][ T901] loop4: detected capacity change from 0 to 64 [ 2023.475617][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 2023.492202][ T5860] usb 1-1: config 0 has an invalid interface number: 223 but max is 0 [ 2023.499348][ T913] loop4: detected capacity change from 0 to 2048 [ 2023.501771][ T5860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2023.551352][ T5860] usb 1-1: config 0 has no interface number 0 [ 2023.552039][ T913] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2023.558415][ T5860] usb 1-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 2023.627252][ T5860] usb 1-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2023.666169][ T5860] usb 1-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2023.699755][ T5860] usb 1-1: config 0 interface 223 has no altsetting 0 [ 2023.732693][ T5860] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2023.752732][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.781121][ T5860] usb 1-1: Product: syz [ 2023.788157][ T5860] usb 1-1: Manufacturer: syz [ 2023.792796][ T5860] usb 1-1: SerialNumber: syz [ 2023.830092][ T5860] usb 1-1: config 0 descriptor?? [ 2024.165929][ T895] loop3: detected capacity change from 0 to 40427 [ 2024.234508][ T895] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x7ffff [ 2024.243059][ T895] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 2024.272476][ T895] F2FS-fs (loop3): Image doesn't support compression [ 2024.297539][ T789] usb 1-1: USB disconnect, device number 123 [ 2024.301965][ T895] F2FS-fs (loop3): invalid crc value [ 2024.333920][ T895] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2024.463739][ T895] F2FS-fs (loop3): Start checkpoint disabled! [ 2024.485207][ T895] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2024.640841][ T895] syz.3.22762: attempt to access beyond end of device [ 2024.640841][ T895] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2024.700857][ T972] delete_channel: no stack [ 2024.899466][ T49] kworker/u4:3: attempt to access beyond end of device [ 2024.899466][ T49] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 2024.922640][ T951] loop4: detected capacity change from 0 to 32768 [ 2024.953842][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 2024.972590][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 2024.977317][ T951] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2025.122171][ T951] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 2025.174668][ T951] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2025.206369][ T951] OCFS2: File system is now read-only. [ 2025.223128][ T951] (syz.4.22772,951,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 2025.390149][T26854] ocfs2: Unmounting device (7,4) on (node local) [ 2025.518602][ T1010] netlink: 196 bytes leftover after parsing attributes in process `syz.4.22785'. [ 2025.740298][ T1021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22789'. [ 2026.096031][ T1038] loop4: detected capacity change from 0 to 4096 [ 2026.098061][ T1045] loop3: detected capacity change from 0 to 2048 [ 2026.129019][ T1038] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 2026.147424][ T1038] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 2026.167301][ T1038] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 2026.181137][ T1051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22795'. [ 2026.199365][ T1045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2026.238632][ T1038] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 2026.386779][ T1038] ntfs: volume version 3.1. [ 2026.422693][ T1064] IPv6: NLM_F_CREATE should be specified when creating new route [ 2026.431651][ T1064] netlink: 1 bytes leftover after parsing attributes in process `syz.0.22798'. [ 2026.444291][ T1038] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 2026.467114][ T1038] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 2026.742413][ T1080] netlink: 'syz.3.22802': attribute type 2 has an invalid length. [ 2026.775188][ T1080] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.22802'. [ 2027.023583][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2027.097848][ T5850] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2027.249830][ T1112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22812'. [ 2027.278838][ T1117] loop0: detected capacity change from 0 to 128 [ 2027.297667][ T5850] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 2027.318058][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2027.343130][ T1117] syz.0.22813: attempt to access beyond end of device [ 2027.343130][ T1117] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 2027.365087][ T5850] usb 3-1: Product: syz [ 2027.369322][ T5850] usb 3-1: SerialNumber: syz [ 2027.377472][ T1117] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 2027.388477][ T5850] usb 3-1: config 0 descriptor?? [ 2027.536702][ T1159] program syz.3.22814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2027.552524][ T5800] sysv_free_block: flc_count > flc_size [ 2027.559502][ T5800] sysv_free_block: flc_count > flc_size [ 2027.565111][ T5800] sysv_free_block: flc_count > flc_size [ 2027.568254][ T1159] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2027.589559][ T5800] sysv_free_block: flc_count > flc_size [ 2027.600676][ T5800] sysv_free_block: flc_count > flc_size [ 2027.621812][ T5800] sysv_free_block: flc_count > flc_size [ 2027.627468][ T5800] sysv_free_block: flc_count > flc_size [ 2027.654115][ T5850] hso 3-1:0.0: Failed to find BULK IN ep [ 2027.661894][ T5800] sysv_free_block: flc_count > flc_size [ 2027.675717][ T5800] sysv_free_block: flc_count > flc_size [ 2027.681398][ T5800] sysv_free_block: flc_count > flc_size [ 2027.706496][ T5800] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 2027.923171][ T5850] usb 3-1: USB disconnect, device number 80 [ 2028.221596][ T1200] loop4: detected capacity change from 0 to 2048 [ 2028.276274][ T1200] loop4: p1 < > p3 [ 2028.285107][ T1200] loop4: p3 size 54016 extends beyond EOD, truncated [ 2028.432024][T18029] udevd[18029]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 2028.449580][ T7122] udevd[7122]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 2028.571677][ T1227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22830'. [ 2028.923627][ T1241] loop0: detected capacity change from 0 to 4096 [ 2029.053092][ T1241] ntfs: volume version 3.1. [ 2029.089451][ T1259] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.22840'. [ 2029.333256][ T1273] tmpfs: Group quota inode hardlimit too large. [ 2029.548564][ T1284] loop2: detected capacity change from 0 to 256 [ 2029.607355][ T1284] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 2030.002346][ T1316] netlink: 'syz.0.22855': attribute type 21 has an invalid length. [ 2030.027070][ T1316] netlink: 128 bytes leftover after parsing attributes in process `syz.0.22855'. [ 2030.036389][ T1316] netlink: 'syz.0.22855': attribute type 4 has an invalid length. [ 2030.102367][ T1316] netlink: 3 bytes leftover after parsing attributes in process `syz.0.22855'. [ 2030.609187][ T1346] comedi comedi0: Cannot bond this driver to itself! [ 2030.664860][ T1297] loop3: detected capacity change from 0 to 32768 [ 2030.676976][ T1348] loop0: detected capacity change from 0 to 128 [ 2030.751830][ T1297] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2030.795486][ T1348] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2030.868522][ T1297] XFS (loop3): Ending clean mount [ 2030.868538][ T1348] ext4 filesystem being mounted at /5910/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2030.902170][ T1297] XFS (loop3): Quotacheck needed: Please wait. [ 2031.100745][ T5860] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2031.119940][ T1348] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2031.128473][ T1297] XFS (loop3): Quotacheck: Done. [ 2031.183913][ T5800] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2031.291768][ T5795] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2031.347289][ T5860] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2031.376570][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.417535][ T5860] usb 3-1: config 0 descriptor?? [ 2031.608038][ C1] vkms_vblank_simulate: vblank timer overrun [ 2031.898699][ T5860] ath6kl: Failed to submit usb control message: -71 [ 2031.905481][ T5860] ath6kl: unable to send the bmi data to the device: -71 [ 2031.922059][ T5860] ath6kl: Unable to send get target info: -71 [ 2031.932718][ T5860] ath6kl: Failed to init ath6kl core: -71 [ 2031.939752][ T5860] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 2032.002612][ T5860] usb 3-1: USB disconnect, device number 81 [ 2032.139357][ T1389] loop4: detected capacity change from 0 to 32768 [ 2032.280029][ T1403] syz.0.22876 (1403): drop_caches: 2 [ 2032.414766][ T1389] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2032.559963][ T1389] (syz.4.22874,1389,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 2032.612682][ T1389] (syz.4.22874,1389,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 2032.622659][ T1389] (syz.4.22874,1389,0):ocfs2_mknod:298 ERROR: status = -2 [ 2032.630300][ T1389] (syz.4.22874,1389,0):ocfs2_mknod:502 ERROR: status = -2 [ 2032.664550][ T1389] (syz.4.22874,1389,0):ocfs2_create:676 ERROR: status = -2 [ 2032.800547][ T1437] loop3: detected capacity change from 0 to 1024 [ 2032.808400][ T1437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2032.815091][ T1437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2032.848886][T26854] ocfs2: Unmounting device (7,4) on (node local) [ 2032.916665][ T1437] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2032.977691][ T1437] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2033.031597][ T1437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2033.282733][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2033.692332][ T1470] loop0: detected capacity change from 0 to 4096 [ 2033.764764][ T1470] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 2033.946370][ T1470] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 2034.287389][ T1505] overlayfs: conflicting options: userxattr,metacopy=on [ 2034.849665][ T1540] loop0: detected capacity change from 0 to 65 [ 2034.886081][ T1540] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 2034.917965][ T1540] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 2035.157879][ T1560] loop0: detected capacity change from 0 to 64 [ 2035.210688][ T1564] loop4: detected capacity change from 0 to 512 [ 2035.246733][ T1564] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2035.310430][ T1564] EXT4-fs (loop4): 1 truncate cleaned up [ 2035.331656][ T1564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2035.358984][ T1564] cifs: Unknown parameter 'dioread_lock' [ 2035.437446][T26854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2036.339757][ T1578] loop3: detected capacity change from 0 to 32768 [ 2036.576277][ T1637] netlink: 460 bytes leftover after parsing attributes in process `syz.2.22941'. [ 2036.779307][ T1645] loop4: detected capacity change from 0 to 1024 [ 2036.933920][ T1645] hfsplus: extend alloc file! (16384,256,150995124) [ 2036.940585][ T1645] hfsplus: failed to extend attributes file [ 2037.649500][ T5850] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 2037.892247][ T5850] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2037.907282][ T5850] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2037.925116][ T5850] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2037.944470][ T5850] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2037.958629][ T5850] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2037.977153][ T5850] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2037.985227][ T5850] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2038.008563][ T5850] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2038.039413][ T5850] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2038.062276][ T5850] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2038.078439][ T5850] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2038.086196][ T5850] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 2038.107257][ T5850] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2038.119955][ T5850] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2038.153355][ T5850] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2038.188414][ T5850] usb 5-1: string descriptor 0 read error: -22 [ 2038.195528][ T5850] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2038.214919][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.255115][ T5850] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2038.347090][ T1725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22965'. [ 2038.355449][ T1701] loop2: detected capacity change from 0 to 32768 [ 2038.385820][ T1725] veth9: entered allmulticast mode [ 2038.396794][ T1707] loop0: detected capacity change from 0 to 32768 [ 2038.449761][ T1701] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2038.466926][ T5850] usb 5-1: USB disconnect, device number 60 [ 2038.542618][ T1701] (syz.2.22958,1701,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 2038.561393][ T1701] (syz.2.22958,1701,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 2038.571732][ T1701] (syz.2.22958,1701,0):ocfs2_mknod:298 ERROR: status = -2 [ 2038.581251][ T1701] (syz.2.22958,1701,0):ocfs2_mknod:502 ERROR: status = -2 [ 2038.594409][ T1701] (syz.2.22958,1701,0):ocfs2_create:676 ERROR: status = -2 [ 2038.697800][ T5799] ocfs2: Unmounting device (7,2) on (node local) [ 2039.817819][ T1813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22986'. [ 2040.205825][ T1782] loop0: detected capacity change from 0 to 32768 [ 2040.320296][ T1782] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2040.502898][ T1782] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 2040.567667][ T1857] netlink: 'syz.4.22997': attribute type 1 has an invalid length. [ 2040.581435][ T1782] XFS (loop0): Starting recovery (logdev: internal) [ 2040.664381][ T1782] XFS (loop0): Ending recovery (logdev: internal) [ 2040.701757][ T1782] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 2040.722670][ T1782] XFS (loop0): Failed to initialize disk quotas. [ 2040.895212][ T1782] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 2040.906386][ T1872] loop3: detected capacity change from 0 to 256 [ 2040.959300][ T1872] exfat: Deprecated parameter 'namecase' [ 2040.992664][ T5800] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2041.037850][ T1872] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 2041.698691][ T1897] loop2: detected capacity change from 0 to 2048 [ 2042.427230][ T1886] syz.4.23007 (1886): drop_caches: 2 [ 2042.431075][ T1897] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2042.637448][ T1938] loop4: detected capacity change from 0 to 2048 [ 2042.669383][ T1938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2042.995236][ T1965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23029'. [ 2043.403413][ T1987] netlink: 52 bytes leftover after parsing attributes in process `syz.2.23036'. [ 2043.791555][ T1974] loop4: detected capacity change from 0 to 32768 [ 2043.872266][ T1974] ERROR: (device loop4): diAllocBit: iag inconsistent [ 2043.872266][ T1974] [ 2043.892978][ T1974] ialloc: diAlloc returned -5! [ 2044.414676][ T1998] loop3: detected capacity change from 0 to 32768 [ 2044.883083][ T27] audit: type=1326 audit(2000000027.276:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2074 comm="syz.2.23053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb0b8f749 code=0x7ffc0000 [ 2044.935492][ T2080] SET target dimension over the limit! [ 2044.978001][ T27] audit: type=1326 audit(2000000027.276:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2074 comm="syz.2.23053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb0b8f749 code=0x7ffc0000 [ 2045.072311][ T27] audit: type=1326 audit(2000000027.276:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2074 comm="syz.2.23053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f0eb0b8f749 code=0x7ffc0000 [ 2045.122223][ T2091] netlink: 'syz.0.23058': attribute type 46 has an invalid length. [ 2045.148279][ T2091] netlink: 'syz.0.23058': attribute type 19 has an invalid length. [ 2045.163831][ T27] audit: type=1326 audit(2000000027.276:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2074 comm="syz.2.23053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb0b8f749 code=0x7ffc0000 [ 2045.213756][ T27] audit: type=1326 audit(2000000027.276:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2074 comm="syz.2.23053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb0b8f749 code=0x7ffc0000 [ 2045.223941][ T2083] loop3: detected capacity change from 0 to 4096 [ 2045.305524][ T2083] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 2045.752106][ T2107] loop4: detected capacity change from 0 to 8192 [ 2046.004341][ T27] audit: type=1326 audit(2000000028.323:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2132 comm="syz.0.23071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2046.084316][ T27] audit: type=1326 audit(2000000028.323:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2132 comm="syz.0.23071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2046.180293][ T27] audit: type=1326 audit(2000000028.351:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2132 comm="syz.0.23071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2046.318178][ T27] audit: type=1326 audit(2000000028.351:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2132 comm="syz.0.23071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2046.391338][ T27] audit: type=1326 audit(2000000028.361:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2132 comm="syz.0.23071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2046.516750][ T2158] loop3: detected capacity change from 0 to 512 [ 2046.529067][ T2160] netlink: 'syz.4.23079': attribute type 15 has an invalid length. [ 2046.553918][ T2160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23079'. [ 2046.558239][ T2158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2046.581765][ T2167] bridge0: port 1(team0) entered blocking state [ 2046.598181][ T2167] bridge0: port 1(team0) entered disabled state [ 2046.615654][ T2167] team0: entered allmulticast mode [ 2046.622750][ T2158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2046.646814][ T2158] ext4 filesystem being mounted at /5565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2046.650239][ T2167] geneve0: entered allmulticast mode [ 2046.674530][ T2167] team0: entered promiscuous mode [ 2046.684465][ T2167] geneve0: entered promiscuous mode [ 2046.784263][ T2158] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:335: inode #15: comm syz.3.23078: verity file corrupted; can't find descriptor [ 2046.838598][ T2158] EXT4-fs (loop3): Remounting filesystem read-only [ 2046.855208][ T2158] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 2046.947395][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2047.373192][ T2209] netlink: 'syz.4.23093': attribute type 1 has an invalid length. [ 2048.135339][ T2260] ieee802154 phy1 wpan1: encryption failed: -22 [ 2048.329876][ T2271] dlm: no locking on control device [ 2048.800602][ T2303] loop0: detected capacity change from 0 to 8 [ 2048.830004][ T2303] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 2049.858873][ T2341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23136'. [ 2049.989023][ T2326] loop2: detected capacity change from 0 to 32768 [ 2050.002392][ T2326] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.23130 (2326) [ 2050.354424][ T2326] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2050.379860][ T2301] syz.3.23123 (2301): drop_caches: 2 [ 2050.416418][ T2326] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 2050.446447][ T2326] BTRFS info (device loop2): force clearing of disk cache [ 2050.453710][ T2326] BTRFS info (device loop2): setting nodatacow, compression disabled [ 2050.516326][ T2326] BTRFS info (device loop2): max_inline at 0 [ 2050.537898][ T2326] BTRFS info (device loop2): enabling disk space caching [ 2050.556178][ T2326] BTRFS info (device loop2): turning off barriers [ 2050.562660][ T2326] BTRFS info (device loop2): turning on flush-on-commit [ 2050.617663][ T2326] BTRFS info (device loop2): doing ref verification [ 2050.635943][ T2326] BTRFS info (device loop2): enabling ssd optimizations [ 2050.650139][ T2326] BTRFS info (device loop2): max_inline at 868 [ 2050.656380][ T2326] BTRFS info (device loop2): disk space caching is enabled [ 2050.672521][ T2371] loop3: detected capacity change from 0 to 2048 [ 2050.701433][ T2371] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2050.834787][ T2371] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 2050.861137][ T2403] netlink: 22 bytes leftover after parsing attributes in process `syz.4.23147'. [ 2050.885814][ T2326] BTRFS info (device loop2): auto enabling async discard [ 2050.930292][ T2326] BTRFS info (device loop2): rebuilding free space tree [ 2051.013445][ T2326] BTRFS info (device loop2): disabling free space tree [ 2051.020427][ T2326] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2051.059920][ T2326] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2051.327733][ T5799] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2052.109060][ T2441] syz.2.23150 (2441): drop_caches: 2 [ 2052.114804][ C0] vkms_vblank_simulate: vblank timer overrun [ 2052.841864][ T2461] loop4: detected capacity change from 0 to 32768 [ 2052.884030][ T2461] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.23160 (2461) [ 2052.928758][ T2461] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2052.947959][ T2461] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2052.965812][ T2461] BTRFS info (device loop4): force clearing of disk cache [ 2052.974349][ T2461] BTRFS info (device loop4): setting nodatacow, compression disabled [ 2053.012025][ T2461] BTRFS info (device loop4): max_inline at 0 [ 2053.031261][ T2461] BTRFS info (device loop4): enabling disk space caching [ 2053.045471][ T2461] BTRFS info (device loop4): turning off barriers [ 2053.052098][ T2461] BTRFS info (device loop4): turning on flush-on-commit [ 2053.063183][ T2461] BTRFS info (device loop4): doing ref verification [ 2053.075145][ T2461] BTRFS info (device loop4): enabling ssd optimizations [ 2053.093037][ T2461] BTRFS info (device loop4): max_inline at 868 [ 2053.113636][ T2461] BTRFS info (device loop4): disk space caching is enabled [ 2053.145605][ T2516] syz.3.23172 (2516): drop_caches: 2 [ 2053.279103][ T2461] BTRFS info (device loop4): auto enabling async discard [ 2053.320730][ T2461] BTRFS info (device loop4): rebuilding free space tree [ 2053.346410][ T2461] BTRFS info (device loop4): disabling free space tree [ 2053.353498][ T2461] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2053.396931][ T2461] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2053.421493][ T2549] overlayfs: conflicting options: metacopy=off,verity=on [ 2053.732087][T26854] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2053.887704][ T2571] syz.2.23183 (2571): drop_caches: 2 [ 2054.029879][ T2582] loop3: detected capacity change from 0 to 64 [ 2054.033272][ T2583] CIFS mount error: No usable UNC path provided in device string! [ 2054.033272][ T2583] [ 2054.098496][ T2583] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2054.848971][ T2630] loop0: detected capacity change from 0 to 2048 [ 2054.921980][ T2630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2055.240936][ T2653] netlink: 'syz.2.23203': attribute type 10 has an invalid length. [ 2055.276963][ T2653] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.23203'. [ 2055.302867][ T2661] netlink: 'syz.0.23202': attribute type 10 has an invalid length. [ 2055.360686][ T2661] team0: Device ipvlan1 failed to register rx_handler [ 2055.632323][ T2669] loop4: detected capacity change from 0 to 8192 [ 2055.649136][ T2678] tmpfs: Bad value for 'mpol' [ 2055.670685][ T2669] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2055.767489][ T2669] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 2055.835042][ T2669] REISERFS (device loop4): using ordered data mode [ 2055.841685][ T2669] reiserfs: using flush barriers [ 2055.885353][ T2669] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 2055.947514][ T2669] REISERFS (device loop4): checking transaction log (loop4) [ 2055.971497][ T2669] REISERFS (device loop4): Using r5 hash to sort names [ 2055.989182][ T2669] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 2056.257613][ T27] audit: type=1326 audit(2000000037.911:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2735 comm="syz.0.23214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2056.290642][ T2666] loop3: detected capacity change from 0 to 32768 [ 2056.333716][ T27] audit: type=1326 audit(2000000037.911:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2735 comm="syz.0.23214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2056.432804][ T27] audit: type=1326 audit(2000000037.958:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2735 comm="syz.0.23214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2056.500185][ T27] audit: type=1326 audit(2000000037.958:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2735 comm="syz.0.23214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2056.550883][ T2750] tmpfs: Bad value for 'mpol' [ 2056.579656][ T27] audit: type=1326 audit(2000000037.958:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2735 comm="syz.0.23214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2056.816479][ T2763] geneve4: entered allmulticast mode [ 2057.200166][ T2794] loop2: detected capacity change from 0 to 1024 [ 2057.230285][ T2794] EXT4-fs: inline encryption not supported [ 2057.348183][ T2794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2057.596548][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2058.277251][ T2869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23244'. [ 2058.481376][ T2885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23248'. [ 2058.869941][ T2910] loop2: detected capacity change from 0 to 512 [ 2058.894163][ T2910] EXT4-fs: Ignoring removed mblk_io_submit option [ 2058.921787][ T2910] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 2059.018094][ T2910] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.23256: attempt to clear invalid blocks 2 len 1 [ 2059.095827][ T2910] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 2059.198748][ T2910] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.23256: invalid indirect mapped block 1819239214 (level 0) [ 2059.235993][ T2910] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.23256: invalid indirect mapped block 1819239214 (level 1) [ 2059.314947][ T2910] EXT4-fs (loop2): 1 truncate cleaned up [ 2059.346964][ T2910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2059.549855][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2059.555297][ T2940] loop4: detected capacity change from 0 to 4096 [ 2059.599573][ T2940] ntfs3: loop4: ino=3, Correct links count -> 2. [ 2059.628437][ T2951] loop3: detected capacity change from 0 to 256 [ 2059.689687][ T2951] exfat: Deprecated parameter 'utf8' [ 2059.712711][ T2951] exfat: Deprecated parameter 'utf8' [ 2059.738609][ T2951] exfat: Deprecated parameter 'namecase' [ 2059.776205][ T2951] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 2060.253627][ T2980] netlink: 176 bytes leftover after parsing attributes in process `syz.4.23278'. [ 2061.166832][ T3013] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2061.249638][ T3019] netlink: 'syz.4.23289': attribute type 2 has an invalid length. [ 2061.271428][ T3019] netlink: 'syz.4.23289': attribute type 1 has an invalid length. [ 2061.491144][ T3032] misc userio: No port type given on /dev/userio [ 2061.871465][ T3056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23301'. [ 2061.925253][ T3050] loop2: detected capacity change from 0 to 4096 [ 2061.959987][ T3050] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 2062.051633][ T3066] loop0: detected capacity change from 0 to 64 [ 2062.646762][ T3099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.23311'. [ 2062.790019][ T3109] loop4: detected capacity change from 0 to 256 [ 2062.877701][ T3109] FAT-fs (loop4): Directory bread(block 64) failed [ 2062.898959][ T3115] netlink: 256 bytes leftover after parsing attributes in process `syz.2.23318'. [ 2062.900362][ T3109] FAT-fs (loop4): Directory bread(block 65) failed [ 2062.937460][ T3109] FAT-fs (loop4): Directory bread(block 66) failed [ 2062.960359][ T3109] FAT-fs (loop4): Directory bread(block 67) failed [ 2062.971665][ T3109] FAT-fs (loop4): Directory bread(block 68) failed [ 2062.981453][ T3109] FAT-fs (loop4): Directory bread(block 69) failed [ 2063.008529][ T3109] FAT-fs (loop4): Directory bread(block 70) failed [ 2063.015135][ T3109] FAT-fs (loop4): Directory bread(block 71) failed [ 2063.049135][ T3109] FAT-fs (loop4): Directory bread(block 72) failed [ 2063.073066][ T3109] FAT-fs (loop4): Directory bread(block 73) failed [ 2063.161908][ T3128] usb usb5: usbfs: process 3128 (syz.2.23321) did not claim interface 0 before use [ 2063.291024][ T3133] sock: sock_timestamping_bind_phc: sock not bind to device [ 2063.789095][ T3171] loop4: detected capacity change from 0 to 1024 [ 2064.137916][ T3194] loop4: detected capacity change from 0 to 128 [ 2064.148170][ T3196] loop0: detected capacity change from 0 to 16 [ 2064.163258][ T3194] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 2064.200963][ T3196] erofs: (device loop0): mounted with root inode @ nid 36. [ 2064.248312][ T3194] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 2064.256365][ T3194] FAT-fs (loop4): Filesystem has been set read-only [ 2064.262253][ T3196] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 2064.306298][ T3196] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 2064.326274][ T3196] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 2064.343518][ T3196] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 2064.354642][ T3196] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 2064.985350][T23875] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2065.188786][T23875] usb 3-1: Using ep0 maxpacket: 16 [ 2065.198616][T23875] usb 3-1: config 0 interface 0 altsetting 67 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2065.228883][T23875] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2065.256119][T23875] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2065.287261][T23875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.329529][T23875] usb 3-1: config 0 descriptor?? [ 2065.353073][ T3273] infiniband syz2: set down [ 2065.540766][ T3272] loop0: detected capacity change from 0 to 4096 [ 2065.579755][ T3272] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 2065.583148][T23875] usbhid 3-1:0.0: can't add hid device: -71 [ 2065.626798][ T23] lo speed is unknown, defaulting to 1000 [ 2065.626902][T23875] usbhid: probe of 3-1:0.0 failed with error -71 [ 2065.657407][ T789] lo speed is unknown, defaulting to 1000 [ 2065.678320][T23875] usb 3-1: USB disconnect, device number 82 [ 2065.744638][ T3272] ntfs3: loop0: MFT: r=18, expect seq=1 instead of 0! [ 2065.776541][ T3272] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 2065.810529][ T3272] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 2066.223476][ T3311] loop3: detected capacity change from 0 to 256 [ 2066.248141][ T3314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23371'. [ 2066.360629][ T3311] FAT-fs (loop3): Directory bread(block 64) failed [ 2066.379665][ T3311] FAT-fs (loop3): Directory bread(block 65) failed [ 2066.390595][ T3311] FAT-fs (loop3): Directory bread(block 66) failed [ 2066.425904][ T3311] FAT-fs (loop3): Directory bread(block 67) failed [ 2066.450477][ T3311] FAT-fs (loop3): Directory bread(block 68) failed [ 2066.457430][ T3311] FAT-fs (loop3): Directory bread(block 69) failed [ 2066.486829][ T3311] FAT-fs (loop3): Directory bread(block 70) failed [ 2066.511102][ T3311] FAT-fs (loop3): Directory bread(block 71) failed [ 2066.538686][ T3311] FAT-fs (loop3): Directory bread(block 72) failed [ 2066.571412][ T3311] FAT-fs (loop3): Directory bread(block 73) failed [ 2067.028703][ T3351] netlink: 68 bytes leftover after parsing attributes in process `syz.4.23382'. [ 2067.209528][ T3366] netlink: 830 bytes leftover after parsing attributes in process `syz.4.23387'. [ 2067.484556][ T27] audit: type=1326 audit(2000000007.595:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3388 comm="syz.0.23392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2067.506936][ C1] vkms_vblank_simulate: vblank timer overrun [ 2067.579754][ T27] audit: type=1326 audit(2000000007.651:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3388 comm="syz.0.23392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2067.654729][ T27] audit: type=1326 audit(2000000007.660:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3388 comm="syz.0.23392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2067.739585][ T27] audit: type=1326 audit(2000000007.660:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3388 comm="syz.0.23392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2067.765632][ T3402] netlink: 766 bytes leftover after parsing attributes in process `syz.4.23394'. [ 2067.786259][ T27] audit: type=1326 audit(2000000007.660:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3388 comm="syz.0.23392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2067.815434][ T3418] loop3: detected capacity change from 0 to 1024 [ 2068.165450][ T3438] trusted_key: encrypted_key: insufficient parameters specified [ 2068.671447][ T3471] sctp: [Deprecated]: syz.2.23414 (pid 3471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2068.671447][ T3471] Use struct sctp_sack_info instead [ 2068.858268][ T3481] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23418'. [ 2069.171148][ T3500] syz.4.23422 (3500): /proc/3499/oom_adj is deprecated, please use /proc/3499/oom_score_adj instead. [ 2069.270549][ T3468] loop0: detected capacity change from 0 to 32768 [ 2069.294102][T23875] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2069.315888][ T3468] JBD2: Ignoring recovery information on journal [ 2069.505250][ T3468] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 2069.517221][T23875] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2069.557914][T23875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.568835][ T3520] ieee802154 phy1 wpan1: encryption failed: -22 [ 2069.582433][T23875] usb 4-1: Product: syz [ 2069.586638][T23875] usb 4-1: Manufacturer: syz [ 2069.610277][T23875] usb 4-1: SerialNumber: syz [ 2069.640421][T23875] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2069.671778][ T5800] ocfs2: Unmounting device (7,0) on (node local) [ 2069.686558][ T5850] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2069.784646][ T3530] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 2070.297131][ T789] usb 4-1: USB disconnect, device number 124 [ 2070.370298][ T3562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23437'. [ 2070.379995][ T3562] netlink: 'syz.2.23437': attribute type 1 has an invalid length. [ 2070.399374][ T3562] netlink: 'syz.2.23437': attribute type 2 has an invalid length. [ 2070.410200][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23437'. [ 2070.557137][ T3570] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (253) [ 2070.875927][ T5850] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2070.883017][ T5850] ath9k_htc: Failed to initialize the device [ 2070.933694][ T789] usb 4-1: ath9k_htc: USB layer deinitialized [ 2071.203331][ T3554] loop0: detected capacity change from 0 to 32768 [ 2071.273899][ T3554] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2071.584439][ T3554] XFS (loop0): Ending clean mount [ 2071.600835][ T3554] XFS (loop0): Quotacheck needed: Please wait. [ 2071.806607][ T3554] XFS (loop0): Quotacheck: Done. [ 2072.063454][ T5800] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2072.110720][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23466'. [ 2072.251120][ T3661] loop3: detected capacity change from 0 to 4096 [ 2072.547902][ C1] vkms_vblank_simulate: vblank timer overrun [ 2072.927621][ T3703] netlink: 'syz.4.23475': attribute type 8 has an invalid length. [ 2072.971300][ T3703] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.23475'. [ 2073.956739][ T3760] loop0: detected capacity change from 0 to 8 [ 2074.115452][ T3760] SQUASHFS error: xz decompression failed, data probably corrupt [ 2074.142971][ T3760] SQUASHFS error: Failed to read block 0xa8: -5 [ 2074.204419][ T3760] SQUASHFS error: xz decompression failed, data probably corrupt [ 2074.228968][ T3760] SQUASHFS error: Failed to read block 0xa8: -5 [ 2074.250829][ T27] audit: type=1800 audit(2000000013.928:494): pid=3760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23493" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 2074.686754][ T3800] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 2074.947280][ T3822] loop2: detected capacity change from 0 to 256 [ 2075.046835][ T3822] FAT-fs (loop2): Directory bread(block 64) failed [ 2075.073090][ T3822] FAT-fs (loop2): Directory bread(block 65) failed [ 2075.097272][ T3822] FAT-fs (loop2): Directory bread(block 66) failed [ 2075.122018][ T3822] FAT-fs (loop2): Directory bread(block 67) failed [ 2075.128227][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23514'. [ 2075.128758][ T3822] FAT-fs (loop2): Directory bread(block 68) failed [ 2075.139628][ T3831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23514'. [ 2075.146086][ T3822] FAT-fs (loop2): Directory bread(block 69) failed [ 2075.163317][ T3822] FAT-fs (loop2): Directory bread(block 70) failed [ 2075.170172][ T3822] FAT-fs (loop2): Directory bread(block 71) failed [ 2075.194884][ T3822] FAT-fs (loop2): Directory bread(block 72) failed [ 2075.201479][ T3822] FAT-fs (loop2): Directory bread(block 73) failed [ 2075.205568][ T5850] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2075.354788][ T3839] loop0: detected capacity change from 0 to 256 [ 2075.441189][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 2075.448552][ T5850] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 2075.459495][ T3839] FAT-fs (loop0): Directory bread(block 64) failed [ 2075.466386][ T5850] usb 5-1: config 179 has no interface number 0 [ 2075.466444][ T5850] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2075.466468][ T5850] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2075.466493][ T5850] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2075.466517][ T5850] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2075.495903][ T3839] FAT-fs (loop0): Directory bread(block 65) failed [ 2075.496020][ T3839] FAT-fs (loop0): Directory bread(block 66) failed [ 2075.496046][ T3839] FAT-fs (loop0): Directory bread(block 67) failed [ 2075.496136][ T3839] FAT-fs (loop0): Directory bread(block 68) failed [ 2075.496162][ T3839] FAT-fs (loop0): Directory bread(block 69) failed [ 2075.496255][ T3839] FAT-fs (loop0): Directory bread(block 70) failed [ 2075.496280][ T3839] FAT-fs (loop0): Directory bread(block 71) failed [ 2075.496369][ T3839] FAT-fs (loop0): Directory bread(block 72) failed [ 2075.496394][ T3839] FAT-fs (loop0): Directory bread(block 73) failed [ 2075.605221][ T5850] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2075.628675][ T5850] usb 5-1: config 179 interface 65 has no altsetting 0 [ 2075.640110][ T5850] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2075.653014][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.715151][ T5850] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input142 [ 2075.796618][ T5143] input input142: unable to receive magic message: -110 [ 2075.838727][ T5143] input input142: unable to receive magic message: -32 [ 2075.861920][ T5143] input input142: unable to receive magic message: -32 [ 2075.956393][T18029] input input142: unable to receive magic message: -32 [ 2076.009636][ T5143] input input142: unable to receive magic message: -32 [ 2076.068303][ T5143] input input142: unable to receive magic message: -32 [ 2076.310377][ T3886] loop3: detected capacity change from 0 to 128 [ 2076.317006][ T3884] netlink: 'syz.2.23527': attribute type 1 has an invalid length. [ 2076.356281][ T3886] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2076.391133][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2076.399759][T23875] usb 5-1: USB disconnect, device number 61 [ 2076.414944][ T3886] ext4 filesystem being mounted at /5665/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2076.441234][T23875] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2076.595900][ T5795] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2077.183436][ T789] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2077.192159][ T3953] netlink: 'syz.4.23544': attribute type 4 has an invalid length. [ 2077.210515][ T3953] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.23544'. [ 2077.362837][ T3962] loop2: detected capacity change from 0 to 128 [ 2077.415319][ T789] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2077.432178][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.442269][ T3962] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 2077.448030][ T789] usb 4-1: Product: syz [ 2077.454289][ T789] usb 4-1: Manufacturer: syz [ 2077.459020][ T789] usb 4-1: SerialNumber: syz [ 2077.487975][ T789] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2077.533983][ T23] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2077.678550][ T5799] sysv_free_block: flc_count > flc_size [ 2077.694344][ T5799] sysv_free_block: flc_count > flc_size [ 2077.717510][ T5799] sysv_free_block: flc_count > flc_size [ 2077.745571][ T5799] sysv_free_block: flc_count > flc_size [ 2077.771820][ T5799] sysv_free_block: flc_count > flc_size [ 2077.792589][ T5799] sysv_free_block: flc_count > flc_size [ 2077.825517][ T5799] sysv_free_block: flc_count > flc_size [ 2077.831317][ T5799] sysv_free_block: flc_count > flc_size [ 2077.889756][ T5799] sysv_free_block: flc_count > flc_size [ 2077.897649][ T5799] sysv_free_block: flc_count > flc_size [ 2077.915391][ T5799] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 2078.163376][T23875] usb 4-1: USB disconnect, device number 125 [ 2078.297970][ T4040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23558'. [ 2078.668235][ T23] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2078.688943][ T23] ath9k_htc: Failed to initialize the device [ 2078.711195][T23875] usb 4-1: ath9k_htc: USB layer deinitialized [ 2078.719803][ T5850] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2078.925887][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 2078.939698][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2078.978064][ T5850] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 2079.020723][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.051984][ T5850] usb 5-1: config 0 descriptor?? [ 2079.077456][ T5850] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 2079.094210][ T4098] loop0: detected capacity change from 0 to 8 [ 2079.148907][ T4098] SQUASHFS error: lzo decompression failed, data probably corrupt [ 2079.158144][ T4098] SQUASHFS error: Failed to read block 0x144: -5 [ 2079.165708][ T4098] SQUASHFS error: Unable to read metadata cache entry [142] [ 2079.173884][ T4098] SQUASHFS error: Unable to read directory block [142:26] [ 2079.333324][ T5850] usb 5-1: USB disconnect, device number 62 [ 2079.341357][ T4116] overlay: ./file0 is not a directory [ 2079.407740][ T23] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2079.545179][ T4131] xt_hashlimit: invalid rate [ 2079.631548][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 2079.641171][ T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2079.651006][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.661006][ T23] usb 3-1: Product: syz [ 2079.674102][ T23] usb 3-1: Manufacturer: syz [ 2079.678829][ T23] usb 3-1: SerialNumber: syz [ 2079.686275][ T23] r8152-cfgselector 3-1: config 0 descriptor?? [ 2079.811176][ T4148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23585'. [ 2079.821472][ T4148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23585'. [ 2079.830919][ T4148] netlink: 52 bytes leftover after parsing attributes in process `syz.0.23585'. [ 2079.920284][ T5860] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2079.991336][ T4156] xt_TCPMSS: Only works on TCP SYN packets [ 2080.131221][ T4163] ieee802154 phy1 wpan1: encryption failed: -22 [ 2080.144667][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 2080.155605][ T23] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2080.188072][ T5860] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2080.202257][ T23] r8152-cfgselector 3-1: USB disconnect, device number 83 [ 2080.219422][ T5860] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2080.244046][ T5860] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2080.259234][ T5860] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2080.294518][ T5860] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2080.345072][ T5860] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2080.365670][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.380272][ T5860] usb 4-1: Product: syz [ 2080.384489][ T5860] usb 4-1: Manufacturer: syz [ 2080.396194][ T5860] usb 4-1: SerialNumber: syz [ 2080.678642][ T5860] usb 4-1: 0:2 : does not exist [ 2080.724393][ T5860] usb 4-1: USB disconnect, device number 126 [ 2080.904840][ T4161] loop0: detected capacity change from 0 to 32768 [ 2081.276780][ T4226] sctp: [Deprecated]: syz.4.23603 (pid 4226) Use of int in maxseg socket option. [ 2081.276780][ T4226] Use struct sctp_assoc_value instead [ 2081.380029][ T4232] loop2: detected capacity change from 0 to 64 [ 2081.420263][ T4232] hfs: unable to locate alternate MDB [ 2081.425690][ T4232] hfs: continuing without an alternate MDB [ 2081.452926][ T4235] loop4: detected capacity change from 0 to 1764 [ 2082.332108][ T27] audit: type=1326 audit(2000000021.486:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.0.23620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2082.422154][ T27] audit: type=1326 audit(2000000021.486:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.0.23620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2082.479943][ T4304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23623'. [ 2082.496590][ T27] audit: type=1326 audit(2000000021.486:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.0.23620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2082.561352][ T27] audit: type=1326 audit(2000000021.486:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.0.23620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2082.583828][ T5850] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2082.625113][ T27] audit: type=1326 audit(2000000021.486:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4296 comm="syz.0.23620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2082.795015][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 2082.818511][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2082.846161][ T5850] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2082.857986][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.873150][ T5850] usb 5-1: Product: syz [ 2082.877360][ T5850] usb 5-1: Manufacturer: syz [ 2082.886629][ T5850] usb 5-1: SerialNumber: syz [ 2082.918130][ T5850] usb 5-1: config 0 descriptor?? [ 2082.955395][ T5850] hub 5-1:0.0: bad descriptor, ignoring hub [ 2082.983500][ T5850] hub: probe of 5-1:0.0 failed with error -5 [ 2083.002016][ T5850] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input146 [ 2083.200624][ T27] audit: type=1326 audit(2000000022.290:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.23635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2083.231561][ T27] audit: type=1326 audit(2000000022.290:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.23635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2083.349417][ T27] audit: type=1326 audit(2000000022.309:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.23635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2083.378908][ T27] audit: type=1326 audit(2000000022.309:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.23635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2083.395233][ T4355] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.23637'. [ 2083.401292][ C0] vkms_vblank_simulate: vblank timer overrun [ 2083.464597][ T27] audit: type=1326 audit(2000000022.309:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.3.23635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2083.487284][ T4360] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23639'. [ 2083.615845][ T4365] IPv6: Can't replace route, no match found [ 2083.756536][ T4378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23644'. [ 2083.770589][ T4378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23644'. [ 2084.207038][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2084.333786][ T4418] netlink: 'syz.4.23656': attribute type 21 has an invalid length. [ 2084.343680][ T4418] netlink: 'syz.4.23656': attribute type 1 has an invalid length. [ 2084.410188][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 2084.420191][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2084.439922][ T9] usb 3-1: config 179 has no interface number 0 [ 2084.466502][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2084.507398][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2084.536278][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2084.572181][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2084.602534][ T9] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2084.640061][ T9] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2084.671665][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2084.694920][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.761374][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input147 [ 2084.945088][T15286] input input147: unable to receive magic message: -110 [ 2085.073294][ T5860] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2085.231975][ T4469] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.23671'. [ 2085.243464][ T4469] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 2085.267601][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2085.286280][ T5860] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2085.296855][ T789] usb 3-1: USB disconnect, device number 84 [ 2085.296870][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2085.320589][ T789] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2085.351217][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2085.402318][ T5860] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2085.422837][ T5860] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2085.443978][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.476025][ T5860] usb 4-1: Product: syz [ 2085.482682][ T5860] usb 4-1: Manufacturer: syz [ 2085.498071][ T5860] usb 4-1: SerialNumber: syz [ 2085.512454][ T5860] usb 4-1: config 0 descriptor?? [ 2085.536141][ T5860] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 2085.829755][ T5860] ums-isd200: probe of 4-1:0.0 failed with error -22 [ 2086.130201][ T9] usb 4-1: USB disconnect, device number 127 [ 2086.450019][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23691'. [ 2086.572292][ T4578] loop2: detected capacity change from 0 to 8 [ 2086.596230][ T4578] SQUASHFS error: Unknown inode type 257 in squashfs_iget! [ 2086.809769][ T4596] netlink: 304 bytes leftover after parsing attributes in process `syz.4.23697'. [ 2087.435697][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2087.649544][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 2087.659702][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2087.682006][ T4629] xt_NFQUEUE: number of total queues is 0 [ 2087.694641][ T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 2087.727902][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.752001][ T9] usb 4-1: Product: syz [ 2087.777726][ T9] usb 4-1: Manufacturer: syz [ 2087.782851][ T9] usb 4-1: SerialNumber: syz [ 2087.813288][ T9] usb 4-1: config 0 descriptor?? [ 2088.045654][ T9] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2088.069536][ T23] usb 5-1: USB disconnect, device number 63 [ 2088.275664][ T789] usb 4-1: USB disconnect, device number 2 [ 2088.802725][ T4691] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 2088.832716][ T4691] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 2089.109802][ T4708] netlink: 'syz.3.23727': attribute type 64 has an invalid length. [ 2089.153110][ T4708] netlink: 9 bytes leftover after parsing attributes in process `syz.3.23727'. [ 2089.616901][ T23] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2089.819663][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 2089.827173][ T23] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 2089.851712][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.891833][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.912653][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2089.929687][ T23] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2089.944893][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2090.016592][ T23] usb 1-1: config 0 descriptor?? [ 2090.062263][ T23] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input149 [ 2090.096545][ T5143] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2090.213476][T18029] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2090.298472][ T5143] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2090.373232][ T5143] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2090.394380][ T4793] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.23751'. [ 2090.416997][ T4722] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2090.461779][ T5143] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 2090.473483][ T9] usb 1-1: USB disconnect, device number 124 [ 2090.590130][ T4815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23755'. [ 2091.634858][ T4878] batadv2: entered allmulticast mode [ 2091.649094][ T4878] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2092.032633][ T4898] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.23782'. [ 2092.449742][ T789] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2092.642007][ T789] usb 1-1: Using ep0 maxpacket: 32 [ 2092.657911][ T789] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 2092.684952][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 2092.690459][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2092.701833][ T789] usb 1-1: config 0 has no interface number 0 [ 2092.740040][ T789] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 2092.780972][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.814132][ T789] usb 1-1: Product: syz [ 2092.818343][ T789] usb 1-1: Manufacturer: syz [ 2092.839177][ T789] usb 1-1: SerialNumber: syz [ 2092.861588][ T789] usb 1-1: config 0 descriptor?? [ 2092.877924][ T789] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 2092.974298][ T4959] loop4: detected capacity change from 0 to 1024 [ 2092.995554][ T4959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2093.002336][ T4959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2093.047661][ T4959] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2093.069813][ T4959] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2093.114901][ T4959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2093.162833][T26854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2093.329442][ T789] gspca_sn9c2028: read1 error -71 [ 2093.346388][ T789] gspca_sn9c2028: read1 error -71 [ 2093.380067][ T789] sn9c2028: probe of 1-1:0.119 failed with error -71 [ 2093.389355][ T789] usb 1-1: USB disconnect, device number 125 [ 2094.063876][ T5030] netlink: 'syz.3.23820': attribute type 29 has an invalid length. [ 2094.259896][ T5039] loop3: detected capacity change from 0 to 128 [ 2094.316716][ T5039] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2094.354621][ T5046] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.23824'. [ 2094.374110][ T5039] ext4 filesystem being mounted at /5732/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2094.542795][ T5795] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2094.676349][ T5058] loop4: detected capacity change from 0 to 1024 [ 2094.910714][ T5018] loop2: detected capacity change from 0 to 32768 [ 2095.043904][ T5018] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 2095.043904][ T5018] [ 2095.100940][ T5018] xtLookup: xtSearch returned -5 [ 2095.105939][ T5018] free_index: error reading directory table [ 2095.143592][ T5018] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 2095.143592][ T5018] [ 2095.177014][ T5018] xtLookup: xtSearch returned -5 [ 2095.193383][ T5018] free_index: error reading directory table [ 2095.215001][ T5018] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 2095.215001][ T5018] [ 2095.256835][ T5018] xtLookup: xtSearch returned -5 [ 2095.268785][ T5018] free_index: error reading directory table [ 2095.768199][ T5070] loop0: detected capacity change from 0 to 32768 [ 2095.805335][ T5070] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 2095.836345][ T5070] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 2095.918745][ T5070] (syz.0.23830,5070,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=970662608961, rec_len=0, name_len=0 [ 2095.957345][ T5070] (syz.0.23830,5070,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 2096.041600][ T5070] (syz.0.23830,5070,1):ocfs2_mknod:298 ERROR: status = -2 [ 2096.073889][ T5070] (syz.0.23830,5070,1):ocfs2_mknod:502 ERROR: status = -2 [ 2096.122575][ T5070] (syz.0.23830,5070,1):ocfs2_create:676 ERROR: status = -2 [ 2096.238612][ T5800] ocfs2: Unmounting device (7,0) on (node local) [ 2096.355052][ T5090] loop4: detected capacity change from 0 to 32768 [ 2097.001056][ T5168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23855'. [ 2097.273518][ T5181] loop3: detected capacity change from 0 to 1024 [ 2097.407250][ T3526] hfsplus: b-tree write err: -5, ino 4 [ 2097.527628][ T5860] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2097.734001][ T5860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.766268][ T5860] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2097.789170][ T5860] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 2097.809278][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.837807][ T5860] usb 1-1: config 0 descriptor?? [ 2098.099387][ T5182] loop0: detected capacity change from 0 to 1024 [ 2098.128884][ T5193] loop3: detected capacity change from 0 to 32768 [ 2098.187114][ T5860] usb 1-1: USB disconnect, device number 126 [ 2098.198307][ T5193] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2098.211833][T23875] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2098.351905][ T5193] XFS (loop3): Ending clean mount [ 2098.436663][T23875] usb 5-1: Using ep0 maxpacket: 32 [ 2098.455675][T23875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2098.480645][T23875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2098.499060][ T5795] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2098.509168][T23875] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2098.564838][T23875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.565088][ T789] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2098.588149][T23875] usb 5-1: config 0 descriptor?? [ 2098.624750][T23875] hub 5-1:0.0: USB hub found [ 2098.800119][ T3526] hfsplus: b-tree write err: -5, ino 4 [ 2098.832015][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 2098.856111][ T789] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2098.871668][T23875] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 2098.928399][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.936459][ T789] usb 3-1: Product: syz [ 2098.963118][ T789] usb 3-1: Manufacturer: syz [ 2098.967784][ T789] usb 3-1: SerialNumber: syz [ 2099.003915][ T789] usb 3-1: config 0 descriptor?? [ 2099.084687][ T5257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23870'. [ 2099.106593][T23875] usbhid 5-1:0.0: can't add hid device: -71 [ 2099.120514][ T5257] netlink: 68 bytes leftover after parsing attributes in process `syz.0.23870'. [ 2099.129666][ T5257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23870'. [ 2099.137973][T23875] usbhid: probe of 5-1:0.0 failed with error -71 [ 2099.173618][ T5257] netlink: 68 bytes leftover after parsing attributes in process `syz.0.23870'. [ 2099.202822][T23875] usb 5-1: USB disconnect, device number 64 [ 2099.468249][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23874'. [ 2099.484581][ T789] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 2099.492064][ T789] airspy 3-1:0.0: Could not detect board [ 2099.510562][ T789] airspy: probe of 3-1:0.0 failed with error -71 [ 2099.526327][ T789] usb 3-1: USB disconnect, device number 85 [ 2099.667315][ T5292] netlink: 'syz.0.23876': attribute type 4 has an invalid length. [ 2099.947203][ T5307] cifs: Unknown parameter 'ÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 2099.947203][ T5307] SÃȘØÈžZ§6ŸÂ' [ 2100.129642][ T5316] loop0: detected capacity change from 0 to 256 [ 2100.249835][ T5316] FAT-fs (loop0): Directory bread(block 64) failed [ 2100.287616][ T5316] FAT-fs (loop0): Directory bread(block 65) failed [ 2100.294316][ T5316] FAT-fs (loop0): Directory bread(block 66) failed [ 2100.357929][ T5316] FAT-fs (loop0): Directory bread(block 67) failed [ 2100.377777][ T5316] FAT-fs (loop0): Directory bread(block 68) failed [ 2100.404514][ T5316] FAT-fs (loop0): Directory bread(block 69) failed [ 2100.411192][ T5316] FAT-fs (loop0): Directory bread(block 70) failed [ 2100.435574][ T5316] FAT-fs (loop0): Directory bread(block 71) failed [ 2100.442274][ T5316] FAT-fs (loop0): Directory bread(block 72) failed [ 2100.449569][ T5316] FAT-fs (loop0): Directory bread(block 73) failed [ 2101.403871][ T5385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23906'. [ 2101.423398][ T5385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23906'. [ 2101.452523][ T5385] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23906'. [ 2101.837123][ T5407] loop0: detected capacity change from 0 to 1024 [ 2101.891834][ T5407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2102.086746][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2102.315509][ T5402] loop4: detected capacity change from 0 to 32768 [ 2102.436994][ T5396] loop2: detected capacity change from 0 to 32768 [ 2102.471329][ T5424] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 2102.523092][ T789] kernel write not supported for file /11566/clear_refs (pid: 789 comm: kworker/1:2) [ 2102.528981][ T3526] read_mapping_page failed! [ 2102.541742][ T5396] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 2102.556004][ T3526] ERROR: (device loop4): txCommit: [ 2102.556004][ T3526] [ 2102.585240][ T3526] jfs_write_inode: jfs_commit_inode failed! [ 2102.637302][ T5396] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2102.945212][ T5440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23920'. [ 2102.989113][ T5440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23920'. [ 2103.043963][ T27] audit: type=1326 audit(2000000040.858:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.23919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2103.110878][ T5799] ocfs2: Unmounting device (7,2) on (node local) [ 2103.121302][ T27] audit: type=1326 audit(2000000040.895:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.23919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2103.132861][ T5447] batman_adv: batadv0: Removing interface: wlan0 [ 2103.224468][ T27] audit: type=1326 audit(2000000040.914:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.23919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2103.309286][ T27] audit: type=1326 audit(2000000040.914:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.23919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2103.348609][ T27] audit: type=1326 audit(2000000040.914:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.3.23919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2103.546541][T23875] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2103.618974][ T27] audit: type=1326 audit(2000000041.400:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5473 comm="syz.0.23927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2103.684723][ T27] audit: type=1326 audit(2000000041.400:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5473 comm="syz.0.23927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2103.728442][ T27] audit: type=1326 audit(2000000041.428:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5473 comm="syz.0.23927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2103.750813][ C0] vkms_vblank_simulate: vblank timer overrun [ 2103.778595][ T27] audit: type=1326 audit(2000000041.428:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5473 comm="syz.0.23927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2103.801535][T23875] usb 5-1: Using ep0 maxpacket: 16 [ 2103.829049][T23875] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 2103.839815][T23875] usb 5-1: config 0 has no interface number 0 [ 2103.856358][T23875] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 2103.867611][ T27] audit: type=1326 audit(2000000041.428:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5473 comm="syz.0.23927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc938f749 code=0x7ffc0000 [ 2103.899103][T23875] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2103.931909][T23875] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 2103.941305][T23875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.962940][T23875] usb 5-1: Product: syz [ 2103.967893][T23875] usb 5-1: Manufacturer: syz [ 2103.972548][T23875] usb 5-1: SerialNumber: syz [ 2103.997847][T23875] usb 5-1: config 0 descriptor?? [ 2104.019626][T23875] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 2104.219477][ T5468] loop2: detected capacity change from 0 to 32768 [ 2104.264914][ T5468] (syz.2.23922,5468,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2104.284797][T23875] usb 5-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 2104.318269][ T5468] (syz.2.23922,5468,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2104.377930][ T5468] JBD2: Ignoring recovery information on journal [ 2104.507935][T23875] usb 5-1: USB disconnect, device number 65 [ 2104.525306][T23875] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 2104.556463][T23875] cypress_m8 5-1:0.35: device disconnected [ 2104.574683][ T5468] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2104.939398][ T5799] ocfs2: Unmounting device (7,2) on (node local) [ 2105.000552][ T5850] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2105.203504][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 2105.236987][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2105.283737][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2105.319045][ T5850] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2105.350915][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 2105.402639][ T5513] loop0: detected capacity change from 0 to 32768 [ 2105.406449][ T5850] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2105.436575][ T5850] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2105.478553][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.501125][ T5513] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2105.509891][ T5850] usb 4-1: config 0 descriptor?? [ 2105.536087][ T5522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2105.587985][ T5553] loop4: detected capacity change from 0 to 64 [ 2105.817166][ T5513] XFS (loop0): Ending clean mount [ 2106.050124][ T5800] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2106.327436][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23949'. [ 2106.374207][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 2106.376952][ T789] usb 4-1: USB disconnect, device number 3 [ 2107.680054][ T5673] netlink: 36 bytes leftover after parsing attributes in process `syz.3.23970'. [ 2107.852620][ T5686] loop3: detected capacity change from 0 to 128 [ 2107.879629][ T5686] FAT-fs (loop3): Directory bread(block 414) failed [ 2107.917939][ T5686] FAT-fs (loop3): Directory bread(block 415) failed [ 2107.945530][ T5686] FAT-fs (loop3): Directory bread(block 416) failed [ 2107.968400][ T5686] FAT-fs (loop3): Directory bread(block 417) failed [ 2107.987586][ T5686] FAT-fs (loop3): Directory bread(block 418) failed [ 2108.002156][ T5693] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23975'. [ 2108.021251][ T5686] FAT-fs (loop3): Directory bread(block 419) failed [ 2108.036542][ T5686] FAT-fs (loop3): Directory bread(block 420) failed [ 2108.043228][ T5686] FAT-fs (loop3): Directory bread(block 421) failed [ 2108.132280][ T5700] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.23978'. [ 2108.157327][ T5700] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2108.166606][ T5686] FAT-fs (loop3): Directory bread(block 414) failed [ 2108.192976][ T5700] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2108.208611][ T5686] FAT-fs (loop3): Directory bread(block 415) failed [ 2108.244146][ T5686] syz.3.23974: attempt to access beyond end of device [ 2108.244146][ T5686] loop3: rw=3, sector=478, nr_sectors = 2 limit=128 [ 2108.282537][ T5686] syz.3.23974: attempt to access beyond end of device [ 2108.282537][ T5686] loop3: rw=2051, sector=480, nr_sectors = 6 limit=128 [ 2108.464255][ T5718] bond0: option arp_validate: invalid value (18446744073491447809) [ 2108.466275][ T12] bond0: (slave macvlan0): interface is now down [ 2108.518334][ T12] bond0: (slave syz_tun): interface is now down [ 2108.569813][ T12] bond0: now running without any active interface! [ 2108.717220][ T5731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23988'. [ 2109.237084][ T5767] netlink: 'syz.0.23998': attribute type 8 has an invalid length. [ 2109.511082][ T5793] batman_adv: batadv0: Interface deactivated: vlan1 [ 2109.525781][ T5793] batman_adv: batadv0: Removing interface: vlan1 [ 2109.555585][ T5793] batman_adv: batadv0: Removing interface: macvtap0 [ 2110.369754][ T5887] loop0: detected capacity change from 0 to 64 [ 2111.989391][ T5999] netlink: 'syz.0.24057': attribute type 2 has an invalid length. [ 2112.427628][ T6031] netlink: 'syz.4.24068': attribute type 1 has an invalid length. [ 2112.461344][ T6031] netlink: 232 bytes leftover after parsing attributes in process `syz.4.24068'. [ 2112.533022][ T6039] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2112.647518][ T6046] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2113.082031][ T6075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24082'. [ 2113.364506][ T6094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24089'. [ 2113.952185][ T27] audit: type=1400 audit(2000000051.072:515): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=6135 comm="syz.0.24103" [ 2114.086092][ T6150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.24106'. [ 2114.279954][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2114.302970][ T6164] netlink: 'syz.4.24111': attribute type 10 has an invalid length. [ 2114.331546][ T6164] team0: Cannot enslave team device to itself [ 2114.475047][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 2114.487295][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2114.506535][ T9] usb 3-1: config 0 has no interface number 0 [ 2114.526879][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 2114.554812][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 2114.601443][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2114.610714][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2114.631294][ T9] usb 3-1: Product: syz [ 2114.636474][ T9] usb 3-1: SerialNumber: syz [ 2114.648366][ T9] usb 3-1: config 0 descriptor?? [ 2114.660849][ T9] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 2114.687408][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input150 [ 2114.997495][ T6208] ./file0: Can't open blockdev [ 2115.235559][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 2115.242898][ C0] cm109_urb_ctl_callback: 11 callbacks suppressed [ 2115.242920][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2115.257134][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2115.264807][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2115.272123][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2115.279604][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2115.287075][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2115.294328][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2115.301627][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2115.309100][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2115.316323][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2115.325207][ T9] usb 3-1: USB disconnect, device number 86 [ 2115.331256][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2115.372170][ T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2116.524791][ T789] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2116.578543][ T6321] loop4: detected capacity change from 0 to 128 [ 2116.602488][ T6321] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2116.642541][ T5860] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 2116.652533][ T6321] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2116.740572][ T789] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2116.753767][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.785744][ T789] usb 3-1: config 0 descriptor?? [ 2116.808981][ T789] cp210x 3-1:0.0: cp210x converter detected [ 2116.880228][ T5860] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 2116.888852][ T5860] usb 4-1: config 0 has no interface number 0 [ 2116.895114][ T5860] usb 4-1: config 0 interface 235 altsetting 16 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 2116.933945][ T5860] usb 4-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2116.947348][ T5860] usb 4-1: config 0 interface 235 has no altsetting 0 [ 2116.962528][ T5860] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 2116.980239][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.988943][ T5860] usb 4-1: Product: syz [ 2116.994839][ T5860] usb 4-1: Manufacturer: syz [ 2117.004816][ T5860] usb 4-1: SerialNumber: syz [ 2117.015900][ T5860] usb 4-1: config 0 descriptor?? [ 2117.041855][ T789] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2117.048878][ T6349] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2117.055455][ T5860] keyspan 4-1:0.235: Keyspan 1 port adapter converter detected [ 2117.064832][ T789] cp210x 3-1:0.0: querying part number failed [ 2117.081127][ T5860] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 87 [ 2117.089067][ T5860] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 7 [ 2117.105323][ T789] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2117.117780][ T5860] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 81 [ 2117.155837][ T5860] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 1 [ 2117.169369][ T5860] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 85 [ 2117.198824][ T5860] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 2117.248971][ T5860] usb 4-1: USB disconnect, device number 4 [ 2117.288995][ T5860] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 2117.310545][ T789] usb 3-1: USB disconnect, device number 87 [ 2117.329730][ T789] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2117.343011][ T5860] keyspan 4-1:0.235: device disconnected [ 2117.356556][ T789] cp210x 3-1:0.0: device disconnected [ 2117.707857][ T6360] loop0: detected capacity change from 0 to 40427 [ 2117.731333][ T6360] F2FS-fs (loop0): invalid crc value [ 2117.839438][ T6360] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2117.884007][ T5850] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2118.097076][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 2118.110864][ T5850] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2118.139302][ T5850] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2118.179874][ T5850] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2118.199342][ T5850] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2118.214595][ T5850] usb 5-1: Product: syz [ 2118.218835][ T5850] usb 5-1: Manufacturer: syz [ 2118.260370][ T5850] hub 5-1:4.0: USB hub found [ 2118.289224][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2118.493853][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2118.505094][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.513401][ T5850] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 2118.521774][ T9] usb 4-1: Product: syz [ 2118.529274][ T9] usb 4-1: Manufacturer: syz [ 2118.535588][ T9] usb 4-1: SerialNumber: syz [ 2118.553355][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 2118.577453][T23875] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2118.679721][ T6441] loop0: detected capacity change from 0 to 32768 [ 2118.704187][ T6441] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2118.783678][T23875] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2118.801792][T23875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2118.811492][ T789] XFS (loop0): Metadata corruption detected at xfs_agf_verify+0x211/0x9b0, xfs_agf block 0x1 [ 2118.823939][T23875] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2118.835404][T23875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2118.843737][T23875] usb 3-1: SerialNumber: syz [ 2118.844888][ T789] XFS (loop0): Unmount and run xfs_repair [ 2118.866058][ T789] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2118.874010][ T789] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 20 00 XAGF.......... . [ 2118.887835][ T5850] usb 5-1: USB disconnect, device number 66 [ 2118.898536][ T789] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01 ................ [ 2118.921650][ T789] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 2118.932280][ T789] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d b8 00 00 00 00 ................ [ 2118.941321][ T789] 00000040: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 2118.950201][ T789] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 2118.959650][ T789] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2118.968815][ T789] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2118.978157][ T6441] XFS (loop0): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 117 [ 2118.988558][ T6441] XFS (loop0): Error -117 reserving per-AG metadata reserve pool. [ 2118.997014][ T6441] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x25e/0x2d0 (fs/xfs/xfs_fsops.c:592). Shutting down filesystem. [ 2119.014365][ T6441] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 2119.023346][ T6441] XFS (loop0): Ending clean mount [ 2119.038337][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2119.057158][ T9] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 2119.099801][T23875] usb 3-1: 0:2 : does not exist [ 2119.161491][T23875] usb 3-1: USB disconnect, device number 88 [ 2119.183317][ T5800] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2119.212275][ T7122] udevd[7122]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2119.570685][ T6498] netlink: 'syz.0.24177': attribute type 3 has an invalid length. [ 2119.579461][ T6498] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.24177'. [ 2119.807060][T23875] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2119.999615][ T5850] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 2120.031271][T23875] usb 5-1: Using ep0 maxpacket: 16 [ 2120.045719][T23875] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2120.058929][T23875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.067526][T23875] usb 5-1: Product: syz [ 2120.078216][T23875] usb 5-1: Manufacturer: syz [ 2120.082868][T23875] usb 5-1: SerialNumber: syz [ 2120.097851][T23875] r8152-cfgselector 5-1: config 0 descriptor?? [ 2120.102367][ T6534] loop2: detected capacity change from 0 to 16 [ 2120.123246][ T6534] erofs: (device loop2): mounted with root inode @ nid 36. [ 2120.143567][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24190'. [ 2120.216000][ T5850] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2120.237127][ T5850] usb 4-1: not running at top speed; connect to a high speed hub [ 2120.247596][ T5850] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 2120.256538][ T5850] usb 4-1: config 1 has no interface number 0 [ 2120.262829][ T5850] usb 4-1: config 1 interface 138 has no altsetting 0 [ 2120.273768][ T5850] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 2120.285265][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.299858][ T5850] usb 4-1: Product: syz [ 2120.304190][ T5850] usb 4-1: Manufacturer: syz [ 2120.308856][ T5850] usb 4-1: SerialNumber: syz [ 2120.448277][ T789] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2120.569211][T23875] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2120.584854][ T5850] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 2120.602509][T23875] r8152-cfgselector 5-1: USB disconnect, device number 67 [ 2120.660318][ T5850] usb 4-1: USB disconnect, device number 6 [ 2120.680717][ T789] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2120.705311][ T789] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2120.721233][ T789] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2120.738333][ T789] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2120.751148][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.760586][ T789] usb 3-1: Product: syz [ 2120.764791][ T789] usb 3-1: Manufacturer: syz [ 2120.769639][ T789] usb 3-1: SerialNumber: syz [ 2120.783802][T15286] udevd[15286]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2121.019015][ T789] cdc_ncm 3-1:1.0: skipping garbage [ 2121.039357][ T789] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 2121.039515][ T6611] netlink: 'syz.0.24201': attribute type 3 has an invalid length. [ 2121.058811][ T789] cdc_ncm 3-1:1.0: bind() failure [ 2121.069854][ T789] usb 3-1: USB disconnect, device number 89 [ 2121.268869][ T6629] netlink: 'syz.4.24204': attribute type 11 has an invalid length. [ 2121.281870][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24203'. [ 2121.357117][ T6631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2121.536049][ T6646] netlink: 'syz.4.24210': attribute type 2 has an invalid length. [ 2121.675271][ T6655] veth1_vlan: mtu greater than device maximum [ 2122.040715][ T6679] loop2: detected capacity change from 0 to 256 [ 2122.115083][ T6688] loop4: detected capacity change from 0 to 8 [ 2122.144728][ T6688] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 2122.182701][ T6679] FAT-fs (loop2): Directory bread(block 64) failed [ 2122.198907][ T7122] udevd[7122]: incorrect cramfs checksum on /dev/loop4 [ 2122.205151][ T6688] cramfs: Error -3 while decompressing! [ 2122.223660][ T6679] FAT-fs (loop2): Directory bread(block 65) failed [ 2122.230405][ T6679] FAT-fs (loop2): Directory bread(block 66) failed [ 2122.242934][ T6688] cramfs: ffffffff96fe1368(26)->ffff88804518d000(4096) [ 2122.253784][ T6688] cramfs: Error -3 while decompressing! [ 2122.265700][ T6679] FAT-fs (loop2): Directory bread(block 67) failed [ 2122.272401][ T6679] FAT-fs (loop2): Directory bread(block 68) failed [ 2122.279682][ T6688] cramfs: ffffffff96fe1368(26)->ffff88804518d000(4096) [ 2122.302911][ T7122] udevd[7122]: incorrect cramfs checksum on /dev/loop4 [ 2122.308599][ T6679] FAT-fs (loop2): Directory bread(block 69) failed [ 2122.313476][ T27] audit: type=1800 audit(2000000058.892:516): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.24223" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 2122.317025][ T6679] FAT-fs (loop2): Directory bread(block 70) failed [ 2122.336011][ C0] vkms_vblank_simulate: vblank timer overrun [ 2122.373830][ T6695] loop0: detected capacity change from 0 to 16 [ 2122.395138][ T6695] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 2122.418229][ T6679] FAT-fs (loop2): Directory bread(block 71) failed [ 2122.425013][ T6679] FAT-fs (loop2): Directory bread(block 72) failed [ 2122.469412][ T6679] FAT-fs (loop2): Directory bread(block 73) failed [ 2122.663487][ T6702] lo speed is unknown, defaulting to 1000 [ 2122.863825][ T27] audit: type=1326 audit(2000000059.397:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.3.24232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2122.917680][ T27] audit: type=1326 audit(2000000059.397:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.3.24232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2123.008292][ T27] audit: type=1326 audit(2000000059.407:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.3.24232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2123.030669][ C0] vkms_vblank_simulate: vblank timer overrun [ 2123.108463][ T27] audit: type=1326 audit(2000000059.407:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.3.24232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2123.163197][ T27] audit: type=1326 audit(2000000059.407:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.3.24232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4749d8f749 code=0x7ffc0000 [ 2123.487900][ T6754] loop0: detected capacity change from 0 to 2048 [ 2123.514467][ T6754] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2123.797417][ C0] vkms_vblank_simulate: vblank timer overrun [ 2123.826528][ T4483] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2124.040472][ T4483] usb 4-1: Using ep0 maxpacket: 16 [ 2124.063948][ T4483] usb 4-1: config 0 has no interfaces? [ 2124.086953][ T4483] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2124.109239][ T6822] netlink: 68 bytes leftover after parsing attributes in process `syz.2.24251'. [ 2124.110948][ T4483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.125185][ T6822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24251'. [ 2124.142750][ T4483] usb 4-1: Product: syz [ 2124.147769][ T4483] usb 4-1: Manufacturer: syz [ 2124.154874][ T4483] usb 4-1: SerialNumber: syz [ 2124.164028][ T4483] r8152-cfgselector 4-1: config 0 descriptor?? [ 2124.401236][ T4483] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 2124.619449][ T6854] loop0: detected capacity change from 0 to 1024 [ 2124.635064][ T4483] usb 4-1: USB disconnect, device number 7 [ 2124.808798][ T2945] hfsplus: b-tree write err: -5, ino 4 [ 2124.941436][ T6867] ntfs: (device loop0): ntfs_fill_super(): Unable to determine device size. [ 2125.334715][ T6889] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 2125.845985][ T6879] loop2: detected capacity change from 0 to 32768 [ 2125.948608][ T6879] JBD2: Invalid start block of journal: 67108866 [ 2125.979672][ T6879] (syz.2.24264,6879,1):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 2126.039816][ T6879] (syz.2.24264,6879,1):ocfs2_check_volume:2403 ERROR: Could not initialize journal! [ 2126.046070][ T6935] netlink: 'syz.4.24282': attribute type 10 has an invalid length. [ 2126.049259][ T6879] (syz.2.24264,6879,1):ocfs2_check_volume:2488 ERROR: status = -22 [ 2126.058714][ T6935] wlan1: mtu less than device minimum [ 2126.077631][ T6935] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 2126.118398][ T6879] (syz.2.24264,6879,1):ocfs2_mount_volume:1820 ERROR: status = -22 [ 2126.149059][ T6879] (syz.2.24264,6879,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 2126.270080][ T7122] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2126.806296][ T6972] netlink: 76 bytes leftover after parsing attributes in process `syz.3.24292'. [ 2126.966573][ T6982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.24296'. [ 2127.021583][ T6982] veth10: entered promiscuous mode [ 2127.033847][ T6982] veth10: entered allmulticast mode [ 2127.583185][ T7034] netlink: 104 bytes leftover after parsing attributes in process `syz.0.24311'. [ 2127.623805][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24311'. [ 2127.866062][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24316'. [ 2127.889033][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24316'. [ 2128.183863][ T7073] xt_l2tp: v2 doesn't support IP mode [ 2128.825988][ T7126] netlink: 84 bytes leftover after parsing attributes in process `syz.4.24338'. [ 2128.904513][ T789] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2129.113356][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2129.146441][ T789] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 2129.161172][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.197585][ T789] usb 3-1: config 0 descriptor?? [ 2129.221374][ T789] smsusb:smsusb_probe: board id=8, interface number 0 [ 2129.235398][ T789] smsusb:smsusb_probe: Device initialized with return code -19 [ 2129.355410][ T4483] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2129.460191][ T789] usb 3-1: USB disconnect, device number 90 [ 2129.567475][ T4483] usb 1-1: Using ep0 maxpacket: 8 [ 2129.574658][ T4483] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2129.595447][ T4483] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2129.624141][ T4483] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2129.667591][ T4483] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2129.684962][ T4483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.699711][ T7188] loop3: detected capacity change from 0 to 2048 [ 2129.709489][ T4483] usb 1-1: Product: syz [ 2129.713711][ T4483] usb 1-1: Manufacturer: syz [ 2129.722210][ T7188] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2129.733332][ T4483] usb 1-1: SerialNumber: syz [ 2129.751715][ T4483] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 2129.767655][ T4483] cdc_ncm 1-1:1.0: bind() failure [ 2129.787326][ T7196] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2129.788276][ T7188] syz.3.24355: attempt to access beyond end of device [ 2129.788276][ T7188] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 2129.974207][ T4483] cdc_mbim 1-1:1.1: CDC Union missing and no IAD found [ 2129.981159][ T4483] cdc_mbim 1-1:1.1: bind() failure [ 2130.020607][ T7188] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 2130.055002][ T7188] Remounting filesystem read-only [ 2130.061412][ T7188] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 2130.080494][ T7188] NILFS (loop3): error -5 truncating bmap (ino=16) [ 2130.169756][ T5795] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 2130.205379][ T5795] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 2130.213532][ T5850] usb 1-1: USB disconnect, device number 127 [ 2130.245526][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2130.274439][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2130.294815][ T5795] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2130.314927][ T5795] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 2130.836545][ T7233] loop4: detected capacity change from 0 to 32768 [ 2130.875188][ T7248] loop2: detected capacity change from 0 to 256 [ 2130.947839][ T7248] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 2130.963424][ T7233] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 2130.963424][ T7233] [ 2131.002606][ T7233] ERROR: (device loop4): remounting filesystem as read-only [ 2131.010015][ T7233] jfs_create: dtInsert returned -EIO [ 2131.047599][ T7233] ERROR: (device loop4): jfs_create: [ 2131.047599][ T7233] [ 2131.326510][ T7241] loop3: detected capacity change from 0 to 32768 [ 2131.357287][ T7241] (syz.3.24368,7241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2131.397502][ T7241] (syz.3.24368,7241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2131.494499][ T7241] JBD2: Ignoring recovery information on journal [ 2131.516012][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24377'. [ 2131.582834][ T7241] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 2131.676991][ T7241] [ 2131.679368][ T7241] ====================================================== [ 2131.686415][ T7241] WARNING: possible circular locking dependency detected [ 2131.693460][ T7241] syzkaller #0 Not tainted [ 2131.697893][ T7241] ------------------------------------------------------ [ 2131.704956][ T7241] syz.3.24368/7241 is trying to acquire lock: [ 2131.711206][ T7241] ffff88805d3c14a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 2131.717764][ T7289] caif:caif_disconnect_client(): nothing to disconnect [ 2131.722803][ T7241] [ 2131.722803][ T7241] but task is already holding lock: [ 2131.722812][ T7241] ffff88805d3c1538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 2131.747931][ T7241] [ 2131.747931][ T7241] which lock already depends on the new lock. [ 2131.747931][ T7241] [ 2131.758435][ T7241] [ 2131.758435][ T7241] the existing dependency chain (in reverse order) is: [ 2131.767448][ T7241] [ 2131.767448][ T7241] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 2131.775292][ T7241] down_read+0x46/0x2e0 [ 2131.779977][ T7241] ocfs2_init_acl+0x2fa/0x720 [ 2131.785276][ T7241] ocfs2_mknod+0x12e5/0x20f0 [ 2131.790375][ T7241] vfs_mknod+0x32b/0x360 [ 2131.795145][ T7241] do_mknodat+0x37e/0x4f0 [ 2131.799987][ T7241] __x64_sys_mknod+0x8e/0xa0 [ 2131.805120][ T7241] do_syscall_64+0x55/0xb0 [ 2131.810112][ T7241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2131.816554][ T7241] [ 2131.816554][ T7241] -> #3 (jbd2_handle){++++}-{0:0}: [ 2131.823859][ T7241] start_this_handle+0x1e9d/0x20c0 [ 2131.829487][ T7241] jbd2__journal_start+0x2bb/0x5b0 [ 2131.835109][ T7241] jbd2_journal_start+0x2a/0x40 [ 2131.840483][ T7241] ocfs2_start_trans+0x376/0x6c0 [ 2131.845957][ T7241] ocfs2_modify_bh+0xe9/0x470 [ 2131.851162][ T7241] ocfs2_local_read_info+0x13fd/0x1770 [ 2131.857133][ T7241] dquot_load_quota_sb+0x757/0xb80 [ 2131.862786][ T7241] dquot_load_quota_inode+0x2dc/0x5d0 [ 2131.868674][ T7241] ocfs2_enable_quotas+0x1c7/0x440 [ 2131.874381][ T7241] ocfs2_fill_super+0x3f6d/0x4d90 [ 2131.879917][ T7241] mount_bdev+0x22b/0x2d0 [ 2131.884754][ T7241] legacy_get_tree+0xea/0x180 [ 2131.889938][ T7241] vfs_get_tree+0x8c/0x280 [ 2131.894861][ T7241] do_new_mount+0x24b/0xa40 [ 2131.899873][ T7241] __se_sys_mount+0x2da/0x3c0 [ 2131.905058][ T7241] do_syscall_64+0x55/0xb0 [ 2131.909994][ T7241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2131.916409][ T7241] [ 2131.916409][ T7241] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 2131.924920][ T7241] down_read+0x46/0x2e0 [ 2131.929597][ T7241] ocfs2_start_trans+0x36a/0x6c0 [ 2131.935069][ T7241] ocfs2_modify_bh+0xe9/0x470 [ 2131.940285][ T7241] ocfs2_local_read_info+0x13fd/0x1770 [ 2131.946274][ T7241] dquot_load_quota_sb+0x757/0xb80 [ 2131.951917][ T7241] dquot_load_quota_inode+0x2dc/0x5d0 [ 2131.957826][ T7241] ocfs2_enable_quotas+0x1c7/0x440 [ 2131.963631][ T7241] ocfs2_fill_super+0x3f6d/0x4d90 [ 2131.969173][ T7241] mount_bdev+0x22b/0x2d0 [ 2131.974030][ T7241] legacy_get_tree+0xea/0x180 [ 2131.979223][ T7241] vfs_get_tree+0x8c/0x280 [ 2131.984148][ T7241] do_new_mount+0x24b/0xa40 [ 2131.989175][ T7241] __se_sys_mount+0x2da/0x3c0 [ 2131.994361][ T7241] do_syscall_64+0x55/0xb0 [ 2131.999316][ T7241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2132.005720][ T7241] [ 2132.005720][ T7241] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 2132.013222][ T7241] ocfs2_start_trans+0x26b/0x6c0 [ 2132.018687][ T7241] ocfs2_setattr+0x102f/0x1b20 [ 2132.024051][ T7241] notify_change+0xb0d/0xe10 [ 2132.029237][ T7241] chown_common+0x3f9/0x5a0 [ 2132.034261][ T7241] do_fchownat+0x168/0x270 [ 2132.039274][ T7241] __x64_sys_lchown+0x85/0x90 [ 2132.044657][ T7241] do_syscall_64+0x55/0xb0 [ 2132.049675][ T7241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2132.056252][ T7241] [ 2132.056252][ T7241] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 2132.065033][ T7241] __lock_acquire+0x2ddb/0x7c80 [ 2132.070416][ T7241] lock_acquire+0x197/0x410 [ 2132.075549][ T7241] down_write+0x97/0x1f0 [ 2132.080500][ T7241] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 2132.087112][ T7241] ocfs2_xattr_set+0x596/0x11f0 [ 2132.092508][ T7241] ocfs2_set_acl+0x4e1/0x590 [ 2132.097620][ T7241] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 2132.103092][ T7241] vfs_remove_acl+0x4e3/0x740 [ 2132.108371][ T7241] path_removexattr+0x23b/0x3f0 [ 2132.113734][ T7241] __x64_sys_removexattr+0x60/0x70 [ 2132.119364][ T7241] do_syscall_64+0x55/0xb0 [ 2132.124383][ T7241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2132.130796][ T7241] [ 2132.130796][ T7241] other info that might help us debug this: [ 2132.130796][ T7241] [ 2132.141007][ T7241] Chain exists of: [ 2132.141007][ T7241] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 2132.141007][ T7241] [ 2132.154999][ T7241] Possible unsafe locking scenario: [ 2132.154999][ T7241] [ 2132.162433][ T7241] CPU0 CPU1 [ 2132.167792][ T7241] ---- ---- [ 2132.173160][ T7241] lock(&oi->ip_xattr_sem); [ 2132.177758][ T7241] lock(jbd2_handle); [ 2132.184339][ T7241] lock(&oi->ip_xattr_sem); [ 2132.191437][ T7241] lock(&ocfs2_file_ip_alloc_sem_key); [ 2132.196967][ T7241] [ 2132.196967][ T7241] *** DEADLOCK *** [ 2132.196967][ T7241] [ 2132.205114][ T7241] 3 locks held by syz.3.24368/7241: [ 2132.210386][ T7241] #0: ffff88805ae5a418 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2132.219626][ T7241] #1: ffff88805d3c1818 (&type->i_mutex_dir_key#27){++++}-{3:3}, at: vfs_remove_acl+0xf4/0x740 [ 2132.229986][ T7241] #2: ffff88805d3c1538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 2132.241215][ T7241] [ 2132.241215][ T7241] stack backtrace: [ 2132.247089][ T7241] CPU: 1 PID: 7241 Comm: syz.3.24368 Not tainted syzkaller #0 [ 2132.254529][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2132.264578][ T7241] Call Trace: [ 2132.267849][ T7241] [ 2132.270770][ T7241] dump_stack_lvl+0x16c/0x230 [ 2132.275444][ T7241] ? load_image+0x3b0/0x3b0 [ 2132.280039][ T7241] ? show_regs_print_info+0x20/0x20 [ 2132.285239][ T7241] ? print_circular_bug+0x12b/0x1a0 [ 2132.290518][ T7241] check_noncircular+0x2bd/0x3c0 [ 2132.295444][ T7241] ? look_up_lock_class+0x75/0x140 [ 2132.300553][ T7241] ? print_deadlock_bug+0x5d0/0x5d0 [ 2132.305851][ T7241] ? lockdep_lock+0xe0/0x220 [ 2132.310466][ T7241] ? _find_first_zero_bit+0xd3/0x100 [ 2132.315839][ T7241] __lock_acquire+0x2ddb/0x7c80 [ 2132.320690][ T7241] ? verify_lock_unused+0x140/0x140 [ 2132.325886][ T7241] ? verify_lock_unused+0x140/0x140 [ 2132.331078][ T7241] lock_acquire+0x197/0x410 [ 2132.335572][ T7241] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 2132.341757][ T7241] ? __might_sleep+0xe0/0xe0 [ 2132.346340][ T7241] ? read_lock_is_recursive+0x20/0x20 [ 2132.351734][ T7241] down_write+0x97/0x1f0 [ 2132.355980][ T7241] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 2132.362129][ T7241] ? down_read_killable+0x340/0x340 [ 2132.367324][ T7241] ? ocfs2_xattr_set+0x56f/0x11f0 [ 2132.372355][ T7241] ? __lock_acquire+0x7c80/0x7c80 [ 2132.377460][ T7241] ? ocfs2_xattr_block_find+0x154/0x4c0 [ 2132.383032][ T7241] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 2132.389021][ T7241] ? ocfs2_remove_refcount_tree+0xd50/0xd50 [ 2132.394906][ T7241] ? up_write+0x1c3/0x410 [ 2132.399240][ T7241] ocfs2_xattr_set+0x596/0x11f0 [ 2132.404133][ T7241] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 2132.409846][ T7241] ? mark_lock+0x94/0x320 [ 2132.414170][ T7241] ? __lock_acquire+0x1334/0x7c80 [ 2132.419185][ T7241] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 2132.424992][ T7241] ? do_raw_spin_lock+0x121/0x2c0 [ 2132.430013][ T7241] ? __rwlock_init+0x150/0x150 [ 2132.434772][ T7241] ? do_raw_spin_unlock+0x121/0x230 [ 2132.439973][ T7241] ? _raw_spin_unlock+0x28/0x40 [ 2132.444810][ T7241] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 2132.450520][ T7241] ? verify_lock_unused+0x140/0x140 [ 2132.455752][ T7241] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 2132.461294][ T7241] ocfs2_set_acl+0x4e1/0x590 [ 2132.465887][ T7241] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 2132.470821][ T7241] ? read_lock_is_recursive+0x20/0x20 [ 2132.476184][ T7241] ? ocfs2_xattr_get+0x220/0x220 [ 2132.481137][ T7241] ? evm_inode_set_acl+0xbb/0x410 [ 2132.486272][ T7241] ? __mnt_want_write+0x68/0x2a0 [ 2132.491787][ T7241] ? down_write+0x162/0x1f0 [ 2132.496416][ T7241] ? down_read_killable+0x340/0x340 [ 2132.501644][ T7241] ? evm_revalidate_status+0x4f/0xb0 [ 2132.506944][ T7241] ? make_vfsuid+0x51/0xb0 [ 2132.511363][ T7241] ? inode_owner_or_capable+0xf0/0x1c0 [ 2132.516838][ T7241] vfs_remove_acl+0x4e3/0x740 [ 2132.521515][ T7241] path_removexattr+0x23b/0x3f0 [ 2132.526477][ T7241] ? listxattr+0x280/0x280 [ 2132.530911][ T7241] ? do_futex+0x2ff/0x3e0 [ 2132.535766][ T7241] ? lock_chain_count+0x20/0x20 [ 2132.540717][ T7241] ? syscall_enter_from_user_mode+0x25/0x80 [ 2132.546774][ T7241] __x64_sys_removexattr+0x60/0x70 [ 2132.551878][ T7241] do_syscall_64+0x55/0xb0 [ 2132.556294][ T7241] ? clear_bhb_loop+0x40/0x90 [ 2132.560962][ T7241] ? clear_bhb_loop+0x40/0x90 [ 2132.565670][ T7241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2132.571816][ T7241] RIP: 0033:0x7f4749d8f749 [ 2132.576403][ T7241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2132.596101][ T7241] RSP: 002b:00007f474aca4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 2132.604509][ T7241] RAX: ffffffffffffffda RBX: 00007f4749fe5fa0 RCX: 00007f4749d8f749 [ 2132.612644][ T7241] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000200000000580 [ 2132.620629][ T7241] RBP: 00007f4749e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2132.628676][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2132.636636][ T7241] R13: 00007f4749fe6038 R14: 00007f4749fe5fa0 R15: 00007ffd346b9328 [ 2132.644606][ T7241] [ 2132.723735][ T5795] ocfs2: Unmounting device (7,3) on (node local)