last executing test programs: 8m23.066810284s ago: executing program 2 (id=2842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) 8m22.893323979s ago: executing program 2 (id=2845): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/resume_offset', 0x88102, 0xd869df5116bc7baf) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x437f8000) 8m22.682081613s ago: executing program 2 (id=2859): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000020feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000100001d440000000000007a0a00fe00ffffffdb030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8m22.553954746s ago: executing program 2 (id=2851): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'macceltic'}}]}, 0x9, 0x610, &(0x7f0000000c80)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 8m22.134431126s ago: executing program 2 (id=2856): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8m21.162836849s ago: executing program 2 (id=2872): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0xa, 0x20, 0x80, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x4d5, 0x32}, @in=@local, {0xffffffbffffffffd, 0x0, 0x8, 0x0, 0xdde0, 0xf}, {0x0, 0x5, 0x0, 0x2}, {0xffffffff, 0x7, 0x7fffffc}, 0x70b92a, 0x0, 0xa, 0x4, 0x3, 0x22}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e21, @in=@multicast2}}]}, 0x154}}, 0x40050) 8m20.846450866s ago: executing program 32 (id=2872): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x0, 0x1, 0x0, 0xa, 0x20, 0x80, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x4d5, 0x32}, @in=@local, {0xffffffbffffffffd, 0x0, 0x8, 0x0, 0xdde0, 0xf}, {0x0, 0x5, 0x0, 0x2}, {0xffffffff, 0x7, 0x7fffffc}, 0x70b92a, 0x0, 0xa, 0x4, 0x3, 0x22}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e21, @in=@multicast2}}]}, 0x154}}, 0x40050) 6m29.864089424s ago: executing program 0 (id=4514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) 6m29.722471016s ago: executing program 0 (id=4518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa8) 6m29.54722866s ago: executing program 0 (id=4524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x24, 0x16, 0xd249249bd15ed83, 0x0, 0x0, {0x23}}, 0x24}}, 0x0) 6m29.354093775s ago: executing program 0 (id=4528): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB='errors=continue,iocharset=macromanian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nodiscard,discard=0x000000000000000\x00,discard=0x0000000000000006,quota,nointegrity,discard,noquota,iocharset=cp869,\x00'], 0x21, 0x6182, &(0x7f0000001140)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m28.29255217s ago: executing program 0 (id=4549): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getpeername$ax25(r0, 0x0, 0x0) 6m26.657321619s ago: executing program 0 (id=4574): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x110, 0xe}, {0x18, 0x110, 0x1, "02"}], 0x28}, 0x0) 6m26.119490811s ago: executing program 33 (id=4574): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x110, 0xe}, {0x18, 0x110, 0x1, "02"}], 0x28}, 0x0) 5m44.936057338s ago: executing program 5 (id=5200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5m44.564329237s ago: executing program 5 (id=5207): r0 = syz_open_dev$vbi(&(0x7f0000000700), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x5, [0xd, 0xcd, 0x8, 0xc44, 0xad7, 0x8, 0x4c7, 0x7, 0xf000, 0x129e, 0x4, 0x7ec, 0x8, 0x1, 0x6, 0x1, 0xd, 0x800, 0x9, 0x9, 0x4, 0x3, 0x4, 0x8, 0xe, 0x1, 0xffff, 0x9, 0x81, 0xab94, 0x8, 0x0, 0x7, 0x5, 0x8001, 0x5, 0x8000, 0x1000, 0xc, 0xfff, 0x720, 0x0, 0x9, 0x7fff, 0x9f9, 0x10, 0x8, 0x5], 0x8}) 5m44.369798832s ago: executing program 5 (id=5209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x8002, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x89}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x2, 0xfc, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc011}, 0x48080) 5m44.124307067s ago: executing program 5 (id=5212): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e5496ddf42b572a11a00801680", @ANYRESHEX, @ANYRES32=0x0], 0x1, 0x14c, &(0x7f00000001c0)="$eJzszr9LOnEcBvDnvnen30r7QQYWZEJDRyKdJ9XUoJEkdAmFS5NQJwVKkVCORbS1tTpIQpP4L1jWYihE/RMtbkFrfO6OwCb3ntdy3PN+Pm/eG2tdDWFAhmP9uHhyapVK1kF4J2Omdj+azYTIPQD+982d/kMCOBRfBehdAiJ+8sPrriuI/14C0AAkR4D8UcHS4XSHRRYAFLcsMm0eaE2pds/oy+wTrLibzShAcuxnn5nPq1gQ+yacLAbgE0C5EmnUX7Y77XR08X5WxnU6Mjcp9ech68ZITdd8QRlZ6/kOSXv+vtSOvg416m/djrmVMb3duGGsxPWYri/73YOhbPrOgL1f+zwIhpQscCUBt/as9yiJN63qV6Y4ulp1X1+cy2FAKlf2c0G1lguM/4OsQcIg1IFaRERERERERERERERERET0V3wHAAD//1/LWts=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m43.562297351s ago: executing program 5 (id=5217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5m42.498816256s ago: executing program 5 (id=5235): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/213, 0xd5}], 0x1, 0x7fb, 0x63) 5m42.099291335s ago: executing program 34 (id=5235): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/213, 0xd5}], 0x1, 0x7fb, 0x63) 5m40.120659352s ago: executing program 6 (id=5262): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, &(0x7f0000000180), 0x4) 5m39.836903838s ago: executing program 6 (id=5265): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x2, 0x6, 0x1, 0x0, 0x3}) 5m39.660961272s ago: executing program 6 (id=5268): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_channels={0x3d, 0x7, 0x5, 0x6, 0x1, 0x200, 0x7, 0xa, 0x3}}) 5m39.455632107s ago: executing program 6 (id=5273): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e5496ddf42b572a11a00801680", @ANYRESHEX, @ANYRES32=0x0], 0x1, 0x14c, &(0x7f00000001c0)="$eJzszr9LOnEcBvDnvnen30r7QQYWZEJDRyKdJ9XUoJEkdAmFS5NQJwVKkVCORbS1tTpIQpP4L1jWYihE/RMtbkFrfO6OwCb3ntdy3PN+Pm/eG2tdDWFAhmP9uHhyapVK1kF4J2Omdj+azYTIPQD+982d/kMCOBRfBehdAiJ+8sPrriuI/14C0AAkR4D8UcHS4XSHRRYAFLcsMm0eaE2pds/oy+wTrLibzShAcuxnn5nPq1gQ+yacLAbgE0C5EmnUX7Y77XR08X5WxnU6Mjcp9ech68ZITdd8QRlZ6/kOSXv+vtSOvg416m/djrmVMb3duGGsxPWYri/73YOhbPrOgL1f+zwIhpQscCUBt/as9yiJN63qV6Y4ulp1X1+cy2FAKlf2c0G1lguM/4OsQcIg1IFaRERERERERERERERERET0V3wHAAD//1/LWts=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m39.073620356s ago: executing program 6 (id=5276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m36.570846885s ago: executing program 6 (id=5293): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30314442, 0x0, @stepwise={0x0, 0x6}}) 5m36.100937136s ago: executing program 35 (id=5293): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30314442, 0x0, @stepwise={0x0, 0x6}}) 2.658757168s ago: executing program 8 (id=10915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, 'vlan\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) 2.57811941s ago: executing program 8 (id=10919): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x802, &(0x7f0000000340)=ANY=[], 0x3, 0x1f3, &(0x7f0000000380)="$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") statfs(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=""/142) 2.328683846s ago: executing program 8 (id=10924): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c801000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000200)={0x20, 0x7, 0x4, 'DI4r'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.999600793s ago: executing program 3 (id=10932): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x7bffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}]}, 0x50}}, 0x0) 1.778754219s ago: executing program 3 (id=10937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x1, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x70}}, 0x2006c884) 1.630642052s ago: executing program 3 (id=10941): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf2509000200", @ANYRES32, @ANYBLOB="050054"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 1.524011444s ago: executing program 3 (id=10944): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) 1.051884126s ago: executing program 7 (id=10952): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) 938.589758ms ago: executing program 3 (id=10953): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$eJzs281vFOcdB/DfrN1iU6B+4x2kVXuo1VbWmlNbDqXgtkKqSu2+qOoBa/0CuF17LXtdcahUqt6RIuUQ5ZwLKPcITvwLOYRrjhxIDrlEySWOdnfW3pn1hhXy2sH5fCQYzzPzvMhfz+zz6LELqdq9lc3iymaxvFasLt7ZvFL8d7WytbochQNy2P3Tm37kJPvDc+vG7/78tysR9z8a+8H29vZ21I3Enqbbvv78s/8sth9bCrk69Xb3bm2//CMiJiJiKPLjGYiIv38QkUTEaFo2lh6HI+JENK/9//1Hc0P7NJqBF49nH83OPHzycvX58I3bxa43JhHvVs7//O7qJz8euPrxT/epewAA+Ea/n7v11z+VpuNZEqeeDnbO18+mx27z42168uv+RwkAAABd7a7/R5JC0rn+n0iPXbYEw8L2zXbzj7dmfluaTvd/k47rv0iLPv3NQGMPNb/vm9//Hc3V33v/t7Of19UaX6vfkUgKU5nzQmFqKmL6evP8XHK8UKlu1n52p7q1trRvw3hjZfNv7t5n0kk39HvNfyzXfv/3/8c7fprq58X9+xE70rL5D3S9773/JT3lP56rdxD58/qy+Q82yn7UfkOx+QKo5//W4Kvzn8i136/8T9Xf7Ul9rEOZN0B9DlMv7zZfISub//caZZlXZ/qN7Pb8f5nL/3Su/cN6/09e72+vR0U2/+83yrK/tLb7/I8WXv38n8m1fxj518c/6fO/J9n8jzULsy/Pxney1/f/2Vz7fcr/QbqtGnEqifG23zp9Otj8cGjtVzeWNPXL630YxRGQzb9zl393/Vfoaf53Llf/oNZ/rX5b67/WOmQyaa7/2Fs2/+Gu9/X6/J/P1ev7+z8ZSlcA2//taz9HVDb/483CPSaAveZ/Idd+v/JvvPGHWvnvDvirY83ykvlfT7L5p1FlPgYeNP5vzP+Szty/yOV/Mdd+W/75Pw3ZJ53zv/r4J/vU21GTzf9E1/vq+X/Yw+f/pVy9/s//I0rm+q8tm//Jrvc1nv+hV+d/OVev3/n/pJ+NAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8B4ylx5FIClOZ80JhaipiPD0/F8eThfLS/EKluvivzYiJtLwYY8ndSnWhXJlfWasuLc+XK5XqYsTp9PpEDCWblWptfrW8fmanreHk3nJ5o7awXK5FxNm0/FKcbLW1sFJbLa837m1d+2GhurF+r7w2v7Sy8atSqVSK8ztjGE2W79eW12rN3ptXIy7s1B1J2gbXuHxxZywnkn9WtzbWypVG+aW2OpXqYrnSVudyeu3tGE1qG1tri+Xa8nylerfV32G6lh5nbs79Ze4P0x3Xi0nzOHawwwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgW+bZ1V++ExGDzbNCRFxrfZGk/zIGXjyefTQ78/DJy9XnwzduF/e6BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADga3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8cqDUNRGIDPvQoKLuroEziFZHNVFHExIvgEvkSHvmYfo0PHLqXQ3kBIGujS0uH7lkPyc+85cA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJfj87f9+6mbiBS3m5uI2eLxrp8/lVq/HT5/dYYZOZ2v7/b9o27Ku6dR/lJ+LV/zLl2v5v9R6nXvu9MM9mS4T3vjPkNT+zY1X9f3PlKuIuKh5M8p56o67i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbszaEJgGAQx9E7wWSzuIZOYVQE9zA6nks4jybBYBC++l46OH78AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCfcZnWuR/iyKiuzNjPtnn/u+fYvvssm6/LcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICbHTiQAQAAABDmb51H+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIMCAAD//+N8zQE=") fsync(0xffffffffffffffff) 938.399118ms ago: executing program 1 (id=10954): r0 = socket(0x15, 0x5, 0x0) getsockname$llc(r0, 0x0, &(0x7f0000000040)) 925.724628ms ago: executing program 4 (id=10955): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) 910.194619ms ago: executing program 7 (id=10956): r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x633, @empty, 0x8}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x40000b, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x81}, 0x1c, 0x0}}], 0x2, 0x480c1) 802.782711ms ago: executing program 1 (id=10957): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@loopback, @rand_addr=' \x01\x00', @mcast1, 0x3, 0x8, 0xb, 0x0, 0x81, 0x5000206}) 773.312082ms ago: executing program 4 (id=10958): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010101}}}], 0x38}, 0x0) 761.246302ms ago: executing program 7 (id=10959): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="d800000019008111e0020f060d8107040a60090000020000000055a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002002dc6080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7453801896034277ce06bbace8034cb393a5e83d42365f003724a237ee4b11602b2270000000014d6d9bc8742ee045d10511b53c74a81d530dfe1d9c322fe040000005025acca262f3d40fad75667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccb3", 0xd8}], 0x1}, 0x0) 686.882884ms ago: executing program 1 (id=10960): unshare(0x22020400) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 634.360755ms ago: executing program 4 (id=10961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb000009080001400040"], 0xf8}, 0x1, 0x0, 0x0, 0x890}, 0x0) 624.337585ms ago: executing program 7 (id=10962): unshare(0xe000000) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) 520.362488ms ago: executing program 1 (id=10963): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x4a, 0x1, 0x0, 0x800000, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) 519.491208ms ago: executing program 8 (id=10964): r0 = socket$kcm(0x1e, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 422.79083ms ago: executing program 4 (id=10965): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0xe0, 0xa, 0x160000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @private=0xa010101}}]}, 0x50}, 0x1, 0x7}, 0x40000) 388.775321ms ago: executing program 1 (id=10966): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50088}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x58}}, 0x40820) 374.790841ms ago: executing program 7 (id=10967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ff7f0000000000000008000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 278.848493ms ago: executing program 8 (id=10968): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f0000000dc0)=[{&(0x7f0000000140)='31', 0x2}], 0x1) 278.541723ms ago: executing program 4 (id=10969): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000100)='AqAAAAAAAAAAAAAAABAA=+AAAAAAAAAACAAAAA++\x00', 0x0) 199.052785ms ago: executing program 8 (id=10970): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) 188.220446ms ago: executing program 1 (id=10971): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e003d0010000000028000001294", 0x2e}], 0x1}, 0x0) 91.603388ms ago: executing program 7 (id=10972): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000600)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xfc, 0x24a, &(0x7f0000000640)="$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") creat(&(0x7f0000000180)='./file2\x00', 0x18b) 90.001938ms ago: executing program 4 (id=10973): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4467, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280)) 0s ago: executing program 3 (id=10974): open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) truncate(&(0x7f0000000080)='./file2\x00', 0x4b1) kernel console output (not intermixed with test programs): indirect mapped block 1024 (level 0) [ 647.142555][T24902] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.8842: bg 0: block 35: padding at end of block bitmap is not set [ 647.165895][T24902] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 647.175549][T24902] EXT4-fs (loop8): 1 truncate cleaned up [ 647.181312][T24902] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 647.204163][ T7] usb 2-1: unit 3 not found! [ 647.217315][ T7] usb 2-1: 5:0: failed to get current value for ch 0 (-71) [ 647.297825][ T7] usb 2-1: USB disconnect, device number 39 [ 647.313973][T16811] EXT4-fs (loop8): unmounting filesystem. [ 647.583680][ T8001] udevd[8001]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.759375][T24927] loop8: detected capacity change from 0 to 4096 [ 647.828536][T24927] ntfs3: loop8: Failed to load $Extend. [ 647.962488][ T7] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 648.163973][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.190793][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 648.230029][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 648.266304][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.288858][T24952] x_tables: duplicate underflow at hook 2 [ 648.322330][ T7] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 648.331452][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.424623][T24957] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8872'. [ 648.470245][T24959] loop1: detected capacity change from 0 to 16 [ 648.518230][T24959] erofs: (device loop1): mounted with root inode @ nid 36. [ 648.547617][T24962] loop8: detected capacity change from 0 to 64 [ 648.811481][ T6989] usb 5-1: USB disconnect, device number 29 [ 649.033830][T24979] loop7: detected capacity change from 0 to 128 [ 649.066333][T24979] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 649.097311][T24979] hpfs: filesystem error: improperly stopped [ 649.112288][T24979] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 649.120457][T24983] netlink: 56 bytes leftover after parsing attributes in process `syz.8.8884'. [ 649.130382][T24979] hpfs: You really don't want any checks? You are crazy... [ 649.147980][T24979] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 649.160657][T24983] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8884'. [ 649.162874][T24979] hpfs: code page support is disabled [ 649.192586][T24983] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8884'. [ 649.213606][T24979] hpfs: hpfs_map_4sectors(): unaligned read [ 649.219635][T24979] hpfs: hpfs_map_4sectors(): unaligned read [ 649.251398][T24979] hpfs: filesystem error: unable to find root dir [ 649.518667][T24998] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8890'. [ 650.121715][T25021] netlink: 'syz.3.8904': attribute type 10 has an invalid length. [ 650.190968][T24994] loop1: detected capacity change from 0 to 32768 [ 650.214733][T24994] JBD2: Ignoring recovery information on journal [ 650.235804][T24994] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 650.254613][T24994] JBD2: bad block at offset 32 [ 650.285857][T24994] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 650.352954][ T4319] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 650.502715][T25027] netlink: 'syz.7.8906': attribute type 2 has an invalid length. [ 650.517626][ T4273] ocfs2: Unmounting device (7,1) on (node local) [ 650.553936][ T4319] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 650.567438][ T4319] usb 9-1: config 0 has no interface number 0 [ 650.594091][ T4319] usb 9-1: config 0 interface 41 has no altsetting 0 [ 650.637654][ T4319] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 650.669274][ T4319] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.687915][ T4319] usb 9-1: Product: syz [ 650.692252][ T4319] usb 9-1: Manufacturer: syz [ 650.708135][ T4319] usb 9-1: SerialNumber: syz [ 650.733149][ T4319] usb 9-1: config 0 descriptor?? [ 650.889814][T25039] loop1: detected capacity change from 0 to 512 [ 650.947291][ T4319] CoreChips: probe of 9-1:0.41 failed with error -71 [ 650.985661][ T4319] usb 9-1: USB disconnect, device number 17 [ 651.015965][T25039] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 651.044794][T25039] FAT-fs (loop1): Filesystem has been set read-only [ 651.426890][T25055] loop3: detected capacity change from 0 to 4096 [ 651.443937][T25059] xt_TCPMSS: Only works on TCP SYN packets [ 651.463880][T25055] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 651.966619][T25081] loop8: detected capacity change from 0 to 256 [ 652.038684][T25085] loop7: detected capacity change from 0 to 22 [ 652.087229][T25085] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 652.137900][T25085] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 652.893606][T25126] loop7: detected capacity change from 0 to 2048 [ 653.009924][T25126] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 653.065380][T25126] EXT4-fs error (device loop7): ext4_lookup:1852: inode #2: comm syz.7.8956: bad inode number: 12 [ 653.098707][T25126] EXT4-fs (loop7): Remounting filesystem read-only [ 653.219237][T16652] EXT4-fs (loop7): unmounting filesystem. [ 653.277859][T10830] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 653.316581][T25121] loop1: detected capacity change from 0 to 32768 [ 653.370696][T25121] ea_get: invalid extended attribute [ 653.391074][T25121] ffff888072513ab0: 04 00 00 00 .... [ 653.422740][T25144] netlink: 52 bytes leftover after parsing attributes in process `syz.8.8963'. [ 653.483757][T10830] usb 4-1: Using ep0 maxpacket: 16 [ 653.491290][T10830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.531939][T10830] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 653.562375][T10830] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 653.593348][T10830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.601419][T10830] usb 4-1: Product: syz [ 653.626221][T25150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8966'. [ 653.650191][T10830] usb 4-1: Manufacturer: syz [ 653.660332][T10830] usb 4-1: SerialNumber: syz [ 653.682032][T10830] r8152-cfgselector 4-1: config 0 descriptor?? [ 653.865656][T25158] syz.8.8971: attempt to access beyond end of device [ 653.865656][T25158] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 653.894477][T10830] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 653.908282][T25160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.002016][T25160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.011801][T25160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.031311][T25160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.054681][T25160] device geneve2 entered promiscuous mode [ 654.088175][T25160] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.111782][T10830] usb 4-1: USB disconnect, device number 45 [ 654.132991][T25160] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.147445][T25160] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.164007][T25160] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.789540][T25190] xt_bpf: check failed: parse error [ 654.812635][T25195] loop1: detected capacity change from 0 to 64 [ 656.585107][T25267] loop8: detected capacity change from 0 to 4096 [ 656.628638][T25267] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 657.140454][T25287] autofs4:pid:25287:autofs_fill_super: called with bogus options [ 657.341190][T25292] delete_channel: no stack [ 657.487020][T25296] device bond2 entered promiscuous mode [ 657.502007][T25296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 657.647792][T25307] comedi comedi4: bad chanlist[0]=0x00040000 chan=0 range length=2 [ 657.737763][T25308] loop7: detected capacity change from 0 to 4096 [ 657.781308][T25308] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 658.131321][T25326] netlink: 'syz.8.9053': attribute type 10 has an invalid length. [ 658.239071][T25326] team0: Port device bridge0 added [ 658.249897][T25328] loop1: detected capacity change from 0 to 1024 [ 658.534855][T25334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9057'. [ 658.655659][T25316] loop4: detected capacity change from 0 to 32768 [ 658.711960][T25338] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 658.731537][T25316] (syz.4.9046,25316,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 658.772019][T25316] (syz.4.9046,25316,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 658.865957][T25316] JBD2: Ignoring recovery information on journal [ 659.031865][T25316] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 659.069391][T25324] loop3: detected capacity change from 0 to 40427 [ 659.430976][ T4285] ocfs2: Unmounting device (7,4) on (node local) [ 660.159634][T25386] netlink: 'syz.8.9082': attribute type 32 has an invalid length. [ 660.493445][T25370] loop7: detected capacity change from 0 to 32768 [ 660.603954][T25406] openvswitch: netlink: Key type 316 is out of range max 32 [ 660.613607][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 660.613624][ T27] audit: type=1326 audit(1791367637.479:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.3.9092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 660.748096][ T27] audit: type=1326 audit(1791367637.479:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.3.9092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 660.846750][ T27] audit: type=1326 audit(1791367637.479:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.3.9092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 660.961596][ T27] audit: type=1326 audit(1791367637.479:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.3.9092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 661.051718][ T27] audit: type=1326 audit(1791367637.479:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.3.9092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 661.135113][ T27] audit: type=1326 audit(1791367637.479:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.3.9092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 661.229886][ T27] audit: type=1326 audit(1791367637.479:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.3.9092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 661.347286][ T27] audit: type=1326 audit(1791367637.479:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25407 comm="syz.3.9092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 661.608789][T25443] loop8: detected capacity change from 0 to 8 [ 661.895873][T25449] syz.4.9113: attempt to access beyond end of device [ 661.895873][T25449] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 661.952535][T25449] vxfs: unable to read disk superblock at 1 [ 661.985058][T25449] syz.4.9113: attempt to access beyond end of device [ 661.985058][T25449] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 662.051706][T25449] vxfs: unable to read disk superblock at 8 [ 662.076646][T25449] vxfs: can't find superblock. [ 662.854403][T25496] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 663.752237][T25526] netlink: 193 bytes leftover after parsing attributes in process `syz.1.9149'. [ 664.071262][T25532] loop8: detected capacity change from 0 to 4096 [ 664.125218][T25532] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 664.869661][T25538] loop1: detected capacity change from 0 to 32768 [ 664.879142][T25538] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.9156 (25538) [ 664.926322][T25538] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 664.971942][T25538] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 665.011434][T25538] BTRFS info (device loop1): setting nodatacow, compression disabled [ 665.019603][T25538] BTRFS info (device loop1): setting datasum, datacow enabled [ 665.061551][T25538] BTRFS info (device loop1): disabling tree log [ 665.111295][T25538] BTRFS info (device loop1): enabling ssd optimizations [ 665.118337][T25538] BTRFS info (device loop1): using spread ssd allocation scheme [ 665.175375][T25538] BTRFS info (device loop1): turning on sync discard [ 665.201555][T25538] BTRFS info (device loop1): turning off barriers [ 665.240652][T25538] BTRFS info (device loop1): max_inline at 0 [ 665.251261][T25538] BTRFS info (device loop1): using free space tree [ 665.322946][T25594] loop7: detected capacity change from 0 to 1024 [ 665.340853][T25575] [U] [ 665.344499][T25575] [U] [ 665.347283][T25575] [U] [ 665.350033][T25575] [U] [ 665.368275][T25538] BTRFS info (device loop1): checking UUID tree [ 665.412772][T25575] [U] [ 665.415589][T25575] [U] [ 665.418336][T25575] [U] [ 665.421075][T25575] [U] [ 665.503353][T25575] [U] [ 665.506142][T25575] [U] [ 665.508886][T25575] [U] [ 665.565556][T25574] [U] [ 665.778389][ T4273] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 666.292339][T25613] xt_TCPMSS: Only works on TCP SYN packets [ 666.506378][T25616] loop7: detected capacity change from 0 to 4096 [ 666.568374][T25623] loop3: detected capacity change from 0 to 512 [ 666.605457][T25616] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 666.646439][T25623] /dev/loop3: Can't open blockdev [ 667.292912][T25644] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 667.423404][T25659] loop4: detected capacity change from 0 to 64 [ 667.440298][T25661] vivid-007: ================= START STATUS ================= [ 667.489388][T25659] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 667.507155][T25661] vivid-007: Generate PTS: true [ 667.528276][T25661] vivid-007: Generate SCR: true [ 667.538520][T25661] tpg source WxH: 640x360 (Y'CbCr) [ 667.559412][T25661] tpg field: 1 [ 667.568288][T25661] tpg crop: 640x360@0x0 [ 667.589817][T25661] tpg compose: 640x360@0x0 [ 667.594951][T25661] tpg colorspace: 8 [ 667.611935][T25661] tpg transfer function: 0/0 [ 667.617432][T25661] tpg Y'CbCr encoding: 0/0 [ 667.641735][T25661] tpg quantization: 0/0 [ 667.651854][T25661] tpg RGB range: 0/2 [ 667.672016][T25661] vivid-007: ================== END STATUS ================== [ 667.869030][T25678] cgroup: Invalid name [ 667.897703][T25681] x_tables: unsorted entry at hook 3 [ 668.055800][ T4317] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 668.101243][ T8011] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 668.259492][ T4317] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 668.279382][ T4317] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.291156][ T8011] usb 2-1: Using ep0 maxpacket: 8 [ 668.298025][ T8011] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.326153][ T8011] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 668.328794][ T4317] usb 8-1: config 0 descriptor?? [ 668.347355][ T4317] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 668.361247][ T8011] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 668.392902][ T8011] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 668.419741][ T8011] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 668.439130][ T8011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.472193][ T8011] hub 2-1:1.0: bad descriptor, ignoring hub [ 668.478873][T25705] binder: 25704:25705 ioctl c018620c 200000000000 returned -22 [ 668.498573][ T8011] hub: probe of 2-1:1.0 failed with error -5 [ 668.505866][ T8011] cdc_wdm 2-1:1.0: skipping garbage [ 668.521850][ T8011] cdc_wdm 2-1:1.0: skipping garbage [ 668.542524][T25707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9230'. [ 668.561343][ T8011] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 668.568770][ T8011] cdc_wdm 2-1:1.0: Unknown control protocol [ 668.617120][T25709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9231'. [ 668.782893][ T4317] gp8psk: usb in 137 operation failed. [ 668.788530][ T4317] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 668.792181][ T4352] usb 2-1: USB disconnect, device number 40 [ 668.831964][ T4317] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 668.877383][ T4317] usb 8-1: USB disconnect, device number 10 [ 670.026616][T25754] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9253'. [ 670.696529][T25793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9271'. [ 671.121269][ T8011] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 671.215365][T25797] loop8: detected capacity change from 0 to 32768 [ 671.230399][T25797] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.9273 (25797) [ 671.255651][T25797] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 671.274795][T25797] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 671.311073][ T8011] usb 8-1: Using ep0 maxpacket: 16 [ 671.316993][T25797] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 671.319861][ T8011] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 671.357450][T25797] BTRFS info (device loop8): use zstd compression, level 3 [ 671.368373][ T8011] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 671.387415][ T8011] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.396039][T25797] BTRFS info (device loop8): using free space tree [ 671.417179][T25822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9286'. [ 671.421203][ T8011] usb 8-1: Product: syz [ 671.438014][ T8011] usb 8-1: Manufacturer: syz [ 671.443100][ T8011] usb 8-1: SerialNumber: syz [ 671.458373][ T8011] r8152-cfgselector 8-1: config 0 descriptor?? [ 671.630533][T25845] netlink: 'syz.3.9288': attribute type 1 has an invalid length. [ 671.639111][ T7] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 671.655276][T25797] BTRFS info (device loop8): enabling ssd optimizations [ 671.758237][T16811] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 671.849410][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 671.863771][ T7] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.882174][ T8011] r8152-cfgselector 8-1: Unknown version 0x0000 [ 671.891585][ T8011] r8152-cfgselector 8-1: USB disconnect, device number 11 [ 671.914601][ T7] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.957002][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 671.971170][ T7] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 671.989052][T25854] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9293'. [ 671.998238][ T7] usb 2-1: Product: syz [ 672.002717][ T7] usb 2-1: Manufacturer: syz [ 672.031646][ T7] hub 2-1:4.0: USB hub found [ 672.098024][T25851] nvme_tcp: malformed address passed: :.:8009 [ 672.239062][ T7] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 672.571605][ T4317] usb 2-1: USB disconnect, device number 41 [ 672.727064][T25879] loop3: detected capacity change from 0 to 16 [ 672.769653][T25879] /dev/loop3: Can't open blockdev [ 672.943323][T25883] loop8: detected capacity change from 0 to 4096 [ 672.993307][T25883] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 673.097656][T25883] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 673.384575][T25898] loop4: detected capacity change from 0 to 4096 [ 673.444589][T25898] ntfs3: loop4: ino=3, Correct links count -> 2. [ 673.677448][T25912] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 673.731322][T25912] infiniband syz1: set active [ 673.757260][T25912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 673.781094][T25912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 673.874151][ T6989] vcan0 speed is unknown, defaulting to 1000 [ 673.971745][T25922] loop8: detected capacity change from 0 to 256 [ 674.982196][T25957] tmpfs: Bad value for 'mpol' [ 675.159931][T25966] loop3: detected capacity change from 0 to 512 [ 675.177520][T25966] EXT4-fs: Ignoring removed nomblk_io_submit option [ 675.195244][T25966] EXT4-fs: Ignoring removed nobh option [ 675.205426][T25966] /dev/loop3: Can't open blockdev [ 675.265147][ T8004] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 675.515139][T25981] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 675.581302][T25981] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 675.600889][T25981] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 675.876814][T25963] loop8: detected capacity change from 0 to 32768 [ 675.924385][T25963] (syz.8.9344,25963,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 675.955505][T25963] (syz.8.9344,25963,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 676.033431][T25963] JBD2: Ignoring recovery information on journal [ 676.177835][T25963] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 676.331026][T25985] loop3: detected capacity change from 0 to 32768 [ 676.476469][T16811] ocfs2: Unmounting device (7,8) on (node local) [ 676.577290][T25980] loop1: detected capacity change from 0 to 32768 [ 676.717691][T25980] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 676.717691][T25980] [ 676.783106][T25980] ERROR: (device loop1): remounting filesystem as read-only [ 676.885562][ T8001] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (8001) [ 677.209962][T26016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9369'. [ 677.390436][T26022] xt_bpf: check failed: parse error [ 678.205174][T26059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9389'. [ 679.000293][T26086] UBIFS error (pid: 26086): cannot open "usb0", error -22 [ 679.238515][T26064] loop3: detected capacity change from 0 to 40427 [ 679.395964][T26102] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 680.454304][T26157] loop4: detected capacity change from 0 to 256 [ 680.838081][T26173] set match dimension is over the limit! [ 680.846535][T26176] loop8: detected capacity change from 0 to 8 [ 680.889522][T26177] netlink: 'syz.1.9445': attribute type 16 has an invalid length. [ 680.990637][ T8007] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 681.123415][T26185] loop1: detected capacity change from 0 to 8 [ 681.177687][T26185] SQUASHFS error: lzo decompression failed, data probably corrupt [ 681.197822][T26185] SQUASHFS error: Failed to read block 0x91: -5 [ 681.204946][T26185] SQUASHFS error: Unable to read metadata cache entry [8f] [ 681.213025][T26185] SQUASHFS error: Unable to read inode 0x11f [ 681.223002][ T8007] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 681.240609][ T8007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.248754][ T8007] usb 5-1: Product: syz [ 681.253419][ T8007] usb 5-1: Manufacturer: syz [ 681.258063][ T8007] usb 5-1: SerialNumber: syz [ 681.269529][T26187] loop7: detected capacity change from 0 to 2048 [ 681.276475][T26191] overlayfs: missing 'lowerdir' [ 681.364872][ T8007] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 681.383610][T26192] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 681.475830][T26187] syz.7.9451: attempt to access beyond end of device [ 681.475830][T26187] loop7: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 681.522672][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 681.558430][T26187] syz.7.9451: attempt to access beyond end of device [ 681.558430][T26187] loop7: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 681.561142][ T7] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 681.595371][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 681.612252][T26187] syz.7.9451: attempt to access beyond end of device [ 681.612252][T26187] loop7: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 681.636063][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 681.647846][T26187] syz.7.9451: attempt to access beyond end of device [ 681.647846][T26187] loop7: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 681.714438][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 681.736423][T26187] syz.7.9451: attempt to access beyond end of device [ 681.736423][T26187] loop7: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 681.759062][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 681.768183][T26187] syz.7.9451: attempt to access beyond end of device [ 681.768183][T26187] loop7: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 681.800652][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 681.809587][T26187] syz.7.9451: attempt to access beyond end of device [ 681.809587][T26187] loop7: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 681.828876][ T8006] usb 5-1: USB disconnect, device number 30 [ 681.844113][T26200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9457'. [ 681.862526][ T7] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 681.873495][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.889717][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 681.895557][ T7] usb 9-1: config 0 descriptor?? [ 681.906705][ T7] cp210x 9-1:0.0: cp210x converter detected [ 681.913990][T26187] syz.7.9451: attempt to access beyond end of device [ 681.913990][T26187] loop7: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 681.932992][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 681.942365][T26187] syz.7.9451: attempt to access beyond end of device [ 681.942365][T26187] loop7: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 681.962108][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 681.971700][T26187] syz.7.9451: attempt to access beyond end of device [ 681.971700][T26187] loop7: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 681.986679][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 681.996014][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 682.014938][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 682.035298][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 682.057636][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 682.079680][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 682.090574][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 682.102724][ T27] audit: type=1800 audit(1791367658.960:484): pid=26187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.9451" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 682.158193][T26187] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15) [ 682.167117][T26187] NILFS (loop7): error -5 truncating bmap (ino=16) [ 682.353857][ T7] cp210x 9-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 682.369190][ T7] cp210x 9-1:0.0: GPIO initialisation failed: -71 [ 682.389152][ T7] usb 9-1: cp210x converter now attached to ttyUSB0 [ 682.429526][ T7] usb 9-1: USB disconnect, device number 18 [ 682.441555][ T8007] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 682.448821][ T8007] ath9k_htc: Failed to initialize the device [ 682.472857][ T8006] usb 5-1: ath9k_htc: USB layer deinitialized [ 682.493258][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 682.524043][ T7] cp210x 9-1:0.0: device disconnected [ 682.562860][T26216] netlink: 316 bytes leftover after parsing attributes in process `syz.4.9465'. [ 682.698232][T26224] netlink: 'syz.7.9469': attribute type 2 has an invalid length. [ 682.907574][T26234] netlink: 'syz.3.9473': attribute type 5 has an invalid length. [ 683.273445][ T27] audit: type=1326 audit(1791367660.140:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.4.9480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 683.340759][ T27] audit: type=1326 audit(1791367660.180:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.4.9480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 683.364937][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.459558][ T27] audit: type=1326 audit(1791367660.180:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.4.9480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 683.483818][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.552482][ T27] audit: type=1326 audit(1791367660.180:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.4.9480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 683.636105][ T27] audit: type=1326 audit(1791367660.180:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.4.9480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 683.710278][ T27] audit: type=1326 audit(1791367660.180:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.4.9480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 683.734453][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.811066][ T27] audit: type=1326 audit(1791367660.180:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26248 comm="syz.4.9480" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 683.835223][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.857257][T26266] loop8: detected capacity change from 0 to 4096 [ 683.915746][T26266] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 683.955642][T26273] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 684.367216][T26278] loop8: detected capacity change from 0 to 4096 [ 684.405312][T26278] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 684.421549][T26284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9496'. [ 684.452232][T26284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9496'. [ 684.796103][T26299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.088556][T26302] loop4: detected capacity change from 0 to 8192 [ 685.165046][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.176654][T26302] loop4: p1 p2 p4[EZD] [ 685.191639][T26302] loop4: p4 start 201326592 is beyond EOD, truncated [ 685.451861][T26325] loop1: detected capacity change from 0 to 512 [ 685.502109][T26325] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.9514: iget: bad i_size value: 38620345925642 [ 685.521683][T26325] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.9514: couldn't read orphan inode 15 (err -117) [ 685.577194][T26325] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 685.629960][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 685.727425][ T4436] udevd[4436]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 685.752016][ T8004] udevd[8004]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 685.822748][T26340] netlink: 'syz.7.9520': attribute type 10 has an invalid length. [ 685.900119][T26340] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9520'. [ 685.923280][T26340] batman_adv: batadv0: Adding interface: virt_wifi0 [ 685.945812][T26340] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.979822][T26340] batman_adv: batadv0: Interface activated: virt_wifi0 [ 686.184407][T26356] loop7: detected capacity change from 0 to 256 [ 686.194869][ T7] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 686.262337][T26356] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 686.398297][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.422088][ T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 686.450071][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.487799][ T7] usb 5-1: config 0 descriptor?? [ 686.558732][T26367] sch_tbf: peakrate 2 is lower than or equals to rate 3604916063403629709 ! [ 686.828006][T26371] loop1: detected capacity change from 0 to 4096 [ 686.871925][T26371] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 686.912984][ T7] ath6kl: Failed to read usb control message: -71 [ 686.924289][ T7] ath6kl: Unable to read the bmi data from the device: -71 [ 686.966661][ T7] ath6kl: Unable to recv target info: -71 [ 686.985834][ T7] ath6kl: Failed to init ath6kl core: -71 [ 687.065458][ T7] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 687.087435][ T7] usb 5-1: USB disconnect, device number 31 [ 687.102731][T26371] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 687.335285][T26390] netlink: 'syz.8.9545': attribute type 11 has an invalid length. [ 687.354479][T26394] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9544'. [ 687.370245][T26390] netlink: 'syz.8.9545': attribute type 9 has an invalid length. [ 687.378145][T26390] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.9545'. [ 687.628039][T26406] loop4: detected capacity change from 0 to 16 [ 687.679807][T26406] erofs: (device loop4): mounted with root inode @ nid 36. [ 687.703804][ T4282] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 8524 in[4096, 0] out[9000] [ 687.726614][T26406] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 8524 in[4096, 0] out[9000] [ 687.741556][ T27] audit: type=1800 audit(1791367664.611:492): pid=26406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9552" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 688.198158][T26430] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 688.685002][ T8006] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 688.816775][T26466] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 688.889334][ T8006] usb 9-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 688.923851][ T8006] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.940911][ T8006] usb 9-1: Product: syz [ 688.948209][ T8006] usb 9-1: Manufacturer: syz [ 688.966635][ T8006] usb 9-1: SerialNumber: syz [ 689.198685][ T8006] kalmia 9-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 689.229704][ T8006] kalmia 9-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 689.250600][ T8006] kalmia: probe of 9-1:1.0 failed with error -71 [ 689.275933][ T8006] usb 9-1: USB disconnect, device number 19 [ 689.458191][T26495] device wlan0 entered promiscuous mode [ 689.719308][T26506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9602'. [ 689.801808][T26512] loop7: detected capacity change from 0 to 16 [ 689.841027][T26512] erofs: (device loop7): mounted with root inode @ nid 36. [ 689.891135][ T4282] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 8524 in[4096, 0] out[9000] [ 689.903498][T26512] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 8524 in[4096, 0] out[9000] [ 689.920179][ T27] audit: type=1800 audit(1791367666.791:493): pid=26512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.9604" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 690.516414][T26544] loop8: detected capacity change from 0 to 256 [ 690.786961][T26552] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 690.793541][T26552] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 690.841421][T26552] vhci_hcd vhci_hcd.0: Device attached [ 690.894342][T26557] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 690.900948][T26557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 690.940526][T26561] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9627'. [ 690.952938][T26561] 0ªX¹¦À: renamed from caif0 [ 690.954121][T26557] vhci_hcd vhci_hcd.0: Device attached [ 690.976844][T26561] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 691.001797][T26558] vhci_hcd: connection closed [ 691.002071][ T9122] vhci_hcd: stop threads [ 691.011969][T26553] vhci_hcd: connection closed [ 691.018866][ T9122] vhci_hcd: release socket [ 691.028525][ T9122] vhci_hcd: disconnect device [ 691.041531][ T9122] vhci_hcd: stop threads [ 691.064148][ T9122] vhci_hcd: release socket [ 691.068827][ T9122] vhci_hcd: disconnect device [ 691.110294][ T7] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 691.118290][ T7] usb 49-1: enqueue for inactive port 0 [ 691.229928][ T7] vhci_hcd: vhci_device speed not set [ 691.331077][ T27] audit: type=1326 audit(1791367668.201:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26572 comm="syz.1.9633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357ed9e199 code=0x7ffc0000 [ 691.389891][ T27] audit: type=1326 audit(1791367668.231:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26572 comm="syz.1.9633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f357ed9e199 code=0x7ffc0000 [ 691.437322][T26579] loop3: detected capacity change from 0 to 512 [ 691.443855][ T27] audit: type=1326 audit(1791367668.231:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26572 comm="syz.1.9633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357ed9e199 code=0x7ffc0000 [ 691.497946][T26579] EXT4-fs: Ignoring removed i_version option [ 691.513956][T26579] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 691.550061][T26579] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 691.561994][ T27] audit: type=1326 audit(1791367668.231:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26572 comm="syz.1.9633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357ed9e199 code=0x7ffc0000 [ 691.632580][T26579] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 691.660020][T26579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 691.677361][ T27] audit: type=1326 audit(1791367668.541:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26583 comm="syz.4.9638" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 691.779831][T26590] kAFS: unable to lookup cell '' [ 691.790160][ T27] audit: type=1326 audit(1791367668.601:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26583 comm="syz.4.9638" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 691.814244][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.886496][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 691.929746][ T27] audit: type=1326 audit(1791367668.601:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26583 comm="syz.4.9638" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 692.030382][ T27] audit: type=1326 audit(1791367668.601:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26583 comm="syz.4.9638" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 692.068100][T26600] overlayfs: empty lowerdir [ 692.256244][T26610] xt_policy: too many policy elements [ 692.940424][T26642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9666'. [ 693.192705][T26625] loop7: detected capacity change from 0 to 32768 [ 693.206052][T26653] loop8: detected capacity change from 0 to 4096 [ 693.238792][T26625] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.9658 (26625) [ 693.289377][T26657] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 693.309965][T26625] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 693.338706][T26625] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 693.369873][T26625] BTRFS info (device loop7): using free space tree [ 693.500897][T26673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9675'. [ 693.698699][T26625] BTRFS info (device loop7): enabling ssd optimizations [ 693.870054][T26696] Error parsing options; rc = [-22] [ 693.917412][T16652] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 694.112455][T26703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9687'. [ 694.593545][T26724] loop8: detected capacity change from 0 to 256 [ 695.083470][T26746] tc_dump_action: action bad kind [ 695.343932][T26759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9714'. [ 695.380309][T26759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9714'. [ 695.389905][ T7] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 695.490535][T26767] JFS: discard option not supported on device [ 695.516227][T26767] Mount JFS Failure: -22 [ 695.542245][T26767] jfs_mount failed w/return code = -22 [ 695.591144][ T7] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.619670][ T7] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 695.660381][ T7] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 695.687765][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.696687][ T7] usb 8-1: Product: syz [ 695.713154][ T7] usb 8-1: Manufacturer: syz [ 695.718009][ T7] usb 8-1: SerialNumber: syz [ 695.861023][T26785] x_tables: duplicate entry at hook 3 [ 695.920550][T26787] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 695.956661][ T7] usb 8-1: invalid UAC_HEADER (v1) [ 695.998505][T26791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9739'. [ 696.016980][ T7] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 696.045466][ T8004] udevd[8004]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 696.062543][ T7] usb 8-1: USB disconnect, device number 12 [ 696.134929][T26795] netlink: 'syz.4.9731': attribute type 21 has an invalid length. [ 696.179239][T26800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.280690][T26803] loop8: detected capacity change from 0 to 64 [ 696.318667][T26804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9735'. [ 696.494935][T26810] device bridge_slave_0 entered promiscuous mode [ 696.513836][T26810] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 696.774676][ T7] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 696.969762][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 696.977514][ T7] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 697.013705][ T7] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 697.028221][T26833] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 697.037891][ T7] usb 4-1: config 0 has no interface number 0 [ 697.055870][ T7] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 697.077307][T26833] overlayfs: overlapping lowerdir path [ 697.090216][ T7] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 697.125774][ T7] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.179518][ T7] usb 4-1: config 0 interface 52 has no altsetting 0 [ 697.187767][ T7] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 697.216728][ T7] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 697.228241][T26840] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9754'. [ 697.234879][ T7] usb 4-1: Manufacturer: syz [ 697.259653][ T7] usb 4-1: config 0 descriptor?? [ 697.271619][ T7] hub 4-1:0.52: bad descriptor, ignoring hub [ 697.282989][ T7] hub: probe of 4-1:0.52 failed with error -5 [ 697.476971][ T7] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input38 [ 697.620216][T26824] loop4: detected capacity change from 0 to 32768 [ 697.696307][T26824] add_index: next_index = 0. Resetting! [ 697.707552][T26824] find_entry called with index >= next_index [ 697.745181][T26824] find_entry called with index >= next_index [ 697.766768][T26824] find_entry called with index >= next_index [ 697.785505][T26824] find_entry called with index >= next_index [ 697.800255][ T7] usb 4-1: USB disconnect, device number 46 [ 698.382756][T26872] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9770'. [ 698.416035][T26872] 0ªX¹¦À: renamed from caif0 [ 698.432647][T26872] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 698.546921][T26852] loop8: detected capacity change from 0 to 32768 [ 698.745588][T26852] XFS (loop8): Mounting V5 Filesystem [ 698.964524][T26852] XFS (loop8): Ending clean mount [ 699.015351][T26852] XFS (loop8): Quotacheck needed: Please wait. [ 699.206375][T26852] XFS (loop8): Quotacheck: Done. [ 699.226704][T26909] netlink: 'syz.3.9785': attribute type 1 has an invalid length. [ 699.287203][T26909] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.9785'. [ 699.298299][T26915] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9784'. [ 699.324157][T26915] 0ªX¹¦À: renamed from caif0 [ 699.351064][T26915] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 699.403088][T16811] XFS (loop8): Unmounting Filesystem [ 699.646209][T26927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 699.653551][T26927] IPv6: NLM_F_CREATE should be set when creating new route [ 699.660876][T26927] IPv6: NLM_F_CREATE should be set when creating new route [ 700.485695][T26967] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9812'. [ 700.559001][T26967] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9812'. [ 700.575275][T26970] loop1: detected capacity change from 0 to 164 [ 701.311672][T27000] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 701.389253][ T4318] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 701.572312][T27003] binder: 27002:27003 ioctl c0306201 200000000680 returned -14 [ 701.592077][ T4318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 701.624824][ T4318] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1056, setting to 1024 [ 701.644017][T26997] loop7: detected capacity change from 0 to 32768 [ 701.667453][ T4318] usb 2-1: string descriptor 0 read error: -22 [ 701.677650][ T4318] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 701.688477][T26997] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.9825 (26997) [ 701.712714][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.783814][T26997] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 701.802226][T26997] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 701.829409][T26997] BTRFS info (device loop7): allowing degraded mounts [ 701.836395][T26997] BTRFS info (device loop7): metadata ratio 4 [ 701.878777][T26997] BTRFS info (device loop7): turning on sync discard [ 701.895550][ T7] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 701.926494][T26997] BTRFS info (device loop7): turning off discard [ 701.962012][ T4318] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 701.971418][T26997] BTRFS info (device loop7): turning on sync discard [ 701.978177][T26997] BTRFS info (device loop7): disabling tree log [ 702.029319][T26997] BTRFS info (device loop7): using free space tree [ 702.103686][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 702.113850][T27020] loop4: detected capacity change from 0 to 1024 [ 702.123285][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.138941][ T7] usb 4-1: Product: syz [ 702.145717][ T7] usb 4-1: Manufacturer: syz [ 702.152128][ T7] usb 4-1: SerialNumber: syz [ 702.158802][ T7] usb 4-1: config 0 descriptor?? [ 702.172986][ T4318] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 702.237858][ T4318] usb 2-1: USB disconnect, device number 42 [ 702.255004][T27020] hfsplus: invalid length 1280 has been corrected to 255 [ 702.303338][T26997] BTRFS info (device loop7): enabling ssd optimizations [ 702.382041][ T7] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 702.545468][T16652] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 702.586185][ T7] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 702.607792][ T7] usb 4-1: USB disconnect, device number 47 [ 703.076462][T27039] infiniband syz0: set down [ 703.089715][T27039] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 703.438682][T27055] loop7: detected capacity change from 0 to 1024 [ 703.448808][T27053] loop8: detected capacity change from 0 to 2048 [ 703.472438][T27050] loop4: detected capacity change from 0 to 2048 [ 703.550021][T27053] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 703.670272][T27050] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 703.710825][T27050] fscrypt (loop4, inode 12): Error -61 getting encryption context [ 703.738647][T27069] loop3: detected capacity change from 0 to 64 [ 703.840477][T16811] EXT4-fs (loop8): unmounting filesystem. [ 703.871206][T27071] loop7: detected capacity change from 0 to 256 [ 703.895199][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 704.011675][T27074] loop1: detected capacity change from 0 to 16 [ 704.095968][T27074] erofs: (device loop1): erofs_read_superblock: dirblkbits 1 isn't supported [ 704.119768][T27076] device bridge_slave_0 entered promiscuous mode [ 704.151943][T27076] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 704.248770][T27071] FAT-fs (loop7): codepage cp85 not found [ 704.430645][T27090] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9859'. [ 704.463104][T27090] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9859'. [ 704.595634][ T3742] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 704.806357][ T3742] usb 8-1: unable to get BOS descriptor or descriptor too short [ 704.826145][ T3742] usb 8-1: config 9 has an invalid interface number: 116 but max is 0 [ 704.847624][ T3742] usb 8-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 704.877323][ T3742] usb 8-1: config 9 has no interface number 0 [ 704.902400][ T3742] usb 8-1: config 9 interface 116 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 704.943038][ T3742] usb 8-1: config 9 interface 116 altsetting 1 has an invalid endpoint with address 0x11, skipping [ 704.964697][ T3742] usb 8-1: config 9 interface 116 altsetting 1 has an invalid endpoint with address 0xD4, skipping [ 704.986854][ T3742] usb 8-1: config 9 interface 116 altsetting 1 endpoint 0xB has an invalid bInterval 248, changing to 11 [ 705.026230][ T3742] usb 8-1: config 9 interface 116 altsetting 1 endpoint 0xA has an invalid bInterval 116, changing to 10 [ 705.058020][ T3742] usb 8-1: config 9 interface 116 altsetting 1 endpoint 0xA has invalid maxpacket 25951, setting to 1024 [ 705.096594][ T3742] usb 8-1: config 9 interface 116 has no altsetting 0 [ 705.111593][ T3742] usb 8-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=e7.14 [ 705.174572][ T3742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.189140][ T3742] usb 8-1: Product: syz [ 705.193369][ T3742] usb 8-1: Manufacturer: syz [ 705.198012][ T3742] usb 8-1: SerialNumber: syz [ 705.225357][T27071] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 705.243239][T27071] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 705.442840][T27106] loop4: detected capacity change from 0 to 32768 [ 705.468804][ T3742] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:9.116/input/input39 [ 705.498254][ T3624] bcm5974 8-1:9.116: could not read from device [ 705.508569][ T3624] bcm5974 8-1:9.116: could not read from device [ 705.517983][T27106] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9867 (27106) [ 705.537052][ T3742] usb 8-1: USB disconnect, device number 13 [ 705.554094][ T3624] bcm5974 8-1:9.116: could not read from device [ 705.593231][T27106] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 705.614804][T27106] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 705.625260][T27106] BTRFS info (device loop4): using free space tree [ 705.627716][T27125] netlink: 'syz.1.9876': attribute type 4 has an invalid length. [ 705.664723][T27101] loop8: detected capacity change from 0 to 40427 [ 705.671834][T27125] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.9876'. [ 705.689638][T27101] F2FS-fs (loop8): invalid crc value [ 705.698651][T27101] F2FS-fs (loop8): Found nat_bits in checkpoint [ 705.729132][ T4316] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 705.783986][T27101] F2FS-fs (loop8): Start checkpoint disabled! [ 705.831679][T27101] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 705.868061][T27106] BTRFS info (device loop4): enabling ssd optimizations [ 705.894127][T27106] BTRFS warning (device loop4): can't clear the default_subvol feature bit while mounted [ 705.911072][ T4316] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.931684][ T4316] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 705.949527][ T4316] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 705.985718][ T4316] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 706.025592][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.090578][ T4285] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 706.288453][ T4316] cxacru_cm: 1 callbacks suppressed [ 706.288547][ T4316] cxacru 4-1:1.0: receive of cm 0x90 failed (-71) [ 706.301195][ T4316] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 706.340802][ T4316] cxacru: probe of 4-1:1.0 failed with error -22 [ 706.379463][ T4316] usb 4-1: USB disconnect, device number 48 [ 707.626045][T27205] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 708.182904][T27231] loop7: detected capacity change from 0 to 64 [ 708.817054][T27263] program syz.4.9930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 708.961357][T27270] netlink: 'syz.4.9933': attribute type 10 has an invalid length. [ 708.994443][T27270] device veth1_macvtap left promiscuous mode [ 709.021122][T27271] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9934'. [ 709.119987][T27275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9936'. [ 709.175535][T27275] netlink: 'syz.3.9936': attribute type 1 has an invalid length. [ 709.377945][T27288] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9943'. [ 709.438874][T27288] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9943'. [ 709.447926][T27288] netlink: 'syz.8.9943': attribute type 6 has an invalid length. [ 709.549303][T27294] overlayfs: missing 'lowerdir' [ 709.936060][T27281] loop1: detected capacity change from 0 to 32768 [ 709.965309][T27281] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.9939 (27281) [ 709.971429][T27281] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 709.971506][T27281] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 709.971558][T27281] BTRFS info (device loop1): using free space tree [ 710.158851][ T6525] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 710.238969][T27281] BTRFS info (device loop1): enabling ssd optimizations [ 710.279342][T27336] netlink: 168 bytes leftover after parsing attributes in process `syz.8.9955'. [ 710.369929][ T4273] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 710.380982][ T6525] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.401363][ T6525] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.434303][ T6525] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 710.493345][ T6525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.521962][ T6525] usb 5-1: Product: syz [ 710.526297][ T6525] usb 5-1: Manufacturer: syz [ 710.548729][ T6525] usb 5-1: SerialNumber: syz [ 710.695789][T27348] loop7: detected capacity change from 0 to 256 [ 710.793830][ T6525] usb 5-1: invalid UAC_HEADER (v1) [ 710.857652][ T6525] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 710.887666][ T6525] usb 5-1: USB disconnect, device number 32 [ 711.159614][ T8001] udevd[8001]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.345840][T27344] delete_channel: no stack [ 711.678030][T27371] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9972'. [ 711.678061][T27371] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9972'. [ 711.678080][T27371] netlink: 1 bytes leftover after parsing attributes in process `syz.8.9972'. [ 711.853193][T27357] loop1: detected capacity change from 0 to 32768 [ 711.932974][T27357] find_entry called with index = 0 [ 711.969023][T27357] find_entry called with index = 0 [ 711.974221][T27357] find_entry called with index = 0 [ 711.998800][T27357] find_entry called with index = 0 [ 712.004007][T27357] find_entry called with index = 0 [ 712.044764][T27357] find_entry called with index = 0 [ 712.060190][T27357] read_mapping_page failed! [ 712.064822][T27357] ERROR: (device loop1): txCommit: [ 712.064822][T27357] [ 712.597905][T27363] loop3: detected capacity change from 0 to 40427 [ 713.236497][T27418] loop4: detected capacity change from 0 to 1024 [ 713.831902][T27432] loop3: detected capacity change from 0 to 1024 [ 714.107732][T27448] xt_TCPMSS: Only works on TCP SYN packets [ 714.338698][ T6525] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 714.538581][ T6525] usb 2-1: Using ep0 maxpacket: 8 [ 714.551979][ T6525] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 714.581674][ T6525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.620463][ T6525] usb 2-1: config 0 descriptor?? [ 714.646792][ T6525] usb 2-1: probing VID:PID(0424:012C) [ 714.666265][ T6525] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 714.677529][ T6525] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 714.696785][ T6525] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 714.708662][T27466] loop7: detected capacity change from 0 to 4096 [ 714.715837][ T6525] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 714.735524][T27466] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 714.755237][ T6525] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 714.970180][T27482] loop8: detected capacity change from 0 to 64 [ 715.055709][ T6525] vub300: probe of 2-1:0.0 failed with error -71 [ 715.085139][ T6525] usb 2-1: USB disconnect, device number 43 [ 715.168112][T27485] loop7: detected capacity change from 0 to 1024 [ 715.232824][T27485] hfsplus: invalid file type 0174377 for inode 21 [ 715.242200][T27488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10031'. [ 715.267072][T27488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10031'. [ 715.489430][T27497] loop7: detected capacity change from 0 to 512 [ 715.508911][T27498] IPVS: set_ctl: invalid protocol: 41 172.30.0.9:20002 [ 715.520837][T27497] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 715.543752][T27497] EXT4-fs error (device loop7): ext4_orphan_get:1435: comm syz.7.10034: bad orphan inode 131083 [ 715.568553][T27497] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 715.807764][T16652] EXT4-fs (loop7): unmounting filesystem. [ 715.822602][T27509] loop8: detected capacity change from 0 to 64 [ 715.986447][T27515] netlink: 128 bytes leftover after parsing attributes in process `syz.7.10041'. [ 716.021486][T27514] netlink: 'syz.1.10043': attribute type 21 has an invalid length. [ 716.045245][ T9] bio_check_eod: 7 callbacks suppressed [ 716.045263][ T9] kworker/u4:0: attempt to access beyond end of device [ 716.045263][ T9] loop8: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 716.078735][T27514] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10043'. [ 716.119884][T27514] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10043'. [ 716.158724][ T9] Buffer I/O error on dev loop8, logical block 134217734, lost async page write [ 716.419366][T27494] loop4: detected capacity change from 0 to 32768 [ 716.444511][T27494] [ 716.444511][T27494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 716.444511][T27494] [ 716.531807][T27494] [ 716.531807][T27494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 716.531807][T27494] [ 716.566015][T27494] [ 716.566015][T27494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 716.566015][T27494] [ 716.592091][T27494] [ 716.592091][T27494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 716.592091][T27494] [ 716.640969][T27494] [ 716.640969][T27494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 716.640969][T27494] [ 716.694202][T27494] [ 716.694202][T27494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 716.694202][T27494] [ 716.750177][ T108] [ 716.750177][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 716.750177][ T108] [ 717.005251][ T9100] [ 717.005251][ T9100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 717.005251][ T9100] [ 717.040535][ T9100] [ 717.040535][ T9100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 717.040535][ T9100] [ 717.077312][ T4285] [ 717.077312][ T4285] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 717.077312][ T4285] [ 717.099200][ T108] [ 717.099200][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 717.099200][ T108] [ 717.123077][ T4285] [ 717.123077][ T4285] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 717.123077][ T4285] [ 717.339842][T27539] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 717.522863][T27549] loop7: detected capacity change from 0 to 512 [ 717.536486][T27546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10054'. [ 717.590719][T27549] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.10058: Unrecognised inode hash code 255 [ 717.648941][T27549] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.10058: Corrupt directory, running e2fsck is recommended [ 717.663242][T27549] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 717.677651][T27549] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.10058: corrupted in-inode xattr [ 717.691073][T27549] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.10058: couldn't read orphan inode 15 (err -117) [ 717.703665][T27549] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 717.720029][T27549] EXT4-fs error (device loop7): __ext4_remount:6650: comm syz.7.10058: Abort forced by user [ 717.730821][T27549] EXT4-fs (loop7): Remounting filesystem read-only [ 717.737405][T27549] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 717.775104][T16652] EXT4-fs (loop7): unmounting filesystem. [ 717.822816][T27554] AppArmor: change_hat: Invalid input '' [ 718.160599][T27572] loop3: detected capacity change from 0 to 256 [ 718.287715][ T8004] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 718.426848][T27583] dlm: Unknown command passed to DLM device : 8 [ 718.426848][T27583] [ 718.974383][T27609] overlayfs: missing 'lowerdir' [ 719.242426][T27599] loop8: detected capacity change from 0 to 32768 [ 719.256754][T27599] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.10084 (27599) [ 719.281082][T27599] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 719.324206][T27599] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 719.341368][T27599] BTRFS info (device loop8): allowing degraded mounts [ 719.370787][T27599] BTRFS info (device loop8): metadata ratio 4 [ 719.402435][T27599] BTRFS info (device loop8): turning on sync discard [ 719.431827][T27599] BTRFS info (device loop8): turning off discard [ 719.455889][T27599] BTRFS info (device loop8): turning on sync discard [ 719.475914][T27599] BTRFS info (device loop8): disabling tree log [ 719.493889][T27599] BTRFS info (device loop8): using free space tree [ 719.730411][T27599] BTRFS info (device loop8): enabling ssd optimizations [ 719.890000][T16811] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 720.001211][T27659] loop4: detected capacity change from 0 to 16 [ 720.034225][T27659] erofs: (device loop4): mounted with root inode @ nid 36. [ 720.217270][T27665] loop7: detected capacity change from 0 to 512 [ 720.615943][ T27] audit: type=1326 audit(1791367697.483:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27672 comm="syz.4.10109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 720.697623][ T27] audit: type=1326 audit(1791367697.483:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27672 comm="syz.4.10109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 720.744911][ T27] audit: type=1326 audit(1791367697.513:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27672 comm="syz.4.10109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 720.810614][ T27] audit: type=1326 audit(1791367697.513:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27672 comm="syz.4.10109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 720.850480][ T27] audit: type=1326 audit(1791367697.513:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27672 comm="syz.4.10109" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 720.958362][ T4316] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 721.065198][T27661] loop3: detected capacity change from 0 to 32768 [ 721.123543][ T8004] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 721.148166][ T4316] usb 8-1: Using ep0 maxpacket: 32 [ 721.157493][ T4316] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 721.168380][ T4287] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 721.184322][ T4316] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.209241][ T4316] usb 8-1: Product: syz [ 721.223545][ T4316] usb 8-1: Manufacturer: syz [ 721.238711][ T4316] usb 8-1: SerialNumber: syz [ 721.261413][ T4316] usb 8-1: config 0 descriptor?? [ 721.372361][ T4287] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 721.392514][ T4287] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 721.415014][ T4287] usb 5-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 721.424753][ T4287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.451570][ T4287] usb-storage 5-1:1.0: USB Mass Storage device detected [ 721.586328][T27699] loop8: detected capacity change from 0 to 1024 [ 721.680594][ T4316] airspy 8-1:0.0: usb_control_msg() failed -71 request 0a [ 721.690426][ T4316] airspy 8-1:0.0: Could not detect board [ 721.702969][ T4316] airspy: probe of 8-1:0.0 failed with error -71 [ 721.726555][ T4316] usb 8-1: USB disconnect, device number 14 [ 721.910014][ T4287] usb-storage: probe of 5-1:1.0 failed with error -5 [ 721.943936][ T4287] usb 5-1: USB disconnect, device number 33 [ 722.069653][T27712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10129'. [ 722.080523][T27712] netlink: 'syz.1.10129': attribute type 8 has an invalid length. [ 722.189984][T27715] loop1: detected capacity change from 0 to 64 [ 722.366496][ T9122] kworker/u4:19: attempt to access beyond end of device [ 722.366496][ T9122] loop1: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 722.418039][ T9122] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 722.906171][T27735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10140'. [ 722.918411][T27738] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10141'. [ 723.107333][T27745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10146'. [ 723.160883][ T4282] Bluetooth: hci2: command 0x0405 tx timeout [ 723.288202][T27757] loop8: detected capacity change from 0 to 128 [ 723.360207][T27757] FAT-fs (loop8): Directory bread(block 32) failed [ 723.388502][T27757] FAT-fs (loop8): Directory bread(block 33) failed [ 723.422693][T27757] FAT-fs (loop8): Directory bread(block 34) failed [ 723.448054][T27757] FAT-fs (loop8): Directory bread(block 35) failed [ 723.468120][T27757] FAT-fs (loop8): Directory bread(block 36) failed [ 723.474808][T27757] FAT-fs (loop8): Directory bread(block 37) failed [ 723.518127][T27757] FAT-fs (loop8): Directory bread(block 38) failed [ 723.524757][T27757] FAT-fs (loop8): Directory bread(block 39) failed [ 723.568061][T27757] FAT-fs (loop8): Directory bread(block 40) failed [ 723.574759][T27757] FAT-fs (loop8): Directory bread(block 41) failed [ 723.758050][T27757] FAT-fs (loop8): Filesystem has been set read-only [ 724.248407][T27785] loop7: detected capacity change from 0 to 4096 [ 724.330197][T27791] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 724.366501][T27791] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 724.404652][T27791] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 724.429197][T27791] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 724.478539][T27791] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 724.518770][T27797] trusted_key: encrypted_key: insufficient parameters specified [ 724.531540][T27791] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 724.582680][T27791] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 724.655636][T27791] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 724.674061][T27791] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 724.812214][T27803] loop4: detected capacity change from 0 to 2048 [ 724.870870][T27803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 725.276920][T27824] netlink: 'syz.3.10184': attribute type 1 has an invalid length. [ 725.313563][T27824] netlink: 'syz.3.10184': attribute type 2 has an invalid length. [ 725.367943][ T6985] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 725.570320][ T6985] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.601650][ T6985] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.647615][ T6985] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 725.667943][ T6985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.694180][ T6985] usb 9-1: config 0 descriptor?? [ 725.718260][ T6985] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 725.802833][T27849] openvswitch: netlink: IP tunnel dst address not specified [ 725.871214][ T7] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 725.926793][ T6985] usb 9-1: USB disconnect, device number 20 [ 726.072828][ T7] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 726.097871][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.127822][ T7] usb 8-1: Product: syz [ 726.132084][ T7] usb 8-1: Manufacturer: syz [ 726.136751][ T7] usb 8-1: SerialNumber: syz [ 726.807888][ T27] audit: type=1326 audit(1791367703.673:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.4.10212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 726.863287][ T27] audit: type=1326 audit(1791367703.693:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.4.10212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 726.931400][ T27] audit: type=1326 audit(1791367703.703:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.4.10212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742779e199 code=0x7ffc0000 [ 727.020301][ T27] audit: type=1326 audit(1791367703.703:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.4.10212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742779de2b code=0x7ffc0000 [ 727.116382][ T27] audit: type=1326 audit(1791367703.703:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.4.10212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742779de2b code=0x7ffc0000 [ 727.201403][ T27] audit: type=1326 audit(1791367703.703:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.4.10212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742779de2b code=0x7ffc0000 [ 727.238150][ T7] ath6kl: Failed to submit usb control message: -110 [ 727.245066][ T7] ath6kl: unable to send the bmi data to the device: -110 [ 727.269275][ T27] audit: type=1326 audit(1791367703.703:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.4.10212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742779de2b code=0x7ffc0000 [ 727.307475][ T7] ath6kl: Unable to send get target info: -110 [ 727.350994][ T7] ath6kl: Failed to init ath6kl core: -110 [ 727.365142][ T27] audit: type=1326 audit(1791367703.703:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.4.10212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742779de2b code=0x7ffc0000 [ 727.449603][ T7] ath6kl_usb: probe of 8-1:1.0 failed with error -110 [ 727.463513][ T7] usb 8-1: USB disconnect, device number 15 [ 727.538662][ T27] audit: type=1326 audit(1791367703.703:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.4.10212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742779de2b code=0x7ffc0000 [ 727.562821][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.569457][ T27] audit: type=1326 audit(1791367703.703:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27880 comm="syz.4.10212" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742779de2b code=0x7ffc0000 [ 727.593550][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.614056][T27902] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10222'. [ 727.624437][T27902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.768102][ T3742] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 727.969536][ T3742] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.987880][ T3742] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 727.996903][ T3742] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 728.037733][ T3742] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.058966][ T3742] usb 9-1: config 0 descriptor?? [ 728.361579][ T4282] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 728.371700][ T4282] Bluetooth: hci3: Injecting HCI hardware error event [ 728.384478][ T4289] Bluetooth: hci3: hardware error 0x00 [ 728.471694][ T3742] Bluetooth: Can't get version to change to load ram patch err [ 728.491889][ T3742] Bluetooth: Loading patch file failed [ 728.528153][ T3742] ath3k: probe of 9-1:0.0 failed with error -71 [ 728.573201][ T3742] usb 9-1: USB disconnect, device number 21 [ 728.713021][T27932] netlink: 340 bytes leftover after parsing attributes in process `syz.4.10237'. [ 728.770064][T27932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10237'. [ 729.322036][T27960] loop3: detected capacity change from 0 to 64 [ 729.360514][T27962] binder: Bad value for 'max' [ 729.389030][ T8004] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 729.871966][T27979] netlink: 'syz.3.10260': attribute type 1 has an invalid length. [ 729.876225][T27948] loop4: detected capacity change from 0 to 32768 [ 729.917834][T27979] netlink: 'syz.3.10260': attribute type 2 has an invalid length. [ 729.978766][T27948] syz.4.10243: attempt to access beyond end of device [ 729.978766][T27948] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 730.037782][T27948] lbmIODone: I/O error in JFS log [ 730.069093][T27948] *** Log Format Error ! *** [ 730.074094][T27948] lmLogInit: exit(-22) [ 730.095616][T27948] lmLogOpen: exit(-22) [ 730.653867][T28012] tmpfs: Bad value for 'mpol' [ 730.757773][ T4289] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 730.782261][T28018] loop4: detected capacity change from 0 to 64 [ 730.889338][T28022] loop8: detected capacity change from 0 to 512 [ 730.944714][T28022] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 730.969893][T28026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10284'. [ 731.038555][T28022] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.10282: bad orphan inode 131083 [ 731.067784][T28022] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 731.267742][T16811] EXT4-fs (loop8): unmounting filesystem. [ 731.381034][T28040] xt_TCPMSS: Only works on TCP SYN packets [ 731.611387][T28052] program syz.8.10296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 731.693643][T28020] loop7: detected capacity change from 0 to 32768 [ 731.742087][T28020] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.10281 (28020) [ 731.757413][T28020] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 731.778174][T28020] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 731.825549][T28020] BTRFS warning (device loop7): excessive commit interval 3581 [ 731.853241][T28020] BTRFS info (device loop7): force zlib compression, level 3 [ 731.881745][T28020] BTRFS info (device loop7): metadata ratio 107050 [ 731.929585][T28020] BTRFS info (device loop7): turning on flush-on-commit [ 731.937851][T28020] BTRFS info (device loop7): max_inline at 4096 [ 731.944177][T28020] BTRFS info (device loop7): using free space tree [ 732.288190][T28020] BTRFS info (device loop7): enabling ssd optimizations [ 732.497783][T16652] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 732.718253][ T8004] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop7 scanned by udevd (8004) [ 732.927715][ T7] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 733.117610][ T7] usb 9-1: Using ep0 maxpacket: 16 [ 733.125525][ T7] usb 9-1: config index 0 descriptor too short (expected 51443, got 18) [ 733.161269][ T7] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 733.208767][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.237198][ T7] usb 9-1: Product: syz [ 733.254452][ T7] usb 9-1: Manufacturer: syz [ 733.269416][ T7] usb 9-1: SerialNumber: syz [ 733.280096][ T7] r8152-cfgselector 9-1: config 0 descriptor?? [ 733.434060][T28131] loop1: detected capacity change from 0 to 16 [ 733.489210][T28131] erofs: (device loop1): mounted with root inode @ nid 36. [ 733.721717][ T7] r8152-cfgselector 9-1: Unknown version 0x0000 [ 733.731853][ T7] r8152-cfgselector 9-1: USB disconnect, device number 22 [ 733.767909][ T8001] udevd[8001]: setting mode of /dev/bus/usb/009/022 to 020664 failed: No such file or directory [ 733.805036][ T8001] udevd[8001]: setting owner of /dev/bus/usb/009/022 to uid=0, gid=0 failed: No such file or directory [ 734.024915][T28146] loop7: detected capacity change from 0 to 4096 [ 734.058999][T28146] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 734.218263][T28153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10336'. [ 734.430645][T28159] loop3: detected capacity change from 0 to 16 [ 734.516825][T28159] erofs: (device loop3): mounted with root inode @ nid 36. [ 734.621541][T28143] loop1: detected capacity change from 0 to 32768 [ 734.661831][T28143] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.10329 (28143) [ 734.765670][T28143] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 734.791128][T28143] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 734.847669][T28143] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 734.857194][T28143] BTRFS info (device loop1): use zstd compression, level 3 [ 734.917446][T28143] BTRFS info (device loop1): using free space tree [ 735.151207][T28143] BTRFS info (device loop1): enabling ssd optimizations [ 735.320748][ T4273] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 736.503745][T28244] tmpfs: Bad value for 'mpol' [ 736.913202][T28261] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 736.986899][T28230] loop1: detected capacity change from 0 to 32768 [ 737.013504][T28261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 737.117459][T28267] netlink: 'syz.8.10382': attribute type 11 has an invalid length. [ 737.236527][T28273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10383'. [ 737.297566][T28273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10383'. [ 737.306636][T28273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10383'. [ 737.411783][T28273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10383'. [ 737.440805][T28273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10383'. [ 737.465691][T28273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10383'. [ 737.489178][T28273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10383'. [ 737.519243][T28273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10383'. [ 737.551995][T28273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10383'. [ 737.844026][T28287] loop7: detected capacity change from 0 to 4096 [ 737.901295][T28287] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 737.986228][T28287] ntfs3: loop7: failed to convert "c46c" to euc-jp [ 738.321455][T28311] loop3: detected capacity change from 0 to 2048 [ 738.394952][ T8004] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 738.487214][ T3742] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 738.683027][ T3742] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 738.717843][ T3742] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.725960][ T3742] usb 9-1: Product: syz [ 738.757185][ T3742] usb 9-1: Manufacturer: syz [ 738.772113][ T3742] usb 9-1: SerialNumber: syz [ 738.792365][ T6985] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 738.802754][ T3742] r8152-cfgselector 9-1: config 0 descriptor?? [ 738.831476][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 738.831502][ T27] audit: type=1326 audit(1791367715.704:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28330 comm="syz.3.10414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 738.904095][ T27] audit: type=1326 audit(1791367715.714:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28330 comm="syz.3.10414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 738.939214][ T27] audit: type=1326 audit(1791367715.714:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28330 comm="syz.3.10414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 738.999190][ T6985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 739.017224][ T27] audit: type=1326 audit(1791367715.734:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28330 comm="syz.3.10414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 739.036731][ T3742] usbip-host 9-1: 9-1 is not in match_busid table... skip! [ 739.041444][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.076869][ T6985] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 739.090634][ T6985] usb 2-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 739.097688][ T27] audit: type=1326 audit(1791367715.734:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28330 comm="syz.3.10414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 739.111250][ T6985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.123913][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.175078][ T27] audit: type=1326 audit(1791367715.734:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28330 comm="syz.3.10414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 739.189391][ T6985] usb 2-1: Product: syz [ 739.230173][ T6985] usb 2-1: Manufacturer: syz [ 739.240156][ T6985] usb 2-1: SerialNumber: syz [ 739.275394][ T4320] usb 9-1: USB disconnect, device number 23 [ 739.283687][ T27] audit: type=1326 audit(1791367715.734:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28330 comm="syz.3.10414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 739.307895][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.355513][ T27] audit: type=1326 audit(1791367715.734:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28330 comm="syz.3.10414" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 739.476350][ T6985] usb 2-1: unit 1 not found! [ 739.526185][ T6985] usb 2-1: USB disconnect, device number 44 [ 739.570984][ T8004] udevd[8004]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 739.974259][T28371] cgroup: Invalid name [ 740.096343][ T27] audit: type=1326 audit(1791367716.964:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28376 comm="syz.1.10437" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357ed9e199 code=0x7ffc0000 [ 740.120617][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.170335][ T27] audit: type=1326 audit(1791367716.964:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28376 comm="syz.1.10437" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357ed9e199 code=0x7ffc0000 [ 740.261032][T28381] loop7: detected capacity change from 0 to 512 [ 740.286203][T28381] EXT4-fs: Ignoring removed orlov option [ 740.307443][T28383] __nla_validate_parse: 39 callbacks suppressed [ 740.307463][T28383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10440'. [ 740.333769][T28381] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 740.438512][T16652] EXT4-fs (loop7): unmounting filesystem. [ 740.716592][T28367] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 740.827129][ T3742] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 741.033288][ T3742] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 741.067280][ T3742] usb 2-1: config 4 has no interface number 0 [ 741.075655][ T3742] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 741.097000][ T3742] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.107541][ T3742] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 741.116771][ T3742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.159249][ T3742] hub 2-1:4.128: USB hub found [ 741.369845][ T3742] hub 2-1:4.128: 27 ports detected [ 741.375201][ T3742] hub 2-1:4.128: Using single TT (err -22) [ 741.392286][ T3742] hub 2-1:4.128: insufficient power available to use all downstream ports [ 741.584573][ T3742] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 741.600802][ T3742] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 741.657759][ T3742] usb 2-1: USB disconnect, device number 45 [ 741.977084][ T8007] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 742.099320][T28439] loop8: detected capacity change from 0 to 32768 [ 742.165658][ T8007] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.181708][T28439] syz.8.10467: attempt to access beyond end of device [ 742.181708][T28439] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 742.206545][ T8007] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 742.239208][T28439] lbmIODone: I/O error in JFS log [ 742.244337][T28439] *** Log Format Error ! *** [ 742.255037][ T8007] usb 5-1: config 1 has no interface number 0 [ 742.265771][ T8007] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.281652][T28439] lmLogInit: exit(-22) [ 742.285818][T28439] lmLogOpen: exit(-22) [ 742.314368][ T8007] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 742.357207][ T8007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.365299][ T8007] usb 5-1: Product: syz [ 742.395776][ T8007] usb 5-1: Manufacturer: syz [ 742.416953][ T8007] usb 5-1: SerialNumber: syz [ 742.448129][ T8007] usb 5-1: selecting invalid altsetting 1 [ 742.650623][T28470] loop1: detected capacity change from 0 to 512 [ 742.720901][T28470] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 742.825078][T28470] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 742.863852][ T8007] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 742.877077][ T8007] cdc_ncm 5-1:1.1: bind() failure [ 742.932012][ T8007] usb 5-1: USB disconnect, device number 34 [ 742.946004][T28462] loop3: detected capacity change from 0 to 32768 [ 742.953413][T28470] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10483: bg 0: block 248: padding at end of block bitmap is not set [ 742.971550][T28470] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.10483: Failed to acquire dquot type 1 [ 743.008006][T28470] EXT4-fs (loop1): 1 truncate cleaned up [ 743.013935][T28470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 743.115530][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 743.361229][ T8004] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 743.414035][ T6985] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 743.540841][T28497] netlink: 'syz.7.10492': attribute type 1 has an invalid length. [ 743.577024][T28497] netlink: 'syz.7.10492': attribute type 2 has an invalid length. [ 743.600963][T28499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10496'. [ 743.621419][ T6985] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 743.666844][ T6985] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.693654][ T6985] usb 9-1: Product: syz [ 743.708330][ T6985] usb 9-1: Manufacturer: syz [ 743.718377][ T6985] usb 9-1: SerialNumber: syz [ 743.734211][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10498'. [ 743.813393][T28506] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10499'. [ 743.882116][T28510] netlink: 'syz.4.10501': attribute type 1 has an invalid length. [ 743.982518][T28512] loop4: detected capacity change from 0 to 1024 [ 744.006652][T28512] EXT4-fs: Ignoring removed nomblk_io_submit option [ 744.044657][T28512] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 744.111331][T28512] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 744.202779][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 744.552326][T28534] netlink: 'syz.1.10510': attribute type 21 has an invalid length. [ 744.600699][T28534] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10510'. [ 744.653341][T28537] trusted_key: encrypted_key: master key parameter is missing [ 744.837306][ T6985] ath6kl: Failed to submit usb control message: -110 [ 744.846496][ T6985] ath6kl: unable to send the bmi data to the device: -110 [ 744.870675][ T6985] ath6kl: Unable to send get target info: -110 [ 744.904966][ T6985] ath6kl: Failed to init ath6kl core: -110 [ 745.001311][ T6985] ath6kl_usb: probe of 9-1:1.0 failed with error -110 [ 745.036613][ T6985] usb 9-1: USB disconnect, device number 24 [ 745.195463][T28551] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10520'. [ 745.308266][T28529] loop7: detected capacity change from 0 to 32768 [ 745.420827][T28529] XFS (loop7): Mounting V5 Filesystem [ 745.579441][T28529] XFS (loop7): Ending clean mount [ 745.753057][T28579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10529'. [ 745.797219][T28579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10529'. [ 745.843279][T16652] XFS (loop7): Unmounting Filesystem [ 745.851848][T28579] device ip6tnl1 entered promiscuous mode [ 745.928703][T28583] netlink: 'syz.8.10532': attribute type 2 has an invalid length. [ 746.322569][T28593] loop4: detected capacity change from 0 to 4096 [ 746.393267][T28593] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 746.601654][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.651954][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 746.651971][ T27] audit: type=1326 audit(1791367723.524:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28605 comm="syz.3.10543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 746.740167][ T27] audit: type=1326 audit(1791367723.554:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28605 comm="syz.3.10543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 746.837133][ T27] audit: type=1326 audit(1791367723.554:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28605 comm="syz.3.10543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 746.904219][ T27] audit: type=1326 audit(1791367723.554:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28605 comm="syz.3.10543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 746.935218][ T27] audit: type=1326 audit(1791367723.554:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28605 comm="syz.3.10543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 746.995248][ T27] audit: type=1326 audit(1791367723.554:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28605 comm="syz.3.10543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 747.020098][ T27] audit: type=1326 audit(1791367723.564:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28605 comm="syz.3.10543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 747.044545][ T27] audit: type=1326 audit(1791367723.564:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28605 comm="syz.3.10543" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5d6b39e199 code=0x7ffc0000 [ 747.200482][T28591] loop1: detected capacity change from 0 to 32768 [ 747.239341][T28591] syz.1.10537: attempt to access beyond end of device [ 747.239341][T28591] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 747.280897][T28591] lbmIODone: I/O error in JFS log [ 747.293012][T28591] *** Log Format Error ! *** [ 747.332013][T28591] lmLogInit: exit(-22) [ 747.336195][T28591] lmLogOpen: exit(-22) [ 747.856978][T28647] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 747.905974][T28649] cgroup: Name too long [ 748.014048][T28655] loop8: detected capacity change from 0 to 256 [ 748.025017][T28657] loop7: detected capacity change from 0 to 8 [ 748.081938][T28655] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 748.326005][T28667] loop4: detected capacity change from 0 to 8 [ 748.405430][T28666] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 748.732731][T28683] loop3: detected capacity change from 0 to 128 [ 748.761540][T28683] /dev/loop3: Can't open blockdev [ 748.972592][T28693] loop4: detected capacity change from 0 to 512 [ 749.079741][T28693] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 749.131768][T28693] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.10581: invalid indirect mapped block 9 (level 0) [ 749.164839][T28693] EXT4-fs (loop4): 1 truncate cleaned up [ 749.180929][T28693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 749.237576][T28705] loop8: detected capacity change from 0 to 8 [ 749.395175][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 749.405675][T28675] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 749.506370][T28711] loop3: detected capacity change from 0 to 1764 [ 749.554543][T28711] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 749.636697][ T26] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 749.760663][T28723] x_tables: ip_tables: osf match: only valid for protocol 6 [ 749.836821][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 749.845147][ T26] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 749.871355][ T26] usb 2-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 749.913517][ T26] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 749.933987][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 749.973909][ T26] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 749.993464][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.013804][ T26] usb 2-1: Product: syz [ 750.023917][ T26] usb 2-1: Manufacturer: syz [ 750.031208][ T26] usb 2-1: SerialNumber: syz [ 750.051338][T28728] nvme nvme0: rdma connection establishment failed (-104) [ 750.054017][ T26] usb 2-1: config 0 descriptor?? [ 750.070702][T28709] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 750.090046][ T26] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 750.106635][ T3742] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 750.145941][T28735] netlink: 'syz.4.10600': attribute type 11 has an invalid length. [ 750.166726][T28735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10600'. [ 750.306104][ T3742] usb 9-1: config 0 has an invalid interface number: 9 but max is 0 [ 750.329319][ T3742] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.342507][ T3742] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 750.364346][ T3742] usb 9-1: config 0 has no interface number 1 [ 750.376144][ T3742] usb 9-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 750.392262][ T3742] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.428337][ T3742] usb 9-1: config 0 descriptor?? [ 750.453359][ T3742] usb 9-1: bad CDC descriptors [ 750.471717][ T3742] usb 9-1: bad CDC descriptors [ 750.663134][ T3742] usb 9-1: USB disconnect, device number 25 [ 750.829342][ T8007] usb 2-1: USB disconnect, device number 46 [ 751.048893][T28775] netlink: 'syz.3.10619': attribute type 2 has an invalid length. [ 751.057654][T28775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10619'. [ 751.369972][T28788] netlink: 76 bytes leftover after parsing attributes in process `syz.7.10626'. [ 751.479800][T28791] loop1: detected capacity change from 0 to 2048 [ 751.526228][T28791] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 751.550402][T28795] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 751.578818][T28791] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 752.020580][T28811] loop7: detected capacity change from 0 to 64 [ 752.586427][ T8007] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 752.798885][ T8007] usb 8-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 752.829136][ T8007] usb 8-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 752.850855][ T8007] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.869141][ T8007] usb 8-1: Product: syz [ 752.879711][ T8007] usb 8-1: Manufacturer: syz [ 752.892621][ T8007] usb 8-1: SerialNumber: syz [ 753.050622][ T27] audit: type=1326 audit(1791367729.924:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28853 comm="syz.8.10659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a3b9e199 code=0x7ffc0000 [ 753.085204][ T27] audit: type=1326 audit(1791367729.954:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28853 comm="syz.8.10659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd7a3b9e199 code=0x7ffc0000 [ 753.149342][ T8007] scsi host1: uas [ 753.174815][ T9102] scsi 1:0:0:0: tag#4 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 753.185289][ T9102] scsi 1:0:0:0: tag#4 CDB: Inquiry 12 00 00 00 24 00 [ 753.193946][ T27] audit: type=1326 audit(1791367729.994:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28853 comm="syz.8.10659" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a3b9e199 code=0x7ffc0000 [ 753.256769][ T1046] scsi 1:0:0:0: tag#4 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 753.267485][ T1046] scsi 1:0:0:0: tag#4 CDB: Inquiry 12 00 00 00 24 00 [ 753.326640][ T1046] scsi 1:0:0:0: tag#4 sense submit err -2 uas-tag 1 inflight: s-st a-in a-cmd s-cmd [ 753.336236][ T1046] scsi 1:0:0:0: tag#4 CDB: Inquiry 12 00 00 00 24 00 [ 753.352881][ T3742] usb 8-1: USB disconnect, device number 16 [ 753.848972][T28888] loop8: detected capacity change from 0 to 1764 [ 753.962899][T28894] loop3: detected capacity change from 0 to 256 [ 754.777457][T28926] loop1: detected capacity change from 0 to 256 [ 755.060232][T28932] netlink: 'syz.1.10696': attribute type 21 has an invalid length. [ 755.188463][T28935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 755.208395][T28910] loop8: detected capacity change from 0 to 32768 [ 755.248995][T28910] XFS (loop8): Mounting V5 Filesystem [ 755.416570][T28910] XFS (loop8): Ending clean mount [ 755.657211][T16811] XFS (loop8): Unmounting Filesystem [ 755.705401][T28906] loop3: detected capacity change from 0 to 32768 [ 755.720164][T28906] /dev/loop3: Can't open blockdev [ 756.345547][T28973] loop4: detected capacity change from 0 to 4096 [ 756.464412][T28978] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 756.480611][T28973] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 756.519549][T28978] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 756.539737][T28973] ntfs3: loop4: Failed to load $Extend. [ 756.566980][T28978] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 756.606006][T28980] loop1: detected capacity change from 0 to 512 [ 756.643093][T28978] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 756.674107][T28980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 756.694352][T28980] ext4 filesystem being mounted at /2166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.703808][T28978] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 756.726111][T28978] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 756.794629][T28978] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 756.812358][ T27] audit: type=1800 audit(1791367733.685:554): pid=28967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.10709" name="/" dev="sockfs" ino=110541 res=0 errno=0 [ 756.844873][T28978] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 756.854537][T28978] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 756.993391][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 757.234077][T29000] netlink: 'syz.7.10721': attribute type 1 has an invalid length. [ 757.496260][ T26] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 757.715776][ T26] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 757.734504][ T26] usb 9-1: config 0 has no interface number 0 [ 757.753743][ T26] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 757.790413][T29019] delete_channel: no stack [ 757.794015][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.818239][ T26] usb 9-1: Product: syz [ 757.828762][ T26] usb 9-1: Manufacturer: syz [ 757.842956][ T26] usb 9-1: SerialNumber: syz [ 757.856396][T28992] loop3: detected capacity change from 0 to 32768 [ 757.888923][ T26] usb 9-1: config 0 descriptor?? [ 757.932877][ T8004] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 758.100539][ T26] asix: probe of 9-1:0.251 failed with error -71 [ 758.137077][ T26] usb 9-1: USB disconnect, device number 26 [ 758.408601][T29039] loop7: detected capacity change from 0 to 256 [ 758.716450][T29052] CIFS: Attempting to mount \\127.0.0.1\test [ 758.946975][T29064] loop8: detected capacity change from 0 to 256 [ 759.028176][T29068] device geneve3 entered promiscuous mode [ 759.051125][T29068] IPv6: ADDRCONF(NETDEV_CHANGE): geneve3: link becomes ready [ 759.539629][T29052] CIFS: VFS: Error connecting to socket. Aborting operation. [ 759.576876][T29052] CIFS: VFS: cifs_mount failed w/return code = -4 [ 759.637304][T29094] loop4: detected capacity change from 0 to 16 [ 759.714371][T29094] erofs: (device loop4): mounted with root inode @ nid 36. [ 759.760742][T29094] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 759.791122][T29094] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 759.826397][T29094] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 759.846090][T29094] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 759.877100][T29094] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 760.299413][T29124] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10784'. [ 760.549564][T29141] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1031) [ 760.573010][T29141] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 760.848610][T29153] loop4: detected capacity change from 0 to 256 [ 761.105249][ T27] audit: type=1400 audit(1791367737.975:555): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=29163 comm="syz.8.10804" [ 761.124067][T29157] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 761.620774][T29191] netlink: 200 bytes leftover after parsing attributes in process `syz.8.10817'. [ 761.730104][T29196] loop7: detected capacity change from 0 to 256 [ 761.829151][T29196] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 761.856292][T29196] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 761.875211][T29196] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 761.900815][ T27] audit: type=1800 audit(1791367738.775:556): pid=29196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10819" name="file1" dev="loop7" ino=1048814 res=0 errno=0 [ 761.973220][ T3742] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 762.186311][ T3742] usb 5-1: Using ep0 maxpacket: 32 [ 762.198962][ T3742] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.224959][ T3742] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 762.264749][ T3742] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 762.315992][ T3742] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 762.352071][ T3742] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 762.384311][ T3742] usb 5-1: config 1 interface 1 has no altsetting 0 [ 762.433587][ T3742] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 762.458064][ T3742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.492221][ T3742] usb 5-1: Product: syz [ 762.503855][ T3742] usb 5-1: Manufacturer: syz [ 762.515882][ T3742] usb 5-1: SerialNumber: syz [ 762.709319][T29230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10835'. [ 762.761510][ T3742] usb 5-1: selecting invalid altsetting 0 [ 762.780204][ T3742] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 762.813299][T29231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 762.826726][ T3742] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 762.887539][ T3742] usb 5-1: USB disconnect, device number 35 [ 763.062885][T29237] loop3: detected capacity change from 0 to 256 [ 763.360394][T29246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10843'. [ 763.438847][T29248] netlink: 'syz.8.10844': attribute type 21 has an invalid length. [ 763.472324][T29248] netlink: 156 bytes leftover after parsing attributes in process `syz.8.10844'. [ 763.536384][T29253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10846'. [ 763.643239][T29257] netlink: 'syz.7.10848': attribute type 41 has an invalid length. [ 763.675864][T29257] netlink: 'syz.7.10848': attribute type 4 has an invalid length. [ 763.702156][T29257] netlink: 152 bytes leftover after parsing attributes in process `syz.7.10848'. [ 763.748030][T29257] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 764.531111][T29295] loop1: detected capacity change from 0 to 1024 [ 764.590032][T29295] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 764.615778][ T3742] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 764.644570][T29295] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 764.727528][T29295] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (62631!=20869) [ 764.819524][ T3742] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 764.835958][ T3742] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 764.866016][ T3742] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 764.895864][ T3742] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 764.941965][ T3742] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 764.951929][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 764.959965][T29314] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 764.975730][ T3742] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.994095][ T3742] usb 9-1: Product: syz [ 765.014290][T29314] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 765.040907][ T3742] usb 9-1: Manufacturer: syz [ 765.055880][T29314] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 765.056360][ T3742] usb 9-1: SerialNumber: syz [ 765.091400][T29314] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 765.094201][ T3742] usb 9-1: config 0 descriptor?? [ 765.114113][T29314] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 765.129438][T29314] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 765.141722][T29314] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 765.181721][T29314] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 765.221674][T29314] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 765.333976][ T3742] adutux 9-1:0.0: Could not retrieve serial number [ 765.341980][ T3742] adutux: probe of 9-1:0.0 failed with error -5 [ 765.546956][ T3742] usb 9-1: USB disconnect, device number 27 [ 765.765791][T29344] loop7: detected capacity change from 0 to 1024 [ 765.808135][T29344] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 765.895769][ T6985] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 766.023132][T29353] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 766.043991][T29353] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 766.055051][T29353] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 766.095662][ T6985] usb 2-1: Using ep0 maxpacket: 16 [ 766.103465][ T6985] usb 2-1: unable to get BOS descriptor or descriptor too short [ 766.112576][T29356] loop7: detected capacity change from 0 to 2048 [ 766.117482][T29353] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 766.128289][ T6985] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 766.145146][T29353] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 766.158848][ T6985] usb 2-1: config 1 has no interface number 0 [ 766.165168][ T6985] usb 2-1: config 1 interface 151 has no altsetting 0 [ 766.197463][ T6985] usb 2-1: string descriptor 0 read error: -22 [ 766.205352][T29353] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 766.222731][T29353] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 766.231547][T29356] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 766.243884][ T6985] usb 2-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 766.283451][ T6985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.297196][T29353] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 766.307348][T29356] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 766.335653][T29353] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 766.357666][ T6985] gspca_main: pac7311-2.14.0 probing 093a:260e [ 766.478963][T16652] EXT4-fs (loop7): unmounting filesystem. [ 766.753746][ T6985] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 766.784116][ T6985] pac7311: probe of 2-1:1.151 failed with error -71 [ 766.825057][ T6985] usb 2-1: USB disconnect, device number 47 [ 767.333897][T29412] loop8: detected capacity change from 0 to 16 [ 767.377010][T29412] erofs: (device loop8): mounted with root inode @ nid 36. [ 767.526508][T29419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10923'. [ 767.724423][T29430] xt_hashlimit: max too large, truncated to 1048576 [ 767.896271][ T26] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 767.980878][T29444] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 768.055069][T29448] netlink: 92 bytes leftover after parsing attributes in process `syz.3.10937'. [ 768.095505][ T26] usb 9-1: Using ep0 maxpacket: 16 [ 768.102694][ T26] usb 9-1: config index 0 descriptor too short (expected 51443, got 18) [ 768.127968][ T26] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 768.165573][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.203265][ T26] usb 9-1: Product: syz [ 768.207700][ T26] usb 9-1: Manufacturer: syz [ 768.212330][ T26] usb 9-1: SerialNumber: syz [ 768.245837][ T26] r8152-cfgselector 9-1: config 0 descriptor?? [ 768.376209][T29460] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10943'. [ 768.378049][T29462] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 768.378349][T29462] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 768.378371][T29462] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 768.378421][T29462] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 768.379016][T29462] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 768.379037][T29462] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 768.379058][T29462] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 768.426467][T29462] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 768.426485][T29462] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 768.462682][ T26] usbip-host 9-1: 9-1 is not in match_busid table... skip! [ 768.671406][ T26] usb 9-1: USB disconnect, device number 28 [ 768.763775][T29474] netlink: 'syz.4.10950': attribute type 21 has an invalid length. [ 768.795882][T29474] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10950'. [ 769.248901][T29496] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10961'. [ 769.319943][T29498] __vm_enough_memory: pid: 29498, comm: syz.7.10962, no enough memory for the allocation [ 769.580454][T29480] loop3: detected capacity change from 0 to 32768 [ 769.663301][T29480] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 769.723162][T29480] ocfs2: Mounting device (7,3) on (node local, slot 65535) with writeback data mode. [ 769.825095][ T4274] INFO: trying to register non-static key. [ 769.830990][ T4274] The code is fine but needs lockdep annotation, or maybe [ 769.838124][ T4274] you didn't initialize this object before use? [ 769.844416][ T4274] turning off the locking correctness validator. [ 769.850782][ T4274] CPU: 0 PID: 4274 Comm: syz-executor Not tainted syzkaller #0 [ 769.858360][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 769.868477][ T4274] Call Trace: [ 769.871791][ T4274] [ 769.874784][ T4274] dump_stack_lvl+0x188/0x24e [ 769.879547][ T4274] ? show_regs_print_info+0x12/0x12 [ 769.884796][ T4274] ? load_image+0x410/0x410 [ 769.885259][T29521] loop7: detected capacity change from 0 to 64 [ 769.889366][ T4274] ? _find_next_bit+0x11e/0x130 [ 769.900442][ T4274] ? __is_module_percpu_address+0x279/0x3b0 [ 769.906470][ T4274] ? is_kernel_percpu_address+0x18f/0x1b0 [ 769.912262][ T4274] assign_lock_key+0x201/0x230 [ 769.917122][ T4274] ? SOFTIRQ_verbose+0x10/0x10 [ 769.921937][ T4274] ? __lock_acquire+0x7ea0/0x7ea0 [ 769.927003][ T4274] ? mark_lock+0x94/0x320 [ 769.931390][ T4274] register_lock_class+0x21d/0x870 [ 769.936543][ T4274] ? mark_lock+0x94/0x320 [ 769.940916][ T4274] ? is_dynamic_key+0x260/0x260 [ 769.945815][ T4274] ? __lock_acquire+0x142d/0x7ea0 [ 769.950895][ T4274] __lock_acquire+0x277/0x7ea0 [ 769.955713][ T4274] ? kernel_text_address+0x9c/0xd0 [ 769.960940][ T4274] ? __kernel_text_address+0x9/0x30 [ 769.966187][ T4274] ? verify_lock_unused+0x140/0x140 [ 769.971438][ T4274] ? stack_trace_save+0xa6/0xf0 [ 769.976398][ T4274] ? __stack_depot_save+0x35/0x480 [ 769.981631][ T4274] lock_acquire+0x1bc/0x4a0 [ 769.986338][ T4274] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 769.992340][ T4274] ? read_lock_is_recursive+0x10/0x10 [ 769.997756][ T4274] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 770.004056][ T4274] ? lockdep_hardirqs_on+0x94/0x140 [ 770.009321][ T4274] _raw_spin_lock_irqsave+0xb0/0x100 [ 770.014743][ T4274] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 770.020689][ T4274] ? _raw_spin_lock+0x40/0x40 [ 770.025421][ T4274] ? ktime_get+0x247/0x270 [ 770.029890][ T4274] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 770.035684][ T4274] ? ocfs2_dlm_shutdown+0x230/0x230 [ 770.040927][ T4274] ? slab_free_freelist_hook+0x133/0x1b0 [ 770.046698][ T4274] ? ocfs2_journal_shutdown+0x68e/0xc40 [ 770.052333][ T4274] ? ocfs2_journal_init+0xd40/0xd40 [ 770.057571][ T4274] ocfs2_dlm_shutdown+0x33/0x230 [ 770.062562][ T4274] ocfs2_dismount_volume+0x479/0x940 [ 770.068132][ T4274] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 770.073467][ T4274] ? clear_inode+0x150/0x150 [ 770.078125][ T4274] ? dput+0x37/0x1d0 [ 770.082055][ T4274] ? ocfs2_free_inode+0x20/0x20 [ 770.086947][ T4274] generic_shutdown_super+0x130/0x340 [ 770.092420][ T4274] kill_block_super+0x7c/0xe0 [ 770.097143][ T4274] deactivate_locked_super+0x93/0xf0 [ 770.102518][ T4274] cleanup_mnt+0x471/0x4f0 [ 770.107055][ T4274] task_work_run+0x1d0/0x260 [ 770.111704][ T4274] ? task_work_cancel+0x220/0x220 [ 770.116809][ T4274] ? exit_to_user_mode_loop+0x3b/0x110 [ 770.122422][ T4274] exit_to_user_mode_loop+0xe6/0x110 [ 770.127772][ T4274] exit_to_user_mode_prepare+0xee/0x180 [ 770.133385][ T4274] syscall_exit_to_user_mode+0x16/0x40 [ 770.138890][ T4274] do_syscall_64+0x58/0xa0 [ 770.143350][ T4274] ? clear_bhb_loop+0x60/0xb0 [ 770.148144][ T4274] ? clear_bhb_loop+0x60/0xb0 [ 770.152869][ T4274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 770.158830][ T4274] RIP: 0033:0x7f5d6b39f3d7 [ 770.163290][ T4274] Code: a2 c7 05 1c 63 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 770.182955][ T4274] RSP: 002b:00007ffe17ab3388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 770.191416][ T4274] RAX: 0000000000000000 RBX: 00007f5d6b434d23 RCX: 00007f5d6b39f3d7 [ 770.199428][ T4274] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe17ab3440 [ 770.207450][ T4274] RBP: 00007ffe17ab3440 R08: 00007ffe17ab4440 R09: 00000000ffffffff [ 770.215511][ T4274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe17ab44d0 [ 770.217682][T29521] Trying to free block not in datazone [ 770.223545][ T4274] R13: 00007f5d6b434d23 R14: 00000000000bc0de R15: 00007ffe17ab4510 [ 770.223572][ T4274] [ 770.223705][ C0] vkms_vblank_simulate: vblank timer overrun [ 770.257696][ T4274] ocfs2: Unmounting device (7,3) on (node local) [ 770.264365][T29521] minix_free_block (loop7:21): bit already cleared [ 770.447635][T29516] loop4: detected capacity change from 0 to 32768 [ 770.489705][T29516] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 770.502323][T29516] JBD2: Ignoring recovery information on journal [ 770.526684][T29516] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 770.584575][ T4285] ocfs2: Unmounting device (7,4) on (node local)