last executing test programs: 19.100575624s ago: executing program 3 (id=1508): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x1}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 19.000332065s ago: executing program 3 (id=1509): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x207, &(0x7f0000000000), 0x1, 0x471, &(0x7f0000000580)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 18.477287728s ago: executing program 3 (id=1515): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 18.304284207s ago: executing program 3 (id=1519): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=cp850,namecase=1,errors=remount-ro,errors=continue,fmask=00000000000000000000005,iocharset=cp860,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d303030303230303030303030303030b30000000579439b0e79"], 0x1, 0x1524, &(0x7f0000002280)="$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") mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0) 17.757591446s ago: executing program 3 (id=1526): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) 17.101172875s ago: executing program 3 (id=1541): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000, 0x0, 0x8, 0x5989, 0x4}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0xab, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="0d00bd0000c0", 0xfffffffffffffffd, 0x2, 0x10030, 0x0, 0x0}) 16.874043163s ago: executing program 32 (id=1541): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000, 0x0, 0x8, 0x5989, 0x4}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0xab, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="0d00bd0000c0", 0xfffffffffffffffd, 0x2, 0x10030, 0x0, 0x0}) 6.562677581s ago: executing program 2 (id=1663): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) read(r0, &(0x7f0000000180)=""/114, 0x72) 6.099271175s ago: executing program 2 (id=1667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xec}]}, 0x34}, 0x1, 0x0, 0x0, 0x44851}, 0x0) 6.025880702s ago: executing program 2 (id=1669): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) 5.063344694s ago: executing program 2 (id=1673): syz_usb_connect(0x5, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003000166088f05106605480102030109021200e704957081090400810100002202a4763e760f7cd80872620c7e0a51dc3e3590adaffef66bd382d67763b2c8da557e26c31ecbd34824e869da7ca63bc4736264c1d086db1c50cd003d8b18"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000008c0)=[{0x6, 0x5010, 0x0, 0x0}, {0x880, 0x4000, 0x0, 0x0}], 0x2}) 4.105042858s ago: executing program 4 (id=1687): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r1, 0x607}, 0x14}}, 0x24044884) 4.021203082s ago: executing program 4 (id=1688): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001940)=""/4066, 0xfe2}], 0x1}, 0x0) 4.020596022s ago: executing program 4 (id=1690): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) 2.026873744s ago: executing program 0 (id=1706): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001a00010000000080fbdbdf250a808000000000000000000008001e00ac1414aa06001d"], 0x2c}}, 0x20000050) 2.009097291s ago: executing program 2 (id=1708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2502000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x404c085}, 0x10) 1.871980645s ago: executing program 2 (id=1710): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) 1.563033409s ago: executing program 0 (id=1711): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT], 0x158}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)='-', 0x300}], 0x1) 1.474230372s ago: executing program 0 (id=1714): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050006"], 0x48}}, 0x0) 1.380665765s ago: executing program 0 (id=1715): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 1.289444758s ago: executing program 1 (id=1716): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.240304409s ago: executing program 0 (id=1717): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) 1.156436833s ago: executing program 0 (id=1719): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) 997.083444ms ago: executing program 5 (id=1720): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="1441c05465f0006fc8afa8e40800", 0xe, 0x4008000, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 967.403429ms ago: executing program 4 (id=1721): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x50040) 884.938423ms ago: executing program 1 (id=1722): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={0x40, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) 884.299893ms ago: executing program 5 (id=1723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 868.59708ms ago: executing program 4 (id=1724): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x4000000) 860.400829ms ago: executing program 1 (id=1725): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000000f40)="$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") rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') open(&(0x7f0000000580)='./file1\x00', 0x80042, 0x43) 731.520915ms ago: executing program 5 (id=1726): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f8480b0000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40040) 730.913235ms ago: executing program 4 (id=1727): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@lfs_mode}, {@noinline_data}, {@whint_mode_user}, {@resgid}, {@inline_xattr}, {@compress_chksum}, {@quota}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x552b, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) fdatasync(r0) 440.996672ms ago: executing program 5 (id=1728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000060900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 407.882975ms ago: executing program 1 (id=1729): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000540)={&(0x7f00000000c0)={0x30, r0, 0x10ada85e65c25349, 0x3, 0x25dfdbfb, {{0x67}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x117, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200449a0) 398.530974ms ago: executing program 5 (id=1730): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, 0x90) 121.144822ms ago: executing program 1 (id=1731): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000083c0)={0x10, 0x33, 0x2, 0x70bd26, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}, 0x800) 120.781382ms ago: executing program 5 (id=1732): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x680, 0x0) 0s ago: executing program 1 (id=1733): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0x7]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) kernel console output (not intermixed with test programs): led to load upcase table (idx : 0x00010000, chksum : 0xd4ca984e, utbl_chksum : 0xe619d30d) [ 119.891928][ T4443] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 120.240882][ T6207] loop1: detected capacity change from 0 to 256 [ 120.293804][ T6200] loop0: detected capacity change from 0 to 32768 [ 120.323173][ T6209] mmap: syz.4.723 (6209) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 120.324889][ T6207] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 120.391937][ T5706] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.434136][ T6216] loop4: detected capacity change from 0 to 128 [ 120.441948][ T4443] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 120.452364][ T5706] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.471972][ T4443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.488389][ T6200] XFS (loop0): Mounting V5 Filesystem [ 120.491822][ T4443] usb 4-1: config 0 descriptor?? [ 120.553878][ T4443] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 120.640733][ T6200] XFS (loop0): Ending clean mount [ 120.648467][ T6200] XFS (loop0): Quotacheck needed: Please wait. [ 120.681960][ T5706] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.717229][ T6223] FAT-fs (loop1): Directory bread(block 64) failed [ 120.738326][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.745382][ T6200] XFS (loop0): Quotacheck: Done. [ 120.780623][ T6223] FAT-fs (loop1): Directory bread(block 65) failed [ 120.798910][ T5706] usb 3-1: Product: syz [ 120.818678][ T6223] FAT-fs (loop1): Directory bread(block 66) failed [ 120.827081][ T5706] usb 3-1: Manufacturer: syz [ 120.830192][ T4185] XFS (loop0): Unmounting Filesystem [ 120.832609][ T5706] usb 3-1: SerialNumber: syz [ 120.842604][ T6223] FAT-fs (loop1): Directory bread(block 67) failed [ 120.849290][ T6223] FAT-fs (loop1): Directory bread(block 68) failed [ 120.862194][ T6223] FAT-fs (loop1): Directory bread(block 69) failed [ 120.869057][ T6223] FAT-fs (loop1): Directory bread(block 70) failed [ 120.891732][ T4268] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.898955][ T6223] FAT-fs (loop1): Directory bread(block 71) failed [ 120.907126][ T5706] hub 3-1:1.0: bad descriptor, ignoring hub [ 120.914703][ T6223] FAT-fs (loop1): Directory bread(block 72) failed [ 120.919211][ T5706] hub: probe of 3-1:1.0 failed with error -5 [ 120.924131][ T6223] FAT-fs (loop1): Directory bread(block 73) failed [ 120.992042][ T4443] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 121.003962][ T4443] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 121.137462][ T4268] usb 5-1: Using ep0 maxpacket: 32 [ 121.185771][ T6227] mkiss: ax0: crc mode is auto. [ 121.223612][ T4229] usb 4-1: USB disconnect, device number 7 [ 121.353461][ T6229] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 121.363430][ T6229] REISERFS (device loop0): using ordered data mode [ 121.370001][ T6229] reiserfs: using flush barriers [ 121.395923][ T6229] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.420324][ T6229] REISERFS (device loop0): checking transaction log (loop0) [ 121.431995][ T4268] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 121.461473][ T4268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.470269][ T4268] usb 5-1: Product: syz [ 121.505038][ T4268] usb 5-1: Manufacturer: syz [ 121.511817][ T4443] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 121.546560][ T4268] usb 5-1: SerialNumber: syz [ 121.567526][ T4268] usb 5-1: config 0 descriptor?? [ 121.588490][ T6229] REISERFS (device loop0): Using tea hash to sort names [ 121.596929][ T6229] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 121.614849][ T4268] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 121.634307][ T26] audit: type=1800 audit(1773155836.349:14): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.728" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 121.665504][ T4268] dvb-usb: bulk message failed: -22 (2/0) [ 121.705972][ T4268] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.739504][ T4268] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 121.764338][ T4268] usb 5-1: media controller created [ 121.799847][ T4268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.823333][ T6225] cxusb: i2c wr: len=79 is too big! [ 121.823333][ T6225] [ 121.847637][ T4268] usb 5-1: selecting invalid altsetting 7 [ 121.855697][ T4268] cxusb: set interface failed [ 121.860499][ T4268] dvb-usb: bulk message failed: -22 (1/0) [ 121.912475][ T4268] DVB: Unable to find symbol lgdt330x_attach() [ 121.918899][ T4268] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 122.071731][ T4268] rc_core: IR keymap rc-dvico-portable not found [ 122.080947][ T4268] Registered IR keymap rc-empty [ 122.114525][ T4268] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 122.115779][ T4268] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input11 [ 122.117261][ T4268] dvb-usb: schedule remote query interval to 100 msecs. [ 122.117281][ T4268] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 122.135426][ T4268] usb 5-1: USB disconnect, device number 6 [ 122.216965][ T4268] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 122.305793][ T4443] usb 3-1: USB disconnect, device number 6 [ 122.513875][ T6274] netlink: 'syz.3.748': attribute type 4 has an invalid length. [ 122.781808][ T4443] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.911009][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 122.948813][ T6293] device gretap0 entered promiscuous mode [ 122.955027][ T6293] device macsec1 entered promiscuous mode [ 122.964542][ T6293] device gretap0 left promiscuous mode [ 123.061706][ T4443] usb 2-1: Using ep0 maxpacket: 16 [ 123.159416][ T6276] set_capacity_and_notify: 3 callbacks suppressed [ 123.159431][ T6276] loop4: detected capacity change from 0 to 32768 [ 123.221968][ T4443] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 123.252672][ T4443] usb 2-1: config 0 has no interface number 0 [ 123.256589][ T6276] (syz.4.749,6276,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.291712][ T4443] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 123.317180][ T6276] (syz.4.749,6276,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.322148][ T4443] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 123.356765][ T6308] tipc: Started in network mode [ 123.371700][ T6308] tipc: Node identity 00000000000000000000ffffe0000002, cluster identity 4711 [ 123.392579][ T6308] tipc: Enabling of bearer rejected, failed to enable media [ 123.445246][ T6276] JBD2: Ignoring recovery information on journal [ 123.500444][ T6294] loop2: detected capacity change from 0 to 32768 [ 123.558142][ T6276] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 123.567632][ T4443] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 123.597164][ T4443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.610900][ T4443] usb 2-1: Product: syz [ 123.616162][ T4443] usb 2-1: Manufacturer: syz [ 123.621287][ T4443] usb 2-1: SerialNumber: syz [ 123.629845][ T6294] XFS (loop2): Mounting V5 Filesystem [ 123.660956][ T4443] usb 2-1: config 0 descriptor?? [ 123.722119][ T6272] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.729817][ T6272] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.754875][ T6294] XFS (loop2): Ending clean mount [ 123.811796][ T5706] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.874054][ T4184] XFS (loop2): Unmounting Filesystem [ 124.000021][ T6272] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.021791][ T6272] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.086638][ T4199] ocfs2: Unmounting device (7,4) on (node local) [ 124.087399][ T6320] loop0: detected capacity change from 0 to 32768 [ 124.139067][ T6320] XFS (loop0): Mounting V5 Filesystem [ 124.238533][ T5706] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.267452][ T4443] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 124.303528][ T5706] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.327543][ T4443] asix: probe of 2-1:0.34 failed with error -61 [ 124.369944][ T6320] XFS (loop0): Ending clean mount [ 124.385505][ T6320] XFS (loop0): Quotacheck needed: Please wait. [ 124.459065][ T6343] loop4: detected capacity change from 0 to 256 [ 124.473485][ T6320] XFS (loop0): Quotacheck: Done. [ 124.540766][ T6343] FAT-fs (loop4): Directory bread(block 64) failed [ 124.544349][ T6345] loop2: detected capacity change from 0 to 64 [ 124.563149][ T5706] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 124.586541][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.605108][ T6343] FAT-fs (loop4): Directory bread(block 65) failed [ 124.618077][ T5706] usb 4-1: Product: syz [ 124.627033][ T6343] FAT-fs (loop4): Directory bread(block 66) failed [ 124.629284][ T6345] hfs: small file entry [ 124.635492][ T5706] usb 4-1: Manufacturer: syz [ 124.660035][ T6343] FAT-fs (loop4): Directory bread(block 67) failed [ 124.667385][ T5706] usb 4-1: SerialNumber: syz [ 124.680930][ T4443] usb 2-1: USB disconnect, device number 3 [ 124.681018][ T4185] XFS (loop0): Unmounting Filesystem [ 124.687048][ T6343] FAT-fs (loop4): Directory bread(block 68) failed [ 124.687084][ T6343] FAT-fs (loop4): Directory bread(block 69) failed [ 124.687149][ T6343] FAT-fs (loop4): Directory bread(block 70) failed [ 124.687177][ T6343] FAT-fs (loop4): Directory bread(block 71) failed [ 124.687236][ T6343] FAT-fs (loop4): Directory bread(block 72) failed [ 124.736994][ T6343] FAT-fs (loop4): Directory bread(block 73) failed [ 124.778457][ T5706] hub 4-1:1.0: bad descriptor, ignoring hub [ 124.800528][ T5706] hub: probe of 4-1:1.0 failed with error -5 [ 124.898929][ T6347] loop2: detected capacity change from 0 to 4096 [ 124.947015][ T6347] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 125.022813][ T6347] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 125.060394][ T6347] ntfs3: loop2: Failed to load $Extend. [ 125.258592][ T6355] netlink: 44 bytes leftover after parsing attributes in process `syz.1.779'. [ 125.294855][ T6355] netlink: 43 bytes leftover after parsing attributes in process `syz.1.779'. [ 125.321994][ T6355] netlink: 'syz.1.779': attribute type 5 has an invalid length. [ 125.341677][ T4268] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 125.349715][ T6355] netlink: 43 bytes leftover after parsing attributes in process `syz.1.779'. [ 125.598327][ T6371] loop1: detected capacity change from 0 to 256 [ 125.686166][ T6371] FAT-fs (loop1): Directory bread(block 64) failed [ 125.707136][ T6371] FAT-fs (loop1): Directory bread(block 65) failed [ 125.748980][ T6371] FAT-fs (loop1): Directory bread(block 66) failed [ 125.794487][ T6371] FAT-fs (loop1): Directory bread(block 67) failed [ 125.801123][ T6371] FAT-fs (loop1): Directory bread(block 68) failed [ 125.839845][ T6351] loop0: detected capacity change from 0 to 32768 [ 125.847230][ T6371] FAT-fs (loop1): Directory bread(block 69) failed [ 125.867634][ T6371] FAT-fs (loop1): Directory bread(block 70) failed [ 125.911042][ T6371] FAT-fs (loop1): Directory bread(block 71) failed [ 125.961709][ T6371] FAT-fs (loop1): Directory bread(block 72) failed [ 125.968437][ T6371] FAT-fs (loop1): Directory bread(block 73) failed [ 126.131980][ T4229] usb 4-1: USB disconnect, device number 8 [ 126.261893][ T6393] loop2: detected capacity change from 0 to 256 [ 126.315409][ T6395] loop4: detected capacity change from 0 to 256 [ 126.331372][ T6393] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 126.445551][ T26] audit: type=1800 audit(1773155841.159:15): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.797" name="file1" dev="loop4" ino=1048642 res=0 errno=0 [ 126.466371][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.487554][ T6395] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 126.895203][ T6402] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 126.974359][ T6417] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.007206][ T6402] REISERFS (device loop1): using ordered data mode [ 127.041740][ T6413] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 127.070883][ T6402] reiserfs: using flush barriers [ 127.082542][ T6413] Remounting filesystem read-only [ 127.121229][ T6402] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.199004][ T6402] REISERFS (device loop1): checking transaction log (loop1) [ 127.230307][ T6402] REISERFS (device loop1): Using r5 hash to sort names [ 127.301917][ T6402] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 127.359917][ T6402] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 127.602009][ T6411] XFS (loop4): Mounting V5 Filesystem [ 127.737394][ T6411] XFS (loop4): Ending clean mount [ 127.826247][ T4199] XFS (loop4): Unmounting Filesystem [ 127.830914][ T6421] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 127.869822][ T6421] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 127.950449][ T6421] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 128.005769][ T6415] XFS (loop2): Mounting V5 Filesystem [ 128.018279][ T6437] net_ratelimit: 19 callbacks suppressed [ 128.018296][ T6437] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 128.070536][ T6421] F2FS-fs (loop3): Found nat_bits in checkpoint [ 128.146787][ T4443] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 128.238272][ T6415] XFS (loop2): Ending clean mount [ 128.258677][ T6415] XFS (loop2): Quotacheck needed: Please wait. [ 128.318421][ T6421] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 128.325980][ T4443] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 128.351754][ T6421] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 128.415490][ T6415] XFS (loop2): Quotacheck: Done. [ 128.456827][ T6455] set_capacity_and_notify: 6 callbacks suppressed [ 128.456842][ T6455] loop1: detected capacity change from 0 to 256 [ 128.522871][ T6455] exfat: Deprecated parameter 'utf8' [ 128.538847][ T6457] loop0: detected capacity change from 0 to 256 [ 128.548800][ T6455] exfat: Deprecated parameter 'namecase' [ 128.558348][ T6459] loop4: detected capacity change from 0 to 512 [ 128.594860][ T6455] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001015b, chksum : 0xeba6baed, utbl_chksum : 0xe619d30d) [ 128.620903][ T6459] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.634894][ T4184] XFS (loop2): Unmounting Filesystem [ 128.704863][ T6459] EXT4-fs (loop4): 1 truncate cleaned up [ 128.731769][ T6459] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.759182][ T6459] EXT4-fs error (device loop4): ext4_get_parent:1910: comm syz.4.813: inode #2: comm syz.4.813: iget: illegal inode # [ 128.837484][ T6465] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.792721][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 129.793212][ T4443] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.801554][ T6513] nbd: must specify an index to disconnect [ 129.908227][ T6521] loop4: detected capacity change from 0 to 1024 [ 130.024314][ T6521] hfsplus: bad catalog entry type [ 130.129418][ T154] hfsplus: b-tree write err: -5, ino 25 [ 130.135987][ T154] hfsplus: b-tree write err: -5, ino 4 [ 130.146858][ T4443] usb 4-1: Using ep0 maxpacket: 8 [ 130.152720][ T154] hfsplus: b-tree write err: -5, ino 2 [ 130.177204][ T6505] loop0: detected capacity change from 0 to 32768 [ 130.293588][ T4443] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.496685][ T4443] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 130.517793][ T4443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.550193][ T4443] usb 4-1: Product: syz [ 130.574520][ T4443] usb 4-1: Manufacturer: syz [ 130.597266][ T4443] usb 4-1: SerialNumber: syz [ 130.679402][ T4443] disable ehci-hcd to run US-144 [ 130.788349][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 130.812950][ T6526] loop2: detected capacity change from 0 to 32768 [ 130.828438][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 130.901167][ T6545] netlink: 'syz.0.860': attribute type 11 has an invalid length. [ 130.952956][ T6526] JBD2: Ignoring recovery information on journal [ 131.017198][ T6497] loop3: detected capacity change from 0 to 64 [ 131.136388][ T6526] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 131.155836][ T6551] loop1: detected capacity change from 0 to 32768 [ 131.180177][ T6557] loop0: detected capacity change from 0 to 128 [ 131.182884][ T5324] usb 4-1: USB disconnect, device number 9 [ 131.272938][ T6551] ERROR: (device loop1): dtSearch: stack overrun! [ 131.272938][ T6551] [ 131.299981][ T6551] ERROR: (device loop1): remounting filesystem as read-only [ 131.314040][ T4184] ocfs2: Unmounting device (7,2) on (node local) [ 131.338662][ T6551] btstack dump: [ 131.359967][ T6551] bn = 0, index = 0 [ 131.370468][ T6551] bn = 72c, index = 96 [ 131.400157][ T6551] bn = 0, index = 0 [ 131.401838][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.415981][ T6551] bn = 72c, index = 96 [ 131.420165][ T6551] bn = 0, index = 0 [ 131.457418][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.471712][ T6551] bn = 72c, index = 96 [ 131.475937][ T6551] bn = 0, index = 0 [ 131.479880][ T6551] bn = 0, index = 0 [ 131.484579][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.501019][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.521703][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.535482][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.544523][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.552886][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.560909][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.568967][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.576987][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.585207][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.593327][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.601088][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.609244][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.617223][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.625299][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.634719][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.649223][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.657215][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.657634][ T6561] loop2: detected capacity change from 0 to 8192 [ 131.665304][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.671783][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 131.684263][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.694206][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.710545][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.717470][ T6561] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 131.724736][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.729308][ T6561] REISERFS (device loop2): using ordered data mode [ 131.742202][ T6561] reiserfs: using flush barriers [ 131.743309][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.748329][ T6561] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.758510][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.771733][ T6561] REISERFS (device loop2): checking transaction log (loop2) [ 131.784203][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.801980][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.803815][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.817150][ T1108] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 131.840616][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.849072][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.857147][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.865133][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.873546][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.878344][ T6561] REISERFS (device loop2): Using tea hash to sort names [ 131.881211][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.888940][ T6561] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 131.902251][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.918130][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.926327][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.931172][ T26] audit: type=1800 audit(1773155846.639:16): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.866" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 131.940574][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.970128][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.978314][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.989068][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 131.991803][ T1108] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 131.996840][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.006441][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.018707][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.022333][ T1108] usb 5-1: Product: syz [ 132.029537][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.033909][ T1108] usb 5-1: Manufacturer: syz [ 132.033926][ T1108] usb 5-1: SerialNumber: syz [ 132.036201][ T1108] usb 5-1: config 0 descriptor?? [ 132.048703][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.063811][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.071458][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.079162][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.086840][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.094549][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.102239][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.109988][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.117739][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.125626][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.133337][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.141393][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.149109][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.156807][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.164513][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.172212][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.179856][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.187554][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.195229][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.202996][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.210646][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.218362][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.226039][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.233766][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.241999][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.249659][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.257460][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.265138][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.272853][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.280696][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.288498][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.296335][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.304161][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.311867][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.319538][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.327684][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.335792][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.344407][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.352473][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.357059][ T1108] usb 5-1: USB disconnect, device number 7 [ 132.360129][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.360156][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.381400][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.389097][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.396807][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.404495][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.412187][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.419834][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.427503][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.435199][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.442929][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.451007][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.458733][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.466417][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.474484][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.482211][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.489868][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.497569][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.505237][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.513046][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.520698][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.528432][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.536134][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.543816][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.552187][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.559851][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.567579][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.575276][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.583026][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.590675][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.598375][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.606189][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.613881][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.621527][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.629370][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.637041][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.644735][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.653063][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.660719][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.668407][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.676105][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.683865][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.691525][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.699221][ T5706] hid-generic 0000:0000:8000004.0007: unknown main item tag 0x0 [ 132.719685][ T5706] hid-generic 0000:0000:8000004.0007: hidraw0: HID v0.03 Device [syz0] on syz1 [ 132.774216][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.780529][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.810041][ T6563] fido_id[6563]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.917814][ T6565] FAT-fs (loop0): Directory bread(block 64) failed [ 132.958117][ T6565] FAT-fs (loop0): Directory bread(block 65) failed [ 133.017747][ T6565] FAT-fs (loop0): Directory bread(block 66) failed [ 133.031719][ T6565] FAT-fs (loop0): Directory bread(block 67) failed [ 133.038361][ T6565] FAT-fs (loop0): Directory bread(block 68) failed [ 133.091802][ T6565] FAT-fs (loop0): Directory bread(block 69) failed [ 133.098500][ T6565] FAT-fs (loop0): Directory bread(block 70) failed [ 133.129318][ T6565] FAT-fs (loop0): Directory bread(block 71) failed [ 133.170006][ T6565] FAT-fs (loop0): Directory bread(block 72) failed [ 133.190555][ T6565] FAT-fs (loop0): Directory bread(block 73) failed [ 133.549653][ T6567] JFS: block map error in dbBackSplit [ 133.560160][ T6567] ERROR: (device loop3): dbDiscardAG: -EIO [ 133.560160][ T6567] [ 133.578851][ T6567] ERROR: (device loop3): remounting filesystem as read-only [ 133.595538][ T6567] attempt to access beyond end of device [ 133.595538][ T6567] loop3: rw=2051, want=2637824, limit=32768 [ 133.609692][ T6567] JFS: sb_issue_discard(ffff88807ab40000, 328704, 1024, GFP_NOFS, 0) = -5 => failed! [ 133.620039][ T6567] blkno = 50400, nblocks = 400 [ 133.665126][ T6567] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 133.665126][ T6567] [ 134.212405][ T6614] set_capacity_and_notify: 2 callbacks suppressed [ 134.212421][ T6614] loop1: detected capacity change from 0 to 2048 [ 134.249008][ T6614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.413035][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 134.921328][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 135.054855][ T6639] loop3: detected capacity change from 0 to 40427 [ 135.090847][ T6639] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 135.127149][ T6639] F2FS-fs (loop3): invalid crc value [ 135.194794][ T6639] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.290166][ T6666] loop1: detected capacity change from 0 to 128 [ 135.312707][ T6639] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 135.443910][ T6679] loop4: detected capacity change from 0 to 512 [ 135.451370][ T6666] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.462629][ T6666] ext4 filesystem being mounted at /229/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.499897][ T6679] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 135.509611][ T6679] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.644709][ T6679] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,barrier=0x0000000000000003,nombcache,jqfmt=vfsold,nouid32,,errors=continue. Quota mode: writeback. [ 135.714079][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 135.730805][ T6679] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.753547][ T6687] device gretap0 entered promiscuous mode [ 135.809674][ T6679] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #2: comm syz.4.922: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 136.111930][ T6706] syz.4.932 uses obsolete (PF_INET,SOCK_PACKET) [ 136.211777][ T4229] Bluetooth: hci4: command 0x0411 tx timeout [ 136.226469][ T6712] loop1: detected capacity change from 0 to 512 [ 136.235355][ T6716] tipc: Started in network mode [ 136.257431][ T6716] tipc: Node identity ac14140f, cluster identity 4711 [ 136.276100][ T6716] tipc: Enabled bearer , priority 10 [ 136.616251][ T6729] loop0: detected capacity change from 0 to 24 [ 136.696802][ T6729] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 136.709006][ T6731] loop1: detected capacity change from 0 to 256 [ 136.721928][ T6733] loop4: detected capacity change from 0 to 164 [ 136.742156][ T6729] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 136.782297][ T6731] exfat: Deprecated parameter 'utf8' [ 136.787655][ T6731] exfat: Deprecated parameter 'utf8' [ 136.808118][ T6731] exfat: Deprecated parameter 'utf8' [ 136.814524][ T6710] loop2: detected capacity change from 0 to 40427 [ 136.830336][ T6733] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 136.858034][ T6731] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 136.978181][ T6710] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 136.989670][ T6710] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 137.055626][ T6710] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.267486][ T6752] loop0: detected capacity change from 0 to 1024 [ 137.315839][ T6710] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 137.336518][ T6710] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.393819][ T5322] tipc: Node number set to 2886997007 [ 137.684544][ T6768] tipc: Enabled bearer , priority 10 [ 137.916063][ T6780] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.968'. [ 137.965887][ T6780] bridge_slave_1: default FDB implementation only supports local addresses [ 138.036097][ T4229] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.331900][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 138.471954][ T23] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.633194][ T4229] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 138.645906][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.666232][ T4229] usb 2-1: Product: syz [ 138.678310][ T4229] usb 2-1: Manufacturer: syz [ 138.722197][ T4229] usb 2-1: SerialNumber: syz [ 138.731783][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 138.757979][ T4229] usb 2-1: config 0 descriptor?? [ 138.770159][ T1108] tipc: Node number set to 2886997031 [ 138.896027][ T6825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 138.928265][ T6825] System zones: 1-3, 19-19, 35-36 [ 138.968002][ T6825] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 139.025919][ T6825] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.036586][ T4229] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 139.045300][ T23] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 139.055212][ T4229] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71 [ 139.073341][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.082787][ T23] usb 5-1: Product: syz [ 139.087008][ T23] usb 5-1: Manufacturer: syz [ 139.096822][ T4229] usb 2-1: USB disconnect, device number 4 [ 139.109611][ T23] usb 5-1: SerialNumber: syz [ 139.165103][ T23] usb 5-1: config 0 descriptor?? [ 139.223929][ T23] gspca_main: spca508-2.14.0 probing 041e:4018 [ 139.343610][ T6809] XFS (loop2): Mounting V5 Filesystem [ 139.441772][ T23] gspca_spca508: reg_read err -32 [ 139.557767][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 139.635466][ T6809] XFS (loop2): Ending clean mount [ 139.669055][ T6874] usb usb8: usbfs: process 6874 (syz.0.998) did not claim interface 0 before use [ 139.711775][ T23] gspca_spca508: reg_read err -71 [ 139.732273][ T23] gspca_spca508: reg_read err -71 [ 139.761783][ T23] gspca_spca508: reg_read err -71 [ 139.776988][ T4184] XFS (loop2): Unmounting Filesystem [ 139.791805][ T23] gspca_spca508: reg write: error -71 [ 139.800152][ T23] spca508: probe of 5-1:0.0 failed with error -71 [ 139.897488][ T23] usb 5-1: USB disconnect, device number 8 [ 140.070125][ T6885] set_capacity_and_notify: 3 callbacks suppressed [ 140.070141][ T6885] loop3: detected capacity change from 0 to 4096 [ 140.083446][ T4200] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 140.104616][ T6885] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 140.159674][ T6885] ntfs: volume version 3.1. [ 140.221992][ T6885] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii. You might want to try to use the mount option nls=utf8. [ 140.279257][ T6885] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 140.499667][ T6904] loop2: detected capacity change from 0 to 1024 [ 140.515473][ T4200] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.546894][ T4200] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.570969][ T6899] loop4: detected capacity change from 0 to 4096 [ 140.582261][ T4200] usb 2-1: config 0 interface 0 has no altsetting 0 [ 140.598045][ T4200] usb 2-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00 [ 140.612244][ T4200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.638166][ T6899] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 140.659356][ T4200] usb 2-1: config 0 descriptor?? [ 140.691919][ T6904] hfsplus: bad catalog entry type [ 140.703604][ T6899] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 140.737176][ T6889] loop0: detected capacity change from 0 to 32768 [ 140.797320][ T6909] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.908094][ T6889] JBD2: Ignoring recovery information on journal [ 140.923214][ T6889] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 75 has bad extent record (0, 304, 0) [ 140.945972][ T6914] loop2: detected capacity change from 0 to 1024 [ 140.997171][ T6889] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 141.007382][ T6889] (syz.0.1004,6889,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 141.015238][ T6889] (syz.0.1004,6889,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 141.026055][ T6889] (syz.0.1004,6889,1):ocfs2_bmap:488 ERROR: get_blocks() failed, block = 32 [ 141.035410][ T6889] (syz.0.1004,6889,1):ocfs2_bmap:489 ERROR: status = -30 [ 141.040314][ T6914] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.077156][ T6889] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 141.103287][ T6889] JBD2: bad block at offset 32 [ 141.167190][ T4200] wacom 0003:056A:0144.0008: Unknown device_type for 'HID 056a:0144'. Ignoring. [ 141.180435][ T6889] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 141.324019][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 141.399136][ T23] usb 2-1: USB disconnect, device number 5 [ 141.569650][ T6936] netlink: 'syz.4.1019': attribute type 30 has an invalid length. [ 141.582335][ T5322] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.681807][ T4443] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 141.714834][ T6948] loop0: detected capacity change from 0 to 8 [ 141.746447][ T6948] Major/Minor mismatch, older Squashfs 2.0 filesystems are unsupported [ 141.823888][ T6948] loop0: detected capacity change from 0 to 1024 [ 141.831885][ T5322] usb 3-1: Using ep0 maxpacket: 16 [ 141.842327][ T6948] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 141.860522][ T6948] hfsplus: filesystem is marked journaled, leaving read-only. [ 141.941787][ T4200] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.965208][ T5322] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 141.978855][ T5322] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 141.997845][ T5322] usb 3-1: config 0 interface 0 has no altsetting 0 [ 142.010622][ T5322] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 142.035948][ T5322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.064811][ T4443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.081091][ T5322] usb 3-1: config 0 descriptor?? [ 142.103091][ T4443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.109266][ T6958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1028'. [ 142.118029][ T4443] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.141846][ T6958] netlink: del zone limit has 8 unknown bytes [ 142.156131][ T4443] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.170153][ T4443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.170712][ T6960] loop0: detected capacity change from 0 to 64 [ 142.192515][ T4443] usb 4-1: config 0 descriptor?? [ 142.342001][ T4200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.355035][ T4200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.365448][ T4200] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.386095][ T4200] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.405780][ T4200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.421212][ T4200] usb 5-1: config 0 descriptor?? [ 142.585459][ T5322] usb 3-1: USB disconnect, device number 7 [ 142.640627][ T6981] program syz.0.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.678382][ T4443] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 142.748788][ T4443] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 142.842125][ T6976] loop1: detected capacity change from 0 to 32768 [ 142.906119][ T4200] plantronics 0003:047F:FFFF.000A: item fetching failed at offset 12/15 [ 142.907139][ T4443] usb 4-1: USB disconnect, device number 10 [ 142.923529][ T4200] plantronics 0003:047F:FFFF.000A: parse failed [ 142.948701][ T4200] plantronics: probe of 0003:047F:FFFF.000A failed with error -22 [ 143.129122][ T23] usb 5-1: USB disconnect, device number 9 [ 143.187022][ T6996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1047'. [ 143.461250][ T7007] loop0: detected capacity change from 0 to 4096 [ 143.561979][ T7015] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.592385][ T7014] exfat: Deprecated parameter 'namecase' [ 143.627768][ T7014] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 144.051959][ T4229] Bluetooth: hci2: command 0x0811 tx timeout [ 144.083842][ T7019] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 144.111776][ T7019] REISERFS (device loop0): using ordered data mode [ 144.129258][ T7019] reiserfs: using flush barriers [ 144.177347][ T7019] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.239096][ T7019] REISERFS (device loop0): checking transaction log (loop0) [ 144.292731][ T7019] REISERFS (device loop0): Using r5 hash to sort names [ 144.321205][ T7023] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1059 (7023) [ 144.324952][ T7019] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 144.445000][ T7023] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 144.446118][ T7045] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.508007][ T7008] XFS (loop1): Mounting V5 Filesystem [ 144.518472][ T7023] BTRFS info (device loop3): setting nodatacow, compression disabled [ 144.530380][ T7023] BTRFS info (device loop3): force clearing of disk cache [ 144.538467][ T7023] BTRFS info (device loop3): enabling ssd optimizations [ 144.546480][ T7023] BTRFS info (device loop3): using spread ssd allocation scheme [ 144.554521][ T7023] BTRFS info (device loop3): turning off barriers [ 144.561942][ T7023] BTRFS info (device loop3): disabling free space tree [ 144.569114][ T7023] BTRFS info (device loop3): not using ssd optimizations [ 144.577498][ T7023] BTRFS info (device loop3): not using spread ssd allocation scheme [ 144.586077][ T7023] BTRFS info (device loop3): has skinny extents [ 144.756384][ T7008] XFS (loop1): Ending clean mount [ 144.832014][ T7038] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 144.840365][ T7038] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 144.888609][ T7008] XFS (loop1): Quotacheck needed: Please wait. [ 144.910658][ T7023] BTRFS info (device loop3): clearing free space tree [ 144.922940][ T7023] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.945808][ T7023] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.037804][ T7038] F2FS-fs (loop2): invalid crc value [ 145.045216][ T7008] XFS (loop1): Quotacheck: Done. [ 145.113482][ T7038] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.240226][ T4192] XFS (loop1): Unmounting Filesystem [ 145.462250][ T7038] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 145.520874][ T7038] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.643898][ T7090] set_capacity_and_notify: 6 callbacks suppressed [ 145.643914][ T7090] loop0: detected capacity change from 0 to 2048 [ 145.722398][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1079'. [ 145.795243][ T7090] UDF-fs: error (device loop0): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0) [ 145.860560][ T7090] UDF-fs: Scanning with blocksize 512 failed [ 145.899935][ T7090] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 145.941700][ T7090] UDF-fs: Scanning with blocksize 1024 failed [ 146.049119][ T7090] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 146.095059][ T7090] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 146.111782][ T7090] UDF-fs: Scanning with blocksize 2048 failed [ 146.136749][ T7090] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 146.161110][ T7090] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 146.212018][ T7090] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 146.229935][ T7090] UDF-fs: Scanning with blocksize 4096 failed [ 146.244927][ T7090] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 146.751688][ T4229] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 146.778080][ T7099] loop3: detected capacity change from 0 to 40427 [ 146.817450][ T7099] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 146.849718][ T7099] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 146.889426][ T7099] F2FS-fs (loop3): invalid crc value [ 146.942120][ T7099] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.024716][ T7099] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 147.036031][ T7099] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 147.045112][ T7120] loop0: detected capacity change from 0 to 32768 [ 147.091339][ T7126] attempt to access beyond end of device [ 147.091339][ T7126] loop3: rw=2049, want=45104, limit=40427 [ 147.124413][ T7120] jfs_mkdir: dtInsert returned -EIO [ 147.138244][ T7120] ERROR: (device loop0): jfs_mkdir: [ 147.138244][ T7120] [ 147.175833][ T7120] ERROR: (device loop0): remounting filesystem as read-only [ 147.184070][ T4229] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 147.193740][ T7119] loop1: detected capacity change from 0 to 32768 [ 147.201989][ T4229] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.215216][ T7120] jfs_lookup: iget failed on inum 4 [ 147.223711][ T7120] jfs_lookup: iget failed on inum 4 [ 147.230316][ T4229] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.266700][ T4229] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 147.281460][ T4229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.295498][ T4229] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 147.310610][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.338915][ T4229] usb 5-1: config 0 descriptor?? [ 147.481002][ T7119] XFS (loop1): Mounting V5 Filesystem [ 147.606453][ T7119] XFS (loop1): Ending clean mount [ 147.614681][ T7119] XFS (loop1): Quotacheck needed: Please wait. [ 147.642759][ T4230] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.701831][ T7119] XFS (loop1): Quotacheck: Done. [ 147.791317][ T4192] XFS (loop1): Unmounting Filesystem [ 147.823965][ T4229] hid-alps 0003:044E:120C.000B: unknown main item tag 0x2 [ 147.857525][ T4229] hid-alps 0003:044E:120C.000B: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.4-1/input0 [ 148.011853][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.028720][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.030496][ T23] usb 5-1: USB disconnect, device number 10 [ 148.059023][ T4230] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 148.076699][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.099940][ T7169] loop3: detected capacity change from 0 to 512 [ 148.123223][ T4230] usb 3-1: config 0 descriptor?? [ 148.181667][ T7169] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.195849][ T7169] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.304882][ T7169] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1108: bg 0: block 145: padding at end of block bitmap is not set [ 148.401362][ T7176] loop1: detected capacity change from 0 to 4096 [ 148.489556][ T7176] ntfs: volume version 3.1. [ 148.593743][ T4230] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 148.614070][ T4230] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 148.640775][ T4230] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 148.678248][ T4230] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 148.693018][ T7183] loop4: detected capacity change from 0 to 2048 [ 148.698783][ T4230] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 148.719022][ T4230] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 148.723115][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'. [ 148.746385][ T4230] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 148.767085][ T4230] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 148.785329][ T7183] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002] [ 148.802036][ T4230] arvo 0003:1E7D:30D4.000C: couldn't init struct arvo_device [ 148.819773][ T4230] arvo 0003:1E7D:30D4.000C: couldn't install keyboard [ 148.824040][ T7183] System zones: 0-4 [ 148.844494][ T4230] arvo: probe of 0003:1E7D:30D4.000C failed with error -71 [ 148.854767][ T4230] usb 3-1: USB disconnect, device number 8 [ 148.912786][ T7183] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,debug,journal_dev=0x0000000000000001,init_itable,,errors=continue. Quota mode: none. [ 148.927898][ T7195] fido_id[7195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 148.939603][ T7197] futex_wake_op: syz.3.1118 tries to shift op by 36; fix this program [ 148.982392][ T7183] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.069101][ T7183] fs-verity: sha256 using implementation "sha256-avx2" [ 149.078705][ T7204] process 'syz.3.1121' launched './file0' with NULL argv: empty string added [ 149.109880][ T7183] fs-verity (loop4, inode 18): fs-verity keyring is empty, rejecting signed file! [ 149.487865][ T7223] No such timeout policy "syz1" [ 149.704434][ T7208] loop1: detected capacity change from 0 to 32768 [ 150.102073][ T7256] loop4: detected capacity change from 0 to 512 [ 150.171939][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 150.238342][ T7256] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.263739][ T7256] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.610189][ T23] usb 4-1: config 0 has an invalid interface number: 221 but max is 0 [ 150.625210][ T23] usb 4-1: config 0 has no interface number 0 [ 150.640152][ T7274] loop2: detected capacity change from 0 to 256 [ 150.641644][ T23] usb 4-1: config 0 interface 221 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.666869][ T23] usb 4-1: config 0 interface 221 has no altsetting 0 [ 150.675558][ T23] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=10.00 [ 150.741278][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.778379][ T23] usb 4-1: config 0 descriptor?? [ 150.931644][ T4446] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 151.057562][ T7282] netlink: 'syz.1.1157': attribute type 4 has an invalid length. [ 151.067437][ T7282] netlink: 'syz.1.1157': attribute type 8 has an invalid length. [ 151.075684][ T7282] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.1157'. [ 151.139614][ T7284] loop2: detected capacity change from 0 to 1024 [ 151.244722][ T23] uclogic 0003:5543:0522.000D: unknown main item tag 0x2 [ 151.270142][ T23] uclogic 0003:5543:0522.000D: No inputs registered, leaving [ 151.292903][ T23] uclogic 0003:5543:0522.000D: hidraw0: USB HID v0.02 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input221 [ 151.301892][ T4446] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.323938][ T1300] hfsplus: b-tree write err: -5, ino 25 [ 151.329787][ T1300] hfsplus: b-tree write err: -5, ino 4 [ 151.339840][ T1300] hfsplus: b-tree write err: -5, ino 2 [ 151.342265][ T4446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.385019][ T4446] usb 5-1: config 0 descriptor?? [ 151.426570][ T4446] cp210x 5-1:0.0: cp210x converter detected [ 151.441975][ T7299] loop2: detected capacity change from 0 to 256 [ 151.503239][ T4229] usb 4-1: USB disconnect, device number 11 [ 151.534136][ T7301] loop1: detected capacity change from 0 to 4096 [ 151.566680][ T7301] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 151.617863][ T7301] ntfs3: loop1: failed to convert "c46c" to cp850 [ 151.668593][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'. [ 151.815308][ T7315] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1172'. [ 151.856450][ T4446] usb 5-1: cp210x converter now attached to ttyUSB0 [ 152.059761][ T4443] usb 5-1: USB disconnect, device number 11 [ 152.077829][ T4443] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 152.126678][ T4443] cp210x 5-1:0.0: device disconnected [ 152.213869][ T7328] loop2: detected capacity change from 0 to 4096 [ 152.471038][ T7339] loop0: detected capacity change from 0 to 4096 [ 152.539256][ T4184] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 152.543450][ T7345] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 152.559134][ T4184] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 152.566937][ T7339] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 152.677569][ T7339] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 152.725965][ T7339] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 152.734925][ T7350] loop4: detected capacity change from 0 to 256 [ 152.770549][ T7351] ntfs3: Volume is dirty and "force" flag is not set! [ 152.852398][ T7350] exfat: Deprecated parameter 'utf8' [ 152.857765][ T7350] exfat: Deprecated parameter 'namecase' [ 152.862799][ T7329] loop3: detected capacity change from 0 to 32768 [ 152.880497][ T7350] exfat: Deprecated parameter 'utf8' [ 152.919911][ T7350] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 153.157119][ T7376] loop0: detected capacity change from 0 to 128 [ 153.167741][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1200'. [ 153.196866][ T7379] loop1: detected capacity change from 0 to 128 [ 153.221538][ T7381] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.247490][ T7376] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 153.274820][ T7376] hpfs: filesystem error: improperly stopped [ 153.287402][ T7379] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 153.288504][ T7376] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 153.344004][ T7376] hpfs: You really don't want any checks? You are crazy... [ 153.375518][ T7376] hpfs: hpfs_map_sector(): read error [ 153.384043][ T7376] hpfs: code page support is disabled [ 153.410484][ T7376] hpfs: hpfs_map_4sectors(): unaligned read [ 153.421656][ T7376] hpfs: hpfs_map_4sectors(): unaligned read [ 153.444024][ T7376] hpfs: filesystem error: unable to find root dir [ 153.994316][ T7410] loop3: detected capacity change from 0 to 512 [ 154.008712][ T7412] netlink: 'syz.1.1219': attribute type 29 has an invalid length. [ 154.017865][ T7412] netlink: 'syz.1.1219': attribute type 29 has an invalid length. [ 154.029063][ T7412] netlink: 'syz.1.1219': attribute type 29 has an invalid length. [ 154.064445][ T7410] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.116594][ T7410] EXT4-fs (loop3): 1 truncate cleaned up [ 154.158559][ T7410] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,bsdgroups,noload,,errors=continue. Quota mode: none. [ 154.221800][ T4200] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 154.500034][ T7423] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.651862][ T4200] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 154.671704][ T4200] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.714918][ T4200] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.738193][ T4200] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 154.766916][ T4200] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.796420][ T4200] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 154.809407][ T7443] exfat: Deprecated parameter 'utf8' [ 154.816105][ T4200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.818086][ T7443] exfat: Deprecated parameter 'utf8' [ 154.837854][ T7443] exfat: Deprecated parameter 'utf8' [ 154.841507][ T4200] usb 3-1: config 0 descriptor?? [ 154.901925][ T7443] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 155.238408][ T7441] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 155.259773][ T7441] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 155.296656][ T7441] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.325785][ T4200] ryos 0003:1E7D:3138.000E: item fetching failed at offset 4/5 [ 155.342233][ T4200] ryos 0003:1E7D:3138.000E: parse failed [ 155.351997][ T4200] ryos: probe of 0003:1E7D:3138.000E failed with error -22 [ 155.391709][ T4230] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.410594][ T7441] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 155.422163][ T7441] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 155.535647][ T4200] usb 3-1: USB disconnect, device number 9 [ 155.574803][ T7445] XFS (loop4): Mounting V5 Filesystem [ 155.641822][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 155.650488][ T7445] XFS (loop4): Ending clean mount [ 155.761981][ T4230] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 155.780548][ T4230] usb 2-1: config 0 has no interface number 0 [ 155.809050][ T4230] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.830337][ T4230] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.846779][ T4230] usb 2-1: config 0 interface 85 has no altsetting 0 [ 155.856179][ T4199] XFS (loop4): Unmounting Filesystem [ 156.021887][ T4230] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 156.031057][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.039384][ T4230] usb 2-1: Product: syz [ 156.044266][ T4230] usb 2-1: Manufacturer: syz [ 156.049665][ T4230] usb 2-1: SerialNumber: syz [ 156.072297][ T4230] usb 2-1: config 0 descriptor?? [ 156.271787][ T4443] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 156.331821][ T4230] appletouch 2-1:0.85: Failed to read mode from device. [ 156.338940][ T4230] appletouch: probe of 2-1:0.85 failed with error -5 [ 156.522083][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 156.595754][ T4230] usb 2-1: USB disconnect, device number 6 [ 156.631979][ T4443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.651284][ T4443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.662260][ T4443] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.676131][ T4443] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.685584][ T4443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.704024][ T4443] usb 4-1: config 0 descriptor?? [ 156.742432][ T7499] set_capacity_and_notify: 5 callbacks suppressed [ 156.742447][ T7499] loop2: detected capacity change from 0 to 8192 [ 156.871408][ T7499] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 156.882623][ T7499] REISERFS (device loop2): using ordered data mode [ 156.889188][ T7499] reiserfs: using flush barriers [ 156.901485][ T7499] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.926152][ T7499] REISERFS (device loop2): checking transaction log (loop2) [ 156.937369][ T7499] REISERFS (device loop2): Using r5 hash to sort names [ 156.949416][ T7499] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 156.958992][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 156.969013][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 157.112971][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.122738][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 157.145185][ T23] usb 5-1: SerialNumber: syz [ 157.192950][ T23] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 157.199063][ T4443] plantronics 0003:047F:FFFF.000F: unbalanced collection at end of report description [ 157.227502][ T4443] plantronics 0003:047F:FFFF.000F: parse failed [ 157.239910][ T4443] plantronics: probe of 0003:047F:FFFF.000F failed with error -22 [ 157.401160][ T4230] usb 4-1: USB disconnect, device number 12 [ 157.566442][ T7526] loop2: detected capacity change from 0 to 2048 [ 157.610705][ T7528] loop1: detected capacity change from 0 to 256 [ 157.653646][ T7526] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,dioread_lock,barrier,journal_ioprio=0x0000000000000007,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 157.675852][ T7526] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.735198][ T7528] FAT-fs (loop1): Directory bread(block 64) failed [ 157.765608][ T7528] FAT-fs (loop1): Directory bread(block 65) failed [ 157.773417][ T7528] FAT-fs (loop1): Directory bread(block 66) failed [ 157.780659][ T7528] FAT-fs (loop1): Directory bread(block 67) failed [ 157.788869][ T7528] FAT-fs (loop1): Directory bread(block 68) failed [ 157.795775][ T7528] FAT-fs (loop1): Directory bread(block 69) failed [ 157.802685][ T7528] FAT-fs (loop1): Directory bread(block 70) failed [ 157.809239][ T7528] FAT-fs (loop1): Directory bread(block 71) failed [ 157.821767][ T7528] FAT-fs (loop1): Directory bread(block 72) failed [ 157.828530][ T7528] FAT-fs (loop1): Directory bread(block 73) failed [ 157.860152][ T7528] attempt to access beyond end of device [ 157.860152][ T7528] loop1: rw=524288, want=1164, limit=256 [ 157.876595][ T7528] attempt to access beyond end of device [ 157.876595][ T7528] loop1: rw=0, want=1164, limit=256 [ 157.911055][ T26] audit: type=1800 audit(1773155872.619:17): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1267" name="memory.events" dev="loop1" ino=1048683 res=0 errno=0 [ 157.961034][ T4200] usb 5-1: USB disconnect, device number 12 [ 158.081927][ T7545] loop1: detected capacity change from 0 to 64 [ 158.111215][ T7541] loop4: detected capacity change from 0 to 4096 [ 158.240344][ T7548] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.337694][ T7541] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 158.368908][ T7541] Remounting filesystem read-only [ 158.433771][ T4199] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 158.593069][ T7558] loop4: detected capacity change from 0 to 4096 [ 158.627004][ T7558] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 158.707067][ T7558] ntfs3: loop4: Failed to load $Extend. [ 158.736045][ T7552] loop1: detected capacity change from 0 to 32768 [ 159.192048][ T7574] loop4: detected capacity change from 0 to 1024 [ 159.229309][ T7556] loop2: detected capacity change from 0 to 32768 [ 159.321176][ T7556] JBD2: Ignoring recovery information on journal [ 159.397493][ T154] hfsplus: b-tree write err: -5, ino 25 [ 159.408488][ T7556] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 159.437035][ T154] hfsplus: b-tree write err: -5, ino 4 [ 159.443056][ T4200] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.450890][ T154] hfsplus: b-tree write err: -5, ino 2 [ 159.471738][ T154] hfsplus: b-tree write err: -5, ino 17 [ 159.512047][ T4184] ocfs2: Unmounting device (7,2) on (node local) [ 159.711765][ T4200] usb 2-1: Using ep0 maxpacket: 8 [ 159.727196][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1297'. [ 159.968569][ T7606] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1303'. [ 160.021953][ T4200] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 160.035789][ T4200] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=239 [ 160.068404][ T7586] loop3: detected capacity change from 0 to 32768 [ 160.069653][ T4200] usb 2-1: Product: syz [ 160.093906][ T4200] usb 2-1: Manufacturer: syz [ 160.111480][ T4200] usb 2-1: SerialNumber: syz [ 160.124827][ T7586] [ 160.124827][ T7586] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.124827][ T7586] [ 160.132455][ T4200] usb 2-1: config 0 descriptor?? [ 160.203892][ T4200] gspca_main: sq905-2.14.0 probing 2770:9120 [ 160.292542][ T7586] blkno = 0, nblocks = 40 [ 160.304033][ T7586] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 160.304033][ T7586] [ 160.357793][ T7586] ERROR: (device loop3): remounting filesystem as read-only [ 160.418133][ T7614] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 160.489679][ T7614] REISERFS (device loop0): using ordered data mode [ 160.516873][ T7614] reiserfs: using flush barriers [ 160.528457][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 160.554763][ T7614] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 160.620914][ T7614] REISERFS (device loop0): checking transaction log (loop0) [ 160.639301][ T7614] REISERFS (device loop0): Using r5 hash to sort names [ 160.660374][ T7614] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 160.705678][ T7614] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 160.873319][ T4200] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 160.885897][ T4200] sq905: probe of 2-1:0.0 failed with error -71 [ 160.925300][ T4200] usb 2-1: USB disconnect, device number 7 [ 161.138895][ T4229] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 161.199197][ T7646] hfsplus: bad catalog entry type [ 161.299049][ T6907] hfsplus: b-tree write err: -5, ino 25 [ 161.317414][ T6907] hfsplus: b-tree write err: -5, ino 4 [ 161.341738][ T6907] hfsplus: b-tree write err: -5, ino 2 [ 161.411799][ T4229] usb 5-1: Using ep0 maxpacket: 32 [ 161.468890][ T7659] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 161.552337][ T4229] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 161.562932][ T4229] usb 5-1: config 0 has no interface number 0 [ 161.582671][ T4229] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.601647][ T4229] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 161.663424][ T4229] usb 5-1: config 0 interface 196 has no altsetting 0 [ 161.853900][ T4229] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 161.892532][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.910850][ T4229] usb 5-1: Product: syz [ 161.920192][ T4229] usb 5-1: Manufacturer: syz [ 161.937117][ T4229] usb 5-1: SerialNumber: syz [ 161.950374][ T4229] usb 5-1: config 0 descriptor?? [ 162.182516][ T7652] set_capacity_and_notify: 4 callbacks suppressed [ 162.182532][ T7652] loop2: detected capacity change from 0 to 32768 [ 162.267238][ T4229] ipheth 5-1:0.196: Unable to find endpoints [ 162.288682][ T7707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1344'. [ 162.308557][ T4229] usb 5-1: USB disconnect, device number 13 [ 162.364909][ T26] audit: type=1326 audit(1773155877.079:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.1.1345" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f225431b799 code=0x0 [ 162.402847][ T7652] XFS (loop2): Mounting V5 Filesystem [ 162.515244][ T7652] XFS (loop2): Ending clean mount [ 162.644408][ T4184] XFS (loop2): Unmounting Filesystem [ 162.894012][ T7743] loop3: detected capacity change from 0 to 512 [ 162.959231][ T7750] loop4: detected capacity change from 0 to 1024 [ 163.025806][ T7743] EXT4-fs (loop3): 1 orphan inode deleted [ 163.050518][ T7750] hfsplus: xattr exists yet [ 163.050567][ T7743] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=remount-ro,debug_want_extra_isize=0x0000000000000036,user_xattr,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none. [ 163.425747][ T7770] loop4: detected capacity change from 0 to 128 [ 163.429130][ T7761] loop1: detected capacity change from 0 to 4096 [ 163.510400][ T7770] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 163.531478][ T7775] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.608248][ T7770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.922736][ T26] audit: type=1326 audit(1773155878.639:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.3.1372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb82278d799 code=0x0 [ 164.040271][ T7796] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 164.233868][ T7808] loop2: detected capacity change from 0 to 2048 [ 164.301096][ T7814] loop1: detected capacity change from 0 to 2048 [ 164.348305][ T7808] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.372116][ T7808] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.372419][ T7814] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 164.436787][ T4482] udevd[4482]: incorrect nilfs2 checksum on /dev/loop1 [ 164.482018][ T4177] udevd[4177]: incorrect nilfs2 checksum on /dev/loop1 [ 164.500930][ T7822] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.669873][ T7826] loop2: detected capacity change from 0 to 64 [ 165.032310][ T7834] loop3: detected capacity change from 0 to 8192 [ 165.098981][ T7821] loop4: detected capacity change from 0 to 32768 [ 165.156965][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 165.298272][ T7821] XFS (loop4): Mounting V5 Filesystem [ 165.367415][ T7821] XFS (loop4): Ending clean mount [ 165.495596][ T4199] XFS (loop4): Unmounting Filesystem [ 166.067658][ T7860] XFS (loop2): Mounting V5 Filesystem [ 166.356608][ T7860] XFS (loop2): Ending clean mount [ 166.375181][ T7860] XFS (loop2): Quotacheck needed: Please wait. [ 166.490046][ T7860] XFS (loop2): Quotacheck: Done. [ 166.583051][ T4184] XFS (loop2): Unmounting Filesystem [ 166.725846][ T7916] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: writeback. [ 166.796843][ T7916] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.1423: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 166.851921][ T7916] EXT4-fs (loop0): Remounting filesystem read-only [ 166.902987][ T7935] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.903885][ T7923] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 166.949300][ T7926] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 167.000264][ T7926] EXT4-fs (loop0): Remounting filesystem read-only [ 167.122526][ T7941] mmap: syz.0.1432 (7941): VmData 49205248 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 167.157092][ T7923] NILFS (loop3): mounting fs with errors [ 167.309741][ T7946] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1436'. [ 167.420577][ T7949] set_capacity_and_notify: 5 callbacks suppressed [ 167.420592][ T7949] loop2: detected capacity change from 0 to 256 [ 167.498818][ T7949] exfat: Deprecated parameter 'utf8' [ 167.504386][ T7949] exfat: Deprecated parameter 'utf8' [ 167.570824][ T7949] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 167.687892][ T7957] loop0: detected capacity change from 0 to 4096 [ 167.756947][ T7957] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 167.803190][ T7970] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1446'. [ 168.079069][ T7977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1451'. [ 168.187364][ T7984] loop0: detected capacity change from 0 to 256 [ 168.327623][ T7984] FAT-fs (loop0): Directory bread(block 64) failed [ 168.341786][ T7984] FAT-fs (loop0): Directory bread(block 65) failed [ 168.368057][ T7984] FAT-fs (loop0): Directory bread(block 66) failed [ 168.388545][ T7984] FAT-fs (loop0): Directory bread(block 67) failed [ 168.429389][ T7984] FAT-fs (loop0): Directory bread(block 68) failed [ 168.468029][ T7984] FAT-fs (loop0): Directory bread(block 69) failed [ 168.491354][ T7984] FAT-fs (loop0): Directory bread(block 70) failed [ 168.511791][ T7984] FAT-fs (loop0): Directory bread(block 71) failed [ 168.528874][ T7984] FAT-fs (loop0): Directory bread(block 72) failed [ 168.545834][ T7984] FAT-fs (loop0): Directory bread(block 73) failed [ 168.781939][ T7974] loop1: detected capacity change from 0 to 32768 [ 168.785480][ T7962] loop4: detected capacity change from 0 to 40427 [ 168.944935][ T7962] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 168.964872][ T7962] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 168.995391][ T7974] XFS (loop1): Mounting V5 Filesystem [ 169.035802][ T7962] F2FS-fs (loop4): invalid crc value [ 169.108590][ T7962] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 169.352684][ T8024] loop0: detected capacity change from 0 to 32768 [ 169.368829][ T7974] XFS (loop1): Ending clean mount [ 169.436326][ T4192] XFS (loop1): Unmounting Filesystem [ 169.559961][ T7962] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 169.632419][ T8024] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 169.647634][ T7962] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 169.659037][ T4200] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 169.701805][ T4200] XFS (loop0): Unmount and run xfs_repair [ 169.707586][ T4200] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 169.822763][ T26] audit: type=1800 audit(1773155884.539:20): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1443" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 169.885476][ T4200] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 169.924524][ T4200] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 10 00 ................ [ 169.966983][ T4200] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 169.981971][ T4200] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 170.011305][ T4200] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 170.038873][ T4200] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 170.057117][ T4200] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 170.069376][ T4200] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 170.082234][ T8024] XFS (loop0): metadata I/O error in "xfs_read_agf+0x252/0x510" at daddr 0x1 len 1 error 74 [ 170.179652][ T8060] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 170.199463][ T4199] attempt to access beyond end of device [ 170.199463][ T4199] loop4: rw=2049, want=45104, limit=40427 [ 170.395650][ T8063] loop3: detected capacity change from 0 to 256 [ 170.500350][ T8063] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 170.599468][ T8067] loop2: detected capacity change from 0 to 1024 [ 170.753480][ T8071] tipc: Enabled bearer , priority 4 [ 170.847488][ T8067] hfsplus: bad catalog entry type [ 170.971127][ T8076] netlink: 'syz.0.1488': attribute type 2 has an invalid length. [ 170.984061][ T4247] hfsplus: b-tree write err: -5, ino 25 [ 170.989883][ T4247] hfsplus: b-tree write err: -5, ino 4 [ 171.011840][ T4247] hfsplus: b-tree write err: -5, ino 2 [ 171.666322][ T8080] loop4: detected capacity change from 0 to 32768 [ 171.749564][ T8080] XFS (loop4): Mounting V5 Filesystem [ 171.807285][ T8100] loop2: detected capacity change from 0 to 22 [ 171.862087][ T8075] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 171.894873][ T8100] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 171.895977][ T8075] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 171.924354][ T8080] XFS (loop4): Ending clean mount [ 171.930402][ T8075] F2FS-fs (loop3): invalid crc value [ 171.995237][ T8080] XFS (loop4): Quotacheck needed: Please wait. [ 172.046971][ T8100] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 172.143432][ T8075] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 172.158719][ T8080] XFS (loop4): Quotacheck: Done. [ 172.168986][ T8082] XFS (loop1): Mounting V5 Filesystem [ 172.309503][ T4199] XFS (loop4): Unmounting Filesystem [ 172.323030][ T8082] XFS (loop1): Ending clean mount [ 172.504981][ T8075] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 172.524860][ T8075] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 172.618873][ T4192] XFS (loop1): Unmounting Filesystem [ 172.626518][ T8075] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 173.203298][ T8118] set_capacity_and_notify: 2 callbacks suppressed [ 173.203315][ T8118] loop4: detected capacity change from 0 to 4096 [ 173.258304][ T8115] loop2: detected capacity change from 0 to 40427 [ 173.331972][ T8115] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 173.335858][ T8118] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 173.352955][ T8124] loop3: detected capacity change from 0 to 128 [ 173.356612][ T8115] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 173.409939][ T8115] F2FS-fs (loop2): Found nat_bits in checkpoint [ 173.432576][ T8118] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 173.456655][ T8124] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.492208][ T8118] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 173.528022][ T8118] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 173.551089][ T8124] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.579699][ T8115] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 173.597286][ T8118] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 173.608540][ T8115] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 173.695125][ T8118] ntfs: volume version 3.1. [ 173.710617][ T8118] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 173.769525][ T8118] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 173.794019][ T154] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.809533][ T4184] attempt to access beyond end of device [ 173.809533][ T4184] loop2: rw=2049, want=45104, limit=40427 [ 173.828456][ T8118] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 173.867165][ T8118] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 173.873940][ T8133] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 173.975029][ T8133] CUSE: unknown device info "3ܟ,̘" [ 173.980889][ T8133] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 173.980889][ T8133] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 174.061756][ T8133] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 174.086204][ T8133] CUSE: DEVNAME unspecified [ 174.356590][ T8143] loop3: detected capacity change from 0 to 512 [ 174.453483][ T8143] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 174.512956][ T8143] EXT4-fs (loop3): orphan cleanup on readonly fs [ 174.519443][ T8143] EXT4-fs error (device loop3): __ext4_iget:4912: inode #11: block 8: comm syz.3.1509: invalid block [ 174.548027][ T8143] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1509: couldn't read orphan inode 11 (err -117) [ 174.557046][ T8148] loop2: detected capacity change from 0 to 512 [ 174.596030][ T8143] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.649540][ T8143] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 174.865093][ T8148] EXT4-fs (loop2): Test dummy encryption mode enabled [ 174.884678][ T8148] EXT4-fs (loop2): Test dummy encryption mode enabled [ 174.924084][ T8148] EXT4-fs error (device loop2): __ext4_iget:4912: inode #11: block 1: comm syz.2.1510: invalid block [ 174.975757][ T8148] EXT4-fs (loop2): Remounting filesystem read-only [ 175.011448][ T8148] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1510: couldn't read orphan inode 11 (err -117) [ 175.084015][ T8148] EXT4-fs (loop2): Remounting filesystem read-only [ 175.090663][ T8148] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,test_dummy_encryption,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,grpid,errors=remount-ro,abort,test_dummy_encryption,. Quota mode: none. [ 175.116681][ T8172] loop3: detected capacity change from 0 to 256 [ 175.198813][ T8176] loop1: detected capacity change from 0 to 64 [ 175.232589][ T8172] exfat: Deprecated parameter 'namecase' [ 175.333759][ T8172] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 175.689568][ T8189] loop2: detected capacity change from 0 to 64 [ 175.801998][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 175.808269][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 175.851916][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 175.860654][ T8163] loop0: detected capacity change from 0 to 32768 [ 176.180436][ T4195] syz-executor (4195) used greatest stack depth: 20080 bytes left [ 176.413717][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.440153][ T8219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1546'. [ 176.577141][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.790551][ T8235] loop4: detected capacity change from 0 to 1024 [ 176.799519][ T8236] netlink: 'syz.1.1553': attribute type 2 has an invalid length. [ 176.808833][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.832274][ T8236] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1553'. [ 176.862228][ T4443] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 176.904325][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.910026][ T8235] hfsplus: b-tree write err: -5, ino 2 [ 177.048711][ T1298] hfsplus: b-tree write err: -5, ino 25 [ 177.057026][ T1298] hfsplus: b-tree write err: -5, ino 4 [ 177.088387][ T1298] hfsplus: b-tree write err: -5, ino 2 [ 177.094553][ T1298] hfsplus: b-tree write err: -5, ino 26 [ 177.121695][ T4443] usb 3-1: Using ep0 maxpacket: 32 [ 177.251882][ T4443] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 177.267009][ T4443] usb 3-1: config 0 has no interface number 0 [ 177.274551][ T4443] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.286378][ T4443] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.297076][ T4443] usb 3-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.310999][ T4443] usb 3-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 177.323889][ T4443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.361003][ T4443] usb 3-1: config 0 descriptor?? [ 177.380982][ T154] tipc: Disabling bearer [ 177.407564][ T154] tipc: Disabling bearer [ 177.439335][ T154] tipc: Left network mode [ 177.465775][ T8231] chnl_net:caif_netlink_parms(): no params data found [ 177.563565][ T4268] Bluetooth: hci4: command 0x0405 tx timeout [ 177.796180][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.844974][ T4443] logitech-djreceiver 0003:046D:C537.0010: unknown main item tag 0x0 [ 177.873791][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.890103][ T4443] logitech-djreceiver 0003:046D:C537.0010: unknown main item tag 0x0 [ 177.903009][ T8231] device bridge_slave_0 entered promiscuous mode [ 177.919230][ T4443] logitech-djreceiver 0003:046D:C537.0010: unknown main item tag 0x0 [ 177.931004][ T4443] logitech-djreceiver 0003:046D:C537.0010: unknown main item tag 0x0 [ 177.946180][ T4443] logitech-djreceiver 0003:046D:C537.0010: unknown main item tag 0x0 [ 177.956937][ T4443] logitech-djreceiver 0003:046D:C537.0010: unknown main item tag 0x0 [ 177.970878][ T4443] logitech-djreceiver 0003:046D:C537.0010: unknown main item tag 0x0 [ 178.014504][ T4443] logitech-djreceiver 0003:046D:C537.0010: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.2-1/input4 [ 178.031755][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.039452][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.083313][ T4443] usb 3-1: USB disconnect, device number 10 [ 178.119823][ T8231] device bridge_slave_1 entered promiscuous mode [ 178.207353][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.255662][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.322872][ T8296] fido_id[8296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 178.358400][ T8231] team0: Port device team_slave_0 added [ 178.418571][ T8231] team0: Port device team_slave_1 added [ 178.502696][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.522667][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.611439][ T8314] loop1: detected capacity change from 0 to 64 [ 178.621586][ T8231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.671449][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.678693][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.704632][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.716720][ T8231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.859150][ T4200] Bluetooth: hci3: command 0x0409 tx timeout [ 178.904123][ T154] IPVS: stopping backup sync thread 5220 ... [ 178.918299][ T8231] device hsr_slave_0 entered promiscuous mode [ 178.939898][ T8231] device hsr_slave_1 entered promiscuous mode [ 178.966900][ T8231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.983128][ T8231] Cannot create hsr debugfs directory [ 179.410214][ T8344] device wlan0 entered promiscuous mode [ 179.436629][ T8343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.541892][ T4445] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 179.593107][ T154] device hsr_slave_0 left promiscuous mode [ 179.599738][ T154] device hsr_slave_1 left promiscuous mode [ 179.609373][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.617219][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.626955][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.635837][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.644324][ T154] device bridge_slave_1 left promiscuous mode [ 179.653475][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.684386][ T154] device bridge_slave_0 left promiscuous mode [ 179.690880][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.723906][ T154] device veth1_macvtap left promiscuous mode [ 179.730813][ T154] device veth0_macvtap left promiscuous mode [ 179.739036][ T154] device veth1_vlan left promiscuous mode [ 179.749684][ T154] device veth0_vlan left promiscuous mode [ 179.831926][ T4200] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 179.903986][ T4445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.928715][ T4445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.997328][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1590'. [ 180.011638][ T4445] usb 3-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 180.017904][ T8364] nbd: must specify at least one socket [ 180.020717][ T4445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.042816][ T4445] usb 3-1: config 0 descriptor?? [ 180.161466][ T8368] loop1: detected capacity change from 0 to 2048 [ 180.252088][ T4200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.273506][ T4200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.287409][ T4200] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 180.302274][ T4200] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 180.311507][ T4200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.327470][ T4200] usb 5-1: config 0 descriptor?? [ 180.340966][ T154] team0 (unregistering): Port device team_slave_1 removed [ 180.374730][ T154] team0 (unregistering): Port device team_slave_0 removed [ 180.414272][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.440001][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.453390][ T8370] loop1: detected capacity change from 0 to 2048 [ 180.481784][ T8370] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 180.491422][ T8370] NILFS (loop1): mounting unchecked fs [ 180.501372][ T8366] loop0: detected capacity change from 0 to 32768 [ 180.530670][ T4482] udevd[4482]: incorrect nilfs2 checksum on /dev/loop1 [ 180.548076][ T4445] hid-generic 0003:0925:8066.0011: unbalanced collection at end of report description [ 180.578741][ T4445] hid-generic: probe of 0003:0925:8066.0011 failed with error -22 [ 180.602243][ T8370] NILFS (loop1): recovery complete [ 180.613041][ T8371] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.747242][ T4445] usb 3-1: USB disconnect, device number 11 [ 180.800791][ T154] bond0 (unregistering): Released all slaves [ 180.842448][ T4200] kovaplus 0003:1E7D:2D50.0012: item fetching failed at offset 4/5 [ 180.862362][ T4200] kovaplus 0003:1E7D:2D50.0012: parse failed [ 180.868437][ T4200] kovaplus: probe of 0003:1E7D:2D50.0012 failed with error -22 [ 180.931885][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 181.011033][ T8231] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.022281][ T23] usb 5-1: USB disconnect, device number 14 [ 181.039348][ T8383] loop1: detected capacity change from 0 to 256 [ 181.068266][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'. [ 181.092179][ T8231] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.124602][ T8231] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.165356][ T8231] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.225483][ T8387] program syz.0.1601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.451065][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.498692][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.549259][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.594309][ T8231] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.680714][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.685069][ T4443] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.702367][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.737036][ T405] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.744196][ T405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.800090][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.826781][ T8413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.914789][ T8419] device ip6gretap1 entered promiscuous mode [ 181.949040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.980537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.981631][ T4443] usb 2-1: Using ep0 maxpacket: 8 [ 182.019354][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.026519][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.077299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.132854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.172360][ T4443] usb 2-1: unable to get BOS descriptor or descriptor too short [ 182.176534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.227058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.251905][ T4443] usb 2-1: config 6 has an invalid interface number: 236 but max is 0 [ 182.265422][ T4443] usb 2-1: config 6 has no interface number 0 [ 182.270990][ T8231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.284239][ T4443] usb 2-1: config 6 interface 236 has no altsetting 0 [ 182.323497][ T8231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.353012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.367341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.396341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.415162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.440373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.451724][ T4443] usb 2-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=e4.e9 [ 182.460939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.478397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.489284][ T4443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.515296][ T4443] usb 2-1: Product: syz [ 182.520954][ T4443] usb 2-1: Manufacturer: syz [ 182.551870][ T4443] usb 2-1: SerialNumber: syz [ 182.585403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.793632][ T8424] loop2: detected capacity change from 0 to 32768 [ 182.870588][ T8461] loop0: detected capacity change from 0 to 8 [ 182.909153][ T8424] XFS (loop2): Mounting V5 Filesystem [ 182.935790][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.943389][ T4443] usb 2-1: USB disconnect, device number 8 [ 182.979984][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.001921][ T4200] Bluetooth: hci3: command 0x040f tx timeout [ 183.078944][ T8231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.129405][ T8424] XFS (loop2): Ending clean mount [ 183.371961][ T4184] XFS (loop2): Unmounting Filesystem [ 183.522540][ T8452] loop4: detected capacity change from 0 to 32768 [ 183.611925][ T8490] loop0: detected capacity change from 0 to 256 [ 183.646541][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.712632][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.727797][ T8490] FAT-fs (loop0): Directory bread(block 64) failed [ 183.771879][ T8490] FAT-fs (loop0): Directory bread(block 65) failed [ 183.778869][ T8490] FAT-fs (loop0): Directory bread(block 66) failed [ 183.811525][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.811936][ T8490] FAT-fs (loop0): Directory bread(block 67) failed [ 183.832210][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.861753][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.881765][ T8490] FAT-fs (loop0): Directory bread(block 68) failed [ 183.888344][ T8490] FAT-fs (loop0): Directory bread(block 69) failed [ 183.921969][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.942161][ T8490] FAT-fs (loop0): Directory bread(block 70) failed [ 183.942651][ T8231] device veth0_vlan entered promiscuous mode [ 183.948728][ T8490] FAT-fs (loop0): Directory bread(block 71) failed [ 183.962472][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 184.018062][ T8231] device veth1_vlan entered promiscuous mode [ 184.041701][ T8490] FAT-fs (loop0): Directory bread(block 72) failed [ 184.111723][ T8490] FAT-fs (loop0): Directory bread(block 73) failed [ 184.165994][ T8498] loop4: detected capacity change from 0 to 4096 [ 184.180918][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.203056][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.242062][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.301114][ T8498] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 184.314471][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.384493][ T8231] device veth0_macvtap entered promiscuous mode [ 184.402912][ T8505] tipc: Started in network mode [ 184.407939][ T8505] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 184.442229][ T8505] tipc: Enabled bearer , priority 10 [ 184.457190][ T8231] device veth1_macvtap entered promiscuous mode [ 184.546119][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.579685][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.608251][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.648473][ T8517] netlink: 'syz.0.1641': attribute type 2 has an invalid length. [ 184.667058][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.693862][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.710223][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.737475][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.748848][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.770516][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.821514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.838193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.871946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.904843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.944686][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.031580][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.041424][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.094589][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 185.117101][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.163788][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.202241][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.228690][ T8231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.261740][ T8231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.302814][ T8231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.351814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.384305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.432923][ T8231] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.462508][ T8548] loop2: detected capacity change from 0 to 8 [ 185.481842][ T8231] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.501262][ T8231] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.531689][ T8231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.571659][ T4443] tipc: Node number set to 11578026 [ 185.600230][ T8551] netlink: 'syz.4.1656': attribute type 3 has an invalid length. [ 185.631847][ T8551] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1656'. [ 185.676102][ T8552] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 185.848714][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.901488][ T8559] loop2: detected capacity change from 0 to 256 [ 185.903602][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.964286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.988410][ T8531] loop0: detected capacity change from 0 to 32768 [ 186.029789][ T8559] FAT-fs (loop2): Directory bread(block 64) failed [ 186.059959][ T8559] FAT-fs (loop2): Directory bread(block 65) failed [ 186.085815][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.096508][ T8559] FAT-fs (loop2): Directory bread(block 66) failed [ 186.112790][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.122048][ T8559] FAT-fs (loop2): Directory bread(block 67) failed [ 186.128757][ T8559] FAT-fs (loop2): Directory bread(block 68) failed [ 186.141892][ T8559] FAT-fs (loop2): Directory bread(block 69) failed [ 186.155180][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.166355][ T8559] FAT-fs (loop2): Directory bread(block 70) failed [ 186.166608][ T8539] loop1: detected capacity change from 0 to 32768 [ 186.200249][ T8531] XFS (loop0): Mounting V5 Filesystem [ 186.222137][ T8559] FAT-fs (loop2): Directory bread(block 71) failed [ 186.232714][ T8539] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1651 (8539) [ 186.309649][ T8539] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 186.348549][ T8559] FAT-fs (loop2): Directory bread(block 72) failed [ 186.351967][ T8531] XFS (loop0): Ending clean mount [ 186.367167][ T8531] XFS (loop0): Quotacheck needed: Please wait. [ 186.371891][ T8539] BTRFS info (device loop1): using free space tree [ 186.380058][ T8539] BTRFS info (device loop1): has skinny extents [ 186.395234][ T8559] FAT-fs (loop2): Directory bread(block 73) failed [ 186.662370][ T8597] loop4: detected capacity change from 0 to 256 [ 186.683294][ T8531] XFS (loop0): Quotacheck: Done. [ 186.720465][ T8602] loop5: detected capacity change from 0 to 1024 [ 186.742815][ T8539] BTRFS info (device loop1): enabling ssd optimizations [ 186.775958][ T8602] EXT4-fs (loop5): Ignoring removed bh option [ 186.785222][ T8602] EXT4-fs (loop5): inline encryption not supported [ 186.854108][ T4185] XFS (loop0): Unmounting Filesystem [ 186.864566][ T8602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 186.944628][ T8602] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 2: comm syz.5.1662: lblock 2 mapped to illegal pblock 2 (length 1) [ 186.962090][ T8602] __quota_error: 7 callbacks suppressed [ 186.962105][ T8602] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 186.981883][ T8602] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 48: comm syz.5.1662: lblock 0 mapped to illegal pblock 48 (length 1) [ 187.128088][ T8602] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 187.179282][ T8602] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.1662: Failed to acquire dquot type 0 [ 187.221972][ T8602] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 187.291770][ T8602] EXT4-fs error (device loop5): ext4_evict_inode:282: inode #11: comm syz.5.1662: mark_inode_dirty error [ 187.350108][ T8602] EXT4-fs warning (device loop5): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 187.415676][ T8602] EXT4-fs (loop5): 1 orphan inode deleted [ 187.421508][ T8602] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 187.786525][ T8639] loop4: detected capacity change from 0 to 32768 [ 187.894312][ T8654] loop1: detected capacity change from 0 to 128 [ 187.905909][ T8639] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #68: fs_generation is 3919078593 [ 187.922208][ T8639] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 187.932764][ T8639] OCFS2: File system is now read-only. [ 187.938233][ T8639] (syz.4.1671,8639,1):ocfs2_read_locked_inode:521 ERROR: status = -30 [ 187.947242][ T8639] (syz.4.1671,8639,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 187.956166][ T8639] (syz.4.1671,8639,1):ocfs2_init_global_system_inodes:462 ERROR: status = -30 [ 187.965459][ T8639] (syz.4.1671,8639,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 187.965498][ T8639] (syz.4.1671,8639,1):ocfs2_init_global_system_inodes:473 ERROR: status = -30 [ 187.986951][ T8639] (syz.4.1671,8639,1):ocfs2_initialize_super:2281 ERROR: status = -30 [ 187.995370][ T8639] (syz.4.1671,8639,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 188.007518][ T9] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 188.035070][ T9] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 188.044171][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6270: comm kworker/u4:0: Failed to release dquot type 0 [ 188.096368][ T8602] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 48: comm syz.5.1662: lblock 0 mapped to illegal pblock 48 (length 1) [ 188.100262][ T8654] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 188.161840][ T8602] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 188.327400][ T8654] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.476595][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1676'. [ 188.553510][ T8649] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 188.853292][ T8649] usb 3-1: Using ep0 maxpacket: 8 [ 188.882884][ T8683] sp0: Synchronizing with TNC [ 189.035577][ T8694] loop0: detected capacity change from 0 to 512 [ 189.041805][ T8649] usb 3-1: unable to get BOS descriptor or descriptor too short [ 189.136936][ T8698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.141911][ T8649] usb 3-1: config 4 has too many interfaces: 231, using maximum allowed: 32 [ 189.141940][ T8649] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 231 [ 189.141977][ T8649] usb 3-1: config 4 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.142003][ T8649] usb 3-1: config 4 interface 0 has no altsetting 0 [ 189.165391][ T8694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.165499][ T8694] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.239610][ T8708] netlink: 'syz.4.1688': attribute type 29 has an invalid length. [ 189.239934][ T8708] netlink: 'syz.4.1688': attribute type 29 has an invalid length. [ 189.241009][ T8708] netlink: 'syz.4.1688': attribute type 29 has an invalid length. [ 189.380200][ T4446] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 189.432013][ T8649] usb 3-1: string descriptor 0 read error: -22 [ 189.432109][ T8649] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 189.432134][ T8649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.496990][ T8649] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 189.500661][ T8649] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 189.500975][ T8649] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 189.501035][ T8649] usb 3-1: media controller created [ 189.503608][ T8718] loop0: detected capacity change from 0 to 1024 [ 189.538757][ T8718] hfsplus: request for non-existent node 3 in B*Tree [ 189.538846][ T8718] hfsplus: request for non-existent node 3 in B*Tree [ 189.544198][ T8649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.610542][ T4229] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 189.621194][ T8718] hfsplus: request for non-existent node 4 in B*Tree [ 189.644155][ T8718] hfsplus: request for non-existent node 4 in B*Tree [ 189.892068][ T4446] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=d5.70 [ 189.908100][ T4446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.917508][ T4446] usb 2-1: Product: syz [ 189.927210][ T4446] usb 2-1: Manufacturer: syz [ 189.931947][ T4446] usb 2-1: SerialNumber: syz [ 189.952574][ T4446] usb 2-1: config 0 descriptor?? [ 189.980370][ T8733] tmpfs: Bad value for 'mpol' [ 189.993573][ T4446] kl5kusb105 2-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 190.020895][ T4446] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 190.031746][ T4230] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 190.031817][ T4229] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 190.049999][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 190.071747][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'. [ 190.077321][ T4229] usb 5-1: config 1 has no interface number 0 [ 190.080744][ T8735] netlink: 'syz.0.1697': attribute type 14 has an invalid length. [ 190.097592][ T4229] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 190.102525][ T8735] netlink: 'syz.0.1697': attribute type 12 has an invalid length. [ 190.120079][ T4229] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.188985][ T8740] loop0: detected capacity change from 0 to 136 [ 190.199366][ T4443] usb 2-1: USB disconnect, device number 9 [ 190.218118][ T4443] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 190.230254][ T4443] kl5kusb105 2-1:0.0: device disconnected [ 190.322371][ T4229] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 190.331468][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.348432][ T4229] usb 5-1: Product: syz [ 190.353279][ T4229] usb 5-1: Manufacturer: syz [ 190.357904][ T4229] usb 5-1: SerialNumber: syz [ 190.402528][ T8710] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 190.422667][ T4229] usb 5-1: Expected 3 endpoints, found: 2 [ 190.439403][ T8744] loop0: detected capacity change from 0 to 64 [ 190.461764][ T4230] usb 6-1: unable to get BOS descriptor or descriptor too short [ 190.503511][ T4230] usb 6-1: not running at top speed; connect to a high speed hub [ 190.591769][ T4230] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 4 [ 190.618923][ T4230] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 190.656405][ T4230] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 190.704509][ T8649] zl10353_read_register: readreg error (reg=127, ret==0) [ 190.712616][ T8661] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 190.781929][ T8649] usb 3-1: USB disconnect, device number 12 [ 190.831909][ T4230] usb 6-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 190.854968][ T8753] loop1: detected capacity change from 0 to 1024 [ 190.855177][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.877136][ T4230] usb 6-1: Product: syz [ 190.881471][ T4230] usb 6-1: Manufacturer: syz [ 190.886229][ T4230] usb 6-1: SerialNumber: syz [ 190.946289][ T8748] loop0: detected capacity change from 0 to 32768 [ 190.993935][ T8753] hfsplus: bad catalog entry type [ 191.035525][ T1300] hfsplus: b-tree write err: -5, ino 25 [ 191.044954][ T1300] hfsplus: b-tree write err: -5, ino 4 [ 191.050573][ T1300] hfsplus: b-tree write err: -5, ino 2 [ 191.063071][ T8748] XFS (loop0): Mounting V5 Filesystem [ 191.140609][ T8748] XFS (loop0): Ending clean mount [ 191.201580][ T4185] XFS (loop0): Unmounting Filesystem [ 191.253018][ T4230] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 191.271810][ T4230] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 191.340953][ T8769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1708'. [ 191.344783][ T8772] loop1: detected capacity change from 0 to 512 [ 191.460948][ T8772] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 191.509089][ T4230] usb 6-1: USB disconnect, device number 2 [ 191.593744][ T8772] EXT4-fs error (device loop1): mb_free_blocks:1874: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 191.626890][ T8772] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #11: comm syz.1.1709: corrupted inode contents [ 191.660887][ T8772] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #11: comm syz.1.1709: mark_inode_dirty error [ 191.682618][ T8772] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1709: invalid indirect mapped block 1 (level 1) [ 191.706499][ T8772] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #11: comm syz.1.1709: corrupted inode contents [ 191.733283][ T8772] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 191.747444][ T8772] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #11: comm syz.1.1709: corrupted inode contents [ 191.771756][ T5326] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 191.796814][ T8785] loop5: detected capacity change from 0 to 256 [ 191.800422][ T8772] EXT4-fs error (device loop1): ext4_truncate:4279: inode #11: comm syz.1.1709: mark_inode_dirty error [ 191.824586][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.848047][ T8772] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 191.858865][ T8772] EXT4-fs (loop1): 1 truncate cleaned up [ 191.870486][ T8772] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.872302][ T8785] exfat: Deprecated parameter 'namecase' [ 191.911844][ T8785] exfat: Deprecated parameter 'utf8' [ 191.920473][ T8772] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.1709: path /415/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 191.985929][ T8785] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 192.032725][ T5326] usb 3-1: Using ep0 maxpacket: 32 [ 192.159350][ T5326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.185001][ T5326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.207290][ T5326] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 192.226889][ T5326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.247678][ T5326] usb 3-1: config 0 descriptor?? [ 192.297426][ T5322] usb 5-1: USB disconnect, device number 15 [ 192.551174][ T8807] loop1: detected capacity change from 0 to 4096 [ 192.590935][ T8811] netlink: 'syz.5.1726': attribute type 10 has an invalid length. [ 192.647267][ T8814] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.716371][ T8811] team0: Port device syz_tun added [ 192.744243][ T5326] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 192.751196][ T5326] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 192.768524][ T8807] NILFS (loop1): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 192.789866][ T5326] ft260 0003:0403:6030.0013: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 192.850846][ T8795] loop0: detected capacity change from 0 to 32768 [ 192.951888][ T5326] ft260 0003:0403:6030.0013: failed to retrieve chip version [ 192.979556][ T8795] JBD2: Ignoring recovery information on journal [ 192.988407][ T5326] ft260: probe of 0003:0403:6030.0013 failed with error -71 [ 193.076928][ T5326] usb 3-1: USB disconnect, device number 13 [ 193.187279][ T8795] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 193.258624][ T8795] [ 193.261290][ T8795] ====================================================== [ 193.268316][ T8795] WARNING: possible circular locking dependency detected [ 193.275356][ T8795] syzkaller #0 Not tainted [ 193.279778][ T8795] ------------------------------------------------------ [ 193.286794][ T8795] syz.0.1719/8795 is trying to acquire lock: [ 193.292777][ T8795] ffff8880600fd108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 193.306033][ T8795] [ 193.306033][ T8795] but task is already holding lock: [ 193.313404][ T8795] ffff88806026eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 193.322922][ T8795] [ 193.322922][ T8795] which lock already depends on the new lock. [ 193.322922][ T8795] [ 193.333332][ T8795] [ 193.333332][ T8795] the existing dependency chain (in reverse order) is: [ 193.342356][ T8795] [ 193.342356][ T8795] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 193.350195][ T8795] down_read+0x44/0x2e0 [ 193.354889][ T8795] ocfs2_init_acl+0x307/0x770 [ 193.360044][ T8813] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 193.360150][ T8795] ocfs2_mknod+0x15cb/0x2510 [ 193.372700][ T8795] ocfs2_create+0x192/0x420 [ 193.377916][ T8795] path_openat+0x11db/0x2fa0 [ 193.379545][ T8813] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 193.383039][ T8795] do_filp_open+0x1e2/0x410 [ 193.383062][ T8795] do_sys_openat2+0x150/0x4b0 [ 193.383077][ T8795] __x64_sys_openat+0x135/0x160 [ 193.383090][ T8795] do_syscall_64+0x4c/0xa0 [ 193.383107][ T8795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.383126][ T8795] [ 193.383126][ T8795] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 193.383153][ T8795] down_read+0x44/0x2e0 [ 193.414183][ T8813] F2FS-fs (loop4): invalid crc value [ 193.418246][ T8795] ocfs2_start_trans+0x3a6/0x6f0 [ 193.418272][ T8795] ocfs2_mknod+0xf5a/0x2510 [ 193.447132][ T8795] ocfs2_create+0x192/0x420 [ 193.452168][ T8795] path_openat+0x11db/0x2fa0 [ 193.457290][ T8795] do_filp_open+0x1e2/0x410 [ 193.462320][ T8795] do_sys_openat2+0x150/0x4b0 [ 193.467524][ T8795] __x64_sys_creat+0x8c/0xb0 [ 193.467767][ T8813] F2FS-fs (loop4): Found nat_bits in checkpoint [ 193.472640][ T8795] do_syscall_64+0x4c/0xa0 [ 193.472664][ T8795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.472682][ T8795] [ 193.472682][ T8795] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 193.472712][ T8795] ocfs2_start_trans+0x2a7/0x6f0 [ 193.472728][ T8795] ocfs2_mknod+0xf5a/0x2510 [ 193.472746][ T8795] ocfs2_create+0x192/0x420 [ 193.472762][ T8795] path_openat+0x11db/0x2fa0 [ 193.472779][ T8795] do_filp_open+0x1e2/0x410 [ 193.472794][ T8795] do_sys_openat2+0x150/0x4b0 [ 193.472808][ T8795] __x64_sys_creat+0x8c/0xb0 [ 193.516269][ T8813] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 193.518329][ T8795] do_syscall_64+0x4c/0xa0 [ 193.518353][ T8795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.523547][ T8813] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 193.528529][ T8795] [ 193.528529][ T8795] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 193.569873][ T8795] down_write+0x38/0x60 [ 193.574565][ T8795] ocfs2_reserve_local_alloc_bits+0x11c/0x25f0 [ 193.581253][ T8795] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 193.588112][ T8795] ocfs2_mknod+0xef8/0x2510 [ 193.593151][ T8795] ocfs2_create+0x192/0x420 [ 193.598183][ T8795] path_openat+0x11db/0x2fa0 [ 193.603740][ T8795] do_filp_open+0x1e2/0x410 [ 193.608844][ T8795] do_sys_openat2+0x150/0x4b0 [ 193.614041][ T8795] __x64_sys_creat+0x8c/0xb0 [ 193.619148][ T8795] do_syscall_64+0x4c/0xa0 [ 193.624068][ T8795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.630473][ T8795] [ 193.630473][ T8795] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 193.640989][ T8795] __lock_acquire+0x2c42/0x7d10 [ 193.646359][ T8795] lock_acquire+0x19e/0x400 [ 193.651404][ T8795] down_write+0x38/0x60 [ 193.656062][ T8795] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 193.662464][ T8795] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 193.669291][ T8795] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 193.675424][ T8795] ocfs2_xattr_set+0xc38/0x13e0 [ 193.680786][ T8795] __vfs_setxattr+0x3e0/0x420 [ 193.685984][ T8795] __vfs_setxattr_noperm+0x129/0x5e0 [ 193.691775][ T8795] vfs_setxattr+0x167/0x2e0 [ 193.696798][ T8795] setxattr+0x36c/0x390 [ 193.701454][ T8795] path_setxattr+0x147/0x290 [ 193.706541][ T8795] __x64_sys_lsetxattr+0xb4/0xd0 [ 193.711983][ T8795] do_syscall_64+0x4c/0xa0 [ 193.716927][ T8795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.723335][ T8795] [ 193.723335][ T8795] other info that might help us debug this: [ 193.723335][ T8795] [ 193.733546][ T8795] Chain exists of: [ 193.733546][ T8795] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 193.733546][ T8795] [ 193.750554][ T8795] Possible unsafe locking scenario: [ 193.750554][ T8795] [ 193.757987][ T8795] CPU0 CPU1 [ 193.763335][ T8795] ---- ---- [ 193.768679][ T8795] lock(&oi->ip_xattr_sem); [ 193.773246][ T8795] lock(&journal->j_trans_barrier); [ 193.781029][ T8795] lock(&oi->ip_xattr_sem); [ 193.788121][ T8795] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 193.795393][ T8795] [ 193.795393][ T8795] *** DEADLOCK *** [ 193.795393][ T8795] [ 193.803613][ T8795] 3 locks held by syz.0.1719/8795: [ 193.808769][ T8795] #0: ffff88801fbbe460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 193.817978][ T8795] #1: ffff88806026ed88 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 193.828580][ T8795] #2: ffff88806026eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 193.838484][ T8795] [ 193.838484][ T8795] stack backtrace: [ 193.844461][ T8795] CPU: 1 PID: 8795 Comm: syz.0.1719 Not tainted syzkaller #0 [ 193.851816][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.861882][ T8795] Call Trace: [ 193.865149][ T8795] [ 193.868063][ T8795] dump_stack_lvl+0x188/0x250 [ 193.872729][ T8795] ? load_image+0x400/0x400 [ 193.877234][ T8795] ? show_regs_print_info+0x20/0x20 [ 193.882418][ T8795] ? print_circular_bug+0x12b/0x1a0 [ 193.887617][ T8795] check_noncircular+0x296/0x330 [ 193.892556][ T8795] ? add_chain_block+0x940/0x940 [ 193.897501][ T8795] ? lockdep_lock+0xf1/0x1f0 [ 193.902080][ T8795] ? mark_lock+0x94/0x320 [ 193.906397][ T8795] __lock_acquire+0x2c42/0x7d10 [ 193.911236][ T8795] ? verify_lock_unused+0x140/0x140 [ 193.916415][ T8795] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 193.922077][ T8795] ? do_raw_spin_lock+0x128/0x2f0 [ 193.927093][ T8795] ? mutex_unlock+0x10/0x10 [ 193.931580][ T8795] ? __rwlock_init+0x140/0x140 [ 193.936346][ T8795] ? do_raw_spin_unlock+0x11d/0x230 [ 193.941551][ T8795] lock_acquire+0x19e/0x400 [ 193.946052][ T8795] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 193.952112][ T8795] ? __bfs+0x2a3/0x5c0 [ 193.956180][ T8795] ? __might_sleep+0xf0/0xf0 [ 193.960751][ T8795] ? read_lock_is_recursive+0x10/0x10 [ 193.966106][ T8795] ? verify_lock_unused+0x140/0x140 [ 193.971337][ T8795] down_write+0x38/0x60 [ 193.975486][ T8795] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 193.981549][ T8795] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 193.987459][ T8795] ? mark_lock+0x94/0x320 [ 193.991794][ T8795] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 193.997872][ T8795] ? lock_chain_count+0x20/0x20 [ 194.002708][ T8795] ? __rwlock_init+0x140/0x140 [ 194.007459][ T8795] ? ocfs2_block_group_search+0x470/0x470 [ 194.013165][ T8795] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 194.019061][ T8795] ? lockdep_hardirqs_on+0x94/0x140 [ 194.024243][ T8795] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 194.030117][ T8795] ? _raw_spin_unlock+0x40/0x40 [ 194.034952][ T8795] ? stack_trace_save+0xa6/0xf0 [ 194.039792][ T8795] ? stack_trace_snprint+0xf0/0xf0 [ 194.044885][ T8795] ? stack_depot_save+0x404/0x440 [ 194.049910][ T8795] ? __kasan_kmalloc+0xcc/0xf0 [ 194.054658][ T8795] ? __kasan_kmalloc+0xb5/0xf0 [ 194.059413][ T8795] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 194.065903][ T8795] ? ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 194.071696][ T8795] ? ocfs2_xattr_set+0xc38/0x13e0 [ 194.076726][ T8795] ? __vfs_setxattr+0x3e0/0x420 [ 194.081570][ T8795] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 194.087023][ T8795] ? vfs_setxattr+0x167/0x2e0 [ 194.091691][ T8795] ? setxattr+0x36c/0x390 [ 194.096114][ T8795] ? path_setxattr+0x147/0x290 [ 194.100859][ T8795] ? __x64_sys_lsetxattr+0xb4/0xd0 [ 194.105945][ T8795] ? do_syscall_64+0x4c/0xa0 [ 194.110514][ T8795] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.116570][ T8795] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 194.122891][ T8795] ? ocfs2_init_steal_slots+0x150/0x150 [ 194.128429][ T8795] ? ocfs2_xattr_block_set+0x2e10/0x2e10 [ 194.134062][ T8795] ? do_raw_spin_lock+0x128/0x2f0 [ 194.139076][ T8795] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 194.144777][ T8795] ? _raw_spin_unlock+0x24/0x40 [ 194.149607][ T8795] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 194.155652][ T8795] ? ocfs2_truncate_log_needs_flush+0x12c/0x300 [ 194.161880][ T8795] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 194.167773][ T8795] ? up_write+0x1bb/0x420 [ 194.172091][ T8795] ocfs2_xattr_set+0xc38/0x13e0 [ 194.176950][ T8795] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 194.182707][ T8795] ? evm_protected_xattr_common+0x170/0x190 [ 194.188669][ T8795] ? evm_protect_xattr+0x7ad/0x9b0 [ 194.193766][ T8795] ? ocfs2_xattr_security_get+0x40/0x40 [ 194.199339][ T8795] __vfs_setxattr+0x3e0/0x420 [ 194.204012][ T8795] __vfs_setxattr_noperm+0x129/0x5e0 [ 194.209315][ T8795] vfs_setxattr+0x167/0x2e0 [ 194.211946][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.213813][ T8795] ? xattr_permission+0x500/0x500 [ 194.213837][ T8795] ? strncpy_from_user+0x1fb/0x360 [ 194.220249][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.225252][ T8795] setxattr+0x36c/0x390 [ 194.225272][ T8795] ? path_setxattr+0x290/0x290 [ 194.225296][ T8795] ? __mnt_want_write+0x1e2/0x260 [ 194.250605][ T8795] path_setxattr+0x147/0x290 [ 194.255211][ T8795] ? simple_xattr_list_add+0xf0/0xf0 [ 194.260617][ T8795] ? lock_chain_count+0x20/0x20 [ 194.265459][ T8795] ? vtime_user_exit+0x2c8/0x3e0 [ 194.270383][ T8795] __x64_sys_lsetxattr+0xb4/0xd0 [ 194.275316][ T8795] do_syscall_64+0x4c/0xa0 [ 194.279729][ T8795] ? clear_bhb_loop+0x30/0x80 [ 194.284393][ T8795] ? clear_bhb_loop+0x30/0x80 [ 194.289050][ T8795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.294950][ T8795] RIP: 0033:0x7fa6f63ac799 [ 194.299369][ T8795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.319111][ T8795] RSP: 002b:00007fa6f4606028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 194.327534][ T8795] RAX: ffffffffffffffda RBX: 00007fa6f6625fa0 RCX: 00007fa6f63ac799 [ 194.335494][ T8795] RDX: 0000000000000000 RSI: 00002000000025c0 RDI: 0000200000002580 [ 194.343456][ T8795] RBP: 00007fa6f6442c99 R08: 0000000000000000 R09: 0000000000000000 [ 194.351413][ T8795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.359370][ T8795] R13: 00007fa6f6626038 R14: 00007fa6f6625fa0 R15: 00007ffcebedd948 [ 194.367349][ T8795] [ 194.370436][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.380390][ T4199] attempt to access beyond end of device [ 194.380390][ T4199] loop4: rw=2049, want=45104, limit=40427 [ 194.418256][ T4185] ocfs2: Unmounting device (7,0) on (node local)