last executing test programs: 3.501603567s ago: executing program 3 (id=1363): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0xffffffff}}}, 0x90) 2.580536369s ago: executing program 3 (id=1376): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB=' \n\t'], 0x0, 0x0, 0x0}, 0x0) 2.324702225s ago: executing program 2 (id=1380): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000100)={0x5, 0x8, 0x100000, {r0}}, 0x20) 2.11079155s ago: executing program 2 (id=1382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x68, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7b4cd07ec3ee777de774fc7987cca41989ec53f953f615edc21c4335093450b134"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.986042763s ago: executing program 2 (id=1385): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$eJzs281vFOcdB/DfrN1iU6B+4x2kVXuo1VbWmlNbDqXgtkKqSu2+qOoBa/0CuF17LXtdcahUqt6RIuUQ5ZwLKPcITvwLOYRrjhxIDrlEySWOdnfW3pn1hhXy2sH5fCQYzzPzvMhfz+zz6LELqdq9lc3iymaxvFasLt7ZvFL8d7WytbochQNy2P3Tm37kJPvDc+vG7/78tysR9z8a+8H29vZ21I3Enqbbvv78s/8sth9bCrk69Xb3bm2//CMiJiJiKPLjGYiIv38QkUTEaFo2lh6HI+JENK/9//1Hc0P7NJqBF49nH83OPHzycvX58I3bxa43JhHvVs7//O7qJz8euPrxT/epewAA+Ea/n7v11z+VpuNZEqeeDnbO18+mx27z42168uv+RwkAAABd7a7/R5JC0rn+n0iPXbYEw8L2zXbzj7dmfluaTvd/k47rv0iLPv3NQGMPNb/vm9//Hc3V33v/t7Of19UaX6vfkUgKU5nzQmFqKmL6evP8XHK8UKlu1n52p7q1trRvw3hjZfNv7t5n0kk39HvNfyzXfv/3/8c7fprq58X9+xE70rL5D3S9773/JT3lP56rdxD58/qy+Q82yn7UfkOx+QKo5//W4Kvzn8i136/8T9Xf7Ul9rEOZN0B9DlMv7zZfISub//caZZlXZ/qN7Pb8f5nL/3Su/cN6/09e72+vR0U2/+83yrK/tLb7/I8WXv38n8m1fxj518c/6fO/J9n8jzULsy/Pxney1/f/2Vz7fcr/QbqtGnEqifG23zp9Otj8cGjtVzeWNPXL630YxRGQzb9zl393/Vfoaf53Llf/oNZ/rX5b67/WOmQyaa7/2Fs2/+Gu9/X6/J/P1ev7+z8ZSlcA2//taz9HVDb/483CPSaAveZ/Idd+v/JvvPGHWvnvDvirY83ykvlfT7L5p1FlPgYeNP5vzP+Szty/yOV/Mdd+W/75Pw3ZJ53zv/r4J/vU21GTzf9E1/vq+X/Yw+f/pVy9/s//I0rm+q8tm//Jrvc1nv+hV+d/OVev3/n/pJ+NAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8B4ylx5FIClOZ80JhaipiPD0/F8eThfLS/EKluvivzYiJtLwYY8ndSnWhXJlfWasuLc+XK5XqYsTp9PpEDCWblWptfrW8fmanreHk3nJ5o7awXK5FxNm0/FKcbLW1sFJbLa837m1d+2GhurF+r7w2v7Sy8atSqVSK8ztjGE2W79eW12rN3ptXIy7s1B1J2gbXuHxxZywnkn9WtzbWypVG+aW2OpXqYrnSVudyeu3tGE1qG1tri+Xa8nylerfV32G6lh5nbs79Ze4P0x3Xi0nzOHawwwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgW+bZ1V++ExGDzbNCRFxrfZGk/zIGXjyefTQ78/DJy9XnwzduF/e6BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADga3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8cqDUNRGIDPvQoKLuroEziFZHNVFHExIvgEvkSHvmYfo0PHLqXQ3kBIGujS0uH7lkPyc+85cA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJfj87f9+6mbiBS3m5uI2eLxrp8/lVq/HT5/dYYZOZ2v7/b9o27Ku6dR/lJ+LV/zLl2v5v9R6nXvu9MM9mS4T3vjPkNT+zY1X9f3PlKuIuKh5M8p56o67i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbszaEJgGAQx9E7wWSzuIZOYVQE9zA6nks4jybBYBC++l46OH78AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCfcZnWuR/iyKiuzNjPtnn/u+fYvvssm6/LcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICbHTiQAQAAABDmb51H+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIMCAAD//+N8zQE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc3}}) 1.762781528s ago: executing program 1 (id=1388): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x104, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x4, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008805}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 1.633495671s ago: executing program 1 (id=1390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8000}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x800) 1.498863004s ago: executing program 1 (id=1391): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000400000000000000030009000d000000", 0x24) 1.382802727s ago: executing program 1 (id=1393): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x8042, 0xe0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)='9', 0x1}], 0x21e, 0xffffff01, 0x2) 1.203903571s ago: executing program 1 (id=1395): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0xffff, @private2, 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000640)="be", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000700)="d3", 0x1}], 0x1}}], 0x2, 0x20044040) close(r0) 1.034853265s ago: executing program 0 (id=1398): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 878.484419ms ago: executing program 0 (id=1399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010046bd7000020000000c000000180001801400020076657468305f746f5f626f6e6400000018000380140003800c00018008000100"], 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) 878.415989ms ago: executing program 3 (id=1400): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) 809.137761ms ago: executing program 2 (id=1401): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) 808.536801ms ago: executing program 1 (id=1402): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,coherency=full,resv_level=00000000000000000000\x00\x00\x00\x00\x00\x00\x00\x00ocks,coherency=full,inode64,\x00'], 0x1, 0x4421, &(0x7f0000004500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x5, 0x8ffff) 669.517353ms ago: executing program 0 (id=1403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x34}}, 0x0) 550.022796ms ago: executing program 3 (id=1404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf25150000004c0001800d0001007549bc9aca1a590b9d"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 426.792659ms ago: executing program 0 (id=1405): syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x2, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2856c26, &(0x7f0000000240)={[], [{@flag='rw'}]}) 389.65513ms ago: executing program 3 (id=1406): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_getroute={0x1c, 0x1a, 0x101, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x5, 0x800}}, 0x1c}}, 0x10) 362.527151ms ago: executing program 2 (id=1407): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) 262.858994ms ago: executing program 0 (id=1408): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000cc0)=0xc68e85d, 0x4) 170.884845ms ago: executing program 0 (id=1409): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./dev\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='nodecompose,barrier,nobarrier,nobarrier,nobarrier,gid=', @ANYRESOCT=0x0, @ANYBLOB="2c63726561746f723d614116b52c6e6c733d6b6f69382d722c00e9c81d320c70df0fbbf7ffff000000000000752f4fc55cd2e3a3e7ea0ac187c7a1b8fd1d02bf4acd6ec3830000000000000000c65f831c8c152d25a63495ebed5632e92efbea527e002418549770b3861def4434dde83206d5f89857bd28733cdfc74fcdd1b63d7b203a65fc97d9cc8a0990d975ec1e12099571b2bfea3725ddcffc"], 0xfe, 0x5e5, &(0x7f0000001080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0) 170.806205ms ago: executing program 3 (id=1410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a0000000000000400000000000000002d0000000000000104800000200003000a0000000000000000000000000000000000000000000000010000000d0001007564703a73"], 0x6c}}, 0x0) 0s ago: executing program 2 (id=1411): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0xffff, @private2, 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000640)="be", 0x1}], 0x1}}, {{&(0x7f00000006c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x9}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000700)="d3", 0x1}], 0x1}}], 0x2, 0x20044040) close(r0) kernel console output (not intermixed with test programs): ing filesystem 00000000-0000-0000-0000-000000000000. [ 127.363292][ T5811] usb 3-1: USB disconnect, device number 4 [ 127.526046][ T7268] loop0: detected capacity change from 0 to 32768 [ 127.610089][ T7268] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 127.915594][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 128.343651][ T7282] loop1: detected capacity change from 0 to 40427 [ 128.356101][ T7282] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 128.384390][ T7282] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 128.398694][ T7282] F2FS-fs (loop1): invalid crc value [ 128.593205][ T7282] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 128.603512][ T7282] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.810874][ T5777] syz-executor: attempt to access beyond end of device [ 128.810874][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.843288][ T7304] loop2: detected capacity change from 0 to 64 [ 128.849584][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 128.982955][ T7305] loop0: detected capacity change from 0 to 4096 [ 129.114142][ T7305] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 129.380865][ T7311] loop2: detected capacity change from 0 to 64 [ 129.977688][ T5811] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.170738][ T5811] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.190783][ T5811] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.213887][ T5811] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.232217][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.254606][ T7323] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.258153][ T7326] loop1: detected capacity change from 0 to 32768 [ 130.283936][ T5811] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 130.314336][ T7326] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 130.616624][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 130.754069][ T5764] usb 3-1: USB disconnect, device number 5 [ 130.770503][ T7333] netlink: 5 bytes leftover after parsing attributes in process `syz.1.515'. [ 131.367692][ T5764] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.521349][ T7351] loop1: detected capacity change from 0 to 8192 [ 131.549424][ T7351] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.577883][ T7351] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 131.589292][ T7351] REISERFS (device loop1): using ordered data mode [ 131.592968][ T5764] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 131.596643][ T7351] reiserfs: using flush barriers [ 131.624717][ T5764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.639893][ T7351] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.659460][ T5764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.673275][ T7351] REISERFS (device loop1): checking transaction log (loop1) [ 131.682924][ T5764] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 131.704118][ T7351] REISERFS (device loop1): Using r5 hash to sort names [ 131.720433][ T5764] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 131.737188][ T7351] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 131.757651][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.772841][ T7351] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 131.784604][ T5764] usb 1-1: config 0 descriptor?? [ 131.831064][ T28] audit: type=1800 audit(1788784445.430:35): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.522" name="bus" dev="loop1" ino=4 res=0 errno=0 [ 132.025277][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.529'. [ 132.034451][ T7360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.529'. [ 132.259569][ T5764] holtek_kbd 0003:04D9:A055.000A: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.0-1/input0 [ 132.437702][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 132.482489][ T5764] usb 1-1: USB disconnect, device number 7 [ 132.649638][ T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.676876][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.690739][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 132.700916][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.721168][ T9] usb 2-1: config 0 descriptor?? [ 132.765668][ T7382] loop3: detected capacity change from 0 to 4096 [ 132.806019][ T7382] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 132.839980][ T7382] ntfs3: loop3: Failed to load $Extend (-22). [ 132.846129][ T7382] ntfs3: loop3: Failed to initialize $Extend. [ 132.992601][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.999899][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.160489][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.173087][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.180972][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.188854][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.196291][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.204351][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.216223][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.224046][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.236873][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.246737][ T7390] loop0: detected capacity change from 0 to 1024 [ 133.249956][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.254943][ T7390] EXT4-fs: inline encryption not supported [ 133.282288][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.318189][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.325572][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.333393][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.341115][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.348750][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.350876][ T7390] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 133.356115][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.376041][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.383443][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.391022][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.398801][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.416089][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.426350][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.434035][ T9] magicmouse 0003:05AC:0265.000B: unknown main item tag 0x0 [ 133.443418][ T7390] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 133.460521][ T9] magicmouse 0003:05AC:0265.000B: hidraw0: USB HID v2.53 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 133.485134][ T9] magicmouse 0003:05AC:0265.000B: magicmouse input not registered [ 133.505342][ T7390] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.543: Failed to acquire dquot type 0 [ 133.521825][ T9] magicmouse: probe of 0003:05AC:0265.000B failed with error -12 [ 133.553796][ T7390] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 133.596324][ T7390] EXT4-fs (loop0): 1 truncate cleaned up [ 133.615115][ T9] usb 2-1: USB disconnect, device number 3 [ 133.632118][ T7390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.730517][ T7397] fido_id[7397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 133.856973][ T7403] Bluetooth: hci0: unsupported parameter 5135 [ 133.863835][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.864597][ T7403] Bluetooth: hci0: invalid length 1, exp 2 for type 11 [ 134.051956][ T7411] loop2: detected capacity change from 0 to 256 [ 134.099039][ T7411] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.353332][ T7422] loop3: detected capacity change from 0 to 512 [ 134.393433][ T7422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.448764][ T7420] loop0: detected capacity change from 0 to 4096 [ 134.480364][ T7422] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.499434][ T7422] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 134.502516][ T7420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.560235][ T6053] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.733797][ T7430] loop1: detected capacity change from 0 to 512 [ 134.802384][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.845318][ T7430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.887740][ T7430] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.956793][ T28] audit: type=1800 audit(1788784448.550:36): pid=7411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.552" name="file1" dev="loop2" ino=1048608 res=0 errno=0 [ 134.964585][ T7436] loop3: detected capacity change from 0 to 1764 [ 134.984974][ T7430] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #12: comm syz.1.561: Directory hole found for htree leaf block 0 [ 135.042120][ T7430] EXT4-fs (loop1): Remounting filesystem read-only [ 135.140090][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.173907][ T49] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 135.197794][ T49] Quota error (device loop1): write_blk: dquota write failed [ 135.216434][ T49] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 135.236038][ T49] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 135.287638][ T49] Quota error (device loop1): write_blk: dquota write failed [ 135.295072][ T49] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 135.541675][ T7450] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.776949][ T7457] loop2: detected capacity change from 0 to 64 [ 136.492394][ T7484] loop0: detected capacity change from 0 to 64 [ 136.724457][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 136.781288][ T7496] batadv0: entered promiscuous mode [ 136.788345][ T7495] batadv0: left promiscuous mode [ 137.308903][ T7518] loop3: detected capacity change from 0 to 1024 [ 137.321534][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 137.321649][ T7519] block nbd0: Unsupported socket: should be TCP or UNIX. [ 137.789399][ T7527] loop3: detected capacity change from 0 to 4096 [ 137.829802][ T7527] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 137.886292][ T7533] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 137.947949][ T5785] Bluetooth: hci1: command tx timeout [ 138.072205][ T7542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.612'. [ 138.190487][ T7546] netlink: 165 bytes leftover after parsing attributes in process `syz.2.614'. [ 138.585292][ T7559] vivid-007: disconnect [ 138.601327][ T7559] vivid-007: reconnect [ 138.750256][ T7564] loop2: detected capacity change from 0 to 512 [ 138.821799][ T7564] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.623: inode has both inline data and extents flags [ 138.837319][ T7564] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.623: couldn't read orphan inode 15 (err -117) [ 138.866427][ T7564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.080137][ T28] audit: type=1800 audit(1788784452.670:37): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.623" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 139.210538][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.601251][ T7586] loop2: detected capacity change from 0 to 4096 [ 139.763368][ T7586] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 139.949682][ T7586] ntfs3: loop2: failed to convert "0000" to iso8859-2 [ 139.988730][ T7586] ntfs3: loop2: failed to convert name for inode 1e. [ 140.222582][ T7584] loop0: detected capacity change from 0 to 32768 [ 140.282265][ T7584] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.392799][ T7584] XFS (loop0): Ending clean mount [ 140.523602][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.754376][ T7629] loop0: detected capacity change from 0 to 1024 [ 140.793244][ T7629] EXT4-fs: Ignoring removed bh option [ 140.820483][ T7629] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.855048][ T7629] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 140.925859][ T7629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.095667][ T7642] loop2: detected capacity change from 0 to 16 [ 141.118868][ T7644] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 141.145692][ T7642] erofs: (device loop2): mounted with root inode @ nid 36. [ 141.189813][ T7646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.655'. [ 141.226421][ T7642] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3600 @ nid 36 [ 141.246121][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.264332][ T7642] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3599 @ nid 36 [ 141.415557][ T7649] loop3: detected capacity change from 0 to 64 [ 141.880532][ T7662] tipc: Started in network mode [ 141.885594][ T7662] tipc: Node identity , cluster identity 4711 [ 142.205119][ T7672] loop0: detected capacity change from 0 to 512 [ 142.291481][ T7672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.358176][ T7672] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.574055][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.864472][ T28] audit: type=1326 audit(1788784456.460:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.2.684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5e59e159 code=0x7ffc0000 [ 142.905495][ T7692] loop1: detected capacity change from 0 to 736 [ 142.913345][ T28] audit: type=1326 audit(1788784456.460:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.2.684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5e59e159 code=0x7ffc0000 [ 142.981040][ T28] audit: type=1326 audit(1788784456.460:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.2.684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5e59e159 code=0x7ffc0000 [ 143.008939][ T28] audit: type=1326 audit(1788784456.460:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.2.684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5e59e159 code=0x7ffc0000 [ 143.035586][ T28] audit: type=1326 audit(1788784456.460:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.2.684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe5e59e159 code=0x7ffc0000 [ 143.062746][ T28] audit: type=1326 audit(1788784456.460:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.2.684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5e59e159 code=0x7ffc0000 [ 143.096726][ T28] audit: type=1326 audit(1788784456.460:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.2.684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5e59e159 code=0x7ffc0000 [ 143.178280][ T28] audit: type=1326 audit(1788784456.460:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.2.684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5e59e159 code=0x7ffc0000 [ 143.204595][ T28] audit: type=1326 audit(1788784456.460:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.2.684" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5e59e159 code=0x7ffc0000 [ 143.999439][ T7718] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 144.265816][ T7710] loop3: detected capacity change from 0 to 32768 [ 144.345714][ T7710] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 144.405200][ T7710] JBD2: Ignoring recovery information on journal [ 144.534897][ T7710] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 144.729825][ T6053] ocfs2: Unmounting device (7,3) on (node local) [ 145.182952][ T5785] Bluetooth: min 0 < 6 [ 146.201960][ T7786] loop2: detected capacity change from 0 to 256 [ 146.228942][ T7786] exfat: Deprecated parameter 'namecase' [ 146.249410][ T7787] can0: slcan on ptm0. [ 146.270963][ T7786] exfat: Deprecated parameter 'namecase' [ 146.302515][ T7786] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 146.425578][ T7785] can0 (unregistered): slcan off ptm0. [ 146.725662][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 146.872616][ T7779] loop3: detected capacity change from 0 to 32768 [ 146.883655][ T7807] UHID_CREATE from different security context by process 415 (syz.1.730), this is not allowed. [ 146.943890][ T7779] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 147.049387][ T7779] JBD2: Ignoring recovery information on journal [ 147.103196][ T7779] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 147.228223][ T5785] Bluetooth: hci1: command tx timeout [ 147.405526][ T7779] (syz.3.717,7779,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 147.480221][ T7779] syz.3.717 (7779) used greatest stack depth: 18296 bytes left [ 147.556373][ T7827] loop1: detected capacity change from 0 to 4096 [ 147.570916][ T6053] ocfs2: Unmounting device (7,3) on (node local) [ 147.601907][ T7827] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 147.699273][ T7832] cgroup: fork rejected by pids controller in /syz2 [ 147.834779][ T7827] ntfs3: loop1: failed to convert "c46c" to iso8859-9 [ 148.154415][ T7846] loop0: detected capacity change from 0 to 128 [ 148.787913][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.946479][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.069962][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 149.091536][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.271493][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.345363][ T7864] loop3: detected capacity change from 0 to 32768 [ 149.355226][ T7876] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 149.433749][ T7864] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.527272][ T42] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.576028][ T42] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.596526][ T42] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.627686][ T42] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.663089][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.677044][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.693041][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.703912][ T7891] sch_fq: defrate 2 ignored. [ 149.711589][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.725845][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.734971][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.742159][ T7864] XFS (loop3): Ending clean mount [ 149.964550][ T7895] loop1: detected capacity change from 0 to 2048 [ 150.025570][ T6053] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.069101][ T7895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.323407][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.466510][ T7908] loop0: detected capacity change from 0 to 1024 [ 150.572285][ T7908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.862499][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.141275][ T7936] loop3: detected capacity change from 0 to 256 [ 151.480763][ T7947] loop0: detected capacity change from 0 to 64 [ 151.527714][ T7888] chnl_net:caif_netlink_parms(): no params data found [ 151.684616][ T5774] hfs: node 4:3 still has 1 user(s)! [ 151.797911][ T5785] Bluetooth: hci3: command tx timeout [ 151.937787][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.945046][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.953380][ T7888] bridge_slave_0: entered allmulticast mode [ 151.961048][ T7888] bridge_slave_0: entered promiscuous mode [ 151.969585][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.976731][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.984068][ T7888] bridge_slave_1: entered allmulticast mode [ 151.991212][ T7888] bridge_slave_1: entered promiscuous mode [ 152.285534][ T7888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.322337][ T7888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.392720][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 152.417309][ T42] hsr_slave_0: left promiscuous mode [ 152.440737][ T42] hsr_slave_1: left promiscuous mode [ 152.458024][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.488313][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.516316][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.535432][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.556116][ T42] bridge_slave_1: left allmulticast mode [ 152.563164][ T42] bridge_slave_1: left promiscuous mode [ 152.575699][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.611769][ T42] bridge_slave_0: left allmulticast mode [ 152.619755][ T42] bridge_slave_0: left promiscuous mode [ 152.633752][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.694980][ T42] veth1_macvtap: left promiscuous mode [ 152.705991][ T42] veth0_macvtap: left promiscuous mode [ 152.712336][ T42] veth1_vlan: left promiscuous mode [ 152.723958][ T42] veth0_vlan: left promiscuous mode [ 153.134728][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 153.134742][ T28] audit: type=1326 audit(1788784466.730:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.1.787" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 153.167065][ T28] audit: type=1326 audit(1788784466.730:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.1.787" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 153.200277][ T28] audit: type=1326 audit(1788784466.740:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.1.787" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 153.226072][ T28] audit: type=1326 audit(1788784466.740:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.1.787" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 153.252933][ T28] audit: type=1326 audit(1788784466.760:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.1.787" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 153.277360][ T28] audit: type=1326 audit(1788784466.760:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.1.787" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 153.353176][ T28] audit: type=1326 audit(1788784466.760:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.1.787" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 153.377755][ T28] audit: type=1326 audit(1788784466.760:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.1.787" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 153.408373][ T28] audit: type=1326 audit(1788784466.760:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.1.787" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 153.432906][ T28] audit: type=1326 audit(1788784466.760:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.1.787" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 153.802650][ T42] team0 (unregistering): Port device team_slave_1 removed [ 153.860428][ T42] team0 (unregistering): Port device team_slave_0 removed [ 153.867849][ T5785] Bluetooth: hci3: command tx timeout [ 153.926783][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.998813][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.327625][ T42] bond0 (unregistering): Released all slaves [ 154.414662][ T7888] team0: Port device team_slave_0 added [ 154.457114][ T7888] team0: Port device team_slave_1 added [ 154.581113][ T8008] loop0: detected capacity change from 0 to 1024 [ 154.588821][ T7888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.606084][ T7888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.636064][ T7888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.683083][ T7888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.722105][ T7888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.770481][ T7888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.903597][ T8015] loop1: detected capacity change from 0 to 8 [ 154.952859][ T7888] hsr_slave_0: entered promiscuous mode [ 155.038225][ T7888] hsr_slave_1: entered promiscuous mode [ 155.050419][ T8015] SQUASHFS error: zlib decompression failed, data probably corrupt [ 155.075030][ T7888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.089877][ T7888] Cannot create hsr debugfs directory [ 155.096464][ T8015] SQUASHFS error: Failed to read block 0x4de: -5 [ 155.114520][ T8015] SQUASHFS error: zlib decompression failed, data probably corrupt [ 155.147100][ T8015] SQUASHFS error: Failed to read block 0x4df: -5 [ 155.167770][ T8015] SQUASHFS error: zlib decompression failed, data probably corrupt [ 155.184348][ T8015] SQUASHFS error: Failed to read block 0x4e0: -5 [ 155.198477][ T8015] SQUASHFS error: zlib decompression failed, data probably corrupt [ 155.235027][ T8015] SQUASHFS error: Failed to read block 0x4de: -5 [ 155.375500][ T7888] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.524234][ T7888] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.704073][ T7888] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.788054][ T788] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.909774][ T7888] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.949203][ T5785] Bluetooth: hci3: command tx timeout [ 155.999577][ T788] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 156.017647][ T788] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.033878][ T788] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 156.051423][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.081156][ T788] usb 1-1: config 0 descriptor?? [ 156.297760][ T7888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.313282][ T7888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.336770][ T7888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.365085][ T7888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 156.500272][ T788] hid (null): unknown global tag 0xc [ 156.592554][ T7888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.635367][ T7888] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.657099][ T8043] loop3: detected capacity change from 0 to 32768 [ 156.671632][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.678829][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.710338][ T788] usb 1-1: string descriptor 0 read error: -71 [ 156.712789][ T8043] JBD2: Ignoring recovery information on journal [ 156.732311][ T788] uclogic 0003:5543:004D.000C: failed retrieving string descriptor #200: -71 [ 156.748780][ T788] uclogic 0003:5543:004D.000C: failed retrieving pen parameters: -71 [ 156.760077][ T788] uclogic 0003:5543:004D.000C: failed probing pen v2 parameters: -71 [ 156.770486][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.777958][ T788] uclogic 0003:5543:004D.000C: failed probing parameters: -71 [ 156.778901][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.785531][ T788] uclogic: probe of 0003:5543:004D.000C failed with error -71 [ 156.804032][ T788] usb 1-1: USB disconnect, device number 8 [ 156.889361][ T8043] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 157.221168][ T6053] ocfs2: Unmounting device (7,3) on (node local) [ 157.386904][ T7888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.570695][ T7888] veth0_vlan: entered promiscuous mode [ 157.621621][ T7888] veth1_vlan: entered promiscuous mode [ 157.735261][ T7888] veth0_macvtap: entered promiscuous mode [ 157.768075][ T7888] veth1_macvtap: entered promiscuous mode [ 157.820305][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.853022][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.879308][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.927714][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.950103][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.971058][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.009176][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.027816][ T5785] Bluetooth: hci3: command tx timeout [ 158.052141][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.088147][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.100045][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.115368][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.125285][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.137727][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.156917][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.190995][ T7888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.207725][ T7888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.226812][ T7888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.259378][ T7888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.382749][ T8074] loop3: detected capacity change from 0 to 32768 [ 158.402159][ T8074] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.800 (8074) [ 158.465262][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.481942][ T8074] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.504969][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.521951][ T8074] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 158.567271][ T8074] BTRFS info (device loop3): using free space tree [ 158.615301][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.637063][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.726256][ T8074] BTRFS info (device loop3): enabling ssd optimizations [ 158.757963][ T8074] BTRFS info (device loop3): auto enabling async discard [ 158.959876][ T6053] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.168764][ T8129] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.628502][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 159.628516][ T28] audit: type=1326 audit(1788784473.230:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8137 comm="syz.2.813" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f299839e159 code=0x0 [ 160.140905][ T8135] loop0: detected capacity change from 0 to 32768 [ 160.168006][ T8135] JBD2: Ignoring recovery information on journal [ 160.251501][ T8135] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 160.341203][ T8141] loop1: detected capacity change from 0 to 32768 [ 160.382959][ T8141] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 160.418110][ T8141] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 160.450963][ T28] audit: type=1800 audit(1788784474.050:70): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.810" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 160.480442][ T8141] JBD2: Ignoring recovery information on journal [ 160.611472][ T8141] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 160.705336][ T8147] loop3: detected capacity change from 0 to 32768 [ 160.713580][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 160.836660][ T8147] JBD2: Ignoring recovery information on journal [ 160.893486][ T8167] (syz.1.811,8167,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 160.959481][ T8147] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 161.189431][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 161.337314][ T8173] tipc: Started in network mode [ 161.343623][ T8173] tipc: Node identity , cluster identity 4711 [ 161.350237][ T6053] ocfs2: Unmounting device (7,3) on (node local) [ 161.764091][ T8168] loop0: detected capacity change from 0 to 32768 [ 161.788266][ T8168] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.818 (8168) [ 161.833078][ T8168] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.867928][ T8168] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 161.876632][ T8168] BTRFS info (device loop0): using free space tree [ 162.034641][ T8168] BTRFS info (device loop0): enabling ssd optimizations [ 162.078877][ T8168] BTRFS info (device loop0): auto enabling async discard [ 162.332866][ T5774] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.727878][ T6045] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (6045) [ 162.805794][ T8203] loop1: detected capacity change from 0 to 32768 [ 162.909594][ T8203] JBD2: Ignoring recovery information on journal [ 163.057721][ T5764] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 163.100961][ T8203] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 163.283431][ T28] audit: type=1800 audit(1788784476.880:71): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.825" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 163.285308][ T5764] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.312359][ T8218] loop2: detected capacity change from 0 to 256 [ 163.321077][ T8214] loop0: detected capacity change from 0 to 32768 [ 163.362657][ T5764] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 223, using maximum allowed: 30 [ 163.393392][ T8214] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 163.395348][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.415060][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.424876][ T5764] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 163.438492][ T8214] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 163.448053][ T5764] usb 4-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00 [ 163.457135][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 163.466000][ T5764] usb 4-1: Product: syz [ 163.472326][ T8214] JBD2: Ignoring recovery information on journal [ 163.481994][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 163.489888][ T5764] usb 4-1: config 0 descriptor?? [ 163.571177][ T8214] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 163.858432][ T8214] (syz.0.827,8214,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 163.958800][ T5764] wacom 0003:056A:0343.000D: unknown main item tag 0x4 [ 163.981938][ T5764] wacom 0003:056A:0343.000D: unknown main item tag 0xd [ 164.010699][ T5764] wacom 0003:056A:0343.000D: hidraw0: USB HID v0.81 Device [syz] on usb-dummy_hcd.3-1/input0 [ 164.028576][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 164.265003][ T5764] usb 4-1: USB disconnect, device number 6 [ 164.915416][ T8235] loop1: detected capacity change from 0 to 256 [ 164.935128][ T8235] exfat: Deprecated parameter 'utf8' [ 164.953209][ T8235] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 165.152542][ T5811] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 165.179865][ T5764] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.217835][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.339298][ T5811] usb 3-1: not running at top speed; connect to a high speed hub [ 165.349574][ T5811] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 165.358672][ T5811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.368892][ T5811] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 165.378142][ T5811] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 165.387184][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.387955][ T5764] usb 1-1: Using ep0 maxpacket: 32 [ 165.398836][ T5811] usb 3-1: config 0 descriptor?? [ 165.408725][ T5764] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 25, changing to 8 [ 165.410118][ T5811] usb 3-1: Found UVC 9.00 device (046d:0825) [ 165.435531][ T5764] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.449177][ T5764] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.456033][ T5764] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 165.465890][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.477726][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.486572][ T9] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.500666][ T5764] usb 1-1: config 0 descriptor?? [ 165.511114][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.518068][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 165.528343][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.541383][ T9] usb 4-1: config 0 descriptor?? [ 165.922966][ T5764] dragonrise 0003:0079:0006.000E: unknown main item tag 0x0 [ 165.934759][ T5764] dragonrise 0003:0079:0006.000E: item fetching failed at offset 3/24 [ 165.946654][ T5764] dragonrise 0003:0079:0006.000E: parse failed [ 165.953159][ T5764] dragonrise: probe of 0003:0079:0006.000E failed with error -22 [ 165.974512][ T9] kye 0003:0458:501A.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 165.992330][ T9] kye 0003:0458:501A.000F: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.3-1/input0 [ 166.003586][ T9] kye 0003:0458:501A.000F: tablet-enabling feature report not found [ 166.011885][ T9] kye 0003:0458:501A.000F: tablet enabling failed [ 166.026327][ T5811] uvcvideo 3-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 166.048275][ T5811] uvcvideo 3-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 166.057132][ T5811] uvcvideo 3-1:0.1: Failed to initialize the device (-71). [ 166.094944][ T5811] usb 3-1: USB disconnect, device number 6 [ 166.182708][ T27] usb 1-1: USB disconnect, device number 9 [ 166.196596][ T9] usb 4-1: USB disconnect, device number 7 [ 166.892910][ T8246] loop3: detected capacity change from 0 to 512 [ 166.931414][ T8246] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.841: inode has both inline data and extents flags [ 166.980768][ T8246] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.841: couldn't read orphan inode 15 (err -117) [ 166.994610][ T8246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.034933][ T28] audit: type=1800 audit(1788784480.630:72): pid=8246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.841" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 167.257891][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 167.277690][ T8259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.854'. [ 167.302093][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 167.322162][ T8259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.854'. [ 167.332755][ T6053] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.487786][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 167.702466][ T27] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 167.717501][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.735769][ T27] usb 2-1: Product: syz [ 167.742664][ T27] usb 2-1: Manufacturer: syz [ 167.747301][ T27] usb 2-1: SerialNumber: syz [ 167.771079][ T27] usb 2-1: config 0 descriptor?? [ 167.785594][ T27] hub 2-1:0.0: bad descriptor, ignoring hub [ 167.794033][ T27] hub: probe of 2-1:0.0 failed with error -5 [ 168.009830][ T27] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 168.039334][ T27] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 168.057811][ T27] dib0700: firmware download failed at 7 with -22 [ 168.080909][ T8276] loop0: detected capacity change from 0 to 128 [ 168.106505][ T8276] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.137096][ T8276] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.278156][ T27] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 168.373384][ T8282] syz.3.858[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.373614][ T8282] syz.3.858[8282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.489667][ T27] usb 2-1: device firmware changed [ 168.508924][ T27] usb 2-1: USB disconnect, device number 4 [ 168.871362][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 169.062590][ T27] usb 2-1: string descriptor 0 read error: -22 [ 169.068998][ T27] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 169.078163][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.087861][ T27] usb 2-1: config 0 descriptor?? [ 169.094875][ T27] hub 2-1:0.0: bad descriptor, ignoring hub [ 169.100926][ T27] hub: probe of 2-1:0.0 failed with error -5 [ 169.319318][ T27] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 169.331360][ T27] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 169.339490][ T27] dib0700: firmware download failed at 7 with -22 [ 169.378876][ T27] usb 2-1: USB disconnect, device number 5 [ 169.897043][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 169.906090][ T8285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.859'. [ 169.933589][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 169.948499][ T8285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.859'. [ 170.207733][ T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.218070][ T5764] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 170.387634][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 170.394865][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 170.407609][ T27] usb 3-1: config 0 has no interface number 0 [ 170.417415][ T5764] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 170.431328][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.440319][ T5764] usb 4-1: Product: syz [ 170.440501][ T27] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 170.446982][ T5764] usb 4-1: Manufacturer: syz [ 170.465429][ T5764] usb 4-1: SerialNumber: syz [ 170.466399][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.478361][ T5764] usb 4-1: config 0 descriptor?? [ 170.490323][ T27] usb 3-1: Product: syz [ 170.494541][ T27] usb 3-1: Manufacturer: syz [ 170.496724][ T5764] hub 4-1:0.0: bad descriptor, ignoring hub [ 170.507948][ T27] usb 3-1: SerialNumber: syz [ 170.520810][ T5764] hub: probe of 4-1:0.0 failed with error -5 [ 170.525177][ T27] usb 3-1: config 0 descriptor?? [ 170.550728][ T27] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 170.559728][ T27] usb 3-1: selecting invalid altsetting 1 [ 170.565475][ T27] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 170.591358][ T27] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 170.607862][ T27] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 170.616189][ T27] usb 3-1: media controller created [ 170.643437][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.708344][ T5764] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 170.731758][ T5764] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 170.741586][ T5764] dib0700: firmware download failed at 7 with -22 [ 170.977679][ T5764] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 171.171013][ T5764] usb 4-1: device firmware changed [ 171.178117][ T5764] usb 4-1: USB disconnect, device number 8 [ 171.254824][ T8297] loop1: detected capacity change from 0 to 32768 [ 171.267954][ T8297] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.862 (8297) [ 171.285091][ T8297] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.297388][ T8297] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 171.306608][ T8297] BTRFS info (device loop1): setting nodatacow, compression disabled [ 171.315468][ T8297] BTRFS info (device loop1): force clearing of disk cache [ 171.323016][ T8297] BTRFS info (device loop1): turning off barriers [ 171.332039][ T8297] BTRFS info (device loop1): use no compression [ 171.338711][ T8297] BTRFS info (device loop1): disabling free space tree [ 171.345679][ T8297] BTRFS info (device loop1): enabling ssd optimizations [ 171.353226][ T8297] BTRFS info (device loop1): using spread ssd allocation scheme [ 171.362519][ T8297] BTRFS info (device loop1): turning on flush-on-commit [ 171.415482][ T8297] BTRFS info (device loop1): rebuilding free space tree [ 171.440477][ T8297] BTRFS info (device loop1): disabling free space tree [ 171.452690][ T8297] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.463895][ T8297] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 171.485760][ T8297] BTRFS info (device loop1): checking UUID tree [ 171.557744][ T5764] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 171.594528][ T5777] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.777222][ T5764] usb 4-1: string descriptor 0 read error: -22 [ 171.787163][ T5764] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 171.788365][ T27] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 171.797904][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.823023][ T6045] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop1 scanned by udevd (6045) [ 171.829879][ T5764] usb 4-1: config 0 descriptor?? [ 171.844481][ T27] zl10353_read_register: readreg error (reg=127, ret==-110) [ 171.870144][ T8288] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 171.888891][ T5764] hub 4-1:0.0: bad descriptor, ignoring hub [ 171.907222][ T5764] hub: probe of 4-1:0.0 failed with error -5 [ 172.009092][ T27] usb 3-1: USB disconnect, device number 7 [ 172.174704][ T5764] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 172.208571][ T5764] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 172.216672][ T5764] dib0700: firmware download failed at 7 with -22 [ 172.283003][ T5764] usb 4-1: USB disconnect, device number 9 [ 172.971701][ T8339] loop0: detected capacity change from 0 to 32768 [ 172.985005][ T8339] XFS: ikeep mount option is deprecated. [ 173.045697][ T8339] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 173.171264][ T8339] XFS (loop0): Ending clean mount [ 173.189242][ T8339] XFS (loop0): Quotacheck needed: Please wait. [ 173.245076][ T8339] XFS (loop0): Quotacheck: Done. [ 173.402898][ T5811] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 173.410259][ T5774] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 173.591471][ T5811] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 173.601339][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.609683][ T5811] usb 4-1: Product: syz [ 173.614305][ T5811] usb 4-1: Manufacturer: syz [ 173.620447][ T5811] usb 4-1: SerialNumber: syz [ 173.628804][ T5811] usb 4-1: config 0 descriptor?? [ 173.635936][ T5811] hub 4-1:0.0: bad descriptor, ignoring hub [ 173.647682][ T5811] hub: probe of 4-1:0.0 failed with error -5 [ 173.844184][ T8366] loop1: detected capacity change from 0 to 32768 [ 173.846903][ T5811] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 173.870852][ T5811] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 173.881868][ T5811] dib0700: firmware download failed at 7 with -22 [ 174.097685][ T5811] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 174.308698][ T5811] usb 4-1: device firmware changed [ 174.314236][ T5811] usb 4-1: USB disconnect, device number 10 [ 174.659628][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 174.677673][ T5811] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 174.877704][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 174.885211][ T5811] usb 4-1: string descriptor 0 read error: -22 [ 174.889504][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.894714][ T5811] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 174.908393][ T8] usb 2-1: config 0 has no interface number 0 [ 174.930084][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.932738][ T8] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 174.962491][ T5811] usb 4-1: config 0 descriptor?? [ 174.974969][ T5811] hub 4-1:0.0: bad descriptor, ignoring hub [ 174.977878][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.992026][ T5811] hub: probe of 4-1:0.0 failed with error -5 [ 175.004488][ T8] usb 2-1: Product: syz [ 175.017053][ T8] usb 2-1: Manufacturer: syz [ 175.024327][ T8] usb 2-1: SerialNumber: syz [ 175.038897][ T8] usb 2-1: config 0 descriptor?? [ 175.057452][ T8] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 175.072999][ T8] usb 2-1: selecting invalid altsetting 1 [ 175.078982][ T8] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 175.091502][ T8] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.106972][ T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 175.118325][ T8380] loop2: detected capacity change from 0 to 32768 [ 175.129728][ T8380] XFS: ikeep mount option is deprecated. [ 175.145769][ T8] usb 2-1: media controller created [ 175.172938][ T8380] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 175.219635][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.238524][ T8380] XFS (loop2): Ending clean mount [ 175.267388][ T8380] XFS (loop2): Quotacheck needed: Please wait. [ 175.285317][ T5811] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 175.299733][ T5811] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 175.308131][ T5811] dib0700: firmware download failed at 7 with -22 [ 175.327035][ T8380] XFS (loop2): Quotacheck: Done. [ 175.357292][ T5811] usb 4-1: USB disconnect, device number 11 [ 175.444095][ T7888] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 176.347992][ T8] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 176.355279][ T8] zl10353_read_register: readreg error (reg=127, ret==-110) [ 176.388013][ T8372] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 176.425764][ T8] usb 2-1: USB disconnect, device number 6 [ 177.241238][ T5764] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 177.439904][ T5764] usb 1-1: Using ep0 maxpacket: 8 [ 177.446327][ T5764] usb 1-1: config 0 interface 0 has no altsetting 0 [ 177.453026][ T5764] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 177.462262][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.472372][ T5764] usb 1-1: config 0 descriptor?? [ 177.894997][ T5764] uclogic 0003:5543:0042.0010: ignoring exceeding usage max [ 177.904547][ T5764] uclogic 0003:5543:0042.0010: No inputs registered, leaving [ 177.914671][ T5764] uclogic 0003:5543:0042.0010: hidraw0: USB HID v0.81 Device [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 178.116388][ T5764] usb 1-1: USB disconnect, device number 10 [ 178.773726][ T5811] IPVS: starting estimator thread 0... [ 178.888196][ T8431] IPVS: using max 21 ests per chain, 50400 per kthread [ 178.949201][ T8436] netlink: 5 bytes leftover after parsing attributes in process `syz.0.910'. [ 179.368167][ T5764] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 179.444012][ T8457] loop1: detected capacity change from 0 to 4096 [ 179.509243][ T8457] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 179.536593][ T8457] ntfs3: loop1: Failed to load $Extend (-22). [ 179.548090][ T8457] ntfs3: loop1: Failed to initialize $Extend. [ 179.559978][ T5764] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.594736][ T5764] usb 1-1: config 0 interface 0 has no altsetting 0 [ 179.619108][ T5764] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 179.644292][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.674208][ T5764] usb 1-1: config 0 descriptor?? [ 180.119379][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.130031][ T8467] loop2: detected capacity change from 0 to 40427 [ 180.133657][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.144248][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.152262][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.161380][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.162215][ T8467] F2FS-fs (loop2): invalid crc value [ 180.172474][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.183459][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.191311][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.199251][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.206941][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.214980][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.217067][ T8467] F2FS-fs (loop2): Found nat_bits in checkpoint [ 180.222907][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.236687][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.244453][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.252417][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.259911][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.267516][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.277816][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.285298][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.293376][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.301052][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.328791][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.346551][ T8467] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 180.347025][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.378542][ T5764] magicmouse 0003:05AC:0265.0011: unknown main item tag 0x0 [ 180.401233][ T5764] magicmouse 0003:05AC:0265.0011: hidraw0: USB HID v2.53 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 180.425690][ T5764] magicmouse 0003:05AC:0265.0011: magicmouse input not registered [ 180.463341][ T5764] magicmouse: probe of 0003:05AC:0265.0011 failed with error -12 [ 180.508025][ T5764] usb 1-1: USB disconnect, device number 11 [ 180.610173][ T8475] fido_id[8475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 181.225235][ T8497] loop2: detected capacity change from 0 to 256 [ 181.257409][ T8497] exfat: Deprecated parameter 'namecase' [ 181.325195][ T8497] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 181.728891][ T8515] loop3: detected capacity change from 0 to 64 [ 181.911647][ T8515] Trying to free block not in datazone [ 181.970193][ T8519] Trying to free block not in datazone [ 181.976165][ T8519] minix_free_inode: bit 3 already cleared [ 182.064794][ T8499] loop0: detected capacity change from 0 to 32768 [ 182.092979][ T8499] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.940 (8499) [ 182.125401][ T8499] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.141363][ T8499] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 182.168649][ T8499] BTRFS info (device loop0): setting nodatasum [ 182.185049][ T8499] BTRFS info (device loop0): force zlib compression, level 3 [ 182.207718][ T8499] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 182.265008][ T8499] BTRFS info (device loop0): use lzo compression, level 0 [ 182.288024][ T8499] BTRFS info (device loop0): turning on flush-on-commit [ 182.295032][ T8499] BTRFS info (device loop0): enabling auto defrag [ 182.328252][ T8499] BTRFS info (device loop0): max_inline at 4096 [ 182.334571][ T8499] BTRFS info (device loop0): using free space tree [ 182.510648][ T8499] BTRFS info (device loop0): enabling ssd optimizations [ 182.562538][ T8534] loop1: detected capacity change from 0 to 4096 [ 182.643598][ T8534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.937151][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.958076][ T5774] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.483594][ T8548] loop2: detected capacity change from 0 to 32768 [ 183.527065][ T8567] loop0: detected capacity change from 0 to 1764 [ 183.568256][ T5764] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.759477][ T8571] loop0: detected capacity change from 0 to 256 [ 183.775705][ T8571] exfat: Deprecated parameter 'utf8' [ 183.791249][ T8571] exfat: Deprecated parameter 'utf8' [ 183.803049][ T5764] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 183.812509][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.824356][ T8571] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 183.832855][ T5764] usb 2-1: Product: syz [ 183.854405][ T5764] usb 2-1: Manufacturer: syz [ 183.872631][ T5764] usb 2-1: SerialNumber: syz [ 183.900972][ T5764] usb 2-1: config 0 descriptor?? [ 183.924191][ T5764] hub 2-1:0.0: bad descriptor, ignoring hub [ 183.931749][ T8571] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 183.939456][ T5764] hub: probe of 2-1:0.0 failed with error -5 [ 183.993067][ T8571] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 184.154872][ T5764] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 184.183667][ T5764] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 184.186972][ T8573] loop0: detected capacity change from 0 to 512 [ 184.216546][ T8573] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 184.217653][ T5764] dib0700: firmware download failed at 7 with -22 [ 184.236621][ T8573] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 184.245420][ T8573] System zones: 0-1, 15-15, 18-18, 34-34 [ 184.251957][ T8573] EXT4-fs (loop0): orphan cleanup on readonly fs [ 184.258809][ T8573] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 184.269202][ T8573] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 184.288157][ T8573] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 184.301579][ T8573] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.966: bg 0: block 40: padding at end of block bitmap is not set [ 184.329926][ T8573] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 184.355761][ T8573] EXT4-fs (loop0): 1 truncate cleaned up [ 184.363481][ T8573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.416722][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.496910][ T8578] loop0: detected capacity change from 0 to 512 [ 184.498044][ T5764] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 184.523031][ T8578] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.549625][ T8578] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.594807][ T8578] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.967: bad orphan inode 131072 [ 184.612231][ T8578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.685529][ T8578] overlayfs: upper fs needs to support d_type. [ 184.701143][ T5764] usb 2-1: device firmware changed [ 184.706884][ T5764] usb 2-1: USB disconnect, device number 7 [ 184.733551][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 184.759426][ T5774] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /257/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 184.919403][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.930455][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.940955][ T8] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 184.950268][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.960841][ T8] usb 4-1: config 0 descriptor?? [ 185.054966][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.089926][ T5764] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 185.132654][ T3483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.215000][ T3483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.322279][ T5764] usb 2-1: string descriptor 0 read error: -22 [ 185.328911][ T5764] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 185.330768][ T3483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.339626][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.360553][ T5764] usb 2-1: config 0 descriptor?? [ 185.368759][ T5764] hub 2-1:0.0: bad descriptor, ignoring hub [ 185.375269][ T5764] hub: probe of 2-1:0.0 failed with error -5 [ 185.386236][ T8] hid-thrustmaster 0003:044F:B65D.0012: item fetching failed at offset 5/7 [ 185.400839][ T8] hid-thrustmaster 0003:044F:B65D.0012: parse failed with error -22 [ 185.409511][ T8] hid-thrustmaster: probe of 0003:044F:B65D.0012 failed with error -22 [ 185.431009][ T3483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.505155][ T3483] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.529305][ T3483] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.553959][ T3483] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.572236][ T3483] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.656573][ T5813] usb 4-1: USB disconnect, device number 12 [ 185.716940][ T5764] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 185.736823][ T5764] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 185.760362][ T5764] dib0700: firmware download failed at 7 with -22 [ 185.800101][ T5764] usb 2-1: USB disconnect, device number 8 [ 186.758242][ T3483] hsr_slave_0: left promiscuous mode [ 186.767349][ T3483] hsr_slave_1: left promiscuous mode [ 186.784759][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.793415][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.804685][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.813015][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.822310][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.833462][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.842129][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 186.851058][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.862129][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.866360][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.880827][ T3483] bridge_slave_1: left allmulticast mode [ 186.887097][ T3483] bridge_slave_1: left promiscuous mode [ 186.902293][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.913579][ T3483] bridge_slave_0: left allmulticast mode [ 186.919769][ T3483] bridge_slave_0: left promiscuous mode [ 186.925654][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.956950][ T3483] veth1_macvtap: left promiscuous mode [ 186.962698][ T3483] veth0_macvtap: left promiscuous mode [ 186.968510][ T3483] veth1_vlan: left promiscuous mode [ 186.973845][ T3483] veth0_vlan: left promiscuous mode [ 187.306377][ T8623] loop3: detected capacity change from 0 to 4096 [ 187.322307][ T8623] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 187.410365][ T8623] ntfs3: loop3: failed to convert "c46c" to iso8859-9 [ 188.180026][ T3483] team0 (unregistering): Port device team_slave_1 removed [ 188.234324][ T3483] team0 (unregistering): Port device team_slave_0 removed [ 188.284531][ T3483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.296955][ T3483] bond_slave_1 (unregistering): left allmulticast mode [ 188.367606][ T3483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.376919][ T3483] bond_slave_0 (unregistering): left allmulticast mode [ 188.761788][ T8638] loop3: detected capacity change from 0 to 256 [ 188.788583][ T8638] exfat: Deprecated parameter 'namecase' [ 188.831960][ T8638] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 188.904612][ T3483] bond0 (unregistering): Released all slaves [ 188.912257][ T51] Bluetooth: hci0: command tx timeout [ 189.122260][ T8641] loop3: detected capacity change from 0 to 8 [ 189.174898][ T8641] SQUASHFS error: Failed to read block 0x6e6: -5 [ 189.186888][ T8641] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 189.213740][ T8641] SQUASHFS error: Unable to read directory block [6e4:0] [ 189.363292][ T8613] chnl_net:caif_netlink_parms(): no params data found [ 189.524476][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.542969][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.554908][ T8613] bridge_slave_0: entered allmulticast mode [ 189.564763][ T8613] bridge_slave_0: entered promiscuous mode [ 189.600820][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.622431][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.643652][ T8613] bridge_slave_1: entered allmulticast mode [ 189.681101][ T8613] bridge_slave_1: entered promiscuous mode [ 189.747394][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.764464][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.855394][ T8613] team0: Port device team_slave_0 added [ 189.877342][ T8613] team0: Port device team_slave_1 added [ 189.942946][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.956134][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.983949][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.996930][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.004656][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.037882][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.124404][ T8613] hsr_slave_0: entered promiscuous mode [ 190.131023][ T8613] hsr_slave_1: entered promiscuous mode [ 190.257002][ T8613] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.376369][ T8613] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.490413][ T8613] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.606237][ T8613] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.785091][ T8613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.795636][ T8613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.805880][ T8613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.820404][ T8613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.908827][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.933077][ T8613] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.947902][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.955049][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.968969][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.976104][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.987636][ T51] Bluetooth: hci0: command tx timeout [ 191.270815][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.325516][ T8613] veth0_vlan: entered promiscuous mode [ 191.344396][ T8613] veth1_vlan: entered promiscuous mode [ 191.385682][ T8613] veth0_macvtap: entered promiscuous mode [ 191.403239][ T8613] veth1_macvtap: entered promiscuous mode [ 191.431096][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.446884][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.456915][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.475214][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.485176][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.497753][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.510104][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.522084][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.532615][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.543609][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.554105][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.564248][ T8613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.575057][ T8613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.586387][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.606439][ T8613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.616023][ T8613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.629489][ T8613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.645651][ T8613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.762377][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.783023][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.820854][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.837836][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.277632][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 192.478755][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 192.486008][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.498915][ T8] usb 1-1: config 0 has no interface number 0 [ 192.516212][ T8] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 192.526734][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.540272][ T8] usb 1-1: Product: syz [ 192.544473][ T8] usb 1-1: Manufacturer: syz [ 192.551849][ T8] usb 1-1: SerialNumber: syz [ 192.570567][ T8] usb 1-1: config 0 descriptor?? [ 192.584435][ T8] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 192.594057][ T8] usb 1-1: selecting invalid altsetting 1 [ 192.606518][ T8] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 192.623092][ T8] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 192.633981][ T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 192.642531][ T8] usb 1-1: media controller created [ 192.675131][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.068046][ T51] Bluetooth: hci0: command tx timeout [ 193.787986][ T8] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 193.796143][ T8] zl10353_read_register: readreg error (reg=127, ret==-110) [ 193.818124][ T8718] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 193.836509][ T8] usb 1-1: USB disconnect, device number 12 [ 194.440209][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.446562][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.625510][ T8770] loop0: detected capacity change from 0 to 4096 [ 194.660630][ T8770] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 194.809387][ T8770] ntfs3: loop0: failed to convert "c46c" to iso8859-9 [ 195.147962][ T51] Bluetooth: hci0: command tx timeout [ 195.616478][ T8780] loop1: detected capacity change from 0 to 256 [ 195.645726][ T8780] exfat: Deprecated parameter 'namecase' [ 195.714856][ T8780] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 195.857665][ T788] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 195.973449][ T8787] loop2: detected capacity change from 0 to 64 [ 196.023845][ T8787] Trying to free block not in datazone [ 196.047733][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 196.063518][ T8787] Trying to free block not in datazone [ 196.071761][ T8775] loop3: detected capacity change from 0 to 32768 [ 196.073937][ T8787] minix_free_inode: bit 3 already cleared [ 196.085756][ T788] usb 1-1: too many endpoints for config 0 interface 0 altsetting 4: 132, using maximum allowed: 30 [ 196.098982][ T788] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 196.113334][ T788] usb 1-1: config 0 interface 0 has no altsetting 0 [ 196.174056][ T788] usb 1-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 196.200961][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.225217][ T788] usb 1-1: config 0 descriptor?? [ 196.345061][ T8793] loop2: detected capacity change from 0 to 256 [ 196.698483][ T788] wacom 0003:056A:0015.0013: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 196.728827][ T788] wacom 0003:056A:0015.0013: hidraw0: USB HID v10.05 Device [HID 056a:0015] on usb-dummy_hcd.0-1/input0 [ 196.761865][ T788] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0015.0013/input/input17 [ 196.997976][ T8] usb 1-1: USB disconnect, device number 13 [ 197.588066][ T8810] loop3: detected capacity change from 0 to 32768 [ 197.634275][ T8810] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 197.768732][ T5765] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 198.014619][ T8818] loop0: detected capacity change from 0 to 512 [ 198.061254][ T8818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.087771][ T8818] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.102895][ T8812] loop2: detected capacity change from 0 to 32768 [ 198.132390][ T8812] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1010 (8812) [ 198.159875][ T8818] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 198.222113][ T8613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.231235][ T8812] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.251029][ T8822] loop3: detected capacity change from 0 to 512 [ 198.287740][ T8812] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 198.306157][ T8812] BTRFS info (device loop2): setting nodatasum [ 198.324756][ T8822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.341396][ T8812] BTRFS info (device loop2): force zlib compression, level 3 [ 198.347722][ T8822] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.367599][ T8812] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 198.403164][ T8812] BTRFS info (device loop2): use lzo compression, level 0 [ 198.446141][ T8812] BTRFS info (device loop2): turning on flush-on-commit [ 198.463467][ T8822] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #12: comm syz.3.1017: Directory hole found for htree leaf block 0 [ 198.486007][ T8812] BTRFS info (device loop2): enabling auto defrag [ 198.494750][ T8812] BTRFS info (device loop2): max_inline at 4096 [ 198.512409][ T8822] EXT4-fs (loop3): Remounting filesystem read-only [ 198.524489][ T8812] BTRFS info (device loop2): using free space tree [ 198.639744][ T8812] BTRFS info (device loop2): enabling ssd optimizations [ 198.730811][ T6053] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.763414][ T3553] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.798035][ T3553] Quota error (device loop3): write_blk: dquota write failed [ 198.819700][ T3553] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 198.833337][ T8853] netlink: 'syz.0.1021': attribute type 29 has an invalid length. [ 198.838496][ T3553] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.867741][ T3553] Quota error (device loop3): write_blk: dquota write failed [ 198.886414][ T3553] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 198.888411][ T8853] netlink: 'syz.0.1021': attribute type 29 has an invalid length. [ 198.962676][ T8853] netlink: 'syz.0.1021': attribute type 29 has an invalid length. [ 199.049685][ T7888] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.763797][ T8875] loop1: detected capacity change from 0 to 4096 [ 200.106554][ T8875] ntfs3: loop1: failed to convert "0080" to macromanian [ 200.146341][ T8875] ntfs3: loop1: failed to convert name for inode 1e. [ 200.504808][ T8870] loop2: detected capacity change from 0 to 32768 [ 200.516523][ T8866] loop0: detected capacity change from 0 to 32768 [ 200.558051][ T8870] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 200.606292][ T8866] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.682570][ T6045] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 200.928036][ T8866] XFS (loop0): Ending clean mount [ 200.940044][ T5785] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 200.981574][ T8866] XFS (loop0): Quotacheck needed: Please wait. [ 201.133481][ T8866] XFS (loop0): Quotacheck: Done. [ 201.486508][ T8613] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.585487][ T8893] loop2: detected capacity change from 0 to 32768 [ 201.829369][ T8893] JBD2: Ignoring recovery information on journal [ 201.993809][ T8893] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 202.332066][ T7888] ocfs2: Unmounting device (7,2) on (node local) [ 202.944250][ T8922] loop3: detected capacity change from 0 to 32768 [ 202.984115][ T8922] JBD2: Ignoring recovery information on journal [ 203.191013][ T8922] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 203.210270][ T8948] loop0: detected capacity change from 0 to 64 [ 203.253656][ T3553] (kworker/u4:11,3553,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 203.580835][ T6053] ocfs2: Unmounting device (7,3) on (node local) [ 204.086147][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'. [ 204.549795][ T8992] tipc: Enabling of bearer rejected, failed to enable media [ 204.853226][ T9007] loop1: detected capacity change from 0 to 1024 [ 204.891972][ T9007] EXT4-fs: inline encryption not supported [ 204.978217][ T9007] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 205.004687][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 205.014704][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 205.023716][ T51] Bluetooth: hci1: hardware error 0x00 [ 205.024104][ T9007] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 205.055710][ T9007] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1065: Failed to acquire dquot type 0 [ 205.115236][ T9007] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 205.173581][ T9007] EXT4-fs (loop1): 1 truncate cleaned up [ 205.188944][ T9007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.369180][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.685490][ T9014] loop0: detected capacity change from 0 to 32768 [ 205.753761][ T9014] JBD2: Ignoring recovery information on journal [ 205.902745][ T9014] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 205.969554][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 206.196455][ T8613] ocfs2: Unmounting device (7,0) on (node local) [ 207.068116][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 207.118865][ T9054] loop3: detected capacity change from 0 to 1164 [ 208.077197][ T9073] loop2: detected capacity change from 0 to 4096 [ 208.116364][ T9059] loop1: detected capacity change from 0 to 32768 [ 208.176538][ T9059] JBD2: Ignoring recovery information on journal [ 208.212735][ T9073] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 208.316649][ T9073] ntfs3: loop2: Failed to load $Extend (-22). [ 208.357104][ T9073] ntfs3: loop2: Failed to initialize $Extend. [ 208.366199][ T9059] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 208.792600][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 208.829313][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 209.416938][ T28] audit: type=1326 audit(1788784523.010:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.0.1097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 209.441865][ T9094] loop2: detected capacity change from 0 to 2048 [ 209.489480][ T28] audit: type=1326 audit(1788784523.020:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.0.1097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 209.491674][ T9094] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.590131][ T28] audit: type=1326 audit(1788784523.060:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.0.1097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 209.662728][ T28] audit: type=1326 audit(1788784523.060:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.0.1097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 209.767665][ T28] audit: type=1326 audit(1788784523.060:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.0.1097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 209.878428][ T28] audit: type=1326 audit(1788784523.060:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.0.1097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 209.938237][ T28] audit: type=1326 audit(1788784523.060:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.0.1097" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 210.446152][ T9109] Bluetooth: MGMT ver 1.22 [ 210.497140][ T9100] loop0: detected capacity change from 0 to 32768 [ 210.537752][ T9100] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1100 (9100) [ 210.599799][ T9100] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.632094][ T9100] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 210.651555][ T9100] BTRFS info (device loop0): allowing degraded mounts [ 210.667656][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 210.678053][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 210.687153][ T9100] BTRFS info (device loop0): metadata ratio 4 [ 210.687252][ T5785] Bluetooth: hci0: hardware error 0x00 [ 210.707803][ T9100] BTRFS info (device loop0): turning on sync discard [ 210.714524][ T9100] BTRFS info (device loop0): turning off discard [ 210.734222][ T9100] BTRFS info (device loop0): turning on sync discard [ 210.765904][ T9100] BTRFS info (device loop0): disabling tree log [ 210.787423][ T9100] BTRFS info (device loop0): using free space tree [ 210.824242][ T9105] loop2: detected capacity change from 0 to 32768 [ 210.884583][ T9105] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 210.939684][ T9100] BTRFS info (device loop0): enabling ssd optimizations [ 210.983395][ T9105] XFS (loop2): Ending clean mount [ 211.082432][ T8613] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.096214][ T7888] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 211.447940][ T9140] loop3: detected capacity change from 0 to 2048 [ 211.512118][ T9140] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.630799][ T9144] tipc: Started in network mode [ 211.647843][ T9144] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 211.673738][ T9144] tipc: Enabling of bearer rejected, failed to enable media [ 212.033026][ T9138] loop1: detected capacity change from 0 to 32768 [ 212.065419][ T9149] loop0: detected capacity change from 0 to 4096 [ 212.095249][ T9138] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.204006][ T9138] XFS (loop1): Ending clean mount [ 212.238843][ T9138] XFS (loop1): Quotacheck needed: Please wait. [ 212.313879][ T9149] ntfs3: loop0: failed to convert "0080" to macromanian [ 212.324360][ T9138] XFS (loop1): Quotacheck: Done. [ 212.349607][ T9149] ntfs3: loop0: failed to convert name for inode 1e. [ 212.583870][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.831951][ T5785] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 213.215909][ T9176] tipc: Enabling of bearer rejected, failed to enable media [ 213.740608][ T9171] loop2: detected capacity change from 0 to 40427 [ 213.770157][ T9171] F2FS-fs (loop2): invalid crc value [ 213.816849][ T9174] loop1: detected capacity change from 0 to 32768 [ 213.831743][ T9171] F2FS-fs (loop2): Found nat_bits in checkpoint [ 213.889661][ T9174] JBD2: Ignoring recovery information on journal [ 214.020763][ T9171] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 214.031900][ T9174] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 214.074666][ T3452] (kworker/u4:7,3452,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 214.170937][ T28] audit: type=1800 audit(1788784527.770:80): pid=9171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1118" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 214.281481][ T7888] syz-executor: attempt to access beyond end of device [ 214.281481][ T7888] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 214.327373][ T7888] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 214.369468][ T9182] loop3: detected capacity change from 0 to 32768 [ 214.381888][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 214.423698][ T9182] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.566547][ T9182] XFS (loop3): Ending clean mount [ 214.593786][ T9182] XFS (loop3): Quotacheck needed: Please wait. [ 214.687288][ T9182] XFS (loop3): Quotacheck: Done. [ 214.861549][ T6053] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 215.053539][ T9206] loop0: detected capacity change from 0 to 1164 [ 215.316595][ T9208] tipc: Enabling of bearer rejected, failed to enable media [ 215.561430][ T28] audit: type=1326 audit(1788784529.160:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.1132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50af59e159 code=0x7ffc0000 [ 215.615176][ T9214] loop0: detected capacity change from 0 to 4096 [ 215.632112][ T28] audit: type=1326 audit(1788784529.160:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.1132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50af59e159 code=0x7ffc0000 [ 215.670059][ T9217] loop2: detected capacity change from 0 to 4096 [ 215.687339][ T28] audit: type=1326 audit(1788784529.170:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.1132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f50af59e159 code=0x7ffc0000 [ 215.717253][ T9214] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 215.730720][ T9217] EXT4-fs (loop2): Test dummy encryption mode enabled [ 215.768345][ T28] audit: type=1326 audit(1788784529.170:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.1132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50af59e159 code=0x7ffc0000 [ 215.784785][ T9217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.792864][ T28] audit: type=1326 audit(1788784529.170:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.1132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50af59e159 code=0x7ffc0000 [ 215.832721][ T28] audit: type=1326 audit(1788784529.170:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.1132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f50af59e159 code=0x7ffc0000 [ 215.921744][ T28] audit: type=1326 audit(1788784529.170:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.1132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50af59e159 code=0x7ffc0000 [ 216.031545][ T7888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.048281][ T9224] tmpfs: Cannot retroactively limit inodes [ 216.055183][ T28] audit: type=1326 audit(1788784529.180:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.3.1132" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50af59e159 code=0x7ffc0000 [ 216.286267][ T9231] IPv6: Can't replace route, no match found [ 216.818286][ T9220] loop3: detected capacity change from 0 to 40427 [ 216.870293][ T9220] F2FS-fs (loop3): invalid crc value [ 216.908448][ T9220] F2FS-fs (loop3): Found nat_bits in checkpoint [ 217.080230][ T9234] loop1: detected capacity change from 0 to 32768 [ 217.091247][ T9220] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 217.176206][ T9234] JBD2: Ignoring recovery information on journal [ 217.290082][ T28] audit: type=1800 audit(1788784530.880:89): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1133" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 217.371987][ T9234] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 217.400551][ T9252] loop0: detected capacity change from 0 to 2048 [ 217.429578][ T6053] syz-executor: attempt to access beyond end of device [ 217.429578][ T6053] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 217.464141][ T9252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.492453][ T9234] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 217.519904][ T6053] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 217.562003][ T9234] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 217.618990][ T9234] OCFS2: File system is now read-only. [ 217.624523][ T9234] (syz.1.1138,9234,0):ocfs2_search_one_group:1706 ERROR: status = -30 [ 217.688516][ T9234] (syz.1.1138,9234,0):ocfs2_claim_suballoc_bits:1942 ERROR: status = -30 [ 217.697017][ T9234] (syz.1.1138,9234,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 217.727780][ T9234] (syz.1.1138,9234,0):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 217.735942][ T9234] (syz.1.1138,9234,0):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 217.775127][ T9234] (syz.1.1138,9234,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 217.787358][ T9257] loop0: detected capacity change from 0 to 256 [ 217.797509][ T9234] (syz.1.1138,9234,0):ocfs2_mknod:385 ERROR: status = -30 [ 217.802168][ T9257] exfat: Deprecated parameter 'utf8' [ 217.816058][ T9234] (syz.1.1138,9234,0):ocfs2_mknod:502 ERROR: status = -30 [ 217.836075][ T9257] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 217.851345][ T9234] (syz.1.1138,9234,0):ocfs2_mkdir:659 ERROR: status = -30 [ 217.987294][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 218.697759][ T8] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 218.906767][ T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.947669][ T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 218.970115][ T8] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.985028][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.007682][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 219.024514][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.043968][ T8] usb 4-1: config 0 descriptor?? [ 219.053972][ T9272] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 219.115400][ T9275] loop1: detected capacity change from 0 to 32768 [ 219.153578][ T9275] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 219.207900][ T9275] XFS (loop1): Ending clean mount [ 219.310050][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 219.508587][ T8] logitech 0003:046D:C293.0014: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.3-1/input0 [ 219.576404][ T8] logitech 0003:046D:C293.0014: no inputs found [ 219.701669][ T788] usb 4-1: USB disconnect, device number 13 [ 219.843682][ T9303] loop1: detected capacity change from 0 to 4096 [ 219.875015][ T9303] EXT4-fs (loop1): Test dummy encryption mode enabled [ 219.898599][ T9303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.049730][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.514284][ T9329] loop2: detected capacity change from 0 to 1024 [ 220.563735][ T9329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.651990][ T7888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.157138][ T9349] loop1: detected capacity change from 0 to 8 [ 221.903098][ T9377] loop1: detected capacity change from 0 to 1024 [ 221.951121][ T9377] EXT4-fs: inline encryption not supported [ 221.976873][ T9382] loop3: detected capacity change from 0 to 64 [ 221.978056][ T9377] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 222.016736][ T9377] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.1199: lblock 2 mapped to illegal pblock 2 (length 1) [ 222.103430][ T9377] EXT4-fs (loop1): Remounting filesystem read-only [ 222.137756][ T9377] __quota_error: 7 callbacks suppressed [ 222.137773][ T9377] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 222.231101][ T9377] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 222.268751][ T9377] EXT4-fs (loop1): 1 orphan inode deleted [ 222.275736][ T9377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.405175][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.573460][ T9394] tmpfs: Cannot retroactively limit inodes [ 222.823008][ T9383] loop0: detected capacity change from 0 to 40427 [ 222.848169][ T9383] F2FS-fs (loop0): invalid crc value [ 222.858175][ T9402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1210'. [ 222.870982][ T9402] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1210'. [ 222.885719][ T9383] F2FS-fs (loop0): Found nat_bits in checkpoint [ 223.026811][ T9383] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 223.221567][ T28] audit: type=1800 audit(1788784536.820:97): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1200" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 223.300914][ T8613] syz-executor: attempt to access beyond end of device [ 223.300914][ T8613] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.329593][ T8613] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 223.782235][ T9412] loop3: detected capacity change from 0 to 32768 [ 223.836388][ T9408] loop2: detected capacity change from 0 to 32768 [ 223.954927][ T9412] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 223.970335][ T9408] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 224.086842][ T9424] loop0: detected capacity change from 0 to 512 [ 224.095321][ T9408] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 224.126242][ T9424] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.173050][ T6053] ocfs2: Unmounting device (7,3) on (node local) [ 224.241757][ T9424] EXT4-fs (loop0): 1 truncate cleaned up [ 224.306211][ T9424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.423083][ T7888] ocfs2: Unmounting device (7,2) on (node local) [ 224.497986][ T8613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.498669][ T9418] loop1: detected capacity change from 0 to 40427 [ 224.578065][ T9418] F2FS-fs (loop1): invalid crc value [ 224.608216][ T9418] F2FS-fs (loop1): Found nat_bits in checkpoint [ 224.822666][ T9418] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 224.903906][ T5777] syz-executor: attempt to access beyond end of device [ 224.903906][ T5777] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 224.925780][ T5777] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 225.258910][ T9451] loop3: detected capacity change from 0 to 1024 [ 225.315168][ T9451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.431141][ T28] audit: type=1326 audit(1788784539.020:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.0.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 225.479517][ T28] audit: type=1326 audit(1788784539.020:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.0.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 225.481026][ T6053] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.539553][ T28] audit: type=1326 audit(1788784539.020:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.0.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 225.617604][ T28] audit: type=1326 audit(1788784539.020:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.0.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 225.707706][ T28] audit: type=1326 audit(1788784539.030:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.0.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 225.805728][ T28] audit: type=1326 audit(1788784539.030:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.0.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 225.869908][ T28] audit: type=1326 audit(1788784539.030:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.0.1226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3204d9e159 code=0x7ffc0000 [ 225.895886][ T9447] loop2: detected capacity change from 0 to 32768 [ 225.996557][ T9447] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 226.314905][ T7888] ocfs2: Unmounting device (7,2) on (node local) [ 226.355097][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 226.392579][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 226.417643][ T9476] netlink: 'syz.3.1235': attribute type 13 has an invalid length. [ 226.435857][ T9462] loop0: detected capacity change from 0 to 32768 [ 226.466068][ T9476] netlink: 'syz.3.1235': attribute type 12 has an invalid length. [ 226.475020][ T9462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1230 (9462) [ 226.498016][ T9462] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.509965][ T9462] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 226.524317][ T9462] BTRFS info (device loop0): setting nodatasum [ 226.530828][ T9462] BTRFS info (device loop0): force zlib compression, level 3 [ 226.538580][ T9462] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 226.550666][ T9462] BTRFS info (device loop0): use lzo compression, level 0 [ 226.563440][ T9462] BTRFS info (device loop0): turning on flush-on-commit [ 226.573555][ T9462] BTRFS info (device loop0): enabling auto defrag [ 226.583672][ T9462] BTRFS info (device loop0): turning off barriers [ 226.593810][ T9462] BTRFS info (device loop0): using free space tree [ 226.740623][ T9462] BTRFS info (device loop0): enabling ssd optimizations [ 226.767611][ T9462] BTRFS info (device loop0): auto enabling async discard [ 226.975200][ T8613] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.005649][ T9502] loop2: detected capacity change from 0 to 1024 [ 227.060844][ T9502] EXT4-fs: inline encryption not supported [ 227.099173][ T9502] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 227.112516][ T9505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1240'. [ 227.124943][ T9505] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1240'. [ 227.196645][ T9502] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.1238: lblock 2 mapped to illegal pblock 2 (length 1) [ 227.292176][ T9502] EXT4-fs (loop2): Remounting filesystem read-only [ 227.312162][ T9502] __quota_error: 2 callbacks suppressed [ 227.312178][ T9502] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 227.388287][ T9502] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 227.397202][ T9502] EXT4-fs (loop2): 1 orphan inode deleted [ 227.453206][ T9502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.628357][ T9492] loop3: detected capacity change from 0 to 32768 [ 227.656988][ T7888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.690978][ T9515] tipc: Enabling of bearer rejected, failed to enable media [ 227.743338][ T9492] JBD2: Ignoring recovery information on journal [ 227.858001][ T9492] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 227.996026][ T9521] mkiss: ax0: crc mode is auto. [ 228.038638][ T9492] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 228.038838][ T9492] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 228.038851][ T9492] OCFS2: File system is now read-only. [ 228.038862][ T9492] (syz.3.1236,9492,1):ocfs2_search_one_group:1706 ERROR: status = -30 [ 228.038888][ T9492] (syz.3.1236,9492,1):ocfs2_claim_suballoc_bits:1942 ERROR: status = -30 [ 228.038912][ T9492] (syz.3.1236,9492,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 228.038936][ T9492] (syz.3.1236,9492,1):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 228.038959][ T9492] (syz.3.1236,9492,1):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 228.038983][ T9492] (syz.3.1236,9492,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 228.039006][ T9492] (syz.3.1236,9492,1):ocfs2_mknod:385 ERROR: status = -30 [ 228.039215][ T9492] (syz.3.1236,9492,1):ocfs2_mknod:502 ERROR: status = -30 [ 228.059009][ T9492] (syz.3.1236,9492,1):ocfs2_mkdir:659 ERROR: status = -30 [ 228.123379][ T6053] ocfs2: Unmounting device (7,3) on (node local) [ 228.576315][ T9537] ip_tables: iptables: counters copy to user failed while replacing table [ 228.587301][ T9537] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 228.741387][ T9541] sp0: Synchronizing with TNC [ 228.745811][ T9543] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.1254'. [ 229.108006][ T9529] loop1: detected capacity change from 0 to 32768 [ 229.144086][ T9529] non-latin1 character 0x466c found in JFS file name [ 229.168484][ T9529] mount with iocharset=utf8 to access [ 229.216604][ T9556] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 229.374235][ T9562] loop3: detected capacity change from 0 to 512 [ 229.434363][ T9562] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 229.734563][ T9571] loop0: detected capacity change from 0 to 512 [ 229.798478][ T9571] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 229.881050][ T9571] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 229.922356][ T9571] EXT4-fs (loop0): 1 truncate cleaned up [ 229.933704][ T9571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.038251][ T27] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 230.080413][ T9582] loop1: detected capacity change from 0 to 128 [ 230.142126][ T9582] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.158180][ T9582] ext4 filesystem being mounted at /329/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 230.186335][ T8613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.196347][ T9585] loop2: detected capacity change from 0 to 4096 [ 230.233321][ T27] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 230.243621][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.252077][ T27] usb 4-1: Product: syz [ 230.256440][ T27] usb 4-1: Manufacturer: syz [ 230.261170][ T27] usb 4-1: SerialNumber: syz [ 230.272774][ T27] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 230.327652][ T27] scsi host1: usb-storage 4-1:1.0 [ 230.349528][ T9585] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 230.369193][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.386204][ T9585] ntfs3: loop2: Failed to load $Extend (-22). [ 230.408367][ T9585] ntfs3: loop2: Failed to initialize $Extend. [ 230.463064][ T28] audit: type=1800 audit(1788784544.060:107): pid=9585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1275" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 230.630935][ T28] audit: type=1326 audit(1788784544.230:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.1.1280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 230.683118][ T28] audit: type=1326 audit(1788784544.250:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.1.1280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 230.767601][ T28] audit: type=1326 audit(1788784544.260:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.1.1280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 230.810254][ T27] ums_eneub6250: probe of 4-1:1.0 failed with error 3 [ 230.831051][ T9602] loop2: detected capacity change from 0 to 1024 [ 230.860905][ T9602] EXT4-fs: Ignoring removed bh option [ 230.865450][ T28] audit: type=1326 audit(1788784544.260:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.1.1280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 230.866349][ T9602] EXT4-fs: Ignoring removed orlov option [ 230.904998][ T28] audit: type=1326 audit(1788784544.260:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.1.1280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 230.978316][ T8] usb 4-1: USB disconnect, device number 14 [ 231.035440][ T9602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.044874][ T28] audit: type=1326 audit(1788784544.260:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.1.1280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 231.073949][ T28] audit: type=1326 audit(1788784544.260:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.1.1280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ef59e159 code=0x7ffc0000 [ 231.151372][ T7888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.681950][ T9632] warning: `syz.2.1296' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 231.916806][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1300'. [ 232.139703][ T9644] loop3: detected capacity change from 0 to 8192 [ 232.312536][ T9653] loop1: detected capacity change from 0 to 64 [ 232.853166][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'. [ 233.598124][ T9692] Cannot find set identified by id 0 to match [ 233.816882][ T9702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1331'. [ 234.097623][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 234.111985][ T9714] loop3: detected capacity change from 0 to 256 [ 234.178695][ T9714] FAT-fs (loop3): Directory bread(block 64) failed [ 234.185310][ T9714] FAT-fs (loop3): Directory bread(block 65) failed [ 234.201622][ T9714] FAT-fs (loop3): Directory bread(block 66) failed [ 234.209749][ T9714] FAT-fs (loop3): Directory bread(block 67) failed [ 234.216386][ T9714] FAT-fs (loop3): Directory bread(block 68) failed [ 234.223341][ T9714] FAT-fs (loop3): Directory bread(block 69) failed [ 234.230359][ T9714] FAT-fs (loop3): Directory bread(block 70) failed [ 234.268381][ T9714] FAT-fs (loop3): Directory bread(block 71) failed [ 234.275053][ T9714] FAT-fs (loop3): Directory bread(block 72) failed [ 234.289650][ T9714] FAT-fs (loop3): Directory bread(block 73) failed [ 234.309260][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 234.345763][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.377784][ T27] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 234.407290][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.454848][ T27] usb 2-1: config 0 descriptor?? [ 234.891478][ T27] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0xd [ 234.902352][ T27] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0xe [ 234.912427][ T9740] loop3: detected capacity change from 0 to 1024 [ 234.920859][ T27] hid-multitouch 0003:1FD2:6007.0015: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 234.948122][ T9740] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 235.122802][ T8] usb 2-1: USB disconnect, device number 9 [ 235.359100][ T9754] tmpfs: Cannot change global quota limit on remount [ 236.028038][ T9785] loop2: detected capacity change from 0 to 8192 [ 236.082470][ T9785] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 236.119064][ T9785] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 236.136306][ T9785] REISERFS (device loop2): using ordered data mode [ 236.143595][ T9785] reiserfs: using flush barriers [ 236.150995][ T9785] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 236.188755][ T9785] REISERFS (device loop2): checking transaction log (loop2) [ 236.355634][ T9785] REISERFS (device loop2): Using tea hash to sort names [ 236.362889][ T9785] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 236.975398][ T9816] loop1: detected capacity change from 0 to 512 [ 236.990295][ T9816] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 237.031949][ T9816] EXT4-fs (loop1): 1 truncate cleaned up [ 237.063327][ T9816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.137675][ T5813] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 237.216515][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.328062][ T5813] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.357801][ T5813] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.371627][ T5813] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 237.390299][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.403358][ T5813] hub 4-1:4.0: USB hub found [ 237.647776][ T5813] hub 4-1:4.0: config failed, can't read hub descriptor (err -90) [ 237.823932][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'. [ 237.967859][ T5813] usb 4-1: USB disconnect, device number 15 [ 237.983054][ T9830] loop2: detected capacity change from 0 to 32768 [ 238.062210][ T9830] JBD2: Ignoring recovery information on journal [ 238.121053][ T9830] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 238.518630][ T7888] ocfs2: Unmounting device (7,2) on (node local) [ 239.116169][ T9863] loop1: detected capacity change from 0 to 32768 [ 239.137111][ T9863] JBD2: Ignoring recovery information on journal [ 239.222228][ T9882] tipc: Invalid UDP bearer configuration [ 239.222280][ T9882] tipc: Enabling of bearer rejected, failed to enable media [ 239.257935][ T9863] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 239.263893][ T9884] loop0: detected capacity change from 0 to 1024 [ 239.356015][ T9884] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 239.381540][ T9863] [ 239.383917][ T9863] ====================================================== [ 239.390955][ T9863] WARNING: possible circular locking dependency detected [ 239.397997][ T9863] syzkaller #0 Not tainted [ 239.402428][ T9863] ------------------------------------------------------ [ 239.409454][ T9863] syz.1.1402/9863 is trying to acquire lock: [ 239.415442][ T9863] ffff88805c1beab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 239.424815][ T9863] [ 239.424815][ T9863] but task is already holding lock: [ 239.432191][ T9863] ffff88805c4b64e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 239.442510][ T9863] [ 239.442510][ T9863] which lock already depends on the new lock. [ 239.442510][ T9863] [ 239.452903][ T9863] [ 239.452903][ T9863] the existing dependency chain (in reverse order) is: [ 239.461909][ T9863] [ 239.461909][ T9863] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 239.470454][ T9863] down_read+0x46/0x2e0 [ 239.475154][ T9863] ocfs2_start_trans+0x3a8/0x6f0 [ 239.480622][ T9863] ocfs2_reserve_local_alloc_bits+0xb39/0x2620 [ 239.487309][ T9863] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 239.494155][ T9863] ocfs2_extend_dir+0x750/0x49b0 [ 239.499615][ T9863] ocfs2_prepare_dir_for_insert+0x30e7/0x5520 [ 239.506203][ T9863] ocfs2_mknod+0x831/0x2310 [ 239.511217][ T9863] ocfs2_mkdir+0x196/0x430 [ 239.516140][ T9863] vfs_mkdir+0x2a5/0x470 [ 239.520894][ T9863] do_mkdirat+0x1dc/0x450 [ 239.525731][ T9863] __x64_sys_mkdirat+0x89/0xa0 [ 239.531005][ T9863] do_syscall_64+0x55/0xb0 [ 239.535936][ T9863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.542343][ T9863] [ 239.542343][ T9863] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 239.549821][ T9863] lock_release+0x332/0x8c0 [ 239.554837][ T9863] up_write+0x2d/0x410 [ 239.559415][ T9863] ocfs2_free_alloc_context+0x97/0x1a0 [ 239.565393][ T9863] ocfs2_write_begin_nolock+0x43f6/0x4480 [ 239.571630][ T9863] ocfs2_write_begin+0x1bb/0x310 [ 239.577081][ T9863] generic_perform_write+0x2fe/0x5c0 [ 239.582880][ T9863] ocfs2_file_write_iter+0x1724/0x1ef0 [ 239.588854][ T9863] do_iter_write+0x747/0xc50 [ 239.593959][ T9863] do_pwritev+0x242/0x3a0 [ 239.598798][ T9863] do_syscall_64+0x55/0xb0 [ 239.603729][ T9863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.610137][ T9863] [ 239.610137][ T9863] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 239.618905][ T9863] down_write+0x97/0x200 [ 239.623662][ T9863] ocfs2_reflink+0x4cf/0x920 [ 239.628765][ T9863] ocfs2_vfs_reflink+0x333/0x450 [ 239.634215][ T9863] ocfs2_reflink_ioctl+0x3a0/0x450 [ 239.639863][ T9863] ocfs2_ioctl+0x5b9/0x7e0 [ 239.644795][ T9863] __se_sys_ioctl+0xfd/0x170 [ 239.649902][ T9863] do_syscall_64+0x55/0xb0 [ 239.654834][ T9863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.661242][ T9863] [ 239.661242][ T9863] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 239.669052][ T9863] __lock_acquire+0x37ef/0x7d80 [ 239.674418][ T9863] lock_acquire+0x19e/0x420 [ 239.679432][ T9863] down_read+0x46/0x2e0 [ 239.684106][ T9863] ocfs2_init_acl+0x30a/0x770 [ 239.689298][ T9863] ocfs2_mknod+0x1427/0x2310 [ 239.694399][ T9863] ocfs2_create+0x196/0x430 [ 239.699411][ T9863] path_openat+0x1705/0x3270 [ 239.704513][ T9863] do_filp_open+0x1f2/0x430 [ 239.709525][ T9863] do_sys_openat2+0x134/0x1d0 [ 239.714714][ T9863] __x64_sys_openat+0x139/0x160 [ 239.720083][ T9863] do_syscall_64+0x55/0xb0 [ 239.725011][ T9863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.731415][ T9863] [ 239.731415][ T9863] other info that might help us debug this: [ 239.731415][ T9863] [ 239.741629][ T9863] Chain exists of: [ 239.741629][ T9863] &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier [ 239.741629][ T9863] [ 239.755530][ T9863] Possible unsafe locking scenario: [ 239.755530][ T9863] [ 239.762963][ T9863] CPU0 CPU1 [ 239.768314][ T9863] ---- ---- [ 239.773665][ T9863] rlock(&journal->j_trans_barrier); [ 239.779032][ T9863] lock(sb_internal#2); [ 239.785788][ T9863] lock(&journal->j_trans_barrier); [ 239.793585][ T9863] rlock(&oi->ip_xattr_sem); [ 239.798251][ T9863] [ 239.798251][ T9863] *** DEADLOCK *** [ 239.798251][ T9863] [ 239.806378][ T9863] 8 locks held by syz.1.1402/9863: [ 239.811490][ T9863] #0: ffff88807871c418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 239.820734][ T9863] #1: ffff88805c1bed98 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: path_openat+0x7f4/0x3270 [ 239.831007][ T9863] #2: ffff888076da89d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 239.844679][ T9863] #3: ffff888076dab498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 239.858340][ T9863] #4: ffff888076daa658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 239.872254][ T9863] #5: ffff88807871c608 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xf33/0x2310 [ 239.881479][ T9863] #6: ffff88805c4b64e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 239.892202][ T9863] #7: ffff88807871e990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 239.902039][ T9863] [ 239.902039][ T9863] stack backtrace: [ 239.907928][ T9863] CPU: 0 PID: 9863 Comm: syz.1.1402 Not tainted syzkaller #0 [ 239.915291][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.925350][ T9863] Call Trace: [ 239.928624][ T9863] [ 239.931569][ T9863] dump_stack_lvl+0x18c/0x250 [ 239.936264][ T9863] ? load_image+0x420/0x420 [ 239.940779][ T9863] ? show_regs_print_info+0x20/0x20 [ 239.945985][ T9863] ? print_circular_bug+0x12b/0x1a0 [ 239.951192][ T9863] check_noncircular+0x2fc/0x400 [ 239.956131][ T9863] ? print_deadlock_bug+0x5d0/0x5d0 [ 239.961336][ T9863] ? _find_first_zero_bit+0xd6/0x100 [ 239.966622][ T9863] ? add_lock_to_list+0x191/0x280 [ 239.971645][ T9863] __lock_acquire+0x37ef/0x7d80 [ 239.976509][ T9863] ? ocfs2_lock_res_init_common+0x32a/0x450 [ 239.982405][ T9863] ? verify_lock_unused+0x140/0x140 [ 239.987601][ T9863] ? __lock_acquire+0x7d80/0x7d80 [ 239.992620][ T9863] ? do_raw_spin_lock+0x11f/0x2b0 [ 239.997646][ T9863] lock_acquire+0x19e/0x420 [ 240.002144][ T9863] ? ocfs2_init_acl+0x30a/0x770 [ 240.007003][ T9863] ? __might_sleep+0xe0/0xe0 [ 240.011592][ T9863] ? read_lock_is_recursive+0x20/0x20 [ 240.016955][ T9863] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 240.023541][ T9863] ? mark_lock+0x94/0x320 [ 240.027886][ T9863] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 240.033866][ T9863] down_read+0x46/0x2e0 [ 240.038020][ T9863] ? ocfs2_init_acl+0x30a/0x770 [ 240.042874][ T9863] ocfs2_init_acl+0x30a/0x770 [ 240.047548][ T9863] ? ocfs2_mknod_locked+0x159/0x290 [ 240.052744][ T9863] ? ocfs2_acl_chmod+0x340/0x340 [ 240.057680][ T9863] ? dquot_alloc_inode+0x211/0xa40 [ 240.062792][ T9863] ? ocfs2_block_signals+0x9b/0xe0 [ 240.067900][ T9863] ? ocfs2_free_mem_caches+0x50/0x50 [ 240.073187][ T9863] ? ocfs2_init_security_get+0x139/0x1a0 [ 240.078824][ T9863] ocfs2_mknod+0x1427/0x2310 [ 240.083420][ T9863] ? ocfs2_mkdir+0x430/0x430 [ 240.088008][ T9863] ? __lock_acquire+0x7d80/0x7d80 [ 240.093030][ T9863] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 240.098915][ T9863] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 240.104800][ T9863] ? _raw_spin_unlock+0x40/0x40 [ 240.109653][ T9863] ? ocfs2_inode_unlock+0xa5/0x140 [ 240.114760][ T9863] ? __lock_acquire+0x7d80/0x7d80 [ 240.119776][ T9863] ? __rwlock_init+0x150/0x150 [ 240.124536][ T9863] ? do_raw_spin_unlock+0x121/0x230 [ 240.129729][ T9863] ? rcu_is_watching+0x15/0xb0 [ 240.134489][ T9863] ? ocfs2_lookup+0x4ac/0x960 [ 240.139167][ T9863] ocfs2_create+0x196/0x430 [ 240.143665][ T9863] ? ocfs2_update_inode_fsync_trans+0x230/0x230 [ 240.149904][ T9863] ? ocfs2_lookup+0x960/0x960 [ 240.154571][ T9863] ? HAS_UNMAPPED_ID+0x101/0x170 [ 240.159519][ T9863] ? inode_permission+0xf3/0x480 [ 240.164444][ T9863] ? bpf_lsm_inode_create+0x9/0x10 [ 240.169548][ T9863] ? security_inode_create+0xb7/0x100 [ 240.174916][ T9863] ? ocfs2_lookup+0x960/0x960 [ 240.179585][ T9863] path_openat+0x1705/0x3270 [ 240.184186][ T9863] ? do_filp_open+0x430/0x430 [ 240.188861][ T9863] do_filp_open+0x1f2/0x430 [ 240.193368][ T9863] ? vfs_tmpfile+0x620/0x620 [ 240.197956][ T9863] ? _raw_spin_unlock+0x28/0x40 [ 240.202794][ T9863] ? alloc_fd+0x590/0x640 [ 240.207120][ T9863] do_sys_openat2+0x134/0x1d0 [ 240.211805][ T9863] ? do_sys_open+0xe0/0xe0 [ 240.216213][ T9863] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 240.222188][ T9863] ? lock_chain_count+0x20/0x20 [ 240.227030][ T9863] __x64_sys_openat+0x139/0x160 [ 240.231876][ T9863] do_syscall_64+0x55/0xb0 [ 240.236288][ T9863] ? clear_bhb_loop+0x40/0x90 [ 240.240958][ T9863] ? clear_bhb_loop+0x40/0x90 [ 240.245628][ T9863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.251527][ T9863] RIP: 0033:0x7f35ef59e159 [ 240.255939][ T9863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.275539][ T9863] RSP: 002b:00007f35f04b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.283946][ T9863] RAX: ffffffffffffffda RBX: 00007f35ef825fa0 RCX: 00007f35ef59e159 [ 240.291911][ T9863] RDX: 0000000000000042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 240.299875][ T9863] RBP: 00007f35ef635024 R08: 0000000000000000 R09: 0000000000000000 [ 240.307839][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.315798][ T9863] R13: 00007f35ef826038 R14: 00007f35ef825fa0 R15: 00007fff5b4a4db8 [ 240.323768][ T9863] [ 240.430050][ T5777] ocfs2: Unmounting device (7,1) on (node local)