last executing test programs: 1m8.962277926s ago: executing program 3 (id=495): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x8, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x4}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1m8.736074812s ago: executing program 3 (id=498): close(0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) 1m8.538734817s ago: executing program 3 (id=500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}], {0x14}}, 0x78}}, 0x0) 1m8.41089608s ago: executing program 3 (id=502): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@stripe={'stripe', 0x3d, 0xb74}}, {@resuid}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m7.594259901s ago: executing program 3 (id=508): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 1m6.954327407s ago: executing program 3 (id=513): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f000000a040)) 1m6.571311047s ago: executing program 32 (id=513): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f000000a040)) 2.667350612s ago: executing program 4 (id=1295): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 2.485711037s ago: executing program 4 (id=1298): unshare(0x6020400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 2.402882899s ago: executing program 4 (id=1299): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x1, "10"}}, 0x7) 2.089751657s ago: executing program 4 (id=1302): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x11, r0, 0x0) mlock2(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) 1.851582823s ago: executing program 4 (id=1307): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x24d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x78, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.760932536s ago: executing program 0 (id=1309): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.694029627s ago: executing program 2 (id=1311): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040)) 1.59214856s ago: executing program 2 (id=1313): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/218, 0xda}, {&(0x7f00000032c0)=""/237, 0xed}, {&(0x7f00000019c0)=""/4110, 0x100e}, {&(0x7f0000000900)=""/235, 0xeb}, {&(0x7f00000035c0)=""/65, 0x41}, {&(0x7f0000000040)=""/137, 0x89}, {&(0x7f0000000180)=""/68, 0x44}], 0x7}, 0x8001}], 0x2, 0x2100, 0x0) 1.461122643s ago: executing program 2 (id=1316): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1) 1.343163686s ago: executing program 2 (id=1318): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffff, 0xee}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000000a4d"], 0x26}}, 0x0) 1.253032248s ago: executing program 2 (id=1320): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="01154e00010000112233445588fb00010001160c00"/34, 0x22, 0x0, &(0x7f0000000040)={0x11, 0x88fb, r1, 0x0, 0x0, 0x0}, 0x14) 1.123985761s ago: executing program 2 (id=1322): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x4ef, 0x40a, 0x7fff}) 1.038846034s ago: executing program 5 (id=1323): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)={0x2c, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0xce, 0x0, 0x0, @u64}]}, @nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @u32=0x2da6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) 983.728435ms ago: executing program 0 (id=1324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 942.790176ms ago: executing program 5 (id=1326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4) 821.84654ms ago: executing program 0 (id=1327): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 821.308509ms ago: executing program 1 (id=1328): unshare(0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10) 721.033412ms ago: executing program 5 (id=1329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) 661.334733ms ago: executing program 1 (id=1330): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6f6465636f6d706f73652c6e6c733d69736f383835392d362c000589954e5b05a28d17137bc69ddbcfefcc5856bf52006185d673d160685e1c512c34458f63a766cead6a50f7ebc47a6f7193246d7513c755704b0b5384ce92ea7405f24e90e25e03e76110d67585eb054fe153"], 0x1, 0x5db, &(0x7f0000000cc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x4000, &(0x7f00000000c0)='rdma') 602.209205ms ago: executing program 0 (id=1331): setns(0xc9, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r0, &(0x7f0000002340)=[{&(0x7f0000001340)="f5", 0x1}], 0x1, 0x947, 0x80000000, 0x10) 493.056778ms ago: executing program 5 (id=1332): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x138) 457.476358ms ago: executing program 0 (id=1333): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x25) 427.825779ms ago: executing program 5 (id=1334): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x1535, &(0x7f00000034c0)="$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") r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 365.439871ms ago: executing program 1 (id=1335): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x7, 0x40000, 0x2, 0x100}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) 295.031843ms ago: executing program 0 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 131.868637ms ago: executing program 1 (id=1337): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6a55c0c4ada8324e) 125.650617ms ago: executing program 4 (id=1338): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x3, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000290000000b"], 0x18}}], 0x2, 0x0) 68.407219ms ago: executing program 1 (id=1339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004004) 64.064219ms ago: executing program 5 (id=1340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000c006) 0s ago: executing program 1 (id=1341): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) kernel console output (not intermixed with test programs): nabled using 3 upper inode bits. [ 81.019677][ T4651] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 81.324434][ T4669] loop3: detected capacity change from 0 to 64 [ 81.329832][ T4667] loop2: detected capacity change from 0 to 2048 [ 81.354371][ T4230] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.404656][ T4667] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000007,sysvgroups,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 81.448819][ T4667] EXT4-fs error (device loop2): ext4_ext_precache:608: inode #2: comm syz.2.181: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 81.507269][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.637447][ T4230] usb 1-1: Using ep0 maxpacket: 8 [ 81.758164][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 81.849138][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.877423][ T21] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.899851][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 81.911167][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 81.925517][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.937562][ T4230] usb 1-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 81.944740][ T21] usb 2-1: config 0 descriptor?? [ 81.963923][ T4230] usb 1-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 82.137396][ T4230] usb 1-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 82.153433][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.163283][ T4230] usb 1-1: Product: syz [ 82.174538][ T4230] usb 1-1: Manufacturer: syz [ 82.179678][ T4230] usb 1-1: SerialNumber: syz [ 82.222058][ T4697] loop2: detected capacity change from 0 to 32768 [ 82.250069][ T4697] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.192 (4697) [ 82.302415][ T4697] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 82.323595][ T4697] BTRFS info (device loop2): setting nodatasum [ 82.331127][ T4697] BTRFS info (device loop2): force zlib compression, level 3 [ 82.341353][ T4697] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 82.351931][ T4697] BTRFS info (device loop2): use lzo compression, level 0 [ 82.359290][ T4697] BTRFS info (device loop2): turning on flush-on-commit [ 82.366539][ T4697] BTRFS info (device loop2): enabling auto defrag [ 82.374271][ T4697] BTRFS info (device loop2): max_inline at 4096 [ 82.381183][ T4697] BTRFS info (device loop2): using free space tree [ 82.388419][ T4697] BTRFS info (device loop2): has skinny extents [ 82.429880][ T21] apple 0003:05AC:0232.0002: unknown main item tag 0x6 [ 82.439505][ T21] apple 0003:05AC:0232.0002: ignoring exceeding usage max [ 82.452189][ T4697] BTRFS info (device loop2): enabling ssd optimizations [ 82.462166][ T21] apple 0003:05AC:0232.0002: hidraw0: USB HID v0.05 Device [HID 05ac:0232] on usb-dummy_hcd.1-1/input0 [ 82.538991][ T4230] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 82.567254][ T4237] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 82.656113][ T21] usb 2-1: USB disconnect, device number 2 [ 82.728350][ T4721] fido_id[4721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 82.928560][ T4237] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.943138][ T4237] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.954217][ T4237] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 83.087975][ T4230] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 83.126372][ T4748] loop3: detected capacity change from 0 to 256 [ 83.127394][ T4237] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 83.152930][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.173249][ T4237] usb 5-1: Product: syz [ 83.208572][ T4237] usb 5-1: Manufacturer: syz [ 83.237265][ T4237] usb 5-1: SerialNumber: syz [ 83.421120][ T4756] loop3: detected capacity change from 0 to 512 [ 83.508790][ T4756] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 83.519360][ T4756] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 83.530965][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.539810][ T4756] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 83.623758][ T4756] EXT4-fs (loop3): 1 truncate cleaned up [ 83.637266][ T4230] usb 1-1: device firmware changed [ 83.647512][ T4230] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 83.654519][ T4756] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue. Quota mode: none. [ 83.656604][ T4230] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 83.696415][ T7] usb 1-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 83.714435][ T7] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 83.727732][ T4230] usb 1-1: USB disconnect, device number 3 [ 83.747156][ C1] usb 5-1: received EP1 urb->status = -2 [ 83.753751][ T4237] usb 5-1: unable to init card! (ret=-110) [ 83.760576][ T4237] snd-usb-caiaq: probe of 5-1:1.0 failed with error -110 [ 83.980423][ T4237] usb 5-1: USB disconnect, device number 3 [ 84.119647][ T4744] kernel write not supported for file /sg0 (pid: 4744 comm: kworker/1:18) [ 84.185499][ T4787] loop3: detected capacity change from 0 to 512 [ 84.219733][ T4786] loop1: detected capacity change from 0 to 2048 [ 84.266712][ T4787] EXT4-fs (loop3): Ignoring removed nobh option [ 84.298528][ T4787] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.308314][ T4786] Alternate GPT is invalid, using primary GPT. [ 84.354149][ T4786] loop1: p2 p3 p7 [ 84.377547][ T4787] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.455875][ T4787] EXT4-fs (loop3): 1 truncate cleaned up [ 84.467181][ T4787] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,nobh,acl,,errors=continue. Quota mode: none. [ 84.616701][ T4786] loop1: detected capacity change from 0 to 64 [ 84.625983][ T4801] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 84.636828][ T4801] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 84.644231][ T4801] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 84.690720][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 84.714994][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 84.730208][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 84.941636][ T4820] loop1: detected capacity change from 0 to 256 [ 84.948472][ T4821] netlink: 358 bytes leftover after parsing attributes in process `syz.3.232'. [ 85.024124][ T4823] device gretap0 entered promiscuous mode [ 85.184569][ T4831] netlink: 'syz.1.240': attribute type 4 has an invalid length. [ 85.214198][ T4831] netlink: 'syz.1.240': attribute type 8 has an invalid length. [ 85.237185][ T4831] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.240'. [ 85.527458][ T4228] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.651079][ T4852] loop4: detected capacity change from 0 to 64 [ 85.739132][ T4852] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 85.887428][ T4228] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 85.895848][ T4228] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 85.912791][ T4228] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 85.932881][ T4228] usb 3-1: config 220 has no interface number 2 [ 85.960269][ T4228] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 85.977030][ T4867] netlink: 'syz.3.257': attribute type 7 has an invalid length. [ 85.990883][ T4228] usb 3-1: config 220 interface 0 has no altsetting 0 [ 86.002582][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 86.027934][ T4228] usb 3-1: config 220 interface 76 has no altsetting 0 [ 86.035003][ T4228] usb 3-1: config 220 interface 1 has no altsetting 0 [ 86.049133][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 86.217365][ T4228] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 86.243980][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.255912][ T4228] usb 3-1: Product: syz [ 86.262124][ T4228] usb 3-1: Manufacturer: syz [ 86.276765][ T4228] usb 3-1: SerialNumber: syz [ 86.301199][ T4882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 86.457321][ T4237] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 86.503673][ T4876] loop1: detected capacity change from 0 to 40427 [ 86.539560][ T4876] F2FS-fs (loop1): invalid crc value [ 86.562876][ T4876] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.615379][ T4876] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 86.634315][ T4876] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 86.644601][ T4228] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 86.651620][ T4228] usb 3-1: No valid video chain found. [ 86.661652][ T4228] usb 3-1: selecting invalid altsetting 0 [ 86.748414][ T4228] usb 3-1: selecting invalid altsetting 0 [ 86.755091][ T4228] usbtest: probe of 3-1:220.1 failed with error -22 [ 86.769942][ T4228] usb 3-1: USB disconnect, device number 4 [ 86.789783][ T4189] attempt to access beyond end of device [ 86.789783][ T4189] loop1: rw=2049, want=40992, limit=40427 [ 86.806111][ T1107] cfg80211: failed to load regulatory.db [ 86.827519][ T4237] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.840583][ T4237] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.859431][ T4237] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 86.870743][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.918422][ T4237] hub 4-1:4.0: USB hub found [ 87.064486][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 87.110696][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 87.177414][ T4237] hub 4-1:4.0: config failed, can't read hub descriptor (err -90) [ 87.441424][ T4901] loop1: detected capacity change from 0 to 2048 [ 87.516764][ T4901] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.539139][ T1107] usb 4-1: USB disconnect, device number 3 [ 88.067547][ T4318] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.488180][ T4318] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 88.501257][ T4318] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 88.632297][ T4914] loop3: detected capacity change from 0 to 32768 [ 88.663742][ T4940] netlink: 'syz.4.288': attribute type 3 has an invalid length. [ 88.671337][ T4942] mmap: syz.0.289 (4942) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 88.709997][ T4318] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 88.738985][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.756607][ T4318] usb 2-1: Product: syz [ 88.773951][ T4318] usb 2-1: Manufacturer: syz [ 88.792816][ T4318] usb 2-1: SerialNumber: syz [ 88.818562][ T4318] usb 2-1: config 0 descriptor?? [ 89.437686][ T4318] mos7840 2-1:0.0: required endpoints missing [ 89.457603][ T4318] usb 2-1: USB disconnect, device number 3 [ 89.773522][ T4947] loop4: detected capacity change from 0 to 32768 [ 89.819575][ T4975] loop3: detected capacity change from 0 to 16 [ 89.880079][ T4975] erofs: (device loop3): mounted with root inode @ nid 36. [ 90.207533][ T26] audit: type=1400 audit(1786966634.774:5): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4981 comm="syz.1.310" [ 90.406374][ T4969] loop2: detected capacity change from 0 to 32768 [ 90.473859][ T4969] JBD2: Ignoring recovery information on journal [ 90.591059][ T4994] loop0: detected capacity change from 0 to 4096 [ 90.608538][ T4969] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 90.637606][ T4994] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 90.648577][ T1322] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.711942][ T4994] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 90.768137][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 90.770955][ T5002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.316'. [ 90.897212][ T1322] usb 4-1: Using ep0 maxpacket: 16 [ 91.067353][ T1322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.147679][ T1322] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 91.367452][ T1322] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 91.386969][ T1322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.396269][ T1322] usb 4-1: Product: syz [ 91.400826][ T1322] usb 4-1: Manufacturer: syz [ 91.405550][ T1322] usb 4-1: SerialNumber: syz [ 91.577390][ T4745] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.602186][ T5026] loop2: detected capacity change from 0 to 256 [ 91.713928][ T1322] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 91.745356][ T1322] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 91.775308][ T1322] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 91.891691][ T5028] loop2: detected capacity change from 0 to 128 [ 91.902770][ T5024] loop1: detected capacity change from 0 to 32768 [ 91.919076][ T5028] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.938200][ T5028] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.949653][ T4745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.033197][ T4745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.078001][ T4745] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.107701][ T4745] usb 5-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 92.137221][ T4745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.165713][ T4745] usb 5-1: config 0 descriptor?? [ 92.216459][ T1107] usb 4-1: USB disconnect, device number 4 [ 92.302432][ T5038] binder: 5035:5038 ioctl c00c620f 200000002980 returned -22 [ 92.563252][ T5044] loop2: detected capacity change from 0 to 16384 [ 92.604667][ T5045] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.682322][ T4745] thrustmaster 0003:044F:B324.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.4-1/input0 [ 92.701412][ T4745] thrustmaster 0003:044F:B324.0003: no inputs found [ 92.717731][ T1322] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.905997][ T4745] usb 5-1: USB disconnect, device number 4 [ 92.909330][ T5049] loop2: detected capacity change from 0 to 8192 [ 92.994833][ T5049] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.032207][ T5049] exFAT-fs (loop2): invalid fs_name [ 93.068732][ T5049] exFAT-fs (loop2): failed to read boot sector [ 93.083372][ T5049] exFAT-fs (loop2): failed to recognize exfat type [ 93.147354][ T1322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.169588][ T1322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.194872][ T1322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.212982][ T1322] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.230419][ T5060] loop3: detected capacity change from 0 to 1764 [ 93.235202][ T1322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.278868][ T1322] usb 2-1: config 0 descriptor?? [ 93.331748][ T5060] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 93.541074][ T5074] netlink: 108 bytes leftover after parsing attributes in process `syz.4.350'. [ 93.650633][ T5070] loop2: detected capacity change from 0 to 8192 [ 93.665941][ T5078] netlink: 72 bytes leftover after parsing attributes in process `syz.4.352'. [ 93.729021][ T5077] loop3: detected capacity change from 0 to 4096 [ 93.793698][ T1322] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 93.801554][ T5077] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 93.823678][ T1322] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.841896][ T1322] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.872496][ T1322] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.890336][ T1322] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.903807][ T1322] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 93.914199][ T1322] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 93.974717][ T1322] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 94.037439][ T1322] usb 2-1: USB disconnect, device number 4 [ 94.135732][ T5088] netlink: 64 bytes leftover after parsing attributes in process `syz.4.357'. [ 94.268496][ T5089] fido_id[5089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 94.321571][ T5095] loop2: detected capacity change from 0 to 512 [ 94.489338][ T5095] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.361: invalid indirect mapped block 10 (level 1) [ 94.652305][ T5095] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.361: invalid indirect mapped block 8 (level 1) [ 94.725103][ T5095] EXT4-fs (loop2): 1 truncate cleaned up [ 94.751773][ T5095] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 95.183047][ T5129] loop3: detected capacity change from 0 to 4096 [ 95.275857][ T5140] netlink: 'syz.2.381': attribute type 3 has an invalid length. [ 95.355163][ T5141] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.383385][ T5107] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 95.415291][ T5107] JBD2: Ignoring recovery information on journal [ 95.424341][ T5129] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=77 [ 95.471954][ T5129] Remounting filesystem read-only [ 95.495530][ T5107] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 95.566752][ T4198] ocfs2: Unmounting device (7,4) on (node local) [ 95.813196][ T5153] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 95.829436][ T5153] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 95.962511][ T5153] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 44 vs 41 free clusters [ 95.987955][ T5153] EXT4-fs (loop2): Remounting filesystem read-only [ 96.045895][ T5165] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.389'. [ 96.064299][ T5153] EXT4-fs (loop2): 1 orphan inode deleted [ 96.103530][ T5153] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,lazytime,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,mblk_io_submit,barrier,quota,. Quota mode: writeback. [ 96.184028][ T5153] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.686326][ T5191] netlink: 32 bytes leftover after parsing attributes in process `syz.4.403'. [ 96.723668][ T5173] set_capacity_and_notify: 2 callbacks suppressed [ 96.723704][ T5173] loop3: detected capacity change from 0 to 32768 [ 96.807338][ T5173] [ 96.807338][ T5173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.807338][ T5173] [ 96.818844][ T5195] sock: sock_set_timeout: `syz.2.406' (pid 5195) tries to set negative timeout [ 96.895364][ T5173] [ 96.895364][ T5173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.895364][ T5173] [ 96.921513][ T5199] capability: warning: `syz.2.407' uses 32-bit capabilities (legacy support in use) [ 96.948733][ T5173] [ 96.948733][ T5173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.948733][ T5173] [ 96.982915][ T5173] [ 96.982915][ T5173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.982915][ T5173] [ 96.996138][ T5173] [ 96.996138][ T5173] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.996138][ T5173] [ 97.055522][ T277] [ 97.055522][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.055522][ T277] [ 97.128922][ T4190] [ 97.128922][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.128922][ T4190] [ 97.177415][ T4190] [ 97.177415][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.177415][ T4190] [ 97.283386][ T5213] netlink: 2 bytes leftover after parsing attributes in process `syz.4.414'. [ 97.605073][ T5232] loop1: detected capacity change from 0 to 512 [ 97.622660][ T5231] loop2: detected capacity change from 0 to 1024 [ 97.700998][ T5236] loop4: detected capacity change from 0 to 1024 [ 98.160736][ T4232] kernel write not supported for file /admmidi2 (pid: 4232 comm: kworker/0:5) [ 98.191256][ T5255] loop1: detected capacity change from 0 to 1024 [ 98.527855][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 98.559784][ T5268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 98.676536][ T5274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.443'. [ 98.874756][ T5280] loop2: detected capacity change from 0 to 512 [ 98.947218][ T4318] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.959212][ T5280] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.023487][ T5280] EXT4-fs (loop2): 1 truncate cleaned up [ 99.037284][ T5280] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.083027][ T5243] loop3: detected capacity change from 0 to 40427 [ 99.083235][ T5280] EXT4-fs (loop2): Online resizing not supported with sparse_super2 [ 99.129314][ T5259] loop4: detected capacity change from 0 to 32768 [ 99.173482][ T5259] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.436 (5259) [ 99.187774][ T5243] F2FS-fs (loop3): invalid crc value [ 99.233492][ T5243] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.253300][ T5259] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 99.292199][ T5291] loop0: detected capacity change from 0 to 1024 [ 99.324128][ T5259] BTRFS info (device loop4): using free space tree [ 99.379036][ T5291] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 99.447691][ T5259] BTRFS info (device loop4): has skinny extents [ 99.523139][ T5243] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 99.582183][ T5243] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 99.585420][ T5307] loop2: detected capacity change from 0 to 256 [ 99.590682][ T4318] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 99.633823][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.703468][ T4318] usb 2-1: Product: syz [ 99.726662][ T4318] usb 2-1: Manufacturer: syz [ 99.740514][ T4318] usb 2-1: SerialNumber: syz [ 99.741818][ T5259] BTRFS info (device loop4): enabling ssd optimizations [ 99.833397][ T4318] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 100.150996][ T5327] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 100.310717][ T26] audit: type=1326 audit(1786966644.884:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5330 comm="syz.0.459" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e887800d9 code=0x0 [ 100.672839][ T4308] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 100.722407][ T5346] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 100.780196][ T5346] ntfs: volume version 3.1. [ 101.130987][ T5343] usb 2-1: USB disconnect, device number 5 [ 101.275758][ T5362] netlink: 200 bytes leftover after parsing attributes in process `syz.0.468'. [ 101.549040][ T5364] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 101.577245][ T5364] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.623252][ T5371] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 101.623252][ T5371] [ 101.705587][ T5371] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 101.783305][ T5378] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 101.997551][ T4308] usb 2-1: Service connection timeout for: 256 [ 102.005963][ T4308] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 102.042055][ T4308] ath9k_htc: Failed to initialize the device [ 102.064550][ T5343] usb 2-1: ath9k_htc: USB layer deinitialized [ 102.458110][ T5409] set_capacity_and_notify: 6 callbacks suppressed [ 102.458126][ T5409] loop2: detected capacity change from 0 to 1024 [ 102.531827][ T5413] loop3: detected capacity change from 0 to 1024 [ 102.601129][ T5409] hfsplus: invalid length 1280 has been corrected to 255 [ 102.657335][ T5419] loop1: detected capacity change from 0 to 1024 [ 102.767271][ T5419] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 102.841489][ T5422] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 103.028376][ T5430] binder: 5429:5430 ioctl 400c620e 0 returned -14 [ 103.209066][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 103.236545][ T5441] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 103.265829][ T5441] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 103.306252][ T5441] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 103.307274][ T4745] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.328790][ T5446] loop3: detected capacity change from 0 to 512 [ 103.378569][ T5446] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 103.396778][ T5417] loop0: detected capacity change from 0 to 32768 [ 103.409758][ T5446] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.486582][ T5417] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.492 (5417) [ 103.504110][ T5446] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,minixdf,stripe=0x0000000000000b74,resuid=0x0000000000000000,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 103.541423][ T5446] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.577192][ T4745] usb 3-1: Using ep0 maxpacket: 16 [ 103.584539][ T5417] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 103.610896][ T5417] BTRFS info (device loop0): setting nodatasum [ 103.697383][ T5417] BTRFS info (device loop0): force zlib compression, level 3 [ 103.703016][ T4745] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.705029][ T5417] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 103.722524][ T5461] loop4: detected capacity change from 0 to 2048 [ 103.749610][ T4745] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.801543][ T4745] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.808549][ T5417] BTRFS info (device loop0): use lzo compression, level 0 [ 103.808584][ T5417] BTRFS info (device loop0): turning on flush-on-commit [ 103.808603][ T5417] BTRFS info (device loop0): enabling auto defrag [ 103.808650][ T5417] BTRFS info (device loop0): max_inline at 4096 [ 103.829979][ T4745] usb 3-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 103.865668][ T5461] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.891433][ T5417] BTRFS info (device loop0): using free space tree [ 103.917625][ T5417] BTRFS info (device loop0): has skinny extents [ 103.924650][ T4745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.938022][ T5467] loop1: detected capacity change from 0 to 2048 [ 103.964634][ T5471] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.976931][ T4745] usb 3-1: config 0 descriptor?? [ 104.051312][ T5467] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 104.092812][ T4190] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor: ' ' linked to parent dir [ 104.121224][ T4190] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor: ' ' linked to parent dir [ 104.157673][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop1 [ 104.162626][ T5479] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.360310][ T5417] BTRFS info (device loop0): enabling ssd optimizations [ 104.505736][ T4745] input: HID 046d:c283 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C283.0005/input/input7 [ 104.626819][ T4745] logitech 0003:046D:C283.0005: input,hidraw0: USB HID v0.01 Joystick [HID 046d:c283] on usb-dummy_hcd.2-1/input0 [ 104.647001][ T4745] logitech 0003:046D:C283.0005: missing HID_OUTPUT_REPORT 0 [ 104.887927][ T4745] usb 3-1: USB disconnect, device number 5 [ 105.050135][ T5498] fido_id[5498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 105.162323][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.332415][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.388819][ T5512] loop1: detected capacity change from 0 to 24 [ 105.481726][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.574492][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.023372][ T5535] tmpfs: Cannot retroactively limit inodes [ 106.105843][ T5537] loop0: detected capacity change from 0 to 512 [ 106.331479][ T5521] chnl_net:caif_netlink_parms(): no params data found [ 106.349524][ T5537] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1: comm syz.0.529: invalid block [ 106.387170][ T5537] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.529: couldn't read orphan inode 11 (err -117) [ 106.490942][ T5537] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.754816][ T5520] loop2: detected capacity change from 0 to 32768 [ 106.846646][ T5521] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.877432][ T5521] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.885910][ T5521] device bridge_slave_0 entered promiscuous mode [ 106.958604][ T5521] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.966030][ T5521] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.009273][ T5521] device bridge_slave_1 entered promiscuous mode [ 107.072252][ T26] audit: type=1800 audit(1786966651.644:7): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.542" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 107.215443][ T5521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.318500][ T5521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.661354][ T5521] team0: Port device team_slave_0 added [ 107.749464][ T5521] team0: Port device team_slave_1 added [ 107.757481][ T4228] Bluetooth: hci3: command 0x0409 tx timeout [ 107.879483][ T5521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.923373][ T5521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.043785][ T5521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.136506][ T5521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.136525][ T5521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.136551][ T5521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.318119][ T5627] set_capacity_and_notify: 1 callbacks suppressed [ 108.318137][ T5627] loop1: detected capacity change from 0 to 2048 [ 108.392030][ T5521] device hsr_slave_0 entered promiscuous mode [ 108.392932][ T5521] device hsr_slave_1 entered promiscuous mode [ 108.398983][ T5521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.399087][ T5521] Cannot create hsr debugfs directory [ 108.434364][ T5634] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.459010][ T5631] loop0: detected capacity change from 0 to 4096 [ 108.486657][ T5627] attempt to access beyond end of device [ 108.486657][ T5627] loop1: rw=0, want=2198922592330, limit=2048 [ 108.486847][ T5627] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 108.644740][ T5643] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.738653][ T5631] NILFS (loop0): cannot delete checkpoints: invalid range [0, 0) [ 108.738734][ T5631] NILFS (loop0): error -22 preparing GC: cannot delete checkpoints [ 108.816129][ T9] device hsr_slave_0 left promiscuous mode [ 108.816917][ T9] device hsr_slave_1 left promiscuous mode [ 108.818732][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.818808][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.847249][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.847284][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.878360][ T9] device bridge_slave_1 left promiscuous mode [ 108.880446][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.885501][ T5614] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 108.926139][ T9] device bridge_slave_0 left promiscuous mode [ 108.926311][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.093900][ T9] device veth1_macvtap left promiscuous mode [ 109.094162][ T9] device veth0_macvtap left promiscuous mode [ 109.094269][ T9] device veth1_vlan left promiscuous mode [ 109.094539][ T9] device veth0_vlan left promiscuous mode [ 109.143306][ T5650] loop1: detected capacity change from 0 to 4096 [ 109.186941][ T5650] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 109.266703][ T5650] ntfs3: loop1: failed to convert "c46c" to koi8-u [ 109.752380][ T9] team0 (unregistering): Port device team_slave_1 removed [ 109.773333][ T9] team0 (unregistering): Port device team_slave_0 removed [ 109.799105][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.826497][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.847677][ T5343] Bluetooth: hci3: command 0x041b tx timeout [ 109.923898][ T4228] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.951383][ T9] bond0 (unregistering): Released all slaves [ 110.014536][ T5666] loop1: detected capacity change from 0 to 32768 [ 110.044697][ T5656] netlink: 64 bytes leftover after parsing attributes in process `syz.4.563'. [ 110.057661][ T5655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.561'. [ 110.181575][ T4228] usb 3-1: Using ep0 maxpacket: 8 [ 110.337510][ T4228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.434571][ T4228] usb 3-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 110.455236][ T4228] usb 3-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 110.503602][ T5521] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.540004][ T5521] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.608248][ T5521] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.637602][ T4228] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 110.659798][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.665691][ T5521] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.696546][ T4228] usb 3-1: Product: syz [ 110.714235][ T4228] usb 3-1: Manufacturer: syz [ 110.740870][ T4228] usb 3-1: SerialNumber: syz [ 111.039041][ T4228] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 111.186851][ T5713] loop1: detected capacity change from 0 to 128 [ 111.199894][ T5521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.269580][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.278985][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.282653][ T5713] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 111.311933][ T5716] loop4: detected capacity change from 0 to 2048 [ 111.314882][ T5521] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.360887][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.372852][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.387549][ T5713] hpfs: filesystem error: improperly stopped [ 111.410424][ T5713] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 111.413529][ T5716] Alternate GPT is invalid, using primary GPT. [ 111.438188][ T5713] hpfs: You really don't want any checks? You are crazy... [ 111.446107][ T5713] hpfs: hpfs_map_sector(): read error [ 111.467284][ T5716] loop4: p2 p3 p7 [ 111.467708][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.478155][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.507166][ T5713] hpfs: code page support is disabled [ 111.513404][ T5713] hpfs: hpfs_map_4sectors(): unaligned read [ 111.527254][ T4228] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 111.549135][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.557825][ T5713] hpfs: hpfs_map_4sectors(): unaligned read [ 111.563757][ T5713] hpfs: filesystem error: unable to find root dir [ 111.572211][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.609031][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.638313][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.646162][ T4324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.651176][ T4843] udevd[4843]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 111.680394][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 111.700495][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 111.728010][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.771922][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.858513][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.893873][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.907409][ T4228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.953887][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.974512][ T5343] Bluetooth: hci3: command 0x040f tx timeout [ 111.977317][ T4228] usb 3-1: device firmware changed [ 111.986824][ T4228] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 111.993782][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.025997][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.036148][ T4228] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 112.063121][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.093608][ T4228] usb 3-1: USB disconnect, device number 6 [ 112.145006][ T5521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.174070][ T5521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.186446][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.203746][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.228979][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.578397][ T5748] loop2: detected capacity change from 0 to 1024 [ 112.785322][ T5756] loop4: detected capacity change from 0 to 512 [ 112.809569][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.822231][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.869245][ T5521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.925503][ T5723] loop0: detected capacity change from 0 to 32768 [ 112.951871][ T5756] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.599: inode has both inline data and extents flags [ 113.049599][ T5756] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.599: couldn't read orphan inode 15 (err -117) [ 113.121451][ T5756] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.146390][ T5723] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 113.159910][ T5774] loop2: detected capacity change from 0 to 16 [ 113.215053][ T5774] erofs: (device loop2): mounted with root inode @ nid 36. [ 113.292956][ T5774] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 113.304849][ T5774] attempt to access beyond end of device [ 113.304849][ T5774] loop2: rw=0, want=296, limit=16 [ 113.317759][ T5774] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 113.407335][ T4188] XFS (loop0): Unmounting Filesystem [ 113.726563][ T5790] netlink: 'syz.2.614': attribute type 26 has an invalid length. [ 113.949763][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.983114][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.985287][ T5800] loop1: detected capacity change from 0 to 764 [ 113.999678][ T1347] Bluetooth: hci3: command 0x0419 tx timeout [ 114.068659][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.089958][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.116420][ T5802] loop2: detected capacity change from 0 to 512 [ 114.136737][ T5521] device veth0_vlan entered promiscuous mode [ 114.174333][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.188548][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.204204][ T5802] EXT4-fs (loop2): Ignoring removed bh option [ 114.242753][ T5521] device veth1_vlan entered promiscuous mode [ 114.259365][ T5802] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 114.300890][ T5805] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.367764][ T5805] overlayfs: maximum fs stacking depth exceeded [ 114.398856][ T5802] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.609: inode has both inline data and extents flags [ 114.424777][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.460073][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.503757][ T5802] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.609: couldn't read orphan inode 15 (err -117) [ 114.510688][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.547604][ T5802] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000009,prjquota,debug_want_extra_isize=0x0000000000000004,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 114.576997][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.666470][ T5521] device veth0_macvtap entered promiscuous mode [ 114.750536][ T5521] device veth1_macvtap entered promiscuous mode [ 114.815604][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.877486][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.902751][ T5819] loop4: detected capacity change from 0 to 256 [ 114.950379][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.022290][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.101146][ T5815] loop1: detected capacity change from 0 to 32768 [ 115.112562][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.123576][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.133834][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.144772][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.167136][ T5521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.198587][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.213030][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.289615][ T5819] FAT-fs (loop4): Directory bread(block 64) failed [ 115.296571][ T5819] FAT-fs (loop4): Directory bread(block 65) failed [ 115.381132][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.389644][ T5819] FAT-fs (loop4): Directory bread(block 66) failed [ 115.396216][ T5819] FAT-fs (loop4): Directory bread(block 67) failed [ 115.403171][ T5819] FAT-fs (loop4): Directory bread(block 68) failed [ 115.416403][ T5815] XFS (loop1): Mounting V5 Filesystem [ 115.437604][ T5819] FAT-fs (loop4): Directory bread(block 69) failed [ 115.445340][ T5819] FAT-fs (loop4): Directory bread(block 70) failed [ 115.453350][ T5819] FAT-fs (loop4): Directory bread(block 71) failed [ 115.463205][ T5819] FAT-fs (loop4): Directory bread(block 72) failed [ 115.470845][ T5819] FAT-fs (loop4): Directory bread(block 73) failed [ 115.487924][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.531856][ T5815] XFS (loop1): Starting recovery (logdev: internal) [ 115.550189][ T5815] XFS (loop1): Metadata CRC error detected at xfs_refcountbt_read_verify+0x3a/0xd0, xfs_refcountbt block 0x8 [ 115.562180][ T5815] XFS (loop1): Unmount and run xfs_repair [ 115.568338][ T5815] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 115.572301][ T5836] loop2: detected capacity change from 0 to 256 [ 115.576134][ T5815] 00000000: 52 33 46 43 00 00 00 03 ff ff ff ff ff ff ff ff R3FC............ [ 115.591764][ T5815] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 115.601377][ T5815] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 115.610845][ T5815] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01 ................ [ 115.620388][ T5815] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 115.629907][ T5815] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.639268][ T5815] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.648305][ T5815] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 115.663108][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.685379][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.695708][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.706231][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.716581][ T5815] XFS (loop1): log mount/recovery failed: error -74 [ 115.757146][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.795045][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.824404][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.852369][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.886533][ T5815] XFS (loop1): log mount failed [ 115.915603][ T5521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.987934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.999246][ T5836] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.018953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.063539][ T5521] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.088632][ T5521] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.098200][ T5836] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 116.117130][ T5521] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.158039][ T5836] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 116.197108][ T5521] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.567476][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.575403][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.576071][ T5849] loop4: detected capacity change from 0 to 2048 [ 116.652708][ T3015] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.727972][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.736162][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.769831][ T5823] loop0: detected capacity change from 0 to 40427 [ 116.838660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.871156][ T5823] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 116.887395][ T5857] kernel profiling enabled (shift: 5) [ 116.900322][ T5849] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.947459][ T5823] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 116.960454][ T5823] F2FS-fs (loop0): invalid crc value [ 117.029938][ T5823] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 117.277468][ T5873] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 117.311235][ T5823] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 117.372680][ T5823] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.910403][ T4188] attempt to access beyond end of device [ 117.910403][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 118.090339][ T5905] netlink: 'syz.2.639': attribute type 5 has an invalid length. [ 118.158503][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 118.545945][ T5925] loop5: detected capacity change from 0 to 1024 [ 119.023796][ T5939] loop2: detected capacity change from 0 to 4096 [ 119.098082][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.656'. [ 119.550019][ T5966] loop1: detected capacity change from 0 to 256 [ 119.674117][ T5939] EXT4-fs (loop2): Test dummy encryption mode enabled [ 119.721510][ T5939] EXT4-fs (loop2): Ignoring removed orlov option [ 119.741470][ T5974] loop4: detected capacity change from 0 to 128 [ 119.770002][ T5966] exfat: Deprecated parameter 'utf8' [ 119.822399][ T5939] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 119.880127][ T5974] ufs: ufstype=hp is supported read-only [ 119.967393][ T5974] ufs: ufs_fill_super(): bad magic number [ 120.102871][ T5966] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 120.164333][ T5980] loop0: detected capacity change from 0 to 2048 [ 120.221155][ T4181] loop0: p1 < > p2 p3 p4 < p5 p6 > [ 120.221186][ T4181] loop0: partition table partially beyond EOD, truncated [ 120.221373][ T4181] loop0: p1 start 3405774849 is beyond EOD, truncated [ 120.222466][ T4181] loop0: p3 start 4225 is beyond EOD, truncated [ 120.225260][ T4181] loop0: p6 start 4225 is beyond EOD, [ 120.310505][ T5990] loop5: detected capacity change from 0 to 256 [ 120.312084][ T5990] exfat: Deprecated parameter 'namecase' [ 120.326628][ T4181] truncated [ 120.351655][ T5980] loop0: p1 < > p2 p3 p4 < p5 p6 > [ 120.388900][ T5990] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 120.406176][ T5980] loop0: partition table partially beyond EOD, truncated [ 120.435306][ T5980] loop0: p1 start 3405774849 is beyond EOD, truncated [ 120.440147][ T5980] loop0: p3 start 4225 is beyond EOD, truncated [ 120.485361][ T5980] loop0: p6 start 4225 is beyond EOD, truncated [ 120.815260][ T6005] netlink: 256 bytes leftover after parsing attributes in process `syz.1.671'. [ 120.895823][ T6005] netlink: 48 bytes leftover after parsing attributes in process `syz.1.671'. [ 120.909110][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 120.910671][ T4763] udevd[4763]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 120.939480][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 121.093937][ T5500] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 121.105482][ T6018] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.677:6018 [ 121.369298][ T6030] loop0: detected capacity change from 0 to 8 [ 121.490717][ T6022] Zero length message leads to an empty skb [ 121.507430][ T5500] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.547107][ T5500] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 121.578083][ T6030] SQUASHFS error: Failed to read block 0x636: -5 [ 121.585025][ T6030] SQUASHFS error: Unable to read metadata cache entry [634] [ 121.610676][ T5500] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.701511][ T5500] usb 5-1: config 0 interface 0 has no altsetting 0 [ 121.732959][ T5500] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 121.769627][ T5500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.817159][ T5500] usb 5-1: config 0 descriptor?? [ 121.867546][ T6006] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.136457][ T6060] loop0: detected capacity change from 0 to 64 [ 122.287292][ T4746] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.362138][ T6067] tipc: Enabling of bearer rejected, failed to enable media [ 122.373007][ T5500] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.407467][ T5500] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.414683][ T5500] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.447965][ T5500] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.455336][ T5500] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.515223][ T5500] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.537332][ T5500] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.547183][ T5500] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.547765][ T4746] usb 2-1: Using ep0 maxpacket: 16 [ 122.554577][ T5500] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.554607][ T5500] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.588171][ T5500] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.05 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 122.652133][ T5500] usb 5-1: USB disconnect, device number 5 [ 122.747423][ T4746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.764065][ T6073] loop0: detected capacity change from 0 to 4096 [ 122.797260][ T4746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.837160][ T4746] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.846160][ T6077] fido_id[6077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 122.859288][ T4746] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.878962][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 122.890713][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 122.900824][ T4746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.916130][ T4746] usb 2-1: config 0 descriptor?? [ 122.919697][ T6073] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 123.072294][ T6087] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 2, id = 0 [ 123.089989][ T6085] IPVS: stopping backup sync thread 6087 ... [ 123.172135][ T6073] ntfs3: loop0: failed to convert "c46c" to cp860 [ 123.426174][ T6100] netlink: 'syz.4.706': attribute type 3 has an invalid length. [ 123.428909][ T4746] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 123.466510][ T6102] loop0: detected capacity change from 0 to 1024 [ 123.467287][ T4746] HID 045e:07da: Invalid code 65791 type 1 [ 123.494725][ T4746] HID 045e:07da: Invalid code 768 type 1 [ 123.501081][ T4746] HID 045e:07da: Invalid code 769 type 1 [ 123.536267][ T4746] HID 045e:07da: Invalid code 770 type 1 [ 123.555826][ T4746] HID 045e:07da: Invalid code 771 type 1 [ 123.560061][ T6108] loop2: detected capacity change from 0 to 1024 [ 123.577211][ T4746] HID 045e:07da: Invalid code 772 type 1 [ 123.583027][ T4746] HID 045e:07da: Invalid code 773 type 1 [ 123.604065][ T4746] HID 045e:07da: Invalid code 774 type 1 [ 123.627956][ T4746] HID 045e:07da: Invalid code 775 type 1 [ 123.657631][ T4746] HID 045e:07da: Invalid code 776 type 1 [ 123.776926][ T4746] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input9 [ 123.828117][ T6116] ALSA: mixer_oss: invalid OSS volume '' [ 123.891861][ T4746] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 123.953013][ T4746] usb 2-1: USB disconnect, device number 6 [ 124.086727][ T6124] netem: change failed [ 124.258516][ T6128] fido_id[6128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 124.578950][ T6156] loop4: detected capacity change from 0 to 8 [ 124.700413][ T6156] SQUASHFS error: lzo decompression failed, data probably corrupt [ 124.733328][ T6156] SQUASHFS error: Failed to read block 0x82: -5 [ 124.769054][ T6156] SQUASHFS error: Unable to read metadata cache entry [80] [ 124.776548][ T6156] SQUASHFS error: Unable to read inode 0x11f [ 125.283433][ T4744] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 125.385445][ T6162] loop5: detected capacity change from 0 to 32768 [ 125.425288][ T6162] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.730 (6162) [ 125.431796][ T6155] loop1: detected capacity change from 0 to 32768 [ 125.454301][ T6143] loop0: detected capacity change from 0 to 32768 [ 125.463651][ T6162] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 125.475169][ T6162] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 125.501578][ T6143] XFS: ikeep mount option is deprecated. [ 125.501940][ T6162] BTRFS info (device loop5): force lzo compression, level 0 [ 125.518272][ T6162] BTRFS info (device loop5): max_inline at 4096 [ 125.524738][ T6162] BTRFS info (device loop5): allowing degraded mounts [ 125.540207][ T6162] BTRFS info (device loop5): using free space tree [ 125.556765][ T6162] BTRFS info (device loop5): has skinny extents [ 125.645345][ T6143] XFS (loop0): Mounting V5 Filesystem [ 125.667283][ T4744] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.717889][ T4744] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.871116][ T6143] XFS (loop0): Ending clean mount [ 125.887249][ T4744] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 125.923113][ T6143] XFS (loop0): Quotacheck needed: Please wait. [ 125.927179][ T4744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.980405][ T4744] usb 5-1: SerialNumber: syz [ 126.060850][ T4744] usb 5-1: 0:2 : does not exist [ 126.109413][ T6143] XFS (loop0): Quotacheck: Done. [ 126.440434][ T4763] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop5 scanned by udevd (4763) [ 126.503534][ T4744] usb 5-1: USB disconnect, device number 6 [ 126.649651][ T4188] XFS (loop0): Unmounting Filesystem [ 126.851317][ T6172] loop2: detected capacity change from 0 to 32768 [ 126.968427][ T6172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.734 (6172) [ 127.044350][ T6172] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 127.087341][ T4744] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 127.104614][ T6172] BTRFS info (device loop2): setting nodatasum [ 127.128226][ T6172] BTRFS info (device loop2): force zlib compression, level 3 [ 127.182112][ T6172] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 127.249044][ T6172] BTRFS info (device loop2): use lzo compression, level 0 [ 127.283342][ T6172] BTRFS info (device loop2): turning on flush-on-commit [ 127.315573][ T6172] BTRFS info (device loop2): enabling auto defrag [ 127.335860][ T6172] BTRFS info (device loop2): max_inline at 4096 [ 127.363490][ T6172] BTRFS info (device loop2): using free space tree [ 127.390446][ T6172] BTRFS info (device loop2): has skinny extents [ 127.404138][ T6228] loop0: detected capacity change from 0 to 4096 [ 127.457451][ T4744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.477171][ T4744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.487875][ T4744] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.507749][ T4744] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.527198][ T6228] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 127.546885][ T4744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.595780][ T6228] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 127.652448][ T4744] usb 6-1: config 0 descriptor?? [ 127.682119][ T6221] loop1: detected capacity change from 0 to 32768 [ 127.688770][ T6228] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 127.738670][ T6228] ntfs: volume version 3.1. [ 127.849951][ T6172] BTRFS info (device loop2): enabling ssd optimizations [ 127.907266][ T6221] XFS (loop1): Mounting V5 Filesystem [ 127.975119][ T4188] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 128.130087][ T6221] XFS (loop1): Ending clean mount [ 128.143058][ T6221] XFS (loop1): Quotacheck needed: Please wait. [ 128.171261][ T4744] input: HID 047f:ffff as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:047F:FFFF.0008/input/input10 [ 128.278631][ T4744] plantronics 0003:047F:FFFF.0008: input,hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 128.303707][ T6221] XFS (loop1): Quotacheck: Done. [ 128.451003][ T4746] usb 6-1: USB disconnect, device number 2 [ 128.644521][ T6287] fido_id[6287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 129.228506][ T4189] XFS (loop1): Unmounting Filesystem [ 129.430405][ T6286] loop0: detected capacity change from 0 to 40427 [ 129.509049][ T6286] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 129.517961][ T6286] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.562811][ T6286] F2FS-fs (loop0): invalid crc value [ 129.658019][ T6286] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.768994][ T6286] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 129.776196][ T6286] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.785916][ T6310] loop4: detected capacity change from 0 to 4096 [ 129.847928][ T6310] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 129.995868][ T4188] attempt to access beyond end of device [ 129.995868][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 130.477365][ T4318] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 130.857447][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 130.902596][ T6326] loop2: detected capacity change from 0 to 32768 [ 131.007957][ T4318] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 131.031250][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.062181][ T4318] usb 2-1: Product: syz [ 131.072329][ T4318] usb 2-1: Manufacturer: syz [ 131.082430][ T4318] usb 2-1: SerialNumber: syz [ 131.106517][ T4318] usb 2-1: config 0 descriptor?? [ 131.127954][ T6324] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.159260][ T4318] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 131.421879][ T4746] usb 2-1: USB disconnect, device number 7 [ 131.477922][ T6357] loop2: detected capacity change from 0 to 512 [ 131.508669][ T6357] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.523367][ T6357] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.568280][ T6357] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.781: Invalid block bitmap block 0 in block_group 0 [ 131.604232][ T6357] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 131.628045][ T6357] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.781: attempt to clear invalid blocks 983261 len 1 [ 131.662368][ T6349] loop4: detected capacity change from 0 to 32768 [ 131.680096][ T6357] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.781: Invalid inode table block 0 in block_group 0 [ 131.710323][ T6357] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 131.716707][ T6361] loop5: detected capacity change from 0 to 512 [ 131.722161][ T6357] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 131.738562][ T6357] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.781: Invalid inode table block 0 in block_group 0 [ 131.752441][ T6357] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 131.766564][ T6357] EXT4-fs error (device loop2): ext4_truncate:4286: inode #11: comm syz.2.781: mark_inode_dirty error [ 131.786025][ T6357] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 131.796548][ T6357] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.781: Invalid inode table block 0 in block_group 0 [ 131.812828][ T6357] EXT4-fs (loop2): 1 truncate cleaned up [ 131.818677][ T6357] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 131.827365][ T6361] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.782: Unrecognised inode hash code 255 [ 131.837404][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.894551][ T6361] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.782: Corrupt directory, running e2fsck is recommended [ 131.901180][ T6349] XFS (loop4): Mounting V5 Filesystem [ 131.915081][ T6361] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 131.928008][ T6361] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.782: corrupted in-inode xattr [ 131.943437][ T6361] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.782: couldn't read orphan inode 15 (err -117) [ 132.059350][ T6361] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 132.064182][ T6349] XFS (loop4): Ending clean mount [ 132.146315][ T6349] XFS (loop4): Quotacheck needed: Please wait. [ 132.254974][ T6361] EXT4-fs error (device loop5): ext4_remount:6062: comm syz.5.782: Abort forced by user [ 132.271599][ T6349] XFS (loop4): Quotacheck: Done. [ 132.327296][ T6361] EXT4-fs (loop5): Remounting filesystem read-only [ 132.334292][ T6361] EXT4-fs (loop5): re-mounted. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000. Quota mode: writeback. [ 132.516242][ T4198] XFS (loop4): Unmounting Filesystem [ 132.880085][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.084839][ T6375] loop2: detected capacity change from 0 to 40427 [ 133.120303][ T6400] loop5: detected capacity change from 0 to 512 [ 133.163975][ T6375] F2FS-fs (loop2): invalid crc value [ 133.205318][ T6375] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.240340][ T6403] loop4: detected capacity change from 0 to 4096 [ 133.249248][ T6400] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.791: missing EA_INODE flag [ 133.280976][ T6403] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 133.328362][ T6400] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.791: error while reading EA inode 2 err=-117 [ 133.386997][ T6400] EXT4-fs (loop5): 1 orphan inode deleted [ 133.393059][ T6400] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 133.427630][ T6375] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.520070][ T6400] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #2: comm syz.5.791: invalid size [ 133.576774][ T6403] ntfs3: loop4: failed to convert "c46c" to koi8-u [ 133.688129][ T4194] attempt to access beyond end of device [ 133.688129][ T4194] loop2: rw=2049, want=45104, limit=40427 [ 133.794489][ T6422] device bridge0 entered promiscuous mode [ 133.805246][ T6422] device macvlan3 entered promiscuous mode [ 134.718782][ T6460] loop0: detected capacity change from 0 to 256 [ 134.893697][ T6417] loop5: detected capacity change from 0 to 32768 [ 134.910940][ T6460] attempt to access beyond end of device [ 134.910940][ T6460] loop0: rw=0, want=260, limit=256 [ 134.975509][ T6417] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.793 (6417) [ 135.063197][ T6417] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 135.090060][ T6470] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 135.112311][ T6417] BTRFS info (device loop5): using free space tree [ 135.137287][ T6417] BTRFS info (device loop5): has skinny extents [ 135.456390][ T6502] loop0: detected capacity change from 0 to 1024 [ 135.520075][ T6440] loop1: detected capacity change from 0 to 32768 [ 135.549258][ T6417] BTRFS info (device loop5): enabling ssd optimizations [ 135.651368][ T6440] ialloc: diAlloc returned -5! [ 135.704530][ T6440] ialloc: diAlloc returned -5! [ 136.103965][ T6527] loop0: detected capacity change from 0 to 512 [ 136.144614][ T6527] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 136.176480][ T6527] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 136.326894][ T6527] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.820: bad orphan inode 131083 [ 136.385151][ T6534] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 136.404474][ T6527] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,journal_dev=0x00000000000003f2,noload,,errors=continue. Quota mode: none. [ 136.556864][ T6538] loop2: detected capacity change from 0 to 1024 [ 136.848654][ T6538] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 136.887344][ T6538] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.058596][ T6538] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.822: bg 0: block 112: padding at end of block bitmap is not set [ 137.158373][ T6561] netlink: 'syz.1.828': attribute type 29 has an invalid length. [ 137.169493][ T6558] loop5: detected capacity change from 0 to 2048 [ 137.232753][ T6564] loop0: detected capacity change from 0 to 256 [ 137.238793][ T6561] netlink: 'syz.1.828': attribute type 29 has an invalid length. [ 137.305825][ T6566] netlink: 'syz.1.828': attribute type 29 has an invalid length. [ 137.336753][ T6567] loop4: detected capacity change from 0 to 2048 [ 137.413313][ T6564] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 137.521643][ T6567] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000001cc4,nodioread_nolock,,errors=continue. Quota mode: none. [ 137.872806][ T6594] loop5: detected capacity change from 0 to 128 [ 137.992721][ T6594] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 138.016691][ T6594] FAT-fs (loop5): Filesystem has been set read-only [ 138.039185][ T6594] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 138.098504][ T6594] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 138.158748][ T6594] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 138.186395][ T6594] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 138.237190][ T6594] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 138.237264][ T6594] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 138.237291][ T6594] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 138.237384][ T6594] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 138.237588][ T6594] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 138.250001][ T26] audit: type=1800 audit(1786966682.824:8): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.837" name="file1" dev="loop5" ino=1048608 res=0 errno=0 [ 138.273531][ T6606] loop2: detected capacity change from 0 to 2048 [ 138.315304][ T6594] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 138.315952][ T6606] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 138.385813][ T6620] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.386436][ T4181] udevd[4181]: incorrect nilfs2 checksum on /dev/loop2 [ 138.446819][ T6618] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 138.467984][ T6618] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 138.468015][ T6618] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 138.468032][ T6618] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 138.478230][ T6618] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 138.479329][ T6618] EXT4-fs (loop0): orphan cleanup on readonly fs [ 138.483888][ T6618] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.846: bg 0: block 34: padding at end of block bitmap is not set [ 138.527576][ T6618] Quota error (device loop0): write_blk: dquota write failed [ 138.527772][ T6618] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 138.527806][ T6618] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.846: Failed to acquire dquot type 1 [ 138.657533][ T6618] EXT4-fs (loop0): 1 truncate cleaned up [ 138.683532][ T6618] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,bsddf,nodiscard,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,errors=continue,nouid32,nodiscard,abort,usrjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 139.267315][ T4746] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 139.610154][ T6671] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 139.627421][ T4746] usb 6-1: config index 0 descriptor too short (expected 7768, got 18) [ 139.643836][ T4746] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 139.657973][ T4746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.679248][ T4746] usb 6-1: config 0 descriptor?? [ 139.728725][ T4746] ftdi_sio 6-1:0.0: Ignoring interface reserved for JTAG [ 139.909082][ T6652] set_capacity_and_notify: 3 callbacks suppressed [ 139.909100][ T6652] loop0: detected capacity change from 0 to 32768 [ 139.943241][ T4746] usb 6-1: USB disconnect, device number 3 [ 140.087381][ T6652] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.857 (6652) [ 140.159801][ T6685] loop1: detected capacity change from 0 to 8192 [ 140.166219][ T6652] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 140.166260][ T6652] BTRFS info (device loop0): using free space tree [ 140.233877][ T6652] BTRFS info (device loop0): has skinny extents [ 140.687934][ T6652] BTRFS info (device loop0): enabling ssd optimizations [ 140.871393][ T5344] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 141.147678][ T5344] usb 5-1: Using ep0 maxpacket: 8 [ 141.245503][ T6742] team0: Device wg0 is of different type [ 141.321487][ T5344] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 141.334775][ T5344] usb 5-1: config 2 has no interface number 0 [ 141.355750][ T5344] usb 5-1: config 2 interface 31 has no altsetting 0 [ 141.537365][ T5344] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 141.556223][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.575848][ T5344] usb 5-1: Product: syz [ 141.581267][ T5344] usb 5-1: Manufacturer: syz [ 141.586712][ T6760] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 141.606705][ T5344] usb 5-1: SerialNumber: syz [ 141.773843][ T6769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.891'. [ 141.787103][ T4740] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 142.037307][ T4740] usb 2-1: Using ep0 maxpacket: 16 [ 142.157430][ T4740] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.162658][ T6785] loop0: detected capacity change from 0 to 512 [ 142.177669][ T4740] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 142.177706][ T4740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.181948][ T4740] usb 2-1: config 0 descriptor?? [ 142.239724][ T6785] EXT4-fs (loop0): Ignoring removed orlov option [ 142.273061][ T6785] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,orlov,bsddf,auto_da_alloc=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 142.370813][ T6772] loop5: detected capacity change from 0 to 32768 [ 142.392815][ T6772] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.892 (6772) [ 142.423112][ T6772] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 142.436973][ T6772] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 142.452598][ T6772] BTRFS info (device loop5): use zstd compression, level 3 [ 142.464483][ T6772] BTRFS info (device loop5): using free space tree [ 142.474140][ T6772] BTRFS info (device loop5): has skinny extents [ 142.540286][ T5344] ch9200: probe of 5-1:2.31 failed with error -22 [ 142.553820][ T5344] usb 5-1: USB disconnect, device number 7 [ 142.611993][ T6772] BTRFS info (device loop5): enabling ssd optimizations [ 142.674608][ T26] audit: type=1800 audit(1786966687.244:9): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.892" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 142.691022][ T4740] cherry 0003:046A:0023.0009: unknown main item tag 0x0 [ 142.706062][ T4740] cherry 0003:046A:0023.0009: unknown main item tag 0x0 [ 142.715770][ T4740] cherry 0003:046A:0023.0009: unknown main item tag 0x0 [ 142.728079][ T4740] cherry 0003:046A:0023.0009: unknown main item tag 0x0 [ 142.736181][ T4740] cherry 0003:046A:0023.0009: unknown main item tag 0x0 [ 142.749629][ T4740] cherry 0003:046A:0023.0009: unknown main item tag 0x0 [ 142.759565][ T4740] cherry 0003:046A:0023.0009: unknown main item tag 0x0 [ 142.770641][ T4740] cherry 0003:046A:0023.0009: hidraw0: USB HID v0.00 Device [HID 046a:0023] on usb-dummy_hcd.1-1/input0 [ 142.977915][ T5344] usb 2-1: USB disconnect, device number 8 [ 143.025514][ T6814] fido_id[6814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 143.273207][ T6820] loop4: detected capacity change from 0 to 4096 [ 143.308345][ T6820] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 143.428292][ T6825] loop5: detected capacity change from 0 to 128 [ 143.503805][ T6825] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 143.534713][ T6825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.897261][ T4741] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 144.128165][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 144.147338][ T4741] usb 2-1: Using ep0 maxpacket: 8 [ 144.150882][ T1347] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 144.238671][ T6859] loop4: detected capacity change from 0 to 128 [ 144.267410][ T4741] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 144.371837][ T6859] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 144.396406][ T6859] hpfs: filesystem error: improperly stopped [ 144.405565][ T6859] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 144.417500][ T1347] usb 6-1: Using ep0 maxpacket: 16 [ 144.423837][ T6859] hpfs: You really don't want any checks? You are crazy... [ 144.432792][ T4741] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 144.453927][ T6859] hpfs: Code page index out of array [ 144.461519][ T4741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.470518][ T6859] hpfs: code page support is disabled [ 144.476882][ T4741] usb 2-1: Product: syz [ 144.481494][ T4741] usb 2-1: Manufacturer: syz [ 144.486131][ T4741] usb 2-1: SerialNumber: syz [ 144.491024][ T6859] hpfs: hpfs_map_4sectors(): unaligned read [ 144.499149][ T6859] hpfs: hpfs_map_4sectors(): unaligned read [ 144.505391][ T6859] hpfs: filesystem error: unable to find root dir [ 144.514568][ T4741] usb 2-1: config 0 descriptor?? [ 144.559181][ T4741] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 144.577687][ T1347] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.578550][ T4741] usb 2-1: setting power ON [ 144.597360][ T4741] dvb-usb: bulk message failed: -22 (2/0) [ 144.603872][ T1347] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.638964][ T4741] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.665531][ T6877] trusted_key: encrypted_key: hex blob is missing [ 144.670645][ T4741] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 144.697252][ T4741] usb 2-1: media controller created [ 144.740630][ T4741] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.775695][ T6881] loop4: detected capacity change from 0 to 256 [ 144.783147][ T1347] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.791348][ T4741] usb 2-1: selecting invalid altsetting 6 [ 144.793317][ T1347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.810299][ T1347] usb 6-1: Product: syz [ 144.814516][ T1347] usb 6-1: Manufacturer: syz [ 144.820119][ T1347] usb 6-1: SerialNumber: syz [ 144.823052][ T4741] usb 2-1: digital interface selection failed (-22) [ 144.832890][ T4741] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 144.867263][ T6881] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.887615][ T4741] usb 2-1: setting power OFF [ 144.889523][ T6881] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 144.914640][ T4741] dvb-usb: bulk message failed: -22 (2/0) [ 144.931036][ T4741] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 144.948004][ T4741] (NULL device *): no alternate interface [ 144.955562][ T6881] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 145.006232][ T4741] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 145.031785][ T4741] usb 2-1: USB disconnect, device number 9 [ 145.158368][ T1347] usb 6-1: 0:2 : does not exist [ 145.183490][ T1347] usb 6-1: USB disconnect, device number 4 [ 145.253726][ T6894] loop0: detected capacity change from 0 to 64 [ 145.498834][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.624971][ T6904] loop2: detected capacity change from 0 to 64 [ 145.882112][ T6921] netlink: 'syz.0.955': attribute type 9 has an invalid length. [ 146.087510][ T4741] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.104275][ T6934] PKCS8: Unsupported PKCS#8 version [ 146.463464][ T6952] loop4: detected capacity change from 0 to 1024 [ 146.507483][ T4741] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.529408][ T6954] loop0: detected capacity change from 0 to 512 [ 146.576572][ T6952] hfsplus: small file entry [ 146.597304][ T4741] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 146.615761][ T4741] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 146.636043][ T4741] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 146.655996][ T6954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.676329][ T4741] usb 2-1: config 13 has no interface number 0 [ 146.706762][ T4741] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 146.727265][ T6958] binder: 6957:6958 ioctl c0306201 200000000000 returned -14 [ 146.746043][ T6954] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.970: bad orphan inode 131083 [ 146.789373][ T6954] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,init_itable,norecovery,,errors=continue. Quota mode: none. [ 146.793553][ T4741] usb 2-1: config 13 interface 50 has no altsetting 0 [ 147.067376][ T4741] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 147.098220][ T4741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.113733][ T4741] usb 2-1: Product: syz [ 147.121375][ T4741] usb 2-1: Manufacturer: syz [ 147.144662][ T4741] usb 2-1: SerialNumber: syz [ 147.152909][ T6948] loop2: detected capacity change from 0 to 32768 [ 147.306499][ T6979] loop5: detected capacity change from 0 to 1024 [ 147.414387][ T6981] loop4: detected capacity change from 0 to 64 [ 147.559189][ T4741] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 147.588098][ T4741] usb 2-1: USB disconnect, device number 10 [ 147.677978][ T4740] Bluetooth: hci2: command 0x0401 tx timeout [ 147.691280][ T26] audit: type=1800 audit(1786966692.264:10): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.982" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 148.058625][ T26] audit: type=1326 audit(1786966692.634:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.4.990" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5af84aa0d9 code=0x0 [ 148.200654][ T6973] loop0: detected capacity change from 0 to 32768 [ 148.241365][ T7] usb 1-1: [UEAGLE-ATM] firmware is not available [ 148.251643][ T4745] usb 3-1: [UEAGLE-ATM] firmware is not available [ 148.259820][ T7008] loop2: detected capacity change from 0 to 164 [ 148.836095][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.0.999'. [ 148.908985][ T7022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.999'. [ 149.217267][ T7038] loop2: detected capacity change from 0 to 1024 [ 149.295940][ T7038] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 149.392146][ T7038] hfsplus: filesystem is marked journaled, leaving read-only. [ 149.516225][ T7049] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.411278][ T7089] set_capacity_and_notify: 1 callbacks suppressed [ 150.411297][ T7089] loop2: detected capacity change from 0 to 64 [ 150.426824][ T7030] loop0: detected capacity change from 0 to 32768 [ 150.543082][ T7030] JBD2: Ignoring recovery information on journal [ 150.660592][ T7030] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 150.680516][ T7099] hub 8-0:1.0: USB hub found [ 150.692543][ T7099] hub 8-0:1.0: 1 port detected [ 150.723453][ T7030] (syz.0.1003,7030,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 150.848104][ T7102] CUSE: unknown device info "n|zQC*" [ 150.869673][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 150.878805][ T7102] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 150.878824][ T7102] CUSE: unknown device info "" [ 150.878834][ T7102] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 150.878846][ T7102] CUSE: DEVNAME unspecified [ 150.956088][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 151.238881][ T7121] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1045'. [ 151.250217][ T7120] loop5: detected capacity change from 0 to 256 [ 151.277739][ T7120] exfat: Deprecated parameter 'utf8' [ 151.283092][ T7120] exfat: Deprecated parameter 'utf8' [ 151.326928][ T7120] exfat: Deprecated parameter 'namecase' [ 151.376241][ T7120] exfat: Unknown parameter 'keep_last_dots' [ 151.386487][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 151.467564][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 151.502294][ T7129] loop2: detected capacity change from 0 to 4096 [ 151.507202][ T7127] netlink: 'syz.0.1049': attribute type 14 has an invalid length. [ 151.606926][ T7139] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.649380][ T7138] netlink: 'syz.5.1054': attribute type 10 has an invalid length. [ 151.836650][ T7138] team0: Port device dummy0 added [ 151.855005][ T7141] netlink: 'syz.5.1054': attribute type 10 has an invalid length. [ 152.013539][ T7152] loop4: detected capacity change from 0 to 256 [ 152.031858][ T7141] team0: Port device dummy0 removed [ 152.069455][ T7141] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 152.118865][ T7152] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 152.188571][ T7146] loop2: detected capacity change from 0 to 8192 [ 152.225152][ T7160] loop0: detected capacity change from 0 to 512 [ 152.238066][ T26] audit: type=1800 audit(1786966696.811:12): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1060" name="file1" dev="loop4" ino=1048611 res=0 errno=0 [ 152.275158][ T7152] [syz.4.1060/7152] FS: loop4 File: /file1 would truncate fibmap result [ 152.284953][ T7160] EXT4-fs (loop0): Ignoring removed orlov option [ 152.292175][ T7160] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 152.330670][ T7146] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 152.386014][ T7146] REISERFS (device loop2): using ordered data mode [ 152.395453][ T7146] reiserfs: using flush barriers [ 152.411792][ T7146] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 152.428041][ T7160] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.1064: corrupted in-inode xattr [ 152.429657][ T7146] REISERFS (device loop2): checking transaction log (loop2) [ 152.465117][ T7160] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1064: couldn't read orphan inode 15 (err -117) [ 152.499599][ T7146] REISERFS (device loop2): Using r5 hash to sort names [ 152.556561][ T7160] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 152.731497][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1069'. [ 152.759582][ T7174] loop5: detected capacity change from 0 to 256 [ 152.960776][ T7179] raw_sendmsg: syz.2.1071 forgot to set AF_INET. Fix it! [ 153.047637][ T7183] nbd: couldn't find device at index 10275584 [ 153.049425][ T7185] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 153.364139][ T7194] loop5: detected capacity change from 0 to 736 [ 153.444020][ T7190] loop0: detected capacity change from 0 to 4096 [ 153.583115][ T7190] ntfs: volume version 3.1. [ 153.789130][ T7159] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.067830][ T7159] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.235111][ T7188] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1076 (7188) [ 154.278646][ T7159] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0 [ 154.297856][ T7188] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 154.306934][ T7188] BTRFS info (device loop2): using free space tree [ 154.337604][ T7159] CPU: 1 PID: 7159 Comm: syz.1.1063 Not tainted syzkaller #0 [ 154.345051][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.355234][ T7159] Call Trace: [ 154.358546][ T7159] [ 154.359405][ T7188] BTRFS info (device loop2): has skinny extents [ 154.361534][ T7159] dump_stack_lvl+0x188/0x250 [ 154.372696][ T7159] ? show_regs_print_info+0x20/0x20 [ 154.378073][ T7159] ? pagecache_get_page+0xbcf/0xf20 [ 154.383330][ T7159] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 154.389290][ T7159] ? unlock_page+0x17c/0x1f0 [ 154.394012][ T7159] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 154.399945][ T7159] f2fs_get_read_data_page+0x2c4/0x580 [ 154.405737][ T7159] ? f2fs_get_block+0x2a0/0x2a0 [ 154.410657][ T7159] f2fs_find_data_page+0x1c2/0x5d0 [ 154.415813][ T7159] f2fs_readdir+0x4b3/0xd90 [ 154.420566][ T7159] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 154.425806][ T7159] ? mutex_lock_io_nested+0x60/0x60 [ 154.431053][ T7159] ? end_current_label_crit_section+0x14b/0x170 [ 154.437354][ T7159] ? iterate_dir+0x10d/0x550 [ 154.441981][ T7159] ? down_read_killable+0x1ce/0x340 [ 154.447571][ T7159] ? fsnotify_perm+0x254/0x560 [ 154.452569][ T7159] iterate_dir+0x213/0x550 [ 154.457122][ T7159] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 154.462373][ T7159] __se_sys_getdents+0xf2/0x260 [ 154.467355][ T7159] ? __x64_sys_getdents+0x80/0x80 [ 154.472413][ T7159] ? fillonedir+0x4c0/0x4c0 [ 154.476979][ T7159] ? lockdep_hardirqs_on+0x94/0x140 [ 154.482311][ T7159] do_syscall_64+0x4c/0xa0 [ 154.486758][ T7159] ? clear_bhb_loop+0x30/0x80 [ 154.491566][ T7159] ? clear_bhb_loop+0x30/0x80 [ 154.496379][ T7159] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.502406][ T7159] RIP: 0033:0x7f9bd87ba0d9 [ 154.506866][ T7159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.526875][ T7159] RSP: 002b:00007f9bd6a12028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 154.535335][ T7159] RAX: ffffffffffffffda RBX: 00007f9bd8a41fa0 RCX: 00007f9bd87ba0d9 [ 154.543340][ T7159] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000004 [ 154.551530][ T7159] RBP: 00007f9bd8851024 R08: 0000000000000000 R09: 0000000000000000 [ 154.559542][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.567610][ T7159] R13: 00007f9bd8a42038 R14: 00007f9bd8a41fa0 R15: 00007fff6548a258 [ 154.575607][ T7159] [ 154.817510][ T7188] BTRFS info (device loop2): enabling ssd optimizations [ 154.923203][ T7241] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1089'. [ 155.297927][ T26] audit: type=1800 audit(1786966699.861:13): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1095" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 155.574310][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1101'. [ 155.608775][ T7253] set_capacity_and_notify: 2 callbacks suppressed [ 155.608795][ T7253] loop0: detected capacity change from 0 to 4096 [ 155.730671][ T7253] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 155.833997][ T7267] loop2: detected capacity change from 0 to 64 [ 155.945422][ T7267] Trying to free block not in datazone [ 156.074775][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1107'. [ 156.153405][ T7277] netlink: 'syz.4.1107': attribute type 1 has an invalid length. [ 156.317377][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 156.394086][ T7288] loop5: detected capacity change from 0 to 4096 [ 156.525069][ T7300] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.566349][ T7288] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 156.576724][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 156.614093][ T7288] Remounting filesystem read-only [ 156.617480][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 156.757609][ T7] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.777266][ T7] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.810418][ T7] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.869666][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.891831][ T7] usb 2-1: New USB device found, idVendor=046e, idProduct=5577, bcdDevice= 0.00 [ 156.908020][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.952287][ T7] usb 2-1: config 0 descriptor?? [ 156.968609][ T7296] loop2: detected capacity change from 0 to 32768 [ 157.071243][ T7296] JBD2: Ignoring recovery information on journal [ 157.155909][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1125'. [ 157.172333][ T7296] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 157.327752][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1128'. [ 157.404781][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 157.441297][ T7] input: HID 046e:5577 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046E:5577.000A/input/input11 [ 157.464260][ T7331] loop5: detected capacity change from 0 to 512 [ 157.476534][ T7] topseed 0003:046E:5577.000A: input,hidraw0: USB HID v0.00 Joystick [HID 046e:5577] on usb-dummy_hcd.1-1/input0 [ 157.542611][ T7331] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 157.556832][ T7331] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 157.614742][ T7331] System zones: 0-1, 15-15, 18-18, 34-34 [ 157.622485][ T7331] EXT4-fs (loop5): orphan cleanup on readonly fs [ 157.629208][ T7331] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 157.649465][ T7331] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 157.676941][ T7] usb 2-1: USB disconnect, device number 11 [ 157.695906][ T7331] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 157.723855][ T7331] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.1131: bad orphan inode 16 [ 157.762531][ T7331] ext4_test_bit(bit=15, block=18) = 1 [ 157.787300][ T7331] is_bad_inode(inode)=0 [ 157.804015][ T7334] fido_id[7334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 157.810343][ T7331] NEXT_ORPHAN(inode)=0 [ 157.854922][ T7331] max_ino=32 [ 157.858710][ T7331] i_nlink=2 [ 157.861931][ T7331] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 158.029084][ T7331] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 158.085810][ T7340] loop2: detected capacity change from 0 to 256 [ 158.425160][ T1347] Bluetooth: hci3: command 0x0405 tx timeout [ 158.436161][ T7346] program syz.5.1137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.185770][ T7377] loop0: detected capacity change from 0 to 736 [ 159.264143][ T7379] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.273675][ T7379] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.282807][ T7379] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.292081][ T7379] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.356389][ T7357] loop5: detected capacity change from 0 to 32768 [ 159.429880][ T7357] [ 159.429880][ T7357] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.429880][ T7357] [ 159.531464][ T7357] ERROR: (device loop5): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 159.531464][ T7357] [ 159.576857][ T7361] loop1: detected capacity change from 0 to 32768 [ 159.590041][ T7386] device vlan2 entered promiscuous mode [ 159.614745][ T7357] ERROR: (device loop5): jfs_unlink: [ 159.614745][ T7357] [ 159.622677][ T7386] device bridge0 entered promiscuous mode [ 159.739198][ T5521] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt [ 159.739198][ T5521] [ 159.849022][ T3015] ERROR: (device loop5): diWrite: ixpxd invalid [ 159.849022][ T3015] [ 159.897842][ T3015] ERROR: (device loop5): txCommit: [ 159.897842][ T3015] [ 159.905746][ T3015] jfs_write_inode: jfs_commit_inode failed! [ 159.959848][ T5521] [ 159.959848][ T5521] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.959848][ T5521] [ 160.006348][ T5521] [ 160.006348][ T5521] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.006348][ T5521] [ 160.253965][ T7409] loop4: detected capacity change from 0 to 64 [ 160.331326][ T26] audit: type=1400 audit(1786966704.901:14): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3AFF20B9DAC6B98850DD7E2AABD6BB0ED3E1FBFE95AF7DEBBE7B052583C2B8BB3F852755C2BBD37D5F3DF1CCB21D8C19D799701EB3C61CEA508FB554741E pid=7403 comm="syz.4.1165" [ 160.345897][ T7411] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1168'. [ 160.655976][ T7426] set_capacity_and_notify: 1 callbacks suppressed [ 160.655993][ T7426] loop2: detected capacity change from 0 to 164 [ 160.711382][ T7432] loop0: detected capacity change from 0 to 16 [ 160.782208][ T7432] erofs: (device loop0): mounted with root inode @ nid 36. [ 160.848431][ T7426] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 160.965560][ T1347] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 161.260235][ T1347] usb 5-1: Using ep0 maxpacket: 16 [ 161.292643][ T7462] loop0: detected capacity change from 0 to 512 [ 161.404539][ T1347] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 161.465678][ T7470] netlink: 'syz.5.1197': attribute type 1 has an invalid length. [ 161.517614][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'. [ 161.535303][ T7441] loop1: detected capacity change from 0 to 32768 [ 161.590104][ T7441] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1180 (7441) [ 161.597568][ T1347] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 161.637348][ T1347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.651947][ T7476] loop5: detected capacity change from 0 to 1024 [ 161.662995][ T1347] usb 5-1: Product: syz [ 161.670783][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 161.682081][ T1347] usb 5-1: Manufacturer: syz [ 161.688640][ T1347] usb 5-1: SerialNumber: syz [ 161.694976][ T1347] r8152-cfgselector 5-1: config 0 descriptor?? [ 161.704918][ T7479] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1200'. [ 161.717607][ T7441] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 161.727296][ T7441] BTRFS info (device loop1): force clearing of disk cache [ 161.734573][ T7441] BTRFS info (device loop1): enabling auto defrag [ 161.767328][ T7441] BTRFS info (device loop1): max_inline at 428 [ 161.784055][ T7441] BTRFS info (device loop1): enabling disk space caching [ 161.809244][ T7441] BTRFS info (device loop1): disk space caching is enabled [ 161.826585][ T7441] BTRFS info (device loop1): has skinny extents [ 161.957398][ T1347] r8152-cfgselector 5-1: Unknown version 0x0000 [ 161.977495][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 162.085602][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1205'. [ 162.158181][ T7441] BTRFS info (device loop1): enabling ssd optimizations [ 162.175524][ T7441] BTRFS info (device loop1): clearing free space tree [ 162.207317][ T1347] r8152-cfgselector 5-1: Unknown version 0x0000 [ 162.224642][ T1347] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 162.232559][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 162.235118][ T7512] netlink: 'syz.5.1208': attribute type 1 has an invalid length. [ 162.279498][ T7441] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 162.348594][ T7441] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 162.398950][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.433917][ T4228] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 162.443336][ T7] usb 3-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 162.504998][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.576409][ T7] usb 3-1: config 0 descriptor?? [ 162.967536][ T4228] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 162.986823][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.005874][ T4228] usb 1-1: Product: syz [ 163.010213][ T4228] usb 1-1: Manufacturer: syz [ 163.014856][ T4228] usb 1-1: SerialNumber: syz [ 163.052755][ T4228] usb 1-1: config 0 descriptor?? [ 163.135947][ T7] chicony 0003:04F2:1123.000B: ignoring exceeding usage max [ 163.136618][ T4228] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 163.162419][ T7] chicony 0003:04F2:1123.000B: unknown main item tag 0x4 [ 163.212995][ T7] chicony 0003:04F2:1123.000B: collection stack underflow [ 163.225588][ T7] chicony 0003:04F2:1123.000B: item 0 0 0 12 parsing failed [ 163.238270][ T7] chicony 0003:04F2:1123.000B: Chicony hid parse failed: -22 [ 163.245813][ T7] chicony: probe of 0003:04F2:1123.000B failed with error -22 [ 163.338394][ T7] usb 3-1: USB disconnect, device number 7 [ 163.500197][ T7535] loop4: detected capacity change from 0 to 2048 [ 163.537331][ T4228] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 163.552099][ T7538] loop5: detected capacity change from 0 to 512 [ 163.561673][ T4228] sq905c 1-1:0.0: Reading version command failed [ 163.571233][ T4228] sq905c: probe of 1-1:0.0 failed with error -71 [ 163.596698][ T4228] usb 1-1: USB disconnect, device number 4 [ 163.650997][ T7542] loop1: detected capacity change from 0 to 512 [ 163.693618][ T7542] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 163.702811][ T7538] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1219: Invalid block bitmap block 0 in block_group 0 [ 163.731999][ T7545] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.780756][ T7542] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 163.789587][ T7538] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 163.805391][ T7538] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.1219: attempt to clear invalid blocks 983261 len 1 [ 163.805542][ T7542] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 163.847266][ T7542] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1221: attempt to clear invalid blocks 33619980 len 1 [ 163.870240][ T7542] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1221: invalid indirect mapped block 1819239214 (level 0) [ 163.893898][ T7538] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1219: invalid indirect mapped block 2683928664 (level 0) [ 163.942434][ T7538] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1219: Invalid inode table block 0 in block_group 0 [ 163.956091][ T7542] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1221: invalid indirect mapped block 1819239214 (level 1) [ 163.964647][ T7542] EXT4-fs (loop1): 1 truncate cleaned up [ 163.979740][ T7538] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 164.006644][ T7542] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,data_err=abort,mblk_io_submit,noblock_validity,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 164.025442][ T7538] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 164.050384][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 164.062939][ T7538] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1219: Invalid inode table block 0 in block_group 0 [ 164.134592][ T7538] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 164.210016][ T7538] EXT4-fs error (device loop5): ext4_truncate:4286: inode #13: comm syz.5.1219: mark_inode_dirty error [ 164.241340][ T7538] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 164.270831][ T7538] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1219: Invalid inode table block 0 in block_group 0 [ 164.319982][ T7538] EXT4-fs (loop5): 1 truncate cleaned up [ 164.339337][ T7538] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none. [ 164.609410][ T7577] netlink: 'syz.2.1237': attribute type 2 has an invalid length. [ 164.777861][ T7585] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1239'. [ 164.965168][ T7593] netlink: 'syz.2.1243': attribute type 4 has an invalid length. [ 164.995715][ T7593] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1243'. [ 165.326861][ T7604] nftables ruleset with unbound set [ 165.389063][ T7608] loop5: detected capacity change from 0 to 64 [ 165.528772][ T7571] loop4: detected capacity change from 0 to 40427 [ 165.613222][ T7571] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 165.627121][ T4745] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 165.631917][ T7571] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 165.737999][ T7571] F2FS-fs (loop4): invalid crc value [ 165.770172][ T7571] F2FS-fs (loop4): Found nat_bits in checkpoint [ 165.889052][ T7584] loop1: detected capacity change from 0 to 32768 [ 165.908923][ T4745] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 165.924795][ T7571] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 165.952162][ T7571] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 165.974691][ T7584] JBD2: Ignoring recovery information on journal [ 166.274950][ T7584] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 166.426379][ T7638] loop5: detected capacity change from 0 to 4096 [ 166.438405][ T7584] (syz.1.1240,7584,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 166.489268][ T7638] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 166.504740][ T7638] NILFS (loop5): mounting unchecked fs [ 166.515476][ T7638] NILFS (loop5): recovery required for readonly filesystem [ 166.546247][ T7638] NILFS (loop5): write access will be enabled during recovery [ 166.551472][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 166.593066][ T4843] udevd[4843]: incorrect nilfs2 checksum on /dev/loop5 [ 166.671197][ T7638] NILFS (loop5): norecovery option specified, skipping roll-forward recovery [ 166.737374][ T4745] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 166.755707][ T4843] udevd[4843]: incorrect nilfs2 checksum on /dev/loop5 [ 166.773059][ T4745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 166.801158][ T4745] usb 3-1: Product: syz [ 166.816548][ T4745] usb 3-1: Manufacturer: syz [ 166.823780][ T4745] usb 3-1: SerialNumber: syz [ 166.831707][ T4745] usb 3-1: config 0 descriptor?? [ 166.964255][ T7652] netem: change failed [ 166.986048][ T7654] loop0: detected capacity change from 0 to 1024 [ 166.994790][ T7650] loop1: detected capacity change from 0 to 1024 [ 167.017207][ T4741] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.061906][ T7654] EXT4-fs (loop0): inline encryption not supported [ 167.089342][ T7654] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.118261][ T7657] loop5: detected capacity change from 0 to 16 [ 167.130724][ T4745] usb 3-1: USB disconnect, device number 8 [ 167.154436][ T7657] erofs: (device loop5): mounted with root inode @ nid 36. [ 167.194084][ T7657] erofs: (device loop5): z_erofs_extent_lookback: unknown type 3 @ lcn 0 of nid 36 [ 167.218110][ T7657] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 36 [ 167.231729][ T7657] erofs: (device loop5): z_erofs_map_blocks_iter: unknown type 3 @ offset 4095 of nid 36 [ 167.238880][ T7654] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.1270: lblock 2 mapped to illegal pblock 2 (length 1) [ 167.241974][ T7657] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 167.264670][ T7654] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 167.266677][ T7657] attempt to access beyond end of device [ 167.266677][ T7657] loop5: rw=524288, want=16408, limit=16 [ 167.280182][ T7654] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.1270: Invalid inode table block 1 in block_group 0 [ 167.334236][ T7654] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 167.361558][ T7654] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.1270: mark_inode_dirty error [ 167.373605][ T7654] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 167.394568][ T7654] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1270: Failed to acquire dquot type 0 [ 167.414695][ T4741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.446585][ T7654] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 167.466049][ T4741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.476160][ T4741] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 167.492574][ T7654] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.1270: mark_inode_dirty error [ 167.504328][ T4741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.521199][ T4741] usb 5-1: config 0 descriptor?? [ 167.535061][ T7654] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 167.554135][ T7654] EXT4-fs (loop0): 1 orphan inode deleted [ 167.562749][ T7654] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,noblock_validity,user_xattr,max_batch_time=0x00000000000008c9,inlinecrypt,dioread_nolock,,errors=continue. Quota mode: none. [ 167.582450][ T1183] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 167.724390][ T1183] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 167.777541][ T1183] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 167.791784][ T7654] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm syz.0.1270: lblock 1 mapped to illegal pblock 1 (length 1) [ 167.857332][ T7654] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 1 [ 167.901676][ T7654] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 60928 [ 167.927990][ T7654] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1270: Failed to acquire dquot type 0 [ 168.009608][ T4741] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 168.030984][ T7684] loop2: detected capacity change from 0 to 512 [ 168.075650][ T154] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.121108][ T7684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 168.139912][ T7684] System zones: 1-12 [ 168.145190][ T7684] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1283: Directory hole found for htree index block 0 [ 168.204185][ T154] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 168.207284][ T4741] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 168.224732][ T7693] loop5: detected capacity change from 0 to 256 [ 168.232165][ T4741] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 168.240978][ T4741] pyra: probe of 0003:1E7D:2CF6.000C failed with error -71 [ 168.246291][ T7684] EXT4-fs (loop2): Remounting filesystem read-only [ 168.250746][ T4741] usb 5-1: USB disconnect, device number 9 [ 168.267513][ T154] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 168.268584][ T7684] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 168.292598][ T7684] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1283: Directory hole found for htree index block 0 [ 168.323313][ T7684] EXT4-fs (loop2): Remounting filesystem read-only [ 168.337201][ T7684] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 168.356050][ T7684] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback. [ 168.370387][ T4188] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 168.416487][ T7695] fido_id[7695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 168.465353][ T4188] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 168.514622][ T4188] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 168.663423][ T7684] EXT4-fs (loop2): user quota file already specified [ 168.681742][ T7701] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.1285'. [ 168.726033][ T7701] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 168.763674][ T7679] loop1: detected capacity change from 0 to 32768 [ 168.906370][ T7679] JBD2: Ignoring recovery information on journal [ 169.128080][ T7679] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 169.341948][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 169.413499][ T7726] logitech-hidpp-device 0005:046D:B012.000D: received hid++ report of bad size (1) [ 169.465620][ T7726] logitech-hidpp-device 0005:046D:B012.000D: Event data for report 16 was too short (6 vs 0) [ 169.487647][ T7706] loop0: detected capacity change from 0 to 32768 [ 169.500481][ T1347] logitech-hidpp-device 0005:046D:B012.000D: Device not connected [ 169.634335][ T7706] XFS (loop0): Mounting V5 Filesystem [ 169.791254][ T7706] XFS (loop0): Ending clean mount [ 169.921960][ T4188] XFS (loop0): Unmounting Filesystem [ 170.002701][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 170.160386][ T7761] loop1: detected capacity change from 0 to 256 [ 170.167456][ T4735] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.522913][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1319'. [ 170.539027][ T4735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 170.564275][ T4735] usb 5-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.00 [ 170.601859][ T4735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.653823][ T4735] usb 5-1: config 0 descriptor?? [ 170.697462][ T7751] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.702634][ T7783] netlink: 'syz.5.1323': attribute type 46 has an invalid length. [ 170.722353][ T4735] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 170.964340][ T3545] bcm5974 5-1:0.0: could not read from device [ 170.996969][ T4735] usb 5-1: USB disconnect, device number 10 [ 171.017880][ T3545] bcm5974 5-1:0.0: could not read from device [ 171.088638][ T7797] loop1: detected capacity change from 0 to 1024 [ 171.166197][ T7797] hfsplus: catalog record size mismatch (type 3, got 52, expected 12) [ 171.225703][ T7797] smb3: Unexpected value for 'rdma' [ 171.329374][ T7805] loop5: detected capacity change from 0 to 256 [ 171.419865][ T7805] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 171.495912][ T7809] device hsr0 entered promiscuous mode [ 171.538317][ T7809] device macsec1 entered promiscuous mode [ 171.662831][ T7813] BUG: MAX_LOCK_DEPTH too low! [ 171.668096][ T7813] turning off the locking correctness validator. [ 171.675317][ T7813] depth: 48 max: 48! [ 171.679856][ T7813] 48 locks held by syz.4.1338/7813: [ 171.685878][ T7813] #0: ffff888062555820 (sk_lock-AF_INET6){+.+.}-{0:0}, at: rawv6_sendmsg+0x11d0/0x1710 [ 171.697001][ T7813] #1: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 171.710375][ T7813] #2: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.721640][ T7813] #3: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.725735][ T7781] loop2: detected capacity change from 0 to 32768 [ 171.732757][ T7813] #4: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.732831][ T7813] #5: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.758208][ T7813] #6: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.767554][ T7813] #7: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.777066][ T7813] #8: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.786604][ T7813] #9: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.796556][ T7813] #10: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.806257][ T7813] #11: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.815896][ T7813] #12: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.825851][ T7813] #13: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.835937][ T7813] #14: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.845919][ T7813] #15: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.855704][ T7813] #16: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.866078][ T7813] #17: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.875603][ T7813] #18: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.885578][ T7813] #19: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.896071][ T7813] #20: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.905762][ T7813] #21: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.915271][ T7813] #22: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.925067][ T7813] #23: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.934793][ T7813] #24: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.944399][ T7813] #25: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.954166][ T7813] #26: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.963736][ T7813] #27: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.973247][ T7813] #28: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.982915][ T7813] #29: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 171.992539][ T7813] #30: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.002929][ T7813] #31: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.012702][ T7813] #32: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.022298][ T7813] #33: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.032064][ T7813] #34: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.041733][ T7813] #35: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.051241][ T7813] #36: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.060853][ T7813] #37: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.070353][ T7813] #38: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.079924][ T7813] #39: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.089414][ T7813] #40: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.099074][ T7813] #41: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.108478][ T7813] #42: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.117995][ T7813] #43: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.127969][ T7813] #44: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.137394][ T7813] #45: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.146880][ T7813] #46: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 172.156748][ T7813] #47: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 172.166284][ T7813] INFO: lockdep is turned off. [ 172.171061][ T7813] CPU: 0 PID: 7813 Comm: syz.4.1338 Not tainted syzkaller #0 [ 172.178528][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.188842][ T7813] Call Trace: [ 172.192121][ T7813] [ 172.195061][ T7813] dump_stack_lvl+0x188/0x250 [ 172.199751][ T7813] ? show_regs_print_info+0x20/0x20 [ 172.205049][ T7813] ? load_image+0x410/0x410 [ 172.209645][ T7813] __lock_acquire+0x1247/0x7b50 [ 172.214498][ T7813] ? rpl_output+0x31f/0x730 [ 172.219006][ T7813] ? lwtunnel_output+0x27e/0x440 [ 172.223946][ T7813] ? kfree+0xef/0x2a0 [ 172.228024][ T7813] ? verify_lock_unused+0x140/0x140 [ 172.233466][ T7813] ? stack_trace_save+0xa6/0xf0 [ 172.238347][ T7813] ? stack_trace_snprint+0xe0/0xe0 [ 172.243584][ T7813] ? stack_trace_save+0xf0/0xf0 [ 172.248439][ T7813] ? mark_lock+0x94/0x320 [ 172.252773][ T7813] ? __lock_acquire+0x1305/0x7b50 [ 172.257812][ T7813] ? rpl_output+0x178/0x730 [ 172.262598][ T7813] lock_acquire+0x19e/0x400 [ 172.267304][ T7813] ? rcu_lock_acquire+0x9/0x30 [ 172.272458][ T7813] ? rpl_output+0x31f/0x730 [ 172.277234][ T7813] ? lwtunnel_output+0x27e/0x440 [ 172.282210][ T7813] ? rpl_output+0x31f/0x730 [ 172.286710][ T7813] ? lwtunnel_output+0x27e/0x440 [ 172.292005][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.297416][ T7813] ? verify_lock_unused+0x140/0x140 [ 172.302756][ T7813] ? mark_lock+0x94/0x320 [ 172.307593][ T7813] rcu_lock_acquire+0x2a/0x30 [ 172.312386][ T7813] ? rcu_lock_acquire+0x9/0x30 [ 172.317401][ T7813] ip6_dst_check+0xe2/0x7a0 [ 172.322273][ T7813] ? skb_header_pointer+0x120/0x120 [ 172.327562][ T7813] dst_cache_per_cpu_get+0x1a3/0x310 [ 172.333030][ T7813] rpl_output+0x165/0x730 [ 172.337464][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.342557][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.347582][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.352961][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.357910][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.362936][ T7813] lwtunnel_output+0x27e/0x440 [ 172.367713][ T7813] rpl_output+0x31f/0x730 [ 172.372592][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.377272][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.382697][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.388183][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.392936][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.398093][ T7813] lwtunnel_output+0x27e/0x440 [ 172.402963][ T7813] rpl_output+0x31f/0x730 [ 172.407298][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.411812][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.417182][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.422674][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.427363][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.432327][ T7813] lwtunnel_output+0x27e/0x440 [ 172.437501][ T7813] rpl_output+0x31f/0x730 [ 172.441946][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.446654][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.451640][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.457595][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.462212][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.467236][ T7813] lwtunnel_output+0x27e/0x440 [ 172.472094][ T7813] rpl_output+0x31f/0x730 [ 172.476439][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.481058][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.486111][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.491496][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.496106][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.501041][ T7813] lwtunnel_output+0x27e/0x440 [ 172.505828][ T7813] rpl_output+0x31f/0x730 [ 172.510184][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.514708][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.519754][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.525482][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.529994][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.535018][ T7813] lwtunnel_output+0x27e/0x440 [ 172.539795][ T7813] rpl_output+0x31f/0x730 [ 172.544216][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.548988][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.554389][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.559840][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.564510][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.569558][ T7813] lwtunnel_output+0x27e/0x440 [ 172.574344][ T7813] rpl_output+0x31f/0x730 [ 172.578710][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.583326][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.588288][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.593873][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.598418][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.603359][ T7813] lwtunnel_output+0x27e/0x440 [ 172.608229][ T7813] rpl_output+0x31f/0x730 [ 172.612649][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.617273][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.622319][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.627900][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.632409][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.637456][ T7813] lwtunnel_output+0x27e/0x440 [ 172.642451][ T7813] rpl_output+0x31f/0x730 [ 172.646863][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.651640][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.656971][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.662526][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.667036][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.671987][ T7813] lwtunnel_output+0x27e/0x440 [ 172.676962][ T7813] rpl_output+0x31f/0x730 [ 172.681394][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.685989][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.690928][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.696400][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.701184][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.706298][ T7813] lwtunnel_output+0x27e/0x440 [ 172.711154][ T7813] rpl_output+0x31f/0x730 [ 172.716008][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.720777][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.725720][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.731117][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.735819][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.741036][ T7813] lwtunnel_output+0x27e/0x440 [ 172.745925][ T7813] rpl_output+0x31f/0x730 [ 172.750369][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.755080][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.760481][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.765881][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.770706][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.775651][ T7813] lwtunnel_output+0x27e/0x440 [ 172.780544][ T7813] rpl_output+0x31f/0x730 [ 172.784940][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.789515][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.794473][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.799850][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.804361][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.809402][ T7813] lwtunnel_output+0x27e/0x440 [ 172.814425][ T7813] rpl_output+0x31f/0x730 [ 172.818966][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.823565][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.828683][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.834155][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.838670][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.843729][ T7813] lwtunnel_output+0x27e/0x440 [ 172.848504][ T7813] rpl_output+0x31f/0x730 [ 172.854141][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.859611][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.864659][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.870052][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.874563][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.879682][ T7813] lwtunnel_output+0x27e/0x440 [ 172.884569][ T7813] rpl_output+0x31f/0x730 [ 172.889273][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.894080][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.899186][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.904587][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.909205][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.914249][ T7813] lwtunnel_output+0x27e/0x440 [ 172.919061][ T7813] rpl_output+0x31f/0x730 [ 172.923928][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.928434][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.933460][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.938949][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.943474][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.948412][ T7813] lwtunnel_output+0x27e/0x440 [ 172.953375][ T7813] rpl_output+0x31f/0x730 [ 172.957887][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.962395][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.967334][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 172.973251][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.977792][ T7813] ? rpl_destroy_state+0x20/0x20 [ 172.982931][ T7813] lwtunnel_output+0x27e/0x440 [ 172.987810][ T7813] rpl_output+0x31f/0x730 [ 172.992160][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 172.996751][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.001951][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.007696][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.012468][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.017639][ T7813] lwtunnel_output+0x27e/0x440 [ 173.022546][ T7813] rpl_output+0x31f/0x730 [ 173.026982][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.031670][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.036609][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.042076][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.046583][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.051804][ T7813] lwtunnel_output+0x27e/0x440 [ 173.056661][ T7813] rpl_output+0x31f/0x730 [ 173.061081][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.065718][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.070688][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.076079][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.080775][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.085713][ T7813] lwtunnel_output+0x27e/0x440 [ 173.090657][ T7813] rpl_output+0x31f/0x730 [ 173.095080][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.099771][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.104724][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.110108][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.114614][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.119551][ T7813] lwtunnel_output+0x27e/0x440 [ 173.124414][ T7813] rpl_output+0x31f/0x730 [ 173.128932][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.133459][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.138521][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.144077][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.148608][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.153570][ T7813] lwtunnel_output+0x27e/0x440 [ 173.158650][ T7813] rpl_output+0x31f/0x730 [ 173.163185][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.167885][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.173110][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.179127][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.183653][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.188592][ T7813] lwtunnel_output+0x27e/0x440 [ 173.193545][ T7813] rpl_output+0x31f/0x730 [ 173.197970][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.202484][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.207455][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.213192][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.218054][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.223019][ T7813] lwtunnel_output+0x27e/0x440 [ 173.227913][ T7813] rpl_output+0x31f/0x730 [ 173.232259][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.236764][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.241970][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.247574][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.252098][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.257038][ T7813] lwtunnel_output+0x27e/0x440 [ 173.261812][ T7813] rpl_output+0x31f/0x730 [ 173.266145][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.270735][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.275861][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.281334][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.285864][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.290979][ T7813] lwtunnel_output+0x27e/0x440 [ 173.295764][ T7813] rpl_output+0x31f/0x730 [ 173.300104][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.304606][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.309817][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.315405][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.320072][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.325121][ T7813] lwtunnel_output+0x27e/0x440 [ 173.329911][ T7813] rpl_output+0x31f/0x730 [ 173.334289][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.339059][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.344059][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.349522][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.354123][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.359064][ T7813] lwtunnel_output+0x27e/0x440 [ 173.363843][ T7813] rpl_output+0x31f/0x730 [ 173.368348][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.373134][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.378345][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.383917][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.389073][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.394106][ T7813] lwtunnel_output+0x27e/0x440 [ 173.398881][ T7813] rpl_output+0x31f/0x730 [ 173.403214][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.407715][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.412856][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.418597][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.423239][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.428355][ T7813] lwtunnel_output+0x27e/0x440 [ 173.433232][ T7813] rpl_output+0x31f/0x730 [ 173.437567][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.442091][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.447116][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.452757][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.457730][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.467170][ T7813] lwtunnel_output+0x27e/0x440 [ 173.474611][ T7813] rpl_output+0x31f/0x730 [ 173.479953][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.484657][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.489605][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.495123][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.499748][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.504784][ T7813] lwtunnel_output+0x27e/0x440 [ 173.509558][ T7813] rpl_output+0x31f/0x730 [ 173.513890][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.518393][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.523333][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.528711][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.533234][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.538211][ T7813] lwtunnel_output+0x27e/0x440 [ 173.543034][ T7813] rpl_output+0x31f/0x730 [ 173.547398][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.551923][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.556964][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.562720][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.567248][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.572231][ T7813] lwtunnel_output+0x27e/0x440 [ 173.577256][ T7813] rpl_output+0x31f/0x730 [ 173.581711][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.586357][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.591970][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.597555][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.602118][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.607330][ T7813] lwtunnel_output+0x27e/0x440 [ 173.612112][ T7813] rpl_output+0x31f/0x730 [ 173.616455][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.621046][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.626136][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.631569][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.636109][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.641145][ T7813] lwtunnel_output+0x27e/0x440 [ 173.645924][ T7813] rpl_output+0x31f/0x730 [ 173.650323][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.655099][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.660354][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.665952][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.670570][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.675678][ T7813] lwtunnel_output+0x27e/0x440 [ 173.680465][ T7813] rpl_output+0x31f/0x730 [ 173.685029][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.689565][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.694523][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.700075][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.704756][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.709914][ T7813] lwtunnel_output+0x27e/0x440 [ 173.714818][ T7813] rpl_output+0x31f/0x730 [ 173.719276][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.723971][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.728924][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.734483][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.739077][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.744022][ T7813] lwtunnel_output+0x27e/0x440 [ 173.748795][ T7813] rpl_output+0x31f/0x730 [ 173.753210][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.757720][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.762695][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.768072][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.772703][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.777988][ T7813] lwtunnel_output+0x27e/0x440 [ 173.782756][ T7813] rpl_output+0x31f/0x730 [ 173.787089][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.791603][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.796547][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.802014][ T7813] ? rpl_do_srh+0x9c1/0xe50 [ 173.806520][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.811991][ T7813] lwtunnel_output+0x27e/0x440 [ 173.816854][ T7813] rpl_output+0x31f/0x730 [ 173.821274][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.826566][ T7813] ? pskb_expand_head+0x363/0x1100 [ 173.831872][ T7813] ? read_lock_is_recursive+0x10/0x10 [ 173.838047][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.843109][ T7813] lwtunnel_output+0x27e/0x440 [ 173.847971][ T7813] rpl_output+0x31f/0x730 [ 173.852316][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.857433][ T7813] ? rpl_destroy_state+0x20/0x20 [ 173.862779][ T7813] lwtunnel_output+0x27e/0x440 [ 173.867803][ T7813] ip6_send_skb+0x1af/0x350 [ 173.872516][ T7813] rawv6_push_pending_frames+0x665/0x820 [ 173.879567][ T7813] ? rawv6_send_hdrinc+0x1650/0x1650 [ 173.884995][ T7813] ? raw6_getfrag+0x2c0/0x2c0 [ 173.889700][ T7813] ? rawv6_send_hdrinc+0x1650/0x1650 [ 173.895404][ T7813] rawv6_sendmsg+0x1298/0x1710 [ 173.900202][ T7813] ? __might_sleep+0xf0/0xf0 [ 173.906056][ T7813] ? compat_rawv6_ioctl+0x60/0x60 [ 173.911207][ T7813] ? aa_sk_perm+0x7dc/0x910 [ 173.916171][ T7813] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 173.922705][ T7813] ? sock_rps_record_flow+0x17/0x3b0 [ 173.928458][ T7813] ? inet_sendmsg+0x7a/0x2a0 [ 173.933359][ T7813] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 173.938754][ T7813] ? inet_send_prepare+0x250/0x250 [ 173.943985][ T7813] ____sys_sendmsg+0x5be/0x8f0 [ 173.948969][ T7813] ? __sys_sendmsg_sock+0x30/0x30 [ 173.954234][ T7813] ? rcu_is_watching+0x11/0xa0 [ 173.959144][ T7813] ? import_iovec+0x6f/0xa0 [ 173.963996][ T7813] ___sys_sendmsg+0x236/0x2e0 [ 173.968883][ T7813] ? __sys_sendmsg+0x290/0x290 [ 173.973956][ T7813] ? __might_fault+0xb3/0x110 [ 173.978846][ T7813] __sys_sendmmsg+0x2ba/0x500 [ 173.983854][ T7813] ? __ia32_sys_sendmsg+0x80/0x80 [ 173.988986][ T7813] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 173.995342][ T7813] ? lock_chain_count+0x20/0x20 [ 174.000826][ T7813] __x64_sys_sendmmsg+0x9c/0xb0 [ 174.005683][ T7813] do_syscall_64+0x4c/0xa0 [ 174.010100][ T7813] ? clear_bhb_loop+0x30/0x80 [ 174.014779][ T7813] ? clear_bhb_loop+0x30/0x80 [ 174.019459][ T7813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.025443][ T7813] RIP: 0033:0x7f5af84aa0d9 [ 174.030293][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.050172][ T7813] RSP: 002b:00007f5af6702028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 174.058607][ T7813] RAX: ffffffffffffffda RBX: 00007f5af8731fa0 RCX: 00007f5af84aa0d9 [ 174.067027][ T7813] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 174.075095][ T7813] RBP: 00007f5af8541024 R08: 0000000000000000 R09: 0000000000000000 [ 174.083339][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.091493][ T7813] R13: 00007f5af8732038 R14: 00007f5af8731fa0 R15: 00007ffd7591a8f8 [ 174.099756][ T7813] [ 174.166178][ T7781] (syz.2.1322,7781,0):ocfs2_initialize_super:2311 ERROR: status = -12 [ 174.175434][ T7781] (syz.2.1322,7781,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 174.258829][ T7813] syz.4.1338 (7813) used greatest stack depth: 6768 bytes left [ 174.277152][ T4735] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 174.637340][ T4735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.648988][ T4735] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.662163][ T4735] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 174.671426][ T4735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.681002][ T4735] usb 2-1: config 0 descriptor?? [ 174.722193][ T4735] usb 2-1: can't set config #0, error -71 [ 174.730426][ T4735] usb 2-1: USB disconnect, device number 12