last executing test programs: 2m2.265916863s ago: executing program 5 (id=5772): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) 2m1.209521993s ago: executing program 5 (id=5777): open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='mpol=prefer=']) 2m0.273409211s ago: executing program 5 (id=5783): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000280)) 1m59.4360727s ago: executing program 5 (id=5787): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f00000016c0)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {}, {@gid={'gid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {}, {@errors_continue}, {}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@keep_last_dots}, {@uid={'uid', 0x3d, 0xee01}}, {@gid}], [{@appraise}]}, 0x9, 0x1505, &(0x7f0000000180)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m57.705753717s ago: executing program 5 (id=5797): creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@none}, {@name={'name', 0x3d, 'user.incfs.metadata\x00'}}]}) 1m54.258025613s ago: executing program 5 (id=5822): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x32, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x28}}, 0x0) 1m53.531361768s ago: executing program 32 (id=5822): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x32, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x28}}, 0x0) 16.453263174s ago: executing program 6 (id=6297): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x110, 0x14, 0x0, &(0x7f0000000080)) 15.677978498s ago: executing program 6 (id=6302): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX9AofQX7VOf+lLocymU/AmlEGjfSyktoU3Shz60VZF81SSubMvEshLr84Hje8+9V/5+j4SOdO656AbQsU5FxFhEdEXE2YjoT7dn0hJr66V63IP7tyarJYlK5dqXSSTptvr/StLlkfRhvRHxr39E/Df5adzSyurcRKGQX0rrufL8Yq60snpudn5iJj+TXxgbGb44emn0wujQrrX18t8+e+WFt/5++f0/3vhk/Isz/6um1Zfue7wdzVhr8rj1pvfUnou67ohY2kmwZ1hX2p6edicCAEBTqt/xfx4Rv42Ih6+3OxsAAACgFSp/6Ytvk4gKAAAAsG9latfAJplsei1AX2Qy2ez6Nby/jMOZQrFU/sN0cXlhav1a2YHoyUzPFvJD6bXCA9GTVOvDtfVH9fMb6iMRcSwiXuo/VKtnJ4uFqXaf/AAAAIAOcWTD+P/r/vXxPwAAALDPDLQ7AQAAAKDljP8BAABg/9t0/J90720iAAAAQCv888qVaqnU7389dX1lea54/dxUvjSXnV+ezE4WlxazM8XiTO03++a3+3+FYnHxT7GwfDNXzpfKudLK6vh8cXmhPF67r/d43n2iAQAAYO8d+82dj5OIWPvzoVqpOpDua2KsPtba7IBWyuzs8KRVeQB7r6vdCQBt4wJf6Fzm44FtBvYvb6jv8LQBAADwLBj81VPN/5sPhOeYgTx0LvP/0LnM/0PnMv8PHe7g9of0brbjg13OBQAAaJm+Wkky2XQusC8ymWw24mjttgA9yfRsIT8UET+LiI/6ew5W68PtThoAAAAAAAAAAAAAAAAAAAAAAAAAnjOVShIVAAAAYF+LyHyepDfyH+w/3bfx/MCB5Jv+2jIibrxx7dWbE+Xy0nB1+1c/bi+/lm4/344zGAAAAMBG9XF6fRwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvpwf1bk/Wyl3Hv/TUiBhrF747e2rL33f6IOPwwie7HHpdERNcuxF+7HRHHG8VPqmnFQJrFxviZiDjU5vhHdiE+dLI71f5nrNH7LxOnasvG77/utDyte6c26/8y9f6v1s816v+ONhnjxN13cpvGvx1xortx/1OPnzxl//uff6+ubrav8mbEYMPPn+SJWLny/GKutLJ6bnZ+YiY/k18YGRm+OHpp9MLoUG56tpBP/zaM8eKv3/t+q/Yf3iT+wDbtP91k+7+7e/P+L7aIf+Z3jV//41vErz73v08/B6r7B+vra+vrjzv59ocnt2r/1Cbt3+71P9Nk+89e/f+nTR4KAOyB0srq3EShkF+yYsXK/lu5mr7Rd/zwNndMAADArnv0pb/dmQAAAAAAAAAAAAAAAAAAAEDnavmPkB188pcFetvXVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf0QAAD//9sy0wA=") lchown(&(0x7f0000000140)='./file1\x00', 0xee00, 0x0) 14.088886107s ago: executing program 6 (id=6314): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000003c0), 0x1, 0x4e3, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000100)='./bus\x00', 0x1) 12.334041552s ago: executing program 6 (id=6324): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d6370313235302c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=000000005,\x00'/38], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) 11.029236246s ago: executing program 6 (id=6332): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x11, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x0, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) 9.189927754s ago: executing program 6 (id=6341): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x2c, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) 7.775291279s ago: executing program 33 (id=6341): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x2c, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) 6.671156923s ago: executing program 0 (id=6354): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0x1}}, {@barrier={'barrier', 0x3d, 0x1}}]}, 0x1, 0x4438, &(0x7f0000004480)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4.362580363s ago: executing program 0 (id=6364): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67c59d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58d567754734be31d750351dc002eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a37cae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) 4.282230117s ago: executing program 0 (id=6365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x520, 0x380, 0x1c0, 0x0, 0x1c0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private, 0x21}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2a}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x520}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local, 0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 4.053631842s ago: executing program 0 (id=6367): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 3.149693579s ago: executing program 2 (id=6373): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0137014010ff"}) 2.735039062s ago: executing program 4 (id=6376): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000ac8a000007", @ANYRES32, @ANYBLOB="01000000ff"], 0x38}}, 0x0) 2.3384486s ago: executing program 0 (id=6379): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x110, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x5, 0x7218, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, 0xfffffffe}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x5, 0x300, 0x175, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}}, 0x0) 2.136885899s ago: executing program 2 (id=6382): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="01000000", 0x4}], 0x1) 2.129118189s ago: executing program 1 (id=6383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074000040031080006400000"], 0xe4}}, 0x0) 2.092180578s ago: executing program 4 (id=6384): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436b784000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c08100000200000024e0000", 0x58}], 0x1) 2.038546381s ago: executing program 2 (id=6385): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000000000006200000000000100200000000000000084"], 0x38}, 0x0) 1.982354523s ago: executing program 2 (id=6386): socket$kcm(0x29, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000052c0)={{0x12, 0x1, 0x0, 0xf7, 0x6f, 0xf7, 0x10, 0x7ab, 0xfc01, 0x28e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x70, 0xdf}}]}}]}}, 0x0) 1.971453082s ago: executing program 4 (id=6387): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 1.929482941s ago: executing program 0 (id=6388): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000440)={0x3, 0xa, 0x0, 0x0, 0x8, 0x7fffffff, 0xffffffffffffffff, 0x0, 0xdd}) 1.47654412s ago: executing program 4 (id=6393): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000000180)={0x18, 0x4}, 0x18) 1.409285198s ago: executing program 1 (id=6394): symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x89) 1.123949909s ago: executing program 3 (id=6395): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000340)) 1.084563273s ago: executing program 4 (id=6396): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) 1.034091124s ago: executing program 1 (id=6397): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}}}}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 922.614729ms ago: executing program 3 (id=6398): r0 = landlock_create_ruleset(&(0x7f0000000100)={0x8007, 0x1, 0x2}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000200)={0x1, 0xfffc000000000000}, 0x0) 811.841569ms ago: executing program 3 (id=6399): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x1}) 572.170326ms ago: executing program 3 (id=6400): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x1, {0x9a, 0xeec, 0x0, 0x5}}) 445.215759ms ago: executing program 4 (id=6401): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1}}) 418.401745ms ago: executing program 2 (id=6402): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000000240)=""/110, 0x6e}], 0x2) 332.883623ms ago: executing program 1 (id=6403): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x13, 0x0, &(0x7f0000003240)) 214.089845ms ago: executing program 3 (id=6404): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x5, [0x7, 0x5, 0x7ff, 0x9, 0x8, 0x0, 0x1000, 0x85, 0xfe01, 0x0, 0x1, 0x10, 0x4, 0x4, 0x0, 0x1, 0x1, 0x9, 0x5, 0xc0, 0x9, 0x3, 0x40, 0x9, 0x7, 0xd, 0x3, 0x800, 0x5, 0x7fff, 0x9, 0x2, 0x1, 0x1, 0x91, 0xc, 0x120b, 0x4, 0x4, 0x4, 0xf3, 0x401, 0x8, 0x40, 0x9, 0x0, 0x7, 0xfffb], 0x3}) 212.868327ms ago: executing program 2 (id=6405): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x70bd2c, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004002}, 0x40004) 179.321496ms ago: executing program 1 (id=6406): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0xb, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 44.630388ms ago: executing program 1 (id=6407): ioperm(0x7, 0x341a, 0x3) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) 0s ago: executing program 3 (id=6408): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x19) kernel console output (not intermixed with test programs): 5: detected capacity change from 0 to 64 [ 553.744886][T17053] loop3: detected capacity change from 0 to 64 [ 554.137404][T17068] binder: 17067:17068 ioctl c0306201 200002c0 returned -22 [ 554.270706][T17072] loop3: detected capacity change from 0 to 64 [ 554.328097][T17079] loop5: detected capacity change from 0 to 256 [ 554.471222][T17083] ipvlan0: entered allmulticast mode [ 554.503662][T17083] veth0_vlan: entered allmulticast mode [ 554.594229][T17079] FAT-fs (loop5): Directory bread(block 64) failed [ 554.640520][T17079] FAT-fs (loop5): Directory bread(block 65) failed [ 554.651676][T17079] FAT-fs (loop5): Directory bread(block 66) failed [ 554.687931][T17079] FAT-fs (loop5): Directory bread(block 67) failed [ 554.714124][T17079] FAT-fs (loop5): Directory bread(block 68) failed [ 554.736376][T17079] FAT-fs (loop5): Directory bread(block 69) failed [ 554.751799][T17079] FAT-fs (loop5): Directory bread(block 70) failed [ 554.796361][T17079] FAT-fs (loop5): Directory bread(block 71) failed [ 554.830684][T17079] FAT-fs (loop5): Directory bread(block 72) failed [ 554.837264][T17079] FAT-fs (loop5): Directory bread(block 73) failed [ 555.360552][T17116] program syz.2.4973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.410733][T17119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4972'. [ 555.434526][T17121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4976'. [ 555.469641][T17123] netlink: 'syz.5.4975': attribute type 1 has an invalid length. [ 555.539728][T17123] netlink: 'syz.5.4975': attribute type 2 has an invalid length. [ 555.561552][T17123] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4975'. [ 555.939076][T17146] loop0: detected capacity change from 0 to 1024 [ 556.121986][T17146] hfsplus: bad catalog entry type [ 556.378998][ T62] hfsplus: b-tree write err: -5, ino 4 [ 556.407440][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4991'. [ 556.417260][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4991'. [ 556.519087][T17167] IPv6: sit1: Disabled Multicast RS [ 556.790807][ T6319] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 556.847166][T17181] ipvlan0: entered allmulticast mode [ 556.862969][T17181] veth0_vlan: entered allmulticast mode [ 556.970526][ T6319] usb 6-1: Using ep0 maxpacket: 8 [ 556.982354][ T6319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.000485][ T6319] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 557.054298][ T6319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 557.085797][ T6319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 557.127543][ T6319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 32, changing to 9 [ 557.153297][ T6319] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.175980][ T6319] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 557.197085][ T6319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.206783][ T6319] usb 6-1: Product: syz [ 557.212052][ T6319] usb 6-1: Manufacturer: syz [ 557.216861][ T6319] usb 6-1: SerialNumber: syz [ 557.237882][ T6319] usb 6-1: config 0 descriptor?? [ 557.246570][T17168] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 557.628134][T17202] loop0: detected capacity change from 0 to 2048 [ 557.670687][T17206] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 557.722425][T17202] syz.0.5008: attempt to access beyond end of device [ 557.722425][T17202] loop0: rw=0, sector=19791209300040, nr_sectors = 2 limit=2048 [ 557.757107][T17202] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 557.940639][ T6274] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 558.140792][ T6274] usb 2-1: Using ep0 maxpacket: 8 [ 558.160868][ T6274] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 558.179123][ T6274] usb 2-1: config 0 has no interface number 0 [ 558.200621][ T6274] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.239494][ T6274] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 558.261958][ T6274] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 558.281556][ T6274] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 558.327330][ T6274] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.351756][ T6274] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 558.370534][ T6274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.378643][ T6274] usb 2-1: Product: syz [ 558.393588][ T6274] usb 2-1: Manufacturer: syz [ 558.398286][ T6274] usb 2-1: SerialNumber: syz [ 558.460675][ T6274] usb 2-1: config 0 descriptor?? [ 558.606278][T17237] loop2: detected capacity change from 0 to 64 [ 558.778970][ T6274] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 558.966626][ T6274] usb 2-1: USB disconnect, device number 96 [ 559.359122][T17263] loop5: detected capacity change from 0 to 256 [ 559.488488][T17263] FAT-fs (loop5): Directory bread(block 64) failed [ 559.495461][T17263] FAT-fs (loop5): Directory bread(block 65) failed [ 559.505662][T17263] FAT-fs (loop5): Directory bread(block 66) failed [ 559.570653][T17263] FAT-fs (loop5): Directory bread(block 67) failed [ 559.586803][T17263] FAT-fs (loop5): Directory bread(block 68) failed [ 559.595277][T17263] FAT-fs (loop5): Directory bread(block 69) failed [ 559.601891][ T6319] rc_core: IR keymap rc-snapstream-firefly not found [ 559.608626][ T6319] Registered IR keymap rc-empty [ 559.620838][ T6319] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 559.630741][ T6319] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input59 [ 559.643826][T17263] FAT-fs (loop5): Directory bread(block 70) failed [ 559.650601][T17263] FAT-fs (loop5): Directory bread(block 71) failed [ 559.658282][T17263] FAT-fs (loop5): Directory bread(block 72) failed [ 559.677198][T17263] FAT-fs (loop5): Directory bread(block 73) failed [ 559.686431][ T6319] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input60 [ 559.718382][ T6319] usb 6-1: USB disconnect, device number 89 [ 559.724476][ C1] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 559.906178][T17272] loop4: detected capacity change from 0 to 4096 [ 559.988488][T17272] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 559.988488][T17272] [ 560.005990][ T29] audit: type=1800 audit(1734567564.537:37): pid=17263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5041" name="file3" dev="loop5" ino=1048659 res=0 errno=0 [ 560.727514][T17307] netlink: 'syz.4.5058': attribute type 4 has an invalid length. [ 560.764861][T17307] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5058'. [ 560.820986][T17264] loop0: detected capacity change from 0 to 32768 [ 560.891586][T17307] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 561.004668][T17293] loop5: detected capacity change from 0 to 32768 [ 561.066689][T17293] JBD2: Ignoring recovery information on journal [ 561.114524][T17293] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 561.210926][T17314] netlink: 'syz.2.5061': attribute type 1 has an invalid length. [ 561.278134][T17321] loop1: detected capacity change from 0 to 512 [ 561.313104][ T6213] ocfs2: Unmounting device (7,5) on (node local) [ 561.342890][T17321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.472103][T17321] ext4 filesystem being mounted at /800/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.557656][T17321] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 561.765323][T17337] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 561.785214][T17337] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 561.812588][T17336] ieee802154 phy0 wpan0: encryption failed: -90 [ 562.069529][T17348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5077'. [ 562.120761][T17348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5077'. [ 562.153084][ T6224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.169213][T17348] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5077'. [ 562.210810][T17354] netlink: 'syz.4.5080': attribute type 1 has an invalid length. [ 562.710531][ T6319] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 562.864441][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.870987][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.922942][ T6319] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 562.931034][T17384] ieee802154 phy0 wpan0: encryption failed: -90 [ 562.951692][ T6319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.981447][ T6319] usb 1-1: config 0 has no interface number 0 [ 562.987563][ T6319] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 563.020580][T17386] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 563.038805][T17386] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 563.047551][ T6319] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 495, setting to 64 [ 563.087816][ T6319] usb 1-1: config 0 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 563.136571][ T6319] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 563.145838][ T6319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.154374][ T6319] usb 1-1: Product: syz [ 563.158559][ T6319] usb 1-1: Manufacturer: syz [ 563.172500][ T6319] usb 1-1: SerialNumber: syz [ 563.181738][ T6319] usb 1-1: config 0 descriptor?? [ 563.187997][T17360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 563.196810][T17360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 563.737816][ T6319] ath6kl: Failed to submit usb control message: -71 [ 563.751319][ T6319] ath6kl: unable to send the bmi data to the device: -71 [ 563.778685][ T6319] ath6kl: Unable to send get target info: -71 [ 563.801422][ T6319] ath6kl: Failed to init ath6kl core: -71 [ 563.831771][T17388] loop3: detected capacity change from 0 to 32768 [ 563.839908][ T6319] ath6kl_usb 1-1:0.109: probe with driver ath6kl_usb failed with error -71 [ 563.858227][T17388] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5092 (17388) [ 563.912394][ T6319] usb 1-1: USB disconnect, device number 99 [ 563.926242][T17388] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 563.981951][T17388] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 563.988089][T17404] loop1: detected capacity change from 0 to 2048 [ 564.034334][T17388] BTRFS info (device loop3): using free-space-tree [ 564.047447][T17404] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 564.083917][T17404] NILFS (loop1): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 564.262942][T17393] loop2: detected capacity change from 0 to 40427 [ 564.270752][ T6274] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 564.292290][T17393] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 564.294892][T17404] kAFS: No cell specified [ 564.300925][T17393] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 564.440478][ T6274] usb 6-1: Using ep0 maxpacket: 8 [ 564.447239][ T6274] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 564.457213][ T6274] usb 6-1: config 0 has no interface number 0 [ 564.470439][ T6274] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 564.484579][ T6274] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 564.554957][ T6274] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 564.611487][ T6274] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 564.664838][ T6274] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.750281][T17435] loop1: detected capacity change from 0 to 512 [ 564.790766][T17435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 564.828963][ T6274] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 564.852736][ T6274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.867837][ T6226] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 564.880049][T17435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 564.895209][ T6274] usb 6-1: Product: syz [ 564.899396][ T6274] usb 6-1: Manufacturer: syz [ 564.911116][T17441] ieee802154 phy0 wpan0: encryption failed: -90 [ 564.931152][T17435] ext4 filesystem being mounted at /807/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.953937][ T6274] usb 6-1: SerialNumber: syz [ 564.972056][ T6274] usb 6-1: config 0 descriptor?? [ 565.208602][ T6274] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 565.272042][ T6224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 565.432071][ T6274] usb 6-1: USB disconnect, device number 90 [ 566.150614][T17476] kernel profiling enabled (shift: 63) [ 566.212737][T17476] profiling shift: 63 too large [ 566.429703][T17489] loop0: detected capacity change from 0 to 256 [ 566.461937][T17445] loop2: detected capacity change from 0 to 32768 [ 566.705276][T17484] loop5: detected capacity change from 0 to 32768 [ 566.724475][T17484] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5122 (17484) [ 566.760714][T17484] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 566.788222][T17445] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 566.828662][T17484] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 566.880770][T17484] BTRFS info (device loop5): using free-space-tree [ 566.891325][T17445] OCFS2: ERROR (device loop2): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 566.920510][T17445] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 566.930821][T17445] OCFS2: File system is now read-only. [ 566.936379][T17445] (syz.2.5121,17445,1):ocfs2_reserve_suballoc_bits:854 ERROR: status = -30 [ 566.945438][T17445] (syz.2.5121,17445,1):ocfs2_reserve_new_inode:1095 ERROR: status = -30 [ 566.953959][T17445] (syz.2.5121,17445,1):ocfs2_reserve_new_inode:1118 ERROR: status = -30 [ 566.963268][T17445] (syz.2.5121,17445,1):ocfs2_mknod:306 ERROR: status = -30 [ 566.971100][T17445] (syz.2.5121,17445,1):ocfs2_mknod:502 ERROR: status = -30 [ 566.978439][T17445] (syz.2.5121,17445,1):ocfs2_create:676 ERROR: status = -30 [ 567.232406][T17479] loop3: detected capacity change from 0 to 40427 [ 567.283979][ T6219] ocfs2: Unmounting device (7,2) on (node local) [ 567.519623][T17479] F2FS-fs (loop3): Found nat_bits in checkpoint [ 567.801932][T17479] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 567.920747][T17528] loop1: detected capacity change from 0 to 32768 [ 568.219866][ T6213] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 568.366427][T17546] loop2: detected capacity change from 0 to 4096 [ 568.554924][T17557] loop0: detected capacity change from 0 to 512 [ 568.609276][T17559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.648477][T17557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.675555][T17563] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 568.691600][T17557] ext4 filesystem being mounted at /783/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.713391][T17546] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 568.813166][T17546] Remounting filesystem read-only [ 568.833727][T17557] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 568.867752][T17565] loop4: detected capacity change from 0 to 2048 [ 568.936741][T17565] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 569.000635][T17565] NILFS (loop4): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 569.044692][T17565] kAFS: No cell specified [ 569.347319][ T6212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.572681][T17594] loop1: detected capacity change from 0 to 1024 [ 569.749103][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5160'. [ 569.770646][T17601] netlink: 'syz.2.5160': attribute type 2 has an invalid length. [ 569.908904][T17610] loop3: detected capacity change from 0 to 256 [ 570.666667][ T29] audit: type=1326 audit(1734567575.197:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb336585d29 code=0x7ffc0000 [ 570.700619][T17643] netlink: 'syz.4.5179': attribute type 29 has an invalid length. [ 570.797245][T17648] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 570.804430][ T29] audit: type=1326 audit(1734567575.297:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb336585d29 code=0x7ffc0000 [ 570.855675][ T29] audit: type=1326 audit(1734567575.327:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fb336585d29 code=0x7ffc0000 [ 570.928240][ T29] audit: type=1326 audit(1734567575.327:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb336585d29 code=0x7ffc0000 [ 570.981300][ T29] audit: type=1326 audit(1734567575.327:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17640 comm="syz.0.5176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb336585d29 code=0x7ffc0000 [ 571.470294][T17671] loop5: detected capacity change from 0 to 256 [ 571.569305][T17679] netlink: 'syz.4.5197': attribute type 1 has an invalid length. [ 571.575199][T17671] FAT-fs (loop5): Directory bread(block 64) failed [ 571.586929][T17671] FAT-fs (loop5): Directory bread(block 65) failed [ 571.593993][T17671] FAT-fs (loop5): Directory bread(block 66) failed [ 571.601131][T17671] FAT-fs (loop5): Directory bread(block 67) failed [ 571.659362][T17671] FAT-fs (loop5): Directory bread(block 68) failed [ 571.666245][T17671] FAT-fs (loop5): Directory bread(block 69) failed [ 571.710632][T17671] FAT-fs (loop5): Directory bread(block 70) failed [ 571.720467][T17671] FAT-fs (loop5): Directory bread(block 71) failed [ 571.734177][T17671] FAT-fs (loop5): Directory bread(block 72) failed [ 571.744109][T17685] netlink: 'syz.1.5199': attribute type 29 has an invalid length. [ 571.752126][T17671] FAT-fs (loop5): Directory bread(block 73) failed [ 572.187715][T17701] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 572.257131][T17693] loop3: detected capacity change from 0 to 32768 [ 572.501826][T17693] JBD2: Ignoring recovery information on journal [ 572.691904][T17693] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 572.753171][T17721] tmpfs: Bad value for 'mpol' [ 572.843107][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5218'. [ 573.009371][ T6226] ocfs2: Unmounting device (7,3) on (node local) [ 573.021248][T17732] loop4: detected capacity change from 0 to 256 [ 573.040045][T17732] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 573.412340][T17740] loop2: detected capacity change from 0 to 512 [ 573.431787][T17740] EXT4-fs: Ignoring removed mblk_io_submit option [ 573.464982][T17740] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 573.536331][T17746] netlink: 'syz.4.5229': attribute type 32 has an invalid length. [ 573.537777][T17740] EXT4-fs (loop2): 1 truncate cleaned up [ 573.595301][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5229'. [ 573.669603][T17740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.827435][T17746] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 574.410518][ T6274] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 574.511089][ T6219] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.663912][ T6274] usb 4-1: Using ep0 maxpacket: 32 [ 574.729939][T17789] loop4: detected capacity change from 0 to 256 [ 574.828882][T17796] loop0: detected capacity change from 0 to 64 [ 574.835742][ T6274] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 574.844332][ T6274] usb 4-1: config 0 has no interface number 0 [ 574.912486][ T6274] usb 4-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=5e.55 [ 574.923884][ T6274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.967775][ T6274] usb 4-1: Product: syz [ 574.977922][ T6274] usb 4-1: Manufacturer: syz [ 574.995506][ T6274] usb 4-1: SerialNumber: syz [ 575.012277][ T6274] usb 4-1: config 0 descriptor?? [ 575.021968][ T6274] gspca_main: spca505-2.14.0 probing 041e:401d [ 575.094188][T17802] loop2: detected capacity change from 0 to 512 [ 575.155947][T17789] FAT-fs (loop4): Directory bread(block 64) failed [ 575.162749][T17789] FAT-fs (loop4): Directory bread(block 65) failed [ 575.169422][T17789] FAT-fs (loop4): Directory bread(block 66) failed [ 575.177044][T17789] FAT-fs (loop4): Directory bread(block 67) failed [ 575.186623][T17789] FAT-fs (loop4): Directory bread(block 68) failed [ 575.193638][T17789] FAT-fs (loop4): Directory bread(block 69) failed [ 575.201011][T17789] FAT-fs (loop4): Directory bread(block 70) failed [ 575.218090][T17789] FAT-fs (loop4): Directory bread(block 71) failed [ 575.235039][T17802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.244472][T17809] loop0: detected capacity change from 0 to 1024 [ 575.257282][T17809] EXT4-fs: Ignoring removed orlov option [ 575.263091][T17809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 575.283589][T17789] FAT-fs (loop4): Directory bread(block 72) failed [ 575.290262][T17789] FAT-fs (loop4): Directory bread(block 73) failed [ 575.296957][T17802] ext4 filesystem being mounted at /814/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.324804][T17809] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 575.341045][T17809] System zones: 0-1, 3-36 [ 575.359003][T17809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.480174][ T6219] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.486946][ T6274] gspca_spca505: reg write: error -71 [ 575.497900][ T6274] spca505 4-1:0.55: probe with driver spca505 failed with error -5 [ 575.677825][ T6274] usb 4-1: USB disconnect, device number 88 [ 575.842665][ T6212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.850619][T17826] loop1: detected capacity change from 0 to 256 [ 575.945896][T17826] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 575.979935][T17832] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5263'. [ 576.108162][T17834] loop0: detected capacity change from 0 to 64 [ 576.206504][T17834] syz.0.5277: attempt to access beyond end of device [ 576.206504][T17834] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 576.619772][T17854] loop3: detected capacity change from 0 to 1024 [ 576.651257][T17854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.710550][T17854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 576.748352][T17857] loop4: detected capacity change from 0 to 1024 [ 576.757993][T17858] loop1: detected capacity change from 0 to 256 [ 576.801314][T17854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.852061][T17867] netlink: 'syz.0.5284': attribute type 5 has an invalid length. [ 576.860662][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5284'. [ 576.999641][T17858] FAT-fs (loop1): Directory bread(block 64) failed [ 577.006293][T17858] FAT-fs (loop1): Directory bread(block 65) failed [ 577.012996][T17858] FAT-fs (loop1): Directory bread(block 66) failed [ 577.019793][T17858] FAT-fs (loop1): Directory bread(block 67) failed [ 577.026661][T17858] FAT-fs (loop1): Directory bread(block 68) failed [ 577.039555][T17858] FAT-fs (loop1): Directory bread(block 69) failed [ 577.052832][T17858] FAT-fs (loop1): Directory bread(block 70) failed [ 577.059413][T17858] FAT-fs (loop1): Directory bread(block 71) failed [ 577.080970][T17858] FAT-fs (loop1): Directory bread(block 72) failed [ 577.087530][T17858] FAT-fs (loop1): Directory bread(block 73) failed [ 577.098257][ T6226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.150847][T17873] loop5: detected capacity change from 0 to 4096 [ 577.326896][T17873] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 577.350570][T17875] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 577.385079][T17873] Remounting filesystem read-only [ 577.420713][T17882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5289'. [ 577.760983][T17892] bridge1: entered promiscuous mode [ 578.093927][T17907] qrtr: Invalid version 4 [ 578.129467][T17909] loop2: detected capacity change from 0 to 1024 [ 578.163682][T17909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 578.197085][T17909] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 578.270901][T17917] loop0: detected capacity change from 0 to 256 [ 578.327602][T17909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.375475][T17917] FAT-fs (loop0): Directory bread(block 64) failed [ 578.412839][T17917] FAT-fs (loop0): Directory bread(block 65) failed [ 578.419465][T17917] FAT-fs (loop0): Directory bread(block 66) failed [ 578.475531][T17917] FAT-fs (loop0): Directory bread(block 67) failed [ 578.518015][T17917] FAT-fs (loop0): Directory bread(block 68) failed [ 578.542871][T17917] FAT-fs (loop0): Directory bread(block 69) failed [ 578.549478][T17917] FAT-fs (loop0): Directory bread(block 70) failed [ 578.577448][T17931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.591320][T17917] FAT-fs (loop0): Directory bread(block 71) failed [ 578.610117][T17917] FAT-fs (loop0): Directory bread(block 72) failed [ 578.625441][T17917] FAT-fs (loop0): Directory bread(block 73) failed [ 578.646927][ T6219] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.483044][T17968] loop2: detected capacity change from 0 to 64 [ 580.132650][T17988] loop1: detected capacity change from 0 to 4096 [ 580.189252][T17988] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 580.231036][T17988] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 580.330565][T17996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5337'. [ 580.391166][T17999] loop0: detected capacity change from 0 to 4096 [ 580.550917][T18010] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 580.604293][T18007] loop5: detected capacity change from 0 to 512 [ 580.646505][T18007] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 580.721330][T17999] NILFS (loop0): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 580.832331][T18021] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5342'. [ 581.139750][T18035] netlink: 'syz.1.5348': attribute type 5 has an invalid length. [ 581.147707][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5348'. [ 581.230013][T18040] loop4: detected capacity change from 0 to 256 [ 581.360510][T18007] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.5341: corrupted in-inode xattr: e_value out of bounds [ 581.408981][T18007] EXT4-fs (loop5): Remounting filesystem read-only [ 581.457055][T18040] FAT-fs (loop4): Directory bread(block 64) failed [ 581.501495][T18040] FAT-fs (loop4): Directory bread(block 65) failed [ 581.508146][T18040] FAT-fs (loop4): Directory bread(block 66) failed [ 581.541517][T18007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.590536][T18040] FAT-fs (loop4): Directory bread(block 67) failed [ 581.597177][T18040] FAT-fs (loop4): Directory bread(block 68) failed [ 581.640553][T18040] FAT-fs (loop4): Directory bread(block 69) failed [ 581.647299][T18040] FAT-fs (loop4): Directory bread(block 70) failed [ 581.692623][T18040] FAT-fs (loop4): Directory bread(block 71) failed [ 581.703462][T18058] loop3: detected capacity change from 0 to 64 [ 581.710489][T18055] qrtr: Invalid version 4 [ 581.726215][T18040] FAT-fs (loop4): Directory bread(block 72) failed [ 581.769899][T18040] FAT-fs (loop4): Directory bread(block 73) failed [ 581.792084][ T6213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.928462][ T29] audit: type=1800 audit(1734567586.457:43): pid=18040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5349" name="file3" dev="loop4" ino=1048665 res=0 errno=0 [ 582.068125][T18069] qrtr: Invalid version 4 [ 582.074649][T18070] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5361'. [ 582.134222][T18074] loop2: detected capacity change from 0 to 256 [ 582.370823][T18074] FAT-fs (loop2): Directory bread(block 64) failed [ 582.390485][T18074] FAT-fs (loop2): Directory bread(block 65) failed [ 582.426524][T18074] FAT-fs (loop2): Directory bread(block 66) failed [ 582.455067][T18074] FAT-fs (loop2): Directory bread(block 67) failed [ 582.495713][T18074] FAT-fs (loop2): Directory bread(block 68) failed [ 582.545011][T18074] FAT-fs (loop2): Directory bread(block 69) failed [ 582.580710][T18074] FAT-fs (loop2): Directory bread(block 70) failed [ 582.622576][T18074] FAT-fs (loop2): Directory bread(block 71) failed [ 582.630654][T18074] FAT-fs (loop2): Directory bread(block 72) failed [ 582.661787][T18074] FAT-fs (loop2): Directory bread(block 73) failed [ 582.771406][T18097] loop3: detected capacity change from 0 to 512 [ 582.841894][T18097] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 582.862745][T18099] loop0: detected capacity change from 0 to 64 [ 582.908989][T18097] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.5374: corrupted in-inode xattr: e_value out of bounds [ 582.972857][T18097] EXT4-fs (loop3): Remounting filesystem read-only [ 582.979148][ T29] audit: type=1326 audit(1734567587.507:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18102 comm="syz.4.5375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd278585d29 code=0x0 [ 582.981910][T18097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.001349][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 583.243779][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 583.276341][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 583.300479][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 583.355631][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 583.391419][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 583.440832][ T6226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.460605][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 583.470293][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 583.553585][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 583.598697][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 583.669380][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 583.689012][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.727520][ T9] usb 2-1: Product: syz [ 583.741285][ T9] usb 2-1: Manufacturer: syz [ 583.800611][ T9] usb 2-1: SerialNumber: syz [ 583.811606][ T9] usb 2-1: config 0 descriptor?? [ 583.821306][T18094] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 583.925883][T18139] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5384'. [ 584.071918][ T9] cxacru 2-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 584.099994][ T9] usb 2-1: USB disconnect, device number 97 [ 584.208959][T18148] netlink: 'syz.0.5401': attribute type 1 has an invalid length. [ 584.256893][T18148] netlink: 'syz.0.5401': attribute type 2 has an invalid length. [ 584.302207][T18148] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5401'. [ 584.507286][T18155] program syz.4.5392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.655178][T18162] loop2: detected capacity change from 0 to 512 [ 584.795943][T18129] loop3: detected capacity change from 0 to 32768 [ 584.869463][T18129] btrfs: Deprecated parameter 'usebackuproot' [ 584.899491][T18129] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 584.973501][T18129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5381 (18129) [ 585.055084][T18129] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 585.142087][T18129] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 585.155868][T18162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.173862][T18162] ext4 filesystem being mounted at /841/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.186380][T18129] BTRFS info (device loop3): disk space caching is enabled [ 585.208488][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5400'. [ 585.252863][T18129] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 585.267508][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5400'. [ 585.358065][ T6219] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.500707][ T6175] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 585.562161][T18206] binder: 18205:18206 ioctl c0306201 200002c0 returned -22 [ 585.621775][T18213] netlink: 'syz.4.5408': attribute type 1 has an invalid length. [ 585.645844][T18213] netlink: 'syz.4.5408': attribute type 2 has an invalid length. [ 585.670657][T18213] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5408'. [ 585.705815][T18129] BTRFS error (device loop3 state M): cannot disable free-space-tree [ 585.714409][ T6175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 585.743254][ T6175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.780595][ T6175] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 585.810508][ T6175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.825290][ T6175] usb 1-1: config 0 descriptor?? [ 585.852272][ T6175] hub 1-1:0.0: USB hub found [ 586.021021][ T6226] BTRFS info (device loop3 state M): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 586.070095][ T6175] hub 1-1:0.0: 1 port detected [ 586.274780][ T6175] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 586.302753][ T6175] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 586.361143][T18226] "syz.4.5413" (18226) uses obsolete ecb(arc4) skcipher [ 586.367092][ T6175] usbhid 1-1:0.0: can't add hid device: -71 [ 586.390591][ T6175] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 586.482987][ T6175] usb 1-1: USB disconnect, device number 100 [ 586.721034][T18245] loop4: detected capacity change from 0 to 128 [ 586.781139][T18245] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 586.842873][T18245] ext4 filesystem being mounted at /848/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 587.001673][T18253] loop2: detected capacity change from 0 to 4096 [ 587.032476][T18253] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 587.156203][T18253] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 587.216777][ T6227] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 587.992685][T18267] loop5: detected capacity change from 0 to 40427 [ 588.011813][T18267] F2FS-fs (loop5): Invalid log blocks per segment (4278190089) [ 588.019397][T18267] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 588.085006][T18267] F2FS-fs (loop5): invalid crc value [ 588.101761][T18267] F2FS-fs (loop5): Found nat_bits in checkpoint [ 588.185400][T18267] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 588.194642][T18267] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 588.226475][T18267] F2FS-fs (loop5): Corrupted max_depth of 3: 769 [ 588.234343][T18267] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 589.198610][T18327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5429'. [ 589.310754][T18334] loop1: detected capacity change from 0 to 512 [ 589.317747][T18334] EXT4-fs: Ignoring removed i_version option [ 589.345872][T18337] "syz.5.5431" (18337) uses obsolete ecb(arc4) skcipher [ 589.388322][T18334] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 589.546886][T18343] netlink: 'syz.0.5437': attribute type 21 has an invalid length. [ 589.554863][T18343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5437'. [ 589.730485][T18334] EXT4-fs (loop1): 1 truncate cleaned up [ 589.737147][T18334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.944348][T18362] loop2: detected capacity change from 0 to 64 [ 589.986126][T18358] loop5: detected capacity change from 0 to 4096 [ 590.176776][ T6224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.196653][T18374] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 590.267499][T18358] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 590.696768][T18389] loop4: detected capacity change from 0 to 2048 [ 590.876779][T18404] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 590.943599][T18410] netlink: 'syz.3.5458': attribute type 11 has an invalid length. [ 591.246446][T18408] loop0: detected capacity change from 0 to 4096 [ 591.308858][T18408] ntfs3(loop0): ino=3, Correct links count -> 2. [ 591.397907][T18425] loop4: detected capacity change from 0 to 1024 [ 591.500044][T18428] netlink: 'syz.1.5470': attribute type 21 has an invalid length. [ 591.560661][T18428] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5470'. [ 591.586140][T18425] hfsplus: bad catalog entry type [ 591.754914][ T1091] hfsplus: b-tree write err: -5, ino 4 [ 592.320641][T18462] netlink: 'syz.2.5485': attribute type 2 has an invalid length. [ 592.374746][T18462] netlink: 'syz.2.5485': attribute type 11 has an invalid length. [ 592.416434][T18464] loop3: detected capacity change from 0 to 1024 [ 592.440461][T18462] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5485'. [ 592.475786][T18464] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 592.686482][T18464] EXT4-fs error (device loop3): ext4_map_blocks:705: inode #3: block 2: comm syz.3.5486: lblock 2 mapped to illegal pblock 2 (length 1) [ 592.769373][T18464] Quota error (device loop3): write_blk: dquota write failed [ 592.776880][T18464] Quota error (device loop3): find_free_dqentry: Can't write quota data block 2 [ 592.800527][T18464] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 592.812051][T18464] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.5486: Failed to acquire dquot type 0 [ 592.859599][T18487] loop5: detected capacity change from 0 to 2048 [ 592.866963][T18464] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.5486: lblock 2 mapped to illegal pblock 2 (length 1) [ 592.895411][T18485] xfrm0 speed is unknown, defaulting to 1000 [ 592.914459][T18485] xfrm0 speed is unknown, defaulting to 1000 [ 592.924206][T18464] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 592.952531][T18464] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.5486: Failed to acquire dquot type 0 [ 592.976088][T18485] xfrm0 speed is unknown, defaulting to 1000 [ 593.022592][T18464] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.5486: Freeing blocks not in datazone - block = 0, count = 4096 [ 593.041292][T18485] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 593.085614][T18495] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 593.133729][T18464] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.5486: lblock 2 mapped to illegal pblock 2 (length 1) [ 593.153110][T18485] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 593.191374][T18464] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 593.270628][T18464] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.5486: Failed to acquire dquot type 0 [ 593.286358][T18485] xfrm0 speed is unknown, defaulting to 1000 [ 593.295453][T18485] xfrm0 speed is unknown, defaulting to 1000 [ 593.318766][T18485] xfrm0 speed is unknown, defaulting to 1000 [ 593.328424][T18485] xfrm0 speed is unknown, defaulting to 1000 [ 593.331963][T18464] EXT4-fs (loop3): 1 orphan inode deleted [ 593.336163][T18485] xfrm0 speed is unknown, defaulting to 1000 [ 593.344502][T18464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.348155][T18485] xfrm0 speed is unknown, defaulting to 1000 [ 593.391641][T18507] loop5: detected capacity change from 0 to 256 [ 593.540636][T18507] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 593.727249][T18518] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 593.831478][ T6226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.077192][T18531] loop1: detected capacity change from 0 to 256 [ 594.350351][T18531] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 594.837919][T18567] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 594.945027][T18573] loop3: detected capacity change from 0 to 512 [ 594.999865][T18573] EXT4-fs: Ignoring removed i_version option [ 595.100677][T18573] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 595.130092][T18573] EXT4-fs (loop3): 1 truncate cleaned up [ 595.137198][T18573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.432265][ T6226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.507751][T18598] (syz.2.5532,18598,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 595.516783][T18598] (syz.2.5532,18598,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 595.923218][T18615] loop2: detected capacity change from 0 to 1024 [ 595.974598][T18615] hfsplus: keylen 65060 too large [ 596.101453][ T5138] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 596.111374][ T5138] Bluetooth: hci0: unexpected event for opcode 0x042d [ 596.539830][T18623] loop5: detected capacity change from 0 to 40427 [ 596.612772][T18623] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 596.644931][T18623] F2FS-fs (loop5): Image doesn't support compression [ 596.657824][T18623] F2FS-fs (loop5): heap/no_heap options were deprecated [ 596.668996][T18623] F2FS-fs (loop5): Image doesn't support compression [ 596.715925][T18599] loop1: detected capacity change from 0 to 32768 [ 596.728544][T18623] F2FS-fs (loop5): invalid crc value [ 596.765387][T18623] F2FS-fs (loop5): Found nat_bits in checkpoint [ 596.789239][T18599] btrfs: Deprecated parameter 'usebackuproot' [ 596.828668][T18599] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 596.871721][T18623] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 596.875820][T18599] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5531 (18599) [ 597.004490][T18647] loop2: detected capacity change from 0 to 512 [ 597.044731][T18647] EXT4-fs: Ignoring removed i_version option [ 597.068916][T18599] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 597.082382][T18647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 597.116202][ T6213] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x595/0x1de0 [ 597.127710][ T6213] F2FS-fs (loop5): invalid blkaddr: 1028, type: 10, run fsck to fix. [ 597.132519][T18599] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 597.198841][T18599] BTRFS info (device loop1): disk space caching is enabled [ 597.218333][T18647] EXT4-fs (loop2): 1 truncate cleaned up [ 597.225026][T18647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.293164][T18599] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 597.362515][ T6219] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.638315][T18675] netlink: 'syz.3.5556': attribute type 6 has an invalid length. [ 597.934937][T18691] loop2: detected capacity change from 0 to 2048 [ 598.009940][T18599] BTRFS error (device loop1 state M): cannot disable free-space-tree [ 598.082252][T18702] siw: device registration error -23 [ 598.112752][T18705] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 598.174296][ T6224] BTRFS info (device loop1 state M): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 598.210534][ T874] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 598.452819][T18709] Illegal XDP return value 932001642 on prog (id 323) dev N/A, expect packet loss! [ 598.650529][ T874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.655696][ T6175] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 598.671532][ T874] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 598.710408][ T874] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 598.720089][ T874] usb 1-1: config 1 interface 1 has no altsetting 0 [ 598.746304][T18719] loop2: detected capacity change from 0 to 64 [ 598.773162][ T874] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 598.782644][ T874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.795770][T18719] hfs: bad allocation block size 272 [ 598.807131][T18719] hfs: can't find a HFS filesystem on dev loop2 [ 598.821534][ T874] usb 1-1: Product: syz [ 598.834857][T18721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 598.840525][ T6175] usb 4-1: Using ep0 maxpacket: 16 [ 598.860937][ T874] usb 1-1: Manufacturer: syz [ 598.865600][ T874] usb 1-1: SerialNumber: syz [ 598.912224][ T6175] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 598.959688][ T6175] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 599.019521][ T6175] usb 4-1: config 8 has no interface number 0 [ 599.082139][ T6175] usb 4-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 599.135319][ T6175] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 599.169393][ T874] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 599.190472][ T6175] usb 4-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 599.190580][ T874] usb 1-1: MIDIStreaming interface descriptor not found [ 599.253738][ T6175] usb 4-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.308917][ T6175] usb 4-1: config 8 interface 206 has no altsetting 0 [ 599.354012][ T6175] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 599.381770][ T874] usb 1-1: USB disconnect, device number 101 [ 599.383912][ T6175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.453812][ T6175] usb 4-1: Product: syz [ 599.489424][ T6175] usb 4-1: Manufacturer: syz [ 599.507618][ T6175] usb 4-1: SerialNumber: syz [ 599.559399][T18741] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5575'. [ 599.643514][T18745] loop1: detected capacity change from 0 to 64 [ 599.736708][ T8239] udevd[8239]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.764467][ T6175] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 599.802477][ T6175] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 599.837873][ T6175] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 599.871000][T18747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.911048][ T6175] usb 4-1: USB disconnect, device number 89 [ 599.950817][ T6175] garmin_gps 4-1:8.206: device disconnected [ 600.154162][ T5138] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 600.164627][ T5138] Bluetooth: hci0: Injecting HCI hardware error event [ 600.174362][ T5138] Bluetooth: hci0: hardware error 0x00 [ 600.231471][ T6319] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 600.276463][T18719] loop2: detected capacity change from 0 to 32768 [ 600.284269][T18719] JFS: Invalid value of umask [ 600.284359][T18757] loop1: detected capacity change from 0 to 256 [ 600.410903][ T6319] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 600.419985][ T6319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.450465][ T6319] usb 6-1: Product: syz [ 600.488838][ T6319] usb 6-1: Manufacturer: syz [ 600.499074][ T6319] usb 6-1: SerialNumber: syz [ 600.532655][ T6319] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 600.554130][ T6274] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 600.670744][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5588'. [ 600.679851][T18768] gre0: Master is either lo or non-ether device [ 601.088849][T18785] (syz.0.5592,18785,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 601.097719][T18785] (syz.0.5592,18785,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 601.480606][ T29] audit: type=1326 audit(1734567605.727:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b7985d29 code=0x7ffc0000 [ 601.504505][ T29] audit: type=1326 audit(1734567605.727:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b7985d29 code=0x7ffc0000 [ 601.527008][ T29] audit: type=1326 audit(1734567605.727:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6b7987c47 code=0x7ffc0000 [ 601.549316][ T29] audit: type=1326 audit(1734567605.727:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd6b7987bbc code=0x7ffc0000 [ 601.572218][ T29] audit: type=1326 audit(1734567605.727:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd6b7987af4 code=0x7ffc0000 [ 601.595086][ T29] audit: type=1326 audit(1734567605.727:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd6b7987af4 code=0x7ffc0000 [ 601.617417][ T29] audit: type=1326 audit(1734567605.727:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd6b798498a code=0x7ffc0000 [ 601.639593][ T29] audit: type=1326 audit(1734567605.727:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b7985d29 code=0x7ffc0000 [ 601.662201][ T29] audit: type=1326 audit(1734567605.727:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.1.5593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b7985d29 code=0x7ffc0000 [ 602.259318][T18804] loop0: detected capacity change from 0 to 4096 [ 602.313934][ T5138] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 602.330542][T18804] ntfs3(loop0): ino=3, Correct links count -> 2. [ 602.336950][T18804] ntfs3(loop0): Failed to load $Volume (-22). [ 602.940905][ T120] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 603.180859][ T120] usb 3-1: Using ep0 maxpacket: 16 [ 603.240590][ T120] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 603.299920][ T120] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 603.386165][ T120] usb 3-1: config 8 has no interface number 0 [ 603.517171][ T120] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 603.650610][ T120] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 603.777403][ T120] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 603.853212][T18828] netlink: 'syz.4.5597': attribute type 2 has an invalid length. [ 603.891554][ T120] usb 3-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.060736][ T120] usb 3-1: config 8 interface 206 has no altsetting 0 [ 604.090866][ T120] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 604.090907][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.090936][ T120] usb 3-1: Product: syz [ 604.090958][ T120] usb 3-1: Manufacturer: syz [ 604.090980][ T120] usb 3-1: SerialNumber: syz [ 604.397568][ T120] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 604.398374][ T120] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 604.398548][ T120] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 604.401080][ T120] usb 3-1: USB disconnect, device number 96 [ 604.402363][ T120] garmin_gps 3-1:8.206: device disconnected [ 604.592040][T18839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5614'. [ 606.215948][T18869] loop1: detected capacity change from 0 to 256 [ 606.347021][T18869] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f50, chksum : 0xa6aae999, utbl_chksum : 0xe619d30d) [ 606.586798][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5631'. [ 607.620644][T18897] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5638'. [ 607.642314][T18898] loop3: detected capacity change from 0 to 64 [ 608.380753][T18909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5643'. [ 608.490807][T18913] tmpfs: Bad value for 'mpol' [ 608.589935][ C1] sd 0:0:1:0: [sda] tag#128 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 608.600324][ C1] sd 0:0:1:0: [sda] tag#128 CDB: Read(6) 08 00 0c 6a 08 48 [ 609.128636][T18926] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5650'. [ 609.229630][T18926] 0·: renamed from hsr0 (while UP) [ 609.342165][T18926] 0·: entered promiscuous mode [ 609.367853][T18926] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 609.510548][ T120] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 609.545109][T18936] loop1: detected capacity change from 0 to 1024 [ 609.782114][ T120] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.921443][ T120] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 610.060830][ T120] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 610.170498][ T120] usb 4-1: config 1 interface 1 has no altsetting 0 [ 610.233804][T18943] loop5: detected capacity change from 0 to 256 [ 610.280713][ T120] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 610.373356][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.459822][ T120] usb 4-1: Product: syz [ 610.497980][T18943] FAT-fs (loop5): Directory bread(block 64) failed [ 610.533678][ T120] usb 4-1: Manufacturer: syz [ 610.601549][T18943] FAT-fs (loop5): Directory bread(block 65) failed [ 610.608199][T18943] FAT-fs (loop5): Directory bread(block 66) failed [ 610.624802][ T120] usb 4-1: SerialNumber: syz [ 610.765457][T18943] FAT-fs (loop5): Directory bread(block 67) failed [ 610.858611][T18943] FAT-fs (loop5): Directory bread(block 68) failed [ 610.900513][ C1] sched: DL replenish lagged too much [ 610.933107][T18943] FAT-fs (loop5): Directory bread(block 69) failed [ 610.939813][T18943] FAT-fs (loop5): Directory bread(block 70) failed [ 610.949535][ T120] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 611.013653][ T120] usb 4-1: MIDIStreaming interface descriptor not found [ 611.095663][T18943] FAT-fs (loop5): Directory bread(block 71) failed [ 611.168308][T18943] FAT-fs (loop5): Directory bread(block 72) failed [ 611.278057][T18943] FAT-fs (loop5): Directory bread(block 73) failed [ 611.396543][ T120] usb 4-1: USB disconnect, device number 90 [ 611.870098][ T6779] udevd[6779]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.524882][T18979] loop4: detected capacity change from 0 to 128 [ 614.019838][T19002] loop2: detected capacity change from 0 to 2048 [ 614.094143][T17025] cxacru 5-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 614.115846][T18142] cxacru 2-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 614.273242][T19002] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 615.470802][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5698'. [ 615.479736][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5698'. [ 615.728376][T19035] tc_dump_action: action bad kind [ 616.079337][T19026] loop4: detected capacity change from 0 to 8192 [ 616.494665][T19048] netlink: 'syz.3.5703': attribute type 1 has an invalid length. [ 617.110594][ T9] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 617.368986][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 617.426619][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 617.530483][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.710171][ T9] usb 1-1: config 0 descriptor?? [ 617.778585][ T9] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 617.950722][T19074] CIFS mount error: No usable UNC path provided in device string! [ 617.950722][T19074] [ 618.060094][T19074] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 618.210745][ T9] usb 1-1: USB disconnect, device number 102 [ 618.826121][T19085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5717'. [ 618.874559][T19088] loop1: detected capacity change from 0 to 256 [ 619.083708][T19088] FAT-fs (loop1): Directory bread(block 64) failed [ 619.170684][T19088] FAT-fs (loop1): Directory bread(block 65) failed [ 619.270298][T19088] FAT-fs (loop1): Directory bread(block 66) failed [ 619.324452][T19088] FAT-fs (loop1): Directory bread(block 67) failed [ 619.398609][T19088] FAT-fs (loop1): Directory bread(block 68) failed [ 619.440658][T19088] FAT-fs (loop1): Directory bread(block 69) failed [ 619.493052][T19088] FAT-fs (loop1): Directory bread(block 70) failed [ 619.590038][T19088] FAT-fs (loop1): Directory bread(block 71) failed [ 619.650692][T19088] FAT-fs (loop1): Directory bread(block 72) failed [ 619.720510][T19088] FAT-fs (loop1): Directory bread(block 73) failed [ 621.133758][T19119] loop0: detected capacity change from 0 to 256 [ 621.339697][T19119] FAT-fs (loop0): Directory bread(block 64) failed [ 621.400665][T19119] FAT-fs (loop0): Directory bread(block 65) failed [ 621.472690][T19119] FAT-fs (loop0): Directory bread(block 66) failed [ 621.479269][T19119] FAT-fs (loop0): Directory bread(block 67) failed [ 621.602151][T19119] FAT-fs (loop0): Directory bread(block 68) failed [ 621.689918][T19119] FAT-fs (loop0): Directory bread(block 69) failed [ 621.757503][T19119] FAT-fs (loop0): Directory bread(block 70) failed [ 621.830590][T19119] FAT-fs (loop0): Directory bread(block 71) failed [ 621.837330][T19119] FAT-fs (loop0): Directory bread(block 72) failed [ 621.957517][T19119] FAT-fs (loop0): Directory bread(block 73) failed [ 622.289803][T19099] loop2: detected capacity change from 0 to 32768 [ 622.673249][T19105] loop3: detected capacity change from 0 to 32768 [ 623.042292][T19139] binfmt_misc: register: failed to install interpreter file ./file0 [ 623.780646][T19149] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5737'. [ 624.321058][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.327396][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.657016][T19164] cgroup: subsys name conflicts with all [ 624.713152][T19167] netlink: 'syz.0.5743': attribute type 49 has an invalid length. [ 624.964223][T19158] loop4: detected capacity change from 0 to 4096 [ 625.078487][T19158] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 627.047781][T19210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.463295][T19158] ntfs3(loop4): failed to convert "c46c" to default [ 627.711394][T19219] xt_HMARK: spi-set and port-set can't be combined [ 628.188654][T19224] loop0: detected capacity change from 0 to 256 [ 628.456393][T19227] loop2: detected capacity change from 0 to 1024 [ 628.466448][T19230] loop4: detected capacity change from 0 to 512 [ 628.536716][T19230] EXT4-fs: Ignoring removed oldalloc option [ 628.594084][T19224] FAT-fs (loop0): Directory bread(block 64) failed [ 628.633474][T19230] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 628.700524][T19224] FAT-fs (loop0): Directory bread(block 65) failed [ 628.785759][T19224] FAT-fs (loop0): Directory bread(block 66) failed [ 628.841557][T19230] EXT4-fs (loop4): 1 truncate cleaned up [ 628.848162][T19230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.872398][T19224] FAT-fs (loop0): Directory bread(block 67) failed [ 628.879591][T19224] FAT-fs (loop0): Directory bread(block 68) failed [ 628.970592][T19224] FAT-fs (loop0): Directory bread(block 69) failed [ 628.977244][T19224] FAT-fs (loop0): Directory bread(block 70) failed [ 629.076472][T19202] loop1: detected capacity change from 0 to 32768 [ 629.102759][T19224] FAT-fs (loop0): Directory bread(block 71) failed [ 629.109564][T19224] FAT-fs (loop0): Directory bread(block 72) failed [ 629.167754][T19202] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5753 (19202) [ 629.259341][T19224] FAT-fs (loop0): Directory bread(block 73) failed [ 629.314481][T19202] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 629.411918][T19202] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 629.502236][T19240] loop3: detected capacity change from 0 to 1024 [ 629.544092][T19202] BTRFS info (device loop1): using free-space-tree [ 629.589901][ T6227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.632044][T19202] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 629.632455][T19202] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 629.715335][T19202] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 629.734299][T19246] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 629.805405][T19240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.890607][T19202] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 629.890961][T19202] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 630.011792][T19202] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 630.069255][T19240] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.5771: missing EA_INODE flag [ 630.147091][T19202] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 630.147443][T19202] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 630.241062][T19202] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 630.372711][T19202] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 630.410566][T19240] EXT4-fs (loop3): Remounting filesystem read-only [ 630.490901][T19202] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 630.491183][T19202] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 630.654204][T19202] BTRFS error (device loop1): open_ctree failed [ 630.967289][T19272] tmpfs: Bad value for 'mpol' [ 631.031925][ T6226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.112663][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 631.340671][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 631.394238][ T9] usb 1-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 631.490555][ T9] usb 1-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 631.499807][ T9] usb 1-1: config 63 has no interface number 0 [ 631.641199][ T9] usb 1-1: config 63 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 631.810464][ T9] usb 1-1: config 63 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 631.928597][ T9] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 632.039179][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.168063][ T9] usb 1-1: probing VID:PID(2201:012C) [ 632.243352][ T9] usb 1-1: vub300 testing BULK OUT EndPoint(0) 02 [ 632.323454][ T9] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 632.426078][ T9] vub300 1-1:63.19: probe with driver vub300 failed with error -22 [ 632.543676][ T9] usb 1-1: USB disconnect, device number 103 [ 632.568706][T19298] loop5: detected capacity change from 0 to 256 [ 632.863743][T19298] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 632.914990][T19303] loop3: detected capacity change from 0 to 256 [ 633.200642][T19303] FAT-fs (loop3): Directory bread(block 64) failed [ 633.207232][T19303] FAT-fs (loop3): Directory bread(block 65) failed [ 633.356550][T19303] FAT-fs (loop3): Directory bread(block 66) failed [ 633.447979][T19303] FAT-fs (loop3): Directory bread(block 67) failed [ 633.524143][T19303] FAT-fs (loop3): Directory bread(block 68) failed [ 633.611353][T19303] FAT-fs (loop3): Directory bread(block 69) failed [ 633.618007][T19303] FAT-fs (loop3): Directory bread(block 70) failed [ 633.780799][T19303] FAT-fs (loop3): Directory bread(block 71) failed [ 633.842377][T19303] FAT-fs (loop3): Directory bread(block 72) failed [ 633.848944][T19303] FAT-fs (loop3): Directory bread(block 73) failed [ 634.297647][T19325] SET target dimension over the limit! [ 635.769609][T19346] loop1: detected capacity change from 0 to 512 [ 635.884714][T19346] Quota error (device loop1): write_blk: dquota write failed [ 635.947420][T19346] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 636.040575][T19346] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.5808: Failed to acquire dquot type 1 [ 636.157169][T19346] EXT4-fs (loop1): 1 truncate cleaned up [ 636.200548][T19346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.217437][T19355] loop4: detected capacity change from 0 to 512 [ 636.271162][T19346] ext4 filesystem being mounted at /928/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.293090][T19355] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 636.314375][T19359] openvswitch: netlink: Tunnel attr 191 out of range max 16 [ 636.411371][T19355] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 636.464793][ T29] audit: type=1800 audit(1734567640.997:54): pid=19346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5808" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 636.726113][ T6224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.741401][ T2937] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 636.806633][ T2937] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:7: Failed to release dquot type 1 [ 637.101915][T19333] netlink: 'syz.3.5803': attribute type 12 has an invalid length. [ 637.179515][T19333] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5803'. [ 638.057326][T19375] loop3: detected capacity change from 0 to 4096 [ 638.340781][ T29] audit: type=1326 audit(1734567642.867:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.1.5826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b7985d29 code=0x7ffc0000 [ 638.560603][ T29] audit: type=1326 audit(1734567642.867:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.1.5826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b7985d29 code=0x7ffc0000 [ 638.783319][ T29] audit: type=1326 audit(1734567642.927:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.1.5826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fd6b7985d29 code=0x7ffc0000 [ 638.990528][ T29] audit: type=1326 audit(1734567642.927:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.1.5826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b7985d29 code=0x7ffc0000 [ 639.231503][ T29] audit: type=1326 audit(1734567642.927:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19377 comm="syz.1.5826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b7985d29 code=0x7ffc0000 [ 639.633156][ T29] audit: type=1326 audit(1734567644.167:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19397 comm="syz.2.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a65185d29 code=0x7ffc0000 [ 639.671279][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5835'. [ 639.754475][T19399] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5835'. [ 640.351178][T19408] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5840'. [ 640.466112][ T6216] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 640.475509][ T6216] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 640.485737][ T6216] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 640.494040][ T6216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 640.501633][ T6216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 640.513804][ T6216] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 640.843668][T19416] netlink: 252 bytes leftover after parsing attributes in process `syz.2.5843'. [ 640.918025][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5843'. [ 641.616888][T19430] loop0: detected capacity change from 0 to 16 [ 641.663029][T19430] erofs (device loop0): mounted with root inode @ nid 36. [ 641.766571][T19430] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 641.809155][T19430] erofs (device loop0): readahead error at folio 0 @ nid 89 [ 641.879850][T19430] erofs (device loop0): read error -117 @ 0 of nid 89 [ 641.900105][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 641.900123][ T29] audit: type=1800 audit(1734567646.427:65): pid=19430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5850" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 641.925776][ C0] vkms_vblank_simulate: vblank timer overrun [ 642.348590][ T1091] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.424717][T19440] loop0: detected capacity change from 0 to 256 [ 642.621914][ T6216] Bluetooth: hci0: command tx timeout [ 642.689090][T19387] netlink: 'syz.1.5829': attribute type 4 has an invalid length. [ 642.973381][ T1091] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.309604][T19411] xfrm0 speed is unknown, defaulting to 1000 [ 643.606964][T19457] loop4: detected capacity change from 0 to 128 [ 643.894216][ T1091] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.544371][T19470] loop0: detected capacity change from 0 to 1764 [ 644.640764][ T1091] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.704068][ T6216] Bluetooth: hci0: command tx timeout [ 644.872467][T19475] loop3: detected capacity change from 0 to 1024 [ 645.474240][T19481] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5874'. [ 645.950846][ T1091] bridge_slave_1: left allmulticast mode [ 646.019406][ T1091] bridge_slave_1: left promiscuous mode [ 646.062137][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.211357][ T1091] bridge_slave_0: left allmulticast mode [ 646.263185][ T1091] bridge_slave_0: left promiscuous mode [ 646.268955][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.422070][ T6266] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 646.574016][T19493] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5880'. [ 646.620844][ T6266] usb 1-1: Using ep0 maxpacket: 8 [ 646.655736][ T6266] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.725578][ T6266] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 646.784016][ T6216] Bluetooth: hci0: command tx timeout [ 646.814272][ T6266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.914458][ T6266] usb 1-1: config 0 descriptor?? [ 646.973263][ T6266] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 647.352262][ T6266] gspca_vc032x: reg_w err -71 [ 647.357068][ T6266] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 647.487500][ T6266] usb 1-1: USB disconnect, device number 104 [ 648.860783][ T6216] Bluetooth: hci0: command tx timeout [ 651.465012][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.510327][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.546427][ T1091] bond0 (unregistering): Released all slaves [ 651.624241][T19506] tc_dump_action: action bad kind [ 651.659575][T19528] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5897'. [ 651.732399][T19411] chnl_net:caif_netlink_parms(): no params data found [ 652.338764][T19544] xt_TCPMSS: Only works on TCP SYN packets [ 653.647869][T19561] netlink: 'syz.3.5909': attribute type 1 has an invalid length. [ 653.699243][T19411] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.798030][T19411] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.879622][T19411] bridge_slave_0: entered allmulticast mode [ 653.938451][T19411] bridge_slave_0: entered promiscuous mode [ 654.055648][T19411] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.136902][T19411] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.210346][T19411] bridge_slave_1: entered allmulticast mode [ 654.217691][T19411] bridge_slave_1: entered promiscuous mode [ 654.924463][T19591] loop2: detected capacity change from 0 to 64 [ 655.548635][T19601] loop0: detected capacity change from 0 to 256 [ 655.650133][T19606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5928'. [ 655.721759][T19601] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 656.810840][T19624] loop4: detected capacity change from 0 to 128 [ 656.956193][T19624] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 657.031757][T19629] netlink: 'syz.1.5936': attribute type 1 has an invalid length. [ 657.077118][T19624] ext4 filesystem being mounted at /941/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 657.634488][ T6227] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 658.060586][ T120] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 658.152397][T19652] loop4: detected capacity change from 0 to 8 [ 658.178898][ T1091] hsr_slave_0: left promiscuous mode [ 658.292418][T19652] SQUASHFS error: Failed to read block 0x1ec: -5 [ 658.298807][T19652] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 658.320510][ T120] usb 1-1: Using ep0 maxpacket: 16 [ 658.380758][ T120] usb 1-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 658.410941][ T1091] hsr_slave_1: left promiscuous mode [ 658.475395][ T120] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 658.512097][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.586419][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.600622][ T120] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 658.670693][ T120] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 658.701108][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.738029][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.753246][ T120] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 658.885546][ T120] usb 1-1: config 1 interface 0 has no altsetting 0 [ 658.985278][ T1091] veth1_macvtap: left promiscuous mode [ 659.013551][ T120] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 659.074177][ T1091] veth0_macvtap: left promiscuous mode [ 659.090582][ T120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 659.132484][ T1091] veth1_vlan: left promiscuous mode [ 659.181188][ T1091] veth0_vlan: left promiscuous mode [ 659.186845][ T120] usb 1-1: SerialNumber: syz [ 659.244798][T19645] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 659.567777][ T120] usb 1-1: USB disconnect, device number 105 [ 660.266809][T19673] loop2: detected capacity change from 0 to 4096 [ 660.324222][T19673] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 660.410510][T19673] ntfs3(loop2): It is recommened to use chkdsk. [ 660.487950][T19677] loop0: detected capacity change from 0 to 512 [ 660.648315][T19677] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 660.730791][T19677] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 660.826031][T19677] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.5954: Failed to acquire dquot type 1 [ 660.942587][T19677] EXT4-fs (loop0): 1 truncate cleaned up [ 660.965339][T19677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.044812][T19677] ext4 filesystem being mounted at /934/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.187488][T19677] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 661.257646][T19677] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 661.339910][T19677] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.5954: Failed to acquire dquot type 1 [ 661.694614][ T6212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.829455][T19693] loop2: detected capacity change from 0 to 2048 [ 661.899869][T19693] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 661.953928][T19693] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 662.059167][T19693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 663.114990][T19705] loop2: detected capacity change from 0 to 128 [ 663.139457][T19705] FAT-fs (loop2): bread failed, FSINFO block (sector = 202) [ 663.490844][T19707] SET target dimension over the limit! [ 663.759640][T19699] loop0: detected capacity change from 0 to 32768 [ 663.883216][T19699] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 663.883216][T19699] [ 663.980699][T19699] ERROR: (device loop0): remounting filesystem as read-only [ 664.010720][T19699] jfs_lookup: dtSearch returned -5 [ 664.041335][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 664.533027][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 664.742135][T19715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5972'. [ 664.774440][T19715] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5972'. [ 665.760868][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 665.948664][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 665.966773][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.987234][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 665.999768][ T9] usb 1-1: config 1 has no interface number 0 [ 666.040808][ T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 666.060594][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 666.086812][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 666.106402][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.143623][ T9] usb 1-1: Product: syz [ 666.160637][ T9] usb 1-1: Manufacturer: syz [ 666.165259][ T9] usb 1-1: SerialNumber: syz [ 666.683937][ T120] usb 1-1: USB disconnect, device number 106 [ 666.783551][T19411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.887491][T19411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.613340][T19411] team0: Port device team_slave_0 added [ 667.754085][T19411] team0: Port device team_slave_1 added [ 667.768944][T19730] loop4: detected capacity change from 0 to 4096 [ 668.105687][T19739] loop1: detected capacity change from 0 to 2048 [ 668.233604][T19739] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 668.387941][T19411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.411437][T19739] syz.1.5981: attempt to access beyond end of device [ 668.411437][T19739] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 668.450130][T19743] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 668.482747][T19411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.690996][T19739] syz.1.5981: attempt to access beyond end of device [ 668.690996][T19739] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 668.766753][T19411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.890756][T19739] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 668.983894][T19411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.129873][T19411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.385081][T19411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.117156][T19411] hsr_slave_0: entered promiscuous mode [ 670.323118][T19411] hsr_slave_1: entered promiscuous mode [ 670.398230][T19411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 670.466874][T19411] Cannot create hsr debugfs directory [ 672.255433][T19799] loop1: detected capacity change from 0 to 79 [ 672.279501][T19756] loop4: detected capacity change from 0 to 32768 [ 672.385480][T19799] hfs: unable to locate alternate MDB [ 672.461417][T19799] hfs: continuing without an alternate MDB [ 672.772471][T19411] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 672.984803][T19411] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 673.150812][T19411] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 673.251093][T19411] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 673.338618][T19816] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6012'. [ 673.419187][T19816] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6012'. [ 674.378769][T19411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.525826][T19411] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.928238][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.935520][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.133325][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.140507][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.370750][T19847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6023'. [ 675.419813][T19411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 675.530623][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 675.578227][T19411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 675.673098][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6025'. [ 675.739125][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6025'. [ 675.771035][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 675.833161][T19852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6025'. [ 675.845434][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 175 [ 675.963516][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 676.030512][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.050562][ T29] audit: type=1400 audit(1734567680.567:66): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=19855 comm="syz.0.6026" [ 676.077196][ T9] usb 2-1: Product: syz [ 676.114383][ T9] usb 2-1: Manufacturer: syz [ 676.191731][ T9] usb 2-1: SerialNumber: syz [ 676.241973][ T9] usb 2-1: config 0 descriptor?? [ 676.250965][T19844] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 676.414053][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 676.611140][ T9] usb 2-1: USB disconnect, device number 98 [ 676.626968][ T2937] usb 2-1: Failed to submit usb control message: -71 [ 676.720515][ T2937] usb 2-1: unable to send the bmi data to the device: -71 [ 676.810637][ T2937] usb 2-1: unable to get target info from device [ 676.817058][ T2937] usb 2-1: could not get target info (-71) [ 676.960785][ T2937] usb 2-1: could not probe fw (-71) [ 677.726460][T19411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.162095][T19893] netlink: 'syz.0.6037': attribute type 10 has an invalid length. [ 678.386124][T19893] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 678.442539][T19893] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 678.555022][T19893] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 680.083841][T19927] loop1: detected capacity change from 0 to 1024 [ 680.206425][T19411] veth0_vlan: entered promiscuous mode [ 680.282417][T19927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.375100][T19411] veth1_vlan: entered promiscuous mode [ 680.462856][T19927] ext4 filesystem being mounted at /961/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.644234][T19927] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.6044: corrupted xattr block 128: overlapping e_value [ 680.662464][T19411] veth0_macvtap: entered promiscuous mode [ 680.781795][T19411] veth1_macvtap: entered promiscuous mode [ 681.012401][T19411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.170679][T19411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.268108][T19411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.384059][T19411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.490488][T19411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.572912][T19411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.690527][T19411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.784943][T19411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.874823][T19411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.960828][T19411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.067924][T19411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.085436][ T6224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.193197][T19411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.286447][T19963] loop4: detected capacity change from 0 to 512 [ 682.337953][T19411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.394159][T19963] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 682.450463][T19411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.512937][T19963] System zones: 0-2, 18-18, 34-34 [ 682.535553][T19411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.610349][T19963] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6056: bg 0: block 248: padding at end of block bitmap is not set [ 682.655081][T19411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.700212][T19411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.723933][T19963] Quota error (device loop4): write_blk: dquota write failed [ 682.759803][T19963] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 682.770540][T19411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.819612][T19963] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.6056: Failed to acquire dquot type 1 [ 682.839936][T19411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.886156][T19411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.906348][T19963] EXT4-fs (loop4): 1 truncate cleaned up [ 682.953603][T19963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.983912][T19411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.036024][T19963] ext4 filesystem being mounted at /956/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.048281][T19411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.153579][T19968] netlink: 'syz.1.6050': attribute type 13 has an invalid length. [ 683.231251][T19411] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.303568][T19411] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.391612][T19411] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.501007][T19411] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.615912][ T6227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.354487][T19957] loop2: detected capacity change from 0 to 32768 [ 684.401724][T19986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6064'. [ 684.421326][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.510253][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.539946][T19957] read_mapping_page failed! [ 684.591036][T19957] jfs_mount: Failed to read AGGREGATE_I [ 684.610490][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 684.679846][T19957] Mount JFS Failure: -5 [ 684.702922][T19957] jfs_mount failed w/return code = -5 [ 684.814124][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.840472][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 684.887641][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 684.904689][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.988738][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 685.097443][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.201001][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 685.210089][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.400047][ T9] usb 4-1: Product: syz [ 685.446520][ T9] usb 4-1: Manufacturer: syz [ 685.500030][ T9] usb 4-1: SerialNumber: syz [ 685.745895][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.752416][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.037149][ T9] usb 4-1: 0:2 : does not exist [ 686.185918][ T9] usb 4-1: USB disconnect, device number 91 [ 686.460144][T20006] netlink: 'syz.4.6070': attribute type 10 has an invalid length. [ 686.535555][T20006] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6070'. [ 686.597749][ T6198] udevd[6198]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.117428][T20037] loop3: detected capacity change from 0 to 256 [ 688.264222][T20037] exfat: Deprecated parameter 'namecase' [ 688.401282][T20037] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 689.047714][T20051] xt_l2tp: v2 doesn't support IP mode [ 690.234252][T20074] loop1: detected capacity change from 0 to 128 [ 690.324961][T20074] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 690.678914][T20076] loop6: detected capacity change from 0 to 4096 [ 690.761149][ T8] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 690.792315][T20076] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 690.990631][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 691.083624][T20076] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 691.100862][ T8] usb 2-1: config 1 has an invalid interface number: 166 but max is 1 [ 691.182849][ T8] usb 2-1: config 1 has no interface number 1 [ 691.263096][ T8] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 691.328006][T20076] ntfs3(loop6): ino=1f, "file2" attr_set_size [ 691.382984][ T8] usb 2-1: too many endpoints for config 1 interface 166 altsetting 170: 152, using maximum allowed: 30 [ 691.510626][ T8] usb 2-1: config 1 interface 166 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 691.661339][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 691.760999][ T8] usb 2-1: config 1 interface 166 has no altsetting 0 [ 691.833620][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 691.889805][T20093] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6103'. [ 691.944904][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.012657][ T8] usb 2-1: Product: syz [ 692.033286][ T8] usb 2-1: Manufacturer: syz [ 692.102862][ T8] usb 2-1: SerialNumber: syz [ 692.313454][T20100] loop0: detected capacity change from 0 to 2048 [ 692.390251][ T8] smsusb:smsusb_probe: board id=8, interface number 0 [ 692.410012][T20100] EXT4-fs: Ignoring removed mblk_io_submit option [ 692.440838][T20103] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6106'. [ 692.498502][ T8] smsusb:smsusb_probe: board id=8, interface number 166 [ 692.507972][T20100] EXT4-fs: Ignoring removed nobh option [ 692.561108][T20107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6107'. [ 692.659019][ T8] usb 2-1: USB disconnect, device number 99 [ 692.673333][T20100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.182414][ T6212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.610566][T20138] netlink: 'syz.4.6119': attribute type 2 has an invalid length. [ 694.707559][T20138] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6119'. [ 695.101427][T20144] loop6: detected capacity change from 0 to 1024 [ 695.472572][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6124'. [ 695.664340][ T11] hfsplus: b-tree write err: -5, ino 4 [ 696.740476][ T120] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 696.999037][ T120] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.072765][ T120] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 697.193306][ T120] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 697.290576][ T120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 697.370472][ T120] usb 1-1: SerialNumber: syz [ 697.385749][T20180] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6135'. [ 697.477905][T20180] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6135'. [ 697.673396][ T120] usb 1-1: 0:2 : does not exist [ 697.809604][ T120] usb 1-1: USB disconnect, device number 107 [ 698.245735][ T6198] udevd[6198]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 698.705873][T20192] loop4: detected capacity change from 0 to 2048 [ 698.940994][T20198] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 699.151980][T20192] NILFS (loop4): error -2 truncating bmap (ino=16) [ 699.729823][T20198] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 699.859203][T20198] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 700.050711][T20198] Remounting filesystem read-only [ 700.130991][ T6227] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 700.877545][T20231] autofs4:pid:20231:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 701.650751][T20245] (unnamed net_device) (uninitialized): up delay (3) is not a multiple of miimon (6516), value rounded to 0 ms [ 702.252739][T20234] xfrm0 speed is unknown, defaulting to 1000 [ 702.607210][T20261] mmap: syz.0.6166 (20261): VmData 175878144 exceed data ulimit 4095. Update limits or use boot option ignore_rlimit_data. [ 703.125838][T20268] loop3: detected capacity change from 0 to 4096 [ 703.226799][T20268] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 703.558617][T20268] ntfs3(loop3): failed to convert "c46c" to cp864 [ 704.172949][T20288] sit1: entered promiscuous mode [ 704.179127][T20288] sit1: entered allmulticast mode [ 705.816053][T20311] loop1: detected capacity change from 0 to 2048 [ 705.923662][T20311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.000924][T20317] sctp: [Deprecated]: syz.2.6186 (pid 20317) Use of int in max_burst socket option. [ 706.000924][T20317] Use struct sctp_assoc_value instead [ 706.068156][T20311] ext4 filesystem being mounted at /987/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.287611][T20311] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6185: bg 0: block 288: padding at end of block bitmap is not set [ 706.617489][T20326] netlink: 'syz.6.6189': attribute type 10 has an invalid length. [ 706.783663][ T6224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.851348][T20326] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 706.930008][T20326] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 707.033373][T20326] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 707.091863][T20333] i2c i2c-0: Invalid block write size 253 [ 707.154555][T20290] loop0: detected capacity change from 0 to 32768 [ 707.261193][T20290] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 707.453836][T20290] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 512 but claims that 2046 are free [ 707.648551][T20290] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 707.773127][T20290] OCFS2: File system is now read-only. [ 707.778642][T20290] (syz.0.6177,20290,0):ocfs2_search_chain:1814 ERROR: status = -30 [ 707.799034][T20342] netlink: 'syz.6.6195': attribute type 12 has an invalid length. [ 707.857719][T20342] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6195'. [ 707.900770][T20290] (syz.0.6177,20290,0):ocfs2_search_chain:1926 ERROR: status = -30 [ 707.970725][T20290] (syz.0.6177,20290,0):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30 [ 708.047964][T20290] (syz.0.6177,20290,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 708.110915][T20290] (syz.0.6177,20290,0):ocfs2_claim_new_inode:2273 ERROR: status = -30 [ 708.200501][T20290] (syz.0.6177,20290,0):ocfs2_claim_new_inode:2288 ERROR: status = -30 [ 708.300562][T20290] (syz.0.6177,20290,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 708.308435][T20290] (syz.0.6177,20290,0):ocfs2_mknod:385 ERROR: status = -30 [ 708.404339][T20290] (syz.0.6177,20290,0):ocfs2_mknod:502 ERROR: status = -30 [ 708.489553][T20290] (syz.0.6177,20290,0):ocfs2_create:676 ERROR: status = -30 [ 708.990974][ T6212] ocfs2: Unmounting device (7,0) on (node local) [ 711.248628][T20390] loop6: detected capacity change from 0 to 2048 [ 711.351404][T20394] netlink: 'syz.3.6214': attribute type 10 has an invalid length. [ 711.359268][T20394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6214'. [ 711.574508][T20394] bridge0: port 3(dummy0) entered blocking state [ 711.590955][T20399] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 711.646421][T20390] NILFS error (device loop6): nilfs_check_folio: size of directory #2 is not a multiple of chunk size [ 711.669219][T20394] bridge0: port 3(dummy0) entered disabled state [ 711.740892][T20394] dummy0: entered allmulticast mode [ 711.801889][T20394] dummy0: entered promiscuous mode [ 711.817280][T20390] Remounting filesystem read-only [ 711.912624][T20394] bridge0: port 3(dummy0) entered blocking state [ 711.919417][T20394] bridge0: port 3(dummy0) entered forwarding state [ 713.865261][T20422] loop2: detected capacity change from 0 to 4096 [ 713.950900][T20422] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 713.974524][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6227'. [ 714.246176][T20434] loop3: detected capacity change from 0 to 256 [ 714.577813][T20434] FAT-fs (loop3): Directory bread(block 64) failed [ 714.632867][T20434] FAT-fs (loop3): Directory bread(block 65) failed [ 714.698775][T20434] FAT-fs (loop3): Directory bread(block 66) failed [ 714.790725][T20434] FAT-fs (loop3): Directory bread(block 67) failed [ 714.851527][T20434] FAT-fs (loop3): Directory bread(block 68) failed [ 714.858104][T20434] FAT-fs (loop3): Directory bread(block 69) failed [ 714.987203][T20434] FAT-fs (loop3): Directory bread(block 70) failed [ 715.045071][T20434] FAT-fs (loop3): Directory bread(block 71) failed [ 715.134171][T20434] FAT-fs (loop3): Directory bread(block 72) failed [ 715.196300][T20434] FAT-fs (loop3): Directory bread(block 73) failed [ 715.210195][T20440] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6233'. [ 715.545634][T20434] tmpfs: Bad value for 'mpol' [ 716.712074][T20467] loop4: detected capacity change from 0 to 8 [ 716.718849][T20467] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 716.961400][T20467] process 'syz.4.6245' launched './file2' with NULL argv: empty string added [ 717.082074][T20467] cramfs: bad data blocksize 4291821208 [ 717.160606][T20467] cramfs: bad data blocksize 4291821208 [ 717.388691][T20480] loop0: detected capacity change from 0 to 256 [ 717.910578][ T120] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 718.177824][ T120] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 718.250635][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.258942][ T120] usb 4-1: Product: syz [ 718.422195][ T120] usb 4-1: Manufacturer: syz [ 718.467592][ T120] usb 4-1: SerialNumber: syz [ 718.549319][ T120] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 718.700553][ T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 721.256606][ T8] usb 4-1: Service connection timeout for: 256 [ 721.487922][ T8] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 728.593035][ T9] usb 4-1: USB disconnect, device number 92 [ 728.609163][ T8] ath9k_htc: Failed to initialize the device [ 728.660599][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 730.935722][T20533] netlink: 'syz.2.6271': attribute type 1 has an invalid length. [ 732.470600][T20558] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 733.005184][T20566] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6283'. [ 733.696522][T20577] loop0: detected capacity change from 0 to 1024 [ 734.408850][T17709] hfsplus: b-tree write err: -5, ino 4 [ 736.230906][T20611] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6300'. [ 736.343309][T20612] loop6: detected capacity change from 0 to 512 [ 736.503571][T20612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 736.638395][T20612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.671192][T20618] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6304'. [ 736.824854][T20612] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.425708][ T6274] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 737.434760][ T6274] ath9k_htc: Failed to initialize the device [ 737.490603][T20637] xt_TCPMSS: Only works on TCP SYN packets [ 737.731678][T19411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.930567][T20645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6313'. [ 738.381657][T20653] loop6: detected capacity change from 0 to 512 [ 738.576448][T20653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.709667][T20653] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 738.793589][T20654] loop2: detected capacity change from 0 to 4096 [ 738.943167][T20654] ntfs3(loop2): It is recommened to use chkdsk. [ 739.018252][T20654] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 739.105957][T20654] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 739.180532][ T120] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 739.190623][T20654] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 739.291105][T20654] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 739.375344][T20654] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00 [ 739.404582][T19411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.431345][ T120] usb 4-1: Using ep0 maxpacket: 16 [ 739.467018][T20654] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00 [ 739.510625][ T120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 739.570581][T20654] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00 [ 739.598920][ T120] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 739.644919][T20654] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00 [ 739.708538][ T120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 739.749074][T20654] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00 [ 739.807626][ T120] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 740.000583][ T120] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 740.068644][T20679] loop6: detected capacity change from 0 to 1024 [ 740.105740][ T120] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 740.240494][ T120] usb 4-1: Product: syz [ 740.279128][ T120] usb 4-1: Manufacturer: syz [ 740.331350][ T120] usb 4-1: SerialNumber: syz [ 740.378598][ T120] usb 4-1: config 0 descriptor?? [ 740.455389][ T120] usb 4-1: NFC: intf ffff88802876c000 id ffffffff8f30c660 [ 740.642036][T19411] hfsplus: bad catalog entry type [ 740.721730][ T120] nfcmrvl 4-1:0.0: NFC: registered with nci successfully [ 740.859682][ T120] usb 4-1: USB disconnect, device number 93 [ 740.876253][ T6266] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 740.921761][ T120] usb 4-1: NFC: intf ffff88802876c000 [ 741.154970][ T6266] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 741.220724][ T6266] usb 1-1: config 0 has no interface number 0 [ 741.315067][ T6266] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 741.423826][ T6266] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 741.590740][ T6266] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 741.600048][ T6266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.628890][T20705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6335'. [ 741.668609][ T6266] usb 1-1: Product: syz [ 741.717323][ T6266] usb 1-1: Manufacturer: syz [ 741.727594][T20705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6335'. [ 741.748623][ T6266] usb 1-1: SerialNumber: syz [ 741.796985][ T6266] usb 1-1: config 0 descriptor?? [ 741.903810][T20686] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 742.003581][ T6266] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 742.122304][ T6266] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 742.209065][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 742.311945][ T2937] hfsplus: b-tree write err: -5, ino 4 [ 742.591874][ T8] usb 1-1: USB disconnect, device number 108 [ 742.653777][T20719] loop3: detected capacity change from 0 to 16 [ 742.680947][ T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 742.754665][T20719] erofs (device loop3): mounted with root inode @ nid 36. [ 742.792473][ T8] cyberjack 1-1:0.69: device disconnected [ 743.485026][T17709] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.853423][ T6319] usb 6-1: USB disconnect, device number 91 [ 743.880497][ T6319] usb 6-1: ath9k_htc: USB layer deinitialized [ 743.945510][T17709] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.152953][T20731] loop0: detected capacity change from 0 to 164 [ 744.330580][T20731] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 744.482813][T20743] loop3: detected capacity change from 0 to 16 [ 744.570939][T20743] erofs (device loop3): mounted with root inode @ nid 36. [ 744.669517][T20743] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 744.714520][T20743] erofs (device loop3): failed to decompress -23 in[64, 4032] out[1851] [ 744.759624][T20743] erofs (device loop3): read error -117 @ 43 of nid 36 [ 744.770350][T17709] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.926185][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 744.937222][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 744.951035][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 744.982390][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 745.010787][ T5138] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 745.018135][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 745.192102][T17709] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.204530][T20733] loop2: detected capacity change from 0 to 32768 [ 745.227407][T20724] loop1: detected capacity change from 0 to 32768 [ 745.243420][T20733] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6346 (20733) [ 745.434357][T20724] __jfs_setxattr: xattr_size = 74, new_size = 12820 [ 745.445113][T20753] xfrm0 speed is unknown, defaulting to 1000 [ 745.481151][T20733] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 745.553945][T20733] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 745.633887][T20733] BTRFS info (device loop2): disk space caching is enabled [ 745.688186][T20733] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 745.937433][T17709] bridge_slave_1: left allmulticast mode [ 745.944328][T17709] bridge_slave_1: left promiscuous mode [ 745.950043][T17709] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.072207][T17709] bridge_slave_0: left allmulticast mode [ 746.077900][T17709] bridge_slave_0: left promiscuous mode [ 746.200616][T17709] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.498923][T20747] loop4: detected capacity change from 0 to 32768 [ 746.506344][T20747] XFS: ikeep mount option is deprecated. [ 746.635602][T20802] loop1: detected capacity change from 0 to 47 [ 746.642897][T20761] loop0: detected capacity change from 0 to 32768 [ 746.668485][T20733] BTRFS info (device loop2): rebuilding free space tree [ 746.680176][T20747] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 746.688211][T20761] (syz.0.6354,20761,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 746.733413][T20761] (syz.0.6354,20761,0):ocfs2_read_virt_blocks:1019 ERROR: status = -12 [ 746.802665][T20761] (syz.0.6354,20761,1):ocfs2_read_dir_block:511 ERROR: status = -12 [ 746.810782][T20733] BTRFS info (device loop2): disabling free space tree [ 746.811775][T20733] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 746.818416][T20761] (syz.0.6354,20761,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 746.836085][T20761] (syz.0.6354,20761,1):ocfs2_read_virt_blocks:1019 ERROR: status = -12 [ 746.844551][T20733] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 746.868819][T20761] (syz.0.6354,20761,0):ocfs2_read_dir_block:511 ERROR: status = -12 [ 746.895599][T20761] (syz.0.6354,20761,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 746.937493][T20761] (syz.0.6354,20761,0):ocfs2_read_virt_blocks:1019 ERROR: status = -12 [ 746.961774][T20761] (syz.0.6354,20761,1):ocfs2_read_dir_block:511 ERROR: status = -12 [ 746.970099][T20761] (syz.0.6354,20761,1):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 746.993686][T20761] (syz.0.6354,20761,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 746.993732][T20761] (syz.0.6354,20761,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 746.993940][T20747] XFS (loop4): Ending clean mount [ 747.006274][T20761] (syz.0.6354,20761,0):ocfs2_initialize_super:2250 ERROR: status = -22 [ 747.006373][T20761] (syz.0.6354,20761,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 747.101376][ T5138] Bluetooth: hci0: command tx timeout [ 747.186072][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.192869][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.211333][T20747] XFS (loop4): Quotacheck needed: Please wait. [ 747.314341][T20818] netlink: 'syz.0.6364': attribute type 1 has an invalid length. [ 747.322392][T20818] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6364'. [ 747.444882][T20747] XFS (loop4): Quotacheck: Done. [ 747.624000][ T6219] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 747.676435][T20832] loop1: detected capacity change from 0 to 64 [ 747.704145][T20832] hfs: keylen 94 too large [ 747.708852][T20832] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 747.773181][ T6227] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 748.059465][T20837] loop2: detected capacity change from 0 to 1024 [ 748.659434][T20849] QAT: failed to copy from user cfg_data. [ 748.756697][T20836] loop1: detected capacity change from 0 to 32768 [ 748.765909][T20836] (syz.1.6369,20836,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 748.789751][T20836] (syz.1.6369,20836,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 748.843339][T20836] JBD2: Ignoring recovery information on journal [ 748.875537][T20836] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 748.893843][T17709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.965563][T17709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.992048][T17709] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 748.997901][ T6224] ocfs2: Unmounting device (7,1) on (node local) [ 749.054471][T17709] bond0 (unregistering): Released all slaves [ 749.180871][ T5138] Bluetooth: hci0: command tx timeout [ 749.203909][T20833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.214505][T20833] bond0: (slave rose0): Enslaving as an active interface with an up link [ 749.270036][T20859] loop1: detected capacity change from 0 to 256 [ 749.277107][T20859] exfat: Deprecated parameter 'namecase' [ 749.286691][T20847] @ÿ: renamed from veth0_vlan (while UP) [ 749.329148][T20859] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 749.374219][T20855] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6376'. [ 749.888908][T20885] No control pipe specified [ 750.040491][ T8] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 750.200538][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 750.208958][ T8] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 750.265121][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.300039][ T8] usb 3-1: Product: syz [ 750.307678][T20753] chnl_net:caif_netlink_parms(): no params data found [ 750.317243][ T8] usb 3-1: Manufacturer: syz [ 750.342866][ T8] usb 3-1: SerialNumber: syz [ 750.360340][ T8] usb 3-1: config 0 descriptor?? [ 750.368445][ T8] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 750.886963][ T8] usb 3-1: USB disconnect, device number 97 [ 750.932305][T20882] loop0: detected capacity change from 0 to 32768 [ 751.000154][T20882] (syz.0.6388,20882,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 751.084563][T20882] (syz.0.6388,20882,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 751.169214][T20882] JBD2: Ignoring recovery information on journal [ 751.267294][ T5138] Bluetooth: hci0: command tx timeout [ 751.320892][T20882] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 751.354555][T20753] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.402189][T20753] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.447328][T20753] bridge_slave_0: entered allmulticast mode [ 751.482698][T20753] bridge_slave_0: entered promiscuous mode [ 751.548936][T17709] hsr_slave_0: left promiscuous mode [ 751.555185][T17709] hsr_slave_1: left promiscuous mode [ 751.576127][T17709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.596980][T17709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.605845][T20882] [ 751.608193][T20882] ====================================================== [ 751.615212][T20882] WARNING: possible circular locking dependency detected [ 751.622233][T20882] 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 Not tainted [ 751.629349][T20882] ------------------------------------------------------ [ 751.636373][T20882] syz.0.6388/20882 is trying to acquire lock: [ 751.642442][T20882] ffff88804d302610 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x6df/0xb70 [ 751.651898][T20882] [ 751.651898][T20882] but task is already holding lock: [ 751.659267][T20882] ffff88805301bf60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x225/0x2b0 [ 751.670275][T20882] [ 751.670275][T20882] which lock already depends on the new lock. [ 751.670275][T20882] [ 751.680855][T20882] [ 751.680855][T20882] the existing dependency chain (in reverse order) is: [ 751.689878][T20882] [ 751.689878][T20882] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}: [ 751.698782][T20882] lock_acquire+0x1ed/0x550 [ 751.703833][T20882] down_write+0x99/0x220 [ 751.708614][T20882] ocfs2_lock_global_qf+0x225/0x2b0 [ 751.714349][T20882] ocfs2_acquire_dquot+0x2b0/0xb70 [ 751.719983][T20882] dqget+0x772/0xeb0 [ 751.724401][T20882] dquot_set_dqblk+0x2b/0xf30 [ 751.729603][T20882] quota_setquota+0x6de/0x850 [ 751.734810][T20882] __se_sys_quotactl+0x2c4/0xa30 [ 751.740280][T20882] do_syscall_64+0xf3/0x230 [ 751.745320][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.751746][T20882] [ 751.751746][T20882] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{4:4}: [ 751.762293][T20882] lock_acquire+0x1ed/0x550 [ 751.767320][T20882] down_write+0x99/0x220 [ 751.772082][T20882] ocfs2_lock_global_qf+0x206/0x2b0 [ 751.777802][T20882] ocfs2_acquire_dquot+0x2b0/0xb70 [ 751.783432][T20882] dqget+0x772/0xeb0 [ 751.787849][T20882] dquot_set_dqblk+0x2b/0xf30 [ 751.793056][T20882] quota_setquota+0x6de/0x850 [ 751.798263][T20882] __se_sys_quotactl+0x2c4/0xa30 [ 751.803736][T20882] do_syscall_64+0xf3/0x230 [ 751.808781][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.815204][T20882] [ 751.815204][T20882] -> #4 (&dquot->dq_lock){+.+.}-{4:4}: [ 751.822868][T20882] lock_acquire+0x1ed/0x550 [ 751.827893][T20882] __mutex_lock+0x1ac/0xee0 [ 751.832925][T20882] dqget+0x6e6/0xeb0 [ 751.837339][T20882] dquot_transfer+0x482/0x6d0 [ 751.842537][T20882] ext4_setattr+0xb49/0x1da0 [ 751.847652][T20882] notify_change+0xbcc/0xe90 [ 751.852765][T20882] chown_common+0x501/0x850 [ 751.857800][T20882] do_fchownat+0x16a/0x240 [ 751.862827][T20882] __x64_sys_lchown+0x85/0xa0 [ 751.868033][T20882] do_syscall_64+0xf3/0x230 [ 751.873067][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.879493][T20882] [ 751.879493][T20882] -> #3 (&ei->xattr_sem){++++}-{4:4}: [ 751.887153][T20882] lock_acquire+0x1ed/0x550 [ 751.892182][T20882] down_read+0xb1/0xa40 [ 751.896871][T20882] ext4_setattr+0xb37/0x1da0 [ 751.901994][T20882] notify_change+0xbcc/0xe90 [ 751.907106][T20882] chown_common+0x501/0x850 [ 751.912136][T20882] do_fchownat+0x16a/0x240 [ 751.917076][T20882] __x64_sys_chown+0x82/0x90 [ 751.922189][T20882] do_syscall_64+0xf3/0x230 [ 751.927226][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.933650][T20882] [ 751.933650][T20882] -> #2 (jbd2_handle){++++}-{0:0}: [ 751.940962][T20882] lock_acquire+0x1ed/0x550 [ 751.945988][T20882] start_this_handle+0x1eb4/0x2110 [ 751.951620][T20882] jbd2__journal_start+0x2da/0x5d0 [ 751.957251][T20882] jbd2_journal_start+0x29/0x40 [ 751.962622][T20882] ocfs2_start_trans+0x3c9/0x700 [ 751.968079][T20882] ocfs2_shutdown_local_alloc+0x218/0xa90 [ 751.974327][T20882] ocfs2_dismount_volume+0x202/0x910 [ 751.980141][T20882] generic_shutdown_super+0x13b/0x2d0 [ 751.986046][T20882] kill_block_super+0x44/0x90 [ 751.991331][T20882] deactivate_locked_super+0xc6/0x130 [ 751.997235][T20882] cleanup_mnt+0x41f/0x4b0 [ 752.002186][T20882] task_work_run+0x251/0x310 [ 752.007310][T20882] syscall_exit_to_user_mode+0x13f/0x340 [ 752.013475][T20882] do_syscall_64+0x100/0x230 [ 752.018599][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.025029][T20882] [ 752.025029][T20882] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 752.033560][T20882] lock_acquire+0x1ed/0x550 [ 752.038587][T20882] down_read+0xb1/0xa40 [ 752.043274][T20882] ocfs2_start_trans+0x3be/0x700 [ 752.048734][T20882] ocfs2_shutdown_local_alloc+0x218/0xa90 [ 752.054988][T20882] ocfs2_dismount_volume+0x202/0x910 [ 752.060809][T20882] generic_shutdown_super+0x13b/0x2d0 [ 752.066713][T20882] kill_block_super+0x44/0x90 [ 752.071910][T20882] deactivate_locked_super+0xc6/0x130 [ 752.077813][T20882] cleanup_mnt+0x41f/0x4b0 [ 752.082764][T20882] task_work_run+0x251/0x310 [ 752.087887][T20882] syscall_exit_to_user_mode+0x13f/0x340 [ 752.094053][T20882] do_syscall_64+0x100/0x230 [ 752.099177][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.105606][T20882] [ 752.105606][T20882] -> #0 (sb_internal#3){.+.+}-{0:0}: [ 752.113104][T20882] validate_chain+0x18ef/0x5920 [ 752.118493][T20882] __lock_acquire+0x1397/0x2100 [ 752.123874][T20882] lock_acquire+0x1ed/0x550 [ 752.128902][T20882] ocfs2_start_trans+0x2b9/0x700 [ 752.134362][T20882] ocfs2_acquire_dquot+0x6df/0xb70 [ 752.139995][T20882] dqget+0x772/0xeb0 [ 752.144499][T20882] dquot_set_dqblk+0x2b/0xf30 [ 752.149703][T20882] quota_setquota+0x6de/0x850 [ 752.154917][T20882] __se_sys_quotactl+0x2c4/0xa30 [ 752.160389][T20882] do_syscall_64+0xf3/0x230 [ 752.165425][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.171855][T20882] [ 752.171855][T20882] other info that might help us debug this: [ 752.171855][T20882] [ 752.182075][T20882] Chain exists of: [ 752.182075][T20882] sb_internal#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 752.182075][T20882] [ 752.199071][T20882] Possible unsafe locking scenario: [ 752.199071][T20882] [ 752.206514][T20882] CPU0 CPU1 [ 752.211873][T20882] ---- ---- [ 752.217226][T20882] lock(&ocfs2_quota_ip_alloc_sem_key); [ 752.222865][T20882] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 752.232685][T20882] lock(&ocfs2_quota_ip_alloc_sem_key); [ 752.240843][T20882] rlock(sb_internal#3); [ 752.245187][T20882] [ 752.245187][T20882] *** DEADLOCK *** [ 752.245187][T20882] [ 752.253323][T20882] 4 locks held by syz.0.6388/20882: [ 752.258598][T20882] #0: ffff88804d3020e0 (&type->s_umount_key#77){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 752.268479][T20882] #1: ffff88808992e0a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x2a3/0xb70 [ 752.278516][T20882] #2: ffff88805301c2c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x206/0x2b0 [ 752.291605][T20882] #3: ffff88805301bf60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x225/0x2b0 [ 752.303039][T20882] [ 752.303039][T20882] stack backtrace: [ 752.309004][T20882] CPU: 1 UID: 0 PID: 20882 Comm: syz.0.6388 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 752.319764][T20882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 752.329828][T20882] Call Trace: [ 752.333104][T20882] [ 752.336031][T20882] dump_stack_lvl+0x241/0x360 [ 752.340723][T20882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.345938][T20882] ? __pfx__printk+0x10/0x10 [ 752.350540][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.356175][T20882] print_circular_bug+0x13a/0x1b0 [ 752.361216][T20882] check_noncircular+0x36a/0x4a0 [ 752.366170][T20882] ? __pfx_check_noncircular+0x10/0x10 [ 752.371641][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.377283][T20882] ? lockdep_lock+0x123/0x2b0 [ 752.381967][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.387602][T20882] validate_chain+0x18ef/0x5920 [ 752.392486][T20882] ? __pfx_validate_chain+0x10/0x10 [ 752.397697][T20882] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 752.403600][T20882] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 752.409943][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.415580][T20882] ? __pfx_validate_chain+0x10/0x10 [ 752.420790][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.426427][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.432061][T20882] ? stack_depot_save_flags+0x7b4/0x940 [ 752.437615][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.443259][T20882] ? kasan_save_track+0x51/0x80 [ 752.448111][T20882] ? kasan_save_track+0x3f/0x80 [ 752.452963][T20882] ? kasan_save_free_info+0x40/0x50 [ 752.458174][T20882] ? __kasan_slab_free+0x59/0x70 [ 752.463119][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.468753][T20882] ? mark_lock+0x9a/0x360 [ 752.473094][T20882] __lock_acquire+0x1397/0x2100 [ 752.477961][T20882] lock_acquire+0x1ed/0x550 [ 752.482468][T20882] ? ocfs2_acquire_dquot+0x6df/0xb70 [ 752.487761][T20882] ? __pfx_lock_acquire+0x10/0x10 [ 752.492799][T20882] ? __pfx_lock_release+0x10/0x10 [ 752.497829][T20882] ? __pfx___might_resched+0x10/0x10 [ 752.503116][T20882] ? do_raw_spin_unlock+0x13c/0x8b0 [ 752.508319][T20882] ocfs2_start_trans+0x2b9/0x700 [ 752.513268][T20882] ? ocfs2_acquire_dquot+0x6df/0xb70 [ 752.518735][T20882] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 752.524205][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.529838][T20882] ? _raw_spin_unlock+0x28/0x50 [ 752.534694][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.540327][T20882] ? ocfs2_qinfo_unlock+0x121/0x150 [ 752.545535][T20882] ocfs2_acquire_dquot+0x6df/0xb70 [ 752.550680][T20882] ? __pfx_ocfs2_acquire_dquot+0x10/0x10 [ 752.556314][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.561947][T20882] ? do_raw_spin_unlock+0x13c/0x8b0 [ 752.567145][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.572785][T20882] ? percpu_counter_add_batch+0xff/0x1f0 [ 752.578436][T20882] dqget+0x772/0xeb0 [ 752.582341][T20882] dquot_set_dqblk+0x2b/0xf30 [ 752.587025][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.592664][T20882] ? __might_fault+0xc6/0x120 [ 752.597343][T20882] quota_setquota+0x6de/0x850 [ 752.602036][T20882] ? __pfx_quota_setquota+0x10/0x10 [ 752.607256][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.612896][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.618703][T20882] ? do_quotactl+0x6cc/0x870 [ 752.623311][T20882] __se_sys_quotactl+0x2c4/0xa30 [ 752.628266][T20882] ? __pfx___se_sys_quotactl+0x10/0x10 [ 752.633739][T20882] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 752.640077][T20882] ? do_syscall_64+0x100/0x230 [ 752.644857][T20882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.650578][T20882] do_syscall_64+0xf3/0x230 [ 752.655097][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.661003][T20882] RIP: 0033:0x7fb336585d29 [ 752.665416][T20882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.685021][T20882] RSP: 002b:00007fb3373db038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 752.693441][T20882] RAX: ffffffffffffffda RBX: 00007fb336775fa0 RCX: 00007fb336585d29 [ 752.701414][T20882] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffff80000801 [ 752.709381][T20882] RBP: 00007fb336601a20 R08: 0000000000000000 R09: 0000000000000000 [ 752.717355][T20882] R10: 0000000020000440 R11: 0000000000000246 R12: 0000000000000000 [ 752.725324][T20882] R13: 0000000000000000 R14: 00007fb336775fa0 R15: 00007ffde401f888 [ 752.733302][T20882] [ 752.761021][T17709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.770564][T17709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.792374][T17709] veth1_macvtap: left promiscuous mode [ 752.797884][T17709] veth0_macvtap: left promiscuous mode [ 752.806072][T17709] veth1_vlan: left promiscuous mode [ 752.813159][T17709] veth0_vlan: left promiscuous mode [ 752.827241][ T6212] ocfs2: Unmounting device (7,0) on (node local) [ 753.014868][T17709] team0 (unregistering): Port device team_slave_1 removed [ 753.043455][T17709] team0 (unregistering): Port device team_slave_0 removed [ 753.172604][T20753] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.180647][T20753] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.188240][T20753] bridge_slave_1: entered allmulticast mode [ 753.227155][T20753] bridge_slave_1: entered promiscuous mode [ 753.287259][T20753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.315927][T20753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.344354][ T5138] Bluetooth: hci0: command tx timeout [ 753.375306][T20753] team0: Port device team_slave_0 added [ 753.385502][T20753] team0: Port device team_slave_1 added [ 753.433597][T20753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.445158][T20753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.478335][T20753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.493822][T20753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.510427][T20753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.543121][T20753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.589122][T20753] hsr_slave_0: entered promiscuous mode [ 753.596808][T20753] hsr_slave_1: entered promiscuous mode [ 753.603855][T20753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.614519][T20753] Cannot create hsr debugfs directory [ 753.726786][T20753] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 753.738842][T20753] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 753.748481][T20753] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 753.758331][T20753] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 753.830345][T20753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.861609][T20753] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.885103][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.892225][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.906585][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.913691][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.094811][T20753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.297309][T20753] veth0_vlan: entered promiscuous mode [ 754.316341][T20753] veth1_vlan: entered promiscuous mode [ 754.346139][T20753] veth0_macvtap: entered promiscuous mode [ 754.359481][T20753] veth1_macvtap: entered promiscuous mode [ 754.380025][T20753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.395275][T20753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.406027][T20753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.421834][T20753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.435377][T20753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.446115][T20753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.456349][T20753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.466848][T20753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.477008][T20753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.487454][T20753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.498144][T20753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.524311][T20753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.535455][T20753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.545500][T20753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.556682][T20753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.566545][T20753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.577028][T20753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.587123][T20753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.597642][T20753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.607517][T20753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.618042][T20753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.628798][T20753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.639573][T20753] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.648638][T20753] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.657852][T20753] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.666573][T20753] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.699442][T20753] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 754.731603][T17709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.736486][T20753] ieee80211 phy57: Selected rate control algorithm 'minstrel_ht' [ 754.747236][T17709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.785236][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.796135][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50