last executing test programs:
2.325787486s ago: executing program 3 (id=1419):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FICLONE(r0, 0x40049409, r0)
2.147316733s ago: executing program 3 (id=1422):
r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x5, 0xfffffffd, 0x50323234, 0x4, 0xfffffffb, 0x4, 0x2, 0x4, 0x0, 0x4, 0x1, 0x7}})
2.046505177s ago: executing program 3 (id=1424):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x33}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x71}]}}}]}, 0x40}}, 0x0)
1.821417846s ago: executing program 3 (id=1429):
setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
1.689673771s ago: executing program 2 (id=1431):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000400000000000900020073797a310000000014000780080013400000000008000640000000000500050002000000050001000600000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x10)
1.614815425s ago: executing program 3 (id=1433):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x4}, 0x8)
1.47125715s ago: executing program 2 (id=1435):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x2a, 0x2, @val=@tcx}, 0x40)
1.422972852s ago: executing program 1 (id=1436):
syz_clone(0xe8344400, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x3c, 0x9, 0xfc, 0x7}, {0x6, 0x1, 0x8, 0x3}]})
1.422322612s ago: executing program 3 (id=1437):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000000c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c67727071756f74612c696e6f646536342c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c6c6f63616c666c6f636b732c00a5ac95942a38e6bfeea96108fa50b58440ef6041bea5aa31e2dd2532458d802e41aa4599ba680aa7bd6d04004258b7a8902f078e686e0ad0017a9f40cab7e8ed9483c468cbe8b5111b52c62ae7bd99dde7768746459302ef1adff359935a901d9a93c2ee3190699fae61911c9956efa1b72ad683a0acc6d36539173f0f11dd2011263c662522d12cca07a4a3d593ee6ca5954cd0b5674f92faa9f828438f930b721d144e46001a56724219f14c2c58ef31aee3852b15bddc24bade32ed8f3cba254e2dbc6baf27"], 0x0, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00')
1.185861632s ago: executing program 2 (id=1439):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@generic={0x8})
1.106868755s ago: executing program 0 (id=1440):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
close(r0)
1.088420045s ago: executing program 1 (id=1441):
r0 = syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f0000000680)={[{@gid}, {@uid}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x4, 0x339, &(0x7f0000000140)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a6e43c, &(0x7f0000000f80)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES8=r0, @ANYBLOB="f1bcca05ed588d63a576cc3afd51baf29cde0400000092f4e66ff7ef22aa9af727ceae8a8ec95fc1b73083de2de825a0cb2b0be774fdb33650d7dace27c16bc23b2f7c7fb72585548939698f280d138aa9255a8a924008f8477e82ba11cdb11efd5ca2f1ab049ce2cc7815d2daf8daea25533a558d561654faf5e0924f1376174f374d664fad4a6ab24ec000ccace822e7f9426e8e5de1fe58085a0ae86fd02a118b9365961834d46208b9fb4c91a1fa962a8b00a9717fcbb46c2400dc2e319379ea1e5a07aeb3f9cd4e648df445a1b4213e732300000000000010000758027a472e7d263ef567a84166f26ee56e701c63a8863787889bf1c90fccf31954a940c8b584ca89a512f28edec08eb1c0823c028840eeaf3f5d8769023c01ac63f7f959571e8e899b43c293bc21a2b833e5c9c703c4cfa063dd050045706bde3d7ac373ab04b62b4111b59eabd436dd97e788a36ef25bad99beec474e667589d37100ec36292c15c6", @ANYRESHEX, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES64, @ANYRES8], 0x5, 0x0, &(0x7f0000000000))
971.020451ms ago: executing program 2 (id=1442):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000000040)={[{@fat=@discard}, {@fat=@nfs}, {@fat=@allow_utime}, {@dots}, {@fat=@check_strict}]}, 0x1, 0x22d, &(0x7f0000000300)="$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")
rename(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
903.267323ms ago: executing program 0 (id=1443):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x21}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x110)
740.08526ms ago: executing program 1 (id=1444):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x2e8, 0xb0, 0x2e8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x34, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
663.004113ms ago: executing program 0 (id=1445):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8000, 0x100000001, 0x10000, 0x1}, 0x1c)
614.032415ms ago: executing program 2 (id=1446):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')
546.674148ms ago: executing program 0 (id=1447):
r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0xffffffff, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)
399.122033ms ago: executing program 1 (id=1448):
r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='personality\x00')
pread64(r0, &(0x7f0000000180)=""/252, 0xfc, 0x0)
346.900176ms ago: executing program 0 (id=1449):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
224.536381ms ago: executing program 2 (id=1450):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)={0x0, 0xb, 0x4, "92102ef7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
170.772553ms ago: executing program 1 (id=1451):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'batadv_slave_1\x00', {}, {}, 0x2b, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0xbe75}}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6_vti0\x00', {0x0, 0x0, 0x5, 0x0, 0x162a0916, 0x7, 0x3ff, 0x88}}}, @common=@inet=@hashlimit3={{0x158}, {'dvmrp0\x00', {0x3, 0x0, 0x41, 0x0, 0x1000, 0x1000, 0x6, 0x3, 0x80, 0x40}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
788.47µs ago: executing program 1 (id=1452):
r0 = timerfd_create(0x9, 0x800)
timerfd_settime(r0, 0x2, &(0x7f00000006c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
0s ago: executing program 0 (id=1460):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1)
setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000040)=0x10, 0x4)
kernel console output (not intermixed with test programs):
icast mode
[ 63.128361][ T5787] bridge_slave_1: entered promiscuous mode
[ 63.147887][ T5783] hsr_slave_0: entered promiscuous mode
[ 63.154641][ T5783] hsr_slave_1: entered promiscuous mode
[ 63.173143][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 63.180354][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 63.206399][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 63.218393][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 63.225411][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 63.251531][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 63.264281][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 63.271232][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 63.297211][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 63.358010][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 63.374943][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 63.413046][ T5788] hsr_slave_0: entered promiscuous mode
[ 63.419513][ T5788] hsr_slave_1: entered promiscuous mode
[ 63.425859][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 63.434331][ T5788] Cannot create hsr debugfs directory
[ 63.464151][ T5793] hsr_slave_0: entered promiscuous mode
[ 63.470376][ T5793] hsr_slave_1: entered promiscuous mode
[ 63.476413][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 63.484832][ T5793] Cannot create hsr debugfs directory
[ 63.515356][ T5787] team0: Port device team_slave_0 added
[ 63.551593][ T5787] team0: Port device team_slave_1 added
[ 63.630286][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 63.637350][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 63.644523][ T51] Bluetooth: hci0: command tx timeout
[ 63.668608][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 63.696821][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 63.704056][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 63.730028][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 63.740621][ T51] Bluetooth: hci2: command tx timeout
[ 63.803593][ T51] Bluetooth: hci1: command tx timeout
[ 63.809258][ T5792] Bluetooth: hci3: command tx timeout
[ 63.842251][ T5787] hsr_slave_0: entered promiscuous mode
[ 63.848950][ T5787] hsr_slave_1: entered promiscuous mode
[ 63.855244][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 63.862792][ T5787] Cannot create hsr debugfs directory
[ 63.968432][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 63.980511][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 63.995735][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 64.009980][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 64.104967][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 64.114866][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 64.139584][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 64.149524][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 64.209121][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 64.236718][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 64.246619][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 64.258101][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 64.349273][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 64.359114][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 64.379136][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 64.388707][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 64.470932][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[ 64.508378][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[ 64.538578][ T2890] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.545888][ T2890] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 64.576491][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[ 64.588540][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[ 64.613579][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[ 64.621785][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.628979][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 64.652949][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[ 64.682805][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[ 64.694697][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[ 64.712799][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.719947][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 64.729694][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.736779][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 64.748121][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.755221][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 64.774319][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.781418][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 64.810386][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.817494][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 64.827782][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.834944][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 64.861132][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 65.313175][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 65.410938][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 65.440516][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 65.459303][ T5783] veth0_vlan: entered promiscuous mode
[ 65.482576][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 65.500755][ T5783] veth1_vlan: entered promiscuous mode
[ 65.536358][ T5788] veth0_vlan: entered promiscuous mode
[ 65.571128][ T5788] veth1_vlan: entered promiscuous mode
[ 65.594706][ T5783] veth0_macvtap: entered promiscuous mode
[ 65.605319][ T5783] veth1_macvtap: entered promiscuous mode
[ 65.617872][ T5793] veth0_vlan: entered promiscuous mode
[ 65.645034][ T5787] veth0_vlan: entered promiscuous mode
[ 65.654595][ T5793] veth1_vlan: entered promiscuous mode
[ 65.680455][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 65.691207][ T5787] veth1_vlan: entered promiscuous mode
[ 65.707531][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 65.718805][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.728200][ T5792] Bluetooth: hci0: command tx timeout
[ 65.736466][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.745279][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.753998][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 65.803063][ T5787] veth0_macvtap: entered promiscuous mode
[ 65.808900][ T5792] Bluetooth: hci2: command tx timeout
[ 65.828927][ T5788] veth0_macvtap: entered promiscuous mode
[ 65.838304][ T5788] veth1_macvtap: entered promiscuous mode
[ 65.855842][ T5793] veth0_macvtap: entered promiscuous mode
[ 65.877058][ T5787] veth1_macvtap: entered promiscuous mode
[ 65.883887][ T5792] Bluetooth: hci1: command tx timeout
[ 65.889852][ T5792] Bluetooth: hci3: command tx timeout
[ 65.904706][ T5793] veth1_macvtap: entered promiscuous mode
[ 65.920979][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 65.931688][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 65.943967][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 65.980914][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 65.991482][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 66.003161][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 66.018567][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 66.029164][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 66.039385][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 66.050204][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 66.062298][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 66.080758][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.089989][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.099094][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.107895][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.122557][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 66.134191][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 66.144262][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 66.155108][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 66.167404][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 66.179264][ T2904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.182559][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.190503][ T2904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.197652][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.213379][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.222079][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.237180][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 66.247852][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 66.258047][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 66.268764][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 66.278784][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 66.289849][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 66.301410][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 66.340974][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.341957][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 66.360498][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.361993][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 66.379201][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 66.390114][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 66.400011][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 66.410665][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 66.422290][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 66.450943][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.460765][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.469624][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.478631][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 66.678856][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.703987][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.737865][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.783432][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.813531][ T2904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.823146][ T2904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.909766][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.926125][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.957608][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.972137][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 66.985730][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 66.993908][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.581695][ T5897] syz.1.13[5897]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 67.617763][ T5897] loop1: detected capacity change from 0 to 256
[ 67.655301][ T5897] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 67.813445][ T5792] Bluetooth: hci0: command tx timeout
[ 67.883841][ T5792] Bluetooth: hci2: command tx timeout
[ 67.974899][ T5792] Bluetooth: hci3: command tx timeout
[ 67.980339][ T5792] Bluetooth: hci1: command tx timeout
[ 68.228434][ T5916] loop0: detected capacity change from 0 to 1024
[ 68.270033][ T5916] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[ 68.403866][ T5916] hfsplus: filesystem is marked journaled, leaving read-only.
[ 68.745762][ T5934] openvswitch: netlink: Message has 4 unknown bytes.
[ 68.835412][ T5937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32'.
[ 68.864498][ T5937] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 69.094946][ T5949] loop1: detected capacity change from 0 to 16
[ 69.119830][ T5946] loop0: detected capacity change from 0 to 128
[ 69.124739][ T5949] =======================================================
[ 69.124739][ T5949] WARNING: The mand mount option has been deprecated and
[ 69.124739][ T5949] and is ignored by this kernel. Remove the mand
[ 69.124739][ T5949] option from the mount to silence this warning.
[ 69.124739][ T5949] =======================================================
[ 69.251598][ T5949] erofs: (device loop1): mounted with root inode @ nid 36.
[ 69.286746][ T5946] FAT-fs (loop0): error, corrupted directory (invalid entries)
[ 69.331351][ T5949] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[ 69.341608][ T5946] FAT-fs (loop0): Filesystem has been set read-only
[ 69.361555][ T5949] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 69.397429][ T5949] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[ 69.424488][ T5949] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 69.443605][ T5949] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[ 69.473587][ T5949] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 69.505075][ T5949] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[ 69.538112][ T5949] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel
[ 69.551037][ T5958] overlayfs: conflicting options: userxattr,redirect_dir=follow
[ 69.586198][ T5949] erofs: (device loop1): z_erofs_read_folio: read error -95 @ 0 of nid 89
[ 69.610642][ T27] audit: type=1800 audit(1764591922.576:2): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.38" name="file2" dev="loop1" ino=89 res=0 errno=0
[ 69.805355][ T5968] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.45'.
[ 69.846866][ T5968] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes.
[ 69.893985][ T5792] Bluetooth: hci0: command tx timeout
[ 69.946488][ T5972] loop1: detected capacity change from 0 to 1024
[ 69.959508][ T5973] loop2: detected capacity change from 0 to 128
[ 69.966444][ T5792] Bluetooth: hci2: command tx timeout
[ 69.988098][ T5973] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 70.018687][ T5973] hpfs: filesystem error: improperly stopped
[ 70.043590][ T5792] Bluetooth: hci1: command tx timeout
[ 70.049126][ T51] Bluetooth: hci3: command tx timeout
[ 70.064718][ T5973] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 70.072995][ T5973] hpfs: You really don't want any checks? You are crazy...
[ 70.082325][ T5973] hpfs: hpfs_map_sector(): read error
[ 70.088129][ T5973] hpfs: code page support is disabled
[ 70.095167][ T5973] hpfs: hpfs_map_4sectors(): unaligned read
[ 70.101670][ T5973] hpfs: hpfs_map_4sectors(): unaligned read
[ 70.107692][ T5973] hpfs: filesystem error: unable to find root dir
[ 70.339970][ T5951] loop3: detected capacity change from 0 to 32768
[ 70.362860][ T5981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'.
[ 70.477036][ T5951] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[ 70.577688][ T5951] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 70.609932][ T5996] loop2: detected capacity change from 0 to 128
[ 70.701549][ T5996] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 70.743420][ T5951] XFS (loop3): Ending clean mount
[ 70.775871][ T5996] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 70.805020][ T5951] XFS (loop3): Quotacheck needed: Please wait.
[ 70.846747][ T5996] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 3 (only 1 groups)
[ 70.945913][ T5951] XFS (loop3): Quotacheck: Done.
[ 70.984204][ T6005] binder: 6004:6005 ioctl c018620c 2000000001c0 returned -22
[ 71.024872][ T5788] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 71.050927][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 71.489981][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.496638][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.574701][ T6025] loop3: detected capacity change from 0 to 1024
[ 71.582006][ T6025] EXT4-fs: inline encryption not supported
[ 71.615053][ T6027] loop0: detected capacity change from 0 to 1024
[ 71.707184][ T6025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 71.726024][ T6027] hfsplus: invalid extended attribute record
[ 71.850790][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 71.984620][ T2904] hfsplus: b-tree write err: -5, ino 4
[ 72.094567][ T6040] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[ 72.592150][ T6059] comedi comedi0: s526: I/O port conflict (0x1,64)
[ 72.608558][ T5785] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 72.814692][ T5785] usb 3-1: Using ep0 maxpacket: 8
[ 72.854449][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 72.877519][ T5785] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 72.893163][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 72.932393][ T5785] usb 3-1: Product: syz
[ 72.953331][ T5785] usb 3-1: Manufacturer: syz
[ 72.959021][ T5785] usb 3-1: SerialNumber: syz
[ 72.977243][ T5785] usb 3-1: config 0 descriptor??
[ 73.027233][ T5785] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[ 73.343832][ T8] usb 3-1: USB disconnect, device number 2
[ 73.483022][ T6099] loop0: detected capacity change from 0 to 512
[ 73.540432][ T6099] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.104: inode has both inline data and extents flags
[ 73.582296][ T6099] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.104: couldn't read orphan inode 15 (err -117)
[ 73.606048][ T6099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 73.716268][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'.
[ 73.789003][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 73.843606][ T6112] loop3: detected capacity change from 0 to 1024
[ 74.011541][ T49] hfsplus: b-tree write err: -5, ino 4
[ 74.444703][ T6132] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (4)
[ 74.482386][ T6116] loop1: detected capacity change from 0 to 32768
[ 74.540543][ T6116] JBD2: Ignoring recovery information on journal
[ 74.553561][ T5785] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 74.604085][ T6116] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 74.643868][ T8] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[ 74.762005][ T5785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 74.765968][ T5793] ocfs2: Unmounting device (7,1) on (node local)
[ 74.781587][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[ 74.797653][ T5785] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 74.808469][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 74.819748][ T5785] usb 3-1: config 0 descriptor??
[ 74.867577][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 74.892691][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 74.919074][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 74.933543][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 74.952564][ T8] usb 4-1: SerialNumber: syz
[ 74.969885][ T8] usb 4-1: 0:2 : does not exist
[ 75.270380][ T5785] Bluetooth: Can't get state to change to load configuration err
[ 75.283705][ T5785] Bluetooth: Loading sysconfig file failed
[ 75.289679][ T5785] ath3k: probe of 3-1:0.0 failed with error -16
[ 75.314007][ T5785] usb 3-1: USB disconnect, device number 3
[ 75.374567][ T6140] loop0: detected capacity change from 0 to 32768
[ 75.413606][ T6140] (syz.0.123,6140,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 75.444448][ T6140] (syz.0.123,6140,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 75.451870][ T6146] netlink: 'syz.1.126': attribute type 1 has an invalid length.
[ 75.471468][ T5869] usb 4-1: USB disconnect, device number 2
[ 75.502542][ T6140] JBD2: Ignoring recovery information on journal
[ 75.562596][ T6140] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 75.710592][ T5783] ocfs2: Unmounting device (7,0) on (node local)
[ 75.736156][ T6150] loop1: detected capacity change from 0 to 4096
[ 76.009936][ T6155] loop0: detected capacity change from 0 to 512
[ 76.091817][ T6155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 76.159789][ T6155] EXT4-fs error (device loop0): __ext4_fill_super:5497: inode #2: comm syz.0.130: inode has both inline data and extents flags
[ 76.206845][ T6161] netlink: 'syz.1.131': attribute type 1 has an invalid length.
[ 76.283605][ T6155] EXT4-fs (loop0): get root inode failed
[ 76.289315][ T6155] EXT4-fs (loop0): mount failed
[ 76.508855][ T6166] loop1: detected capacity change from 0 to 1024
[ 76.525085][ T6168] loop3: detected capacity change from 0 to 256
[ 76.558594][ T6166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 76.696261][ T6156] loop2: detected capacity change from 0 to 32768
[ 76.697609][ T6168] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[ 76.728017][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 76.889179][ T6156] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 76.921712][ T6168] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[ 76.971445][ T6168] exFAT-fs (loop3): Filesystem has been set read-only
[ 77.053132][ T6156] XFS (loop2): Ending clean mount
[ 77.127470][ T6156] XFS (loop2): Quotacheck needed: Please wait.
[ 77.215083][ T6156] XFS (loop2): Quotacheck: Done.
[ 77.386728][ T6193] loop0: detected capacity change from 0 to 1024
[ 77.446879][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 77.698141][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'.
[ 77.714183][ T11] hfsplus: b-tree write err: -5, ino 4
[ 77.753374][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'.
[ 77.909144][ T6205] netlink: 'syz.3.150': attribute type 33 has an invalid length.
[ 77.943583][ T6205] netlink: 152 bytes leftover after parsing attributes in process `syz.3.150'.
[ 78.821702][ T6251] capability: warning: `syz.2.172' uses deprecated v2 capabilities in a way that may be insecure
[ 78.860446][ T6253] nfs: Unexpected value for 'lock'
[ 79.150195][ T6265] autofs4:pid:6265:autofs_fill_super: called with bogus options
[ 79.278845][ T6271] netlink: 'syz.3.181': attribute type 2 has an invalid length.
[ 79.309851][ T6271] netlink: 723 bytes leftover after parsing attributes in process `syz.3.181'.
[ 79.714826][ T27] audit: type=1326 audit(1764591932.686:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 79.768724][ T27] audit: type=1326 audit(1764591932.716:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 79.809124][ T27] audit: type=1326 audit(1764591932.766:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 79.916747][ T6299] libceph: resolve 'c' (ret=-3): failed
[ 79.930530][ T27] audit: type=1326 audit(1764591932.766:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 79.973140][ T27] audit: type=1326 audit(1764591932.766:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 80.225025][ T6313] loop3: detected capacity change from 0 to 8
[ 81.148198][ T6352] xt_hashlimit: size too large, truncated to 1048576
[ 81.168205][ T6352] xt_hashlimit: max too large, truncated to 1048576
[ 81.698801][ T27] audit: type=1326 audit(1764591934.666:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfbf8f749 code=0x7ffc0000
[ 81.746729][ T28] cfg80211: failed to load regulatory.db
[ 81.774446][ T27] audit: type=1326 audit(1764591934.666:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfbf8f749 code=0x7ffc0000
[ 81.833369][ T27] audit: type=1326 audit(1764591934.716:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f9cfbf8f749 code=0x7ffc0000
[ 81.883318][ T27] audit: type=1326 audit(1764591934.716:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfbf8f749 code=0x7ffc0000
[ 81.933020][ T27] audit: type=1326 audit(1764591934.716:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfbf8f749 code=0x7ffc0000
[ 81.973353][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 82.016040][ T6346] loop1: detected capacity change from 0 to 32768
[ 82.039000][ T6346] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 82.054195][ T6346] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 82.153451][ T9] usb 1-1: Using ep0 maxpacket: 32
[ 82.173066][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 82.203569][ T6346] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 82.214619][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 82.230353][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 82.241163][ T9] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 82.263375][ T9] usb 1-1: Product: syz
[ 82.270468][ T786] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 82.284384][ T786] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 82.295990][ T9] usb 1-1: Manufacturer: syz
[ 82.335433][ T9] hub 1-1:4.0: USB hub found
[ 82.418879][ T786] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 134ms
[ 82.430570][ T786] gfs2: fsid=syz:syz.0: jid=0: Done
[ 82.437141][ T6346] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 82.547044][ T9] hub 1-1:4.0: config failed, hub has too many ports! (err -19)
[ 82.693495][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 82.746983][ T6346] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 82.900937][ T8] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[ 82.919548][ T8] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 82.932424][ T9] usb 1-1: USB disconnect, device number 2
[ 82.951849][ T8] usb 4-1: config 220 has no interface number 2
[ 82.965279][ T8] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 82.979033][ T8] usb 4-1: config 220 interface 0 has no altsetting 0
[ 82.991005][ T8] usb 4-1: config 220 interface 76 has no altsetting 0
[ 83.000177][ T8] usb 4-1: config 220 interface 1 has no altsetting 0
[ 83.000922][ T5793] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[ 83.010078][ T8] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 83.040981][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 83.045578][ T5793] CPU: 1 PID: 5793 Comm: syz-executor Not tainted syzkaller #0
[ 83.056531][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 83.057693][ T8] usb 4-1: Product: syz
[ 83.066590][ T5793] Call Trace:
[ 83.066602][ T5793]
[ 83.066613][ T5793] dump_stack_lvl+0x16c/0x230
[ 83.066650][ T5793] ? show_regs_print_info+0x20/0x20
[ 83.066670][ T5793] ? load_image+0x3b0/0x3b0
[ 83.066693][ T5793] ? do_raw_spin_unlock+0x121/0x230
[ 83.081061][ T8] usb 4-1: Manufacturer: syz
[ 83.081698][ T5793] gfs2_assert_warn_i+0x193/0x2c0
[ 83.093677][ T8] usb 4-1: SerialNumber: syz
[ 83.096541][ T5793] gfs2_qd_dispose+0x4aa/0x5b0
[ 83.096568][ T5793] gfs2_quota_cleanup+0x406/0x6d0
[ 83.120559][ T5793] ? spin_lock_bucket+0x150/0x150
[ 83.125597][ T5793] ? __might_sleep+0xe0/0xe0
[ 83.130202][ T5793] ? gfs2_ail_empty_tr+0x2f0/0x2f0
[ 83.135327][ T5793] ? gfs2_quota_sync+0x591/0x5a0
[ 83.140301][ T5793] gfs2_make_fs_ro+0x27f/0x300
[ 83.145172][ T5793] ? gfs2_dinode_out+0xb10/0xb10
[ 83.150124][ T5793] ? __lock_acquire+0x7c80/0x7c80
[ 83.155165][ T5793] ? __rwlock_init+0x150/0x150
[ 83.159952][ T5793] ? do_raw_spin_unlock+0x121/0x230
[ 83.165171][ T5793] gfs2_put_super+0x224/0x930
[ 83.169866][ T5793] ? gfs2_evict_inode+0x1220/0x1220
[ 83.175080][ T5793] generic_shutdown_super+0x134/0x2b0
[ 83.180472][ T5793] kill_block_super+0x44/0x90
[ 83.185166][ T5793] deactivate_locked_super+0x97/0x100
[ 83.189400][ T6412] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss!
[ 83.190630][ T5793] cleanup_mnt+0x429/0x4c0
[ 83.190658][ T5793] task_work_run+0x1ce/0x250
[ 83.190683][ T5793] ? task_work_cancel+0x240/0x240
[ 83.214345][ T5793] ? exit_to_user_mode_loop+0x3b/0x110
[ 83.219828][ T5793] exit_to_user_mode_loop+0xe6/0x110
[ 83.225134][ T5793] exit_to_user_mode_prepare+0xf6/0x180
[ 83.230702][ T5793] syscall_exit_to_user_mode+0x1a/0x50
[ 83.236177][ T5793] do_syscall_64+0x61/0xb0
[ 83.240608][ T5793] ? clear_bhb_loop+0x40/0x90
[ 83.245302][ T5793] ? clear_bhb_loop+0x40/0x90
[ 83.250000][ T5793] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 83.255913][ T5793] RIP: 0033:0x7ff518190a77
[ 83.260350][ T5793] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 83.273545][ T6414] cgroup: name respecified
[ 83.279948][ T5793] RSP: 002b:00007ffcfbe2f158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 83.279972][ T5793] RAX: 0000000000000000 RBX: 00007ff518213d7d RCX: 00007ff518190a77
[ 83.279983][ T5793] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfbe2f210
[ 83.279993][ T5793] RBP: 00007ffcfbe2f210 R08: 0000000000000000 R09: 0000000000000000
[ 83.280003][ T5793] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcfbe302a0
[ 83.280014][ T5793] R13: 00007ff518213d7d R14: 0000000000014389 R15: 00007ffcfbe302e0
[ 83.280039][ T5793]
[ 83.475019][ T8] usb 4-1: selecting invalid altsetting 0
[ 83.511273][ T8] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[ 83.528021][ T8] usb 4-1: No valid video chain found.
[ 83.559732][ T8] usb 4-1: selecting invalid altsetting 0
[ 83.578379][ T8] usbtest: probe of 4-1:220.1 failed with error -22
[ 83.610858][ T8] usb 4-1: USB disconnect, device number 3
[ 83.887225][ T6432] loop1: detected capacity change from 0 to 1024
[ 84.326353][ T6430] syz.0.258 (6430): drop_caches: 2
[ 84.663552][ T6456] netlink: 'syz.1.269': attribute type 5 has an invalid length.
[ 84.670281][ T6458] netlink: 'syz.2.271': attribute type 1 has an invalid length.
[ 84.692831][ T6458] netlink: 228 bytes leftover after parsing attributes in process `syz.2.271'.
[ 85.238486][ T6454] loop3: detected capacity change from 0 to 32768
[ 85.258538][ T6454] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.270 (6454)
[ 85.315802][ T6454] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 85.339595][ T6454] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[ 85.366385][ T6454] BTRFS info (device loop3): force zlib compression, level 3
[ 85.383373][ T5868] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 85.413436][ T6454] BTRFS info (device loop3): force clearing of disk cache
[ 85.420600][ T6454] BTRFS info (device loop3): setting nodatasum
[ 85.443334][ T6454] BTRFS info (device loop3): allowing degraded mounts
[ 85.450173][ T6454] BTRFS info (device loop3): enabling disk space caching
[ 85.473327][ T6454] BTRFS info (device loop3): disk space caching is enabled
[ 85.587532][ T6454] BTRFS info (device loop3): auto enabling async discard
[ 85.603340][ T5868] usb 2-1: Using ep0 maxpacket: 16
[ 85.615813][ T5868] usb 2-1: config 254 has an invalid interface number: 235 but max is 0
[ 85.618801][ T6454] BTRFS info (device loop3): rebuilding free space tree
[ 85.633401][ T5868] usb 2-1: config 254 has no interface number 0
[ 85.639808][ T5868] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[ 85.656322][ T5868] usb 2-1: config 254 interface 235 has no altsetting 0
[ 85.666018][ T5868] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[ 85.683550][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5
[ 85.692335][ T5868] usb 2-1: Product: syz
[ 85.696597][ T5868] usb 2-1: Manufacturer: syz
[ 85.701275][ T5868] usb 2-1: SerialNumber: syz
[ 85.709022][ T6476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 85.760715][ T6454] BTRFS info (device loop3): disabling free space tree
[ 85.766712][ T6481] loop0: detected capacity change from 0 to 32768
[ 85.779994][ T6454] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 85.800442][ T6454] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 85.822655][ T6481] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 85.903423][ T6454] BTRFS info (device loop3): balance: start -susage=32768,usage=32768..0,drange=218..0,limit=60129542146
[ 85.920712][ T6454] BTRFS info (device loop3): balance: ended with status: 0
[ 85.933667][ T5868] usbtest 2-1:254.235: couldn't get endpoints, -71
[ 85.940789][ T5868] usbtest: probe of 2-1:254.235 failed with error -71
[ 85.961401][ T5868] usb 2-1: USB disconnect, device number 2
[ 86.018139][ T6481] XFS (loop0): Ending clean mount
[ 86.052229][ T5788] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 86.188851][ T5783] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 86.272983][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.290'.
[ 86.380570][ T6518] veth3: entered allmulticast mode
[ 87.112381][ T6544] loop2: detected capacity change from 0 to 2048
[ 87.155213][ T6544] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 87.227863][ T6553] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 87.786610][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.315'.
[ 87.798830][ T6577] netlink: 'syz.2.317': attribute type 4 has an invalid length.
[ 87.807574][ T6577] netlink: 140 bytes leftover after parsing attributes in process `syz.2.317'.
[ 87.863470][ T5868] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 88.059775][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 88.071017][ T6587] tmpfs: Bad value for 'nr_blocks'
[ 88.082156][ T5868] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 88.110507][ T5868] usb 2-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00
[ 88.127539][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 88.140559][ T5868] usb 2-1: Product: syz
[ 88.147084][ T5868] usb 2-1: Manufacturer: syz
[ 88.157185][ T5868] usb 2-1: SerialNumber: syz
[ 88.175354][ T27] kauditd_printk_skb: 1 callbacks suppressed
[ 88.175365][ T27] audit: type=1326 audit(1764591941.146:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67f18f749 code=0x7ffc0000
[ 88.213801][ T5868] cdc_mbim 2-1:1.0: MBIM functional descriptor missing
[ 88.220713][ T5868] cdc_mbim 2-1:1.0: bind() failure
[ 88.253632][ T27] audit: type=1326 audit(1764591941.146:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67f18f749 code=0x7ffc0000
[ 88.318078][ T27] audit: type=1326 audit(1764591941.146:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa67f18f749 code=0x7ffc0000
[ 88.354867][ T27] audit: type=1326 audit(1764591941.146:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67f18f749 code=0x7ffc0000
[ 88.382565][ T27] audit: type=1326 audit(1764591941.146:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67f18f749 code=0x7ffc0000
[ 88.484275][ T8] usb 2-1: USB disconnect, device number 3
[ 89.134053][ T6627] netlink: 56 bytes leftover after parsing attributes in process `syz.1.342'.
[ 89.545717][ T6646] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 90.851252][ T6698] netlink: 220 bytes leftover after parsing attributes in process `syz.2.377'.
[ 91.933794][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 92.101868][ T6754] loop1: detected capacity change from 0 to 4096
[ 92.123570][ T6754] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[ 92.133596][ T5838] usb 4-1: Using ep0 maxpacket: 32
[ 92.155684][ T5838] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 92.184397][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 92.206112][ T5838] usb 4-1: config 0 descriptor??
[ 92.255222][ T5838] as10x_usb: device has been detected
[ 92.273154][ T5838] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 92.356689][ T5838] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 92.443724][ T5838] as10x_usb: error during firmware upload part1
[ 92.466898][ T5838] Registered device nBox DVB-T Dongle
[ 92.481793][ T5838] usb 4-1: USB disconnect, device number 4
[ 92.584318][ T5838] Unregistered device nBox DVB-T Dongle
[ 92.598921][ T5838] as10x_usb: device has been disconnected
[ 92.743517][ T6764] warning: `syz.1.408' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 92.876371][ T6768] libceph: resolve '0' (ret=-3): failed
[ 92.902228][ T6758] loop0: detected capacity change from 0 to 32768
[ 92.962520][ T6758] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 93.050455][ T6758] XFS (loop0): Ending clean mount
[ 93.088855][ T6758] XFS (loop0): Quotacheck needed: Please wait.
[ 93.204430][ T6758] XFS (loop0): Quotacheck: Done.
[ 93.268112][ T6786] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 93.287614][ T6786] overlayfs: missing 'lowerdir'
[ 93.297676][ T6788] program syz.2.416 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 93.368330][ T5783] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 93.520098][ T6794] 8021q: adding VLAN 0 to HW filter on device bond1
[ 93.674934][ T6802] program syz.1.424 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 93.925107][ T6810] loop0: detected capacity change from 0 to 24
[ 93.982109][ T6810] MTD: Attempt to mount non-MTD device "/dev/loop0"
[ 94.036719][ T6810] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 94.122327][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 94.259747][ T6818] netlink: 72 bytes leftover after parsing attributes in process `syz.0.430'.
[ 94.313637][ T9] usb 4-1: Using ep0 maxpacket: 32
[ 94.325558][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 94.345187][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 94.353213][ T9] usb 4-1: Product: syz
[ 94.403083][ T9] usb 4-1: Manufacturer: syz
[ 94.413192][ T9] usb 4-1: SerialNumber: syz
[ 94.427918][ T9] usb 4-1: config 0 descriptor??
[ 94.514067][ T6828] netlink: 'syz.0.435': attribute type 10 has an invalid length.
[ 94.529361][ T6828] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.435'.
[ 94.712098][ T5868] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[ 94.848830][ T9] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a
[ 94.875084][ T9] airspy 4-1:0.0: Could not detect board
[ 94.880853][ T9] airspy: probe of 4-1:0.0 failed with error -71
[ 94.911583][ T9] usb 4-1: USB disconnect, device number 5
[ 94.931790][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 94.956400][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 154, setting to 64
[ 94.993525][ T5868] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[ 95.013680][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 95.034405][ T5868] usb 2-1: config 0 descriptor??
[ 95.039073][ T6841] loop0: detected capacity change from 0 to 128
[ 95.041504][ T6824] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 95.056070][ T5868] usb 2-1: Found UVC 0.00 device (10c4:ea90)
[ 95.062966][ T5868] usb 2-1: No valid video chain found.
[ 95.094592][ T6843] loop2: detected capacity change from 0 to 1764
[ 95.168250][ T6843] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 95.319276][ T28] usb 2-1: USB disconnect, device number 4
[ 95.419652][ T6849] comedi comedi0: Minor 3 could not be opened
[ 96.330767][ T6891] netlink: 'syz.1.465': attribute type 32 has an invalid length.
[ 96.841893][ T6915] netlink: 14 bytes leftover after parsing attributes in process `syz.3.479'.
[ 96.862219][ T27] audit: type=1326 audit(1764591949.826:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 96.890147][ T6915] hsr_slave_0: left promiscuous mode
[ 96.902261][ T6915] hsr_slave_1: left promiscuous mode
[ 96.927584][ T27] audit: type=1326 audit(1764591949.826:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 96.999852][ T27] audit: type=1326 audit(1764591949.836:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 97.046807][ T27] audit: type=1326 audit(1764591949.836:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 97.073858][ T27] audit: type=1326 audit(1764591949.836:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.1.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 97.646191][ T6950] ufs: You didn't specify the type of your ufs filesystem
[ 97.646191][ T6950]
[ 97.646191][ T6950] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[ 97.646191][ T6950]
[ 97.646191][ T6950] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[ 97.677135][ C1] vkms_vblank_simulate: vblank timer overrun
[ 97.721177][ T6950] ufs: ufstype=old is supported read-only
[ 97.759743][ T6950] syz.1.493: attempt to access beyond end of device
[ 97.759743][ T6950] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0
[ 97.788809][ T6955] loop0: detected capacity change from 0 to 1024
[ 97.842332][ T6955] hfsplus: extend alloc file! (8192,512,17039360)
[ 97.954334][ T6960] printk: syz.2.499 (6960): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated).
[ 98.048694][ T6964] netlink: 'syz.1.501': attribute type 10 has an invalid length.
[ 98.070194][ T6964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.501'.
[ 98.094723][ T6964] bridge0: port 3(dummy0) entered blocking state
[ 98.101343][ T6964] bridge0: port 3(dummy0) entered disabled state
[ 98.111857][ T6964] dummy0: entered allmulticast mode
[ 98.119636][ T6964] dummy0: entered promiscuous mode
[ 98.146821][ T6964] bridge0: port 3(dummy0) entered blocking state
[ 98.154381][ T6964] bridge0: port 3(dummy0) entered forwarding state
[ 98.313957][ T5785] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 98.503319][ T5785] usb 4-1: Using ep0 maxpacket: 16
[ 98.510649][ T5785] usb 4-1: config 0 has no interfaces?
[ 98.519085][ T5785] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 98.523499][ T5868] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 98.538692][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 98.551098][ T5785] usb 4-1: Product: syz
[ 98.578071][ T5785] usb 4-1: Manufacturer: syz
[ 98.582695][ T5785] usb 4-1: SerialNumber: syz
[ 98.603210][ T5785] r8152-cfgselector 4-1: config 0 descriptor??
[ 98.642362][ T6979] netlink: 'syz.1.508': attribute type 33 has an invalid length.
[ 98.650352][ T6979] netlink: 152 bytes leftover after parsing attributes in process `syz.1.508'.
[ 98.661273][ T2904] bridge0: port 3(dummy0) entered disabled state
[ 98.743752][ T5868] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[ 98.751869][ T5868] usb 3-1: config 0 has no interface number 0
[ 98.783498][ T5868] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 98.803387][ T5868] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 98.825576][ T5868] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 98.843721][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 98.844057][ T5785] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[ 98.853290][ T5868] usb 3-1: Product: syz
[ 98.876909][ T5868] usb 3-1: Manufacturer: syz
[ 98.884802][ T5868] usb 3-1: SerialNumber: syz
[ 98.904081][ T5868] usb 3-1: config 0 descriptor??
[ 98.924304][ T6970] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 98.933816][ T5868] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 98.965591][ T5868] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 98.985940][ T2904] usb 4-1: config 0 descriptor??
[ 99.123033][ T5868] usb 4-1: USB disconnect, device number 6
[ 99.127737][ T2904] usb 4-1: can't set config #0, error -71
[ 99.437375][ T5785] usb 3-1: USB disconnect, device number 4
[ 99.464725][ T5785] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 99.504784][ T5785] cyberjack 3-1:0.69: device disconnected
[ 99.622593][ T6981] syz.1.509 (6981): drop_caches: 2
[ 99.868848][ T6987] loop3: detected capacity change from 0 to 4096
[ 99.906881][ T6987] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[ 100.053789][ T6995] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.515' sets config #0
[ 100.154920][ T6999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.517'.
[ 100.243887][ T7002] loop1: detected capacity change from 0 to 22
[ 100.261630][ T7002] MTD: Attempt to mount non-MTD device "/dev/loop1"
[ 100.313632][ T7002] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 100.472746][ T7009] loop0: detected capacity change from 0 to 2048
[ 100.548313][ T7005] syz.3.520 (7005): drop_caches: 2
[ 100.690013][ T5838] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 100.888357][ T7024] libceph: resolve 'c' (ret=-3): failed
[ 100.910235][ T5838] usb 3-1: Using ep0 maxpacket: 16
[ 100.941372][ T5838] usb 3-1: config 0 has no interfaces?
[ 100.952851][ T5838] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 100.982625][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 101.011377][ T5838] usb 3-1: Product: syz
[ 101.024027][ T5838] usb 3-1: Manufacturer: syz
[ 101.033434][ T5838] usb 3-1: SerialNumber: syz
[ 101.050408][ T5838] r8152-cfgselector 3-1: config 0 descriptor??
[ 101.294383][ T5838] usbip-host 3-1: 3-1 is not in match_busid table... skip!
[ 101.313158][ T2890] usb 3-1: config 0 descriptor??
[ 101.373585][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 101.379074][ T7037] Cannot find add_set index 3 as target
[ 101.480784][ T7021] loop1: detected capacity change from 0 to 32768
[ 101.528553][ T5838] usb 3-1: USB disconnect, device number 5
[ 101.534600][ T2890] usb 3-1: can't set config #0, error -71
[ 101.535435][ T7021]
[ 101.535435][ T7021] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 101.535435][ T7021]
[ 101.559691][ T8] usb 1-1: Using ep0 maxpacket: 32
[ 101.573680][ T8] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 101.591532][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 101.619304][ T8] usb 1-1: config 0 descriptor??
[ 101.647279][ T8] as10x_usb: device has been detected
[ 101.660670][ T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 101.689774][ T7021]
[ 101.689774][ T7021] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 101.689774][ T7021]
[ 101.721857][ T8] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 101.731323][ T7021]
[ 101.731323][ T7021] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 101.731323][ T7021]
[ 101.748732][ T8] as10x_usb: error during firmware upload part1
[ 101.767100][ T8] Registered device nBox DVB-T Dongle
[ 101.928244][ T8] usb 1-1: USB disconnect, device number 3
[ 101.988014][ T8] Unregistered device nBox DVB-T Dongle
[ 102.001029][ T8] as10x_usb: device has been disconnected
[ 102.143695][ T7052] xt_bpf: check failed: parse error
[ 102.313109][ T7058] loop3: detected capacity change from 0 to 256
[ 102.439379][ T7058] FAT-fs (loop3): Directory bread(block 64) failed
[ 102.473570][ T7058] FAT-fs (loop3): Directory bread(block 65) failed
[ 102.494101][ T7058] FAT-fs (loop3): Directory bread(block 66) failed
[ 102.500666][ T7058] FAT-fs (loop3): Directory bread(block 67) failed
[ 102.516262][ T7058] FAT-fs (loop3): Directory bread(block 68) failed
[ 102.523187][ T7058] FAT-fs (loop3): Directory bread(block 69) failed
[ 102.529928][ T7058] FAT-fs (loop3): Directory bread(block 70) failed
[ 102.583378][ T7058] FAT-fs (loop3): Directory bread(block 71) failed
[ 102.590048][ T7058] FAT-fs (loop3): Directory bread(block 72) failed
[ 102.613365][ T7058] FAT-fs (loop3): Directory bread(block 73) failed
[ 102.636567][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.549'.
[ 102.648966][ T7073] program syz.0.550 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 103.069775][ T7087] loop2: detected capacity change from 0 to 8
[ 103.243503][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 103.421087][ T7081] loop1: detected capacity change from 0 to 32768
[ 103.443569][ T9] usb 1-1: Using ep0 maxpacket: 8
[ 103.462439][ T9] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[ 103.485416][ T7090] syz.2.559 (7090): drop_caches: 2
[ 103.492163][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 103.510784][ T9] usb 1-1: Product: syz
[ 103.523478][ T9] usb 1-1: Manufacturer: syz
[ 103.528099][ T9] usb 1-1: SerialNumber: syz
[ 103.539858][ T7081] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[ 103.582674][ T7081] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 103.697514][ T7081] XFS (loop1): Ending clean mount
[ 103.716411][ T7081] XFS (loop1): Quotacheck needed: Please wait.
[ 103.796775][ T7081] XFS (loop1): Quotacheck: Done.
[ 103.936092][ T5793] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 103.942146][ T7091] loop3: detected capacity change from 0 to 32768
[ 103.992790][ T7091] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 104.004190][ T9] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[ 104.027113][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'.
[ 104.036168][ T9] mxuport: probe of 1-1:254.0 failed with error -5
[ 104.045546][ T9] usb 1-1: USB disconnect, device number 4
[ 104.159317][ T7091] XFS (loop3): Ending clean mount
[ 104.222166][ T7091] XFS (loop3): Quotacheck needed: Please wait.
[ 104.245130][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'.
[ 104.313733][ T7091] XFS (loop3): Quotacheck: Done.
[ 104.402842][ T7120] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 104.475844][ T5788] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 105.335773][ T7152] 8021q: adding VLAN 0 to HW filter on device bond1
[ 105.349079][ T7159] loop3: detected capacity change from 0 to 16
[ 105.425720][ T7159] erofs: (device loop3): mounted with root inode @ nid 36.
[ 105.427191][ T27] audit: type=1326 audit(1764591958.396:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 105.489239][ T27] audit: type=1326 audit(1764591958.396:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 105.544924][ T7164] loop2: detected capacity change from 0 to 8
[ 105.554510][ T27] audit: type=1326 audit(1764591958.426:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 105.648003][ T27] audit: type=1326 audit(1764591958.426:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 105.725223][ T27] audit: type=1326 audit(1764591958.426:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7160 comm="syz.1.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 106.075277][ T7182] 8021q: adding VLAN 0 to HW filter on device bond1
[ 106.429692][ T7202] loop1: detected capacity change from 0 to 128
[ 107.236826][ T7236] netlink: 'syz.3.622': attribute type 1 has an invalid length.
[ 107.246244][ T7236] netlink: 228 bytes leftover after parsing attributes in process `syz.3.622'.
[ 107.255714][ T27] audit: type=1326 audit(1764591960.226:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048278f749 code=0x7ffc0000
[ 107.320865][ T27] audit: type=1326 audit(1764591960.226:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048278f749 code=0x7ffc0000
[ 107.392655][ T27] audit: type=1326 audit(1764591960.236:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f048278f749 code=0x7ffc0000
[ 107.419136][ T27] audit: type=1326 audit(1764591960.256:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048278f749 code=0x7ffc0000
[ 107.553327][ T27] audit: type=1326 audit(1764591960.516:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.1.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 107.583982][ T7247] syz.1.636 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 107.733464][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 107.934348][ T9] usb 1-1: Using ep0 maxpacket: 32
[ 107.946095][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 108.007481][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 108.019160][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 108.053220][ T9] usb 1-1: Product: syz
[ 108.057780][ T9] usb 1-1: Manufacturer: syz
[ 108.062384][ T9] usb 1-1: SerialNumber: syz
[ 108.075858][ T9] usb 1-1: config 0 descriptor??
[ 108.089358][ T9] usb 1-1: bad CDC descriptors
[ 108.100543][ T9] usb 1-1: unsupported MDLM descriptors
[ 108.298435][ T28] usb 1-1: USB disconnect, device number 5
[ 108.348054][ T7250] loop3: detected capacity change from 0 to 32768
[ 108.387525][ T7250] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 108.403913][ T7250] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 108.453827][ T7250] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 108.482561][ T5868] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 108.489469][ T5868] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 108.493436][ T5785] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 108.579070][ T5868] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 89ms
[ 108.605650][ T5868] gfs2: fsid=syz:syz.0: jid=0: Done
[ 108.613709][ T7250] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 108.694483][ T5785] usb 3-1: Using ep0 maxpacket: 16
[ 108.706998][ T5785] usb 3-1: config 254 has an invalid interface number: 235 but max is 0
[ 108.724452][ T5785] usb 3-1: config 254 has no interface number 0
[ 108.749551][ T5785] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[ 108.778028][ T5785] usb 3-1: config 254 interface 235 has no altsetting 0
[ 108.788270][ T5785] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[ 108.803473][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5
[ 108.814893][ T5785] usb 3-1: Product: syz
[ 108.852139][ T5785] usb 3-1: Manufacturer: syz
[ 108.864930][ T5785] usb 3-1: SerialNumber: syz
[ 108.900681][ T7264] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 109.030210][ T7287] loop1: detected capacity change from 0 to 512
[ 109.072467][ T7250] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 109.076298][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'.
[ 109.087622][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'.
[ 109.108405][ T7287] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.646: bad orphan inode 13
[ 109.131987][ T7287] ext4_test_bit(bit=12, block=4) = 1
[ 109.135339][ T5785] usbtest 3-1:254.235: couldn't get endpoints, -71
[ 109.138171][ T7287] is_bad_inode(inode)=0
[ 109.148969][ T7287] NEXT_ORPHAN(inode)=0
[ 109.153053][ T7287] max_ino=32
[ 109.156445][ T7287] i_nlink=1
[ 109.160885][ T7287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 109.185166][ T7287] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.646: Hash code is SIPHASH, but hash not in dirent
[ 109.198311][ T7287] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.646: Corrupt directory, running e2fsck is recommended
[ 109.205122][ T5785] usbtest: probe of 3-1:254.235 failed with error -71
[ 109.211667][ T7287] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.646: Hash code is SIPHASH, but hash not in dirent
[ 109.230573][ T7287] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.646: Corrupt directory, running e2fsck is recommended
[ 109.316181][ T5785] usb 3-1: USB disconnect, device number 6
[ 109.393959][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 109.469513][ T5788] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[ 109.500633][ T5788] CPU: 1 PID: 5788 Comm: syz-executor Not tainted syzkaller #0
[ 109.508229][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 109.518296][ T5788] Call Trace:
[ 109.521587][ T5788]
[ 109.524537][ T5788] dump_stack_lvl+0x16c/0x230
[ 109.526433][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'.
[ 109.529223][ T5788] ? show_regs_print_info+0x20/0x20
[ 109.543353][ T5788] ? load_image+0x3b0/0x3b0
[ 109.547875][ T5788] ? do_raw_spin_unlock+0x121/0x230
[ 109.553091][ T5788] gfs2_assert_warn_i+0x193/0x2c0
[ 109.558129][ T5788] gfs2_qd_dispose+0x4aa/0x5b0
[ 109.562892][ T5788] gfs2_quota_cleanup+0x406/0x6d0
[ 109.567910][ T5788] ? spin_lock_bucket+0x150/0x150
[ 109.572925][ T5788] ? __might_sleep+0xe0/0xe0
[ 109.577507][ T5788] ? gfs2_ail_empty_tr+0x2f0/0x2f0
[ 109.582605][ T5788] ? gfs2_quota_sync+0x591/0x5a0
[ 109.587541][ T5788] gfs2_make_fs_ro+0x27f/0x300
[ 109.592294][ T5788] ? gfs2_dinode_out+0xb10/0xb10
[ 109.597219][ T5788] ? __lock_acquire+0x7c80/0x7c80
[ 109.602243][ T5788] ? __rwlock_init+0x150/0x150
[ 109.607001][ T5788] ? do_raw_spin_unlock+0x121/0x230
[ 109.612194][ T5788] gfs2_put_super+0x224/0x930
[ 109.616864][ T5788] ? gfs2_evict_inode+0x1220/0x1220
[ 109.622054][ T5788] generic_shutdown_super+0x134/0x2b0
[ 109.627420][ T5788] kill_block_super+0x44/0x90
[ 109.632084][ T5788] deactivate_locked_super+0x97/0x100
[ 109.637448][ T5788] cleanup_mnt+0x429/0x4c0
[ 109.641860][ T5788] task_work_run+0x1ce/0x250
[ 109.646445][ T5788] ? task_work_cancel+0x240/0x240
[ 109.651470][ T5788] ? exit_to_user_mode_loop+0x3b/0x110
[ 109.656930][ T5788] exit_to_user_mode_loop+0xe6/0x110
[ 109.662222][ T5788] exit_to_user_mode_prepare+0xf6/0x180
[ 109.667762][ T5788] syscall_exit_to_user_mode+0x1a/0x50
[ 109.673209][ T5788] do_syscall_64+0x61/0xb0
[ 109.677621][ T5788] ? clear_bhb_loop+0x40/0x90
[ 109.682288][ T5788] ? clear_bhb_loop+0x40/0x90
[ 109.686953][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 109.692849][ T5788] RIP: 0033:0x7fa67f190a77
[ 109.697253][ T5788] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 109.716939][ T5788] RSP: 002b:00007ffff6ea15b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 109.725343][ T5788] RAX: 0000000000000000 RBX: 00007fa67f213d7d RCX: 00007fa67f190a77
[ 109.733306][ T5788] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff6ea1670
[ 109.741266][ T5788] RBP: 00007ffff6ea1670 R08: 0000000000000000 R09: 0000000000000000
[ 109.749224][ T5788] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffff6ea2700
[ 109.757186][ T5788] R13: 00007fa67f213d7d R14: 000000000001ab03 R15: 00007ffff6ea2740
[ 109.765158][ T5788]
[ 109.917487][ T7299] usb usb8: usbfs: process 7299 (syz.1.652) did not claim interface 0 before use
[ 109.966228][ T7301] xt_bpf: check failed: parse error
[ 110.050254][ T7303] netlink: 'syz.0.655': attribute type 2 has an invalid length.
[ 110.089361][ T7306] netlink: 'syz.1.654': attribute type 24 has an invalid length.
[ 110.120492][ T7306] netlink: 32 bytes leftover after parsing attributes in process `syz.1.654'.
[ 110.294976][ T7314] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.659'.
[ 110.361618][ T7317] loop0: detected capacity change from 0 to 4096
[ 110.456749][ T7323] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 110.486193][ T7324] xt_bpf: check failed: parse error
[ 110.825059][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'.
[ 111.346560][ T7353] xt_ecn: cannot match TCP bits for non-tcp packets
[ 111.687020][ T27] kauditd_printk_skb: 3 callbacks suppressed
[ 111.687033][ T27] audit: type=1326 audit(1764591964.656:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048278f749 code=0x7ffc0000
[ 111.757219][ T27] audit: type=1326 audit(1764591964.656:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048278f749 code=0x7ffc0000
[ 111.805489][ T27] audit: type=1326 audit(1764591964.686:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f048278f749 code=0x7ffc0000
[ 111.859217][ T27] audit: type=1326 audit(1764591964.686:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048278f749 code=0x7ffc0000
[ 111.891206][ T27] audit: type=1326 audit(1764591964.686:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048278f749 code=0x7ffc0000
[ 112.615069][ T7395] netlink: 'syz.2.698': attribute type 24 has an invalid length.
[ 112.615091][ T7395] netlink: 32 bytes leftover after parsing attributes in process `syz.2.698'.
[ 112.960432][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'.
[ 113.054522][ T7416] loop2: detected capacity change from 0 to 256
[ 113.431907][ T7428] loop1: detected capacity change from 0 to 1024
[ 113.465094][ T7428] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 113.471762][ T7428] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 113.527406][ T7428] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 113.555349][ T7428] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 113.634863][ T7428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 113.764068][ T7442] autofs4:pid:7442:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2147483646), cmd(0xc0189375)
[ 113.779008][ T7442] autofs4:pid:7442:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[ 113.869497][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 114.403725][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'.
[ 114.425643][ T7471] netlink: 56 bytes leftover after parsing attributes in process `syz.2.734'.
[ 114.482981][ T7471] bridge2: entered allmulticast mode
[ 114.537194][ T7477] loop1: detected capacity change from 0 to 64
[ 115.283326][ T28] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 115.495024][ T28] usb 2-1: config 0 has no interfaces?
[ 115.500740][ T28] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 115.519415][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 115.546409][ T28] usb 2-1: config 0 descriptor??
[ 115.642114][ T7510] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 115.654412][ T5838] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 115.689239][ T7512] loop2: detected capacity change from 0 to 64
[ 115.775307][ T7512] syz.2.754: attempt to access beyond end of device
[ 115.775307][ T7512] loop2: rw=0, sector=16777216, nr_sectors = 2 limit=64
[ 115.780927][ T28] usb 2-1: USB disconnect, device number 5
[ 115.803528][ T7512] Buffer I/O error on dev loop2, logical block 8388608, async page read
[ 115.822853][ T7512] syz.2.754: attempt to access beyond end of device
[ 115.822853][ T7512] loop2: rw=0, sector=16777216, nr_sectors = 2 limit=64
[ 115.836972][ T7512] Buffer I/O error on dev loop2, logical block 8388608, async page read
[ 115.844023][ T5838] usb 4-1: Using ep0 maxpacket: 32
[ 115.867779][ T5838] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[ 115.883381][ T5838] usb 4-1: config 0 has no interface number 0
[ 115.889509][ T5838] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 115.906212][ T5838] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 115.920025][ T5838] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 115.932708][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 115.964833][ T5838] usb 4-1: Product: syz
[ 115.969081][ T5838] usb 4-1: Manufacturer: syz
[ 115.975295][ T5838] usb 4-1: SerialNumber: syz
[ 115.982179][ T5838] usb 4-1: config 0 descriptor??
[ 115.991123][ T5838] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 116.195528][ T5838] usb 4-1: qt2_setup_urbs - submit read urb failed -90
[ 116.214336][ T5838] quatech2: probe of 4-1:0.51 failed with error -90
[ 116.408347][ T5838] usb 4-1: USB disconnect, device number 7
[ 116.465743][ T7532] netlink: 'syz.1.764': attribute type 64 has an invalid length.
[ 116.498566][ T7534] loop0: detected capacity change from 0 to 256
[ 116.557405][ T7534] FAT-fs (loop0): Directory bread(block 64) failed
[ 116.572741][ T7534] FAT-fs (loop0): Directory bread(block 65) failed
[ 116.591140][ T7534] FAT-fs (loop0): Directory bread(block 66) failed
[ 116.619899][ T7534] FAT-fs (loop0): Directory bread(block 67) failed
[ 116.642646][ T7534] FAT-fs (loop0): Directory bread(block 68) failed
[ 116.672796][ T7534] FAT-fs (loop0): Directory bread(block 69) failed
[ 116.691960][ T7534] FAT-fs (loop0): Directory bread(block 70) failed
[ 116.699357][ T7534] FAT-fs (loop0): Directory bread(block 71) failed
[ 116.711498][ T7534] FAT-fs (loop0): Directory bread(block 72) failed
[ 116.727711][ T7524] loop2: detected capacity change from 0 to 40427
[ 116.738282][ T7534] FAT-fs (loop0): Directory bread(block 73) failed
[ 116.760958][ T7524] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[ 116.792110][ T7524] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 116.896487][ T7524] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 117.070005][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'.
[ 117.101965][ T7524] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 117.119278][ T7524] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 117.171121][ T7554] loop1: detected capacity change from 0 to 64
[ 117.235687][ T7554] syz.1.773: attempt to access beyond end of device
[ 117.235687][ T7554] loop1: rw=0, sector=65534, nr_sectors = 2 limit=64
[ 117.239213][ T7556] 9pnet_fd: Insufficient options for proto=fd
[ 117.280191][ T7554] Buffer I/O error on dev loop1, logical block 32767, async page read
[ 117.315707][ T7554] syz.1.773: attempt to access beyond end of device
[ 117.315707][ T7554] loop1: rw=0, sector=65534, nr_sectors = 2 limit=64
[ 117.353362][ T7554] Buffer I/O error on dev loop1, logical block 32767, async page read
[ 118.418532][ T7599] loop1: detected capacity change from 0 to 8
[ 118.498922][ T7599] SQUASHFS error: Unable to read inode 0xa7
[ 118.726540][ T7614] loop0: detected capacity change from 0 to 64
[ 118.848233][ T7618] netlink: 232 bytes leftover after parsing attributes in process `syz.3.805'.
[ 118.880763][ T27] audit: type=1326 audit(1764591971.836:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfbf8f749 code=0x7ffc0000
[ 118.920457][ T27] audit: type=1326 audit(1764591971.836:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfbf8f749 code=0x7ffc0000
[ 118.965542][ T27] audit: type=1326 audit(1764591971.876:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f9cfbf8f749 code=0x7ffc0000
[ 119.044380][ T27] audit: type=1326 audit(1764591971.886:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfbf8f749 code=0x7ffc0000
[ 119.128520][ T27] audit: type=1326 audit(1764591971.886:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cfbf8f749 code=0x7ffc0000
[ 119.518215][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'.
[ 119.583559][ T7645] netlink: 56 bytes leftover after parsing attributes in process `syz.3.818'.
[ 119.658617][ T7645] bridge1: entered allmulticast mode
[ 119.769807][ T7655] loop1: detected capacity change from 0 to 1024
[ 119.899292][ T2890] hfsplus: b-tree write err: -5, ino 4
[ 120.029571][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'.
[ 120.043760][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.828'.
[ 120.062867][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.828'.
[ 120.257964][ T7679] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[ 120.266628][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'.
[ 120.293366][ T7677] netlink: 56 bytes leftover after parsing attributes in process `syz.1.833'.
[ 120.361806][ T7677] bridge2: entered allmulticast mode
[ 120.562298][ T7688] netlink: 'syz.1.840': attribute type 3 has an invalid length.
[ 120.694972][ T7691] loop3: detected capacity change from 0 to 22
[ 120.702019][ T7691] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 120.736312][ T7695] loop1: detected capacity change from 0 to 256
[ 120.749050][ T7691] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 120.839339][ T7695] FAT-fs (loop1): Directory bread(block 64) failed
[ 120.851286][ T7673] loop0: detected capacity change from 0 to 32768
[ 120.857724][ T7695] FAT-fs (loop1): Directory bread(block 65) failed
[ 120.857853][ T7695] FAT-fs (loop1): Directory bread(block 66) failed
[ 120.889590][ T7695] FAT-fs (loop1): Directory bread(block 67) failed
[ 120.934667][ T7695] FAT-fs (loop1): Directory bread(block 68) failed
[ 120.964805][ T7697] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[ 120.970120][ T7695] FAT-fs (loop1): Directory bread(block 69) failed
[ 120.985205][ T7673] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[ 120.985205][ T7673]
[ 120.992887][ T7695] FAT-fs (loop1): Directory bread(block 70) failed
[ 121.008890][ T7695] FAT-fs (loop1): Directory bread(block 71) failed
[ 121.017481][ T7695] FAT-fs (loop1): Directory bread(block 72) failed
[ 121.027751][ T7673] xtLookup: xtSearch returned -5
[ 121.031877][ T7695] FAT-fs (loop1): Directory bread(block 73) failed
[ 121.043967][ T7673] add_index: get/read_metapage failed!
[ 121.863961][ T5792] Bluetooth: hci0: Invalid handle: 0xfd00 > 0x0eff
[ 121.909516][ T7733] loop1: detected capacity change from 0 to 256
[ 122.085548][ T7741] loop3: detected capacity change from 0 to 64
[ 122.308309][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.869'.
[ 122.328028][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.869'.
[ 122.353557][ T7748] netlink: 52 bytes leftover after parsing attributes in process `syz.3.869'.
[ 122.699335][ T7767] loop0: detected capacity change from 0 to 256
[ 122.730809][ T7767] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[ 122.826047][ T7767] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[ 122.853408][ T7767] exFAT-fs (loop0): Filesystem has been set read-only
[ 122.927848][ T27] audit: type=1326 audit(1764591975.896:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 122.953343][ T5868] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 122.991259][ T27] audit: type=1326 audit(1764591975.896:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 123.036856][ T27] audit: type=1326 audit(1764591975.936:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 123.102954][ T27] audit: type=1326 audit(1764591975.936:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 123.148418][ T27] audit: type=1326 audit(1764591975.936:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.1.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 123.173455][ T5868] usb 4-1: Using ep0 maxpacket: 16
[ 123.186055][ T5868] usb 4-1: config index 0 descriptor too short (expected 18, got 14)
[ 123.186080][ T5868] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config
[ 123.186095][ T5868] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 123.188864][ T5868] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 123.188889][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 123.188907][ T5868] usb 4-1: Product: syz
[ 123.188919][ T5868] usb 4-1: Manufacturer: syz
[ 123.188932][ T5868] usb 4-1: SerialNumber: syz
[ 123.200789][ T5868] r8152-cfgselector 4-1: config 0 descriptor??
[ 123.414157][ T5868] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[ 123.616454][ T8] usb 4-1: USB disconnect, device number 8
[ 123.709605][ T7805] bridge1: entered allmulticast mode
[ 123.954594][ T7817] loop2: detected capacity change from 0 to 2048
[ 123.994526][ T7817] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[ 124.020605][ T7817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 124.030069][ T7819] netlink: 'syz.1.905': attribute type 2 has an invalid length.
[ 124.059384][ T7817] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[ 124.483795][ T7837] netlink: 'syz.3.913': attribute type 1 has an invalid length.
[ 124.949103][ T7861] __nla_validate_parse: 2 callbacks suppressed
[ 124.949123][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.925'.
[ 125.512044][ T7883] (null): rxe_set_mtu: Set mtu to 1024
[ 125.776380][ T7887] loop1: detected capacity change from 0 to 1764
[ 125.854858][ T7887] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 125.858077][ T7869] loop0: detected capacity change from 0 to 32768
[ 125.936609][ T7869] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 126.063433][ T7883] infiniband syz!: set active
[ 126.088936][ T7883] infiniband syz!: added team_slave_0
[ 126.256721][ T7869] XFS (loop0): Ending clean mount
[ 126.321655][ T7883] RDS/IB: syz!: added
[ 126.335420][ T7883] smc: adding ib device syz! with port count 1
[ 126.358144][ T5783] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 126.383895][ T7883] smc: ib device syz! port 1 has pnetid
[ 126.431476][ T7912] loop1: detected capacity change from 0 to 4096
[ 126.464216][ T7912] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[ 126.503325][ T7912] ntfs3: loop1: It is recommened to use chkdsk.
[ 126.620073][ T7916] openvswitch: netlink: Actions may not be safe on all matching packets
[ 126.952419][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'.
[ 127.208786][ T27] audit: type=1326 audit(1764591980.176:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 127.287821][ T27] audit: type=1326 audit(1764591980.176:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 127.320623][ T27] audit: type=1326 audit(1764591980.176:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 127.351409][ T27] audit: type=1326 audit(1764591980.226:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 127.420741][ T27] audit: type=1326 audit(1764591980.226:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 127.862002][ T7954] netlink: 224 bytes leftover after parsing attributes in process `syz.0.966'.
[ 128.531081][ T7976] loop0: detected capacity change from 0 to 4096
[ 128.730681][ T7976] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 128.838374][ T7993] loop1: detected capacity change from 0 to 256
[ 128.935032][ T5783] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22.
[ 128.963024][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'.
[ 128.996668][ T7993] FAT-fs (loop1): Directory bread(block 64) failed
[ 129.013331][ T7993] FAT-fs (loop1): Directory bread(block 65) failed
[ 129.019980][ T7993] FAT-fs (loop1): Directory bread(block 66) failed
[ 129.027077][ T7995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 129.054839][ T7993] FAT-fs (loop1): Directory bread(block 67) failed
[ 129.061487][ T7993] FAT-fs (loop1): Directory bread(block 68) failed
[ 129.113048][ T7993] FAT-fs (loop1): Directory bread(block 69) failed
[ 129.133433][ T7993] FAT-fs (loop1): Directory bread(block 70) failed
[ 129.140032][ T7993] FAT-fs (loop1): Directory bread(block 71) failed
[ 129.171113][ T7993] FAT-fs (loop1): Directory bread(block 72) failed
[ 129.185616][ T7993] FAT-fs (loop1): Directory bread(block 73) failed
[ 129.455695][ T8009] loop2: detected capacity change from 0 to 512
[ 129.463472][ T5868] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 129.500280][ T8009] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.993: bad orphan inode 13
[ 129.547358][ T8009] ext4_test_bit(bit=12, block=4) = 1
[ 129.568878][ T8009] is_bad_inode(inode)=0
[ 129.583847][ T8009] NEXT_ORPHAN(inode)=0
[ 129.617210][ T8009] max_ino=32
[ 129.642001][ T8009] i_nlink=1
[ 129.652325][ T8009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 129.703345][ T5868] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 129.726906][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 129.743557][ T5868] usb 1-1: Product: syz
[ 129.754280][ T5868] usb 1-1: Manufacturer: syz
[ 129.763163][ T5868] usb 1-1: SerialNumber: syz
[ 129.767282][ T8009] EXT4-fs warning (device loop2): dx_probe:845: inode #2: comm syz.2.993: Hash code is SIPHASH, but hash not in dirent
[ 129.784483][ T8009] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.993: Corrupt directory, running e2fsck is recommended
[ 129.785078][ T5868] usb 1-1: config 0 descriptor??
[ 129.799692][ T8009] EXT4-fs warning (device loop2): dx_probe:845: inode #2: comm syz.2.993: Hash code is SIPHASH, but hash not in dirent
[ 129.820560][ T8009] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.993: Corrupt directory, running e2fsck is recommended
[ 129.895826][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 130.038928][ T5868] hso 1-1:0.0: Failed to find BULK IN ep
[ 130.062092][ T5868] usb-storage 1-1:0.0: USB Mass Storage device detected
[ 130.114894][ T8020] loop2: detected capacity change from 0 to 256
[ 130.220535][ T8003] comedi comedi0: reset error (fatal)
[ 130.364604][ T5868] usb 1-1: USB disconnect, device number 6
[ 130.505659][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'.
[ 130.861093][ T8042] sctp: [Deprecated]: syz.3.1007 (pid 8042) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 130.861093][ T8042] Use struct sctp_sack_info instead
[ 130.885886][ T8024] loop2: detected capacity change from 0 to 32768
[ 130.930895][ T8024] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 131.093369][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 131.122349][ T8024] XFS (loop2): Ending clean mount
[ 131.148863][ T8024] XFS (loop2): Quotacheck needed: Please wait.
[ 131.229895][ T8024] XFS (loop2): Quotacheck: Done.
[ 131.249799][ T8056] loop0: detected capacity change from 0 to 4096
[ 131.276834][ T8056] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker.
[ 131.308167][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 131.338160][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 131.354975][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 131.365328][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 131.365943][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 131.377797][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 131.418366][ T8056] ntfs: volume version 3.1.
[ 131.475356][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 131.480766][ T8056] ntfs: (device loop0): parse_options(): Unrecognized mount option 184467440737095516150xffffffffffffffff18446744073709551615V?Cp~'~8pٻ젌|^(coM).
[ 131.484708][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 131.510880][ T8] usb 2-1: Product: syz
[ 131.516120][ T8] usb 2-1: Manufacturer: syz
[ 131.536090][ T8] cdc_wdm 2-1:1.0: skipping garbage
[ 131.541318][ T8] cdc_wdm 2-1:1.0: skipping garbage
[ 131.570458][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 131.576605][ T8] cdc_wdm 2-1:1.0: Unknown control protocol
[ 131.774599][ T8040] cdc_wdm 2-1:1.0: Error submitting int urb - -90
[ 131.806690][ T5868] usb 2-1: USB disconnect, device number 6
[ 131.928957][ T8070] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 132.129239][ T8078] loop3: detected capacity change from 0 to 512
[ 132.191826][ T8078] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 132.239644][ T8087] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[ 132.256724][ T8087] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[ 132.271565][ T8078] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[ 132.310638][ T8078] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[ 132.343323][ T8078] EXT4-fs (loop3): Remounting filesystem read-only
[ 132.354550][ T8078] EXT4-fs (loop3): 1 truncate cleaned up
[ 132.361524][ T8078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 132.535788][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 132.776782][ T8104] loop2: detected capacity change from 0 to 1764
[ 132.786107][ T8106] loop0: detected capacity change from 0 to 1024
[ 132.870357][ T8104] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 132.884755][ T8106] hfsplus: cannot replace xattr
[ 132.930846][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.938307][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.060824][ T8114] loop2: detected capacity change from 0 to 16
[ 133.079672][ T8114] erofs: (device loop2): mounted with root inode @ nid 36.
[ 133.139229][ T8114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 133.183979][ T8114] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 133.462857][ T8132] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[ 133.480841][ T8132] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[ 133.508377][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'.
[ 133.529492][ T8130] loop3: detected capacity change from 0 to 1764
[ 133.606231][ T8130] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 133.830684][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1053'.
[ 134.283144][ T8167] genirq: Flags mismatch irq 10. 00000000 (pcl812) vs. 00000080 (virtio2)
[ 134.427781][ T8175] loop0: detected capacity change from 0 to 64
[ 134.485427][ T8175] syz.0.1069: attempt to access beyond end of device
[ 134.485427][ T8175] loop0: rw=0, sector=16777216, nr_sectors = 2 limit=64
[ 134.543587][ T8175] Buffer I/O error on dev loop0, logical block 8388608, async page read
[ 134.589699][ T8175] syz.0.1069: attempt to access beyond end of device
[ 134.589699][ T8175] loop0: rw=0, sector=16777216, nr_sectors = 2 limit=64
[ 134.633663][ T8175] Buffer I/O error on dev loop0, logical block 8388608, async page read
[ 134.730119][ T8181] loop1: detected capacity change from 0 to 4096
[ 134.738793][ T8181] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[ 134.779015][ T8181] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[ 134.794868][ T8181] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[ 135.012947][ T42] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22.
[ 135.041678][ T5793] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[ 135.055197][ T5793] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[ 135.073767][ T5793] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[ 135.081967][ T3457] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22.
[ 135.108309][ T5868] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 135.152352][ T8197] dlm: no local IP address has been set
[ 135.159368][ T8197] dlm: cannot start dlm midcomms -107
[ 135.313341][ T5868] usb 4-1: Using ep0 maxpacket: 8
[ 135.331301][ T5868] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[ 135.340636][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 135.360176][ T5868] usb 4-1: Product: syz
[ 135.364880][ T5868] usb 4-1: Manufacturer: syz
[ 135.369505][ T5868] usb 4-1: SerialNumber: syz
[ 135.532113][ T8207] loop2: detected capacity change from 0 to 16
[ 135.554586][ T8207] erofs: (device loop2): mounted with root inode @ nid 36.
[ 135.575539][ T8207] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 32811 of nid 36
[ 135.687546][ T8195] loop0: detected capacity change from 0 to 32768
[ 135.722486][ T8195] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 135.723344][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 135.801033][ T8195] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 135.821057][ T5868] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[ 135.832968][ T8195] XFS (loop0): Starting recovery (logdev: internal)
[ 135.835793][ T5868] mxuport: probe of 4-1:254.0 failed with error -5
[ 135.860224][ T5868] usb 4-1: USB disconnect, device number 9
[ 135.871542][ T8195] XFS (loop0): Ending recovery (logdev: internal)
[ 135.879283][ T8195] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0.
[ 135.896888][ T8195] XFS (loop0): Failed to initialize disk quotas.
[ 135.979887][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 136.003400][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 136.015192][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 136.024399][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 136.032518][ T9] usb 2-1: SerialNumber: syz
[ 136.042790][ T8195] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0.
[ 136.107537][ T5783] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 136.160238][ T8225] 9pnet_fd: Insufficient options for proto=fd
[ 136.230848][ T8227] loop2: detected capacity change from 0 to 1024
[ 136.238412][ T8227] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 136.253672][ T8227] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 136.277911][ T9] usb 2-1: 0:2 : does not exist
[ 136.287949][ T8227] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 136.320656][ T9] usb 2-1: USB disconnect, device number 7
[ 136.335028][ T8227] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 136.389359][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 136.461662][ T8227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 136.577455][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 136.879447][ T8244] xt_cgroup: invalid path, errno=-2
[ 137.036624][ T8251] netlink: 'syz.3.1102': attribute type 1 has an invalid length.
[ 137.055808][ T8251] netlink: 'syz.3.1102': attribute type 2 has an invalid length.
[ 137.068921][ T8251] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1102'.
[ 137.545983][ T8271] loop2: detected capacity change from 0 to 2048
[ 137.631802][ T8279] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 137.696341][ T8271] NILFS (loop2): error -2 truncating bmap (ino=16)
[ 137.750346][ T8282] netlink: 'syz.3.1117': attribute type 1 has an invalid length.
[ 137.797864][ T8282] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1117'.
[ 137.840238][ T8285] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1118'.
[ 137.855706][ T8285] unsupported nlmsg_type 40
[ 137.873437][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'.
[ 138.184405][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1125'.
[ 138.241727][ T8300] netlink: 'syz.1.1126': attribute type 4 has an invalid length.
[ 138.270671][ T8300] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1126'.
[ 138.309907][ T8300] .`: renamed from bond0 (while UP)
[ 138.385320][ T8302] netlink: 'syz.3.1127': attribute type 21 has an invalid length.
[ 138.783503][ T8308] loop2: detected capacity change from 0 to 4096
[ 138.830005][ T8308] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[ 138.870600][ T8308] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk.
[ 138.945425][ T8308] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 138.997113][ T8308] ntfs: volume version 3.1.
[ 139.050054][ T8308] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk.
[ 139.089118][ T8308] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[ 139.133010][ T8292] loop0: detected capacity change from 0 to 40427
[ 139.143280][ T8308] ntfs: (device loop2): load_and_init_quota(): Failed to load $Quota/$Q index.
[ 139.152252][ T8308] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk.
[ 139.200204][ T8292] F2FS-fs (loop0): heap/no_heap options were deprecated
[ 139.228413][ T8292] F2FS-fs (loop0): invalid crc value
[ 139.243293][ T8292] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[ 139.279672][ T8308] ntfs: (device loop2): parse_options(): Unrecognized mount option 18446744073709551615@LqE: 艞t}0$.
[ 139.293831][ T8292] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 139.494908][ T8292] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 139.650372][ T8330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1140'.
[ 139.662208][ T8331] netlink: 'syz.3.1141': attribute type 3 has an invalid length.
[ 139.678877][ T27] audit: type=1326 audit(1764591992.646:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 139.701026][ C0] vkms_vblank_simulate: vblank timer overrun
[ 139.720389][ T8330] bridge0: port 1(bridge_slave_0) entered disabled state
[ 139.773530][ T27] audit: type=1326 audit(1764591992.646:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.1.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x7ffc0000
[ 139.853386][ T8335] netlink: 'syz.1.1144': attribute type 1 has an invalid length.
[ 139.872471][ T8335] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1144'.
[ 139.913545][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'.
[ 139.959731][ T8339] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[ 140.268155][ T8348] loop0: detected capacity change from 0 to 4096
[ 140.337108][ T8354] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1152'.
[ 140.429023][ T8348] ntfs: volume version 3.1.
[ 141.053739][ T8384] loop0: detected capacity change from 0 to 512
[ 141.139929][ T8384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 141.154270][ T8384] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 141.172787][ T8384] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1166: Failed to acquire dquot type 0
[ 141.203459][ T8384] EXT4-fs (loop0): Remounting filesystem read-only
[ 141.262078][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 141.381728][ T8395] loop1: detected capacity change from 0 to 64
[ 141.612179][ T8405] loop2: detected capacity change from 0 to 256
[ 141.770021][ T8409] loop0: detected capacity change from 0 to 4096
[ 141.827213][ T8409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 141.848527][ T8414] loop3: detected capacity change from 0 to 16
[ 141.880461][ T8409] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.1179: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[ 141.902349][ T8414] erofs: (device loop3): mounted with root inode @ nid 36.
[ 141.903714][ T8409] EXT4-fs (loop0): Remounting filesystem read-only
[ 141.916988][ T8409] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.1179: directory missing '..'
[ 142.005232][ T8414] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 142.050410][ T8414] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -24 in[64, 4032] out[1851]
[ 142.093408][ T8414] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 142.136770][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 142.532520][ T8438] PKCS8: Unsupported PKCS#8 version
[ 143.263011][ T8426] loop0: detected capacity change from 0 to 32768
[ 143.297121][ T8426] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[ 143.319176][ T8426] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 143.416866][ T8426] XFS (loop0): Ending clean mount
[ 143.602053][ T5783] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 144.570885][ T8481] loop3: detected capacity change from 0 to 40427
[ 144.624606][ T8481] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[ 144.631854][ T8481] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 144.716181][ T8481] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 144.827990][ T8527] xt_bpf: check failed: parse error
[ 144.845140][ T8526] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1229'.
[ 144.874578][ T8481] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 144.908808][ T8481] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 145.013367][ T5868] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 145.227324][ T5868] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 145.236641][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 145.274325][ T5868] usb 3-1: Product: syz
[ 145.293830][ T5868] usb 3-1: Manufacturer: syz
[ 145.298470][ T5868] usb 3-1: SerialNumber: syz
[ 145.336766][ T5868] usb 3-1: config 0 descriptor??
[ 145.517361][ T8546] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 145.581531][ T5868] hso 3-1:0.0: Failed to find BULK IN ep
[ 145.622206][ T5868] usb-storage 3-1:0.0: USB Mass Storage device detected
[ 145.657725][ T8550] gtp0: entered promiscuous mode
[ 145.662709][ T8550] gtp0: entered allmulticast mode
[ 145.860983][ T8] usb 3-1: USB disconnect, device number 7
[ 145.880973][ T8556] netlink: 1018 bytes leftover after parsing attributes in process `syz.0.1243'.
[ 146.111288][ T8560] loop3: detected capacity change from 0 to 4096
[ 146.132486][ T8560] ntfs3: loop3: ino=3, Correct links count -> 2.
[ 146.499749][ T8555] loop1: detected capacity change from 0 to 40427
[ 146.514379][ T8568] loop0: detected capacity change from 0 to 64
[ 146.533586][ T8555] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[ 146.540823][ T8555] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 146.583869][ T8572] netlink: 'syz.2.1251': attribute type 1 has an invalid length.
[ 146.677135][ T8555] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 146.792679][ T8555] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 146.813633][ T8555] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 146.859202][ T8582] loop0: detected capacity change from 0 to 1024
[ 146.896261][ T8582] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[ 146.941337][ T8582] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 146.987808][ T8582] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 146.996582][ T8582] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 147.010781][ T8582] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.1253: Inode bitmap for bg 0 marked uninitialized
[ 147.012650][ T8586] bond2: entered promiscuous mode
[ 147.031233][ T8586] bond2: entered allmulticast mode
[ 147.037356][ T8586] 8021q: adding VLAN 0 to HW filter on device bond2
[ 147.058660][ T8582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 147.109047][ T8582] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (32298!=35945)
[ 147.225479][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 147.676272][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1266'.
[ 147.690924][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'.
[ 147.720320][ T8606] ip6gretap3: entered allmulticast mode
[ 148.104533][ T8622] loop2: detected capacity change from 0 to 1024
[ 148.157164][ T8622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 148.198822][ T8622] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 148.292541][ T8622] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.1273: directory missing '..'
[ 148.297979][ T8634] loop1: detected capacity change from 0 to 512
[ 148.373683][ T8634] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002]
[ 148.382415][ T8634] System zones: 0-2, 18-18, 34-34
[ 148.398165][ T8634] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 148.425340][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 148.558462][ T8634] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1278: bg 0: block 248: padding at end of block bitmap is not set
[ 148.614958][ T8634] __quota_error: 11 callbacks suppressed
[ 148.614973][ T8634] Quota error (device loop1): write_blk: dquota write failed
[ 148.644390][ T8634] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 148.683203][ T8634] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1278: Failed to acquire dquot type 1
[ 148.699572][ T8634] EXT4-fs (loop1): 1 orphan inode deleted
[ 148.706215][ T49] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[ 148.716838][ T49] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u4:3: Failed to release dquot type 1
[ 148.752451][ T8634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 148.818722][ T8634] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.1278: deleted inode referenced: 12
[ 148.833373][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 148.873173][ T8634] syz.1.1278 (8634) used greatest stack depth: 20752 bytes left
[ 148.899685][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 148.926515][ T8654] loop2: detected capacity change from 0 to 1024
[ 149.042628][ T9] usb 1-1: Using ep0 maxpacket: 16
[ 149.062891][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 149.084036][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 149.092060][ T9] usb 1-1: Product: syz
[ 149.114595][ T9] usb 1-1: Manufacturer: syz
[ 149.119559][ T9] usb 1-1: SerialNumber: syz
[ 149.132446][ T9] usb 1-1: config 0 descriptor??
[ 149.143199][ T9] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 149.205261][ T8654] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 149.250742][ T8654] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e00ec01c, mo2=0082]
[ 149.257089][ T8667] i2c i2c-0: Invalid block write size 252
[ 149.283785][ T8654] System zones: 0-1, 3-36
[ 149.294602][ T8654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 149.558475][ T9] ssu100: probe of 1-1:0.0 failed with error -71
[ 149.607904][ T9] usb 1-1: USB disconnect, device number 7
[ 149.669911][ T8654] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 149.671334][ T8680] netlink: 'syz.3.1297': attribute type 3 has an invalid length.
[ 149.769470][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 150.645661][ T8709] loop0: detected capacity change from 0 to 4096
[ 150.726636][ T8714] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 150.865424][ T8697] loop1: detected capacity change from 0 to 32768
[ 150.967244][ T8697] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 151.176954][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode.
[ 151.256020][ T5793] ocfs2: Unmounting device (7,1) on (node local)
[ 151.386030][ T27] audit: type=1326 audit(1764592004.356:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67f18f749 code=0x7ffc0000
[ 151.455095][ T8718] loop2: detected capacity change from 0 to 32768
[ 151.473390][ T27] audit: type=1326 audit(1764592004.356:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67f18f749 code=0x7ffc0000
[ 151.562103][ T27] audit: type=1326 audit(1764592004.396:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fa67f18f749 code=0x7ffc0000
[ 151.667572][ T27] audit: type=1326 audit(1764592004.396:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67f18f749 code=0x7ffc0000
[ 151.798084][ T27] audit: type=1326 audit(1764592004.396:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8730 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67f18f749 code=0x7ffc0000
[ 152.143600][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 152.160894][ T8754] loop3: detected capacity change from 0 to 256
[ 152.255597][ T8754] FAT-fs (loop3): Directory bread(block 64) failed
[ 152.262172][ T8754] FAT-fs (loop3): Directory bread(block 65) failed
[ 152.309834][ T8754] FAT-fs (loop3): Directory bread(block 66) failed
[ 152.329989][ T8754] FAT-fs (loop3): Directory bread(block 67) failed
[ 152.347179][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[ 152.356821][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 152.360511][ T8754] FAT-fs (loop3): Directory bread(block 68) failed
[ 152.381570][ T9] usb 1-1: config 220 has no interface number 2
[ 152.392928][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 152.406930][ T9] usb 1-1: config 220 interface 0 has no altsetting 0
[ 152.414863][ T9] usb 1-1: config 220 interface 76 has no altsetting 0
[ 152.417409][ T8754] FAT-fs (loop3): Directory bread(block 69) failed
[ 152.421868][ T9] usb 1-1: config 220 interface 1 has no altsetting 0
[ 152.452337][ T8754] FAT-fs (loop3): Directory bread(block 70) failed
[ 152.475127][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 152.482608][ T8754] FAT-fs (loop3): Directory bread(block 71) failed
[ 152.490797][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 152.490992][ T8754] FAT-fs (loop3): Directory bread(block 72) failed
[ 152.499123][ T9] usb 1-1: Product: syz
[ 152.515153][ T9] usb 1-1: Manufacturer: syz
[ 152.522265][ T9] usb 1-1: SerialNumber: syz
[ 152.538731][ T8754] FAT-fs (loop3): Directory bread(block 73) failed
[ 152.673617][ T8771] misc userio: No port type given on /dev/userio
[ 152.775357][ T9] usb 1-1: selecting invalid altsetting 0
[ 152.782225][ T9] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[ 152.819006][ T9] usb 1-1: No valid video chain found.
[ 152.849869][ T9] usb 1-1: selecting invalid altsetting 0
[ 152.875787][ T9] usbtest: probe of 1-1:220.1 failed with error -22
[ 152.897765][ T8775] tmpfs: Bad value for 'mpol'
[ 152.906063][ T9] usb 1-1: USB disconnect, device number 8
[ 153.289212][ T8770] loop1: detected capacity change from 0 to 32768
[ 153.371434][ T8770] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 153.430397][ T8770] XFS (loop1): Ending clean mount
[ 153.470221][ T5793] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 153.633803][ T5868] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 153.775228][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 153.827212][ T5868] usb 3-1: config 0 has no interfaces?
[ 153.832739][ T5868] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 153.863698][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 153.908305][ T5868] usb 3-1: config 0 descriptor??
[ 153.941407][ T8810] loop0: detected capacity change from 0 to 2048
[ 154.001851][ T8812] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 154.153371][ T9] usb 4-1: Using ep0 maxpacket: 16
[ 154.163771][ T5868] usb 3-1: USB disconnect, device number 8
[ 154.199859][ T9] usb 4-1: config 0 has an invalid interface number: 163 but max is 0
[ 154.208192][ T9] usb 4-1: config 0 has no interface number 0
[ 154.234256][ T9] usb 4-1: config 0 interface 163 has no altsetting 0
[ 154.254006][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=56.cc
[ 154.273570][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 154.281584][ T9] usb 4-1: Product: syz
[ 154.297413][ T9] usb 4-1: Manufacturer: syz
[ 154.303698][ T9] usb 4-1: SerialNumber: syz
[ 154.314329][ T9] usb 4-1: config 0 descriptor??
[ 154.618235][ T8826] loop1: detected capacity change from 0 to 4096
[ 154.655459][ T8826] ntfs3: loop1: ino=3, Correct links count -> 2.
[ 154.786109][ T9] usb 4-1: USB disconnect, device number 10
[ 154.813566][ T9] f81534a_ctrl 4-1:0.163: failed to set register 0x116: -19
[ 154.820913][ T9] f81534a_ctrl 4-1:0.163: failed to enable ports: -19
[ 155.468552][ T8832] loop2: detected capacity change from 0 to 32768
[ 155.560573][ T8832] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 155.705320][ T8855] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1376'.
[ 155.737673][ T8844] loop1: detected capacity change from 0 to 32768
[ 155.752755][ T5787] ocfs2: Unmounting device (7,2) on (node local)
[ 155.882767][ T8844] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[ 155.980741][ T8844] ocfs2: Unmounting device (7,1) on (node local)
[ 156.541579][ T8880] loop1: detected capacity change from 0 to 1024
[ 156.639443][ T8884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1390'.
[ 157.183502][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 157.196623][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'.
[ 157.373757][ T8] usb 4-1: Using ep0 maxpacket: 16
[ 157.381769][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 157.406198][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 157.427099][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 157.437031][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 157.463438][ T8] usb 4-1: Product: syz
[ 157.476543][ T8] usb 4-1: Manufacturer: syz
[ 157.491351][ T8] usb 4-1: SerialNumber: syz
[ 157.526147][ T8890] loop2: detected capacity change from 0 to 32768
[ 157.561650][ T8890] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[ 157.764730][ T5838] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 157.924288][ T8] usb 4-1: cannot find UAC_HEADER
[ 157.955236][ T5838] usb 2-1: Using ep0 maxpacket: 32
[ 157.972216][ T8] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[ 157.981986][ T5838] usb 2-1: config 0 has an invalid interface number: 231 but max is 0
[ 157.985488][ T8] usb 4-1: USB disconnect, device number 11
[ 157.993312][ T5838] usb 2-1: config 0 has no interface number 0
[ 158.029433][ T5838] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 158.038690][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 158.043479][ T5838] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[ 158.125634][ T5838] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[ 158.135042][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 158.143051][ T5838] usb 2-1: Product: syz
[ 158.163338][ T5838] usb 2-1: Manufacturer: syz
[ 158.173688][ T5838] usb 2-1: SerialNumber: syz
[ 158.188346][ T5838] usb 2-1: config 0 descriptor??
[ 158.204971][ T8915] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 158.212282][ T8915] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 158.252606][ T5838] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ee:5a:6c:d6:d7:90
[ 158.504118][ T8923] loop0: detected capacity change from 0 to 32768
[ 158.513387][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 158.571902][ T8923] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 158.714465][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 158.750283][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 158.787614][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 158.813928][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 158.832406][ T8923] syz.0.1410 (8923) used greatest stack depth: 18928 bytes left
[ 158.845485][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 158.882833][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 158.894857][ T5783] (syz-executor,5783,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76
[ 158.910726][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 158.931404][ T9] usb 3-1: Product: syz
[ 158.941476][ T5783] ocfs2: Unmounting device (7,0) on (node local)
[ 158.941536][ T9] usb 3-1: Manufacturer: syz
[ 158.994772][ T9] cdc_wdm 3-1:1.0: skipping garbage
[ 159.013687][ T9] cdc_wdm 3-1:1.0: skipping garbage
[ 159.046934][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 159.062720][ T9] cdc_wdm 3-1:1.0: Unknown control protocol
[ 159.111783][ T8947] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 159.132816][ T8947] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 159.282650][ T8925] cdc_wdm 3-1:1.0: Error submitting int urb - -90
[ 159.301367][ T9] usb 3-1: USB disconnect, device number 9
[ 159.435579][ T5838] usb 2-1: USB disconnect, device number 8
[ 159.455308][ T5838] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[ 159.955090][ T8974] misc userio: Invalid payload size
[ 160.601454][ T27] audit: type=1326 audit(1764592013.566:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9000 comm="syz.1.1436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff51818f749 code=0x0
[ 160.623124][ C0] vkms_vblank_simulate: vblank timer overrun
[ 160.945706][ T9018] loop1: detected capacity change from 0 to 64
[ 161.023152][ T9021] loop2: detected capacity change from 0 to 512
[ 161.353725][ T9030] xt_hashlimit: overflow, rate too high: 1125899906842624
[ 161.499316][ T9037] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 161.525427][ C0] vkms_vblank_simulate: vblank timer overrun
[ 161.533362][ T9037] CIFS mount error: No usable UNC path provided in device string!
[ 161.533362][ T9037]
[ 161.556247][ T9006] loop3: detected capacity change from 0 to 32768
[ 161.567046][ T9037] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 161.580714][ T9006] (syz.3.1437,9006,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 161.600432][ T9006] (syz.3.1437,9006,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 161.678690][ T9006] JBD2: Ignoring recovery information on journal
[ 161.800601][ T9006] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 161.822716][ T9050] xt_hashlimit: max too large, truncated to 1048576
[ 161.955919][ T9006]
[ 161.958326][ T9006] ======================================================
[ 161.965357][ T9006] WARNING: possible circular locking dependency detected
[ 161.972435][ T9006] syzkaller #0 Not tainted
[ 161.976856][ T9006] ------------------------------------------------------
[ 161.983332][ T5838] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 161.983857][ T9006] syz.3.1437/9006 is trying to acquire lock:
[ 161.983868][ T9006] ffff888076f63f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320
[ 162.008958][ T9006]
[ 162.008958][ T9006] but task is already holding lock:
[ 162.016322][ T9006] ffff888076f63ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320
[ 162.026931][ T9006]
[ 162.026931][ T9006] which lock already depends on the new lock.
[ 162.026931][ T9006]
[ 162.037329][ T9006]
[ 162.037329][ T9006] the existing dependency chain (in reverse order) is:
[ 162.046330][ T9006]
[ 162.046330][ T9006] -> #6 (&oi->ip_xattr_sem){++++}-{3:3}:
[ 162.054139][ T9006] down_read+0x46/0x2e0
[ 162.058805][ T9006] ocfs2_init_acl+0x2fa/0x720
[ 162.063994][ T9006] ocfs2_mknod+0x12e5/0x20f0
[ 162.069089][ T9006] vfs_mknod+0x32b/0x360
[ 162.073842][ T9006] do_mknodat+0x37e/0x4f0
[ 162.078679][ T9006] __x64_sys_mknod+0x8e/0xa0
[ 162.083784][ T9006] do_syscall_64+0x55/0xb0
[ 162.088709][ T9006] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 162.095109][ T9006]
[ 162.095109][ T9006] -> #5 (jbd2_handle){++++}-{0:0}:
[ 162.102393][ T9006] start_this_handle+0x1e9d/0x20c0
[ 162.108008][ T9006] jbd2__journal_start+0x2bb/0x5b0
[ 162.113626][ T9006] jbd2_journal_start+0x2a/0x40
[ 162.118980][ T9006] ocfs2_start_trans+0x376/0x6c0
[ 162.124430][ T9006] ocfs2_modify_bh+0xe9/0x470
[ 162.129610][ T9006] ocfs2_local_read_info+0x13fd/0x1770
[ 162.135573][ T9006] dquot_load_quota_sb+0x757/0xb80
[ 162.141195][ T9006] dquot_load_quota_inode+0x2dc/0x5d0
[ 162.147070][ T9006] ocfs2_enable_quotas+0x1c7/0x440
[ 162.152686][ T9006] ocfs2_fill_super+0x3f6d/0x4d90
[ 162.158211][ T9006] mount_bdev+0x22b/0x2d0
[ 162.163041][ T9006] legacy_get_tree+0xea/0x180
[ 162.168223][ T9006] vfs_get_tree+0x8c/0x280
[ 162.173138][ T9006] do_new_mount+0x24b/0xa40
[ 162.178140][ T9006] __se_sys_mount+0x2da/0x3c0
[ 162.183320][ T9006] do_syscall_64+0x55/0xb0
[ 162.188246][ T9006] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 162.194641][ T9006]
[ 162.194641][ T9006] -> #4 (&journal->j_trans_barrier){.+.+}-{3:3}:
[ 162.203138][ T9006] down_read+0x46/0x2e0
[ 162.207797][ T9006] ocfs2_start_trans+0x36a/0x6c0
[ 162.213243][ T9006] ocfs2_modify_bh+0xe9/0x470
[ 162.218430][ T9006] ocfs2_local_read_info+0x13fd/0x1770
[ 162.224394][ T9006] dquot_load_quota_sb+0x757/0xb80
[ 162.230014][ T9006] dquot_load_quota_inode+0x2dc/0x5d0
[ 162.235890][ T9006] ocfs2_enable_quotas+0x1c7/0x440
[ 162.241500][ T9006] ocfs2_fill_super+0x3f6d/0x4d90
[ 162.247023][ T9006] mount_bdev+0x22b/0x2d0
[ 162.251852][ T9006] legacy_get_tree+0xea/0x180
[ 162.257035][ T9006] vfs_get_tree+0x8c/0x280
[ 162.261949][ T9006] do_new_mount+0x24b/0xa40
[ 162.266956][ T9006] __se_sys_mount+0x2da/0x3c0
[ 162.272133][ T9006] do_syscall_64+0x55/0xb0
[ 162.277073][ T9006] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 162.283487][ T9006]
[ 162.283487][ T9006] -> #3 (sb_internal#3){.+.+}-{0:0}:
[ 162.290951][ T9006] ocfs2_start_trans+0x26b/0x6c0
[ 162.296407][ T9006] ocfs2_shutdown_local_alloc+0x201/0xa10
[ 162.302631][ T9006] ocfs2_dismount_volume+0x1e2/0x890
[ 162.308424][ T9006] generic_shutdown_super+0x134/0x2b0
[ 162.314307][ T9006] kill_block_super+0x44/0x90
[ 162.319491][ T9006] deactivate_locked_super+0x97/0x100
[ 162.325373][ T9006] cleanup_mnt+0x429/0x4c0
[ 162.330293][ T9006] task_work_run+0x1ce/0x250
[ 162.335393][ T9006] exit_to_user_mode_loop+0xe6/0x110
[ 162.341183][ T9006] exit_to_user_mode_prepare+0xf6/0x180
[ 162.347237][ T9006] syscall_exit_to_user_mode+0x1a/0x50
[ 162.353199][ T9006] do_syscall_64+0x61/0xb0
[ 162.358120][ T9006] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 162.364518][ T9006]
[ 162.364518][ T9006] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[ 162.375037][ T9006] down_write+0x97/0x1f0
[ 162.379793][ T9006] ocfs2_reserve_suballoc_bits+0x165/0x4360
[ 162.386202][ T9006] ocfs2_reserve_clusters_with_limit+0x2fc/0xba0
[ 162.393040][ T9006] ocfs2_reserve_suballoc_bits+0x6eb/0x4360
[ 162.399450][ T9006] ocfs2_reserve_new_metadata_blocks+0x404/0x940
[ 162.406387][ T9006] ocfs2_extend_dir+0xc60/0x4760
[ 162.411855][ T9006] ocfs2_prepare_dir_for_insert+0x2fc7/0x5480
[ 162.418433][ T9006] ocfs2_mknod+0x818/0x20f0
[ 162.423469][ T9006] vfs_mknod+0x32b/0x360
[ 162.428223][ T9006] do_mknodat+0x37e/0x4f0
[ 162.433058][ T9006] __x64_sys_mknod+0x8e/0xa0
[ 162.438159][ T9006] do_syscall_64+0x55/0xb0
[ 162.443086][ T9006] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 162.449487][ T9006]
[ 162.449487][ T9006] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[ 162.459988][ T9006] down_write+0x97/0x1f0
[ 162.464734][ T9006] ocfs2_reserve_suballoc_bits+0x165/0x4360
[ 162.471136][ T9006] ocfs2_reserve_new_metadata_blocks+0x404/0x940
[ 162.477969][ T9006] ocfs2_extend_dir+0xc60/0x4760
[ 162.483409][ T9006] ocfs2_prepare_dir_for_insert+0x2fc7/0x5480
[ 162.489978][ T9006] ocfs2_mknod+0x818/0x20f0
[ 162.494985][ T9006] vfs_mknod+0x32b/0x360
[ 162.499735][ T9006] do_mknodat+0x37e/0x4f0
[ 162.504571][ T9006] __x64_sys_mknod+0x8e/0xa0
[ 162.509669][ T9006] do_syscall_64+0x55/0xb0
[ 162.514590][ T9006] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 162.520987][ T9006]
[ 162.520987][ T9006] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[ 162.529743][ T9006] __lock_acquire+0x2ddb/0x7c80
[ 162.535102][ T9006] lock_acquire+0x197/0x410
[ 162.540108][ T9006] down_write+0x97/0x1f0
[ 162.544852][ T9006] ocfs2_try_remove_refcount_tree+0xb7/0x320
[ 162.551335][ T9006] ocfs2_xattr_set+0x596/0x11f0
[ 162.556690][ T9006] ocfs2_set_acl+0x4e1/0x590
[ 162.561788][ T9006] ocfs2_iop_set_acl+0x1ab/0x2a0
[ 162.567229][ T9006] vfs_remove_acl+0x4e3/0x740
[ 162.572413][ T9006] path_removexattr+0x23b/0x3f0
[ 162.577769][ T9006] __x64_sys_removexattr+0x60/0x70
[ 162.583388][ T9006] do_syscall_64+0x55/0xb0
[ 162.588312][ T9006] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 162.594710][ T9006]
[ 162.594710][ T9006] other info that might help us debug this:
[ 162.594710][ T9006]
[ 162.604917][ T9006] Chain exists of:
[ 162.604917][ T9006] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[ 162.604917][ T9006]
[ 162.618887][ T9006] Possible unsafe locking scenario:
[ 162.618887][ T9006]
[ 162.626322][ T9006] CPU0 CPU1
[ 162.631667][ T9006] ---- ----
[ 162.637011][ T9006] lock(&oi->ip_xattr_sem);
[ 162.641587][ T9006] lock(jbd2_handle);
[ 162.648156][ T9006] lock(&oi->ip_xattr_sem);
[ 162.655248][ T9006] lock(&ocfs2_file_ip_alloc_sem_key);
[ 162.660777][ T9006]
[ 162.660777][ T9006] *** DEADLOCK ***
[ 162.660777][ T9006]
[ 162.668899][ T9006] 3 locks held by syz.3.1437/9006:
[ 162.673990][ T9006] #0: ffff88805a780418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 162.683206][ T9006] #1: ffff888076f642d8 (&type->i_mutex_dir_key#25){++++}-{3:3}, at: vfs_remove_acl+0xf4/0x740
[ 162.693563][ T9006] #2: ffff888076f63ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320
[ 162.704599][ T9006]
[ 162.704599][ T9006] stack backtrace:
[ 162.710478][ T9006] CPU: 0 PID: 9006 Comm: syz.3.1437 Not tainted syzkaller #0
[ 162.717826][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 162.727861][ T9006] Call Trace:
[ 162.731125][ T9006]
[ 162.734044][ T9006] dump_stack_lvl+0x16c/0x230
[ 162.738709][ T9006] ? load_image+0x3b0/0x3b0
[ 162.743194][ T9006] ? show_regs_print_info+0x20/0x20
[ 162.748381][ T9006] ? print_circular_bug+0x12b/0x1a0
[ 162.753570][ T9006] check_noncircular+0x2bd/0x3c0
[ 162.758491][ T9006] ? arch_stack_walk+0x160/0x190
[ 162.763409][ T9006] ? look_up_lock_class+0x75/0x140
[ 162.768506][ T9006] ? print_deadlock_bug+0x5d0/0x5d0
[ 162.773688][ T9006] ? lockdep_lock+0xe0/0x220
[ 162.778261][ T9006] ? stack_trace_save+0x9c/0xe0
[ 162.783099][ T9006] ? _find_first_zero_bit+0xd3/0x100
[ 162.788374][ T9006] __lock_acquire+0x2ddb/0x7c80
[ 162.793220][ T9006] ? verify_lock_unused+0x140/0x140
[ 162.798412][ T9006] ? verify_lock_unused+0x140/0x140
[ 162.803597][ T9006] lock_acquire+0x197/0x410
[ 162.808083][ T9006] ? ocfs2_try_remove_refcount_tree+0xb7/0x320
[ 162.814223][ T9006] ? __might_sleep+0xe0/0xe0
[ 162.818795][ T9006] ? read_lock_is_recursive+0x20/0x20
[ 162.824155][ T9006] down_write+0x97/0x1f0
[ 162.828378][ T9006] ? ocfs2_try_remove_refcount_tree+0xb7/0x320
[ 162.834516][ T9006] ? down_read_killable+0x340/0x340
[ 162.839700][ T9006] ? ocfs2_xattr_set+0x56f/0x11f0
[ 162.844713][ T9006] ? __lock_acquire+0x7c80/0x7c80
[ 162.849719][ T9006] ? ocfs2_xattr_block_find+0x154/0x4c0
[ 162.855252][ T9006] ocfs2_try_remove_refcount_tree+0xb7/0x320
[ 162.861218][ T9006] ? ocfs2_remove_refcount_tree+0xd50/0xd50
[ 162.867098][ T9006] ? up_write+0x1c3/0x410
[ 162.871411][ T9006] ocfs2_xattr_set+0x596/0x11f0
[ 162.876256][ T9006] ? __ocfs2_xattr_set_handle+0xf10/0xf10
[ 162.881964][ T9006] ? __lock_acquire+0x2b6b/0x7c80
[ 162.886976][ T9006] ? ocfs2_inode_lock_tracker+0x3ec/0x660
[ 162.892678][ T9006] ? do_raw_spin_lock+0x121/0x2c0
[ 162.897690][ T9006] ? __rwlock_init+0x150/0x150
[ 162.902443][ T9006] ? do_raw_spin_unlock+0x121/0x230
[ 162.907630][ T9006] ? _raw_spin_unlock+0x28/0x40
[ 162.912467][ T9006] ? ocfs2_inode_lock_tracker+0x3ec/0x660
[ 162.918172][ T9006] ? ocfs2_inode_lock_atime+0x4e0/0x4e0
[ 162.923701][ T9006] ocfs2_set_acl+0x4e1/0x590
[ 162.928283][ T9006] ocfs2_iop_set_acl+0x1ab/0x2a0
[ 162.933206][ T9006] ? read_lock_is_recursive+0x20/0x20
[ 162.938565][ T9006] ? ocfs2_xattr_get+0x220/0x220
[ 162.943488][ T9006] ? evm_inode_set_acl+0xbb/0x410
[ 162.948503][ T9006] ? __mnt_want_write+0x68/0x2a0
[ 162.953433][ T9006] ? down_write+0x162/0x1f0
[ 162.957918][ T9006] ? down_read_killable+0x340/0x340
[ 162.963095][ T9006] ? evm_revalidate_status+0x4f/0xb0
[ 162.968367][ T9006] ? make_vfsuid+0x51/0xb0
[ 162.972767][ T9006] ? inode_owner_or_capable+0xf0/0x1c0
[ 162.978209][ T9006] vfs_remove_acl+0x4e3/0x740
[ 162.982877][ T9006] path_removexattr+0x23b/0x3f0
[ 162.987715][ T9006] ? listxattr+0x280/0x280
[ 162.992115][ T9006] ? do_futex+0x2ff/0x3e0
[ 162.996438][ T9006] ? lock_chain_count+0x20/0x20
[ 163.001274][ T9006] ? syscall_enter_from_user_mode+0x25/0x80
[ 163.007153][ T9006] __x64_sys_removexattr+0x60/0x70
[ 163.012250][ T9006] do_syscall_64+0x55/0xb0
[ 163.016657][ T9006] ? clear_bhb_loop+0x40/0x90
[ 163.021318][ T9006] ? clear_bhb_loop+0x40/0x90
[ 163.025980][ T9006] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 163.031855][ T9006] RIP: 0033:0x7fa67f18f749
[ 163.036264][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 163.055854][ T9006] RSP: 002b:00007fa68011a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5
[ 163.064250][ T9006] RAX: ffffffffffffffda RBX: 00007fa67f3e5fa0 RCX: 00007fa67f18f749
[ 163.072205][ T9006] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000200000000580
[ 163.080166][ T9006] RBP: 00007fa67f213f91 R08: 0000000000000000 R09: 0000000000000000
[ 163.088121][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 163.096075][ T9006] R13: 00007fa67f3e6038 R14: 00007fa67f3e5fa0 R15: 00007ffff6ea2328
[ 163.104039][ T9006]
[ 163.107129][ C0] vkms_vblank_simulate: vblank timer overrun
[ 163.215376][ T5788] ocfs2: Unmounting device (7,3) on (node local)
[ 163.279166][ T5838] usb 3-1: config 0 has no interfaces?
[ 163.291964][ T5838] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 163.302028][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 163.314463][ T5838] usb 3-1: Product: syz
[ 163.318650][ T5838] usb 3-1: Manufacturer: syz
[ 163.333737][ T5838] usb 3-1: SerialNumber: syz
[ 163.343787][ T5838] r8152-cfgselector 3-1: config 0 descriptor??
[ 163.558462][ T5838] usbip-host 3-1: 3-1 is not in match_busid table... skip!
[ 163.767005][ T5838] usb 3-1: USB disconnect, device number 10