last executing test programs: 2m34.549450932s ago: executing program 3 (id=240): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RXATTRWALK(r1, 0x0, 0x0) 2m34.281875298s ago: executing program 3 (id=243): r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r0, 0x200000000000000) fallocate(r0, 0x3, 0x5, 0xffffffff) 2m34.128684032s ago: executing program 3 (id=244): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$eJzs3e9rJGcdAPDvbHbz4y6aqH1RhdbDFu6KXnLp2TaI9E4Q3xWU6usz5PZCuE32yG7aSyiSwz9AENGCb/SVbwT/AEHuTyhCwb4XK8qhVwWLaEfmR+6SdKfZpNldm3w+8GSenXlmvt9ndzM7O/MkE8CZdSEirkfEWEQ8FxEz5fxaWWKnKFm79x6+sZyVJNL01b8lkZTzsmZJWTLny9Umi8l+U8Wks7V9e6nVam6Us+e7a3fmO1vbl1fXllaaK831q1cXXlx8afGFxSsn0s+sXy9/888//dGvvvXy777y+h9v/PXSD7J8p8vlu/04acVz0siei0fqEbExiGAjMFb2599poaLZxJDTAgCgQnaM/9mI+FJ+/D8TY/nRXLXxPfVk4NkBAAAAJyG9Nh3/SSLSI2oceQ0AAABgVGr5GNikNleOBZiOWm1urhjD+0Scq7Xane6Xb7U3128WY2Vno1G7tdpqXsnH1E5ERCPJHi88OqNQPH4+b5uVZN8Y4J/MTOXL55bbrZujOOEBAAAAZ9D5A9///zlTfP8HAAAATpnZcnpuxHkAAAAAgzM76gQAAACAgTvG9//xQeQBAAAADMS3X3klK+nu/a9vvra1ebv92uWbzc7tubXN5bnl9saduZV2e6WVTkSsHba9Vrt956uxvnl3vtvsdOc7W9s31tqb690bq/tugQ0AAAAM0We+eP+dJCJ2vjaVl9i9tj9WsYK/FYBTo9ZnuzT78e5gcwGGq+pjHjj96h+92DBfOMUaxSQZdR7A6By2A5isavHWscI5rgAAgBG4+Pn776TJh6//1x+fGwBOqX6v/wOnT8X1/3Rm2IkAQ1d5/f+QgQHAJ1/DCEA48w6//l/hrXzR9cMjpOmh2wIAAAZqOi9Jba68FjgdtffTQsxGI7m12mpeiYhPR8QfZhoT2eOFfM3EHw0AAAAAAAAAAAAAAAAAAAAAAAAAQJ/SNIn0GOrHWgsAAAAYhYjaX5LyPsAXZ56dPnh+YDx5P78V8Adpmr7+81d/dnep291YyOb/PZ8/HhHdN7P546M4fQEAAADssXuX//z7+/ONEWcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGn13sM3lnfLMOM++EZEzPaKX4/JfDoZjYg4948k6nvWSyJi7ATi79yLiCd7xU+ytGK2zOJg/FpETOVZDDz+U2ma9ox//mNHh7Ptfrb/ud7r968WF/Jp79//elGufdz41fu/2qP939jB+PVi//epPmN84e3fzO95+L3H1Ylieb33/mc3flKx/32mV7D6h2d9/7vb21W5pb+MuNjz8yfZF2u+u3ZnvrO1fXl1bWmludJcv3p14cXFlxZfWLwyf2u11Sx/9ozx46d++0FV/AcXIs6V8cd3cyo/WGaLydeTR6mM78vp2azSqNryY/99++7DzxXVva3zrT64F3Hpmd6v/5P5tOfz/4t/pbn8cyBbfrH8TEh2inpE+faNiKd//funK/t/b7KsHf31v3R413PPfeeHf+qzKQAwBJ2t7dtLrVZzY+CVN9M07a9xdlTa/5aTiJ2Di7IDuBPuxVREVCzaH2uqfFaj3y0/UZnqu1MRQ3p1jlq5dpTG6cSR3mzJzv9BB89wZTx/Q456zwQAAJy0x0f/o84EAAAAAAAAAAAAAAAAAAAAzq5h/F+xgzF3RtNVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICP9L8AAAD//6zP1vE=") 2m33.189298015s ago: executing program 3 (id=251): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 2m33.00458157s ago: executing program 3 (id=253): unshare(0x40400) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 2m32.321428347s ago: executing program 3 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdb5f250c0000001c00038007000380140001800500020000000000080001005a080000180001801400020076657468305f746f5f626f6e64"], 0x48}}, 0x0) 2m32.017422344s ago: executing program 32 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdb5f250c0000001c00038007000380140001800500020000000000080001005a080000180001801400020076657468305f746f5f626f6e64"], 0x48}}, 0x0) 2m26.999168087s ago: executing program 4 (id=313): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m26.282660705s ago: executing program 4 (id=319): r0 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x3}], {}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x2c, 0x0) getxattr(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', &(0x7f0000002b00)=""/213, 0xd5) 2m25.776082967s ago: executing program 4 (id=323): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8}]}, 0x24}}, 0x0) 2m25.395890796s ago: executing program 4 (id=327): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1812471, &(0x7f0000000280)={[{@gid}]}) 2m24.81535876s ago: executing program 4 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, r1, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xfffffff7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) 2m24.195928846s ago: executing program 4 (id=335): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) 2m23.850900064s ago: executing program 33 (id=335): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) 43.457298715s ago: executing program 1 (id=1402): r0 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x189, 0x0) 43.273871289s ago: executing program 1 (id=1404): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x14, 0x4}) close(r0) 43.107543133s ago: executing program 1 (id=1405): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x8, 0x0, 0x40, 0x4, 0x1f, 0x14, 0x3}}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x4c840) 42.943572437s ago: executing program 1 (id=1407): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000c00, &(0x7f0000000140)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,iocharset=cp437,iocharset=iso8859-7,nodiscard,errors=continue,errors=continue,uid=', @ANYRESHEX=0xee01, @ANYBLOB], 0x21, 0x61e2, &(0x7f00000063c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 41.810053785s ago: executing program 1 (id=1418): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 39.9753159s ago: executing program 1 (id=1437): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) 39.59292819s ago: executing program 34 (id=1437): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) 6.90860361s ago: executing program 7 (id=1720): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) 4.934505809s ago: executing program 5 (id=1729): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r0, 0x4, 0x4000) 4.551892698s ago: executing program 7 (id=1733): unshare(0x28000600) r0 = socket$inet6(0xa, 0x3, 0x6) bind(r0, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5e54}}, 0x80) 4.524306189s ago: executing program 5 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x24}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 4.133640259s ago: executing program 5 (id=1735): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000, 0x4}, 0x20) 4.095556009s ago: executing program 7 (id=1736): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@usrjquota}, {@nobh}, {@acl}]}, 0x2, 0x462, &(0x7f0000001f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000100)={@desc={0x1, 0x0, @auto="1e9a7dbc5d9b3fee"}}) 3.887012205s ago: executing program 5 (id=1738): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000001080)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@uni_xlateno}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@utf8no}, {@uni_xlate}, {@utf8}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_winnt}, {@utf8no}, {@shortname_winnt}]}, 0x1, 0x27f, &(0x7f00000008c0)="$eJzs3cFqM1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AMWdXYgj6UzSpExaW9Om/P/3bXo595zec2emzWpuvnhjcHx4cnZ08e1v0WwmsbYTO3GZRCfWYuL7qPTrH9VxAOCZu8zz+DMvNIrQ+XxGfUFluvbozQEAj2L283/VvQAAT+PjTz79YHd/f++jLGtGDH4YdpMofhbzu0fxVfSjF1vRjr8j8qli/N77+3uRZmOdeGswGnbHlYPPfy5//+7vEVf129GOTnX9dlaYqR8Nu/V4pVx/px+9D3+KdrxWXf9ORX101+PtN2f634x2/PJlnEQ/DsveJvXfbWfZu/mPf33z2Tg6rk9Gw25jmldm1570xgAAAAAAAAAAAAAAAAAAAAAA8ELbzKY68+fvTA7+v2X+lvOBRjPn82xlWZYnRf51fRqvp5Gucu8AAAAAAAAAAAAAAAAAAADwXJydf3180O/3Tpc6mLzWXzEV/8xHGhHx8LU2/nty0U/Uytb6ScT91qpH46ry7uTaPXfRGvfTO03SWN4tSKaR1uzURhRrjSOtYjAT+d+rN+NqMHm6jg+Su25us+ohWcIgr3j8agur1m9GWuUOKpJbt6y+/uqDes7bC6aSiKhPL+Z8TnrjT7i+3Gv4JP9+AAAAAAAAAAAAAAAAAACAGdcv/VZMXqygIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYgevv/7/HYFQWL8rJa+NBGmVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgJfBvAAAA//8r6GKv") unlink(&(0x7f0000000000)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc41, 0x0) 3.489521714s ago: executing program 5 (id=1741): r0 = socket$inet6(0xa, 0x806, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x10d, 0xf, 0xffffffffffffffff, 0x7) 3.364713327s ago: executing program 2 (id=1743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x1f2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) 3.000016236s ago: executing program 2 (id=1746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "9f606a3caa"}]}], {0x14}}, 0x98}}, 0x0) 2.86070398s ago: executing program 2 (id=1747): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x7ff, 0x0, 0x400000}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="aa3ab7afd700", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) 2.03231438s ago: executing program 0 (id=1751): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'sit0\x00', 0x0}) 1.920070053s ago: executing program 0 (id=1752): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000140)={[{@uid}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@gid={'gid', 0x3d, 0xee00}}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'cp1251'}}, {}, {@barrier}]}, 0xfc, 0x6ea, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 1.892616133s ago: executing program 7 (id=1753): set_mempolicy(0x0, &(0x7f0000000040)=0x8000000000000001, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) 1.6229238s ago: executing program 7 (id=1755): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}}, 0x4004) 1.62272315s ago: executing program 0 (id=1756): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl(r0, 0x8b01, &(0x7f0000000040)) 1.400378915s ago: executing program 5 (id=1757): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000040)={0x0, 0x15, 0x4, "a524044a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.161839211s ago: executing program 2 (id=1758): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xa, 0x247, &(0x7f0000001300)="$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") openat(0xffffffffffffff9c, 0x0, 0x88040, 0x12) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 942.499697ms ago: executing program 6 (id=1760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)={0x34, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) 795.22972ms ago: executing program 2 (id=1761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2004c001}, 0x20040000) 687.106573ms ago: executing program 6 (id=1762): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x5) close(0x3) 581.768975ms ago: executing program 6 (id=1763): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x11}) 548.666806ms ago: executing program 2 (id=1764): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x7ec, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) 489.601868ms ago: executing program 7 (id=1765): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000000)={[{@coherency_buffered}, {@heartbeat_none}, {@nouser_xattr}, {@inode64}, {@heartbeat_none}, {@usrquota}]}, 0x0, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "7474919ea04e04917c980c53da46c007"}, 0x1001, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000280)=@v2={0x3, 0x2, 0x3, 0xc7a, 0x24, "6592fdb85abc7ccefdb7cc916e69f2c2c136ae473c4987024b334aa0813b9b9216ec61c5"}, 0x2d, 0x0) 465.310048ms ago: executing program 0 (id=1766): setresuid(0xee00, 0xee01, 0xee01) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@loopback, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) 349.663511ms ago: executing program 6 (id=1767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 288.382833ms ago: executing program 0 (id=1768): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000022c000/0x400000)=nil, 0x400000, 0x4) 194.731875ms ago: executing program 6 (id=1769): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000019580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) tkill(r1, 0x10) 106.344467ms ago: executing program 6 (id=1770): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000001c0)='./bus\x00', 0x2000844, &(0x7f0000000000)={[{@fat=@umask={'umask', 0x3d, 0x81}}, {@fat=@gid={'gid', 0x3d, 0xee01}}, {@nodots}, {@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0x560}}, {@dots}, {@fat=@uid}, {@dots}, {@nodots}, {@dots}, {@fat=@nfs_stale_rw}, {}, {@nodots}, {@dots}, {@dots}, {@fat=@nfs_nostale_ro}]}, 0x21, 0x244, &(0x7f00000004c0)="$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") execve(&(0x7f0000000480)='.\x02\x00', 0x0, 0x0) symlink(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='.\x02\x00') 0s ago: executing program 0 (id=1771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) kernel console output (not intermixed with test programs): :045E:07DA.000A: report is too long [ 132.197136][ T4233] microsoft 0003:045E:07DA.000A: item 0 4 0 8 parsing failed [ 132.224913][ T4233] microsoft 0003:045E:07DA.000A: parse failed [ 132.248681][ T4233] microsoft: probe of 0003:045E:07DA.000A failed with error -22 [ 132.285331][ T6190] loop2: detected capacity change from 0 to 64 [ 132.383459][ T4233] usb 1-1: USB disconnect, device number 5 [ 132.410167][ T4231] usb 7-1: Using ep0 maxpacket: 16 [ 132.601348][ T4231] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 132.659282][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.665677][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.830083][ T6206] netlink: 20 bytes leftover after parsing attributes in process `syz.5.669'. [ 132.870896][ T4231] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 132.899319][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.907414][ T4231] usb 7-1: Product: syz [ 132.911609][ T4231] usb 7-1: Manufacturer: syz [ 132.926580][ T4231] usb 7-1: SerialNumber: syz [ 132.932644][ T4231] r8152-cfgselector 7-1: config 0 descriptor?? [ 133.110647][ T6180] FAT-fs (loop1): Directory bread(block 64) failed [ 133.123999][ T6180] FAT-fs (loop1): Directory bread(block 65) failed [ 133.134720][ T6180] FAT-fs (loop1): Directory bread(block 66) failed [ 133.140966][ T6212] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.171868][ T6180] FAT-fs (loop1): Directory bread(block 67) failed [ 133.180986][ T6180] FAT-fs (loop1): Directory bread(block 68) failed [ 133.200494][ T6180] FAT-fs (loop1): Directory bread(block 69) failed [ 133.226672][ T6180] FAT-fs (loop1): Directory bread(block 70) failed [ 133.233234][ T6180] FAT-fs (loop1): Directory bread(block 71) failed [ 133.243114][ T6180] FAT-fs (loop1): Directory bread(block 72) failed [ 133.252356][ T6180] FAT-fs (loop1): Directory bread(block 73) failed [ 133.328188][ T6215] set_capacity_and_notify: 1 callbacks suppressed [ 133.328204][ T6215] loop5: detected capacity change from 0 to 256 [ 133.365868][ T6215] exfat: Deprecated parameter 'utf8' [ 133.371823][ T6215] exfat: Deprecated parameter 'namecase' [ 133.408685][ T6215] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 133.455938][ T4231] r8152-cfgselector 7-1: Unknown version 0x0000 [ 133.462572][ T4231] r8152-cfgselector 7-1: bad CDC descriptors [ 133.525610][ T4231] r8152-cfgselector 7-1: Unknown version 0x0000 [ 133.565315][ T4231] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 133.999405][ T6242] loop0: detected capacity change from 0 to 256 [ 134.162359][ T6242] exfat: Deprecated parameter 'utf8' [ 134.173914][ T6242] exfat: Deprecated parameter 'namecase' [ 134.195558][ T6242] exfat: Deprecated parameter 'namecase' [ 134.201365][ T6242] exfat: Deprecated parameter 'utf8' [ 134.345249][ T6260] loop2: detected capacity change from 0 to 2048 [ 134.453421][ T6242] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 134.616277][ T6260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.715240][ T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 134.965277][ T13] usb 7-1: Using ep0 maxpacket: 32 [ 135.085528][ T13] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.107057][ T6296] loop1: detected capacity change from 0 to 16 [ 135.120610][ T13] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.171663][ T13] usb 7-1: config 0 interface 0 has no altsetting 0 [ 135.199317][ T13] usb 7-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 135.250683][ T6296] erofs: (device loop1): mounted with root inode @ nid 36. [ 135.275104][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.349187][ T13] usb 7-1: config 0 descriptor?? [ 135.525489][ T6316] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 135.593527][ T6313] loop0: detected capacity change from 0 to 4096 [ 135.683004][ T6313] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 135.827494][ T13] belkin 0003:050D:3201.000B: unknown main item tag 0x3 [ 135.834531][ T13] belkin 0003:050D:3201.000B: unknown main item tag 0x0 [ 135.882519][ T13] belkin 0003:050D:3201.000B: unknown main item tag 0x0 [ 135.913360][ T6330] loop2: detected capacity change from 0 to 64 [ 135.920450][ T13] belkin 0003:050D:3201.000B: unknown main item tag 0x0 [ 135.950776][ T13] belkin 0003:050D:3201.000B: unknown main item tag 0x0 [ 135.984557][ T13] belkin 0003:050D:3201.000B: unknown main item tag 0x0 [ 136.015305][ T6313] ntfs3: loop0: failed to convert "c46c" to cp1251 [ 136.025569][ T13] belkin 0003:050D:3201.000B: unknown main item tag 0x0 [ 136.053035][ T13] belkin 0003:050D:3201.000B: unknown main item tag 0x0 [ 136.136316][ T13] belkin 0003:050D:3201.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.6-1/input0 [ 136.189220][ T13] usb 7-1: USB disconnect, device number 3 [ 136.417228][ T6344] loop2: detected capacity change from 0 to 512 [ 136.714725][ T6362] loop6: detected capacity change from 0 to 128 [ 136.785746][ T6344] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 136.809918][ T6367] loop1: detected capacity change from 0 to 512 [ 136.816787][ T6344] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.940637][ T6362] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 136.956254][ T6367] FAT-fs (loop1): Directory bread(block 199916) failed [ 136.963208][ T6367] FAT-fs (loop1): Directory bread(block 199917) failed [ 136.981524][ T6362] hpfs: filesystem error: improperly stopped [ 137.007949][ T6362] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 137.026329][ T6367] FAT-fs (loop1): Directory bread(block 199918) failed [ 137.065204][ T6362] hpfs: You really don't want any checks? You are crazy... [ 137.076111][ T6367] FAT-fs (loop1): Directory bread(block 199919) failed [ 137.083065][ T6367] FAT-fs (loop1): Directory bread(block 199920) failed [ 137.105466][ T6362] hpfs: hpfs_map_sector(): read error [ 137.111916][ T6362] hpfs: code page support is disabled [ 137.121178][ T6332] loop5: detected capacity change from 0 to 32768 [ 137.145554][ T6367] FAT-fs (loop1): Directory bread(block 199921) failed [ 137.147901][ T6362] hpfs: hpfs_map_4sectors(): unaligned read [ 137.214751][ T6367] FAT-fs (loop1): Directory bread(block 199922) failed [ 137.229252][ T6362] hpfs: hpfs_map_4sectors(): unaligned read [ 137.245561][ T6367] FAT-fs (loop1): Directory bread(block 199923) failed [ 137.284707][ T6362] hpfs: filesystem error: unable to find root dir [ 137.298879][ T6367] FAT-fs (loop1): Directory bread(block 199916) failed [ 137.328978][ T6367] FAT-fs (loop1): Directory bread(block 199917) failed [ 137.401655][ T5998] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 137.968666][ T6379] fido_id[6379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 138.019046][ T5998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.069123][ T5998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 138.195200][ T5998] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 138.264704][ T5998] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 138.335926][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.390810][ T5998] usb 3-1: config 0 descriptor?? [ 138.491793][ T6370] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.636830][ T6403] set_capacity_and_notify: 1 callbacks suppressed [ 138.636846][ T6403] loop1: detected capacity change from 0 to 2048 [ 138.883368][ T6418] loop5: detected capacity change from 0 to 512 [ 138.958208][ T5998] hid (null): unknown global tag 0xa3 [ 138.966580][ T5998] asus 0003:0B05:17E0.000C: unexpected long global item [ 138.998724][ T5998] asus 0003:0B05:17E0.000C: Asus hid parse failed: -22 [ 139.014435][ T5998] asus: probe of 0003:0B05:17E0.000C failed with error -22 [ 139.202885][ T4231] usb 3-1: USB disconnect, device number 7 [ 139.226974][ T6431] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.258704][ T6434] netlink: 20 bytes leftover after parsing attributes in process `syz.6.748'. [ 139.317127][ T4188] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.357011][ T6418] EXT4-fs (loop5): orphan cleanup on readonly fs [ 139.374238][ T6418] EXT4-fs (loop5): 1 orphan inode deleted [ 139.389030][ T6418] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.585330][ T4188] usb 1-1: Using ep0 maxpacket: 16 [ 139.745342][ T4188] usb 1-1: unable to get BOS descriptor or descriptor too short [ 139.845477][ T4188] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.855898][ T6418] EXT4-fs (loop5): re-mounted. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 139.885435][ T6418] ext4 filesystem being remounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.895481][ T4188] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.957908][ T4188] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 139.975454][ T6452] loop1: detected capacity change from 0 to 512 [ 140.094795][ T6452] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 140.185538][ T4188] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 140.195642][ T4188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.204260][ T4188] usb 1-1: Product: syz [ 140.208704][ T4188] usb 1-1: Manufacturer: syz [ 140.213333][ T4188] usb 1-1: SerialNumber: syz [ 140.219527][ T6452] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 140.555561][ T4188] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 140.581961][ T4188] usb 1-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 140.631050][ T4188] usb 1-1: 1:1 : unsupported format bits 0x28b06562 [ 140.668878][ T4188] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 140.749402][ T4188] usb 1-1: unit 3 not found! [ 140.846084][ T4188] usb 1-1: USB disconnect, device number 6 [ 141.141361][ T6498] loop2: detected capacity change from 0 to 128 [ 141.166135][ T4484] udevd[4484]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.247440][ T6498] ADFS-fs (loop2): unrecognised mount option "u" or missing value [ 141.269100][ T6507] loop1: detected capacity change from 0 to 1024 [ 141.404188][ T6498] netlink: 260 bytes leftover after parsing attributes in process `syz.2.773'. [ 141.416747][ T6507] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 141.658593][ T5993] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 141.810242][ T6535] bridge_slave_0: default FDB implementation only supports local addresses [ 142.070991][ T5993] usb 7-1: Using ep0 maxpacket: 16 [ 142.220441][ T6551] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 142.267383][ T5993] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.302107][ T5993] usb 7-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 142.328664][ T6551] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 142.347331][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.394298][ T5993] usb 7-1: config 0 descriptor?? [ 142.405226][ T6551] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 142.422033][ T6551] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 142.502188][ T6551] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 142.549192][ T6551] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 142.579636][ T6551] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 142.632769][ T6551] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 142.640252][ T6551] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 142.660682][ T6551] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 142.695768][ T6551] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 142.724896][ T6551] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 142.743167][ T6551] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 142.780223][ T6551] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 142.920441][ T6576] nbd: must specify an index to disconnect [ 142.949936][ T6575] loop5: detected capacity change from 0 to 2048 [ 142.953909][ T5993] logitech 0003:046D:CA03.000D: unknown main item tag 0x7 [ 142.963559][ T5993] logitech 0003:046D:CA03.000D: unknown main item tag 0x0 [ 143.004076][ T5993] logitech 0003:046D:CA03.000D: unknown main item tag 0x1 [ 143.027406][ T5993] logitech 0003:046D:CA03.000D: unknown main item tag 0xd [ 143.045239][ T5993] logitech 0003:046D:CA03.000D: item fetching failed at offset 38/41 [ 143.084685][ T6575] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.105623][ T5993] logitech 0003:046D:CA03.000D: parse failed [ 143.111698][ T5993] logitech: probe of 0003:046D:CA03.000D failed with error -22 [ 143.182969][ T6587] loop1: detected capacity change from 0 to 256 [ 143.230309][ T5993] usb 7-1: USB disconnect, device number 4 [ 143.655716][ T5993] kernel write not supported for file /uhid (pid: 5993 comm: kworker/1:13) [ 144.304546][ T5993] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 144.385350][ T4188] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.421925][ T6629] loop0: detected capacity change from 0 to 1024 [ 144.630344][ T4188] usb 2-1: Using ep0 maxpacket: 32 [ 144.710092][ T5993] usb 6-1: Using ep0 maxpacket: 32 [ 144.755702][ T4188] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 144.776832][ T4188] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 144.810517][ T4188] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 144.853443][ T4188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.901651][ T4188] usb 2-1: config 0 descriptor?? [ 144.941112][ T6611] loop6: detected capacity change from 0 to 32768 [ 144.952793][ T5993] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 144.966300][ T5993] usb 6-1: config 0 has no interface number 0 [ 145.130071][ T6616] loop2: detected capacity change from 0 to 40427 [ 145.202669][ T5993] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 145.217253][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.253069][ T5993] usb 6-1: Product: syz [ 145.275200][ T5993] usb 6-1: Manufacturer: syz [ 145.292351][ T5993] usb 6-1: SerialNumber: syz [ 145.307090][ T6616] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 145.318207][ T5993] usb 6-1: config 0 descriptor?? [ 145.352238][ T6649] loop0: detected capacity change from 0 to 512 [ 145.369163][ T6616] F2FS-fs (loop2): invalid crc value [ 145.390645][ T6616] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.402215][ T4188] waltop 0003:172F:0034.000E: unknown main item tag 0x6 [ 145.416821][ T4188] waltop 0003:172F:0034.000E: item fetching failed at offset 39/40 [ 145.421995][ T5993] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 145.445824][ T4188] waltop: probe of 0003:172F:0034.000E failed with error -22 [ 145.539802][ T6649] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.623552][ T4278] usb 2-1: USB disconnect, device number 6 [ 145.683877][ T6649] EXT4-fs error (device loop0): __ext4_iget:4919: inode #16: block 8388380: comm syz.0.823: invalid block [ 145.701259][ T6616] F2FS-fs (loop2): recover fsync data on readonly fs [ 145.726580][ T5993] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 145.736169][ T6616] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 145.742904][ T6616] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 145.773909][ T6649] EXT4-fs (loop0): Remounting filesystem read-only [ 145.796992][ T6649] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.823: couldn't read orphan inode 16 (err -117) [ 145.809497][ T5993] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 145.850726][ T6616] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.905691][ T6649] EXT4-fs (loop0): Remounting filesystem read-only [ 145.912304][ T6649] EXT4-fs (loop0): 1 orphan inode deleted [ 145.958148][ T6649] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 146.095507][ T6649] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #12: block 7: comm syz.0.823: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 146.143983][ T4278] usb 6-1: USB disconnect, device number 4 [ 146.164526][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 146.183685][ T4278] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 146.194023][ T6649] EXT4-fs (loop0): Remounting filesystem read-only [ 146.246018][ T4278] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 146.265967][ T4278] quatech2 6-1:0.51: device disconnected [ 146.354249][ T6666] loop1: detected capacity change from 0 to 736 [ 146.658081][ T6657] loop6: detected capacity change from 0 to 32768 [ 146.861325][ T6657] XFS (loop6): Mounting V5 Filesystem [ 147.041338][ T6693] loop0: detected capacity change from 0 to 128 [ 147.100829][ T6691] loop5: detected capacity change from 0 to 4096 [ 147.268001][ T6693] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 147.287294][ T6693] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.581388][ T6691] ntfs: volume version 3.1. [ 147.675389][ T6657] XFS (loop6): Ending clean mount [ 147.763571][ T6718] loop2: detected capacity change from 0 to 512 [ 147.774025][ T6719] loop1: detected capacity change from 0 to 64 [ 147.923171][ T6718] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.030605][ T6719] attempt to access beyond end of device [ 148.030605][ T6719] loop1: rw=0, want=1026, limit=64 [ 148.036148][ T6718] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.094796][ T6719] Buffer I/O error on dev loop1, logical block 512, async page read [ 148.185904][ T6719] attempt to access beyond end of device [ 148.185904][ T6719] loop1: rw=0, want=113154, limit=64 [ 148.214752][ T5124] XFS (loop6): Unmounting Filesystem [ 148.262552][ T6719] Buffer I/O error on dev loop1, logical block 56576, async page read [ 148.379220][ T6735] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 148.431081][ T6735] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 148.585297][ T6735] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.845: corrupted in-inode xattr [ 148.658021][ T6735] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.845: couldn't read orphan inode 15 (err -117) [ 148.699852][ T6735] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 148.724269][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.855227][ T6738] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 149.073479][ T6738] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 149.346133][ T4872] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 149.373885][ T4872] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 149.924733][ T26] audit: type=1326 audit(1784907399.763:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.1.873" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d50078e99 code=0x0 [ 150.006093][ T6793] set_capacity_and_notify: 2 callbacks suppressed [ 150.006108][ T6793] loop6: detected capacity change from 0 to 256 [ 150.134187][ T6793] exfat: Deprecated parameter 'utf8' [ 150.180861][ T6793] exfat: Deprecated parameter 'utf8' [ 150.265676][ T6793] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 150.314112][ T6793] exFAT-fs (loop6): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 150.357638][ T6798] exFAT-fs (loop6): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 150.862603][ T6818] loop2: detected capacity change from 0 to 4096 [ 151.169207][ T6835] trusted_key: encrypted_key: keylen parameter is missing [ 151.182920][ T6818] ntfs: volume version 3.1. [ 151.890610][ T6852] loop5: detected capacity change from 0 to 512 [ 152.081154][ T6852] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 152.145394][ T6852] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.257188][ T6852] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.882: bad orphan inode 131083 [ 152.352803][ T6852] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,journal_dev=0x00000000000003f2,noload,,errors=continue. Quota mode: none. [ 152.373608][ T6873] loop6: detected capacity change from 0 to 256 [ 152.383646][ T6838] loop1: detected capacity change from 0 to 32768 [ 152.545382][ T4233] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.785370][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 152.905386][ T4233] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.951121][ T4233] usb 1-1: config 0 interface 0 has no altsetting 0 [ 152.983596][ T4233] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 153.019785][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.082497][ T4233] usb 1-1: config 0 descriptor?? [ 153.586975][ T4233] dragonrise 0003:0079:0011.000F: unknown main item tag 0x2 [ 153.594434][ T4233] dragonrise 0003:0079:0011.000F: unknown main item tag 0x7 [ 153.624158][ T4233] dragonrise 0003:0079:0011.000F: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 153.674955][ T6903] loop1: detected capacity change from 0 to 1024 [ 153.719385][ T6889] loop5: detected capacity change from 0 to 32768 [ 153.731362][ T5993] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 153.826060][ T7] usb 1-1: USB disconnect, device number 7 [ 153.871657][ T6906] fido_id[6906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 154.087349][ T5993] usb 7-1: Using ep0 maxpacket: 16 [ 154.216761][ T6917] loop1: detected capacity change from 0 to 2048 [ 154.248393][ T6917] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 154.272810][ T6919] loop2: detected capacity change from 0 to 4096 [ 154.279971][ T6917] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 154.295099][ T6917] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 154.344669][ T5993] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.378312][ T6919] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 154.405209][ T5993] usb 7-1: config 0 has no interface number 0 [ 154.419909][ T6919] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 154.441918][ T6917] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 154.512496][ T6917] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 154.542955][ T6919] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 154.574616][ T6917] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 154.591386][ T6917] UDF-fs: Scanning with blocksize 512 failed [ 154.620477][ T6919] ntfs: volume version 3.1. [ 154.625239][ T6917] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 154.688835][ T5993] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 154.701985][ T6917] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 154.713174][ T5993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.734192][ T5993] usb 7-1: Product: syz [ 154.749966][ T5993] usb 7-1: Manufacturer: syz [ 154.767607][ T5993] usb 7-1: SerialNumber: syz [ 154.785195][ T5993] usb 7-1: config 0 descriptor?? [ 154.834256][ T5993] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 154.844325][ T6917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.871487][ T6919] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 154.910022][ T6919] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 155.041632][ T4198] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 155.098553][ T5993] gspca_spca1528: reg_w err -71 [ 155.174794][ T5993] spca1528: probe of 7-1:0.1 failed with error -71 [ 155.214316][ T5993] usb 7-1: USB disconnect, device number 5 [ 156.138585][ T6928] loop1: detected capacity change from 0 to 32768 [ 156.177895][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.926'. [ 156.231187][ T6931] binder: 6930:6931 ioctl c018620c 200000000240 returned -22 [ 156.381007][ T6966] loop0: detected capacity change from 0 to 8 [ 156.441150][ T6928] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 156.598821][ T26] audit: type=1800 audit(1784907406.433:17): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.923" name=2E02 dev="loop1" ino=17058 res=0 errno=0 [ 156.742449][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 156.878892][ T6970] loop5: detected capacity change from 0 to 4096 [ 156.913015][ T6970] ntfs3: Invalid value for uid. [ 157.221967][ T6984] device macsec0 entered promiscuous mode [ 157.531114][ T6988] loop5: detected capacity change from 0 to 64 [ 157.959479][ T6972] loop2: detected capacity change from 0 to 32768 [ 158.080269][ T5993] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 158.260310][ T7014] loop5: detected capacity change from 0 to 64 [ 158.298831][ T7015] loop0: detected capacity change from 0 to 2364 [ 158.372970][ T6972] XFS (loop2): Mounting V5 Filesystem [ 158.458065][ T5993] usb 7-1: Using ep0 maxpacket: 32 [ 158.556524][ T6972] XFS (loop2): Ending clean mount [ 158.602023][ T5993] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 158.625218][ T5993] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 158.628100][ T3069] attempt to access beyond end of device [ 158.628100][ T3069] loop5: rw=1, want=268435470, limit=64 [ 158.633863][ T5993] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 158.633902][ T5993] usb 7-1: config 1 has no interface number 0 [ 158.633940][ T5993] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.633987][ T5993] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 158.704403][ T7026] loop1: detected capacity change from 0 to 4096 [ 158.717542][ T3069] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 158.818529][ T5993] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 158.832864][ T7026] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 158.843594][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.884899][ T4198] XFS (loop2): Unmounting Filesystem [ 158.949778][ T7026] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 158.982635][ T5993] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 159.428887][ T7044] tipc: Enabling of bearer rejected, failed to enable media [ 159.554986][ T5993] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 159.666577][ T5997] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 159.729845][ T7051] loop1: detected capacity change from 0 to 512 [ 159.870898][ T7051] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.917777][ T7051] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 159.980485][ T7051] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.966: bg 0: block 248: padding at end of block bitmap is not set [ 160.030895][ T5997] usb 6-1: Using ep0 maxpacket: 16 [ 160.085670][ T7051] Quota error (device loop1): write_blk: dquota write failed [ 160.093156][ T7051] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 160.192291][ T7051] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.966: Failed to acquire dquot type 1 [ 160.211804][ T4233] usb 7-1: USB disconnect, device number 6 [ 160.223458][ T4233] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 160.231332][ T5997] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 160.241673][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.274412][ T7051] EXT4-fs (loop1): 1 truncate cleaned up [ 160.285546][ T7051] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 160.298378][ T5997] usb 6-1: config 0 descriptor?? [ 160.352750][ T5997] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 160.403273][ T7051] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 160.440195][ T7051] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 160.507950][ T7051] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.966: Failed to acquire dquot type 1 [ 160.591251][ T5997] usb 6-1: Detected FT232BM [ 160.667575][ T1196] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6) [ 160.695574][ T1196] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 1 [ 161.055873][ T5997] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 161.072722][ T5997] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 161.148524][ T5997] usb 6-1: USB disconnect, device number 5 [ 161.170103][ T5997] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 161.225546][ T5997] ftdi_sio 6-1:0.0: device disconnected [ 161.575336][ T4233] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.716347][ T7069] loop2: detected capacity change from 0 to 32768 [ 161.825325][ T4233] usb 2-1: Using ep0 maxpacket: 16 [ 161.945573][ T4233] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1600, setting to 1024 [ 161.957321][ T7069] [ 161.957321][ T7069] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.957321][ T7069] [ 161.974086][ T4233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.015468][ T4233] usb 2-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 162.044314][ T7069] ERROR: (device loop2): diWrite: ixpxd invalid [ 162.044314][ T7069] [ 162.055277][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.098543][ T4233] usb 2-1: config 0 descriptor?? [ 162.115241][ T7069] ERROR: (device loop2): txCommit: [ 162.115241][ T7069] [ 162.116583][ T7092] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.259247][ T4198] [ 162.259247][ T4198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.259247][ T4198] [ 162.291322][ T4198] [ 162.291322][ T4198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.291322][ T4198] [ 162.439882][ T7122] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 162.439882][ T7122] The task syz.5.999 (7122) triggered the difference, watch for misbehavior. [ 162.654010][ T4233] wacom 0003:056A:00BC.0010: ignoring exceeding usage max [ 162.718227][ T4233] wacom 0003:056A:00BC.0010: unknown main item tag 0x6 [ 162.766853][ T4233] wacom 0003:056A:00BC.0010: ignoring exceeding usage max [ 162.792777][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1004'. [ 162.806727][ T4233] wacom 0003:056A:00BC.0010: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 162.865600][ T4233] wacom 0003:056A:00BC.0010: hidraw0: USB HID v0.81 Device [HID 056a:00bc] on usb-dummy_hcd.1-1/input0 [ 162.923369][ T4233] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00BC.0010/input/input7 [ 163.073649][ T4233] usb 2-1: USB disconnect, device number 7 [ 163.602751][ T7156] fido_id[7156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 164.026222][ T7182] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1023'. [ 164.150084][ T7175] loop0: detected capacity change from 0 to 8192 [ 164.282194][ T7187] loop1: detected capacity change from 0 to 4096 [ 164.310200][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1025'. [ 164.458341][ T7175] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 164.491666][ T7175] REISERFS (device loop0): using ordered data mode [ 164.498552][ T7175] reiserfs: using flush barriers [ 164.507961][ T7194] loop2: detected capacity change from 0 to 4096 [ 164.536586][ T7175] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.573225][ T7175] REISERFS (device loop0): checking transaction log (loop0) [ 164.582820][ T7200] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.635716][ T7194] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 164.653104][ T7175] REISERFS (device loop0): Using r5 hash to sort names [ 164.689082][ T7175] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 165.083155][ T7194] ntfs3: loop2: failed to convert "c46c" to cp855 [ 165.402510][ T7183] loop5: detected capacity change from 0 to 32768 [ 165.901324][ T7183] XFS (loop5): Mounting V5 Filesystem [ 166.009183][ T7245] loop2: detected capacity change from 0 to 512 [ 166.108416][ T7247] loop1: detected capacity change from 0 to 4096 [ 166.138841][ T7245] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.1048: Unrecognised inode hash code 255 [ 166.231903][ T7245] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1048: Corrupt directory, running e2fsck is recommended [ 166.253782][ T7245] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 166.277312][ T7245] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.1048: corrupted in-inode xattr [ 166.306063][ T7247] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.409542][ T7245] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1048: couldn't read orphan inode 15 (err -117) [ 166.485040][ T7245] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 166.545005][ T7183] XFS (loop5): Ending clean mount [ 166.649736][ T4872] XFS (loop5): Unmounting Filesystem [ 167.180252][ T7265] tmpfs: Bad value for 'gid' [ 167.546119][ T7285] loop2: detected capacity change from 0 to 8 [ 167.614629][ T7287] loop5: detected capacity change from 0 to 1024 [ 167.712974][ T4261] hfsplus: b-tree write err: -5, ino 25 [ 167.730003][ T7293] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1070'. [ 167.742242][ T4261] hfsplus: b-tree write err: -5, ino 4 [ 167.755550][ T4261] hfsplus: b-tree write err: -5, ino 2 [ 167.799258][ T7285] cramfs: empty filesystem [ 168.240699][ T5998] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 168.304666][ T7317] loop2: detected capacity change from 0 to 512 [ 168.713332][ T7319] loop0: detected capacity change from 0 to 32768 [ 168.760675][ T5998] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 168.791354][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.822127][ T5998] usb 6-1: config 0 descriptor?? [ 168.863473][ T7319] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 168.906669][ T5998] cp210x 6-1:0.0: cp210x converter detected [ 168.958811][ T7319] JBD2: Ignoring recovery information on journal [ 168.964783][ T7326] loop6: detected capacity change from 0 to 2048 [ 168.972111][ T7328] loop1: detected capacity change from 0 to 256 [ 169.011501][ T7319] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 169.045308][ T7326] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 169.066963][ T7326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.163962][ T7317] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.219021][ T7328] FAT-fs (loop1): Directory bread(block 64) failed [ 169.228683][ T7328] FAT-fs (loop1): Directory bread(block 65) failed [ 169.237013][ T7328] FAT-fs (loop1): Directory bread(block 66) failed [ 169.244668][ T4195] ocfs2: Unmounting device (7,0) on (node local) [ 169.278781][ T7328] FAT-fs (loop1): Directory bread(block 67) failed [ 169.293540][ T7328] FAT-fs (loop1): Directory bread(block 68) failed [ 169.300919][ T7328] FAT-fs (loop1): Directory bread(block 69) failed [ 169.310526][ T7328] FAT-fs (loop1): Directory bread(block 70) failed [ 169.318234][ T7328] FAT-fs (loop1): Directory bread(block 71) failed [ 169.324964][ T7328] FAT-fs (loop1): Directory bread(block 72) failed [ 169.366077][ T7328] FAT-fs (loop1): Directory bread(block 73) failed [ 169.377906][ T5998] usb 6-1: cp210x converter now attached to ttyUSB0 [ 169.385662][ T7328] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.575113][ T4233] usb 6-1: USB disconnect, device number 6 [ 169.605830][ T4233] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 169.646665][ T4233] cp210x 6-1:0.0: device disconnected [ 169.842523][ T7346] loop0: detected capacity change from 0 to 64 [ 170.007127][ T7352] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 170.040212][ T7352] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 170.055031][ T7352] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 170.082371][ T7352] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 170.093914][ T7352] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 170.112807][ T7352] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 170.128630][ T7352] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 170.174391][ T7352] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 170.232882][ T7352] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 170.249945][ T7352] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 170.270088][ T7352] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 170.333917][ T7352] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 170.379816][ T7352] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 170.413125][ T7363] loop5: detected capacity change from 0 to 4096 [ 170.431829][ T7352] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 170.632176][ T7374] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.791088][ T7363] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 171.140643][ T7384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1108'. [ 171.553355][ T7402] loop0: detected capacity change from 0 to 64 [ 171.641703][ T7402] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 171.664033][ T7406] netlink: 'syz.6.1118': attribute type 4 has an invalid length. [ 171.843808][ T7413] loop2: detected capacity change from 0 to 256 [ 172.437567][ T7428] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 172.773399][ T7429] binder: 7427:7429 ioctl c018620c 200000000240 returned -22 [ 172.785723][ T7428] ntfs: volume version 3.1. [ 172.846218][ T7428] ntfs: (device loop5): ntfs_bmap(): BMAP does not make sense for resident attributes, returning 0. [ 173.254317][ T7444] set_capacity_and_notify: 3 callbacks suppressed [ 173.254333][ T7444] loop6: detected capacity change from 0 to 1024 [ 173.281582][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 173.377923][ T7448] loop1: detected capacity change from 0 to 512 [ 173.581491][ T7452] loop2: detected capacity change from 0 to 64 [ 173.693903][ T7448] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.813749][ T7442] loop5: detected capacity change from 0 to 32768 [ 173.869779][ T7448] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 173.922134][ T7452] attempt to access beyond end of device [ 173.922134][ T7452] loop2: rw=0, want=1026, limit=64 [ 173.933522][ T7452] Buffer I/O error on dev loop2, logical block 512, async page read [ 173.952403][ T7448] EXT4-fs (loop1): 1 truncate cleaned up [ 173.968436][ T7452] attempt to access beyond end of device [ 173.968436][ T7452] loop2: rw=0, want=113154, limit=64 [ 174.051140][ T7448] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 174.074117][ T7452] Buffer I/O error on dev loop2, logical block 56576, async page read [ 174.099346][ T7442] XFS (loop5): Mounting V5 Filesystem [ 174.256966][ T7442] XFS (loop5): Ending clean mount [ 174.462870][ T7466] loop6: detected capacity change from 0 to 4096 [ 174.483542][ T4872] XFS (loop5): Unmounting Filesystem [ 174.620183][ T7454] loop0: detected capacity change from 0 to 32768 [ 174.766568][ T7454] XFS (loop0): Mounting V5 Filesystem [ 174.906311][ T7466] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 174.913777][ T7454] XFS (loop0): Ending clean mount [ 175.003898][ T4195] XFS (loop0): Unmounting Filesystem [ 175.493950][ T7490] loop6: detected capacity change from 0 to 2048 [ 175.578214][ T7490] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 175.674439][ T7500] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.722045][ T6377] udevd[6377]: incorrect nilfs2 checksum on /dev/loop6 [ 175.794878][ T7499] loop2: detected capacity change from 0 to 4096 [ 175.874789][ T26] audit: type=1326 audit(1784907425.713:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.1157" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d50078e99 code=0x0 [ 175.911324][ T7504] loop5: detected capacity change from 0 to 512 [ 176.058616][ T7509] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.103759][ T7504] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 176.163663][ T7504] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 176.205736][ T7504] EXT4-fs (loop5): 1 truncate cleaned up [ 176.221378][ T7504] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,lazytime,quota,,errors=continue. Quota mode: writeback. [ 176.413291][ T7510] loop0: detected capacity change from 0 to 4096 [ 176.547855][ T7510] ntfs: volume version 3.1. [ 176.562234][ T7518] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 176.627208][ T7518] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 176.657845][ T7518] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 176.657845][ T7518] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 176.727924][ T7518] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 176.812324][ T7518] CUSE: DEVNAME unspecified [ 177.438215][ T7525] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 177.553534][ T7514] JBD2: Ignoring recovery information on journal [ 177.561161][ T7511] XFS (loop6): Mounting V5 Filesystem [ 177.648953][ T7525] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 177.791826][ T7514] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 177.910662][ T7514] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (3298534883402, expected 74) [ 177.990219][ T7511] XFS (loop6): Ending clean mount [ 178.080510][ T7514] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 178.119746][ T7514] OCFS2: File system is now read-only. [ 178.132670][ T7514] (syz.1.1160,7514,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 178.144280][ T5124] XFS (loop6): Unmounting Filesystem [ 178.212003][ T7514] (syz.1.1160,7514,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 178.297379][ T7514] (syz.1.1160,7514,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 178.322189][ T7514] (syz.1.1160,7514,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 178.384223][ T7514] (syz.1.1160,7514,1):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 178.409453][ T7514] (syz.1.1160,7514,1):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 178.430752][ T7514] (syz.1.1160,7514,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 178.468786][ T7514] (syz.1.1160,7514,1):ocfs2_symlink:1941 ERROR: status = -30 [ 178.493855][ T7514] (syz.1.1160,7514,1):ocfs2_symlink:2065 ERROR: status = -30 [ 178.650612][ T7544] set_capacity_and_notify: 4 callbacks suppressed [ 178.650629][ T7544] loop2: detected capacity change from 0 to 512 [ 178.682632][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 178.801512][ T7544] EXT4-fs (loop2): Mount option "journal_ioprio=0x0000000000000002" incompatible with ext2 [ 179.164702][ T7561] loop0: detected capacity change from 0 to 4096 [ 179.453725][ T7581] loop1: detected capacity change from 0 to 128 [ 179.617953][ T7561] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 179.717656][ T7589] loop6: detected capacity change from 0 to 256 [ 179.796161][ T7581] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 179.837043][ T7581] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.949411][ T7573] loop5: detected capacity change from 0 to 32768 [ 180.014498][ T7593] loop2: detected capacity change from 0 to 4096 [ 180.065299][ T7573] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1180 (7573) [ 180.088842][ T7589] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 180.169982][ T7573] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 180.195359][ T7573] BTRFS info (device loop5): setting nodatasum [ 180.212073][ T7573] BTRFS info (device loop5): force zlib compression, level 3 [ 180.241289][ T7573] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 180.287610][ T7573] BTRFS info (device loop5): use lzo compression, level 0 [ 180.325242][ T7573] BTRFS info (device loop5): turning on flush-on-commit [ 180.332257][ T7573] BTRFS info (device loop5): enabling auto defrag [ 180.359879][ T7599] loop6: detected capacity change from 0 to 128 [ 180.405981][ T7573] BTRFS info (device loop5): max_inline at 4096 [ 180.412322][ T7573] BTRFS info (device loop5): using free space tree [ 180.445286][ T7573] BTRFS info (device loop5): has skinny extents [ 180.491593][ T7599] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000000005,,errors=continue. Quota mode: none. [ 180.507078][ T7599] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.525651][ T7597] loop1: detected capacity change from 0 to 4096 [ 180.562751][ T7607] loop0: detected capacity change from 0 to 512 [ 180.675685][ T7597] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 180.714065][ T7607] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.789087][ T7573] BTRFS info (device loop5): enabling ssd optimizations [ 180.841924][ T7607] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 180.868834][ T7597] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 180.978002][ T7607] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1196: bg 0: block 248: padding at end of block bitmap is not set [ 181.119692][ T7607] Quota error (device loop0): write_blk: dquota write failed [ 181.135439][ T7607] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 181.179718][ T7607] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1196: Failed to acquire dquot type 1 [ 181.297770][ T7607] EXT4-fs (loop0): 1 truncate cleaned up [ 181.365294][ T7607] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 181.433246][ T7632] loop6: detected capacity change from 0 to 512 [ 181.527986][ T7632] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 181.559300][ T7632] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.586722][ T7607] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 181.695447][ T7607] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 181.738582][ T7607] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1196: Failed to acquire dquot type 1 [ 181.985379][ T1275] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6) [ 182.021623][ T1275] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 1 [ 182.332571][ T5993] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 182.564110][ T7659] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 182.578626][ T7655] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 182.595739][ T7659] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.619646][ T7653] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 182.700154][ T7653] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.746008][ T7659] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 182.830932][ T5993] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 182.841852][ T5993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 182.858525][ T7659] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.870080][ T5993] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 182.899579][ T5993] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 182.970911][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.017362][ T5993] usb 2-1: config 0 descriptor?? [ 183.050864][ T7643] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.197237][ T7666] sp0: Synchronizing with TNC [ 183.328054][ T7668] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000005,,errors=continue. Quota mode: none. [ 183.352889][ T7668] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.553969][ T5993] hid-multitouch 0003:1FD2:6007.0011: unknown main item tag 0x2 [ 183.564844][ T5993] hid-multitouch 0003:1FD2:6007.0011: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 183.607505][ T26] audit: type=1804 audit(1784907433.453:19): pid=7676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1213" name="/newroot/167/file1/file0" dev="loop5" ino=21 res=1 errno=0 [ 183.775242][ T5993] usb 2-1: USB disconnect, device number 8 [ 183.956875][ T7683] fido_id[7683]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 184.175050][ T7694] set_capacity_and_notify: 5 callbacks suppressed [ 184.175066][ T7694] loop2: detected capacity change from 0 to 1024 [ 184.364372][ T7694] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 184.493478][ T7694] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 184.717889][ T7710] loop1: detected capacity change from 0 to 64 [ 184.854816][ T7680] loop6: detected capacity change from 0 to 40427 [ 184.908831][ T7680] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 185.038780][ T7680] F2FS-fs (loop6): invalid crc value [ 185.079610][ T7680] F2FS-fs (loop6): Found nat_bits in checkpoint [ 185.236303][ T26] audit: type=1804 audit(1784907435.083:20): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1230" name="/newroot/269/file1/file0" dev="loop1" ino=21 res=1 errno=0 [ 185.343154][ T7680] F2FS-fs (loop6): recover fsync data on readonly fs [ 185.412022][ T7680] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 185.463017][ T7680] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 185.509982][ T7680] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 186.260564][ T7743] loop0: detected capacity change from 0 to 4096 [ 186.520527][ T7725] loop2: detected capacity change from 0 to 32768 [ 186.638318][ T7725] JBD2: Ignoring recovery information on journal [ 186.671378][ T7743] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 186.782138][ T7760] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1252'. [ 186.937459][ T7725] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 187.228145][ T4198] ocfs2: Unmounting device (7,2) on (node local) [ 187.425485][ T1107] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 187.575232][ T5464] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 187.785454][ T1107] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 187.785489][ T1107] usb 7-1: config 0 has no interface number 0 [ 187.785532][ T1107] usb 7-1: config 0 interface 41 has no altsetting 0 [ 187.825582][ T5464] usb 1-1: Using ep0 maxpacket: 8 [ 187.945532][ T1107] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 187.954619][ T1107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.963088][ T5464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.984592][ T5464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.013954][ T1107] usb 7-1: Product: syz [ 188.023394][ T5464] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.037365][ T1107] usb 7-1: Manufacturer: syz [ 188.042760][ T1107] usb 7-1: SerialNumber: syz [ 188.055809][ T1107] usb 7-1: config 0 descriptor?? [ 188.135540][ T5464] usb 1-1: New USB device found, idVendor=056a, idProduct=8928, bcdDevice=16.90 [ 188.152054][ T5464] usb 1-1: New USB device strings: Mfr=61, Product=0, SerialNumber=0 [ 188.162131][ T5464] usb 1-1: Manufacturer: syz [ 188.205023][ T5464] usb 1-1: config 0 descriptor?? [ 188.221117][ T7799] loop1: detected capacity change from 0 to 256 [ 188.565479][ T1107] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 188.582201][ T1107] CoreChips: probe of 7-1:0.41 failed with error -71 [ 188.634595][ T1107] usb 7-1: USB disconnect, device number 7 [ 188.691611][ T7811] loop1: detected capacity change from 0 to 4096 [ 188.700402][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x0 [ 188.718926][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x0 [ 188.743917][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x4 [ 188.757557][ T7813] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 188.764464][ T7813] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.772157][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x0 [ 188.795395][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x0 [ 188.805493][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x0 [ 188.819100][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x0 [ 188.832819][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x0 [ 188.834678][ T7813] vhci_hcd vhci_hcd.0: Device attached [ 188.858669][ T7814] vhci_hcd: connection closed [ 188.862901][ T1275] vhci_hcd: stop threads [ 188.873024][ T1275] vhci_hcd: release socket [ 188.918392][ T1275] vhci_hcd: disconnect device [ 188.923674][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x0 [ 188.931646][ T7811] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 188.961047][ T7811] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 188.974382][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x0 [ 189.023025][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x0 [ 189.062704][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x0 [ 189.074324][ T7811] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 189.114891][ T5464] wacom 0003:056A:8928.0012: unknown main item tag 0x0 [ 189.161343][ T7811] ntfs: volume version 3.1. [ 189.164518][ T5464] wacom 0003:056A:8928.0012: Unknown device_type for 'syz'. Ignoring. [ 189.202408][ T7811] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 189.251719][ T5464] usb 1-1: USB disconnect, device number 8 [ 189.265282][ T7811] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 189.361976][ T7811] ntfs: (device loop1): load_and_init_quota(): Failed to load $Quota/$Q index. [ 189.420129][ T7811] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 189.765552][ T7834] usb usb8: check_ctrlrecip: process 7834 (syz.1.1284) requesting ep 01 but needs 81 [ 189.815378][ T7834] usb usb8: usbfs: process 7834 (syz.1.1284) did not claim interface 0 before use [ 189.840624][ T7832] loop0: detected capacity change from 0 to 1024 [ 189.942391][ T7832] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c128, mo2=0002] [ 189.982006][ T7832] System zones: 0-1, 3-8 [ 190.003247][ T7832] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,norecovery,debug,journal_dev=0x0000000000000009,nodioread_nolock,. Quota mode: none. [ 190.136464][ T7843] loop2: detected capacity change from 0 to 1024 [ 190.253545][ T7849] loop1: detected capacity change from 0 to 512 [ 190.654371][ T7845] loop0: detected capacity change from 0 to 32768 [ 190.674204][ T7849] EXT4-fs (loop1): 1 truncate cleaned up [ 190.685213][ T7849] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 190.764908][ T7845] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1289 (7845) [ 190.792295][ T7861] loop6: detected capacity change from 0 to 512 [ 190.916981][ T7845] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 190.935654][ T7866] tipc: Started in network mode [ 190.954273][ T7868] loop2: detected capacity change from 0 to 1024 [ 190.961478][ T7866] tipc: Node identity 000000400000005f0007, cluster identity 4711 [ 190.971961][ T7845] BTRFS info (device loop0): setting nodatasum [ 190.975499][ T7866] tipc: Enabling of bearer rejected, failed to enable media [ 190.983342][ T7845] BTRFS info (device loop0): force zlib compression, level 3 [ 190.994933][ T7845] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 191.007736][ T7845] BTRFS info (device loop0): use lzo compression, level 0 [ 191.014988][ T7845] BTRFS info (device loop0): turning on flush-on-commit [ 191.024650][ T7845] BTRFS info (device loop0): enabling auto defrag [ 191.031205][ T7845] BTRFS info (device loop0): max_inline at 4096 [ 191.038034][ T7845] BTRFS info (device loop0): using free space tree [ 191.044570][ T7845] BTRFS info (device loop0): has skinny extents [ 191.059181][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 191.066395][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 191.070158][ T5993] Bluetooth: hci2: command 0x0406 tx timeout [ 191.081251][ T7861] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 191.089950][ T7861] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 191.116439][ T7868] hfsplus: unable to parse mount options [ 191.125328][ T7861] EXT4-fs (loop6): 1 truncate cleaned up [ 191.131009][ T7861] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 191.180351][ T7868] kAFS: unable to lookup cell '°ÇÈsYSÝ‹ñ½øAœ‹Ù¸ë±?Š¥hÆrÌF5=‰XŠ$jÕÎÓ‹Zçîñ^îÛº2Ûéí׳Hªq=V²ØÎÇÕJt›dçŽùzÏh¬D ŒøAšä[¹st­ç÷õëü¹L®ýâˆ}ŽZvæ“݌̥¹Ï³ñÒðÜy Ž4¥î3¨“Û£¤›ƒ#9ÿá89?‘¯Ó\ÿ¢?çmÌGiƒ™XˆR~õE¼ÚŸó[_¼÷rã/ÿó¯Wn”ÖnÞ¸¾qîOéPM…ÁLÔ{2ñÚð«/ÏD#ÍDkôLLî˜~‚ó8@•<ÙT4âlùݬ´oô\‚ïŵXŽ‹1óq)æâ±õ¾+ìT_^ËõÕþœd÷ZiçüVü™/õTúå>•Vš——zòÚ;ÓÕ²cùžË¿Š¹ž,½<üêû¯@' [ 191.240173][ T7880] loop5: detected capacity change from 0 to 256 [ 191.454601][ T7880] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 191.482894][ T7861] EXT4-fs (loop6): re-mounted. Opts: auto_da_alloc=0x00000000000000a3,journal_ioprio=0x0000000000000002,block_validity,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback. [ 191.565376][ T7845] BTRFS info (device loop0): enabling ssd optimizations [ 191.866451][ T7895] netlink: 'syz.2.1303': attribute type 2 has an invalid length. [ 192.276861][ T1107] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 192.543258][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 192.611939][ T7926] loop2: detected capacity change from 0 to 2048 [ 192.667386][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.685336][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.705511][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.733355][ T1107] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.783713][ T7926] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.795251][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.810365][ T1107] usb 2-1: config 0 descriptor?? [ 193.149138][ T7946] loop0: detected capacity change from 0 to 64 [ 193.201718][ T7946] hfs: unable to locate alternate MDB [ 193.221787][ T7946] hfs: continuing without an alternate MDB [ 193.312778][ T1107] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0013/input/input13 [ 193.363748][ T1107] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 193.574141][ T1107] usb 2-1: USB disconnect, device number 9 [ 193.589115][ T7950] fido_id[7950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 193.868827][ T7941] loop2: detected capacity change from 0 to 32768 [ 193.923159][ T7941] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1317 (7941) [ 194.035297][ T7965] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.088739][ T7941] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 194.108092][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.114466][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.149640][ T7941] BTRFS info (device loop2): setting nodatasum [ 194.181956][ T7941] BTRFS info (device loop2): force zlib compression, level 3 [ 194.191628][ T7941] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 194.230830][ T7941] BTRFS info (device loop2): use lzo compression, level 0 [ 194.284004][ T7941] BTRFS info (device loop2): turning on flush-on-commit [ 194.314632][ T7941] BTRFS info (device loop2): enabling auto defrag [ 194.345245][ T1107] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 194.362529][ T7941] BTRFS info (device loop2): max_inline at 4096 [ 194.375195][ T7941] BTRFS info (device loop2): using free space tree [ 194.381758][ T7941] BTRFS info (device loop2): has skinny extents [ 194.708687][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 194.733283][ T1107] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 194.825499][ T1107] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 194.844932][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.866924][ T1107] usb 1-1: config 0 descriptor?? [ 194.886152][ T7968] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 195.050565][ T7941] BTRFS info (device loop2): enabling ssd optimizations [ 195.379097][ T1107] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x2 [ 195.425672][ T1107] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x4 [ 195.482412][ T1107] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0xd [ 195.536748][ T1107] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x1 [ 195.565979][ T1107] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x3 [ 195.573084][ T1107] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x1 [ 195.644603][ T1107] hid-rmi 0003:06CB:81A7.0014: hidraw0: USB HID v80.09 Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0 [ 195.680870][ T1107] usb 1-1: USB disconnect, device number 9 [ 195.838501][ T8035] tipc: Enabling of bearer rejected, failed to enable media [ 196.113406][ T8038] fido_id[8038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 196.577493][ T8050] set_capacity_and_notify: 1 callbacks suppressed [ 196.577511][ T8050] loop0: detected capacity change from 0 to 4096 [ 196.701160][ T8050] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 196.833200][ T8050] ntfs: volume version 3.1. [ 196.996252][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1374'. [ 197.281668][ T8100] loop6: detected capacity change from 0 to 512 [ 197.409060][ T8100] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1382: bg 0: block 4: invalid block bitmap [ 197.441265][ T8109] loop5: detected capacity change from 0 to 512 [ 197.499037][ T8100] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 197.563175][ T8112] loop1: detected capacity change from 0 to 8 [ 197.583588][ T8109] EXT4-fs (loop5): orphan cleanup on readonly fs [ 197.608493][ T8100] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1382: invalid indirect mapped block 1 (level 1) [ 197.634745][ T8112] SQUASHFS error: zlib decompression failed, data probably corrupt [ 197.654363][ T8109] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 197.701277][ T8112] SQUASHFS error: Failed to read block 0x9b: -5 [ 197.711383][ T8100] EXT4-fs (loop6): 1 truncate cleaned up [ 197.736055][ T8109] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 197.746832][ T8112] SQUASHFS error: Unable to read metadata cache entry [99] [ 197.748113][ T8100] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.754099][ T8112] SQUASHFS error: Unable to read inode 0x127 [ 197.792610][ T8109] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #13: comm syz.5.1383: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 197.836581][ T8109] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1383: couldn't read orphan inode 13 (err -117) [ 197.868436][ T8109] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.915784][ T8112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1386'. [ 197.953033][ T8117] loop0: detected capacity change from 0 to 1024 [ 198.006187][ T8109] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 198.072428][ T8109] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 198.113888][ T8109] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 198.131609][ T8122] loop1: detected capacity change from 0 to 164 [ 198.153865][ T8109] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 198.334182][ T8129] netlink: 774 bytes leftover after parsing attributes in process `syz.2.1393'. [ 198.344348][ T8129] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1393'. [ 198.813484][ T7921] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 198.884051][ T8143] loop5: detected capacity change from 0 to 4096 [ 199.071682][ T7921] usb 7-1: Using ep0 maxpacket: 16 [ 199.100308][ T8151] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.170612][ T8143] NILFS (loop5): bad btree node (ino=3, blocknr=42): level = 255, flags = 0xff, nchildren = 511 [ 199.195450][ T7921] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.205951][ T8143] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 199.402391][ T8143] Remounting filesystem read-only [ 199.407993][ T8143] NILFS (loop5): error -5 preparing GC: cannot mark copying blocks dirty [ 199.425503][ T7921] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 199.444968][ T7921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.485478][ T7921] usb 7-1: Product: syz [ 199.489872][ T7921] usb 7-1: Manufacturer: syz [ 199.553342][ T7921] usb 7-1: SerialNumber: syz [ 199.582651][ T7921] usb 7-1: config 0 descriptor?? [ 199.628379][ T7921] asix: probe of 7-1:0.0 failed with error -22 [ 199.820588][ T8140] loop2: detected capacity change from 0 to 32768 [ 199.939506][ T8173] ubi8: attaching mtd0 [ 199.958192][ T8173] ubi8: scanning is finished [ 199.966542][ T8173] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 200.055560][ T8173] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 200.254281][ T8163] loop1: detected capacity change from 0 to 32768 [ 200.302164][ T8175] sp0: Synchronizing with TNC [ 200.418389][ T8140] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 200.418389][ T8140] [ 200.527631][ T8140] ERROR: (device loop2): remounting filesystem as read-only [ 200.666926][ T4187] read_mapping_page failed! [ 200.701043][ T4187] ERROR: (device loop1): txCommit: [ 200.701043][ T4187] [ 200.802474][ T4187] read_mapping_page failed! [ 200.848105][ T4187] ERROR: (device loop1): txCommit: [ 200.848105][ T4187] [ 201.123697][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 201.190278][ T8196] device erspan0 entered promiscuous mode [ 201.239056][ T8196] device erspan0 left promiscuous mode [ 201.502597][ T7934] usb 7-1: USB disconnect, device number 8 [ 201.663490][ T4261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.810521][ T8211] loop0: detected capacity change from 0 to 2048 [ 201.822978][ T8185] loop5: detected capacity change from 0 to 32768 [ 201.908633][ T8211] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=301129, location=301129 [ 201.955367][ T7934] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 201.990433][ T4261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.027793][ T8211] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.204314][ T4261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.215334][ T7934] usb 7-1: Using ep0 maxpacket: 32 [ 202.416752][ T8227] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1435'. [ 202.495511][ T7934] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 202.556004][ T7934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.602624][ T7934] usb 7-1: Product: syz [ 202.609710][ T7934] usb 7-1: Manufacturer: syz [ 202.614347][ T7934] usb 7-1: SerialNumber: syz [ 202.664926][ T7934] usb 7-1: config 0 descriptor?? [ 202.673723][ T8232] loop2: detected capacity change from 0 to 256 [ 202.689639][ T8234] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 202.729967][ T7934] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 202.766226][ T8232] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 202.785744][ T7934] dvb-usb: bulk message failed: -22 (4/0) [ 202.799373][ T7934] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 202.825082][ T7934] dvb-usb: bulk message failed: -22 (5/0) [ 202.859565][ T7934] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 202.916484][ T7934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.931792][ T8206] dvb-usb: bulk message failed: -22 (7/0) [ 202.942286][ T8206] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 202.980511][ T4261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.993830][ T7934] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 203.040619][ T8206] ttusb2: i2c transfer failed. [ 203.045906][ T7934] usb 7-1: media controller created [ 203.149273][ T7934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.157095][ T8243] loop2: detected capacity change from 0 to 1024 [ 203.221576][ T7934] usb 7-1: selecting invalid altsetting 3 [ 203.234473][ T7934] ttusb2: set interface to alts=3 failed [ 203.265900][ T8245] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 203.315820][ T7934] DVB: Unable to find symbol tda10086_attach() [ 203.322103][ T7934] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 203.396238][ T7934] dvb-usb: bulk message failed: -22 (4/0) [ 203.402132][ T7934] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 203.438092][ T7934] dvb-usb: bulk message failed: -22 (5/0) [ 203.518895][ T7934] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 203.621657][ T7934] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 203.691901][ T7934] usb 7-1: USB disconnect, device number 9 [ 203.775261][ T4261] tipc: Left network mode [ 203.827462][ T7934] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 204.078725][ T8279] loop2: detected capacity change from 0 to 512 [ 204.175720][ T8251] chnl_net:caif_netlink_parms(): no params data found [ 204.217023][ T8279] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 204.234463][ T8279] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.317092][ T8279] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 204.654392][ T8251] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.704207][ T8301] loop6: detected capacity change from 0 to 8 [ 204.710818][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.741926][ T8251] device bridge_slave_0 entered promiscuous mode [ 204.800172][ T8251] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.828767][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.849180][ T8251] device bridge_slave_1 entered promiscuous mode [ 205.007555][ T8251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.049586][ T8251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.169751][ T8251] team0: Port device team_slave_0 added [ 205.197005][ T8251] team0: Port device team_slave_1 added [ 205.320474][ T8251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.359280][ T8251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.392314][ T8320] loop0: detected capacity change from 0 to 128 [ 205.495202][ T8251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.557600][ T4231] Bluetooth: hci0: command 0x0409 tx timeout [ 205.566339][ T8324] loop2: detected capacity change from 0 to 128 [ 205.578318][ T8251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.585355][ T8320] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 205.622828][ T8251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.651423][ T8320] hpfs: filesystem error: improperly stopped [ 205.696516][ T8320] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 205.704308][ T8320] hpfs: You really don't want any checks? You are crazy... [ 205.756128][ T8251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.767033][ T8320] hpfs: Code page index out of array [ 205.772354][ T8320] hpfs: code page support is disabled [ 205.778836][ T8330] loop5: detected capacity change from 0 to 512 [ 205.804156][ T8320] hpfs: hpfs_map_4sectors(): unaligned read [ 205.817491][ T8320] hpfs: hpfs_map_4sectors(): unaligned read [ 205.834327][ T8320] hpfs: filesystem error: unable to find root dir [ 205.857632][ T8330] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 205.930101][ T8251] device hsr_slave_0 entered promiscuous mode [ 205.969100][ T8251] device hsr_slave_1 entered promiscuous mode [ 205.997421][ T8251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.005037][ T8251] Cannot create hsr debugfs directory [ 206.243106][ T8324] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 206.282409][ T8324] hpfs: filesystem error: improperly stopped [ 206.315276][ T8324] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 206.323075][ T8324] hpfs: You really don't want any checks? You are crazy... [ 206.355078][ T8324] hpfs: hpfs_map_sector(): read error [ 206.386310][ T8324] hpfs: code page support is disabled [ 206.425321][ T8324] hpfs: hpfs_map_4sectors(): unaligned read [ 206.448187][ T8324] hpfs: hpfs_map_4sectors(): unaligned read [ 206.506574][ T8324] hpfs: filesystem error: unable to find root dir [ 206.579005][ T8324] hpfs: hpfs_map_4sectors(): unaligned read [ 206.659135][ T8251] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 206.718021][ T8251] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 206.760585][ T8251] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 206.807105][ T8251] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 207.003113][ T8328] loop6: detected capacity change from 0 to 40427 [ 207.094590][ T8328] F2FS-fs (loop6): invalid crc value [ 207.132208][ T8251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.141837][ T8328] F2FS-fs (loop6): Found nat_bits in checkpoint [ 207.185066][ T8352] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1478'. [ 207.292582][ T8251] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.350482][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.367571][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.428686][ T8328] F2FS-fs (loop6): recover fsync data on readonly fs [ 207.492999][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.502215][ T8328] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 207.536847][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.585100][ T1196] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.592420][ T1196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.621389][ T5997] Bluetooth: hci0: command 0x041b tx timeout [ 207.627986][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.643608][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.667607][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.674707][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.711428][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.743526][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.768719][ T8339] loop0: detected capacity change from 0 to 32768 [ 207.778985][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1480'. [ 207.813660][ T5995] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 207.821533][ T8339] (syz.0.1474,8339,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 207.838655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.866920][ T8339] (syz.0.1474,8339,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 207.887673][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.907019][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.986775][ T1196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.095255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.131205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.140290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.191889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.252009][ T8339] JBD2: Ignoring recovery information on journal [ 208.272807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.305510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.371348][ T8251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.404281][ T8339] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 208.466835][ T5995] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.507679][ T5995] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 208.580879][ T5995] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.604952][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.700566][ T8385] raw_sendmsg: syz.5.1486 forgot to set AF_INET. Fix it! [ 208.716716][ T8357] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 208.743715][ T4195] ocfs2: Unmounting device (7,0) on (node local) [ 209.080670][ T8392] loop5: detected capacity change from 0 to 4096 [ 209.349560][ T8251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.369997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.379185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.519081][ T8406] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 209.730984][ T8392] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 209.803372][ T7920] usb 3-1: USB disconnect, device number 8 [ 209.819103][ T5995] Bluetooth: hci0: command 0x040f tx timeout [ 209.923333][ T8392] ntfs3: loop5: ino=5, "/" directory corrupted [ 209.960579][ T8392] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 210.235311][ T4261] device hsr_slave_0 left promiscuous mode [ 210.254148][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1496'. [ 210.299113][ T4261] device hsr_slave_1 left promiscuous mode [ 210.314561][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1497'. [ 210.326979][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.340421][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.458105][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.500088][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.560517][ T4261] device bridge_slave_1 left promiscuous mode [ 210.576133][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.705870][ T4261] device bridge_slave_0 left promiscuous mode [ 210.712180][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.806815][ T4261] device veth1_macvtap left promiscuous mode [ 210.812957][ T4261] device veth0_macvtap left promiscuous mode [ 210.867589][ T4261] device veth1_vlan left promiscuous mode [ 210.873502][ T4261] device veth0_vlan left promiscuous mode [ 211.137148][ T8450] loop0: detected capacity change from 0 to 2048 [ 211.347112][ T8458] loop5: detected capacity change from 0 to 164 [ 211.367053][ T8450] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.724540][ T8458] Unsupported NM flag settings (240) [ 211.781042][ T8458] Unsupported NM flag settings (240) [ 211.801008][ T8437] loop2: detected capacity change from 0 to 40427 [ 211.807579][ T4261] team0 (unregistering): Port device team_slave_1 removed [ 211.865535][ T5997] Bluetooth: hci0: command 0x0419 tx timeout [ 211.879510][ T4261] team0 (unregistering): Port device team_slave_0 removed [ 211.888949][ T8437] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 211.953387][ T8437] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 211.979559][ T4261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.999261][ T8437] F2FS-fs (loop2): invalid crc value [ 212.023322][ T4261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.036631][ T8437] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 212.218380][ T8437] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 212.233243][ T8437] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 212.350631][ T8437] F2FS-fs (loop2): Unrecognized mount option "noload" or missing value [ 212.387565][ T4261] bond0 (unregistering): Released all slaves [ 212.559917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.595835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.727432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.737390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.807409][ T8251] device veth0_vlan entered promiscuous mode [ 212.842259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.875901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.900101][ T8251] device veth1_vlan entered promiscuous mode [ 213.003438][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1516'. [ 213.026433][ T8481] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1518'. [ 213.041879][ T8481] unsupported nlmsg_type 40 [ 213.058789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.072556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.120866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.197956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.287885][ T8251] device veth0_macvtap entered promiscuous mode [ 213.320988][ T8251] device veth1_macvtap entered promiscuous mode [ 213.424494][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.485008][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.531575][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.598551][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.628532][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.685190][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.708073][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.765249][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.806615][ T8251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.814045][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.832412][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.870689][ T8504] loop2: detected capacity change from 0 to 128 [ 213.888399][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.955973][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.980407][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.995632][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.039209][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.089187][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.121868][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.146043][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.185839][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.238012][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.272013][ T8251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.333335][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.357088][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.374179][ T8517] loop5: detected capacity change from 0 to 4096 [ 214.420487][ T8251] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.423441][ T8487] loop6: detected capacity change from 0 to 32768 [ 214.429490][ T8251] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.480484][ T8504] EXT4-fs (loop2): Test dummy encryption mode enabled [ 214.490454][ T8251] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.513144][ T8504] EXT4-fs (loop2): inline encryption not supported [ 214.529837][ T8251] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.596654][ T8504] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none. [ 214.675908][ T8504] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.695374][ T8487] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1519 (8487) [ 214.773803][ T8504] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.1511: checksumming directory block 0 [ 214.840111][ T8487] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 214.873773][ T8487] BTRFS info (device loop6): setting nodatasum [ 214.884482][ T8487] BTRFS info (device loop6): disabling tree log [ 214.905337][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.913232][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.920918][ T8487] BTRFS info (device loop6): max_inline at 0 [ 214.927315][ T8487] BTRFS info (device loop6): turning on sync discard [ 214.934048][ T8487] BTRFS info (device loop6): using free space tree [ 214.941005][ T8487] BTRFS info (device loop6): has skinny extents [ 214.964478][ T5355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.990482][ T8517] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 215.068985][ T8517] EXT4-fs (loop5): Cannot change quota options when quota turned on [ 215.078892][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.118154][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.161730][ T8512] loop0: detected capacity change from 0 to 40427 [ 215.205413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.429881][ T8487] BTRFS info (device loop6): enabling ssd optimizations [ 215.487871][ T8512] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 215.507613][ T8512] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 215.607905][ T8551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.660451][ T8512] F2FS-fs (loop0): invalid crc value [ 215.883403][ T8512] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 216.212208][ T8571] loop7: detected capacity change from 0 to 256 [ 216.274717][ T8571] exfat: Deprecated parameter 'utf8' [ 216.296874][ T8571] exfat: Deprecated parameter 'namecase' [ 216.327559][ T8571] exfat: Deprecated parameter 'namecase' [ 216.399141][ T8512] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 216.414566][ T8512] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 216.474175][ T8571] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 216.666008][ T26] audit: type=1800 audit(1784907466.513:21): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1526" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 216.700581][ T4231] Bluetooth: hci1: command 0x0406 tx timeout [ 216.895459][ T8584] netlink: 'syz.5.1540': attribute type 1 has an invalid length. [ 217.053865][ T8589] netem: change failed [ 217.068246][ T8512] attempt to access beyond end of device [ 217.068246][ T8512] loop0: rw=34817, want=79872, limit=40427 [ 217.312798][ T8512] attempt to access beyond end of device [ 217.312798][ T8512] loop0: rw=34817, want=81920, limit=40427 [ 217.554063][ T4195] attempt to access beyond end of device [ 217.554063][ T4195] loop0: rw=2049, want=45104, limit=40427 [ 217.769609][ T8566] loop2: detected capacity change from 0 to 32768 [ 218.511285][ T8566] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 218.976575][ T4198] ocfs2: Unmounting device (7,2) on (node local) [ 219.104211][ T8639] loop7: detected capacity change from 0 to 512 [ 219.354744][ T8648] loop2: detected capacity change from 0 to 256 [ 219.464066][ T8654] loop0: detected capacity change from 0 to 64 [ 219.542583][ T8653] netlink: 'syz.6.1562': attribute type 2 has an invalid length. [ 219.600123][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1562'. [ 219.694254][ T8653] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 219.747869][ T8639] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.1559: Unrecognised inode hash code 4 [ 219.798078][ T8639] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1559: Corrupt directory, running e2fsck is recommended [ 219.868421][ T8639] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 219.885415][ T8639] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.1559: corrupted in-inode xattr [ 219.967713][ T8639] EXT4-fs (loop7): Remounting filesystem read-only [ 219.988064][ T8639] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1559: couldn't read orphan inode 15 (err -117) [ 220.080050][ T8639] EXT4-fs (loop7): Remounting filesystem read-only [ 220.095975][ T8639] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 220.263735][ T8639] EXT4-fs error (device loop7): ext4_empty_dir:3145: inode #2: block 8: comm syz.7.1559: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 220.430335][ T8639] EXT4-fs (loop7): Remounting filesystem read-only [ 220.437376][ T8681] device hsr0 entered promiscuous mode [ 220.461113][ T8680] device hsr0 left promiscuous mode [ 220.468254][ T8639] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #2: comm syz.7.1559: directory missing '.' [ 221.183331][ T5995] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 221.282558][ T5995] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 221.294279][ T8705] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 221.577337][ T8707] fido_id[8707]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.731767][ T8678] loop5: detected capacity change from 0 to 32768 [ 221.801454][ T8715] loop7: detected capacity change from 0 to 2048 [ 221.872276][ T8717] loop0: detected capacity change from 0 to 512 [ 221.902623][ T8674] loop6: detected capacity change from 0 to 32768 [ 221.980724][ T8717] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,norecovery,quota,,errors=continue. Quota mode: writeback. [ 222.053921][ T8717] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option [ 222.069263][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 222.089839][ T8674] XFS (loop6): Mounting V5 Filesystem [ 222.196473][ T8717] EXT4-fs (loop0): re-mounted. Opts: noquota,noblock_validity,nogrpid,data=journal,. Quota mode: writeback. [ 222.218459][ T8717] ext4 filesystem being remounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.252497][ T8674] XFS (loop6): Ending clean mount [ 222.304483][ T5124] XFS (loop6): Unmounting Filesystem [ 222.414017][ T8726] Alternate GPT is invalid, using primary GPT. [ 222.428290][ T8726] loop7: p1 p2 p3 [ 222.515288][ T7925] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 222.650732][ T8715] Alternate GPT is invalid, using primary GPT. [ 222.683311][ T8715] loop7: p1 p2 p3 [ 222.739215][ T8678] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 222.765319][ T7925] usb 3-1: Using ep0 maxpacket: 8 [ 222.874039][ T8754] loop0: detected capacity change from 0 to 256 [ 222.885417][ T7925] usb 3-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 222.945089][ T7925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 222.995269][ T7925] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 223.012219][ T4877] udevd[4877]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 223.014291][ T5530] udevd[5530]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 223.033106][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 223.091260][ T7925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.145430][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 223.157997][ T4877] udevd[4877]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 223.170287][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 223.187449][ T7925] usb 3-1: config 0 descriptor?? [ 223.251850][ T4872] ocfs2: Unmounting device (7,5) on (node local) [ 223.306309][ T8761] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1595'. [ 223.341987][ T8763] delete_channel: no stack [ 223.508689][ T8765] loop7: detected capacity change from 0 to 128 [ 223.519938][ T8767] loop6: detected capacity change from 0 to 512 [ 223.642943][ T5995] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 223.679404][ T7925] wacom 0003:056A:0015.0016: unknown main item tag 0xd [ 223.696480][ T7925] wacom 0003:056A:0015.0016: unknown main item tag 0x0 [ 223.716241][ T7925] wacom 0003:056A:0015.0016: unknown main item tag 0x1 [ 223.723194][ T7925] wacom 0003:056A:0015.0016: unknown main item tag 0x0 [ 223.739483][ T7925] wacom 0003:056A:0015.0016: unknown main item tag 0x0 [ 223.771994][ T8765] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 223.785245][ T7925] wacom 0003:056A:0015.0016: unknown main item tag 0x3 [ 223.785276][ T7925] wacom 0003:056A:0015.0016: unknown main item tag 0x6 [ 223.786780][ T7925] wacom 0003:056A:0015.0016: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 223.799855][ T7925] wacom 0003:056A:0015.0016: hidraw0: USB HID v0.05 Device [HID 056a:0015] on usb-dummy_hcd.2-1/input0 [ 223.847313][ T8765] hpfs: filesystem error: improperly stopped [ 223.866878][ T8771] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 223.879793][ T8765] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 223.891742][ T7925] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0015.0016/input/input14 [ 223.912812][ T8767] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.927278][ T8765] hpfs: You really don't want any checks? You are crazy... [ 223.934775][ T8765] hpfs: hpfs_map_sector(): read error [ 223.947552][ T8765] hpfs: code page support is disabled [ 223.948461][ T8771] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.965356][ T8765] hpfs: hpfs_map_4sectors(): unaligned read [ 223.974524][ T8765] hpfs: hpfs_map_4sectors(): unaligned read [ 223.991077][ T8765] hpfs: filesystem error: unable to find root dir [ 223.998152][ T8767] ext4 filesystem being mounted at /214/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.015613][ T5995] usb 1-1: Using ep0 maxpacket: 16 [ 224.024239][ T7925] usb 3-1: USB disconnect, device number 9 [ 224.232740][ T5995] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.382729][ T5995] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.445218][ T5995] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 224.511236][ T5995] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.632289][ T8780] fido_id[8780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 224.875492][ T5995] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 224.884749][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.943602][ T5995] usb 1-1: Product: syz [ 224.954449][ T5995] usb 1-1: Manufacturer: syz [ 224.985037][ T5995] usb 1-1: SerialNumber: syz [ 225.283246][ T5995] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 225.319570][ T5995] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 225.373879][ T8775] set_capacity_and_notify: 1 callbacks suppressed [ 225.373894][ T8775] loop7: detected capacity change from 0 to 32768 [ 225.415367][ T7925] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 225.519413][ T5995] usb 1-1: 2:1 : can't get High Capability descriptor [ 225.563173][ T8775] XFS (loop7): Mounting V5 Filesystem [ 225.665242][ T7925] usb 6-1: Using ep0 maxpacket: 8 [ 225.771583][ T7932] usb 1-1: USB disconnect, device number 10 [ 225.785560][ T7925] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 225.828485][ T7925] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 41290, setting to 1024 [ 225.872387][ T7925] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 225.930509][ T7925] usb 6-1: config 0 interface 0 has no altsetting 0 [ 225.951416][ T7925] usb 6-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.00 [ 225.974621][ T7925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.004052][ T8775] XFS (loop7): Ending clean mount [ 226.019195][ T7925] usb 6-1: config 0 descriptor?? [ 226.063893][ T8775] XFS (loop7): Quotacheck needed: Please wait. [ 226.198487][ T8775] XFS (loop7): Quotacheck: Done. [ 226.350749][ T4231] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 226.455007][ T8826] loop0: detected capacity change from 0 to 64 [ 226.475450][ T8251] XFS (loop7): Unmounting Filesystem [ 226.497344][ T7925] thrustmaster 0003:044F:B605.0017: unknown main item tag 0x3 [ 226.515360][ T7925] thrustmaster 0003:044F:B605.0017: unknown main item tag 0x0 [ 226.585327][ T7925] thrustmaster 0003:044F:B605.0017: unknown main item tag 0x0 [ 226.609848][ T7925] thrustmaster 0003:044F:B605.0017: unknown main item tag 0x0 [ 226.638754][ T7925] thrustmaster 0003:044F:B605.0017: unknown main item tag 0x0 [ 226.654903][ T7925] thrustmaster 0003:044F:B605.0017: unknown main item tag 0x0 [ 226.669299][ T7925] thrustmaster 0003:044F:B605.0017: unknown main item tag 0x0 [ 226.681512][ T7925] thrustmaster 0003:044F:B605.0017: unknown main item tag 0x0 [ 226.700711][ T7925] thrustmaster 0003:044F:B605.0017: hidraw0: USB HID vd.f2 Device [HID 044f:b605] on usb-dummy_hcd.5-1/input0 [ 226.718744][ T7925] thrustmaster 0003:044F:B605.0017: no inputs found [ 226.730056][ T7925] usb 6-1: USB disconnect, device number 7 [ 226.740653][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 226.975579][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.994096][ T8827] fido_id[8827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 227.015214][ T4231] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.049253][ T4231] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.107101][ T4231] usb 3-1: config 0 interface 0 has no altsetting 0 [ 227.113801][ T4231] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 227.155457][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.198368][ T4231] usb 3-1: config 0 descriptor?? [ 227.723943][ T4231] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 227.754465][ T8849] loop5: detected capacity change from 0 to 164 [ 227.786913][ T4231] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 227.842241][ T4231] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 227.879872][ T4231] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 227.934465][ T4231] corsair-cpro 0003:1B1C:0C10.0018: unknown main item tag 0x0 [ 227.981645][ T4231] corsair-cpro 0003:1B1C:0C10.0018: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 228.169850][ T4231] corsair-cpro: probe of 0003:1B1C:0C10.0018 failed with error -38 [ 228.214958][ T4231] usb 3-1: USB disconnect, device number 10 [ 228.327669][ T8849] rock: directory entry would overflow storage [ 228.336001][ T8849] rock: sig=0x5252, size=5, remaining=3 [ 228.393538][ T8873] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1634'. [ 228.554631][ T8875] loop6: detected capacity change from 0 to 2048 [ 228.875861][ T8888] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.922184][ T8890] loop7: detected capacity change from 0 to 512 [ 229.159860][ T8899] loop6: detected capacity change from 0 to 16 [ 229.171027][ T8890] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.201728][ T8890] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.235525][ T8868] loop0: detected capacity change from 0 to 32768 [ 229.321205][ T8899] erofs: (device loop6): mounted with root inode @ nid 36. [ 229.332485][ T8868] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1632 (8868) [ 229.453686][ T8868] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 229.556109][ T8868] BTRFS info (device loop0): using free space tree [ 229.562680][ T8868] BTRFS info (device loop0): has skinny extents [ 229.604051][ T8906] fido_id[8906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 229.692995][ T8909] loop5: detected capacity change from 0 to 4096 [ 229.903624][ T8909] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 229.951797][ T8944] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5124] was attempted by " [ 229.968839][ T8868] BTRFS info (device loop0): enabling ssd optimizations [ 230.072716][ T8946] loop7: detected capacity change from 0 to 512 [ 230.142277][ T8909] ntfs3: loop5: Failed to load $Extend. [ 230.170912][ T8951] loop6: detected capacity change from 0 to 128 [ 230.186566][ T8946] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.371358][ T8954] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x65521afd, utbl_chksum : 0xe619d30d) [ 230.522123][ T26] audit: type=1800 audit(1784907481.361:22): pid=8954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1662" name="file1" dev="loop2" ino=1048641 res=0 errno=0 [ 230.890288][ T8973] set_capacity_and_notify: 1 callbacks suppressed [ 230.890306][ T8973] loop6: detected capacity change from 0 to 256 [ 231.036690][ T8979] loop2: detected capacity change from 0 to 8 [ 231.239974][ T8979] SQUASHFS error: zlib decompression failed, data probably corrupt [ 231.275267][ T8979] SQUASHFS error: Failed to read block 0x9b: -5 [ 231.281568][ T8979] SQUASHFS error: Unable to read metadata cache entry [99] [ 231.326977][ T8979] SQUASHFS error: Unable to read inode 0x127 [ 231.714514][ T5997] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 231.760898][ T9001] loop2: detected capacity change from 0 to 164 [ 231.922340][ T8973] FAT-fs (loop6): Directory bread(block 64) failed [ 231.938771][ T8973] FAT-fs (loop6): Directory bread(block 65) failed [ 231.984851][ T8973] FAT-fs (loop6): Directory bread(block 66) failed [ 231.994926][ T8973] FAT-fs (loop6): Directory bread(block 67) failed [ 232.027899][ T8973] FAT-fs (loop6): Directory bread(block 68) failed [ 232.051090][ T5997] usb 6-1: Using ep0 maxpacket: 8 [ 232.065307][ T8973] FAT-fs (loop6): Directory bread(block 69) failed [ 232.075615][ T8973] FAT-fs (loop6): Directory bread(block 70) failed [ 232.102049][ T8973] FAT-fs (loop6): Directory bread(block 71) failed [ 232.136177][ T8973] FAT-fs (loop6): Directory bread(block 72) failed [ 232.142791][ T8973] FAT-fs (loop6): Directory bread(block 73) failed [ 232.210550][ T9013] binder: 9011:9013 ioctl 4018620d 0 returned -22 [ 232.239809][ T9013] binder: 9011:9013 ioctl c00c6211 0 returned -22 [ 232.334469][ T8973] overlayfs: filesystem on './file0' not supported [ 232.351981][ T5997] usb 6-1: unable to get BOS descriptor or descriptor too short [ 232.516375][ T5997] usb 6-1: config 1 has an invalid interface number: 211 but max is 0 [ 232.524668][ T5997] usb 6-1: config 1 has no interface number 0 [ 232.555192][ T5997] usb 6-1: too many endpoints for config 1 interface 211 altsetting 3: 250, using maximum allowed: 30 [ 232.602581][ T5997] usb 6-1: config 1 interface 211 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 232.635186][ T5997] usb 6-1: config 1 interface 211 has no altsetting 0 [ 232.668451][ T9017] loop0: detected capacity change from 0 to 4096 [ 232.758733][ T9021] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1689'. [ 232.772427][ T9019] loop7: detected capacity change from 0 to 4096 [ 232.882045][ T5997] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54 [ 232.902485][ T5997] usb 6-1: New USB device strings: Mfr=7, Product=0, SerialNumber=3 [ 232.917709][ T9017] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 232.948323][ T5997] usb 6-1: Manufacturer: syz [ 232.952975][ T5997] usb 6-1: SerialNumber: syz [ 232.966184][ T9017] NILFS (loop0): mounting unchecked fs [ 232.972296][ T9017] NILFS (loop0): recovery required for readonly filesystem [ 233.021331][ T9017] NILFS (loop0): write access will be enabled during recovery [ 233.088652][ T9019] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 233.141182][ T9017] NILFS (loop0): recovery complete [ 233.320976][ T9009] loop2: detected capacity change from 0 to 32768 [ 233.338208][ T8251] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 233.396319][ T5997] usb 6-1: USB disconnect, device number 8 [ 233.449207][ T9009] [ 233.449207][ T9009] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.449207][ T9009] [ 233.557279][ T9009] [ 233.557279][ T9009] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.557279][ T9009] [ 233.616142][ T9009] [ 233.616142][ T9009] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.616142][ T9009] [ 233.665184][ T9009] [ 233.665184][ T9009] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.665184][ T9009] [ 233.665258][ T9009] [ 233.665258][ T9009] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.665258][ T9009] [ 233.702674][ T276] [ 233.702674][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.702674][ T276] [ 233.724085][ T9036] jfs_create: dtInsert returned -EIO [ 233.724227][ T9036] ERROR: (device loop2): jfs_create: [ 233.724227][ T9036] [ 233.744826][ T9036] ERROR: (device loop2): remounting filesystem as read-only [ 234.491504][ T9066] loop0: detected capacity change from 0 to 4096 [ 234.779865][ T9089] loop5: detected capacity change from 0 to 16 [ 234.799254][ T9088] loop7: detected capacity change from 0 to 8 [ 234.818564][ T9085] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 234.899348][ T9088] SQUASHFS error: Unable to read directory block [629:ff26] [ 235.229782][ T4232] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 235.263481][ T9089] erofs: (device loop5): mounted with root inode @ nid 36. [ 235.317843][ T26] audit: type=1800 audit(1784907486.161:23): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1714" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 235.414323][ T9109] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.485329][ T4232] usb 7-1: Using ep0 maxpacket: 32 [ 235.645573][ T4232] usb 7-1: unable to get BOS descriptor or descriptor too short [ 235.725478][ T4232] usb 7-1: config 14 has an invalid interface number: 207 but max is 0 [ 235.756208][ T4232] usb 7-1: config 14 has no interface number 0 [ 235.803808][ T4232] usb 7-1: config 14 interface 207 has no altsetting 0 [ 235.995476][ T4232] usb 7-1: New USB device found, idVendor=d07e, idProduct=f8b2, bcdDevice=9b.bc [ 236.034421][ T4232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.089569][ T4232] usb 7-1: Product: syz [ 236.093792][ T4232] usb 7-1: Manufacturer: syz [ 236.194080][ T4232] usb 7-1: SerialNumber: syz [ 236.556018][ T4232] usb-storage 7-1:14.207: USB Mass Storage device detected [ 236.672394][ T9126] loop2: detected capacity change from 0 to 8192 [ 236.754404][ T9128] loop5: detected capacity change from 0 to 4096 [ 236.794539][ T9126] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 236.820148][ T9128] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 236.875433][ T9126] REISERFS (device loop2): using ordered data mode [ 236.882079][ T9126] reiserfs: using flush barriers [ 236.974464][ T9126] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 237.110910][ T9126] REISERFS (device loop2): checking transaction log (loop2) [ 237.176519][ T9126] REISERFS (device loop2): Using r5 hash to sort names [ 237.183458][ T9126] REISERFS warning (device loop2): super-2030 reiserfs_fill_super: This file system claims to use 23297 bitmap blocks in its super block, but requires 131072. Clearing to zero. [ 237.226763][ T9126] REISERFS (device loop2): using 3.5.x disk format [ 237.258955][ T9126] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 237.273182][ T9113] loop7: detected capacity change from 0 to 32768 [ 237.343955][ T9128] ntfs3: loop5: failed to convert "c46c" to iso8859-13 [ 237.398188][ T9126] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 237.556661][ T9113] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 237.588965][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 533 (0) [ 237.672436][ T9126] REISERFS (device loop2): Remounting filesystem read-only [ 237.694839][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 534 (0) [ 237.776897][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 535 (0) [ 237.842012][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 536 (0) [ 237.915414][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 537 (0) [ 238.014548][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 538 (0) [ 238.035741][ T8251] ocfs2: Unmounting device (7,7) on (node local) [ 238.095733][ T4232] usb 7-1: USB disconnect, device number 10 [ 238.181038][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 539 (0) [ 238.295344][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 540 (0) [ 238.400585][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 541 (0) [ 238.475204][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 542 (0) [ 238.539895][ T9176] loop5: detected capacity change from 0 to 256 [ 238.552244][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 543 (0) [ 238.600284][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 544 (0) [ 238.693146][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 545 (0) [ 238.771653][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 546 (0) [ 238.855251][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 547 (0) [ 238.922672][ T9126] REISERFS error (device loop2): vs-4010 is_reusable: block number is out of range 548 (0) [ 239.454615][ T9161] loop6: detected capacity change from 0 to 32768 [ 239.523866][ T9161] (syz.6.1731,9161,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 239.625008][ T9161] (syz.6.1731,9161,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 239.739671][ T9161] JBD2: Ignoring recovery information on journal [ 239.888968][ T9161] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 240.162967][ T9221] loop7: detected capacity change from 0 to 512 [ 240.311230][ T9221] EXT4-fs (loop7): Ignoring removed nobh option [ 240.330552][ T9221] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 240.414949][ T9221] EXT4-fs (loop7): 1 truncate cleaned up [ 240.420920][ T9221] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,nobh,acl,,errors=continue. Quota mode: none. [ 240.588437][ T9233] loop0: detected capacity change from 0 to 1024 [ 240.683117][ T9233] hfsplus: walked past end of dir [ 240.839976][ T5124] ocfs2: Unmounting device (7,6) on (node local) [ 241.291064][ T9258] loop2: detected capacity change from 0 to 64 [ 241.326881][ T9259] loop6: detected capacity change from 0 to 64 [ 241.414846][ T9258] attempt to access beyond end of device [ 241.414846][ T9258] loop2: rw=0, want=1026, limit=64 [ 241.449338][ T9258] Buffer I/O error on dev loop2, logical block 512, async page read [ 241.463910][ T5993] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 241.478101][ T9258] attempt to access beyond end of device [ 241.478101][ T9258] loop2: rw=0, want=113154, limit=64 [ 241.489854][ T9258] Buffer I/O error on dev loop2, logical block 56576, async page read [ 241.808619][ T9271] device macvlan0 entered promiscuous mode [ 241.859543][ T5993] usb 6-1: Using ep0 maxpacket: 16 [ 241.959519][ T9278] loop2: detected capacity change from 0 to 764 [ 242.119785][ T9286] vcan0: MTU too low for tipc bearer [ 242.150464][ T9286] tipc: Enabling of bearer rejected, failed to enable media [ 242.300331][ T5993] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 242.309518][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.339536][ T5993] usb 6-1: Product: syz [ 242.343754][ T5993] usb 6-1: Manufacturer: syz [ 242.385203][ T5993] usb 6-1: SerialNumber: syz [ 242.392190][ T9295] loop6: detected capacity change from 0 to 512 [ 242.405643][ T5993] r8152-cfgselector 6-1: config 0 descriptor?? [ 242.441261][ C1] ================================================================== [ 242.449978][ C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 242.457560][ C1] Read of size 2 at addr ffff888020c33940 by task ksoftirqd/1/20 [ 242.465300][ C1] [ 242.467662][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 242.474973][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.485071][ C1] Call Trace: [ 242.488373][ C1] [ 242.491329][ C1] dump_stack_lvl+0x188/0x250 [ 242.496047][ C1] ? show_regs_print_info+0x20/0x20 [ 242.501273][ C1] ? _printk+0xda/0x130 [ 242.505458][ C1] ? __nft_trace_packet+0x135/0x150 [ 242.510685][ C1] ? load_image+0x410/0x410 [ 242.515216][ C1] print_address_description+0x60/0x2d0 [ 242.520872][ C1] ? __nft_trace_packet+0x135/0x150 [ 242.526097][ C1] kasan_report+0xdf/0x130 [ 242.530531][ C1] ? __nft_trace_packet+0x135/0x150 [ 242.535752][ C1] __nft_trace_packet+0x135/0x150 [ 242.540791][ C1] nft_do_chain+0x1299/0x14d0 [ 242.545486][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 242.551487][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 242.557398][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 242.562721][ C1] ? ipv6_find_tlv+0x270/0x270 [ 242.567515][ C1] nft_do_chain_inet+0x25c/0x340 [ 242.572495][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 242.577388][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 242.582258][ C1] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 242.587656][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 242.592524][ C1] ? lock_downgrade+0x7b0/0x830 [ 242.597410][ C1] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 242.602811][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 242.607685][ C1] nf_hook_slow+0xb9/0x200 [ 242.612125][ C1] ? ip6_input+0xa0/0xa0 [ 242.616385][ C1] NF_HOOK+0x1f2/0x390 [ 242.620474][ C1] ? ip6_input+0xa0/0xa0 [ 242.624766][ C1] ? ip6_rcv_core+0x1600/0x1600 [ 242.629633][ C1] ? ip6_input+0xa0/0xa0 [ 242.633889][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 242.639203][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 242.644063][ C1] ? refcount_add+0x80/0x80 [ 242.648577][ C1] NF_HOOK+0x303/0x390 [ 242.652666][ C1] ? refcount_add+0x80/0x80 [ 242.657212][ C1] ? ip6_rcv_core+0x1600/0x1600 [ 242.662084][ C1] ? refcount_add+0x80/0x80 [ 242.666779][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 242.672081][ C1] __netif_receive_skb+0xcc/0x290 [ 242.677150][ C1] process_backlog+0x366/0x770 [ 242.681957][ C1] ? rps_trigger_softirq+0x210/0x210 [ 242.687268][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 242.693272][ C1] ? rcu_is_watching+0x11/0xa0 [ 242.698073][ C1] __napi_poll+0xbb/0x430 [ 242.702414][ C1] net_rx_action+0x522/0xa80 [ 242.707021][ C1] ? net_tx_action+0x880/0x880 [ 242.711801][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 242.717803][ C1] ? lock_chain_count+0x20/0x20 [ 242.722729][ C1] handle_softirqs+0x336/0x830 [ 242.727518][ C1] ? run_ksoftirqd+0xa4/0x100 [ 242.732210][ C1] ? do_softirq+0x210/0x210 [ 242.736727][ C1] ? run_ksoftirqd+0x81/0x100 [ 242.741420][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 242.746634][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 242.751938][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 242.757146][ C1] run_ksoftirqd+0xa4/0x100 [ 242.761657][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 242.766867][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 242.772262][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 242.777390][ C1] smpboot_thread_fn+0x520/0x990 [ 242.782358][ C1] kthread+0x42e/0x520 [ 242.786448][ C1] ? cpu_report_death+0x180/0x180 [ 242.791487][ C1] ? kthread_blkcg+0xd0/0xd0 [ 242.796180][ C1] ret_from_fork+0x1f/0x30 [ 242.800645][ C1] [ 242.803679][ C1] [ 242.806025][ C1] Allocated by task 9280: [ 242.810360][ C1] __kasan_slab_alloc+0x92/0xc0 [ 242.815237][ C1] slab_post_alloc_hook+0x4c/0x380 [ 242.820362][ C1] kmem_cache_alloc_node+0x184/0x2c0 [ 242.825765][ C1] __alloc_skb+0xf4/0x750 [ 242.830111][ C1] synproxy_send_client_synack_ipv6+0x169/0xc20 [ 242.836381][ C1] nft_synproxy_eval_v6+0x35f/0x4e0 [ 242.841590][ C1] nft_synproxy_do_eval+0x3ca/0x550 [ 242.846803][ C1] nft_do_chain+0x491/0x14d0 [ 242.851410][ C1] nft_do_chain_inet+0x25c/0x340 [ 242.856361][ C1] nf_hook_slow+0xb9/0x200 [ 242.860784][ C1] NF_HOOK+0x1f2/0x390 [ 242.864868][ C1] NF_HOOK+0x303/0x390 [ 242.868953][ C1] __netif_receive_skb+0xcc/0x290 [ 242.873990][ C1] process_backlog+0x366/0x770 [ 242.878766][ C1] __napi_poll+0xbb/0x430 [ 242.883187][ C1] net_rx_action+0x522/0xa80 [ 242.887797][ C1] handle_softirqs+0x336/0x830 [ 242.892604][ C1] __irq_exit_rcu+0x13b/0x230 [ 242.897293][ C1] irq_exit_rcu+0x5/0x20 [ 242.901544][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 242.907186][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 242.913171][ C1] [ 242.915504][ C1] Freed by task 20: [ 242.919315][ C1] kasan_set_track+0x4b/0x70 [ 242.923931][ C1] kasan_set_free_info+0x1f/0x40 [ 242.928882][ C1] ____kasan_slab_free+0xd5/0x110 [ 242.933960][ C1] slab_free_freelist_hook+0xec/0x170 [ 242.939342][ C1] kmem_cache_free+0x8f/0x210 [ 242.944025][ C1] nft_synproxy_eval_v6+0x367/0x4e0 [ 242.949237][ C1] nft_synproxy_do_eval+0x3ca/0x550 [ 242.954447][ C1] nft_do_chain+0x491/0x14d0 [ 242.959046][ C1] nft_do_chain_inet+0x25c/0x340 [ 242.963997][ C1] nf_hook_slow+0xb9/0x200 [ 242.968430][ C1] NF_HOOK+0x1f2/0x390 [ 242.972512][ C1] NF_HOOK+0x303/0x390 [ 242.976679][ C1] __netif_receive_skb+0xcc/0x290 [ 242.981717][ C1] process_backlog+0x366/0x770 [ 242.986489][ C1] __napi_poll+0xbb/0x430 [ 242.990831][ C1] net_rx_action+0x522/0xa80 [ 242.995430][ C1] handle_softirqs+0x336/0x830 [ 243.000205][ C1] run_ksoftirqd+0xa4/0x100 [ 243.004713][ C1] smpboot_thread_fn+0x520/0x990 [ 243.009676][ C1] kthread+0x42e/0x520 [ 243.013754][ C1] ret_from_fork+0x1f/0x30 [ 243.018182][ C1] [ 243.020517][ C1] The buggy address belongs to the object at ffff888020c338c0 [ 243.020517][ C1] which belongs to the cache skbuff_head_cache of size 232 [ 243.035123][ C1] The buggy address is located 128 bytes inside of [ 243.035123][ C1] 232-byte region [ffff888020c338c0, ffff888020c339a8) [ 243.048412][ C1] The buggy address belongs to the page: [ 243.054051][ C1] page:ffffea0000830cc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20c33 [ 243.064203][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 243.071770][ C1] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888144bf0140 [ 243.080358][ C1] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 243.088953][ C1] page dumped because: kasan: bad access detected [ 243.095367][ C1] page_owner tracks the page as allocated [ 243.101088][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 3561, ts 29020600632, free_ts 29000168950 [ 243.117147][ C1] get_page_from_freelist+0x24f6/0x2670 [ 243.122723][ C1] __alloc_pages+0x1ee/0x480 [ 243.127332][ C1] new_slab+0xc0/0x4b0 [ 243.131403][ C1] ___slab_alloc+0x807/0xdd0 [ 243.135998][ C1] kmem_cache_alloc_node+0x118/0x2c0 [ 243.141298][ C1] __alloc_skb+0xf4/0x750 [ 243.145634][ C1] alloc_uevent_skb+0x7d/0x230 [ 243.150419][ C1] kobject_uevent_net_broadcast+0x2e6/0x530 [ 243.156339][ C1] kobject_uevent_env+0x550/0x890 [ 243.161386][ C1] kobject_synth_uevent+0x457/0x940 [ 243.166598][ C1] store_uevent+0x12/0x20 [ 243.170938][ C1] module_attr_store+0x5b/0x80 [ 243.175765][ C1] kernfs_fop_write_iter+0x3a8/0x500 [ 243.181064][ C1] vfs_write+0x748/0xd70 [ 243.185316][ C1] ksys_write+0x153/0x260 [ 243.189659][ C1] do_syscall_64+0x4c/0xa0 [ 243.194097][ C1] page last free stack trace: [ 243.198793][ C1] free_unref_page_prepare+0x637/0x6c0 [ 243.204312][ C1] free_unref_page+0x8f/0x2a0 [ 243.209022][ C1] __unfreeze_partials+0x188/0x1e0 [ 243.214152][ C1] put_cpu_partial+0x12d/0x190 [ 243.218937][ C1] qlist_free_all+0x35/0x90 [ 243.223495][ C1] kasan_quarantine_reduce+0x150/0x160 [ 243.228974][ C1] __kasan_slab_alloc+0x2f/0xc0 [ 243.233881][ C1] slab_post_alloc_hook+0x4c/0x380 [ 243.239013][ C1] kmem_cache_alloc+0x15d/0x280 [ 243.243890][ C1] getname_flags+0xb7/0x4f0 [ 243.248448][ C1] do_sys_openat2+0xdd/0x500 [ 243.253064][ C1] __x64_sys_openat+0x135/0x160 [ 243.257925][ C1] do_syscall_64+0x4c/0xa0 [ 243.262358][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.268267][ C1] [ 243.270602][ C1] Memory state around the buggy address: [ 243.276254][ C1] ffff888020c33800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 243.284343][ C1] ffff888020c33880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 243.292415][ C1] >ffff888020c33900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.300479][ C1] ^ [ 243.306643][ C1] ffff888020c33980: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 243.314714][ C1] ffff888020c33a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.322783][ C1] ================================================================== [ 243.330846][ C1] Disabling lock debugging due to kernel taint [ 243.337090][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 243.344303][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G B syzkaller #0 [ 243.353001][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 243.363081][ C1] Call Trace: [ 243.366379][ C1] [ 243.369463][ C1] dump_stack_lvl+0x188/0x250 [ 243.374384][ C1] ? show_regs_print_info+0x20/0x20 [ 243.379612][ C1] ? load_image+0x410/0x410 [ 243.384156][ C1] panic+0x2f8/0x850 [ 243.388087][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 243.392637][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 243.398572][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 243.404488][ C1] ? _raw_spin_unlock+0x40/0x40 [ 243.409393][ C1] ? print_memory_metadata+0x314/0x400 [ 243.414880][ C1] ? __nft_trace_packet+0x135/0x150 [ 243.420103][ C1] check_panic_on_warn+0x80/0xa0 [ 243.425064][ C1] ? __nft_trace_packet+0x135/0x150 [ 243.430279][ C1] end_report+0x6d/0xf0 [ 243.434445][ C1] kasan_report+0x102/0x130 [ 243.438958][ C1] ? __nft_trace_packet+0x135/0x150 [ 243.444165][ C1] __nft_trace_packet+0x135/0x150 [ 243.449200][ C1] nft_do_chain+0x1299/0x14d0 [ 243.453896][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 243.459904][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 243.465808][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 243.471113][ C1] ? ipv6_find_tlv+0x270/0x270 [ 243.475885][ C1] nft_do_chain_inet+0x25c/0x340 [ 243.480867][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 243.485731][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 243.490593][ C1] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 243.495976][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 243.500834][ C1] ? lock_downgrade+0x7b0/0x830 [ 243.505704][ C1] ? nf_nat_ipv6_local_fn+0x3a0/0x3a0 [ 243.511106][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 243.516069][ C1] nf_hook_slow+0xb9/0x200 [ 243.520500][ C1] ? ip6_input+0xa0/0xa0 [ 243.524752][ C1] NF_HOOK+0x1f2/0x390 [ 243.528834][ C1] ? ip6_input+0xa0/0xa0 [ 243.533084][ C1] ? ip6_rcv_core+0x1600/0x1600 [ 243.537957][ C1] ? ip6_input+0xa0/0xa0 [ 243.542211][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 243.547504][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 243.552376][ C1] ? refcount_add+0x80/0x80 [ 243.556883][ C1] NF_HOOK+0x303/0x390 [ 243.560962][ C1] ? refcount_add+0x80/0x80 [ 243.565472][ C1] ? ip6_rcv_core+0x1600/0x1600 [ 243.570336][ C1] ? refcount_add+0x80/0x80 [ 243.574858][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 243.580158][ C1] __netif_receive_skb+0xcc/0x290 [ 243.585196][ C1] process_backlog+0x366/0x770 [ 243.589974][ C1] ? rps_trigger_softirq+0x210/0x210 [ 243.595266][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 243.601257][ C1] ? rcu_is_watching+0x11/0xa0 [ 243.606031][ C1] __napi_poll+0xbb/0x430 [ 243.610380][ C1] net_rx_action+0x522/0xa80 [ 243.614980][ C1] ? net_tx_action+0x880/0x880 [ 243.619750][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 243.625734][ C1] ? lock_chain_count+0x20/0x20 [ 243.630595][ C1] handle_softirqs+0x336/0x830 [ 243.635369][ C1] ? run_ksoftirqd+0xa4/0x100 [ 243.640054][ C1] ? do_softirq+0x210/0x210 [ 243.644566][ C1] ? run_ksoftirqd+0x81/0x100 [ 243.649251][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 243.654458][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 243.659756][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 243.664961][ C1] run_ksoftirqd+0xa4/0x100 [ 243.669478][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 243.674690][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 243.680070][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 243.685198][ C1] smpboot_thread_fn+0x520/0x990 [ 243.690147][ C1] kthread+0x42e/0x520 [ 243.694225][ C1] ? cpu_report_death+0x180/0x180 [ 243.699257][ C1] ? kthread_blkcg+0xd0/0xd0 [ 243.703869][ C1] ret_from_fork+0x1f/0x30 [ 243.708317][ C1] [ 243.711652][ C1] Kernel Offset: disabled [ 243.716010][ C1] Rebooting in 86400 seconds..