last executing test programs: 2m30.950104355s ago: executing program 0 (id=371): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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") creat(0x0, 0x141) openat$dir(0xffffffffffffff9c, 0x0, 0x4800c0, 0xc6) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') rename(&(0x7f0000000b40)='./file3\x00', &(0x7f0000000b00)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40442, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x257e, &(0x7f0000000240)={0x0, 0x8fea, 0x20, 0x0, 0x1df, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000340)) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd, 0xa96, 0x0, 0xe, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x2500060) io_uring_enter(r1, 0x3516, 0xfffffffd, 0x0, 0x0, 0xfffffffffffffe41) 2m29.924775754s ago: executing program 0 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x48, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b168fa3167"}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2m29.64925317s ago: executing program 0 (id=375): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) close(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x400) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001600fade2bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2400000080201d00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b50700000000000000000000000000000600000000000000670a000000000000faffffffffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000000002060100000000000000080000004f07000008001f0004000000"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a000000000000"], 0x38}}, 0x40408c0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x340, 0x430, 0x190, 0x340, 0x340, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0x0, 0xff000000], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x0, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x7, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"c325", 0x1}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0xffffffff, 0x0, 0x2, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x14, 0x6dc, 0x1, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r7}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xd2}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2m28.414147422s ago: executing program 0 (id=376): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', 0x320c8cc, &(0x7f00000003c0)=ANY=[], 0x1, 0x1f3, &(0x7f0000001880)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 2m28.10671391s ago: executing program 0 (id=379): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)={[], [], 0x2c}, 0x1, 0xef4, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, &(0x7f0000000100)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, &(0x7f00000000c0)={@id={0x2, 0x0, @auto="d791dfeb8b6e3e38d1131c971d1c6ce0"}}) 2m26.175931763s ago: executing program 0 (id=382): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) close(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x400) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001600fade2bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2400000080201d00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b50700000000000000000000000000000600000000000000670a000000000000faffffffffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000000002060100000000000000080000004f07000008001f0004000000"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a000000000000000000"], 0x38}}, 0x40408c0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x340, 0x430, 0x190, 0x340, 0x340, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0x0, 0xff000000], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x0, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x7, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"c325", 0x1}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0xffffffff, 0x0, 0x2, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x14, 0x6dc, 0x1, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xd2}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2m25.621488015s ago: executing program 32 (id=382): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) close(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x400) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001600fade2bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2400000080201d00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b50700000000000000000000000000000600000000000000670a000000000000faffffffffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000000002060100000000000000080000004f07000008001f0004000000"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a000000000000000000"], 0x38}}, 0x40408c0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x340, 0x430, 0x190, 0x340, 0x340, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0x0, 0xff000000], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x0, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x7, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"c325", 0x1}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0xffffffff, 0x0, 0x2, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x14, 0x6dc, 0x1, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xd2}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 6.329017761s ago: executing program 2 (id=886): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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") creat(0x0, 0x141) openat$dir(0xffffffffffffff9c, 0x0, 0x4800c0, 0xc6) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') rename(&(0x7f0000000b40)='./file3\x00', &(0x7f0000000b00)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x40442, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x28) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x257e, &(0x7f0000000240)={0x0, 0x8fea, 0x20, 0x0, 0x1df, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000340)) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd, 0xa96, 0x0, 0xe, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000004c0)=0x2500060) io_uring_enter(r1, 0x3516, 0xfffffffd, 0x0, 0x0, 0xfffffffffffffe41) 6.105904234s ago: executing program 3 (id=887): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@multicast2, @remote, 0xffffff00, 0x0, 0x5, 0xf, {@mac=@random="b0aabfafc62d", {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xfff7, 0x9, 0x8, 0x7ca, 0x5, 0xc, 'veth1_to_bridge\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0xa8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @remote, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @empty, @rand_addr=0x64010101, 0x8, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xff000000, 0x0, 0x10, 0x3, {@mac, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x4, 0x9, 0xb, 0x5676, 0x1, 'batadv_slave_0\x00', 'dvmrp1\x00', {0x7f}, {}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 5.332184059s ago: executing program 2 (id=888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5.285407882s ago: executing program 3 (id=889): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="98000000040a01020000000000000000010000037b000c00d55296284136d9577210a24ff3e9161bd0c187370f822d5c631241cc4bebc0103dc2ca795463727714029acf5610d7875645724e5dc53f66b8e6946415a91eef850271634c423d19d76eeeb4d25075d7fa649ac2e0f41c359246926f120f0e1319c3bb1099d15f5594c17c3ad2a9a5e2740cbbb60008000a400000000465045c56418a12c7d77343ecc4a86c35c5409421ab2c5e75273c612b4a4863babe482b61c0f3479f01"], 0x98}}, 0x400c110) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000003c0)=ANY=[]) 5.205924517s ago: executing program 2 (id=890): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x1, &(0x7f0000000240)={0x22, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) 4.45302847s ago: executing program 1 (id=893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 3.885229924s ago: executing program 1 (id=894): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x50, 0xfff, 0x560c, {0x7, 0x5d5}, {0xfff8, 0x2}, @cond=[{0xff6a, 0x1, 0xb419, 0x2, 0x7, 0x6}, {0x5c9, 0x0, 0xfffe, 0x1, 0x7, 0xf5c9}]}) 3.179730275s ago: executing program 2 (id=897): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$peek(0x3, r0, 0x0) 3.046412903s ago: executing program 3 (id=898): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x22, 0x0, 0x0) 3.011309124s ago: executing program 4 (id=899): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0xa}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d6c8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 2.901475671s ago: executing program 3 (id=900): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'lo\x00', 0x2}, 0x18) 2.864579573s ago: executing program 2 (id=901): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000003c0)={&(0x7f0000000380)=[{0x0, 0x4201, 0x0, 0x0}, {0x99, 0x8200, 0x0, 0x0}], 0x2}) 2.630640147s ago: executing program 4 (id=902): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6a182, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x2080483) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) 2.22756899s ago: executing program 4 (id=903): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bind$llc(r0, 0x0, 0x0) 2.0575701s ago: executing program 3 (id=904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000f2, 0x0, 0xb}]}) 1.807413755s ago: executing program 3 (id=905): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x1, &(0x7f0000000240)={0x22, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) 1.732324429s ago: executing program 1 (id=906): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) close(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x400) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001600fade2bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2400000080201d00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b50700000000000000000000000000000600000000000000670a000000000000faffffffffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000000002060100000000000000080000004f07000008001f0004000000"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a000000000000000000"], 0x38}}, 0x40408c0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x340, 0x430, 0x190, 0x340, 0x340, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0x0, 0xff000000], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x0, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x7, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"c325", 0x1}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0xffffffff, 0x0, 0x2, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x14, 0x6dc, 0x1, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r7}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) syz_io_uring_setup(0xd2, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 749.525996ms ago: executing program 1 (id=907): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xfffffffffdffffff}) 666.568232ms ago: executing program 2 (id=908): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$eJzs3U9oVdkdB/DzEqOJFpMWEVs3itCdJbho0C4aKtJW0b4aEBSapFJbbRCCC6G7R/8sSqGNlrbpRiSb6iJtpC1101YXKjjizCAjI7OYcXAWrkacf6sZhrx7z8t753rznhmdOPr5SHLfub97zj3vcRfv+8y5LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAI4c7RV6ZrvW+PldV3DI3uu3Bg78mZ2fV3p2+u6wuhUt9fyetj3/ne/p+OjO3tjR3Gf5htBwbKhsy6vpU1VrbsnO/X+vPjEEJPMkB3vr3S3dS3kp4gnCgOuKiZoeM3Np7bderM0dqRwb6Hd4pPnXm9yz2B5ZJfV/cWrqXh+u+u5IhGu+nSq7Rcoln/9IL7XJ4EAPBYBqv1TePtaP4Wt9GupfWkPZy0p5J2fIcw1dxYimzclWXz3JTWl2mew1lUWFU6z6Sev/6NdjXtn7STqPEY82w9NI80vWXznEzqyzVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGfJL//1678cPvj7/5XVdwyN7rtwYO/Jmdn1d6dvrusLYaC+v5KVK7/47ug3dh/aOXSq+tHt2e3/3tOd94vbFU0Hh9fjg+39IRxuqtyLw95fG0K1tVBvhr8WC8fqD74fCwAAADxPvlr/3dVoZ3Gwp6VdqafJSv1flIXFmaHjNzae23XqzNHakcG+h3eWPl61ZLzhR47XaA8s/FSagnGMv+l4C/V46InCOItLR0zz/Fe+eXXz2D+2bS3rX8j/A4vn//jKyf8AAAB8FvJ/Os7i2uX/iQ/Xrf/byOkvlfUv5P9NLacs5P8445j/u8LS8j8AAAA8y552/h8ujLO4dvn/ty9N/+S/uw/9s6x/If8Pdpb/VzRPO+68ESc80R/CYLupAwAAACXi/7svfLQQ83r2yUGa1ydHj/1hy5aLM2XjFfL/cGf5v+eJPzMAAABgqb7+o9rHO1+9NltWL+T/amf5f9VTnzkAAADQqftbPxi5+IOvXSirF/L/eGf5f3W+zVc+ZJ2uxr9C+GN/CL3zDyazwrUw9e1GAQAAAHhCYk6/deX8O6dre06UHVfI/5OL3/8/3ukgrv9vuf9fYf1/UyG769+33BgAAACAF1FxPX+8PX72zQVl37/f6fr/jbt+fr17//s/Kzt/If/XOsv/3c3bJ/n9fwAAALAEX7Tv/ztYGGdx7e7/f/vyJ69NTL75p7L+hfw/1Vn+j9s1zU/vUnx9ftUfwob5B/ndBM/H000khbmepkL2wic9RmKPvDC3qqlQN5n02NYfwub5B7Wk8OVYmEoKD9bmhbNJ4eVYyK+HRuHvSeFSvNL+vDafblr4TyzkCyzm4gqKNY0lEUmP98p6zBce2eONxskBAABeKDE851m2p7UZ0ig7V2l3wOp2B3S1O6C73QErkgPSA8v2h/HWQtz/8N3L128d+83/Q4lC/j/bWf6PL8XKbFO2/j/E9f/59xo21v+Px8JAUpiLhWp6x4BqPEcWdn8XzzFQzXs82NAoAAAAwHMtfi7QvczzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FP27j+2rqs+APixY/vFjmO7tKOhIDDtaNppdRxHNDSLhEuFiloB7pYxja4laeN2XlwSkhTqirVpi6aNqqJZO4HEUF02RGCUhaKOsrE1YzRoI2KsjIrfIxuIQWFVB2qYqqnT873n+b5zfftefjiNu8/nD7/z3vf8vO+H77n3vvMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+f3jx2e//40cfvnJPVXzD+qvf9Km3vPGdH37gxYc/8OUzekOYmHu8Iwt3zFx69chlb71k/d6JI48/cNFDl/fk5fJ4WFH/05nfeU+s9fsrQ/hMRwhdaeCC/izQnd/vj/W9rD+E08J8oFFisi8rkTYcHu0NYTbMBxpVfbY3hP5CYNNjn3/krnri3t4QXhVCqKVtfKeWtdGbBs7tyQJ9aWB7VxY48mymEXi4MwvAcYtvhsaLfv9Ec4ahhctVvP66T1jHnl/p8JbFxFB1vp9evMidKuhJH5g4rqetVB2LovT2OODdtgTebaXtfLenrbgjle+hPDsfqoXOrZPXbblxend8pDOMjCyrqmmRnudvPPXua48mvWReh7EDQyfkdbhp44Z7vvaF8UMP7r3vyK3ru2eOt5tfL2zSYnqx1UL+mlsyz2M07vNkCbz9SntJw3a6Qgh/Pn7vXb+4Zc3Gqnhp/j/03PP/+HKOt51NuWOtzwxkc/P4SH9MPDmQzc0BAABgyVgKR01/8vQfnvmhlx7+z6r6SvP/4fbO/8dT/vlkPhvtgRDG5xJ3DIawau7xLPCx2Nw1gyG8ci410Ry4OAkcCOElc4nzG1UlJZbHEsNJ4IcDeWA8CRyMgYkk8JEYuDsJvCcG9ieBa2PgQBJ4XQyEqeZx/MpAPo62A70xsDnbiPvjVQg/G4itJdvqW42qAAAATpB8dtjdfLdwrcPxZojTy/29rTLEK7ArM9SSGtIZbGNaVVlDV6saOlvV0Bj3nucefqnmjlY1ly7D6GjO8BdPfH/f+z5908dDhdL8f/S55/+1BTrSUTr/H8IVc39j7s48Mt2Ib55oygAAAAAchyfe9eh57+05531V8dL8f7y96//jMZFlhczhUDwMsW0whNHmQFbtr5UD2VnvFXkAAAAAloLG+fjGufCp/Da7RDudT5fzTxxl/njif3zB/Bev+O3fuGXoveNV/S3N/yfau/6/r/k268TB2It7BkNYXgh8MfayHpgzHAPfe21zIB//wbgB7oxV5RcmNKq6M5bYHAOjSWC2qsRXGiVWNQfyJ6vR+B2NcUzlJQoBAAAAOOni4YB4Xj5e/z/7V89M/2jVS6erypXm/5uP7vr/uXlw6fL+6RUhrOkKYVn6xYBDfdnCgDHQ35En/rYvq2tZWtVtfSFsrA8srepwvv5/V7rG4GO9WVUxsOrsfU+dW0/8WW8Ia4qBx6+8/9X1xO4k0Gj8N3tDeEV9tGnjDy3PGu9OG3//8hBeXgg0qrpmeQj1xnrSqj5fy3/HIK3qL2shnF4INKq6sBbCca8DC8DzJf4r3Vp8cNfMzdu2TE9P7lzERDyG3xuum5qeHLl2+/TWWkWftiZ9blrG6LbymNr95ZtvxyWKrto32E668T3B0WJb+XH80oWD+f24L9Q9N86x7qa769Ihn3dOuYlQ2JOqGnLnIg+5r1jJ/JNYqj/m7wkrwvIbd03uHLlpy+7dO9dmf9vNPpb9jaeZsm21Nt1WfQv1rY2XR+VqWYlj3Vari5Ws2X3DjjW7Zm6+YOqGLddPXj/59rH168deM3bRunUXrqmPajT722KoqxeqOhnqs/e3Oa4TONSzugqVnIxPDQkJiaWW2PKJ37rm8O2/f33Vx09p/r/juef/8VMnfvLn6zNUnf8fiqf58wsQGqf5N8fAbLvn/4eqzuY3LgwYTgJ7YmCP0/wAAAC8MMTDkfFoZjwqfc41s/99+nWdP64qV5r/72nv+/8naP3/xtL1l1Ut839+LDFatf5/usx/Y/3/PVXr/6fL/DfW/599Htb/v7ERSDbJz6z/DwAAvBCcvPX/Wy7vn/5AQClDy+X90x8IKGVouYx/uz8QcNTr/z924aUPTm498vNQoTT/v7u9+b+F+wEAAODU8cFDXVt/effDd1XFS/P/2fbm/yd//b9Qdf3/cFVgomphQOv/AQAAsERVrf/30Rf1Xj+780P9VeVK8//97c3/42UXnU25Y63PDGRr2oV0TbsnBxpfGQAAAICloTOMjHS3mbdpZdSLj73Nb8SlQJ8jXfS/v/ovq4de8+Obquorzf8PtDf/b/pexqaNG+752hfGDz3z4N77jty6vntm/vw/AAAAsHjaPS4BAAAAAAAAAAAAAAA8/z74pdV/d+P2b15UFS99/z9cMfd41ff/4+/+xe8XnNGUO9baev2//P6myz85M7dk4aGBEM4pBrbdvu20kP82/+pi4JGrzj+znrg9LfG5777uB/XE29LAGy540dP1xMYksDkukviSNBB/VfHplUkgLq/41TQQt8f+NNCTB/5oZTaOjnRb/ag/21Yd6bb6Zn8Ig4VAY1t9pj9royMd4L1JoDHAd6SBOMA35YHOtFefXJH1Kgb6Y9H7VmS9AgDglBX3ArvDdVPTk6NxFz7entXVfBs1LVl2W7najjab/3ZcmuyqfYPtpJel+6LzvzXeHWr1Iawt7a4Ws3TMjfLE1NJi051RMeRWq711VpRLHe2m66keUW82opFrt09v7W458HWts4x1tcyytjTZKWbpnNukbdTSRl/aGFGb26aNLsf7nWFkZFmSa0MMDoUmrV4R7X5fv7jOX9WroJjn3bt7n5g64/APq+orzf+H2pv/14rjejr/MYA98Zf17hgMYVWbIwIAAADa9a2/+frY9g/+wSfS24+ffdbEn7zrX/+hqlxp/j/c3vw/HsHKTwVnRzsOxN//b8z/h7LAx2Jz1wyG8Mq51EQskf2g/mWxxGgW+Fg8YHJ+LLF5ormq5TGwPwn8cCAPHEgCB2MgP0qxL+SHcvYOhPDqudQVzSV2xBJDSeDNMTCcBEZiYDQJrIyB8STwk5V5YCIJfCkGwlTztvr0SkdXAACAY5DPs7qb74Z0nre/q1WGjlYZ+lpl6GyVodYqQ9Uo4v0HY4bu5OKVjkKm7rTW3qSWUob4Y/hH3a9ShvCV5pxpwVLT8fqDxvUGHc0Z/mnXhx6+r3/1aKhQmv+Ptjf/72u+zVo/GOf/87//lwW+GLt3T7x0fDgGvvfa5kB+YOBgnOze2ahqIi+Rj+XOWGI8BoaTwI4YGE8Cm6/IA7NnNgfymXaj8TsajU/lJQoBAAAAOOniAYJ4mCbO/3tff94tv/SKvc9WlSvN/8fbm//H9lYUG3tPrPX7K0P4TMd8bxqBC/qzQDyO0R+/Hv+y/hBOKxzgaJSY7MtK9CQNh0d7s2+o96RVfbY3W2Mg3t/02OcfuaueuLc3hFcVjr402vhOLWujNw2c25MF+tLA9q4sEI/8NAIPd2YBOG6No4LxBZVf6tIwtHC5itffC+U3QdPhlY6BLpBvoe9cLZZa+kB+TLXh6J62UnUsitLb44B321J8tw15txV3pPI9lMIeYC10bp28bsuN07vjI8VvspYs0vNc/JZqO+kT8Drcc+y9ba2WdmA0+fioOAe38OuwI1a3aeOGe772hfFDD+6978it67tn2u5GhfhF4S8+9P6hrxc272Krhfw1t+Q+TyZ8nizFfwPDnrYQwsX3f+nKH7zkifav/59ob/7fldzO+Z+4MXcNhnBeYeMeipv/ksHsc7AQyD4lTy8HslPu/zFQ+ckJAAAAJ1rjcEfjeMFUfptdEJ7Ok8v5J44yfzxeMb5g/nb7/Tv//vc//epb+qer4qX5/+bnnv8vT7rp/L/z/ywS5/8XdKofil6ePrDnuA5Fl6pjUTj/v6BT/d3m/P+CnP93/n8hzv+34Pz/gk71p620l7TDTlcI4YGP33Drf/3isg1V8dL8f0d783/r/y28aF9j/b/NVev/7aha/2+P9f8AAIBFVbHQXDrPK63eV8qQrt5XytBygcCWSwxa/++o1//beOfB1feuev27QoXS/H9Pe/P/+HJYUWx9qaz/N3xFRVV3x8AOCwMCAABwKqo6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDza/aS0w+8+dl/+15VfMP6q9/0qbe88Z0ffuDFhz/w5TN6Q5iae7wjC3fMXHr1yGVvvWT93okjjz9w0UOX1/Jy3fntS5tyx1qfGQhhtvBIf0w8OVC/Mx/YdPknZ7rqiUMDIZxTDGy7fdtp9cRHBkJYXQw8ctX5Z9YTt6clPvfd1/2gnnhbGnjDBS96up7YmAc60u7+6cqsux1pd+9aGcJgIdDo7u+tbK6q0caleaAzbeOj/VkbMdAfi36gP2sjBqZjianlIazpCmFZWtU/1rKqlqVV/XUtq2pZWtUttRA2hhC60qq+25NV1ZWO/J97sqpiYNXZ+546t56Y7QlhTTHw+JX3v7qeeEcSaDT+6z0hvKL+kkkbf7A7a7w7bfze7hBeHkLoSUv8vCsr0ZOWONwVwumFQKPx3+0KYSbwghA/fLYWH9w1c/O2LdPTkzsXMdGTt9Ubrpuanhy5dvv01lrSpyodhfSztx372L/91LuvnUtctW+wnXRXXq57rstj3U13153qvY/96itWMv98lOqP+XvCirD8xl2TO0du2rJ798612d92s49lf5fl0WxbrV0q22p1sZI1u2/YsWbXzM0XTN2w5frJ6yffPrZ+/dhrxi5at+7CNfVRjWZ/T8RQ7z/5Qz2rq1DJyfgAkJCQWGqJzqZPt9FT/YO8tKM/39HuUJv7gC5NK4pZOuZGeSIGffExjDZ31PspLUe0tjRxKGUZa51lXWkyMZ+lN8syt19XmhwWa+qc26TxfmcYGVlWtR2Gmu8WN+9Pj2PzfiNuujbTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/xw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K3D6NkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//9yY1uM=") r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x0, 0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x109142, 0x84) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x8}) 665.217511ms ago: executing program 4 (id=909): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x23}}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 602.102575ms ago: executing program 4 (id=910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x400000f1, 0x0, 0xb}]}) 229.470707ms ago: executing program 1 (id=911): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x2dc, 0x40011}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x800) 97.571965ms ago: executing program 4 (id=912): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 0s ago: executing program 1 (id=913): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) close(0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x400) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001600fade2bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2400000080201d00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b50700000000000000000000000000000600000000000000670a000000000000faffffffffffffffffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000000002060100000000000000080000004f07000008001f0004000000"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a000000000000000000"], 0x38}}, 0x40408c0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x340, 0x430, 0x190, 0x340, 0x340, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0x0, 0xff000000], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x0, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x7, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"c325", 0x1}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0xffffffff, 0x0, 0x2, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x14, 0x6dc, 0x1, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r7}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xd2}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kernel console output (not intermixed with test programs): m 00000000-0000-0000-0000-000000000000. [ 166.673085][ T2996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.937109][ T2996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.066798][ T2996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.088673][ T5754] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 167.301743][ T5754] usb 4-1: Using ep0 maxpacket: 16 [ 167.324840][ T5754] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.361799][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.376432][ T5754] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.386845][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.427590][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.453166][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.478946][ T5754] usb 4-1: config 0 interface 0 has no altsetting 0 [ 167.485803][ T5754] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 167.492423][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.506617][ T2996] tipc: Left network mode [ 167.514637][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.515884][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.632484][ T5754] usb 4-1: config 0 descriptor?? [ 168.144566][ T7154] loop2: detected capacity change from 0 to 32768 [ 168.163209][ T7154] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.388 (7154) [ 168.187760][ T5754] cougar 0003:060B:500A.0006: unexpected long global item [ 168.219321][ T5754] cougar 0003:060B:500A.0006: parse failed [ 168.242340][ T5754] cougar: probe of 0003:060B:500A.0006 failed with error -22 [ 168.296522][ T7154] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 168.344307][ T7154] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 168.418733][ T7154] BTRFS info (device loop2): enabling auto defrag [ 168.427698][ T7154] BTRFS info (device loop2): turning on sync discard [ 168.492222][ T7154] BTRFS info (device loop2): force clearing of disk cache [ 168.508721][ T7154] BTRFS info (device loop2): using default commit interval 30s [ 168.526927][ T7154] BTRFS info (device loop2): max_inline at 0 [ 168.538708][ T7154] BTRFS info (device loop2): disabling free space tree [ 168.569139][ T5849] usb 4-1: USB disconnect, device number 5 [ 168.718711][ T7154] BTRFS info (device loop2): enabling ssd optimizations [ 168.743183][ T7154] BTRFS info (device loop2): rebuilding free space tree [ 168.829116][ T7154] BTRFS info (device loop2): disabling free space tree [ 168.837003][ T7154] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.850663][ T7154] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 168.975105][ T7155] chnl_net:caif_netlink_parms(): no params data found [ 169.046154][ T7154] BTRFS error (device loop2): balance: mixed groups data and metadata options must be the same [ 169.171066][ T5766] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.638351][ T5774] Bluetooth: hci2: command tx timeout [ 169.727747][ T7191] loop1: detected capacity change from 0 to 32768 [ 169.832949][ T7204] loop2: detected capacity change from 0 to 1024 [ 169.845772][ T7191] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 169.905033][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.952037][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.067867][ T7155] bridge_slave_0: entered allmulticast mode [ 170.127193][ T7191] XFS (loop1): Ending clean mount [ 170.242298][ T7155] bridge_slave_0: entered promiscuous mode [ 170.390769][ T7191] XFS (loop1): Quotacheck needed: Please wait. [ 170.424067][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.514987][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.585812][ T7155] bridge_slave_1: entered allmulticast mode [ 170.595948][ T7155] bridge_slave_1: entered promiscuous mode [ 170.693234][ T7191] XFS (loop1): Quotacheck: Done. [ 171.015794][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.032496][ T7229] loop2: detected capacity change from 0 to 256 [ 171.194537][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.300606][ T7235] Cannot find add_set index 0 as target [ 171.619897][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 171.661306][ T7155] team0: Port device team_slave_0 added [ 171.698863][ T51] Bluetooth: hci2: command tx timeout [ 172.103807][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 172.119297][ T7155] team0: Port device team_slave_1 added [ 172.258088][ T2996] hsr_slave_0: left promiscuous mode [ 172.288819][ T2996] hsr_slave_1: left promiscuous mode [ 172.294190][ T7240] loop3: detected capacity change from 0 to 128 [ 172.364012][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.384425][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.420741][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.428255][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.510302][ T2996] bridge_slave_1: left allmulticast mode [ 172.516025][ T2996] bridge_slave_1: left promiscuous mode [ 172.521119][ T7242] loop2: detected capacity change from 0 to 512 [ 172.531667][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.550732][ T7242] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 172.592250][ T2996] bridge_slave_0: left allmulticast mode [ 172.597983][ T2996] bridge_slave_0: left promiscuous mode [ 172.627161][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.637563][ T7244] loop1: detected capacity change from 0 to 24 [ 172.662304][ T7244] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 172.680549][ T7244] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 172.806696][ T2996] veth1_macvtap: left promiscuous mode [ 172.829828][ T2996] veth0_macvtap: left promiscuous mode [ 172.840209][ T2996] veth1_vlan: left promiscuous mode [ 172.847134][ T2996] veth0_vlan: left promiscuous mode [ 172.946118][ T7246] loop3: detected capacity change from 0 to 4096 [ 173.075140][ T7249] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.294755][ T5849] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 173.521988][ T7253] loop3: detected capacity change from 0 to 256 [ 173.548448][ T5849] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 173.549916][ T7253] exfat: Deprecated parameter 'namecase' [ 173.561257][ T7253] exfat: Deprecated parameter 'namecase' [ 173.578956][ T5849] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 173.587289][ T5849] usb 2-1: Product: syz [ 173.614291][ T5849] usb 2-1: Manufacturer: syz [ 173.625572][ T7253] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 173.638723][ T5849] usb 2-1: SerialNumber: syz [ 173.680239][ T5849] usb 2-1: config 0 descriptor?? [ 173.701524][ T5849] ch341 2-1:0.0: ch341-uart converter detected [ 173.724550][ T7242] loop2: detected capacity change from 0 to 32768 [ 173.769051][ T51] Bluetooth: hci2: command tx timeout [ 173.855991][ T7242] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 173.918607][ T7242] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 174.044174][ T5767] exFAT-fs (loop3): invalid start cluster (4278190088) [ 174.055831][ T7242] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 174.090084][ T5874] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 174.099523][ T5874] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 174.243617][ T5874] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 144ms [ 174.290679][ T5874] gfs2: fsid=syz:syz.0: jid=0: Done [ 174.303043][ T7242] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 174.576024][ T5849] usb 2-1: failed to send control message: -71 [ 174.605470][ T5849] ch341-uart: probe of ttyUSB0 failed with error -71 [ 174.617009][ T5849] usb 2-1: USB disconnect, device number 7 [ 174.625366][ T5849] ch341 2-1:0.0: device disconnected [ 174.948648][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 175.038573][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 175.133206][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.365046][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.560979][ T7272] loop1: detected capacity change from 0 to 4096 [ 175.612427][ T7272] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 175.644363][ T7272] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 175.695783][ T7275] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.848935][ T51] Bluetooth: hci2: command tx timeout [ 176.041480][ T7274] loop2: detected capacity change from 0 to 32768 [ 176.059430][ T7274] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.409 (7274) [ 177.007639][ T7274] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.038781][ T7274] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 177.107372][ T7274] BTRFS info (device loop2): using free space tree [ 177.194950][ T7290] loop1: detected capacity change from 0 to 2048 [ 177.280862][ T7274] BTRFS info (device loop2): enabling ssd optimizations [ 177.287995][ T7274] BTRFS info (device loop2): auto enabling async discard [ 177.295886][ T7290] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.381852][ T28] audit: type=1800 audit(1768939798.651:9): pid=7274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.409" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 177.561968][ T5766] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.713602][ T7300] loop1: detected capacity change from 0 to 256 [ 177.772366][ T7300] exFAT-fs (loop1): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 177.902747][ T7302] loop2: detected capacity change from 0 to 1024 [ 178.090810][ T2996] bond0 (unregistering): Released all slaves [ 178.100823][ T7302] hfsplus: bad catalog entry type [ 178.219180][ T1133] hfsplus: b-tree write err: -5, ino 4 [ 178.518037][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.547561][ T7308] loop2: detected capacity change from 0 to 8192 [ 178.551241][ T7310] loop1: detected capacity change from 0 to 256 [ 178.554680][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.602663][ T7310] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 178.665052][ T7308] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.705048][ T7313] loop3: detected capacity change from 0 to 256 [ 178.708705][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.724872][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.735683][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.787548][ T7310] exFAT-fs (loop1): error, invalid size(size(21523) > aligned(9223372036854777344) [ 178.787548][ T7310] [ 178.808165][ T7313] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 178.811565][ T7310] exFAT-fs (loop1): Filesystem has been set read-only [ 178.841516][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.038990][ T7155] hsr_slave_0: entered promiscuous mode [ 179.059337][ T7155] hsr_slave_1: entered promiscuous mode [ 179.095675][ T7155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.178680][ T7155] Cannot create hsr debugfs directory [ 180.111601][ T7155] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.134655][ T7155] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.157001][ T7155] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.219682][ T7155] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.354910][ T7319] loop3: detected capacity change from 0 to 40427 [ 180.412616][ T7319] F2FS-fs (loop3): invalid crc value [ 180.462932][ T7319] F2FS-fs (loop3): Found nat_bits in checkpoint [ 180.648177][ T7319] F2FS-fs (loop3): Start checkpoint disabled! [ 180.669991][ T7155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.722086][ T7319] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 180.769500][ T7155] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.807899][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.815888][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.893863][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.901160][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.966855][ T7319] syz.3.419: attempt to access beyond end of device [ 180.966855][ T7319] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 181.243442][ T49] kworker/u4:3: attempt to access beyond end of device [ 181.243442][ T49] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 181.314499][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 181.343725][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 181.476475][ T7155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.628638][ T5849] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.841996][ T5849] usb 2-1: Using ep0 maxpacket: 16 [ 181.850168][ T5849] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.871920][ T5849] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.912515][ T5849] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 181.966744][ T5849] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.983789][ T5849] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 182.013588][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.050917][ T5849] usb 2-1: config 0 descriptor?? [ 182.369499][ T7155] veth0_vlan: entered promiscuous mode [ 182.394360][ T7155] veth1_vlan: entered promiscuous mode [ 182.472234][ T7155] veth0_macvtap: entered promiscuous mode [ 182.493638][ T7155] veth1_macvtap: entered promiscuous mode [ 182.503372][ T5849] hid (null): nested delimiters [ 182.511169][ T5849] hid (null): nested delimiters [ 182.516196][ T5849] hid (null): nested delimiters [ 182.552682][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.582966][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.593249][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 182.602755][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.624766][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.646398][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.658106][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.672828][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.696116][ T5849] usb 2-1: USB disconnect, device number 8 [ 182.746115][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.768148][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.779283][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.792056][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.802665][ T7155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.837566][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 182.854623][ T9] usb 4-1: can't read configurations, error -71 [ 182.863795][ T7155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.883931][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.912241][ T7155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.925991][ T7155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.936329][ T7155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.951979][ T7155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.144452][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.170006][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.248700][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.266903][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.525930][ T5817] kernel read not supported for file /usbmon9 (pid: 5817 comm: kworker/1:4) [ 183.841279][ T7401] loop1: detected capacity change from 0 to 512 [ 183.968993][ T7401] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.426: inode has both inline data and extents flags [ 184.071739][ T7401] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.426: couldn't read orphan inode 15 (err -117) [ 184.140095][ T7401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.267914][ T7410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.428'. [ 184.401643][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.593925][ T7397] loop4: detected capacity change from 0 to 32768 [ 184.627160][ T7397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.384 (7397) [ 184.685483][ T7397] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.774227][ T7397] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 184.783843][ T7397] BTRFS info (device loop4): setting nodatasum [ 184.801684][ T7397] BTRFS info (device loop4): enabling auto defrag [ 184.826198][ T7397] BTRFS info (device loop4): max_inline at 0 [ 184.837164][ T7397] BTRFS info (device loop4): using free space tree [ 185.097437][ T7397] BTRFS info (device loop4): auto enabling async discard [ 186.013666][ T7155] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.832834][ T7328] Set syz1 is full, maxelem 65536 reached [ 186.898659][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 186.992805][ T7469] C: renamed from team_slave_0 (while UP) [ 187.037669][ T7469] netlink: 'syz.3.435': attribute type 2 has an invalid length. [ 187.078987][ T7469] netlink: 128 bytes leftover after parsing attributes in process `syz.3.435'. [ 187.107635][ T7469] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 187.153792][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.167584][ T8] usb 5-1: config 0 has no interface number 0 [ 187.187288][ T8] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 187.198878][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.204162][ T7476] loop1: detected capacity change from 0 to 2048 [ 187.206923][ T8] usb 5-1: Product: syz [ 187.206944][ T8] usb 5-1: Manufacturer: syz [ 187.206957][ T8] usb 5-1: SerialNumber: syz [ 187.239911][ T8] usb 5-1: config 0 descriptor?? [ 187.266485][ T7476] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.294433][ T7476] EXT4-fs: Ignoring removed i_version option [ 187.346546][ T7476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.369258][ T5817] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 187.426265][ T7480] loop3: detected capacity change from 0 to 4096 [ 187.461547][ T8] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 187.481747][ T8] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 187.501262][ T8] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 187.509684][ T8] usb 5-1: media controller created [ 187.545837][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.593957][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.607645][ T7480] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 187.621626][ T5817] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 187.636353][ T7480] ntfs3: loop3: Failed to load $Extend (-22). [ 187.647523][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.672553][ T7480] ntfs3: loop3: Failed to initialize $Extend. [ 187.710911][ T5817] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 187.720892][ T5817] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 187.734434][ T5817] usb 3-1: Manufacturer: syz [ 187.744575][ T5817] usb 3-1: config 0 descriptor?? [ 187.858641][ T5817] rc_core: IR keymap rc-hauppauge not found [ 187.881420][ T5817] Registered IR keymap rc-empty [ 187.904195][ T5817] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 187.910531][ T7480] ntfs3: loop3: ino=5, "/" directory corrupted [ 187.935888][ T5817] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 188.048552][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 188.106235][ T5817] usb 3-1: USB disconnect, device number 5 [ 188.312380][ T7501] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.360542][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.371013][ T7501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.580067][ T7508] loop3: detected capacity change from 0 to 1024 [ 188.728809][ T2996] hfsplus: b-tree write err: -5, ino 4 [ 188.735917][ T8] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 188.869486][ T8] usb 5-1: USB disconnect, device number 2 [ 189.068738][ T7386] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.249632][ T7505] loop1: detected capacity change from 0 to 32768 [ 189.267998][ T7505] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 189.291029][ T7386] usb 3-1: Using ep0 maxpacket: 8 [ 189.300794][ T7386] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 189.331961][ T7386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.371832][ T7386] usb 3-1: Product: syz [ 189.386544][ T7386] usb 3-1: Manufacturer: syz [ 189.393983][ T7523] loop3: detected capacity change from 0 to 64 [ 189.406847][ T7386] usb 3-1: SerialNumber: syz [ 189.442180][ T7386] usb 3-1: config 0 descriptor?? [ 189.506453][ T7386] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 189.528757][ T7386] usb 3-1: setting power ON [ 189.536859][ T7386] dvb-usb: bulk message failed: -22 (2/0) [ 189.569754][ T5970] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 189.592262][ T7386] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.634841][ T7386] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 189.672715][ T7386] usb 3-1: media controller created [ 189.739029][ T7510] dvb-usb: bulk message failed: -22 (3/0) [ 189.755777][ T7510] dvb-usb: bulk message failed: -22 (3/0) [ 189.789135][ T7510] dvb-usb: bulk message failed: -22 (3/0) [ 189.805759][ T7386] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.904139][ T7386] usb 3-1: selecting invalid altsetting 6 [ 189.949744][ T7386] usb 3-1: digital interface selection failed (-22) [ 189.956406][ T7386] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 190.024280][ T7386] usb 3-1: setting power OFF [ 190.034825][ T7541] netlink: 'syz.3.452': attribute type 5 has an invalid length. [ 190.048713][ T7386] dvb-usb: bulk message failed: -22 (2/0) [ 190.055089][ T7386] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 190.061342][ T7542] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 190.096560][ T7386] (NULL device *): no alternate interface [ 190.183202][ T7386] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 190.244144][ T7386] usb 3-1: USB disconnect, device number 6 [ 190.303408][ T7546] loop1: detected capacity change from 0 to 512 [ 190.410972][ T7546] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 190.435292][ T7556] loop3: detected capacity change from 0 to 1024 [ 190.497380][ T7546] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 190.527877][ T7546] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.455: Failed to acquire dquot type 1 [ 192.364916][ T7546] EXT4-fs (loop1): 1 truncate cleaned up [ 192.458328][ T7546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.480238][ T7562] loop4: detected capacity change from 0 to 1024 [ 192.509504][ T7546] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.547073][ T7546] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.455: path /142/file0: bad entry in directory: rec_len is smaller than minimal - offset=323, inode=0, rec_len=0, size=4096 fake=0 [ 192.751780][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.775828][ T2971] hfsplus: b-tree write err: -5, ino 4 [ 193.399930][ T7581] loop4: detected capacity change from 0 to 2048 [ 193.949287][ T7586] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.371466][ T7569] loop2: detected capacity change from 0 to 32768 [ 194.393661][ T7569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.463 (7569) [ 194.465406][ T7592] loop3: detected capacity change from 0 to 1024 [ 194.548791][ T7569] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.574449][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.595320][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.626549][ T7569] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 194.635684][ T7569] BTRFS info (device loop2): setting nodatasum [ 194.642647][ T7569] BTRFS info (device loop2): force zlib compression, level 3 [ 194.651398][ T7569] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 194.661587][ T7569] BTRFS info (device loop2): use lzo compression, level 0 [ 194.668844][ T7569] BTRFS info (device loop2): turning on flush-on-commit [ 194.676076][ T7569] BTRFS info (device loop2): enabling auto defrag [ 194.682740][ T7569] BTRFS info (device loop2): max_inline at 4096 [ 194.689272][ T7569] BTRFS info (device loop2): using free space tree [ 194.823992][ T7586] NILFS (loop4): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 195.115165][ T7586] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=2) [ 195.398528][ T7586] Remounting filesystem read-only [ 195.398673][ T7569] BTRFS info (device loop2): enabling ssd optimizations [ 195.411630][ T49] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 195.429636][ T49] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 195.462661][ T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.490600][ T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.514323][ T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.568601][ T49] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 195.575366][ T49] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 195.603243][ T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.642162][ T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.683853][ T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.736230][ T7155] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 195.760960][ T5766] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.776508][ T7155] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 195.798558][ T7155] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 195.805924][ T7155] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 195.844719][ T7155] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 195.870201][ T7155] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 195.903702][ T7155] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 195.913049][ T7155] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 195.941960][ T7155] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 195.958610][ T7386] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 195.963893][ T5970] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (5970) [ 196.003321][ T7155] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.023089][ T7155] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.169526][ T7386] usb 4-1: Using ep0 maxpacket: 16 [ 196.225298][ T7386] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.245579][ T7634] loop4: detected capacity change from 0 to 1024 [ 196.253621][ T7386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.295178][ T7386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.657124][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 197.001522][ T7386] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 197.011427][ T7386] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.025990][ T7386] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 197.035400][ T7386] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 197.043502][ T7386] usb 4-1: Manufacturer: syz [ 197.051452][ T7386] usb 4-1: config 0 descriptor?? [ 197.438923][ T7386] rc_core: IR keymap rc-hauppauge not found [ 197.454818][ T7386] Registered IR keymap rc-empty [ 197.478832][ T7386] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.298661][ T7386] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.356881][ T7386] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 198.375383][ T7386] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 198.397044][ T7386] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.428909][ T7386] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.459698][ T7386] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.508692][ T7386] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.548763][ T7386] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.562462][ T7638] loop2: detected capacity change from 0 to 32768 [ 198.589626][ T7638] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.598658][ T7386] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.639195][ T7386] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.678924][ T7386] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.709661][ T7386] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.740170][ T7386] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 198.773142][ T7386] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 198.784215][ T7386] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 198.806826][ T7386] usb 4-1: USB disconnect, device number 8 [ 198.867711][ T5831] kernel write not supported for file /input/mouse0 (pid: 5831 comm: kworker/0:4) [ 198.880460][ T7638] XFS (loop2): Ending clean mount [ 199.188124][ T5766] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.382437][ T7652] loop4: detected capacity change from 0 to 32768 [ 199.430415][ T7652] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.479 (7652) [ 199.442789][ T5831] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.514526][ T7652] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.558952][ T7652] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 199.574119][ T7652] BTRFS info (device loop4): using free space tree [ 199.678017][ T5831] usb 2-1: config 0 has no interfaces? [ 199.702775][ T5831] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.732769][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.750502][ T5831] usb 2-1: config 0 descriptor?? [ 199.819509][ T7652] BTRFS info (device loop4): enabling ssd optimizations [ 199.826530][ T7652] BTRFS info (device loop4): auto enabling async discard [ 200.003529][ T28] audit: type=1326 audit(1768939821.281:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.2.485" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ea339acb9 code=0x0 [ 200.004798][ T7386] usb 2-1: USB disconnect, device number 9 [ 200.074537][ T7664] loop3: detected capacity change from 0 to 32768 [ 200.287187][ T7664] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 200.354976][ T49] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 200.646253][ T5767] ocfs2: Unmounting device (7,3) on (node local) [ 201.674990][ T7155] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.426082][ T7722] loop3: detected capacity change from 0 to 1024 [ 204.571079][ T7731] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 205.108852][ T7737] loop4: detected capacity change from 0 to 4096 [ 205.379799][ T7737] ntfs3: loop4: ino=0, "file0" failed to extend initialized size to 8fecc. [ 206.823782][ T7740] loop2: detected capacity change from 0 to 32768 [ 206.901150][ T7740] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.496 (7740) [ 206.986101][ T7740] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.999087][ T7775] process 'syz.3.505' launched './file2' with NULL argv: empty string added [ 207.028673][ T7740] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 207.088895][ T7740] BTRFS info (device loop2): using free space tree [ 207.382517][ T7801] warning: `syz.3.507' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 207.401098][ T7740] BTRFS info (device loop2): enabling ssd optimizations [ 207.408129][ T7740] BTRFS info (device loop2): auto enabling async discard [ 207.815629][ T7810] loop3: detected capacity change from 0 to 128 [ 207.904983][ T7810] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 207.926093][ T1133] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 208.014569][ T7810] hpfs: filesystem error: improperly stopped [ 208.069417][ T7810] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 208.098606][ T7810] hpfs: You really don't want any checks? You are crazy... [ 208.133235][ T7810] hpfs: hpfs_map_sector(): read error [ 208.158558][ T7810] hpfs: code page support is disabled [ 208.174383][ T7810] hpfs: hpfs_map_4sectors(): unaligned read [ 208.204658][ T7810] hpfs: hpfs_map_4sectors(): unaligned read [ 208.229886][ T7810] hpfs: filesystem error: unable to find root dir [ 208.402527][ T5766] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.757966][ T8] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 209.218845][ T8] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 209.227123][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 209.278749][ T8] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 209.333339][ T8] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 209.370115][ T8] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 209.393456][ T7831] loop3: detected capacity change from 0 to 512 [ 209.436333][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.443848][ T7831] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.499338][ T8] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 209.518999][ T8] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 209.528949][ T8] usb 2-1: Product: syz [ 209.534052][ T8] usb 2-1: Manufacturer: syz [ 209.560319][ T8] usb 2-1: SerialNumber: syz [ 209.568260][ T8] usb 2-1: config 0 descriptor?? [ 209.574641][ T7824] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.586074][ T8] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 209.628268][ T8] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 209.719416][ T7831] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.516: Parent and EA inode have the same ino 15 [ 209.764813][ T7831] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.516: Parent and EA inode have the same ino 15 [ 209.788402][ T7831] EXT4-fs (loop3): 1 orphan inode deleted [ 209.807820][ T7831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.160378][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.200640][ T8] usb 2-1: USB disconnect, device number 10 [ 210.265872][ T8] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 210.643455][ T5817] kernel write not supported for file /dsp (pid: 5817 comm: kworker/1:4) [ 211.067011][ T7874] SET target dimension over the limit! [ 212.008390][ T7879] loop1: detected capacity change from 0 to 4096 [ 212.030823][ T7879] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 213.231052][ T28] audit: type=1800 audit(1768939834.521:11): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.528" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 213.792848][ T7907] loop4: detected capacity change from 0 to 1024 [ 214.158447][ T7905] loop2: detected capacity change from 0 to 8192 [ 214.456356][ T7905] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 214.622310][ T7905] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 214.644463][ T7905] REISERFS (device loop2): using ordered data mode [ 214.704950][ T7905] reiserfs: using flush barriers [ 214.749763][ T7905] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 214.819204][ T7905] REISERFS (device loop2): checking transaction log (loop2) [ 214.854604][ T7905] REISERFS (device loop2): Using r5 hash to sort names [ 214.876489][ T7905] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 214.931185][ T7915] loop4: detected capacity change from 0 to 64 [ 214.941563][ T7905] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 215.043193][ T7905] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 215.115238][ T7905] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 215.157238][ T7920] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 215.193128][ T7905] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 215.277666][ T7900] loop1: detected capacity change from 0 to 32768 [ 215.327532][ T7900] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.533 (7900) [ 215.440553][ T7900] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.487167][ T7926] Cannot find add_set index 0 as target [ 215.599050][ T7900] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 215.817148][ T7900] BTRFS info (device loop1): using free space tree [ 217.443452][ T7900] BTRFS error (device loop1): open_ctree failed: -4 [ 217.782926][ T7962] loop4: detected capacity change from 0 to 1024 [ 218.770466][ T7972] zonefs (nullb0) ERROR: Not a zoned block device [ 219.086322][ T7986] SET target dimension over the limit! [ 219.438847][ T786] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 219.801483][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 219.912096][ T786] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 219.942084][ T786] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 219.961785][ T786] usb 2-1: Product: syz [ 219.966214][ T786] usb 2-1: Manufacturer: syz [ 220.013709][ T786] usb 2-1: SerialNumber: syz [ 220.054910][ T786] usb 2-1: config 0 descriptor?? [ 220.072026][ T7988] loop4: detected capacity change from 0 to 128 [ 220.320970][ T786] usb 2-1: USB disconnect, device number 11 [ 220.379427][ T7974] loop3: detected capacity change from 0 to 32768 [ 220.458785][ T7974] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.547 (7974) [ 220.501249][ T7974] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 220.532098][ T7974] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 220.565495][ T7974] BTRFS info (device loop3): setting nodatacow, compression disabled [ 220.588639][ T7974] BTRFS info (device loop3): force clearing of disk cache [ 220.595851][ T7974] BTRFS info (device loop3): enabling ssd optimizations [ 220.638562][ T7974] BTRFS info (device loop3): using spread ssd allocation scheme [ 220.646387][ T7974] BTRFS info (device loop3): turning off barriers [ 220.669445][ T7974] BTRFS info (device loop3): disabling free space tree [ 220.677015][ T7974] BTRFS info (device loop3): not using ssd optimizations [ 220.704832][ T7974] BTRFS info (device loop3): not using spread ssd allocation scheme [ 220.822176][ T7974] BTRFS info (device loop3): rebuilding free space tree [ 220.887438][ T7974] BTRFS info (device loop3): disabling free space tree [ 220.906089][ T7974] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 220.906300][ T7990] loop2: detected capacity change from 0 to 32768 [ 220.935893][ T7974] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 221.021750][ T7990] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.552 (7990) [ 221.119133][ T7990] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.158653][ T7990] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 221.188862][ T7990] BTRFS info (device loop2): setting nodatasum [ 221.228186][ T7990] BTRFS info (device loop2): enabling auto defrag [ 221.242283][ T5767] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 221.248605][ T7990] BTRFS info (device loop2): max_inline at 0 [ 221.294938][ T7990] BTRFS info (device loop2): using free space tree [ 221.583038][ T7996] loop4: detected capacity change from 0 to 32768 [ 221.612453][ T7996] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.554 (7996) [ 221.687500][ T7996] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 221.747607][ T7990] BTRFS info (device loop2): auto enabling async discard [ 221.757917][ T7996] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 221.808654][ T7996] BTRFS info (device loop4): setting nodatacow, compression disabled [ 221.821442][ T7996] BTRFS info (device loop4): force clearing of disk cache [ 221.883079][ T7996] BTRFS info (device loop4): enabling ssd optimizations [ 221.923625][ T7996] BTRFS info (device loop4): using spread ssd allocation scheme [ 221.980119][ T7996] BTRFS info (device loop4): turning off barriers [ 222.019356][ T7996] BTRFS info (device loop4): disabling free space tree [ 222.053150][ T7996] BTRFS info (device loop4): not using ssd optimizations [ 222.099043][ T7996] BTRFS info (device loop4): not using spread ssd allocation scheme [ 222.438946][ T7996] BTRFS info (device loop4): rebuilding free space tree [ 222.534864][ T8015] loop1: detected capacity change from 0 to 32768 [ 222.560041][ T7996] BTRFS info (device loop4): disabling free space tree [ 222.567162][ T7996] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 222.613035][ T8015] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.555 (8015) [ 222.639823][ T7996] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 222.682145][ T5766] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.942475][ T7155] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 222.967329][ T5970] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5970) [ 223.287527][ T8077] SET target dimension over the limit! [ 223.616836][ T8082] loop2: detected capacity change from 0 to 1024 [ 223.696814][ T8084] netlink: 'syz.4.559': attribute type 39 has an invalid length. [ 225.010169][ T8097] loop4: detected capacity change from 0 to 1024 [ 226.167307][ T8102] loop2: detected capacity change from 0 to 32768 [ 226.268552][ T8102] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.302745][ T8102] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 226.322141][ T8102] BTRFS info (device loop2): turning off barriers [ 226.329348][ T8102] BTRFS info (device loop2): disabling tree log [ 226.335715][ T8102] BTRFS info (device loop2): max_inline at 4096 [ 226.342700][ T8102] BTRFS info (device loop2): using free space tree [ 226.649690][ T8102] BTRFS info (device loop2): enabling ssd optimizations [ 226.667359][ T8102] BTRFS info (device loop2): auto enabling async discard [ 226.899932][ T5766] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.950262][ T8105] loop1: detected capacity change from 0 to 32768 [ 226.988109][ T8105] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.567 (8105) [ 227.052154][ T8105] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.103413][ T8105] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 227.140715][ T8105] BTRFS info (device loop1): setting nodatasum [ 227.150485][ T8105] BTRFS info (device loop1): enabling auto defrag [ 227.157125][ T8105] BTRFS info (device loop1): max_inline at 0 [ 227.189412][ T8105] BTRFS info (device loop1): using free space tree [ 227.284856][ T8139] SET target dimension over the limit! [ 228.447705][ T8145] loop4: detected capacity change from 0 to 1024 [ 228.459401][ T8105] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 228.549828][ T8105] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 228.631770][ T8105] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 228.650385][ T8105] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 228.699519][ T8105] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 228.938817][ T8105] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 229.053422][ T8105] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 229.093881][ T8105] BTRFS error (device loop1): open_ctree failed: -12 [ 229.399554][ T8163] loop1: detected capacity change from 0 to 1024 [ 230.671291][ T8181] loop3: detected capacity change from 0 to 1024 [ 230.718185][ T8185] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 231.682332][ T8196] loop4: detected capacity change from 0 to 128 [ 231.821886][ T8200] loop1: detected capacity change from 0 to 1024 [ 232.703707][ T8207] loop3: detected capacity change from 0 to 1024 [ 234.095322][ T8209] loop4: detected capacity change from 0 to 32768 [ 234.129997][ T8209] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.595 (8209) [ 234.140335][ T8216] loop1: detected capacity change from 0 to 1024 [ 234.232607][ T8209] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.288730][ T8209] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 234.395592][ T8209] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 234.554081][ T8209] BTRFS info (device loop4): trying to use backup root at mount time [ 234.714498][ T8209] BTRFS info (device loop4): use zlib compression, level 3 [ 234.834331][ T8209] BTRFS info (device loop4): enabling ssd optimizations [ 234.887202][ T8205] loop2: detected capacity change from 0 to 32768 [ 234.951846][ T8209] BTRFS info (device loop4): disabling tree log [ 234.958303][ T8209] BTRFS info (device loop4): using free space tree [ 235.083706][ T8205] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 235.175010][ T2981] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 235.246991][ T8209] BTRFS warning (device loop4): couldn't read tree root [ 235.279997][ T8209] BTRFS warning (device loop4): try to load backup roots slot 1 [ 235.290618][ T49] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 235.349229][ T8209] BTRFS warning (device loop4): couldn't read tree root [ 235.362768][ T8209] BTRFS warning (device loop4): try to load backup roots slot 2 [ 235.410829][ T1133] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 235.463694][ T8209] BTRFS warning (device loop4): couldn't read tree root [ 235.482895][ T8209] BTRFS warning (device loop4): try to load backup roots slot 3 [ 235.529449][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 235.593707][ T8209] BTRFS info (device loop4): auto enabling async discard [ 235.626289][ T8209] BTRFS info (device loop4): rebuilding free space tree [ 235.697182][ T8209] BTRFS info (device loop4): checking UUID tree [ 235.776461][ T8253] loop1: detected capacity change from 0 to 1024 [ 236.676117][ T7155] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.907957][ T8233] loop3: detected capacity change from 0 to 40427 [ 237.935045][ T8233] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 237.989326][ T8233] F2FS-fs (loop3): invalid crc value [ 238.046450][ T8233] F2FS-fs (loop3): Found nat_bits in checkpoint [ 238.056488][ T8273] SET target dimension over the limit! [ 238.905006][ T8275] netlink: 52 bytes leftover after parsing attributes in process `syz.1.609'. [ 239.047913][ T8233] F2FS-fs (loop3): Start checkpoint disabled! [ 239.629904][ T8294] loop1: detected capacity change from 0 to 512 [ 239.766594][ T8294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.805915][ T8299] loop3: detected capacity change from 0 to 1024 [ 239.877840][ T8294] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.694368][ T8294] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 240.826378][ T8309] Cannot find add_set index 0 as target [ 241.773470][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.209875][ T8327] loop1: detected capacity change from 0 to 8 [ 242.230226][ T8328] Cannot find add_set index 0 as target [ 243.232840][ T8330] loop2: detected capacity change from 0 to 1024 [ 244.111172][ T8321] loop3: detected capacity change from 0 to 32768 [ 244.247869][ T8321] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 244.635735][ T5767] (syz-executor,5767,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 244.635948][ T8350] loop1: detected capacity change from 0 to 16 [ 244.708165][ T8350] erofs: (device loop1): mounted with root inode @ nid 36. [ 244.721658][ T5767] ocfs2: Unmounting device (7,3) on (node local) [ 245.218884][ T5809] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 245.421540][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 245.429602][ T5809] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 245.442249][ T5809] usb 5-1: config 0 has no interface number 0 [ 245.450321][ T8370] loop3: detected capacity change from 0 to 16 [ 245.457755][ T8370] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 245.469939][ T5809] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 245.490599][ T5809] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 245.499831][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.507862][ T5809] usb 5-1: Product: syz [ 245.512308][ T5809] usb 5-1: Manufacturer: syz [ 245.517051][ T5809] usb 5-1: SerialNumber: syz [ 245.524372][ T5809] usb 5-1: config 0 descriptor?? [ 245.530662][ T8355] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 245.646884][ T8375] loop1: detected capacity change from 0 to 1024 [ 245.781184][ T8355] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 245.879468][ T8380] loop2: detected capacity change from 0 to 64 [ 246.191633][ T8387] loop2: detected capacity change from 0 to 128 [ 246.235821][ T8387] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 246.274660][ T8387] hpfs: filesystem error: improperly stopped [ 246.298389][ T8387] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 246.304714][ T8392] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 246.306390][ T8387] hpfs: You really don't want any checks? You are crazy... [ 246.331084][ T8387] hpfs: hpfs_map_sector(): read error [ 246.336590][ T8387] hpfs: code page support is disabled [ 246.348194][ T8387] hpfs: hpfs_map_4sectors(): unaligned read [ 246.356471][ T8387] hpfs: hpfs_map_4sectors(): unaligned read [ 246.363058][ T8387] hpfs: filesystem error: unable to find root dir [ 246.397130][ T8387] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 246.431335][ T5809] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 246.472927][ T5809] asix: probe of 5-1:0.188 failed with error -71 [ 246.499951][ T5809] usb 5-1: USB disconnect, device number 3 [ 246.838595][ T8403] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 246.846449][ T8403] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 246.878016][ T8403] vhci_hcd vhci_hcd.0: Device attached [ 246.893855][ T8405] vhci_hcd: connection closed [ 246.902748][ T2971] vhci_hcd: stop threads [ 246.934060][ T2971] vhci_hcd: release socket [ 246.952169][ T2971] vhci_hcd: disconnect device [ 247.235175][ T8416] loop3: detected capacity change from 0 to 1024 [ 247.270679][ T8416] hfsplus: found bad thread record in catalog [ 247.297457][ T8416] hfsplus: found bad thread record in catalog [ 247.309745][ T5809] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 247.321044][ T8416] hfsplus: found bad thread record in catalog [ 247.352222][ T42] hfsplus: found bad thread record in catalog [ 247.352379][ T42] hfsplus: found bad thread record in catalog [ 247.458797][ T51] Bluetooth: hci3: unexpected event for opcode 0x0804 [ 247.497026][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.516853][ T5809] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 247.528569][ T5809] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 247.538153][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.554711][ T5809] usb 2-1: config 0 descriptor?? [ 247.590982][ T5809] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 247.597690][ T5809] dvb-usb: bulk message failed: -22 (3/0) [ 247.661155][ T5809] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 247.699492][ T5809] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 247.706728][ T5809] usb 2-1: media controller created [ 247.714600][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.744072][ T5809] dvb-usb: bulk message failed: -22 (6/0) [ 247.778587][ T5809] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 247.807189][ T5809] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 247.833756][ T5809] dvb-usb: schedule remote query interval to 150 msecs. [ 247.845611][ T5809] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 247.872284][ T5809] usb 2-1: USB disconnect, device number 12 [ 248.032851][ T8439] SET target dimension over the limit! [ 248.071381][ T5809] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 249.058297][ T8450] loop2: detected capacity change from 0 to 256 [ 249.089593][ T8450] exfat: Deprecated parameter 'namecase' [ 249.095349][ T8450] exfat: Deprecated parameter 'namecase' [ 249.107618][ T8450] exfat: Deprecated parameter 'utf8' [ 249.171680][ T8450] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 249.193404][ T8454] capability: warning: `syz.1.674' uses 32-bit capabilities (legacy support in use) [ 249.234047][ T8454] program syz.1.674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.366464][ T8456] loop3: detected capacity change from 0 to 8 [ 249.587918][ T8463] loop1: detected capacity change from 0 to 1024 [ 249.647089][ T8465] netlink: 44 bytes leftover after parsing attributes in process `syz.3.678'. [ 249.659691][ T8441] loop4: detected capacity change from 0 to 32768 [ 249.669235][ T8465] netem: unknown loss type 12 [ 249.675053][ T8465] netem: change failed [ 249.721058][ T8441] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 249.774153][ T28] audit: type=1800 audit(1768939871.051:12): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.669" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 249.932302][ T7155] ocfs2: Unmounting device (7,4) on (node local) [ 249.959898][ T8471] SET target dimension over the limit! [ 251.067667][ T8482] loop3: detected capacity change from 0 to 1024 [ 251.316792][ T8485] loop4: detected capacity change from 0 to 512 [ 251.903533][ T8485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.968017][ T8485] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.351933][ T7155] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.366120][ T8494] loop1: detected capacity change from 0 to 32768 [ 252.518584][ T8494] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 252.834389][ T8509] Cannot find add_set index 0 as target [ 253.003829][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 254.027030][ T8499] loop3: detected capacity change from 0 to 32768 [ 254.061604][ T8501] loop2: detected capacity change from 0 to 32768 [ 254.079004][ T8499] JBD2: Ignoring recovery information on journal [ 254.207538][ T8501] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 254.221502][ T8511] loop1: detected capacity change from 0 to 32768 [ 254.287338][ T8511] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 254.305185][ T8499] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 254.433802][ T8511] JBD2: Ignoring recovery information on journal [ 254.590754][ T8501] XFS (loop2): Ending clean mount [ 254.616831][ T8511] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 254.636417][ T5767] ocfs2: Unmounting device (7,3) on (node local) [ 254.870328][ T5766] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 255.042929][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 255.507933][ T8542] loop2: detected capacity change from 0 to 1024 [ 255.658851][ T5809] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 255.918666][ T5809] usb 5-1: Using ep0 maxpacket: 8 [ 255.996316][ T5809] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 256.013354][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.025496][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.123671][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.360499][ T5809] pvrusb2: Hardware description: Terratec Grabster AV400 [ 256.367631][ T5809] pvrusb2: ********** [ 256.427207][ T5809] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 256.453823][ T5809] pvrusb2: Important functionality might not be entirely working. [ 256.498597][ T5809] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 256.554400][ T5809] pvrusb2: ********** [ 256.565182][ T2315] pvrusb2: Invalid write control endpoint [ 256.613514][ T8552] SET target dimension over the limit! [ 256.958393][ T8538] pvrusb2: Invalid write control endpoint [ 257.204623][ T786] usb 5-1: USB disconnect, device number 4 [ 257.487918][ T2315] pvrusb2: Invalid write control endpoint [ 257.535613][ T2315] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 257.558886][ T2315] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 257.566748][ T2315] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 257.577028][ T2315] pvrusb2: Device being rendered inoperable [ 257.583200][ T2315] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 257.591492][ T2315] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 257.603058][ T2315] pvrusb2: Attached sub-driver cx25840 [ 257.608853][ T2315] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 257.622558][ T2315] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 258.383366][ T8576] loop3: detected capacity change from 0 to 1024 [ 259.424097][ T8588] SET target dimension over the limit! [ 260.285925][ T28] audit: type=1326 audit(1768939881.571:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.3.716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004219acb9 code=0x0 [ 260.294349][ T8592] loop1: detected capacity change from 0 to 512 [ 260.424524][ T8592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.439303][ T8592] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.603991][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.444224][ T8618] loop4: detected capacity change from 0 to 1024 [ 262.019217][ T787] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 262.388736][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 262.482987][ T787] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.512523][ T787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.552606][ T787] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 262.599400][ T787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 262.613030][ T787] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.631125][ T787] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.661803][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.926685][ T787] usb 2-1: GET_CAPABILITIES returned 0 [ 262.936732][ T787] usbtmc 2-1:16.0: can't read capabilities [ 263.240503][ T787] usb 2-1: USB disconnect, device number 13 [ 263.343062][ T8629] loop2: detected capacity change from 0 to 32768 [ 263.411260][ T8629] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 263.487229][ T8629] XFS (loop2): Ending clean mount [ 263.505532][ T8634] loop3: detected capacity change from 0 to 32768 [ 263.519569][ T8634] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.733 (8634) [ 263.560329][ T8629] XFS (loop2): Quotacheck needed: Please wait. [ 263.568353][ T8634] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 263.593590][ T8634] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 263.628861][ T8634] BTRFS info (device loop3): enabling disk space caching [ 263.675486][ T8634] BTRFS info (device loop3): enabling auto defrag [ 263.710345][ T8629] XFS (loop2): Quotacheck: Done. [ 263.715781][ T8634] BTRFS info (device loop3): doing ref verification [ 263.771652][ T8634] BTRFS info (device loop3): use no compression [ 263.778005][ T8634] BTRFS info (device loop3): force clearing of disk cache [ 263.838693][ T8634] BTRFS info (device loop3): disabling disk space caching [ 264.048995][ T8634] BTRFS info (device loop3): enabling ssd optimizations [ 264.049022][ T8634] BTRFS info (device loop3): auto enabling async discard [ 264.075664][ T5766] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 264.081798][ T8634] BTRFS info (device loop3): rebuilding free space tree [ 264.148559][ T8634] BTRFS info (device loop3): disabling free space tree [ 264.148638][ T8634] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 264.148703][ T8634] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 264.602766][ T5767] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 264.755807][ T8675] loop4: detected capacity change from 0 to 1024 [ 265.901539][ T8678] loop3: detected capacity change from 0 to 1024 [ 265.933549][ T8668] loop1: detected capacity change from 0 to 32768 [ 266.001297][ T8668] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.737 (8668) [ 266.514937][ T8668] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 266.739386][ T8668] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 266.758501][ T8668] BTRFS info (device loop1): using free space tree [ 267.009063][ T8668] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 267.010056][ T8668] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 267.047041][ T8690] loop4: detected capacity change from 0 to 4096 [ 267.085457][ T8690] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 267.100623][ T8668] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 267.101427][ T8668] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 267.145698][ T8690] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 267.194095][ T8668] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 267.199995][ T8690] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 267.219730][ T8668] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 267.220542][ T8668] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 267.370494][ T8690] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported [ 267.420705][ T8668] BTRFS error (device loop1): open_ctree failed: -12 [ 267.430217][ T28] audit: type=1800 audit(1768939888.721:14): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.749" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 267.463805][ T8690] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported [ 267.483872][ T8705] loop2: detected capacity change from 0 to 4096 [ 267.548980][ T8705] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 267.615068][ T8705] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 267.686915][ T1325] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 267.718769][ T7155] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 267.743721][ T8708] loop3: detected capacity change from 0 to 1024 [ 267.799244][ T7155] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 267.806425][ T7155] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 267.853365][ T1325] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 268.760331][ T8717] SET target dimension over the limit! [ 269.864162][ T8726] loop3: detected capacity change from 0 to 256 [ 269.896843][ T8726] exfat: Deprecated parameter 'utf8' [ 269.937264][ T8726] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d) [ 270.744521][ T8744] loop1: detected capacity change from 0 to 128 [ 270.822569][ T28] audit: type=1800 audit(1768939892.111:15): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.756" name="file1" dev="loop1" ino=1048666 res=0 errno=0 [ 271.107091][ T8753] loop1: detected capacity change from 0 to 256 [ 271.213430][ T8753] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 271.422176][ T8757] loop4: detected capacity change from 0 to 2048 [ 271.460283][ T8757] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.524333][ T8757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.579158][ T8749] loop2: detected capacity change from 0 to 32768 [ 271.601178][ T8757] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.659727][ T8749] JBD2: Ignoring recovery information on journal [ 271.789338][ T8755] loop3: detected capacity change from 0 to 32768 [ 271.870696][ T8766] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.762: bg 0: block 345: padding at end of block bitmap is not set [ 271.880669][ T8749] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 271.908713][ T8755] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 271.982899][ T8766] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 41 with error 117 [ 272.098583][ T8766] EXT4-fs (loop4): This should not happen!! Data will be lost [ 272.098583][ T8766] [ 272.116011][ T8755] XFS (loop3): Ending clean mount [ 272.252433][ T42] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 57 with max blocks 1 with error 117 [ 272.279253][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 272.294571][ T42] EXT4-fs (loop4): This should not happen!! Data will be lost [ 272.294571][ T42] [ 272.357321][ T7155] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.365190][ T5767] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 272.642154][ T8763] loop1: detected capacity change from 0 to 32768 [ 272.799188][ T5809] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 272.873977][ T8763] JBD2: Ignoring recovery information on journal [ 272.979525][ T5809] usb 3-1: Using ep0 maxpacket: 32 [ 273.006698][ T5809] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 273.034802][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.046186][ T8763] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 273.086237][ T5809] usb 3-1: config 0 descriptor?? [ 273.113409][ T5809] as10x_usb: device has been detected [ 273.139237][ T5809] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 273.211608][ T5809] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 273.263141][ T787] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 273.275064][ T28] audit: type=1800 audit(1768939894.561:16): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.763" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 273.331277][ T5809] as10x_usb: error during firmware upload part1 [ 273.340171][ T5809] Registered device nBox DVB-T Dongle [ 273.345789][ T5809] usb 3-1: USB disconnect, device number 7 [ 273.407798][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 273.415642][ T5809] Unregistered device nBox DVB-T Dongle [ 273.421856][ T5809] as10x_usb: device has been disconnected [ 273.488598][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 273.511489][ T787] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 273.538585][ T787] usb 5-1: config 4 has no interface number 0 [ 273.559932][ T787] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.575606][ T787] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.595446][ T787] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 273.606299][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.630710][ T787] hub 5-1:4.128: USB hub found [ 273.697432][ T8795] mmap: syz.1.770 (8795) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 273.844878][ T787] hub 5-1:4.128: 2 ports detected [ 273.858582][ T787] hub 5-1:4.128: Using single TT (err -22) [ 274.163255][ T8793] loop3: detected capacity change from 0 to 32768 [ 274.226157][ T8793] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.271490][ T787] usb 5-1: USB disconnect, device number 5 [ 274.523739][ T8793] XFS (loop3): Ending clean mount [ 274.648950][ T5767] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 274.655927][ T8802] loop1: detected capacity change from 0 to 32768 [ 274.758325][ T8802] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 274.793135][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 275.076082][ T8802] syz.1.774 (8802) used greatest stack depth: 18352 bytes left [ 275.092627][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 275.141500][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 275.158133][ T8823] loop4: detected capacity change from 0 to 1024 [ 275.191167][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.215244][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 275.223061][ T5765] ocfs2: Unmounting device (7,1) on (node local) [ 275.247367][ T8825] loop3: detected capacity change from 0 to 512 [ 275.260623][ T8] pvrusb2: ********** [ 275.288675][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 275.354660][ T8] pvrusb2: Important functionality might not be entirely working. [ 275.548386][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 275.616761][ T8825] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 275.748759][ T8] pvrusb2: ********** [ 275.814386][ T8825] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 275.856435][ T2315] pvrusb2: Invalid write control endpoint [ 275.924871][ T8825] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.781: Corrupt directory, running e2fsck is recommended [ 276.000104][ T8825] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 276.108942][ T8825] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.781: corrupted in-inode xattr: e_name out of bounds [ 276.135729][ T8816] pvrusb2: Invalid write control endpoint [ 276.143332][ T5809] usb 3-1: USB disconnect, device number 8 [ 276.161343][ T8825] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.781: couldn't read orphan inode 15 (err -117) [ 276.185252][ T2315] pvrusb2: Invalid write control endpoint [ 276.195975][ T2315] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 276.209160][ T8825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.226715][ T2315] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 276.234785][ T2315] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 276.274464][ T2315] pvrusb2: Device being rendered inoperable [ 276.286621][ T2315] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 276.307239][ T2315] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 276.327746][ T2315] pvrusb2: Attached sub-driver cx25840 [ 276.358112][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.375959][ T2315] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 276.396628][ T2315] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 276.433251][ T8833] loop1: detected capacity change from 0 to 1024 [ 277.409999][ T8830] loop4: detected capacity change from 0 to 32768 [ 277.431427][ T8830] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.782 (8830) [ 277.489862][ T8830] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 277.530958][ T8830] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 277.555115][ T8830] BTRFS info (device loop4): force clearing of disk cache [ 277.563102][ T8830] BTRFS info (device loop4): doing ref verification [ 277.569928][ T8830] BTRFS info (device loop4): metadata ratio 16 [ 277.576918][ T8830] BTRFS info (device loop4): enabling ssd optimizations [ 277.585747][ T8830] BTRFS info (device loop4): max_inline at 0 [ 277.591978][ T8830] BTRFS info (device loop4): enabling disk space caching [ 277.613167][ T8830] BTRFS info (device loop4): disk space caching is enabled [ 277.726761][ T8830] BTRFS info (device loop4): auto enabling async discard [ 277.746489][ T8830] BTRFS info (device loop4): rebuilding free space tree [ 277.774901][ T8830] BTRFS info (device loop4): disabling free space tree [ 277.784291][ T8830] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 277.795910][ T8830] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 277.941173][ T8861] loop2: detected capacity change from 0 to 1024 [ 278.904281][ T7155] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 279.037098][ T8868] loop3: detected capacity change from 0 to 1024 [ 280.350983][ T8864] loop1: detected capacity change from 0 to 32768 [ 280.352507][ T8878] loop2: detected capacity change from 0 to 4096 [ 280.389985][ T8864] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.786 (8864) [ 280.443217][ T8882] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.533712][ T8864] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.559339][ T8884] loop3: detected capacity change from 0 to 1024 [ 280.608720][ T8864] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 280.617520][ T8864] BTRFS info (device loop1): setting nodatasum [ 280.672123][ T8864] BTRFS info (device loop1): force zlib compression, level 3 [ 280.698915][ T8864] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 280.745024][ T8864] BTRFS info (device loop1): use lzo compression, level 0 [ 280.893333][ T8864] BTRFS info (device loop1): turning on flush-on-commit [ 281.041121][ T8864] BTRFS info (device loop1): enabling auto defrag [ 281.201823][ T8864] BTRFS info (device loop1): max_inline at 4096 [ 281.324006][ T8864] BTRFS info (device loop1): using free space tree [ 281.357041][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 281.357904][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 281.368643][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 281.392643][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 281.403452][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 281.414383][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 281.424631][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 281.435699][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 281.446754][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 281.467735][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 281.524307][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 281.610966][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 281.660720][ T8864] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 281.724677][ T8864] BTRFS error (device loop1): open_ctree failed: -12 [ 281.926240][ T8909] loop3: detected capacity change from 0 to 1024 [ 282.583001][ T8881] loop4: detected capacity change from 0 to 32768 [ 282.772069][ T8881] XFS: attr2 mount option is deprecated. [ 282.926404][ T8881] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 283.105135][ T8881] XFS (loop4): Ending clean mount [ 283.157020][ T8881] XFS (loop4): Quotacheck needed: Please wait. [ 283.268827][ T8881] XFS (loop4): Quotacheck: Done. [ 283.357908][ T7155] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 283.389959][ T8929] loop2: detected capacity change from 0 to 512 [ 283.462789][ T8929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.485024][ T8929] ext4 filesystem being mounted at /190/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.504030][ T8929] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #4: comm syz.2.801: corrupted inode contents [ 283.527009][ T8929] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #4: comm syz.2.801: mark_inode_dirty error [ 283.570768][ T8929] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #4: comm syz.2.801: corrupted inode contents [ 283.574896][ T8918] loop1: detected capacity change from 0 to 32768 [ 283.600027][ T8918] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.798 (8918) [ 283.616857][ T8929] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #4: comm syz.2.801: mark_inode_dirty error [ 283.632013][ T8918] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 283.639659][ T8929] Quota error (device loop2): write_blk: dquota write failed [ 283.645475][ T8918] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 283.654965][ T8937] loop3: detected capacity change from 0 to 512 [ 283.660696][ T8918] BTRFS info (device loop1): using free space tree [ 283.677833][ T8929] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 283.688635][ T8929] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 283.698963][ T8929] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.801: Failed to acquire dquot type 1 [ 283.713511][ T6123] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.825089][ T8918] BTRFS info (device loop1): enabling ssd optimizations [ 283.878526][ T8918] BTRFS info (device loop1): auto enabling async discard [ 283.905816][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.049618][ T28] audit: type=1800 audit(1768939905.331:17): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.798" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 284.236232][ T5765] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 284.408922][ T8964] loop2: detected capacity change from 0 to 1024 [ 285.476415][ T8969] loop2: detected capacity change from 0 to 512 [ 285.485115][ T8969] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.585072][ T8969] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.809: Parent and EA inode have the same ino 15 [ 285.672927][ T8969] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.809: Parent and EA inode have the same ino 15 [ 285.691136][ T8962] loop3: detected capacity change from 0 to 32768 [ 285.717717][ T8969] EXT4-fs (loop2): 1 orphan inode deleted [ 285.728649][ T7386] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 285.731050][ T8972] loop4: detected capacity change from 0 to 2048 [ 285.739661][ T8962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.806 (8962) [ 285.746542][ T8969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.845709][ T8972] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.880568][ T8962] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.912858][ T8962] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 285.946175][ T8962] BTRFS info (device loop3): setting nodatasum [ 285.980743][ T8962] BTRFS info (device loop3): force zlib compression, level 3 [ 285.981611][ T7386] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 285.992113][ T8962] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 286.023094][ T7386] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 286.055412][ T7386] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 286.071522][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.076481][ T7386] usb 2-1: config 220 has no interface number 2 [ 286.108494][ T7386] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 286.123469][ T8962] BTRFS info (device loop3): use lzo compression, level 0 [ 286.168741][ T8962] BTRFS info (device loop3): turning on flush-on-commit [ 286.175891][ T8962] BTRFS info (device loop3): enabling auto defrag [ 286.177299][ T7386] usb 2-1: config 220 interface 0 has no altsetting 0 [ 286.208744][ T7386] usb 2-1: config 220 interface 76 has no altsetting 0 [ 286.227711][ T7386] usb 2-1: config 220 interface 1 has no altsetting 0 [ 286.262486][ T7386] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 286.265337][ T8962] BTRFS info (device loop3): max_inline at 4096 [ 286.284829][ T8962] BTRFS info (device loop3): using free space tree [ 286.298577][ T7386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.327188][ T7386] usb 2-1: Product: syz [ 286.331556][ T7386] usb 2-1: Manufacturer: syz [ 286.336334][ T7386] usb 2-1: SerialNumber: syz [ 286.454710][ T8962] BTRFS info (device loop3): enabling ssd optimizations [ 286.598060][ T7386] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 286.616830][ T7386] usb 2-1: No valid video chain found. [ 286.623629][ T7386] usb 2-1: selecting invalid altsetting 0 [ 286.681796][ T7386] usb 2-1: selecting invalid altsetting 0 [ 286.703346][ T7386] usbtest: probe of 2-1:220.1 failed with error -22 [ 286.716087][ T5767] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.757694][ T7386] usb 2-1: USB disconnect, device number 14 [ 287.382798][ T9005] loop3: detected capacity change from 0 to 256 [ 287.433120][ T8980] loop2: detected capacity change from 0 to 40427 [ 287.476896][ T8980] F2FS-fs (loop2): invalid crc value [ 287.487021][ T8980] F2FS-fs (loop2): Found nat_bits in checkpoint [ 287.623732][ T8980] F2FS-fs (loop2): Start checkpoint disabled! [ 287.653736][ T8980] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 288.062624][ T9001] loop4: detected capacity change from 0 to 32768 [ 288.094649][ T9001] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.813 (9001) [ 288.168856][ T9001] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 288.191676][ T9001] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 288.229010][ T9001] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 288.269502][ T9001] BTRFS info (device loop4): use zstd compression, level 3 [ 288.293385][ T9001] BTRFS info (device loop4): using free space tree [ 288.459410][ T9001] BTRFS info (device loop4): enabling ssd optimizations [ 288.467853][ T9001] BTRFS info (device loop4): auto enabling async discard [ 288.869518][ T7155] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 288.882807][ T9015] loop1: detected capacity change from 0 to 32768 [ 288.976557][ T9017] loop2: detected capacity change from 0 to 32768 [ 289.000691][ T9015] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 289.107266][ T9017] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 289.184006][ T9015] XFS (loop1): Ending clean mount [ 289.245952][ T6123] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop4 scanned by udevd (6123) [ 289.491705][ T9017] XFS (loop2): Ending clean mount [ 289.548918][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 289.874927][ T5766] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 290.358815][ T9054] loop4: detected capacity change from 0 to 32768 [ 290.430336][ T9054] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 290.563480][ T9054] XFS (loop4): Ending clean mount [ 290.676327][ T9061] loop3: detected capacity change from 0 to 32768 [ 290.736645][ T9061] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.827 (9061) [ 290.762778][ T7155] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 290.781385][ T9061] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 290.796962][ T9061] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 290.809550][ T9079] loop1: detected capacity change from 0 to 1024 [ 290.816443][ T9061] BTRFS info (device loop3): setting nodatacow, compression disabled [ 290.835587][ T9061] BTRFS info (device loop3): turning off barriers [ 290.843799][ T9061] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 290.855456][ T9061] BTRFS info (device loop3): trying to use backup root at mount time [ 290.864522][ T9061] BTRFS info (device loop3): turning on barriers [ 290.872260][ T9061] BTRFS info (device loop3): max_inline at 4096 [ 290.879007][ T9061] BTRFS info (device loop3): using free space tree [ 290.960833][ T9079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 291.065769][ T9079] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.156351][ T2938] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 291.174142][ T9079] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.830: bg 0: block 112: padding at end of block bitmap is not set [ 291.249984][ T9061] BTRFS error (device loop3): failed to load root extent [ 291.257218][ T9061] BTRFS warning (device loop3): try to load backup roots slot 1 [ 291.289144][ T9079] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65539 with max blocks 1 with error 28 [ 291.332749][ T9099] loop4: detected capacity change from 0 to 256 [ 291.353157][ T2938] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 291.362851][ T9079] EXT4-fs (loop1): This should not happen!! Data will be lost [ 291.362851][ T9079] [ 291.376652][ T9061] BTRFS warning (device loop3): couldn't read tree root [ 291.409280][ T9061] BTRFS warning (device loop3): try to load backup roots slot 2 [ 291.427792][ T9079] EXT4-fs (loop1): Total free blocks count 0 [ 291.430580][ T1133] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 291.437889][ T9079] EXT4-fs (loop1): Free/Dirty block details [ 291.497917][ T9061] BTRFS warning (device loop3): couldn't read tree root [ 291.505328][ T9079] EXT4-fs (loop1): free_blocks=0 [ 291.527019][ T9061] BTRFS warning (device loop3): try to load backup roots slot 3 [ 291.558649][ T9079] EXT4-fs (loop1): dirty_blocks=16 [ 291.563943][ T9079] EXT4-fs (loop1): Block reservation details [ 291.587900][ T9079] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 291.598091][ T9061] BTRFS info (device loop3): enabling ssd optimizations [ 291.621427][ T9061] BTRFS info (device loop3): auto enabling async discard [ 291.649263][ T9103] syz_tun: entered promiscuous mode [ 291.661512][ T9061] BTRFS info (device loop3): rebuilding free space tree [ 291.671027][ T9102] syz_tun: left promiscuous mode [ 291.693962][ T9061] BTRFS info (device loop3): checking UUID tree [ 291.755090][ T9105] loop4: detected capacity change from 0 to 1024 [ 291.850535][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 292.729762][ T5767] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 292.888265][ T9121] loop2: detected capacity change from 0 to 1024 [ 294.022710][ T787] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 294.250608][ T787] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.268619][ T787] usb 5-1: config 0 has no interface number 0 [ 294.275100][ T787] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 294.318552][ T787] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 294.360910][ T787] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 294.392957][ T9139] loop1: detected capacity change from 0 to 256 [ 294.397598][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.434295][ T9139] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.460195][ T787] usb 5-1: config 0 descriptor?? [ 294.485809][ T9129] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 294.518799][ T9139] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 294.519718][ T787] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 294.546615][ T9139] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 294.564659][ T9142] loop2: detected capacity change from 0 to 1024 [ 295.507318][ T8] usb 5-1: USB disconnect, device number 6 [ 295.546957][ T9146] loop1: detected capacity change from 0 to 1024 [ 295.590373][ T9146] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.632285][ T9146] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 295.636439][ T9143] loop3: detected capacity change from 0 to 32768 [ 295.667841][ T9143] XFS: attr2 mount option is deprecated. [ 295.712985][ T9146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.765632][ T9143] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 295.884680][ T9143] XFS (loop3): Ending clean mount [ 295.910842][ T9143] XFS (loop3): Quotacheck needed: Please wait. [ 295.981160][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.986157][ T9148] loop2: detected capacity change from 0 to 32768 [ 296.019040][ T9148] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.845 (9148) [ 296.073392][ T9148] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.128735][ T9148] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 296.152297][ T9143] XFS (loop3): Quotacheck: Done. [ 296.164354][ T9148] BTRFS info (device loop2): setting nodatacow, compression disabled [ 296.198850][ T9148] BTRFS info (device loop2): turning off barriers [ 296.223674][ T9148] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 296.268583][ T9148] BTRFS info (device loop2): trying to use backup root at mount time [ 296.307457][ T9148] BTRFS info (device loop2): turning on barriers [ 296.338012][ T9148] BTRFS info (device loop2): max_inline at 4096 [ 296.348465][ T9148] BTRFS info (device loop2): using free space tree [ 296.406241][ T5767] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 296.482708][ T2938] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 296.510774][ T9161] loop4: detected capacity change from 0 to 8192 [ 296.561817][ T9148] BTRFS error (device loop2): failed to load root extent [ 296.569603][ T9148] BTRFS warning (device loop2): try to load backup roots slot 1 [ 296.577743][ T9161] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 296.578210][ T2971] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 296.592240][ T9161] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 296.616502][ T9148] BTRFS warning (device loop2): couldn't read tree root [ 296.642259][ T9161] REISERFS (device loop4): using ordered data mode [ 296.649145][ T9148] BTRFS warning (device loop2): try to load backup roots slot 2 [ 296.680561][ T9161] reiserfs: using flush barriers [ 296.700238][ T2971] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 296.717522][ T9161] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 296.768940][ T9148] BTRFS warning (device loop2): couldn't read tree root [ 296.776044][ T9148] BTRFS warning (device loop2): try to load backup roots slot 3 [ 296.796433][ T9161] REISERFS (device loop4): checking transaction log (loop4) [ 296.848835][ T9148] BTRFS info (device loop2): enabling ssd optimizations [ 296.860593][ T9161] REISERFS (device loop4): Using r5 hash to sort names [ 296.878684][ T9148] BTRFS info (device loop2): auto enabling async discard [ 296.889174][ T9161] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 296.907500][ T9148] BTRFS info (device loop2): rebuilding free space tree [ 296.948291][ T9161] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 296.989843][ T9148] BTRFS info (device loop2): checking UUID tree [ 297.177750][ T9161] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 297.265432][ T9186] loop3: detected capacity change from 0 to 1024 [ 297.290721][ T9161] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 297.361402][ T5766] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.386010][ T9161] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 298.591655][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 298.768603][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 298.786617][ T8] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 298.805370][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 298.837495][ T8] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 298.868556][ T8] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 298.880229][ T9206] loop4: detected capacity change from 0 to 1024 [ 298.893084][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.911289][ T8] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 298.929777][ T8] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 298.937865][ T9206] hfsplus: trying to free free bnode 0(1) [ 298.946082][ T8] usb 2-1: Product: syz [ 298.966253][ T8] usb 2-1: Manufacturer: syz [ 298.974538][ T8] usb 2-1: SerialNumber: syz [ 298.992966][ T8] usb 2-1: config 0 descriptor?? [ 299.015975][ T8] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 299.028887][ T1133] hfsplus: b-tree write err: -5, ino 4 [ 299.031990][ T8] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 299.059668][ T786] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 299.174995][ T9195] loop2: detected capacity change from 0 to 32768 [ 299.250231][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 299.258778][ T9195] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 299.281087][ T786] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 299.294081][ T786] usb 4-1: config 4 has no interface number 0 [ 299.314916][ T786] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.347427][ T786] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.366246][ T9195] XFS (loop2): Ending clean mount [ 299.372439][ T786] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 299.386288][ T9195] XFS (loop2): Quotacheck needed: Please wait. [ 299.395173][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.466036][ T786] hub 4-1:4.128: USB hub found [ 299.505684][ T9195] XFS (loop2): Quotacheck: Done. [ 299.511995][ T8] usb 2-1: USB disconnect, device number 15 [ 299.557063][ T8] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 299.642193][ T9209] loop4: detected capacity change from 0 to 32768 [ 299.660897][ T9209] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.858 (9209) [ 299.689509][ T786] hub 4-1:4.128: 2 ports detected [ 299.695031][ T786] hub 4-1:4.128: Using single TT (err -22) [ 299.734139][ T9209] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 299.747106][ T9209] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 299.761326][ T9209] BTRFS info (device loop4): using free space tree [ 299.852717][ T9209] BTRFS info (device loop4): enabling ssd optimizations [ 299.860195][ T9209] BTRFS info (device loop4): auto enabling async discard [ 299.967297][ T9209] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 300.064122][ T7155] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 300.128652][ T786] usb 4-1: USB disconnect, device number 9 [ 300.621557][ T9247] loop1: detected capacity change from 0 to 1024 [ 301.191824][ T5766] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 301.368900][ T9251] loop4: detected capacity change from 0 to 16 [ 301.385353][ T9251] erofs: (device loop4): mounted with root inode @ nid 36. [ 301.435976][ T9251] syz.4.862: attempt to access beyond end of device [ 301.435976][ T9251] loop4: rw=524288, sector=34359738360, nr_sectors = 32 limit=16 [ 301.493458][ T9251] syz.4.862: attempt to access beyond end of device [ 301.493458][ T9251] loop4: rw=0, sector=34359738360, nr_sectors = 32 limit=16 [ 301.565149][ T28] audit: type=1800 audit(1768939922.831:18): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.862" name="file1" dev="overlay" ino=86 res=0 errno=0 [ 301.852466][ T7155] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 301.958615][ T7155] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 302.041429][ T7155] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 302.055465][ T9259] loop2: detected capacity change from 0 to 1024 [ 302.126680][ T9259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 302.191502][ T9259] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.353395][ T9259] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.863: bg 0: block 112: padding at end of block bitmap is not set [ 302.379845][ T9259] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65539 with max blocks 1 with error 28 [ 302.439158][ T9259] EXT4-fs (loop2): This should not happen!! Data will be lost [ 302.439158][ T9259] [ 302.512971][ T9259] EXT4-fs (loop2): Total free blocks count 0 [ 302.536070][ T9259] EXT4-fs (loop2): Free/Dirty block details [ 302.556555][ T9259] EXT4-fs (loop2): free_blocks=0 [ 302.576559][ T9259] EXT4-fs (loop2): dirty_blocks=16 [ 302.599320][ T9279] loop4: detected capacity change from 0 to 1024 [ 302.610591][ T9259] EXT4-fs (loop2): Block reservation details [ 302.638785][ T9259] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 302.718641][ T5809] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 302.938238][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 303.093744][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 303.588599][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 303.604393][ T5809] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 303.629086][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.650182][ T5809] usb 2-1: Product: syz [ 303.654517][ T5809] usb 2-1: Manufacturer: syz [ 303.659749][ T5809] usb 2-1: SerialNumber: syz [ 303.906935][ T5809] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 303.928751][ T787] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 303.933136][ T5809] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 303.949416][ T5809] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 303.958045][ T5809] usb 2-1: media controller created [ 304.007417][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.078517][ T9297] loop2: detected capacity change from 0 to 32768 [ 304.087045][ T9297] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.879 (9297) [ 304.149481][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.162017][ T9297] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 304.174873][ T9297] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 304.207370][ T787] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 304.222025][ T787] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 304.231872][ T9297] BTRFS info (device loop2): using free space tree [ 304.240592][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.258112][ T787] usb 4-1: config 0 descriptor?? [ 304.285675][ T5809] zl10353_read_register: readreg error (reg=127, ret==-110) [ 304.323881][ T787] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 304.343326][ T787] dvb-usb: bulk message failed: -22 (3/0) [ 304.365209][ T787] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 304.396051][ T787] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 304.419075][ T787] usb 4-1: media controller created [ 304.428208][ T5809] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 304.432109][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.476451][ T9297] BTRFS info (device loop2): enabling ssd optimizations [ 304.484173][ T5809] usb 2-1: USB disconnect, device number 16 [ 304.486775][ T787] dvb-usb: bulk message failed: -22 (6/0) [ 304.549591][ T9297] BTRFS info (device loop2): auto enabling async discard [ 304.560677][ T9294] loop3: detected capacity change from 0 to 256 [ 304.567521][ T787] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 304.602635][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 304.663368][ T9294] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 304.685746][ T787] dvb-usb: schedule remote query interval to 150 msecs. [ 304.727839][ T787] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 304.811414][ T787] usb 4-1: USB disconnect, device number 10 [ 304.847078][ T9297] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 304.913601][ T787] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 304.918661][ T5817] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 304.975070][ T5766] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 305.154355][ T5817] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 305.162918][ T5817] usb 5-1: config 0 has no interface number 0 [ 305.165402][ T9319] comedi comedi0: das16m1: I/O port conflict (0x501,8) [ 305.239642][ T5817] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 305.265214][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.308598][ T5817] usb 5-1: Product: syz [ 305.312847][ T5817] usb 5-1: Manufacturer: syz [ 305.317665][ T5817] usb 5-1: SerialNumber: syz [ 305.375445][ T5817] usb 5-1: config 0 descriptor?? [ 305.968998][ T5817] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 305.985502][ T5817] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 305.994456][ T5817] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 306.004638][ T5817] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 306.010929][ T9331] loop2: detected capacity change from 0 to 1024 [ 306.022776][ T5817] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 306.414233][ T7386] usb 5-1: USB disconnect, device number 7 [ 306.685437][ T7386] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 306.818668][ T7386] keyspan 5-1:0.133: device disconnected [ 306.847693][ T9324] loop1: detected capacity change from 0 to 32768 [ 306.945576][ T9324] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.883 (9324) [ 307.023017][ T9324] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.059505][ T9324] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 307.089168][ T9324] BTRFS info (device loop1): force clearing of disk cache [ 307.117391][ T9324] BTRFS info (device loop1): doing ref verification [ 307.126494][ T9324] BTRFS info (device loop1): metadata ratio 16 [ 307.135482][ T9324] BTRFS info (device loop1): enabling ssd optimizations [ 307.143016][ T5809] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 307.151092][ T9324] BTRFS info (device loop1): max_inline at 0 [ 307.157143][ T9324] BTRFS info (device loop1): enabling disk space caching [ 307.166480][ T9324] BTRFS info (device loop1): disk space caching is enabled [ 307.253389][ T9324] BTRFS info (device loop1): auto enabling async discard [ 307.273253][ T9324] BTRFS info (device loop1): rebuilding free space tree [ 307.322682][ T9324] BTRFS info (device loop1): disabling free space tree [ 307.329902][ T5817] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 307.338578][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 307.349268][ T9324] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 307.351274][ T5809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.371939][ T9324] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 307.388560][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.410397][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.424383][ T5809] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 307.462505][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.491279][ T5809] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 307.500978][ T5809] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 307.518531][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 307.524040][ T5809] usb 4-1: Manufacturer: syz [ 307.537247][ T5817] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 307.547068][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.561262][ T5809] usb 4-1: config 0 descriptor?? [ 307.572166][ T5817] usb 3-1: Product: syz [ 307.576476][ T5817] usb 3-1: Manufacturer: syz [ 307.581809][ T5817] usb 3-1: SerialNumber: syz [ 307.763002][ T5765] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.822121][ T9370] loop4: detected capacity change from 0 to 512 [ 307.824241][ T5817] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 307.892124][ T5817] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 307.913878][ T5817] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 307.942213][ T5809] rc_core: IR keymap rc-hauppauge not found [ 307.948197][ T5809] Registered IR keymap rc-empty [ 307.959923][ T5817] usb 3-1: media controller created [ 307.992971][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.005203][ T9370] Quota error (device loop4): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 308.017591][ T9370] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 308.032420][ T9370] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.892: Failed to acquire dquot type 1 [ 308.078993][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.087879][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.088169][ T9370] EXT4-fs (loop4): 1 truncate cleaned up [ 308.127038][ T5809] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 308.127586][ T9370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.164155][ T5809] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 308.204336][ T9370] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.216826][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.262455][ T5817] zl10353_read_register: readreg error (reg=127, ret==-32) [ 308.280390][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.349253][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.389955][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.396598][ T9370] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.892: path /110/file0: bad entry in directory: rec_len is smaller than minimal - offset=323, inode=0, rec_len=0, size=4096 fake=0 [ 308.416673][ T5817] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 308.436611][ T5817] usb 3-1: USB disconnect, device number 9 [ 308.448689][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.514384][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.569051][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.591064][ T7155] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.638589][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.679100][ T27] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 308.686962][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.736969][ T5809] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 308.784015][ T5809] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 308.794088][ T5809] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 308.831708][ T5809] usb 4-1: USB disconnect, device number 11 [ 308.869103][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 308.884313][ T27] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 308.909275][ T27] usb 2-1: config 179 has no interface number 0 [ 308.924582][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 308.943318][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 308.969180][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.983546][ T27] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 308.996121][ T27] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 309.010135][ T27] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 309.019440][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.047540][ T9378] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 309.520686][ T9401] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 309.558372][ T5809] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input12 [ 309.853153][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 309.861392][ T5809] usb 2-1: USB disconnect, device number 17 [ 309.867382][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 309.867435][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 309.894929][ T5809] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 310.082495][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 310.095453][ T27] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 310.109524][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.131854][ T27] usb 3-1: config 0 descriptor?? [ 310.351030][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 310.379815][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 310.407668][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 310.436967][ T27] usb 3-1: media controller created [ 310.482737][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.591390][ T9415] SET target dimension over the limit! [ 310.639182][ T27] az6027: usb out operation failed. (-71) [ 310.721351][ T5809] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 310.730256][ T27] az6027: usb out operation failed. (-71) [ 310.778853][ T27] stb0899_attach: Driver disabled by Kconfig [ 310.877973][ T27] az6027: no front-end attached [ 310.877973][ T27] [ 310.979844][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 310.986419][ T27] az6027: usb out operation failed. (-71) [ 311.062994][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 311.163211][ T5809] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 311.296337][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 311.323503][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.404458][ T5809] usb 4-1: Product: syz [ 311.439582][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 311.455681][ T5809] usb 4-1: Manufacturer: syz [ 311.463140][ T9417] loop1: detected capacity change from 0 to 512 [ 311.472159][ T9417] EXT4-fs: Ignoring removed i_version option [ 311.478622][ T9417] EXT4-fs: Ignoring removed bh option [ 311.488589][ T5809] usb 4-1: SerialNumber: syz [ 311.495921][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 311.551325][ T27] usb 3-1: USB disconnect, device number 10 [ 311.647374][ T9417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.658992][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 311.739162][ T9417] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 311.767656][ T5809] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 311.782468][ T5809] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 311.794072][ T5809] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 311.803091][ T5809] usb 4-1: media controller created [ 311.857091][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.912921][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.128833][ T5809] zl10353_read_register: readreg error (reg=127, ret==-110) [ 312.200403][ T9432] syz.4.912: attempt to access beyond end of device [ 312.200403][ T9432] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 312.235031][ T5809] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 312.236075][ T9432] syz.4.912: attempt to access beyond end of device [ 312.236075][ T9432] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 312.256752][ T9432] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 312.283521][ T5809] usb 4-1: USB disconnect, device number 12 [ 312.290247][ T9435] [ 312.291026][ T9432] syz.4.912: attempt to access beyond end of device [ 312.291026][ T9432] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 312.292667][ T9435] ====================================================== [ 312.312582][ T9435] WARNING: possible circular locking dependency detected [ 312.319634][ T9435] syzkaller #0 Not tainted [ 312.321468][ T9432] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 312.324145][ T9435] ------------------------------------------------------ [ 312.324158][ T9435] syz.4.912/9435 is trying to acquire lock: [ 312.324169][ T9435] ffff88807b5a00e0 (&type->s_umount_key#88){++++}-{3:3}, at: super_lock+0x17f/0x3a0 [ 312.356122][ T9435] [ 312.356122][ T9435] but task is already holding lock: [ 312.363516][ T9435] ffff888020250c88 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 312.373231][ T9435] [ 312.373231][ T9435] which lock already depends on the new lock. [ 312.373231][ T9435] [ 312.384356][ T9435] [ 312.384356][ T9435] the existing dependency chain (in reverse order) is: [ 312.393976][ T9435] [ 312.393976][ T9435] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 312.402354][ T9435] __mutex_lock+0x136/0xcc0 [ 312.407384][ T9435] bd_finish_claiming+0x22f/0x3f0 [ 312.413013][ T9435] blkdev_get_by_dev+0x45c/0x600 [ 312.418564][ T9435] bdev_open_by_dev+0x77/0x100 [ 312.424213][ T9435] setup_bdev_super+0x59/0x660 [ 312.429666][ T9435] mount_bdev+0x1d3/0x2d0 [ 312.434520][ T9435] legacy_get_tree+0xea/0x180 [ 312.439712][ T9435] vfs_get_tree+0x8c/0x280 [ 312.444640][ T9435] do_new_mount+0x24b/0xa40 [ 312.449919][ T9435] init_mount+0xde/0x130 [ 312.454777][ T9435] do_mount_root+0x97/0x230 [ 312.459792][ T9435] mount_root_generic+0x1a6/0x3e0 [ 312.465334][ T9435] prepare_namespace+0xc2/0x100 [ 312.471393][ T9435] kernel_init_freeable+0x42e/0x580 [ 312.477122][ T9435] kernel_init+0x1d/0x1c0 [ 312.481997][ T9435] ret_from_fork+0x48/0x80 [ 312.486939][ T9435] ret_from_fork_asm+0x11/0x20 [ 312.492228][ T9435] [ 312.492228][ T9435] -> #3 (bdev_lock){+.+.}-{3:3}: [ 312.499346][ T9435] __mutex_lock+0x136/0xcc0 [ 312.504384][ T9435] bd_prepare_to_claim+0x1c0/0x490 [ 312.510042][ T9435] truncate_bdev_range+0x4e/0x260 [ 312.515698][ T9435] blkdev_fallocate+0x50d/0x6a0 [ 312.521094][ T9435] vfs_fallocate+0x58e/0x700 [ 312.526251][ T9435] __x64_sys_fallocate+0xc1/0x110 [ 312.531825][ T9435] do_syscall_64+0x55/0xa0 [ 312.537069][ T9435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.543543][ T9435] [ 312.543543][ T9435] -> #2 (mapping.invalidate_lock){++++}-{3:3}: [ 312.551932][ T9435] down_write+0x97/0x200 [ 312.556763][ T9435] set_blocksize+0x247/0x4b0 [ 312.562229][ T9435] sb_min_blocksize+0xbe/0x190 [ 312.567541][ T9435] ext4_fill_super+0x6f0/0x6790 [ 312.572932][ T9435] get_tree_bdev+0x3f3/0x520 [ 312.578181][ T9435] vfs_get_tree+0x8c/0x280 [ 312.583144][ T9435] do_new_mount+0x24b/0xa40 [ 312.588305][ T9435] init_mount+0xde/0x130 [ 312.593094][ T9435] do_mount_root+0x97/0x230 [ 312.598147][ T9435] mount_root_generic+0x1a6/0x3e0 [ 312.603729][ T9435] prepare_namespace+0xc2/0x100 [ 312.609296][ T9435] kernel_init_freeable+0x42e/0x580 [ 312.615010][ T9435] kernel_init+0x1d/0x1c0 [ 312.619954][ T9435] ret_from_fork+0x48/0x80 [ 312.624901][ T9435] ret_from_fork_asm+0x11/0x20 [ 312.630271][ T9435] [ 312.630271][ T9435] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 312.638954][ T9435] down_write+0x97/0x200 [ 312.643714][ T9435] set_blocksize+0x1ff/0x4b0 [ 312.648829][ T9435] sb_set_blocksize+0x4a/0x100 [ 312.654108][ T9435] udf_load_vrs+0xe3/0xf20 [ 312.659042][ T9435] udf_fill_super+0x69b/0x1790 [ 312.664319][ T9435] mount_bdev+0x221/0x2d0 [ 312.669391][ T9435] legacy_get_tree+0xea/0x180 [ 312.674611][ T9435] vfs_get_tree+0x8c/0x280 [ 312.680015][ T9435] do_new_mount+0x24b/0xa40 [ 312.685565][ T9435] __se_sys_mount+0x2e7/0x3d0 [ 312.691246][ T9435] do_syscall_64+0x55/0xa0 [ 312.696211][ T9435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.702658][ T9435] [ 312.702658][ T9435] -> #0 (&type->s_umount_key#88){++++}-{3:3}: [ 312.711124][ T9435] __lock_acquire+0x2df1/0x7d40 [ 312.716529][ T9435] lock_acquire+0x19e/0x420 [ 312.721581][ T9435] down_read+0x46/0x2e0 [ 312.726263][ T9435] super_lock+0x17f/0x3a0 [ 312.731190][ T9435] fs_bdev_mark_dead+0xad/0x1f0 [ 312.736731][ T9435] bdev_mark_dead+0x83/0x1a0 [ 312.741836][ T9435] disk_force_media_change+0x14e/0x1d0 [ 312.748004][ T9435] nbd_ioctl+0x433/0xf10 [ 312.753323][ T9435] blkdev_ioctl+0x5b2/0x730 [ 312.758357][ T9435] __se_sys_ioctl+0xfd/0x170 [ 312.763480][ T9435] do_syscall_64+0x55/0xa0 [ 312.768526][ T9435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.775145][ T9435] [ 312.775145][ T9435] other info that might help us debug this: [ 312.775145][ T9435] [ 312.785490][ T9435] Chain exists of: [ 312.785490][ T9435] &type->s_umount_key#88 --> bdev_lock --> &bdev->bd_holder_lock [ 312.785490][ T9435] [ 312.799165][ T9435] Possible unsafe locking scenario: [ 312.799165][ T9435] [ 312.806608][ T9435] CPU0 CPU1 [ 312.811969][ T9435] ---- ---- [ 312.817413][ T9435] lock(&bdev->bd_holder_lock); [ 312.822360][ T9435] lock(bdev_lock); [ 312.828881][ T9435] lock(&bdev->bd_holder_lock); [ 312.836482][ T9435] rlock(&type->s_umount_key#88); [ 312.841802][ T9435] [ 312.841802][ T9435] *** DEADLOCK *** [ 312.841802][ T9435] [ 312.849986][ T9435] 2 locks held by syz.4.912/9435: [ 312.855128][ T9435] #0: ffff888140f78198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_ioctl+0x134/0xf10 [ 312.864457][ T9435] #1: ffff888020250c88 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: bdev_mark_dead+0x31/0x1a0 [ 312.874578][ T9435] [ 312.874578][ T9435] stack backtrace: [ 312.880561][ T9435] CPU: 1 PID: 9435 Comm: syz.4.912 Not tainted syzkaller #0 [ 312.887875][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.897957][ T9435] Call Trace: [ 312.901281][ T9435] [ 312.904211][ T9435] dump_stack_lvl+0x18c/0x250 [ 312.908917][ T9435] ? load_image+0x400/0x400 [ 312.913435][ T9435] ? show_regs_print_info+0x20/0x20 [ 312.918649][ T9435] ? print_circular_bug+0x12b/0x1a0 [ 312.923882][ T9435] check_noncircular+0x2fc/0x400 [ 312.928840][ T9435] ? print_deadlock_bug+0x5d0/0x5d0 [ 312.934052][ T9435] ? lockdep_lock+0xf5/0x230 [ 312.938642][ T9435] ? _find_first_zero_bit+0xd3/0x100 [ 312.944211][ T9435] __lock_acquire+0x2df1/0x7d40 [ 312.949068][ T9435] ? __lock_acquire+0x1273/0x7d40 [ 312.954788][ T9435] ? verify_lock_unused+0x140/0x140 [ 312.960266][ T9435] ? verify_lock_unused+0x140/0x140 [ 312.965575][ T9435] lock_acquire+0x19e/0x420 [ 312.970097][ T9435] ? super_lock+0x17f/0x3a0 [ 312.974632][ T9435] ? __might_sleep+0xe0/0xe0 [ 312.979242][ T9435] ? __mutex_trylock_common+0x159/0x260 [ 312.984805][ T9435] ? read_lock_is_recursive+0x20/0x20 [ 312.990165][ T9435] ? trace_raw_output_contention_end+0xd0/0xd0 [ 312.996348][ T9435] down_read+0x46/0x2e0 [ 313.000521][ T9435] ? super_lock+0x17f/0x3a0 [ 313.005039][ T9435] super_lock+0x17f/0x3a0 [ 313.009463][ T9435] ? user_get_super+0x180/0x180 [ 313.014305][ T9435] ? mutex_lock_nested+0x20/0x20 [ 313.019334][ T9435] fs_bdev_mark_dead+0xad/0x1f0 [ 313.024271][ T9435] ? super_s_dev_set+0xa0/0xa0 [ 313.029033][ T9435] bdev_mark_dead+0x83/0x1a0 [ 313.033618][ T9435] disk_force_media_change+0x14e/0x1d0 [ 313.039091][ T9435] ? disk_check_media_change+0x310/0x310 [ 313.044783][ T9435] ? blk_mq_unquiesce_queue+0xbe/0x120 [ 313.050269][ T9435] nbd_ioctl+0x433/0xf10 [ 313.054526][ T9435] ? nbd_release+0x140/0x140 [ 313.059134][ T9435] ? nbd_release+0x140/0x140 [ 313.063722][ T9435] blkdev_ioctl+0x5b2/0x730 [ 313.068397][ T9435] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 313.073980][ T9435] ? bpf_lsm_file_ioctl+0x9/0x10 [ 313.078941][ T9435] ? security_file_ioctl+0x80/0xa0 [ 313.084080][ T9435] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 313.089545][ T9435] __se_sys_ioctl+0xfd/0x170 [ 313.094169][ T9435] do_syscall_64+0x55/0xa0 [ 313.098616][ T9435] ? clear_bhb_loop+0x40/0x90 [ 313.103302][ T9435] ? clear_bhb_loop+0x40/0x90 [ 313.107975][ T9435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.113862][ T9435] RIP: 0033:0x7fc85839acb9 [ 313.118285][ T9435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.137898][ T9435] RSP: 002b:00007fc859274028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.146340][ T9435] RAX: ffffffffffffffda RBX: 00007fc858616090 RCX: 00007fc85839acb9 [ 313.154319][ T9435] RDX: 0000000000000000 RSI: 000000000000ab04 RDI: 0000000000000004 [ 313.162313][ T9435] RBP: 00007fc858408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 313.170297][ T9435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.178260][ T9435] R13: 00007fc858616128 R14: 00007fc858616090 R15: 00007fff5f1a3178 [ 313.186405][ T9435] [ 313.253950][ T9432] syz.4.912: attempt to access beyond end of device [ 313.253950][ T9432] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 313.284949][ T9436] SET target dimension over the limit! [ 313.427235][ T9432] syz.4.912: attempt to access beyond end of device [ 313.427235][ T9432] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 313.462646][ T9421] loop2: detected capacity change from 0 to 32768 [ 313.477125][ T9421] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.908 (9421) [ 313.515421][ T9432] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 313.538811][ T9432] syz.4.912: attempt to access beyond end of device [ 313.538811][ T9432] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 313.555236][ T9432] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 313.566066][ T9421] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 313.579851][ T9421] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 313.589711][ T9421] BTRFS info (device loop2): using free space tree [ 313.607699][ T9432] syz.4.912: attempt to access beyond end of device [ 313.607699][ T9432] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 313.622403][ T9432] syz.4.912: attempt to access beyond end of device [ 313.622403][ T9432] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 313.637614][ T9432] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 313.660497][ T9432] syz.4.912: attempt to access beyond end of device [ 313.660497][ T9432] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 313.667977][ T9421] BTRFS info (device loop2): enabling ssd optimizations [ 313.680748][ T9421] BTRFS info (device loop2): auto enabling async discard [ 313.688306][ T9432] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 313.721905][ T9432] syz.4.912: attempt to access beyond end of device [ 313.721905][ T9432] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 313.756407][ T9432] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 313.771144][ T9432] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 313.788576][ T9432] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 313.805651][ T5766] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 313.883151][ T5970] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 10 /dev/loop2 scanned by udevd (5970) [ 317.452745][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.459304][ T1285] ieee802154 phy1 wpan1: encryption failed: -22