last executing test programs: 1m41.652622375s ago: executing program 1 (id=582): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) 1m40.645172187s ago: executing program 1 (id=587): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4441, &(0x7f0000004480)="$eJzs3cFvG1UaAPA3k+w27bbdpNtDV1ppLW2lRYCipCcglUjTtGnShqJCK8QldRK3DThxlTiIQw/hVokTEgfEoQIJDiinKgeOlD+BCzfKuRIcuCBVQgTZniSesU3cKE5o9ftJ9Xjem/fmsz/P85tKzosT5VtzS7m5pVx+IVeaubF0Kvdeqbg8XwjxHtnv89OeTuRJ7vfP5bPn37h2KoRvZ79/tL6+vh4qukNTg3XPf/3lzkz9dkOcaVPpt3lvu+XtEMLxhrgqukIIb30dQhRCOJOUjSTbgyGEo6FWd+3Oh9dzdT3+8Hjn0dx/WDgdwuTdtaGTE6v31lq/9iiET4v/fvHm/E//6xr68fmdnxEAAAAAAAAAAAAAAAAAgGfJ2JXLV18fGAwPotC9GjX+Xncs2eZatF/fNf/t/IsFAAAAAAAAAAAAAAAAAACAv6it3//nomNNfv8/mmyHW7Rff7Vu56vOxUlnjL92efTcwGCy/nvUUP9SUvTzma7Q12Td9+z672cy7Zuv/954np2qxte1td8borg/iePLbyr7cdzfH8LnycLvJ6JDcbG0VH7hRml5YXbXwnhqpfNfW70/lZ1kQf928z+S6b/z6///q+HTVNm/vnsfsWdaOv9dLY/74oOorfyfzbTbi/yzc+n8d1fLDtYfMFwbACr5/6h7+/yPZvrvVP6PhhByUSXWXGoEqMxhKuWt5iukpfP/t2pZauhM3shW1//jTP7PZfrfr/F/JftFRFPp/P+9WtaTOmLr+u+Lt7/+z2f634/8V+JfSRd2dzaGp1c6/wdqhel3q/pOtjv+j2X671T+r8bVOKsTlvpPwGpUi7/V36sjLZ3/nob6rfu/uK3534VM+z25/6s778b938bw/1xUu/+juSeZ/7dz/Y9n2nV6/B+uzv/YqXT+D1XL0nPn3upju/mfyPTfqfxXZyU9G/nfGk9+P1Ar/8z8ry3p/P+jVhjXH7FSeeipzv+i7ef/FzP9/0n+d+lLoHH+V4l/Jd6d3p916fwfbnlcJf/ftfH9fynTrvPz/xAG/F/fjqXzf6TlcdXrv2f7/E9m2nU6///vZOcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT4GRZNsborg/tR/H/f0hnE32T4RD0XR+dmq6WJp5dymE0aQ8F45FN4ul6Xxxam6hNFuYyheLpZkQziX1x0NPtFQslafm87fPb/Z1MLpVyC+Wpwv5cghhLCn/Tziy0df0XHk+fzuEcGGz7p9xafH2rfzC1Ozc4isDAwMDYXwzhr6o8H65sFCunb1WG8LEZtveqC64avXFzVgOR++UlhcX8sVq+aW6NsXSTL5Y12Yyqfs49EXlxeWFmXy5MFUs3dw4334aTraj41fevHJpsKH+elTbjuxtWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8oQdDL38SQuiu7cUhhFyUPImSfyn3HxZOT/02eXdt6OTE6r21R82OAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAPduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBL/ygNBFEcgN+MhZYew2rZ7WxXFNHCFcET6DE8jB7FS3gHixRpU4RAMgth/8A2SfV9zYP5MfMezAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFju8a17f62biBRX28uI38+//+P8udTvu+n7F2eYkdN5eunuH+qm/Hsa5bflaNXmfbpZf33ERO39DPZkuE8H4z5Dc/s2N1/f9zpSriKiLflNyrmqlr0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBjBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86ir4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXwEAAP//xX0hlw==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) setxattr$incfs_metadata(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x3) 1m35.745465423s ago: executing program 1 (id=598): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000240)={0x1, 0xb51b, 0x652, 0xfffff04b, 0x0, 0x1}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000) 1m35.545293223s ago: executing program 0 (id=601): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}, {0x0}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m35.509353415s ago: executing program 1 (id=602): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 1m34.934660545s ago: executing program 1 (id=606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) 1m34.791703563s ago: executing program 0 (id=608): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x4c, r5, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r7, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="97452a307eb495fe223600000000000000", 0x11}, {&(0x7f00000000c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r8, 0x26, 0x0) fcntl$lock(r8, 0x6, &(0x7f00000000c0)={0x2, 0x2, 0x8, 0x73eb}) sendto$inet6(r0, &(0x7f0000001300), 0x0, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x9, 0x10}, 0x8) 1m33.667909961s ago: executing program 0 (id=610): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000040), 0xfc, 0x584, &(0x7f0000000c00)="$eJzs3d1rW+UfAPDvSZute/n92sEY6oUUduFkLl1bXyZ4MS9FhwO9n6HNymi6jCYdax24Xbgbb2QIIg5E77zw3svhP+BfMdDBkFFU8KZy0pOatUmXpunLls8HzvY855z0+zw55/vkOTkJCaBvjab/5CJejIgvk4jhpm2DkW0cXd1v+fHNqXRJYmXloz+SSLJ1jf2T7P8jWeWFiPjl84jTuY1xq4tLs8VyuTSf1cdqc9fGqotLZ67MFWdKM6WrE5OT596YnHj7rTd71tdXL/71zYf33zv3xcnlr396eOxuEufjaLatuR/bcKu5Mhqj2XOSj/PrdhzvQbD9JNnrBtCVgSzP85GOAcMxkGV9SyvDu9k0YId9lqY10KcS+Q99qjEPaFzb9+g6+Jnx6N3VC6CN/R9cfW8khurXRoeXkyeujNLr3ZEexE9j/Pz7vbvpEr17HwLgqW7djoizg4Mbx78kG/+6d7aDfdbHyOLntxka6MD9dP7zWqv5T25t/hMt5j9HWuRuN9rkf5Pcwx6EaSud/73Tcv67dtNqZCCr/a8+58snl6+US+nY9v+IOBX5g2l9k/s5n+SWH6y029g8/0uXNH5jLpi14+HgwScfM12sFbfV6SaPbke81HL+m6wd/6TF8U+fj4sdxjhRuvdyu21P7/+aHbnFtPJ9xCstj3/yROBN7k+O1c+HscZZsdGfd0782i7+Fvq/Ix79mBXa938kab5fW916jO+G/im129bt+X8g+bhePpCtu1Gs1ebHIw4kH2xcP/HfYxv1xv7p+X/q5ObjX6vz/1Ca2B32/87xO827Dm2t/zsr7f/05uf/uuO/9cKD9z/9tl38zo7/6/XSqWxNJ+Nfpw3cznMHAAAAAAAA+00uIo5GkiuslXO5QmH18x3H43CuXKnWTl+uLFydjvp3ZUcin2vc6R5u+jzEePZ52EZ9Yl19MiKORcRXA4fq9cJUpTy9150HAAAAAAAAAAAAAAAAAACAfeJIxFCr7/+nfhvY69YBO26Tn/wGnnPt8z/b0otfegL2pa5f/4d62w5g95n/Q/+S/9C/usz/5FavGwLsOq//0L/kP/Qv+Q/9ayv5/8OFHWwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB8uXriQLivLj29OpfXp64sLs5XrZ6ZL1dnC3MJUYaoyf60wU6nMlEuFqcrc0/5euVK5Nj4RCzfGaqVqbay6uHRprrJwtXbpylxxpnSplN+VXgEAAAAAAAAAAAAAAAAAAMCzpbq4NFssl0vzCgpdFQb3RzMUelzYOFZU/t6LEQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIv4NAAD//2v9PBI=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r0 = open(0x0, 0x8000, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() prctl$PR_PAC_RESET_KEYS(0x36, 0x1d) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x5207, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'wg2\x00', {0x2, 0x4e20, @broadcast}}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) 1m33.136252779s ago: executing program 1 (id=613): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$eJzs3cFqE0EYB/Bv23UbxEPP4mHBi6egPkFUWiguCMoe9KRQvbQi2MvqqW/hG/gqvo7k1FskTmhoWcEetrvJ/n6XfOx/wnwzgcwpk/cPPp8cfzn79PPXj5hMsshnMYuLLPZjJ3YjOY8rstanAMDGuFgs4vci+Y/hz2+hJQCgYzc8/wGALeD8B4Dxcf4DwPi8efvu5bOqOnhdlpOI+XlTN3V6TfnhUXXwuPxrf/2uedPUu5f5k5SXV/M7cXeVP23Ni3j0MOXL7MWrKuV5GtHUe3Hc1vAs62AXAAAAAAAAAAAAAAAAAAAAAADgdk3LS633+0ynxT/yVB0eFatn1+/3yeN+3jJh0ckyAAAAAAAAAAAAAAAAAAAAYKOdfft+8uH09OPX4RbzYbQxtOJe55/g3mqGvle67cVynwfQxrWixy8lAAAAAAAAAAAAAAAAAAAYqfWPfvvuBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6s/7//+6K5Tw7fS8UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBR+xMAAP//+cFD/w==") r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x10) 1m31.677919905s ago: executing program 32 (id=613): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x10) 1m31.657146696s ago: executing program 0 (id=615): syz_mount_image$nilfs2(&(0x7f0000000a00), &(0x7f0000000080)='./file0\x00', 0x800408, &(0x7f0000000500)=ANY=[@ANYBLOB="00c1d143753d2c083ee422f83383b46202c4de2de291601c80052445e264d4679b97678c14da06e79245374cfb5a59ebaeff670caadb5694b952eb30672a383ac36fadcd60e27a35d7"], 0x1, 0xa0e, &(0x7f00000020c0)="$eJzs3c9vXEcdAPB5G/+MU3tNCpimTQy0JBXUcRwjlQt1Siv1VPUUReJUhTSNcFMgXFpVasofgIKqXiMCAXooAqRwyAGp4oAoByTEhWPVUyUU1EoICVBqFHtmvTv24+36x3rX+/lIX4/fm/Gbed71vtnn2ZkADKza6tfFxZkihLduv/nUiwenxosQwrFGiXpTubWt4RBC0fLz696PGXc/fu38ZmkRFla/pu3w7J3Gz06EEK6G2fBuqIeZ6/WxW+88c/vG0vGz55479+QunX5DsdsVAABAD/juX+7+5tEP3/vK9H9+dXQpjDb2p/55PW5PxH7/fOwo5/3/oiktNulPj2TlDsTI3z8cyMoNZfUMldQ3nB1nuKTcSEV9B5r2bXaeALAfrN/XK2pzLdu12tzc2nX/nvdHR4q5y5eWX7iyRw0FAHbMP58IISwJIYQQYpBiZWqveyAAwKDLxwtvcHVnR+o2jjbWXv13ztQ2/3nYAd1+/qu/v+q/+YZXHHbOfn02pfNKf0dpHEM+jvBA9nOd/v3XsuMMddjOsnGF/TLesKyd+e+1V5W1v9PHca+UtT8fD9urytqfj9PtVWXtH+1yO7aqrP1jXW7HVpW1f7zL7ehXD8U0/R6PZvnN18/8Nb1fXuMBgFb/Nv5PCDHoMdIDbRCiy/H6XndAAICek8+PsxKl/Hw+njw/n4cnz8/nBcrzRyvyxyryAYCNTt+6+Mtrxfr/+bc7Hi6NuzgY04kO25OPR+y0/u2Oe9pu/f0ybgmAwfbyDxeffm/pzIG1+X/Xr2WfZPP/prl6r8XtNF7wULbdmPt3trWeWkm5Q7txUgDA/5Wuv5vO/9v0IaiZMFy8cGn5wnzcnozpH0eHR+/tP9XNRgMA29Lu/P8zoXX+/0ON/cO15n7B1Pr+orlfUM/2L5TsPx23p2P64uj46v658y8vf2unTx4ABtT1s08f/ugPl8Pa/f/1/3+n+//pNn49jrX7KBZI/YT7Qut24/7/idZ6JsvKzbeWmyor93hruXpWbjhGPu9GPj5wPPu5NE4hjXtI/Z1062O6rD3ZBBkjWbmhGPdl7ZnM2rPhfOdb25PPQ5Pqr2f783EPqdx0AICNrrzy6refX16+8D3f+MY3vml8s9evTMBuO/n9l75z8sorrz526aXnL164eOHyqfmFhfnF01/92qmTq/f1Tzbf3QcA9oP1Tv9etwQAAAAAAAAAAAAAACiTf/r3kR+v7d/JjxPv9TkCAK3+8UQIYUmIwYjDPdAGIYTohVhZyVf8BQDork7X29+uxtHifP5p3YOUHnrsr9P3IhW7c6a1v2T9YnZSt5//6u+v+m++sbP1N9YXafv1r9Z6gNnNjvp6Zb0//dHf/tRc/wNDbdafn/+Jyqo2dTOr/3hor/6VG1n9W5wa92dZ/QfbrH/D+T++tfp/Huu/P26f+GK79bc+/mm9nbQcznh2PhMl9f8iO/+0tl/H5z/WwUk3eTvWDwCDqLbXDdglqZeQ+tGpH9K8Pl9oWmcvZOXb7f/XsuPk6/VtVTpu6gd9Pm6n7k5aNzBf77DT9qf1CSez4xZt9mvLnj/98l+lsvbv1OO428ran68H2avK2j/S5XZsVVn787/LXlXW/i2+req6svaPd7kd/epITMuuh+n6Mxnz0nY9257Y5LHYr30LAOh33/j6nx++9uWhb66t/z+y4X1nehs4Ed9Tvx238/e9yXjWdyyy8l+I6Q9i+pOY/j6mH2TH293/tgHAYPrQ5/+EEEKIgYtB//yf+wsMskF//g/6+Q/2q7/Hv0p6fuT38ZOhivzhivyRivzRLD9/vMYq8u/PjrsSpfxPV+R/piL/sxX5MxX5UxX5D1TkH6nIf7Ai/2hF/rGKfAD60+di6vUdAAZH+tyX6z8ADI40sY7rPwAMjk/FtOz6/1BFPgDQfw7H1PUdAAZIsflMj9udtwfoH2l+6fR3HpcDCQ/H9JGYfimmab2ULS6/AvSA//7rd3+/VqzP93cky293Pvmi1vrJu3z9n0fbbE/++b1O57Ovt1nPbtU/vc36AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiu2urXxcWZIoS3br/51IMfXPltEUI41ihRbyq3tjXctD3bcpwQfl2spXc/fu18c/pJTIuwEIpQNPaHZ+80apoIIVwNs+HdUA8z1+tjt9555vaNpeNnzz137sld/BWEtXYBAADA/vW/AAAA//8xrzgs") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m30.010736461s ago: executing program 0 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_pgetevents(0x0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0xa) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000001580)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r5, r6}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5, r4}, 0xc) close(r3) socket(0x10, 0x803, 0x0) sendmsg$inet(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0xd54b, 0x2, 0x4, 0x345}) io_uring_enter(r7, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) 1m28.420252375s ago: executing program 0 (id=630): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x4c, r5, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r7, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="97452a307eb495fe223600000000000000", 0x11}, {&(0x7f00000000c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r8, 0x26, 0x0) fcntl$lock(r8, 0x6, &(0x7f00000000c0)={0x2, 0x2, 0x8, 0x73eb}) sendto$inet6(r0, &(0x7f0000001300)="86", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x9, 0x10}, 0x8) 1m27.577817429s ago: executing program 33 (id=630): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x4c, r5, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r7, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="97452a307eb495fe223600000000000000", 0x11}, {&(0x7f00000000c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r8, 0x26, 0x0) fcntl$lock(r8, 0x6, &(0x7f00000000c0)={0x2, 0x2, 0x8, 0x73eb}) sendto$inet6(r0, &(0x7f0000001300)="86", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x9, 0x10}, 0x8) 9.293852636s ago: executing program 5 (id=939): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) 6.895483701s ago: executing program 5 (id=945): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x44}}, 0x0) 5.442629076s ago: executing program 2 (id=947): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001180)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {}, {@dots}, {@nodots}, {@fat=@discard}, {@dots}]}, 0x1, 0x245, &(0x7f0000001200)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)='\\\x00\x00', 0x3}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 4.776702471s ago: executing program 2 (id=949): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x418000, &(0x7f0000000440)=ANY=[@ANYBLOB='tz=UTC,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dos1xfloppy,dots,nfs,nocase,quiet,dots,nodots,nodots,flush,dots,dots,dots,dos1xfloppy,nocase\x00\x00\x00\x00ots,dots,time_offset=0x0000000000000035,\x00'], 0x21, 0x23d, &(0x7f0000000a40)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 4.445652898s ago: executing program 5 (id=953): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.333633124s ago: executing program 6 (id=954): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000010c0)=@get={0x1, &(0x7f0000000340)=""/94, 0x9}) 4.140540534s ago: executing program 2 (id=955): syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@data_ordered}, {@stripe}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {@init_itable}, {@auto_da_alloc}]}, 0x1, 0x606, &(0x7f0000000600)="$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") r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x1a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xfffffffffffffffc, 0x54, 0x2, 0x7fff}) 3.940310124s ago: executing program 3 (id=957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x40c51}, 0x40040d4) 3.712376646s ago: executing program 4 (id=958): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000540)={&(0x7f0000000780)={{@any, 0xa}, {@hyper, 0x3}, 0x400, "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"}, 0x418}) 3.46134781s ago: executing program 2 (id=959): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}, {0x0}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.45081654s ago: executing program 3 (id=960): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0xfffffffffffffcf9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 3.195312064s ago: executing program 4 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_pgetevents(0x0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0xa) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000001580)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r5, r6}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5, r4}, 0xc) close(r3) socket(0x10, 0x803, 0x0) sendmsg$inet(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0xd54b, 0x2, 0x4, 0x345}) io_uring_enter(r7, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) 2.824540823s ago: executing program 3 (id=962): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_pgetevents(0x0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0xa) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000001580)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r5, r6}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5, r4}, 0xc) close(r3) socket(0x10, 0x803, 0x0) sendmsg$inet(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0xd54b, 0x2, 0x4, 0x345}) io_uring_enter(r7, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) 2.603634544s ago: executing program 2 (id=963): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0x8, 0xffb6, 0xc, 0xfff, 0x3, 0x0, [{0xfff, 0x7ff, 0x4, '\x00', 0xa04}, {0x6bbf, 0x9, 0x3, '\x00', 0x86}, {0x5, 0xabd, 0x10, '\x00', 0x201}]}) 2.075166992s ago: executing program 5 (id=964): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0}) 2.071655272s ago: executing program 6 (id=965): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x9, 0xfe, 0x3}, {0x6, 0x1}]}) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="1b27", 0x2}], 0x1, 0x7, 0x10001) 1.72568981s ago: executing program 4 (id=966): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c740f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000000e00)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x9, 0x3, 0x3, {0x100000000002000, 0xfb}, 0x58}], 0x1, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}}) 1.682564063s ago: executing program 5 (id=967): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32, @ANYBLOB="0200"/15, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5e", 0x1b}, {0x0}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.515695271s ago: executing program 3 (id=968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000f5, 0x0, 0x8}]}) 1.411897206s ago: executing program 6 (id=969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 1.34084389s ago: executing program 5 (id=970): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001000)=ANY=[@ANYBLOB="000c17"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.178648869s ago: executing program 2 (id=971): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x80927000) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r0, 0xffffe000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0}) 976.583059ms ago: executing program 6 (id=972): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x2, &(0x7f0000000000)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, r0, 0x0, 0x0, 0x33}]) 900.159763ms ago: executing program 3 (id=973): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/34, 0x22) getdents(r0, 0x0, 0xbb) 833.272007ms ago: executing program 4 (id=974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)={0x5, 0x0, [{0x1, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x0, 0x7, 0x6, 0x0, 0x22a0}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0x1, 0x7, 0x1008, 0x5, 0x110, 0x3}, {0x80000000, 0x5dd3, 0x0, 0x6, 0xe231, 0x1, 0xffffffff}]}) 601.575338ms ago: executing program 6 (id=975): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 598.296429ms ago: executing program 3 (id=976): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000140)={[{@acl}, {@usrjquota_file, 0x4}, {@resize={'resize', 0x3d, 0x1875140b}}, {@commit={'commit', 0x3d, 0x7}}, {@usrjquota, 0x3d}]}, 0xff, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 398.085329ms ago: executing program 6 (id=977): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 292.617715ms ago: executing program 4 (id=978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x80, 0x0, 0x0, 0x0, 0x5, 0xb, 0x4, 0x47, 0x40, 0x7, 0x0, 0x5, 0x0, 0xffffffff, 0xe, 0x0, 0x3, 0x8, 0xe, '\x00', 0x8, 0x5}) 0s ago: executing program 4 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_pgetevents(0x0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0xa) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000001580)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r3, r4}, 0xc) kernel console output (not intermixed with test programs): SB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.152020][ T4370] usb 2-1: config 0 descriptor?? [ 210.210689][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 210.233441][ T5554] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.290680][ T5554] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 210.299896][ T5554] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:21: Failed to release dquot type 0 [ 210.325906][ T4270] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 210.449512][ T4270] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 210.774574][ T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 210.816764][ T4270] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 212.625890][ T4370] usbhid 2-1:0.0: can't add hid device: -71 [ 212.631967][ T4370] usbhid: probe of 2-1:0.0 failed with error -71 [ 212.644223][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 212.651213][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.828664][ T4370] usb 2-1: USB disconnect, device number 5 [ 213.836317][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.846661][ T14] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 213.856971][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.875276][ T14] usb 5-1: config 0 descriptor?? [ 213.973984][ T14] usb 5-1: can't set config #0, error -71 [ 213.981123][ T14] usb 5-1: USB disconnect, device number 10 [ 215.874305][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 216.065645][ T5763] loop4: detected capacity change from 0 to 1024 [ 216.102722][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 216.129628][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 216.327498][ T5763] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.372: lblock 2 mapped to illegal pblock 2 (length 1) [ 216.371852][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 216.404748][ T5763] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 216.414342][ T5763] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.372: lblock 0 mapped to illegal pblock 48 (length 1) [ 216.430498][ T5763] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 216.433326][ T5771] Zero length message leads to an empty skb [ 216.439746][ T5763] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.372: Failed to acquire dquot type 0 [ 216.677460][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.720517][ T5763] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 216.824868][ T5763] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.372: mark_inode_dirty error [ 216.834427][ T14] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 216.874098][ T5763] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 216.901786][ T14] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 216.924439][ T5763] EXT4-fs (loop4): 1 orphan inode deleted [ 216.928415][ T14] usb 2-1: Product: syz [ 217.044078][ T5763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 217.463997][ T14] usb 2-1: Manufacturer: syz [ 217.486260][ T14] usb 2-1: SerialNumber: syz [ 217.506918][ T4296] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 217.524987][ T5763] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.372: Invalid inode table block 1 in block_group 0 [ 218.560213][ T5763] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 218.567112][ T14] usb 2-1: can't set config #1, error -71 [ 218.608553][ T14] usb 2-1: USB disconnect, device number 6 [ 218.661696][ T4296] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 218.673717][ T4296] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 218.766918][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 219.284909][ T4272] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 219.735340][ T4272] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 219.753102][ T4272] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 220.419307][ T5802] loop3: detected capacity change from 0 to 1024 [ 220.836027][ T5802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 222.776072][ T26] audit: type=1804 audit(1776807075.881:17): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.381" name="/newroot/73/file2/bus" dev="loop3" ino=18 res=1 errno=0 [ 222.897811][ T5822] loop1: detected capacity change from 0 to 24 [ 222.928324][ T5822] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 222.976784][ T5822] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 223.143037][ T4415] Bluetooth: hci5: Frame reassembly failed (-84) [ 223.719853][ T5841] loop1: detected capacity change from 0 to 16 [ 223.741938][ T5841] erofs: (device loop1): mounted with root inode @ nid 36. [ 224.475786][ T5835] loop0: detected capacity change from 0 to 4096 [ 224.964351][ T5848] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.214127][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 225.450268][ T5835] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 225.510529][ T5835] NILFS (loop0): nilfs_sufile_do_free: segment 13 is already clean [ 225.557891][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 225.724122][ T4313] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 225.924357][ T4313] usb 3-1: Using ep0 maxpacket: 8 [ 225.937239][ T4313] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 226.126782][ T4313] usb 3-1: config 2 has no interface number 0 [ 226.298581][ T4313] usb 3-1: config 2 interface 31 has no altsetting 0 [ 226.532910][ T4313] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 226.689535][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.698396][ T4313] usb 3-1: Product: syz [ 226.702612][ T4313] usb 3-1: Manufacturer: syz [ 226.748433][ T4313] usb 3-1: SerialNumber: syz [ 228.838560][ T4313] ch9200: probe of 3-1:2.31 failed with error -22 [ 228.857281][ T4313] usb 3-1: USB disconnect, device number 6 [ 228.895713][ T5877] loop3: detected capacity change from 0 to 16 [ 228.946224][ T5877] erofs: (device loop3): mounted with root inode @ nid 36. [ 230.226019][ T5891] loop1: detected capacity change from 0 to 16 [ 230.228797][ T5886] loop3: detected capacity change from 0 to 1764 [ 230.239173][ T5891] erofs: (device loop1): mounted with root inode @ nid 36. [ 230.268609][ T5890] loop0: detected capacity change from 0 to 1024 [ 230.340009][ T5890] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 230.355979][ T5886] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 230.724268][ T26] audit: type=1804 audit(1776807083.801:18): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.403" name="/newroot/77/file2/bus" dev="loop0" ino=18 res=1 errno=0 [ 233.134529][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 233.142664][ T4273] Bluetooth: hci5: command 0x1003 tx timeout [ 233.699581][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 235.227285][ T5950] loop3: detected capacity change from 0 to 16 [ 235.241511][ T5950] erofs: (device loop3): mounted with root inode @ nid 36. [ 237.429645][ T5964] loop0: detected capacity change from 0 to 1024 [ 237.589266][ T5963] loop3: detected capacity change from 0 to 4096 [ 237.878559][ T5964] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 238.078863][ T26] audit: type=1804 audit(1776807091.181:19): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.422" name="/newroot/80/file2/bus" dev="loop0" ino=18 res=1 errno=0 [ 238.436341][ T5963] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 238.619231][ T4662] Bluetooth: hci5: Frame reassembly failed (-84) [ 238.658590][ T4662] Bluetooth: hci5: Frame reassembly failed (-84) [ 240.338565][ T5995] loop3: detected capacity change from 0 to 512 [ 240.403557][ T5995] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.428: inode #1: comm syz.3.428: iget: illegal inode # [ 240.473691][ T5995] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.428: error while reading EA inode 1 err=-117 [ 240.493443][ T5995] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.428: inode #1: comm syz.3.428: iget: illegal inode # [ 240.519223][ T5995] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.428: error while reading EA inode 1 err=-117 [ 240.544756][ T5995] EXT4-fs (loop3): 1 orphan inode deleted [ 240.550681][ T5995] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 240.654408][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 240.686670][ T5979] loop1: detected capacity change from 0 to 32768 [ 240.848794][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 240.860547][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 241.005046][ T5979] XFS (loop1): Mounting V5 Filesystem [ 241.070645][ T5979] XFS (loop1): Ending clean mount [ 241.092776][ T5979] XFS (loop1): Quotacheck needed: Please wait. [ 241.139059][ T6016] loop0: detected capacity change from 0 to 16 [ 241.221196][ T6016] erofs: (device loop0): mounted with root inode @ nid 36. [ 242.013335][ T5979] XFS (loop1): Quotacheck: Done. [ 242.018307][ T6019] loop3: detected capacity change from 0 to 2048 [ 242.057102][ T6019] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 242.114615][ T4266] XFS (loop1): Unmounting Filesystem [ 242.123319][ T6019] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 242.200284][ T6019] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 242.218992][ T6019] UDF-fs: Scanning with blocksize 512 failed [ 242.279697][ T6019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.421504][ T6028] loop2: detected capacity change from 0 to 2048 [ 242.469192][ T6028] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 242.580720][ T6029] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.610014][ T6037] loop1: detected capacity change from 0 to 512 [ 243.760074][ T6037] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 243.772201][ T6044] loop0: detected capacity change from 0 to 1024 [ 243.820832][ T6037] ext4 filesystem being mounted at /91/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.890940][ T6044] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 243.959026][ T26] audit: type=1804 audit(1776807097.061:20): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.441" name="/newroot/83/file2/bus" dev="loop0" ino=18 res=1 errno=0 [ 243.988931][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 244.282049][ T4335] Bluetooth: hci5: Frame reassembly failed (-84) [ 245.993505][ T6065] loop2: detected capacity change from 0 to 512 [ 246.004225][ T6065] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.029912][ T6065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 246.099459][ T6065] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.445: Invalid block bitmap block 0 in block_group 0 [ 246.196081][ T6072] loop3: detected capacity change from 0 to 16 [ 246.219077][ T6072] erofs: (device loop3): mounted with root inode @ nid 36. [ 247.022606][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 247.023849][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 247.148923][ T6065] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 247.189171][ T6065] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.445: attempt to clear invalid blocks 983261 len 1 [ 247.191201][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 247.211306][ T6065] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.445: Invalid inode table block 0 in block_group 0 [ 247.243442][ T6065] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 247.264323][ T6065] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 247.287734][ T6065] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.445: Invalid inode table block 0 in block_group 0 [ 247.340562][ T6065] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 247.363780][ T6065] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.445: mark_inode_dirty error [ 247.499748][ T6065] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 247.771475][ T5557] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 248.948174][ T6065] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.445: Invalid inode table block 0 in block_group 0 [ 249.220734][ T5557] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 249.272429][ T5557] usb 2-1: config 0 has no interface number 0 [ 249.352471][ T6065] EXT4-fs (loop2): 1 truncate cleaned up [ 249.358500][ T5557] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.360047][ T6065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 249.408434][ T5557] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.428342][ T5557] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 249.450145][ T5557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.466091][ T5557] usb 2-1: config 0 descriptor?? [ 249.528960][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 250.626219][ T5557] prodikeys 0003:041E:2801.000A: item fetching failed at offset 5/7 [ 250.674773][ T5557] prodikeys 0003:041E:2801.000A: hid parse failed [ 250.709934][ T5557] prodikeys: probe of 0003:041E:2801.000A failed with error -22 [ 250.758897][ T6100] loop3: detected capacity change from 0 to 8 [ 251.633504][ T6098] loop0: detected capacity change from 0 to 1024 [ 251.661247][ T6098] EXT4-fs: Ignoring removed orlov option [ 251.712977][ T7] usb 2-1: USB disconnect, device number 7 [ 251.836198][ T6098] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 251.955251][ T6118] loop3: detected capacity change from 0 to 16 [ 252.252928][ T6118] erofs: (device loop3): mounted with root inode @ nid 36. [ 253.406393][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 253.420843][ T6126] loop3: detected capacity change from 0 to 1024 [ 253.923778][ T6128] loop2: detected capacity change from 0 to 4096 [ 253.926120][ T6126] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 253.942439][ T6133] loop0: detected capacity change from 0 to 1024 [ 253.959402][ T6128] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 254.005150][ T6133] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.048099][ T26] audit: type=1804 audit(1776807107.151:21): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.460" name="/newroot/92/file2/bus" dev="loop3" ino=18 res=1 errno=0 [ 254.254689][ T6133] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 254.275309][ T6133] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.356097][ T6141] loop1: detected capacity change from 0 to 512 [ 254.362835][ T4374] Bluetooth: hci5: Frame reassembly failed (-84) [ 254.443136][ T6128] ntfs3: loop2: failed to convert "c46c" to cp855 [ 254.452455][ T6141] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.518492][ T6141] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #17: comm syz.1.463: inode has both inline data and extents flags [ 254.583896][ T6141] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.463: couldn't read orphan inode 17 (err -117) [ 254.654617][ T6141] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 254.803908][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 254.889369][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 255.939952][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.947217][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.324632][ T6160] loop1: detected capacity change from 0 to 256 [ 256.440986][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 257.346555][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 257.480647][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 257.691770][ T6168] loop4: detected capacity change from 0 to 256 [ 257.834837][ T6168] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 261.830633][ T6201] loop4: detected capacity change from 0 to 1024 [ 261.884136][ T4355] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 261.907824][ T6201] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 261.983137][ T26] audit: type=1804 audit(1776807115.081:22): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.481" name="/newroot/107/file2/bus" dev="loop4" ino=18 res=1 errno=0 [ 262.205558][ T4355] usb 1-1: Using ep0 maxpacket: 8 [ 262.219553][ T4355] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.230299][ T4355] usb 1-1: too many endpoints for config 0 interface 0 altsetting 41: 36, using maximum allowed: 30 [ 263.178050][ T4355] usb 1-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.206778][ T4355] usb 1-1: config 0 interface 0 altsetting 41 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.237139][ T4355] usb 1-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 263.273365][ T4355] usb 1-1: config 0 interface 0 has no altsetting 0 [ 263.313733][ T4355] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice=b5.00 [ 263.340435][ T4355] usb 1-1: New USB device strings: Mfr=43, Product=0, SerialNumber=0 [ 263.413911][ T4355] usb 1-1: Manufacturer: syz [ 263.482515][ T4355] usb 1-1: config 0 descriptor?? [ 263.945790][ T4355] itetech 0003:06CB:73F5.000B: unbalanced collection at end of report description [ 263.956051][ T4355] itetech: probe of 0003:06CB:73F5.000B failed with error -22 [ 264.173687][ T4355] usb 1-1: USB disconnect, device number 7 [ 264.179732][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 264.214180][ T4316] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 264.964216][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 264.971817][ T4316] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.985168][ T7] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.022065][ T4316] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.051687][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 265.069853][ T4316] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.092049][ T7] usb 4-1: New USB device found, idVendor=056a, idProduct=0fb4, bcdDevice= 0.00 [ 265.141558][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.157139][ T4316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.169386][ T4316] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 265.191582][ T7] usb 4-1: config 0 descriptor?? [ 265.207930][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.217755][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 265.264328][ T4316] usb 3-1: config 0 descriptor?? [ 265.846333][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 267.065188][ T4316] holtek 0003:1241:5015.000C: collection stack underflow [ 267.072405][ T4316] holtek 0003:1241:5015.000C: item 0 1 0 12 parsing failed [ 267.086086][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 267.100061][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 267.108762][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 267.118665][ T4316] holtek 0003:1241:5015.000C: parse failed [ 267.129083][ T4316] holtek: probe of 0003:1241:5015.000C failed with error -22 [ 267.205036][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 267.223835][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 267.323496][ T4316] usb 3-1: USB disconnect, device number 7 [ 267.329625][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 267.375250][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 267.382223][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 267.390919][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 268.432373][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 268.537037][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 268.793478][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 268.878268][ T7] wacom 0003:056A:0FB4.000D: unknown main item tag 0x0 [ 268.902069][ T7] wacom 0003:056A:0FB4.000D: Unknown device_type for 'HID 056a:0fb4'. Ignoring. [ 269.413243][ T7] usb 4-1: USB disconnect, device number 7 [ 270.028244][ T6269] loop4: detected capacity change from 0 to 512 [ 270.184292][ T6269] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 270.237444][ T6269] EXT4-fs (loop4): 1 truncate cleaned up [ 270.244575][ T6269] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 270.390156][ T6276] loop1: detected capacity change from 0 to 1024 [ 270.463954][ T6276] syz.1.499: attempt to access beyond end of device [ 270.463954][ T6276] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 270.494626][ T6276] Buffer I/O error on dev loop1, logical block 2889, async page read [ 270.527659][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 270.529871][ T6277] syz.1.499: attempt to access beyond end of device [ 270.529871][ T6277] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 270.698731][ T6276] syz.1.499: attempt to access beyond end of device [ 270.698731][ T6276] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 270.872773][ T6276] Buffer I/O error on dev loop1, logical block 2889, async page read [ 271.154306][ T26] audit: type=1800 audit(1776807124.231:23): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.499" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 273.354165][ T4368] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 277.014465][ T4368] usb 3-1: device descriptor read/all, error -71 [ 277.067580][ T6319] loop2: detected capacity change from 0 to 164 [ 277.354268][ T6319] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 278.616262][ T6326] loop3: detected capacity change from 0 to 256 [ 278.915703][ T6326] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 281.940374][ T6339] loop4: detected capacity change from 0 to 256 [ 282.688148][ T6339] FAT-fs (loop4): Directory bread(block 64) failed [ 282.774645][ T6339] FAT-fs (loop4): Directory bread(block 65) failed [ 282.854896][ T6339] FAT-fs (loop4): Directory bread(block 66) failed [ 282.929101][ T6339] FAT-fs (loop4): Directory bread(block 67) failed [ 283.031732][ T6339] FAT-fs (loop4): Directory bread(block 68) failed [ 283.056141][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 283.063882][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 283.104531][ T6339] FAT-fs (loop4): Directory bread(block 69) failed [ 283.112048][ T6339] FAT-fs (loop4): Directory bread(block 70) failed [ 283.118953][ T6339] FAT-fs (loop4): Directory bread(block 71) failed [ 283.126743][ T6339] FAT-fs (loop4): Directory bread(block 72) failed [ 283.133560][ T6339] FAT-fs (loop4): Directory bread(block 73) failed [ 283.387488][ T6354] tipc: Enabling of bearer rejected, failed to enable media [ 283.638398][ T6362] loop4: detected capacity change from 0 to 136 [ 286.824957][ T6377] loop2: detected capacity change from 0 to 256 [ 286.968358][ T6377] FAT-fs (loop2): Directory bread(block 64) failed [ 286.992274][ T6382] loop1: detected capacity change from 0 to 512 [ 286.998773][ T6377] FAT-fs (loop2): Directory bread(block 65) failed [ 286.998925][ T6377] FAT-fs (loop2): Directory bread(block 66) failed [ 286.998955][ T6377] FAT-fs (loop2): Directory bread(block 67) failed [ 286.999055][ T6377] FAT-fs (loop2): Directory bread(block 68) failed [ 287.110405][ T6377] FAT-fs (loop2): Directory bread(block 69) failed [ 287.124647][ T6382] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.165470][ T6377] FAT-fs (loop2): Directory bread(block 70) failed [ 287.186372][ T6382] EXT4-fs (loop1): orphan cleanup on readonly fs [ 287.214193][ T6377] FAT-fs (loop2): Directory bread(block 71) failed [ 287.215638][ T6382] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 287.220890][ T6377] FAT-fs (loop2): Directory bread(block 72) failed [ 287.243389][ T6377] FAT-fs (loop2): Directory bread(block 73) failed [ 287.263170][ T6382] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 287.774829][ T6382] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.530: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 287.799719][ T6382] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.530: couldn't read orphan inode 13 (err -117) [ 287.854263][ T6382] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 287.953112][ T6382] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.004092][ T6382] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 288.061564][ T6392] loop0: detected capacity change from 0 to 1024 [ 288.083232][ T6382] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 288.148950][ T6382] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 288.327883][ T6382] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 288.340522][ T6392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 288.489978][ T26] audit: type=1804 audit(1776807141.591:24): pid=6392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.533" name="/newroot/99/file2/bus" dev="loop0" ino=18 res=1 errno=0 [ 288.561174][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 290.078249][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 291.201721][ T6420] loop0: detected capacity change from 0 to 1024 [ 291.307005][ T6420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 291.321828][ T6429] loop2: detected capacity change from 0 to 1024 [ 291.380189][ T6425] loop3: detected capacity change from 0 to 4096 [ 291.390881][ T26] audit: type=1804 audit(1776807144.501:25): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.538" name="/newroot/100/file2/bus" dev="loop0" ino=18 res=1 errno=0 [ 291.455924][ T6429] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 291.482752][ T6425] ntfs: volume version 3.1. [ 291.707575][ T4823] Bluetooth: hci5: Frame reassembly failed (-84) [ 291.886172][ T125] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 292.098761][ T125] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 292.356358][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.503640][ T125] usb 2-1: config 0 descriptor?? [ 293.499765][ T6450] loop4: detected capacity change from 0 to 1024 [ 293.607656][ T6450] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 293.668472][ T26] audit: type=1804 audit(1776807146.771:26): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.548" name="/newroot/121/file2/bus" dev="loop4" ino=18 res=1 errno=0 [ 293.774328][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 293.789155][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 294.084700][ T4520] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 294.432598][ T4520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.475399][ T4520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.546363][ T4520] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 294.651513][ T4520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.759438][ T125] usb 2-1: Cannot set autoneg [ 294.765284][ T125] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 294.846408][ T125] usb 2-1: USB disconnect, device number 8 [ 294.858192][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 294.895260][ T4520] usb 3-1: config 0 descriptor?? [ 294.969832][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 295.047901][ T6465] loop1: detected capacity change from 0 to 512 [ 295.106601][ T6465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.140104][ T6465] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.301700][ T6474] loop3: detected capacity change from 0 to 512 [ 295.319557][ T6465] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 295.333386][ T6465] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 295.336202][ T6474] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 295.823352][ T6474] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #17: comm syz.3.555: inode has both inline data and extents flags [ 295.859162][ T4520] razer 0003:1532:010E.000E: failed to enable macro keys: -71 [ 296.014921][ T6465] EXT4-fs (loop1): 1 truncate cleaned up [ 296.045650][ T6474] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.555: couldn't read orphan inode 17 (err -117) [ 296.064147][ T6465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 296.098349][ T4520] razer 0003:1532:010E.000E: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 296.113650][ T6474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 296.185103][ T4520] usb 3-1: USB disconnect, device number 10 [ 296.187872][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 296.204729][ T6465] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 4: comm syz.1.553: lblock 0 mapped to illegal pblock 4 (length 1) [ 296.262809][ T6465] EXT4-fs (loop1): Remounting filesystem read-only [ 296.986554][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 297.918423][ T6483] fido_id[6483]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 298.104870][ T6502] loop0: detected capacity change from 0 to 1024 [ 298.162906][ T6502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 298.204092][ T4520] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 298.220520][ T26] audit: type=1804 audit(1776807151.321:27): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.562" name="/newroot/104/file2/bus" dev="loop0" ino=18 res=1 errno=0 [ 298.429901][ T4817] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 301.299183][ T4520] usb 2-1: device descriptor read/all, error -71 [ 301.378653][ T6523] loop1: detected capacity change from 0 to 512 [ 301.399872][ T6523] EXT4-fs: Ignoring removed oldalloc option [ 301.438663][ T6523] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.567: invalid indirect mapped block 4294967295 (level 1) [ 301.498477][ T6523] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.567: invalid indirect mapped block 4294967295 (level 1) [ 301.514258][ T4817] usb 3-1: device not accepting address 11, error -71 [ 301.534704][ T6523] EXT4-fs (loop1): 2 truncates cleaned up [ 301.540610][ T6523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 301.646411][ T6523] ext4: Unexpected value for 'quota' [ 301.782268][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 301.975346][ T6539] i2c i2c-0: dtv_property_process_set: SET cmd 0x00002000 undefined [ 302.949694][ T6550] loop4: detected capacity change from 0 to 512 [ 303.223239][ T6550] EXT4-fs: Ignoring removed bh option [ 303.229205][ T4276] Bluetooth: hci5: command 0x1003 tx timeout [ 303.237080][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 303.510027][ T6550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 303.568085][ T6550] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.600842][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 304.801475][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 306.947865][ T6601] loop2: detected capacity change from 0 to 1024 [ 307.022634][ T6601] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 307.080701][ T26] audit: type=1804 audit(1776807160.181:28): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.592" name="/newroot/110/file2/bus" dev="loop2" ino=18 res=1 errno=0 [ 309.504528][ T4273] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 309.792156][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 309.810991][ T6623] loop4: detected capacity change from 0 to 1024 [ 309.837335][ T6625] capability: warning: `syz.1.598' uses 32-bit capabilities (legacy support in use) [ 309.929542][ T6623] hfsplus: can't free extent [ 310.149454][ T6632] loop1: detected capacity change from 0 to 512 [ 310.172162][ T6632] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.243762][ T6632] EXT4-fs (loop1): orphan cleanup on readonly fs [ 310.250417][ T6632] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 310.277426][ T6632] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.602: attempt to clear invalid blocks 2 len 1 [ 310.297737][ T6632] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 310.315648][ T6632] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.602: invalid indirect mapped block 1819239214 (level 0) [ 310.359240][ T6632] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.602: invalid indirect mapped block 1819239214 (level 1) [ 310.393054][ T6632] EXT4-fs (loop1): 1 truncate cleaned up [ 310.399506][ T6632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 310.497578][ T6641] loop4: detected capacity change from 0 to 512 [ 310.521122][ T6643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.605'. [ 310.565246][ T6641] EXT4-fs: Ignoring removed i_version option [ 310.589355][ T4266] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 310.654576][ T6641] EXT4-fs error (device loop4): __ext4_iget:5102: inode #11: block 1: comm syz.4.604: invalid block [ 310.657906][ T4266] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz-executor: corrupted in-inode xattr [ 310.696747][ T6641] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.604: couldn't read orphan inode 11 (err -117) [ 310.720030][ T6641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 310.884744][ T4266] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz-executor: corrupted in-inode xattr [ 310.919486][ T6649] loop2: detected capacity change from 0 to 512 [ 311.136265][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 311.322329][ T6649] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 311.388416][ T6649] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 311.581682][ T6649] System zones: 0-1, 15-15, 18-18, 34-34 [ 311.725413][ T6649] EXT4-fs (loop2): orphan cleanup on readonly fs [ 311.781255][ T6649] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 311.824416][ T6649] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 311.889944][ T6633] loop3: detected capacity change from 0 to 32768 [ 311.906768][ T6649] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 311.924795][ T6649] EXT4-fs (loop2): 1 truncate cleaned up [ 311.930914][ T6649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 311.949786][ T6656] loop0: detected capacity change from 0 to 1024 [ 311.981920][ T6633] XFS (loop3): Mounting V5 Filesystem [ 312.049912][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 312.062676][ T6656] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 312.095624][ T26] audit: type=1804 audit(1776807165.201:29): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.610" name="/newroot/109/file2/bus" dev="loop0" ino=18 res=1 errno=0 [ 312.163193][ T6633] XFS (loop3): Ending clean mount [ 312.254864][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 313.424450][ T4277] XFS (loop3): Unmounting Filesystem [ 313.448131][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 313.449610][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.746779][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.900834][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.019288][ T6687] loop0: detected capacity change from 0 to 2048 [ 314.062941][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.180964][ T6690] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.524469][ T6691] overlayfs: upper fs does not support tmpfile. [ 314.592234][ T6691] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 315.263949][ T6691] overlayfs: failed to set xattr on upper [ 315.304867][ T6691] overlayfs: ...falling back to index=off,metacopy=off. [ 315.754757][ T4270] VFS: Lookup of '.' in nilfs2 loop0 would have caused loop [ 315.777876][ T4270] VFS: Lookup of '.' in nilfs2 loop0 would have caused loop [ 316.015329][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.030292][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.041597][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.106669][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.128920][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 316.140041][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.701701][ T6716] loop2: detected capacity change from 0 to 4096 [ 316.788930][ T6716] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 316.896271][ T6716] ntfs3: loop2: failed to convert "0080" to maccenteuro [ 316.914182][ T6716] ntfs3: loop2: failed to convert name for inode 1e. [ 317.378398][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.386192][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.896853][ T6710] chnl_net:caif_netlink_parms(): no params data found [ 318.285502][ T4273] Bluetooth: hci0: command 0x0409 tx timeout [ 319.517119][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.540104][ T6762] loop2: detected capacity change from 0 to 64 [ 319.599276][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.649484][ T6762] hfs: small file entry [ 319.665591][ T6710] device bridge_slave_0 entered promiscuous mode [ 320.030598][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.043606][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.073779][ T6710] device bridge_slave_1 entered promiscuous mode [ 320.215268][ T46] device hsr_slave_0 left promiscuous mode [ 320.280848][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.290803][ T46] device hsr_slave_1 left promiscuous mode [ 320.292780][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.309000][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.309197][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.334128][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 320.340291][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.348026][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 320.355509][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.137835][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.173942][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.181535][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.266114][ T46] device bridge_slave_1 left promiscuous mode [ 321.274815][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.337588][ T46] device bridge_slave_0 left promiscuous mode [ 321.344970][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.098961][ T46] device veth1_macvtap left promiscuous mode [ 322.313808][ T46] device veth0_macvtap left promiscuous mode [ 322.396952][ T46] device veth1_vlan left promiscuous mode [ 322.415309][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 322.415356][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 322.444101][ T6789] loop3: detected capacity change from 0 to 512 [ 322.452004][ T46] device veth0_vlan left promiscuous mode [ 322.561154][ T6789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 322.604627][ T6789] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.935730][ T6789] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 323.007610][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 323.520827][ T6807] loop3: detected capacity change from 0 to 4096 [ 323.587250][ T6808] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.654907][ T6807] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 323.672300][ T6807] NILFS (loop3): nilfs_sufile_do_free: segment 13 is already clean [ 325.014083][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 325.014120][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 325.201718][ T6823] loop3: detected capacity change from 0 to 512 [ 325.313151][ T46] team0 (unregistering): Port device team_slave_1 removed [ 325.389979][ T46] team0 (unregistering): Port device team_slave_0 removed [ 325.426404][ T6823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 325.484085][ T6823] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.552626][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.595816][ T6823] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.653: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 325.708630][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 325.772779][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.056907][ T46] bond0 (unregistering): Released all slaves [ 327.064144][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 327.292899][ T6710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.419269][ T6710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.568831][ T6710] team0: Port device team_slave_0 added [ 327.570239][ T6844] loop2: detected capacity change from 0 to 4096 [ 327.695089][ T6710] team0: Port device team_slave_1 added [ 327.703102][ T6845] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.817384][ T6844] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 327.855202][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.862249][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.894479][ T6844] NILFS (loop2): nilfs_sufile_do_free: segment 13 is already clean [ 328.144124][ T6710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.161304][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.530527][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.694101][ T6710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.134150][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 329.228334][ T6710] device hsr_slave_0 entered promiscuous mode [ 329.314851][ T6710] device hsr_slave_1 entered promiscuous mode [ 329.348649][ T6771] chnl_net:caif_netlink_parms(): no params data found [ 330.338606][ T6875] loop3: detected capacity change from 0 to 32768 [ 330.352406][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.391043][ T6875] JBD2: Ignoring recovery information on journal [ 330.404888][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.413321][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.421497][ T6771] device bridge_slave_0 entered promiscuous mode [ 330.634860][ T6875] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 330.658637][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.692015][ T6886] loop2: detected capacity change from 0 to 32768 [ 330.703853][ T6886] XFS: attr2 mount option is deprecated. [ 330.725436][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.732527][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.764328][ T6771] device bridge_slave_1 entered promiscuous mode [ 330.820775][ T6886] XFS (loop2): Mounting V5 Filesystem [ 330.836121][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.882007][ T6886] XFS (loop2): Ending clean mount [ 330.919553][ T6710] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 330.956663][ T6710] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 330.980934][ T6886] XFS (loop2): Quotacheck needed: Please wait. [ 331.010457][ T6771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.028474][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 331.135889][ T6886] XFS (loop2): Quotacheck: Done. [ 331.151608][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.230008][ T6710] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 331.269845][ T6771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.342126][ T6710] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 331.425849][ T4280] XFS (loop2): Unmounting Filesystem [ 331.510379][ T6771] team0: Port device team_slave_0 added [ 331.602693][ T6771] team0: Port device team_slave_1 added [ 331.756489][ T6771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.763529][ T6771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.974322][ T6771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.001728][ T6771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.035475][ T6771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.142799][ T6771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.489394][ T6914] loop2: detected capacity change from 0 to 64 [ 332.637319][ T6771] device hsr_slave_0 entered promiscuous mode [ 332.665359][ T6771] device hsr_slave_1 entered promiscuous mode [ 332.690465][ T6771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.724285][ T6771] Cannot create hsr debugfs directory [ 332.817190][ T6710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.901334][ T6900] loop3: detected capacity change from 0 to 40427 [ 332.990564][ T6900] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 333.007713][ T6710] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.027010][ T6900] F2FS-fs (loop3): invalid crc value [ 333.043252][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 333.059662][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.070882][ T6900] F2FS-fs (loop3): Found nat_bits in checkpoint [ 333.659396][ T6900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 334.049788][ T26] audit: type=1800 audit(1776807187.151:30): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.669" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 334.077560][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.096343][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.124704][ T4834] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.131904][ T4834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.162591][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.178660][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.201404][ T4277] syz-executor: attempt to access beyond end of device [ 334.201404][ T4277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 334.239359][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.276656][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.285434][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.596175][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.625272][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.668027][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.692561][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.717799][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.726248][ T6946] loop3: detected capacity change from 0 to 256 [ 334.772061][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.894515][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.912919][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.949849][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.076590][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.113296][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.151253][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.793663][ T6771] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 335.858739][ T6771] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.208528][ T6771] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.240207][ T6771] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.511714][ T46] device hsr_slave_0 left promiscuous mode [ 336.570714][ T46] device hsr_slave_1 left promiscuous mode [ 336.648149][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.681718][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.719301][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.769685][ T6955] loop3: detected capacity change from 0 to 40427 [ 336.801145][ T6955] F2FS-fs (loop3): invalid crc value [ 336.828878][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.870258][ T6955] F2FS-fs (loop3): Found nat_bits in checkpoint [ 336.963596][ T6955] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 336.984477][ T46] device bridge_slave_1 left promiscuous mode [ 336.990803][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.025518][ T6955] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 337.084801][ T46] device bridge_slave_0 left promiscuous mode [ 337.088576][ T6955] syz.3.681: attempt to access beyond end of device [ 337.088576][ T6955] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 337.091107][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.389134][ T46] device veth1_macvtap left promiscuous mode [ 337.413767][ T46] device veth0_macvtap left promiscuous mode [ 337.440891][ T46] device veth1_vlan left promiscuous mode [ 337.447376][ T46] device veth0_vlan left promiscuous mode [ 338.692070][ T6995] loop4: detected capacity change from 0 to 32768 [ 338.762193][ T6995] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 338.787840][ T6995] JBD2: Ignoring recovery information on journal [ 338.896589][ T6995] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 339.153692][ T4272] ocfs2: Unmounting device (7,4) on (node local) [ 339.827779][ T7014] loop4: detected capacity change from 0 to 256 [ 339.871528][ T46] team0 (unregistering): Port device team_slave_1 removed [ 339.924202][ T7014] FAT-fs (loop4): Directory bread(block 64) failed [ 339.930817][ T7014] FAT-fs (loop4): Directory bread(block 65) failed [ 339.965061][ T7014] FAT-fs (loop4): Directory bread(block 66) failed [ 339.991182][ T7014] FAT-fs (loop4): Directory bread(block 67) failed [ 340.008413][ T7014] FAT-fs (loop4): Directory bread(block 68) failed [ 340.024099][ T7014] FAT-fs (loop4): Directory bread(block 69) failed [ 340.041119][ T7014] FAT-fs (loop4): Directory bread(block 70) failed [ 340.059971][ T7014] FAT-fs (loop4): Directory bread(block 71) failed [ 340.070693][ T46] team0 (unregistering): Port device team_slave_0 removed [ 340.078730][ T7014] FAT-fs (loop4): Directory bread(block 72) failed [ 340.078808][ T7014] FAT-fs (loop4): Directory bread(block 73) failed [ 340.151240][ T7006] loop3: detected capacity change from 0 to 32768 [ 340.239496][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.242819][ T7006] XFS (loop3): Mounting V5 Filesystem [ 340.358182][ T7012] loop2: detected capacity change from 0 to 32768 [ 340.395610][ T7006] XFS (loop3): Ending clean mount [ 340.454760][ T7012] XFS (loop2): Mounting V5 Filesystem [ 340.528601][ T7012] XFS (loop2): Ending clean mount [ 340.544452][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.736197][ T4277] XFS (loop3): Unmounting Filesystem [ 340.846698][ T4280] XFS (loop2): Unmounting Filesystem [ 341.124880][ T125] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 341.364149][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 341.404226][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.435629][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.445860][ T125] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 341.469304][ T125] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 341.496117][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.516449][ T125] usb 5-1: config 0 descriptor?? [ 341.905267][ T46] bond0 (unregistering): Released all slaves [ 341.936558][ T7047] loop3: detected capacity change from 0 to 16 [ 341.943143][ T125] dragonrise 0003:0079:0006.000F: hidraw0: USB HID v0.0b Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 341.976473][ T7047] erofs: (device loop3): mounted with root inode @ nid 36. [ 341.986819][ T125] dragonrise 0003:0079:0006.000F: no inputs found [ 342.006721][ T125] dragonrise 0003:0079:0006.000F: force feedback init failed [ 342.163415][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.177929][ T4314] usb 5-1: USB disconnect, device number 11 [ 342.201131][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.319109][ T6710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.332301][ T7048] fido_id[7048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 342.338056][ T7050] loop3: detected capacity change from 0 to 64 [ 342.589772][ T6771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.671938][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.692909][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.724856][ T6771] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.785081][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.852509][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.863336][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.870741][ T4776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.939004][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.963806][ T7063] loop4: detected capacity change from 0 to 1024 [ 343.005108][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.024937][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.032196][ T4776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.064597][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.107427][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.137495][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.200632][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.210414][ T7063] hfsplus: bad catalog entry type [ 343.282110][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.334891][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.386984][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.435067][ T34] hfsplus: b-tree write err: -5, ino 25 [ 343.440865][ T34] hfsplus: b-tree write err: -5, ino 4 [ 343.462863][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.492219][ T34] hfsplus: b-tree write err: -5, ino 2 [ 343.499137][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.538990][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.556014][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.579961][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.600961][ T6771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.715660][ T7081] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 512, id = 0 [ 343.720964][ T7079] IPVS: stopping backup sync thread 7081 ... [ 344.849517][ T7098] netlink: 44 bytes leftover after parsing attributes in process `syz.3.710'. [ 345.196018][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.213234][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.336459][ T6710] device veth0_vlan entered promiscuous mode [ 345.347797][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.395109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.431612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.458386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.502580][ T6710] device veth1_vlan entered promiscuous mode [ 345.598082][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.608672][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.632950][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.635125][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.646910][ T6771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.657449][ T6710] device veth0_macvtap entered promiscuous mode [ 345.667596][ T6710] device veth1_macvtap entered promiscuous mode [ 345.725890][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.725913][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.725924][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.725937][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.725949][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.725961][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.727897][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.729568][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.730411][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.731209][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.732058][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.749277][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.898682][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.924053][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.951724][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.974741][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.994398][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.017715][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.048146][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.065518][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.083281][ T6710] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.101141][ T6710] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.110882][ T6710] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.126895][ T6710] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.383031][ T4581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.412559][ T4581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.446390][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.558482][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.578356][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.617841][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 346.834931][ T5557] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 347.024344][ T5557] usb 5-1: Using ep0 maxpacket: 8 [ 347.032633][ T5557] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 347.082641][ T5557] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.113767][ T5557] usb 5-1: config 0 has no interfaces? [ 347.128947][ T5557] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 347.164061][ T5557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.178564][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.192938][ T5557] usb 5-1: Product: syz [ 347.203090][ T5557] usb 5-1: Manufacturer: syz [ 347.232254][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.233625][ T5557] usb 5-1: SerialNumber: syz [ 347.284804][ T5557] usb 5-1: config 0 descriptor?? [ 347.321767][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.365814][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.407401][ T6771] device veth0_vlan entered promiscuous mode [ 347.436532][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.449535][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.530036][ T6771] device veth1_vlan entered promiscuous mode [ 347.552607][ T4372] usb 5-1: USB disconnect, device number 12 [ 347.644238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.680570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.724743][ T6771] device veth0_macvtap entered promiscuous mode [ 347.771731][ T6771] device veth1_macvtap entered promiscuous mode [ 347.865746][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.900117][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.930928][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.949575][ T7150] loop2: detected capacity change from 0 to 32768 [ 347.964205][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.983243][ T7150] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.724 (7150) [ 348.001140][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.043647][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.060371][ T7150] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 348.079557][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.118952][ T7150] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 348.125777][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.172519][ T7150] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 348.186777][ T6771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.229437][ T7150] BTRFS info (device loop2): use zstd compression, level 3 [ 348.245710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.269736][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.276565][ T7150] BTRFS info (device loop2): using free space tree [ 348.298906][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.327898][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.461843][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.473318][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.483936][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.501255][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.512008][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.523091][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.533296][ T6771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.545476][ T6771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.558003][ T6771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.639124][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.653626][ T7150] BTRFS info (device loop2): enabling ssd optimizations [ 348.683860][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.740042][ T6771] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.791687][ T6771] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.856778][ T6771] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.904693][ T6771] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.099449][ T7214] loop3: detected capacity change from 0 to 16 [ 349.358997][ T7214] erofs: (device loop3): mounted with root inode @ nid 36. [ 350.166252][ T4280] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 350.265109][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.268471][ T7216] loop5: detected capacity change from 0 to 4096 [ 350.273018][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.395612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.490696][ T7222] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.531196][ T4776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.559108][ T4776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.610635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.027792][ T4353] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (4353) [ 352.695101][ T7252] loop6: detected capacity change from 0 to 512 [ 353.142780][ T7252] EXT4-fs (loop6): 1 truncate cleaned up [ 353.148744][ T7252] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 353.358324][ T6771] EXT4-fs (loop6): unmounting filesystem. [ 353.437808][ T7238] loop5: detected capacity change from 0 to 32768 [ 353.564720][ T7238] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 353.831287][ T7269] loop4: detected capacity change from 0 to 1024 [ 353.919960][ T7269] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 354.010406][ T7275] loop3: detected capacity change from 0 to 2048 [ 354.125686][ T7269] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 354.167945][ T7275] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 354.183017][ T26] audit: type=1800 audit(1776807207.291:31): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.745" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 354.203852][ T7269] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 354.242048][ T7269] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 483 with error 28 [ 354.262533][ T7269] EXT4-fs (loop4): This should not happen!! Data will be lost [ 354.262533][ T7269] [ 354.272344][ T7269] EXT4-fs (loop4): Total free blocks count 0 [ 354.278444][ T7269] EXT4-fs (loop4): Free/Dirty block details [ 354.285777][ T7269] EXT4-fs (loop4): free_blocks=20480 [ 354.291326][ T7269] EXT4-fs (loop4): dirty_blocks=496 [ 354.292173][ T4373] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 354.298073][ T7269] EXT4-fs (loop4): Block reservation details [ 354.345972][ T7269] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 354.482844][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 354.534546][ T4365] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 354.744124][ T4365] usb 6-1: Using ep0 maxpacket: 32 [ 354.758447][ T4365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.807998][ T4365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.874684][ T4365] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 354.931235][ T4365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.983124][ T4451] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 355.002322][ T4365] usb 6-1: config 0 descriptor?? [ 355.395440][ T7294] loop3: detected capacity change from 0 to 256 [ 355.473898][ T4365] ft260 0003:0403:6030.0010: item fetching failed at offset 0/2 [ 355.489904][ T4365] ft260 0003:0403:6030.0010: failed to parse HID [ 355.496964][ T7297] loop6: detected capacity change from 0 to 128 [ 355.513662][ T4365] ft260: probe of 0003:0403:6030.0010 failed with error -22 [ 355.563106][ T7297] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 355.600779][ T7297] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 355.683037][ T4365] usb 6-1: USB disconnect, device number 2 [ 355.828441][ T7300] loop4: detected capacity change from 0 to 512 [ 355.917928][ T7300] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 355.937040][ T7300] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.957121][ T6771] EXT4-fs (loop6): unmounting filesystem. [ 356.107800][ T7300] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 356.217927][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 356.233275][ T7314] loop3: detected capacity change from 0 to 16 [ 356.256056][ T7314] erofs: (device loop3): mounted with root inode @ nid 36. [ 356.513414][ T7322] netlink: 260 bytes leftover after parsing attributes in process `syz.5.761'. [ 356.564196][ T7322] netlink: 260 bytes leftover after parsing attributes in process `syz.5.761'. [ 356.580037][ T7322] netlink: 260 bytes leftover after parsing attributes in process `syz.5.761'. [ 356.789010][ T7330] loop6: detected capacity change from 0 to 1024 [ 356.932257][ T7330] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 357.033354][ T7330] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 357.097525][ T26] audit: type=1800 audit(1776807210.201:32): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.763" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 357.117718][ T7342] loop2: detected capacity change from 0 to 256 [ 357.136158][ T7330] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 357.450785][ T7330] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 483 with error 28 [ 357.497856][ T7330] EXT4-fs (loop6): This should not happen!! Data will be lost [ 357.497856][ T7330] [ 357.532812][ T7330] EXT4-fs (loop6): Total free blocks count 0 [ 357.572598][ T7330] EXT4-fs (loop6): Free/Dirty block details [ 357.592564][ T7330] EXT4-fs (loop6): free_blocks=20480 [ 357.611120][ T7330] EXT4-fs (loop6): dirty_blocks=496 [ 357.640079][ T7330] EXT4-fs (loop6): Block reservation details [ 357.702066][ T7330] EXT4-fs (loop6): i_reserved_data_blocks=31 [ 357.724244][ T4523] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 357.870925][ T4776] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 357.918621][ T4523] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 357.970148][ T4523] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 358.020918][ T4523] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 358.100767][ T4523] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 358.120691][ T4523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.201310][ T4523] usb 6-1: config 0 descriptor?? [ 358.208762][ T7352] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 358.294294][ T4365] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 358.484342][ T4365] usb 3-1: Using ep0 maxpacket: 32 [ 358.492714][ T4365] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 358.532899][ T4365] usb 3-1: config 0 has no interface number 0 [ 358.566176][ T4365] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.623090][ T4365] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.650974][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.653250][ T4365] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 358.676531][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.684533][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.691852][ T4365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.691886][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.707766][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.717239][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.724973][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.732415][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.740264][ T4365] usb 3-1: config 0 descriptor?? [ 358.740412][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.765380][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.772701][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.797733][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.813534][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.823896][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.832004][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.840196][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.847986][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.871096][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.882206][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.891669][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.899620][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.908441][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.918728][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.926545][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.934545][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.941835][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.956974][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.964743][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.972032][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 358.981078][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 359.007341][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 359.024307][ T125] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 359.040570][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 359.065473][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 359.073372][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 359.089101][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 359.099749][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 359.107892][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 359.115929][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 359.128798][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 359.137184][ T4523] logitech 0003:046D:C294.0011: unknown main item tag 0x0 [ 359.159401][ T4523] logitech 0003:046D:C294.0011: hidraw0: USB HID v0.01 Device [HID 046d:c294] on usb-dummy_hcd.5-1/input0 [ 359.173852][ T4523] logitech 0003:046D:C294.0011: no inputs found [ 359.232024][ T4523] usb 6-1: USB disconnect, device number 3 [ 359.246224][ T125] usb 7-1: Using ep0 maxpacket: 32 [ 359.256966][ T125] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.306574][ T125] usb 7-1: config 0 has no interface number 0 [ 359.343299][ T125] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 359.385783][ T7228] usb 3-1: USB disconnect, device number 13 [ 359.395523][ T125] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.425712][ T125] usb 7-1: Product: syz [ 359.449389][ T125] usb 7-1: Manufacturer: syz [ 359.480366][ T125] usb 7-1: SerialNumber: syz [ 359.523753][ T125] usb 7-1: config 0 descriptor?? [ 359.557910][ T125] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 359.579267][ T125] usb 7-1: selecting invalid altsetting 1 [ 359.655578][ T125] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 360.519765][ T125] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 360.545045][ T7383] fido_id[7383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 360.550979][ T125] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 360.612962][ T125] usb 7-1: media controller created [ 360.711673][ T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.830033][ T125] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 360.844077][ T125] zl10353_read_register: readreg error (reg=127, ret==-71) [ 360.881632][ T125] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 361.062214][ T125] usb 7-1: USB disconnect, device number 2 [ 361.287193][ T7408] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.782'. [ 361.305376][ T7402] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.782'. [ 361.484425][ T7407] loop3: detected capacity change from 0 to 4096 [ 361.512845][ T7407] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 363.451745][ T7440] syz.4.791 (7440): /proc/7439/oom_adj is deprecated, please use /proc/7439/oom_score_adj instead. [ 363.562230][ T7429] loop5: detected capacity change from 0 to 32768 [ 363.637566][ T7429] JBD2: Ignoring recovery information on journal [ 363.746110][ T7429] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 363.923656][ T6710] ocfs2: Unmounting device (7,5) on (node local) [ 364.104190][ T7430] loop3: detected capacity change from 0 to 32768 [ 364.183916][ T7430] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 364.183916][ T7430] [ 364.604129][ T4522] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 364.730623][ T7461] loop6: detected capacity change from 0 to 256 [ 364.814272][ T4522] usb 3-1: Using ep0 maxpacket: 32 [ 364.825746][ T4522] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 364.885455][ T4522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.940996][ T4522] usb 3-1: Product: syz [ 364.978709][ T4522] usb 3-1: Manufacturer: syz [ 364.983396][ T4522] usb 3-1: SerialNumber: syz [ 365.049453][ T4522] usb 3-1: config 0 descriptor?? [ 365.089434][ T4522] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 365.115287][ T4522] dvb-usb: bulk message failed: -22 (4/0) [ 365.195924][ T4522] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 365.267747][ T4522] dvb-usb: bulk message failed: -22 (5/0) [ 365.273681][ T4522] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 365.275372][ T7472] loop6: detected capacity change from 0 to 256 [ 365.365435][ T4522] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 365.437622][ T4522] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 365.446771][ T7472] FAT-fs (loop6): Directory bread(block 64) failed [ 365.486791][ T4522] usb 3-1: media controller created [ 365.489274][ T7472] FAT-fs (loop6): Directory bread(block 65) failed [ 365.558977][ T7472] FAT-fs (loop6): Directory bread(block 66) failed [ 365.583792][ T4522] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.654183][ T7472] FAT-fs (loop6): Directory bread(block 67) failed [ 365.691672][ T7472] FAT-fs (loop6): Directory bread(block 68) failed [ 365.702241][ T4522] usb 3-1: selecting invalid altsetting 3 [ 365.718653][ T7472] FAT-fs (loop6): Directory bread(block 69) failed [ 365.727616][ T4522] ttusb2: set interface to alts=3 failed [ 365.748662][ T7472] FAT-fs (loop6): Directory bread(block 70) failed [ 365.795767][ T7472] FAT-fs (loop6): Directory bread(block 71) failed [ 365.845037][ T7472] FAT-fs (loop6): Directory bread(block 72) failed [ 365.894383][ T7472] FAT-fs (loop6): Directory bread(block 73) failed [ 366.168575][ T4522] DVB: Unable to find symbol tda10086_attach() [ 366.179978][ T4522] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 366.206016][ T4522] dvb-usb: bulk message failed: -22 (4/0) [ 366.218135][ T4522] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 366.258144][ T4522] dvb-usb: bulk message failed: -22 (5/0) [ 366.291421][ T4522] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 366.341258][ T4522] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 366.421085][ T4522] usb 3-1: USB disconnect, device number 14 [ 366.561052][ T4522] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 366.936719][ T7469] loop3: detected capacity change from 0 to 32768 [ 367.010800][ T7469] JBD2: Ignoring recovery information on journal [ 367.251896][ T7469] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 367.274192][ T125] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 367.494115][ T125] usb 3-1: Using ep0 maxpacket: 16 [ 367.511948][ T125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.547415][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.594961][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.629672][ T125] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 367.660247][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.702272][ T125] usb 3-1: config 0 descriptor?? [ 367.736694][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 368.194808][ T7523] loop4: detected capacity change from 0 to 256 [ 368.204188][ T125] hid-picolcd 0003:04D8:F002.0013: No report with id 0xf3 found [ 368.218927][ T125] hid-picolcd 0003:04D8:F002.0013: No report with id 0xf4 found [ 368.232482][ T7523] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 368.395286][ T125] usb 3-1: USB disconnect, device number 15 [ 368.421885][ T7525] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 368.429595][ T7525] syzkaller0: ignored: set checksum disabled [ 369.126643][ T7542] loop4: detected capacity change from 0 to 512 [ 369.144319][ T125] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 369.353465][ T7542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 369.365878][ T125] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 369.384216][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.408417][ T125] usb 4-1: config 0 descriptor?? [ 369.464242][ T7542] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.764408][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 369.831428][ T125] hackrf 4-1:0.0: Board ID: 00 [ 369.836787][ T125] hackrf 4-1:0.0: Firmware version: [ 369.941895][ T125] hackrf 4-1:0.0: Registered as swradio24 [ 369.967129][ T125] videodev: could not get a free minor [ 370.007328][ T125] hackrf 4-1:0.0: Failed to register as video device (-23) [ 370.064421][ T125] hackrf: probe of 4-1:0.0 failed with error -23 [ 370.112087][ T125] usb 4-1: USB disconnect, device number 8 [ 370.343829][ T7567] loop6: detected capacity change from 0 to 256 [ 370.433369][ T7567] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 371.303608][ T7583] loop6: detected capacity change from 0 to 512 [ 371.325972][ T7559] loop2: detected capacity change from 0 to 32768 [ 371.350616][ T7583] EXT4-fs: Ignoring removed i_version option [ 371.398785][ T7559] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.822 (7559) [ 371.463644][ T7583] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 371.557846][ T7559] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 371.575244][ T7559] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 371.610591][ T7564] loop4: detected capacity change from 0 to 32768 [ 371.623248][ T7559] BTRFS info (device loop2): using free space tree [ 371.689976][ T7564] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.823 (7564) [ 371.792571][ T7564] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 371.824701][ T6771] EXT4-fs (loop6): unmounting filesystem. [ 371.837787][ T7564] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 371.847736][ T7564] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 371.858438][ T7564] BTRFS info (device loop4): use zstd compression, level 3 [ 371.866201][ T7564] BTRFS info (device loop4): using free space tree [ 371.943508][ T7559] BTRFS info (device loop2): enabling ssd optimizations [ 371.954297][ T7228] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 372.088675][ T7564] BTRFS info (device loop4): enabling ssd optimizations [ 372.160866][ T7228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 372.212907][ T7228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 372.274125][ T7228] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 372.347674][ T7228] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 372.394652][ T7228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.441357][ T7228] usb 6-1: config 0 descriptor?? [ 372.461671][ T7591] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 372.522539][ T4280] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 372.667613][ T4272] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 372.904522][ T7228] gt683r_led 0003:1770:FF00.0014: unexpected long global item [ 372.922826][ T7228] gt683r_led 0003:1770:FF00.0014: hid parsing failed [ 372.929768][ T7228] gt683r_led: probe of 0003:1770:FF00.0014 failed with error -22 [ 373.132842][ T4353] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 11 /dev/loop4 scanned by udevd (4353) [ 373.317965][ T7630] loop6: detected capacity change from 0 to 32768 [ 373.398529][ T7630] XFS (loop6): Mounting V5 Filesystem [ 373.491884][ T7630] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 373.527485][ T7665] usb 6-1: USB disconnect, device number 4 [ 373.580263][ T7630] XFS (loop6): Starting recovery (logdev: internal) [ 373.658086][ T7630] XFS (loop6): Ending recovery (logdev: internal) [ 373.815267][ T7672] loop4: detected capacity change from 0 to 16 [ 373.864703][ T7672] erofs: (device loop4): mounted with root inode @ nid 36. [ 374.761249][ T6771] XFS (loop6): Unmounting Filesystem [ 374.821349][ T7674] loop5: detected capacity change from 0 to 2048 [ 375.028359][ T7674] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 375.063090][ T7674] EXT4-fs (loop5): shut down requested (2) [ 375.154123][ T4365] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 375.256453][ T6710] EXT4-fs (loop5): unmounting filesystem. [ 375.385983][ T4365] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 375.424045][ T4365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.447803][ T4365] usb 5-1: config 0 descriptor?? [ 375.474367][ T7665] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 375.674293][ T7665] usb 4-1: Using ep0 maxpacket: 32 [ 375.681571][ T7665] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 375.754534][ T7665] usb 4-1: config 0 has no interface number 0 [ 375.784113][ T7665] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.798522][ T7665] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.819025][ T7665] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 375.839346][ T7665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.871179][ T7665] usb 4-1: config 0 descriptor?? [ 375.872598][ T4365] hackrf 5-1:0.0: Board ID: 00 [ 375.881442][ T4365] hackrf 5-1:0.0: Firmware version: [ 375.896913][ T4365] hackrf 5-1:0.0: Registered as swradio24 [ 375.925093][ T4365] videodev: could not get a free minor [ 375.930735][ T4365] hackrf 5-1:0.0: Failed to register as video device (-23) [ 375.960341][ T7698] loop6: detected capacity change from 0 to 4096 [ 375.980608][ T4365] hackrf: probe of 5-1:0.0 failed with error -23 [ 376.114170][ T7667] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 376.135175][ T4365] usb 5-1: USB disconnect, device number 13 [ 376.314327][ T7667] usb 3-1: Using ep0 maxpacket: 32 [ 376.321651][ T7667] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 376.351177][ T7667] usb 3-1: config 0 has no interface number 0 [ 376.367830][ T7667] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 376.408926][ T7667] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 376.439814][ T7667] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 376.461177][ T7667] usb 3-1: config 0 interface 196 has no altsetting 0 [ 376.475791][ T7667] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 376.519412][ T7667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.553459][ T7667] usb 3-1: Product: syz [ 376.560414][ T7667] usb 3-1: Manufacturer: syz [ 376.574196][ T7667] usb 3-1: SerialNumber: syz [ 376.590677][ T7665] usb 4-1: USB disconnect, device number 9 [ 376.613411][ T7667] usb 3-1: config 0 descriptor?? [ 376.633130][ T7701] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 376.722293][ T7719] loop5: detected capacity change from 0 to 2048 [ 376.758395][ T7719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.123769][ T7667] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 377.193621][ T7730] input: syz1 as /devices/virtual/input/input16 [ 377.356587][ T7666] usb 3-1: USB disconnect, device number 16 [ 377.475489][ T7666] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 377.928682][ T7747] loop5: detected capacity change from 0 to 4096 [ 377.990674][ T7747] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 378.050767][ T7747] ntfs3: loop5: Failed to load $Extend. [ 378.409705][ T7754] loop2: detected capacity change from 0 to 4096 [ 378.481495][ T7754] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 378.817718][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.826178][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.886247][ T7768] loop5: detected capacity change from 0 to 256 [ 378.924322][ T4365] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 379.014663][ T7768] FAT-fs (loop5): Directory bread(block 64) failed [ 379.044811][ T7768] FAT-fs (loop5): Directory bread(block 65) failed [ 379.073332][ T7768] FAT-fs (loop5): Directory bread(block 66) failed [ 379.093173][ T7768] FAT-fs (loop5): Directory bread(block 67) failed [ 379.130845][ T7768] FAT-fs (loop5): Directory bread(block 68) failed [ 379.146050][ T4365] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 379.165094][ T4365] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.165123][ T7768] FAT-fs (loop5): Directory bread(block 69) failed [ 379.218361][ T4365] usb 7-1: config 0 descriptor?? [ 379.229484][ T7768] FAT-fs (loop5): Directory bread(block 70) failed [ 379.251892][ T4365] cp210x 7-1:0.0: cp210x converter detected [ 379.267672][ T7768] FAT-fs (loop5): Directory bread(block 71) failed [ 379.288270][ T7768] FAT-fs (loop5): Directory bread(block 72) failed [ 379.303324][ T7768] FAT-fs (loop5): Directory bread(block 73) failed [ 379.415748][ T125] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 379.624123][ T125] usb 4-1: Using ep0 maxpacket: 32 [ 379.632934][ T125] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.654238][ T4365] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 379.683608][ T125] usb 4-1: config 0 has no interface number 0 [ 379.731357][ T4365] usb 7-1: cp210x converter now attached to ttyUSB0 [ 379.744661][ T125] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 379.778584][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.811661][ T125] usb 4-1: Product: syz [ 379.849691][ T125] usb 4-1: Manufacturer: syz [ 379.860533][ T125] usb 4-1: SerialNumber: syz [ 379.912630][ T125] usb 4-1: config 0 descriptor?? [ 380.128693][ T7] usb 7-1: USB disconnect, device number 3 [ 380.156198][ T125] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 380.230157][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 380.239987][ T125] usb 4-1: selecting invalid altsetting 1 [ 380.254342][ T125] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 380.292001][ T7] cp210x 7-1:0.0: device disconnected [ 380.304390][ T125] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 380.340589][ T125] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 380.358178][ T125] usb 4-1: media controller created [ 380.381735][ T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.744010][ T125] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 380.882019][ T125] zl10353_read_register: readreg error (reg=127, ret==-71) [ 380.898687][ T7772] loop2: detected capacity change from 0 to 32768 [ 380.926191][ T125] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 381.018656][ T7772] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 381.018656][ T7772] [ 381.047073][ T125] usb 4-1: USB disconnect, device number 10 [ 381.497468][ T7805] loop4: detected capacity change from 0 to 256 [ 381.553211][ T7805] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 382.042904][ T7818] loop4: detected capacity change from 0 to 256 [ 382.342495][ T7822] program syz.2.875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.814258][ T125] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 382.882545][ T7833] loop6: detected capacity change from 0 to 512 [ 382.939553][ T7833] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 383.013444][ T7838] loop5: detected capacity change from 0 to 512 [ 383.028363][ T7801] loop3: detected capacity change from 0 to 32768 [ 383.030638][ T125] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.046598][ T7833] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.879: invalid indirect mapped block 9 (level 0) [ 383.057915][ T125] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 383.069431][ T125] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 383.078691][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.103234][ T7838] EXT4-fs: Ignoring removed i_version option [ 383.105681][ T125] usb 5-1: config 0 descriptor?? [ 383.135746][ T125] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 383.142488][ T125] dvb-usb: bulk message failed: -22 (3/0) [ 383.157966][ T125] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 383.168603][ T7833] EXT4-fs (loop6): 1 truncate cleaned up [ 383.169821][ T125] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 383.182522][ T125] usb 5-1: media controller created [ 383.190493][ T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 383.207022][ T7833] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 383.241667][ T125] dvb-usb: bulk message failed: -22 (6/0) [ 383.252898][ T7838] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 383.289296][ T125] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 383.327377][ T7842] ea_get: invalid extended attribute [ 383.333281][ T7842] ffff8880564a8c70: 04 00 00 00 .... [ 383.341756][ T7825] dibusb: i2c wr: len=61 is too big! [ 383.341756][ T7825] [ 383.382761][ T125] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 383.450695][ T125] dvb-usb: schedule remote query interval to 150 msecs. [ 383.489635][ T125] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 383.563900][ T6771] EXT4-fs (loop6): unmounting filesystem. [ 383.600965][ T125] usb 5-1: USB disconnect, device number 14 [ 383.702508][ T125] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 383.757617][ T6710] EXT4-fs (loop5): unmounting filesystem. [ 384.210362][ T7857] loop2: detected capacity change from 0 to 2048 [ 384.284379][ T7857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.141133][ T7849] loop6: detected capacity change from 0 to 32768 [ 385.271646][ T7849] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 385.271646][ T7849] [ 385.294130][ T4365] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 385.504140][ T4365] usb 6-1: Using ep0 maxpacket: 32 [ 385.512530][ T4365] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 385.564639][ T4365] usb 6-1: config 0 has no interface number 0 [ 385.593701][ T4365] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 385.644026][ T4365] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 385.689679][ T4365] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 385.737713][ T4365] usb 6-1: config 0 interface 196 has no altsetting 0 [ 385.785301][ T4365] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 385.811157][ T4365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.830050][ T4365] usb 6-1: Product: syz [ 385.858326][ T4365] usb 6-1: Manufacturer: syz [ 385.869613][ T7859] loop3: detected capacity change from 0 to 32768 [ 385.883527][ T4365] usb 6-1: SerialNumber: syz [ 385.884091][ T7665] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 385.914073][ T4365] usb 6-1: config 0 descriptor?? [ 385.928823][ T7873] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 386.094674][ T7665] usb 7-1: Using ep0 maxpacket: 32 [ 386.103496][ T7665] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 386.131911][ T7665] usb 7-1: config 0 has no interface number 0 [ 386.138887][ T7665] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.253898][ T7665] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.319030][ T7665] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 386.398395][ T4365] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 386.414172][ T7665] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.454659][ T7859] XFS (loop3): Mounting V5 Filesystem [ 386.478698][ T7665] usb 7-1: config 0 descriptor?? [ 386.626530][ T4365] usb 6-1: USB disconnect, device number 5 [ 386.643376][ T7859] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 386.705345][ T4365] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 386.742443][ T7859] XFS (loop3): Starting recovery (logdev: internal) [ 386.861554][ T7859] XFS (loop3): Ending recovery (logdev: internal) [ 386.950440][ T7902] loop2: detected capacity change from 0 to 512 [ 387.070355][ T7902] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 387.080717][ T7902] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.183157][ T125] usb 7-1: USB disconnect, device number 4 [ 387.203336][ T4277] XFS (loop3): Unmounting Filesystem [ 387.255739][ T7902] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 387.420950][ T7913] loop5: detected capacity change from 0 to 512 [ 387.464913][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 387.500033][ T7913] EXT4-fs: Ignoring removed bh option [ 387.525402][ T7911] loop4: detected capacity change from 0 to 4096 [ 387.611318][ T7913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 387.678480][ T7918] loop2: detected capacity change from 0 to 1024 [ 387.688782][ T7913] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.078137][ T6710] EXT4-fs (loop5): unmounting filesystem. [ 388.146509][ T7925] loop2: detected capacity change from 0 to 64 [ 388.413160][ T7933] loop5: detected capacity change from 0 to 1024 [ 388.504171][ T7933] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 388.534170][ T7933] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.769812][ T6710] EXT4-fs (loop5): unmounting filesystem. [ 388.823889][ T7944] loop3: detected capacity change from 0 to 4096 [ 388.913219][ T7948] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 388.980664][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 389.014749][ T7952] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 389.104186][ T7666] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 389.174083][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 389.180465][ T7] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 389.225954][ T7] usb 3-1: config 0 has too many interfaces: 164, using maximum allowed: 32 [ 389.264080][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.294166][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 164 [ 389.306183][ T7666] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 389.331353][ T7] usb 3-1: config 0 has too many interfaces: 164, using maximum allowed: 32 [ 389.347941][ T7666] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 389.369340][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.400070][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 164 [ 389.417100][ T7666] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 389.430506][ T7] usb 3-1: config 0 has too many interfaces: 164, using maximum allowed: 32 [ 389.447970][ T7926] loop4: detected capacity change from 0 to 32768 [ 389.460481][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.464597][ T7666] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 389.520050][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 164 [ 389.522918][ T7666] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.555821][ T7666] usb 7-1: config 0 descriptor?? [ 389.565538][ T7947] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 389.576142][ T7] usb 3-1: config 0 has too many interfaces: 164, using maximum allowed: 32 [ 389.577229][ T7926] XFS (loop4): Mounting V5 Filesystem [ 389.594464][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.604954][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 164 [ 389.625150][ T7] usb 3-1: config 0 has too many interfaces: 164, using maximum allowed: 32 [ 389.634197][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.645201][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 164 [ 389.670455][ T7] usb 3-1: config 0 has too many interfaces: 164, using maximum allowed: 32 [ 389.681919][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.699474][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 164 [ 389.717028][ T7926] XFS (loop4): Ending clean mount [ 389.722812][ T7] usb 3-1: config 0 has too many interfaces: 164, using maximum allowed: 32 [ 389.731859][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.743063][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 164 [ 389.765389][ T7] usb 3-1: config 0 has too many interfaces: 164, using maximum allowed: 32 [ 389.784058][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.804354][ T7665] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 389.818738][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 164 [ 389.857031][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 389.884120][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 389.902822][ T7] usb 3-1: SerialNumber: syz [ 389.909939][ T7] usb 3-1: config 0 descriptor?? [ 389.928985][ T7926] XFS (loop4): Quotacheck needed: Please wait. [ 389.936198][ T7] hub 3-1:0.0: Invalid hub with more than one config or interface [ 389.954040][ T7] hub: probe of 3-1:0.0 failed with error -22 [ 390.017742][ T7665] usb 4-1: Using ep0 maxpacket: 32 [ 390.028764][ T7666] gt683r_led 0003:1770:FF00.0017: unexpected long global item [ 390.044485][ T7665] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 390.064791][ T7666] gt683r_led 0003:1770:FF00.0017: hid parsing failed [ 390.078295][ T7666] gt683r_led: probe of 0003:1770:FF00.0017 failed with error -22 [ 390.089201][ T7665] usb 4-1: config 0 has no interface number 0 [ 390.121086][ T7665] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 390.155684][ T7926] XFS (loop4): Quotacheck: Done. [ 390.157699][ T7665] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.233998][ T7665] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 390.270543][ T7665] usb 4-1: config 0 interface 196 has no altsetting 0 [ 390.309270][ T7665] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 390.346690][ T7] usb 7-1: USB disconnect, device number 5 [ 390.364943][ T7665] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.383427][ T7665] usb 4-1: Product: syz [ 390.389573][ T7665] usb 4-1: Manufacturer: syz [ 390.401194][ T7665] usb 4-1: SerialNumber: syz [ 390.454925][ T7665] usb 4-1: config 0 descriptor?? [ 390.465739][ T7959] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 390.513611][ T4272] XFS (loop4): Unmounting Filesystem [ 390.902559][ T7665] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 391.142566][ T7665] usb 4-1: USB disconnect, device number 11 [ 391.274369][ T7665] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 391.364155][ T7666] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 391.374710][ T7992] loop5: detected capacity change from 0 to 736 [ 391.415729][ T7994] loop4: detected capacity change from 0 to 512 [ 391.441864][ T7994] EXT4-fs: Ignoring removed i_version option [ 391.496995][ T7994] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 391.564333][ T7666] usb 7-1: Using ep0 maxpacket: 32 [ 391.575413][ T7666] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 391.646767][ T7666] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 391.713603][ T7666] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 391.750648][ T4365] usb 3-1: USB disconnect, device number 17 [ 391.754341][ T7666] usb 7-1: Product: syz [ 391.760944][ T7666] usb 7-1: Manufacturer: syz [ 391.788568][ T7666] usb 7-1: SerialNumber: syz [ 391.808916][ T7666] usb 7-1: config 0 descriptor?? [ 391.859095][ T7986] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 391.867966][ T7666] hub 7-1:0.0: bad descriptor, ignoring hub [ 391.881482][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 391.904344][ T7666] hub: probe of 7-1:0.0 failed with error -5 [ 392.984503][ T7665] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 393.167123][ T4365] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 393.174062][ T7665] usb 3-1: Using ep0 maxpacket: 32 [ 393.182113][ T7665] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 393.216258][ T7665] usb 3-1: config 0 has no interface number 0 [ 393.261736][ T7665] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 393.304693][ T7665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.337594][ T7665] usb 3-1: Product: syz [ 393.354257][ T7665] usb 3-1: Manufacturer: syz [ 393.359231][ T7665] usb 3-1: SerialNumber: syz [ 393.377944][ T4365] usb 6-1: Using ep0 maxpacket: 16 [ 393.379986][ T7665] usb 3-1: config 0 descriptor?? [ 393.406061][ T7665] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 393.408053][ T4365] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.518159][ T4365] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 393.544268][ T7664] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 393.560239][ T4365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.581083][ T4365] usb 6-1: config 0 descriptor?? [ 393.612170][ T7665] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 393.691732][ T7665] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 393.744157][ T7664] usb 4-1: Using ep0 maxpacket: 8 [ 393.755418][ T7664] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 393.785322][ T7664] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 393.806918][ T7664] usb 4-1: Product: syz [ 393.849139][ T7664] usb 4-1: Manufacturer: syz [ 393.873396][ T7664] usb 4-1: SerialNumber: syz [ 393.896309][ T7664] usb 4-1: config 0 descriptor?? [ 393.911049][ T7664] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 394.032418][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 394.050582][ T7665] usb 3-1: USB disconnect, device number 18 [ 394.082900][ T4365] dragonrise 0003:0079:0011.0018: unknown main item tag 0x0 [ 394.104751][ T7665] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 394.124485][ T4365] dragonrise 0003:0079:0011.0018: unknown main item tag 0x0 [ 394.140908][ T4365] dragonrise 0003:0079:0011.0018: unknown main item tag 0x0 [ 394.170979][ T7665] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 394.176018][ T4365] dragonrise 0003:0079:0011.0018: unknown main item tag 0x0 [ 394.198072][ T7665] quatech2 3-1:0.51: device disconnected [ 394.254870][ T4365] dragonrise 0003:0079:0011.0018: unknown main item tag 0x0 [ 394.282324][ T4365] dragonrise 0003:0079:0011.0018: unknown main item tag 0x0 [ 394.302187][ T4365] dragonrise 0003:0079:0011.0018: item fetching failed at offset 9/44 [ 394.325678][ T4365] dragonrise 0003:0079:0011.0018: parse failed [ 394.334912][ T4365] dragonrise: probe of 0003:0079:0011.0018 failed with error -22 [ 394.376041][ T8057] team0: Port device veth1_to_bridge added [ 394.401499][ T4365] usb 6-1: USB disconnect, device number 6 [ 394.408391][ T4370] usb 7-1: USB disconnect, device number 6 [ 394.527778][ T7664] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 394.753670][ T7664] usb 4-1: USB disconnect, device number 12 [ 394.821973][ T8070] loop4: detected capacity change from 0 to 256 [ 395.091739][ T8077] loop6: detected capacity change from 0 to 16 [ 395.105552][ T8077] erofs: (device loop6): mounted with root inode @ nid 36. [ 396.148230][ T8083] loop4: detected capacity change from 0 to 512 [ 396.290997][ T8083] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 396.319111][ T8083] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.670364][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 397.953670][ T8094] loop5: detected capacity change from 0 to 40427 [ 397.999425][ T8094] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 398.018220][ T8094] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 398.058238][ T8094] F2FS-fs (loop5): invalid crc value [ 398.114379][ T8094] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 398.239945][ T8094] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 398.253121][ T8094] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 398.629941][ T6710] syz-executor: attempt to access beyond end of device [ 398.629941][ T6710] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 399.249451][ T8138] loop2: detected capacity change from 0 to 16 [ 399.618780][ T8138] erofs: (device loop2): mounted with root inode @ nid 36. [ 400.349701][ T8146] loop2: detected capacity change from 0 to 512 [ 400.572497][ T8149] loop4: detected capacity change from 0 to 512 [ 400.683619][ T8149] EXT4-fs (loop4): 1 truncate cleaned up [ 400.717057][ T8149] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 400.995748][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 401.032034][ T8154] loop2: detected capacity change from 0 to 512 [ 401.141575][ T8154] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 401.193511][ T8161] loop3: detected capacity change from 0 to 256 [ 401.235717][ T8161] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 401.274013][ T8161] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 401.325979][ T8161] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xaa2dc89a, utbl_chksum : 0xe619d30d) [ 401.464043][ T7666] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 401.559436][ T8174] loop2: detected capacity change from 0 to 1024 [ 401.615152][ T8174] EXT4-fs: Ignoring removed mblk_io_submit option [ 401.666726][ T7666] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 401.698060][ T8174] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 401.721588][ T7666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.771754][ T7666] usb 6-1: config 0 descriptor?? [ 401.778422][ T8174] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 401.832396][ T26] audit: type=1800 audit(1776807254.931:33): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.955" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 401.867080][ T8174] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 402.104864][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 402.206160][ T7666] [drm:udl_init] *ERROR* Selecting channel failed [ 402.304401][ T7666] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 402.332401][ T7666] [drm] Initialized udl on minor 2 [ 402.370288][ T8194] use of bytesused == 0 is deprecated and will be removed in the future, [ 402.391267][ T7666] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 402.419686][ T7666] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 402.432224][ T8194] use the actual size instead. [ 402.458991][ T7666] usb 6-1: USB disconnect, device number 7 [ 402.485069][ T7665] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 402.542346][ T7665] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 402.573244][ T7665] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 403.490558][ T8216] loop2: detected capacity change from 0 to 1024 [ 403.536563][ T8216] EXT4-fs: Ignoring removed orlov option [ 403.628349][ T8216] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 403.752102][ T8216] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 404.194785][ T8233] loop4: detected capacity change from 0 to 4096 [ 404.264346][ T8243] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 404.322272][ T8246] pimreg: tun_chr_ioctl cmd 1074025677 [ 404.332126][ T8246] pimreg: linktype set to 0 [ 404.397414][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 404.490354][ T8233] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 404.554072][ T4370] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 404.710980][ T8256] loop3: detected capacity change from 0 to 128 [ 404.725079][ T8256] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 404.761497][ T4370] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 404.804942][ T4370] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 404.866798][ T4370] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 404.907950][ T4370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.949383][ T4370] usb 6-1: Product: syz [ 404.953708][ T4370] usb 6-1: Manufacturer: syz [ 404.991500][ T4370] usb 6-1: SerialNumber: syz [ 405.022676][ T4370] usb 6-1: config 0 descriptor?? [ 405.050616][ T8245] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 405.064357][ T8245] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 405.290338][ T8245] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 405.313426][ T8245] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 405.372413][ T8264] loop3: detected capacity change from 0 to 8192 [ 405.410607][ T8264] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 405.431655][ T8264] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 405.454909][ T8264] REISERFS (device loop3): using ordered data mode [ 405.473619][ T8264] reiserfs: using flush barriers [ 405.506804][ T8264] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 405.524778][ T8264] REISERFS (device loop3): checking transaction log (loop3) [ 405.543228][ T8264] REISERFS (device loop3): Using r5 hash to sort names [ 405.585516][ T8264] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 405.602198][ T8264] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 405.655465][ T8264] [ 405.657977][ T8264] ====================================================== [ 405.665271][ T8264] WARNING: possible circular locking dependency detected [ 405.672406][ T8264] syzkaller #0 Not tainted [ 405.676851][ T8264] ------------------------------------------------------ [ 405.683992][ T8264] syz.3.976/8264 is trying to acquire lock: [ 405.690001][ T8264] ffff888056e6b090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x75/0xd0 [ 405.699281][ T8264] [ 405.699281][ T8264] but task is already holding lock: [ 405.706679][ T8264] ffff88804f8b8980 (&type->i_mutex_dir_key#19/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 405.717080][ T8264] [ 405.717080][ T8264] which lock already depends on the new lock. [ 405.717080][ T8264] [ 405.727679][ T8264] [ 405.727679][ T8264] the existing dependency chain (in reverse order) is: [ 405.736697][ T8264] [ 405.736697][ T8264] -> #2 (&type->i_mutex_dir_key#19/1){+.+.}-{3:3}: [ 405.745517][ T8264] down_write_nested+0x39/0x60 [ 405.750924][ T8264] filename_create+0x208/0x470 [ 405.756241][ T8264] do_mkdirat+0xa5/0x440 [ 405.761045][ T8264] __x64_sys_mkdirat+0x85/0x90 [ 405.766388][ T8264] do_syscall_64+0x4c/0xa0 [ 405.771367][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.777827][ T8264] [ 405.777827][ T8264] -> #1 (sb_writers#28){.+.+}-{0:0}: [ 405.785323][ T8264] sb_start_write+0x4d/0x1c0 [ 405.790508][ T8264] mnt_want_write_file+0x5c/0x200 [ 405.796150][ T8264] reiserfs_ioctl+0x10a/0x330 [ 405.801378][ T8264] __se_sys_ioctl+0xfa/0x170 [ 405.806530][ T8264] do_syscall_64+0x4c/0xa0 [ 405.811666][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.818097][ T8264] [ 405.818097][ T8264] -> #0 (&sbi->lock){+.+.}-{3:3}: [ 405.825321][ T8264] __lock_acquire+0x2d07/0x7d10 [ 405.830802][ T8264] lock_acquire+0x1bb/0x4a0 [ 405.835844][ T8264] __mutex_lock+0x12d/0xaf0 [ 405.840880][ T8264] reiserfs_write_lock+0x75/0xd0 [ 405.846458][ T8264] reiserfs_lookup+0x18a/0x480 [ 405.851760][ T8264] lookup_one_qstr_excl+0x10e/0x240 [ 405.857529][ T8264] filename_create+0x23a/0x470 [ 405.862888][ T8264] do_mkdirat+0xa5/0x440 [ 405.868071][ T8264] __x64_sys_mkdirat+0x85/0x90 [ 405.873598][ T8264] do_syscall_64+0x4c/0xa0 [ 405.878790][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.885653][ T8264] [ 405.885653][ T8264] other info that might help us debug this: [ 405.885653][ T8264] [ 405.895980][ T8264] Chain exists of: [ 405.895980][ T8264] &sbi->lock --> sb_writers#28 --> &type->i_mutex_dir_key#19/1 [ 405.895980][ T8264] [ 405.909577][ T8264] Possible unsafe locking scenario: [ 405.909577][ T8264] [ 405.917119][ T8264] CPU0 CPU1 [ 405.922492][ T8264] ---- ---- [ 405.927952][ T8264] lock(&type->i_mutex_dir_key#19/1); [ 405.933527][ T8264] lock(sb_writers#28); [ 405.940309][ T8264] lock(&type->i_mutex_dir_key#19/1); [ 405.948308][ T8264] lock(&sbi->lock); [ 405.952302][ T8264] [ 405.952302][ T8264] *** DEADLOCK *** [ 405.952302][ T8264] [ 405.960450][ T8264] 2 locks held by syz.3.976/8264: [ 405.965482][ T8264] #0: ffff888054a14460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 405.974823][ T8264] #1: ffff88804f8b8980 (&type->i_mutex_dir_key#19/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 405.985992][ T8264] [ 405.985992][ T8264] stack backtrace: [ 405.991885][ T8264] CPU: 0 PID: 8264 Comm: syz.3.976 Not tainted syzkaller #0 [ 405.999240][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 406.009315][ T8264] Call Trace: [ 406.012608][ T8264] [ 406.015553][ T8264] dump_stack_lvl+0x188/0x24e [ 406.020265][ T8264] ? load_image+0x400/0x400 [ 406.024794][ T8264] ? show_regs_print_info+0x12/0x12 [ 406.030103][ T8264] ? print_circular_bug+0x12b/0x1a0 [ 406.035363][ T8264] check_noncircular+0x296/0x330 [ 406.040318][ T8264] ? unwind_next_frame+0x1880/0x20b0 [ 406.045616][ T8264] ? deref_stack_reg+0x19f/0x230 [ 406.050566][ T8264] ? add_chain_block+0x940/0x940 [ 406.055695][ T8264] ? lockdep_lock+0xf1/0x1f0 [ 406.060300][ T8264] ? rcu_is_watching+0x11/0xa0 [ 406.065360][ T8264] ? _find_first_zero_bit+0xcf/0x100 [ 406.070688][ T8264] __lock_acquire+0x2d07/0x7d10 [ 406.075735][ T8264] ? __lock_acquire+0x7d10/0x7d10 [ 406.080984][ T8264] ? is_bpf_text_address+0x28b/0x2a0 [ 406.086368][ T8264] ? kernel_text_address+0x9c/0xd0 [ 406.091614][ T8264] ? verify_lock_unused+0x140/0x140 [ 406.096838][ T8264] ? unwind_get_return_address+0x49/0x80 [ 406.102528][ T8264] ? stack_trace_save+0xf0/0xf0 [ 406.107505][ T8264] ? arch_stack_walk+0xf2/0x140 [ 406.112673][ T8264] lock_acquire+0x1bb/0x4a0 [ 406.117307][ T8264] ? reiserfs_write_lock+0x75/0xd0 [ 406.122653][ T8264] ? lockdep_unlock+0x142/0x2e0 [ 406.127765][ T8264] ? __might_sleep+0xd0/0xd0 [ 406.132382][ T8264] ? read_lock_is_recursive+0x10/0x10 [ 406.138035][ T8264] ? add_lock_to_list+0x191/0x280 [ 406.143080][ T8264] ? __lock_acquire+0x28c4/0x7d10 [ 406.148122][ T8264] __mutex_lock+0x12d/0xaf0 [ 406.152698][ T8264] ? reiserfs_write_lock+0x75/0xd0 [ 406.157859][ T8264] ? reiserfs_write_lock+0x75/0xd0 [ 406.163005][ T8264] ? mutex_lock_nested+0x10/0x10 [ 406.168308][ T8264] ? verify_lock_unused+0x140/0x140 [ 406.173522][ T8264] ? mod_objcg_state+0x5a7/0x8a0 [ 406.178482][ T8264] reiserfs_write_lock+0x75/0xd0 [ 406.183438][ T8264] reiserfs_lookup+0x18a/0x480 [ 406.188222][ T8264] ? reiserfs_find_entry+0x18e0/0x18e0 [ 406.193704][ T8264] ? do_raw_spin_unlock+0x11d/0x230 [ 406.199001][ T8264] ? _raw_spin_unlock+0x24/0x40 [ 406.203861][ T8264] ? d_alloc+0x1e7/0x250 [ 406.208119][ T8264] lookup_one_qstr_excl+0x10e/0x240 [ 406.213501][ T8264] filename_create+0x23a/0x470 [ 406.218419][ T8264] ? kern_path_create+0x50/0x50 [ 406.223293][ T8264] ? __virt_addr_valid+0x188/0x540 [ 406.228439][ T8264] ? __virt_addr_valid+0x465/0x540 [ 406.233654][ T8264] do_mkdirat+0xa5/0x440 [ 406.237950][ T8264] ? vfs_mkdir+0x570/0x570 [ 406.242497][ T8264] __x64_sys_mkdirat+0x85/0x90 [ 406.247312][ T8264] do_syscall_64+0x4c/0xa0 [ 406.251952][ T8264] ? clear_bhb_loop+0x60/0xb0 [ 406.256668][ T8264] ? clear_bhb_loop+0x60/0xb0 [ 406.261827][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.267758][ T8264] RIP: 0033:0x7f29d4d9b687 [ 406.272290][ T8264] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.291953][ T8264] RSP: 002b:00007f29d5d49e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 406.300739][ T8264] RAX: ffffffffffffffda RBX: 00007f29d5d49ee0 RCX: 00007f29d4d9b687 [ 406.308912][ T8264] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 406.316982][ T8264] RBP: 0000200000000300 R08: 0000200000000140 R09: 0000000000000000 [ 406.325052][ T8264] R10: 0000200000000300 R11: 0000000000000246 R12: 0000200000000280 [ 406.333300][ T8264] R13: 00007f29d5d49ea0 R14: 0000000000000000 R15: 0000000000000000 [ 406.341346][ T8264] [ 406.350461][ T4370] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 406.462690][ T8264] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 406.486827][ T8264] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 406.505055][ T8264] overlayfs: upper fs needs to support d_type. [ 406.512935][ T8264] overlayfs: upper fs does not support tmpfile. [ 406.520798][ T8264] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 406.540916][ T8264] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 406.550670][ T8264] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 406.569658][ T8264] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 406.571117][ T4370] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 406.632702][ T8264] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 406.914334][ T8264] overlayfs: failed to set xattr on upper [ 406.920229][ T8264] overlayfs: ...falling back to index=off,metacopy=off. [ 406.934914][ T4370] usb 6-1: USB disconnect, device number 8 [ 406.966859][ T4277] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 406.993403][ T4277] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)