last executing test programs: 45.662665033s ago: executing program 4 (id=6988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0xd537, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) 45.291616876s ago: executing program 4 (id=6993): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x13, 0x4) 45.019122558s ago: executing program 4 (id=6998): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x33, 0x1, 0x2, "d569e8e1dd2f1ae97ee8589301f457a0c04b1410b2ea1c4596ba216b1e8ac11e", 0x39555659}) 44.843234439s ago: executing program 4 (id=7001): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000040)) 43.733092531s ago: executing program 4 (id=7015): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 42.702331282s ago: executing program 4 (id=7028): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f40800030006010000bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 26.227333194s ago: executing program 32 (id=7028): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f40800030006010000bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.969996678s ago: executing program 0 (id=7380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000020021e00000000000a0000008500000027000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000500)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.314576043s ago: executing program 0 (id=7384): mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0xf88, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 3.966718092s ago: executing program 0 (id=7390): r0 = syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', 0x18013, &(0x7f0000000180)={[{@fat=@codepage={'codepage', 0x3d, '936'}}, {@fat=@nfs}, {@dots}, {@fat=@nocase}, {@nodots}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@fat=@quiet}, {@nodots}, {@dots}, {@fat=@discard}, {@nodots}, {@nodots}, {@dots}, {@fat=@nocase}, {@nodots}, {@nodots}, {@dots}]}, 0x0, 0x20e, &(0x7f0000000800)="$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") getdents64(r0, &(0x7f00000002c0)=""/189, 0xbd) 3.451688739s ago: executing program 0 (id=7398): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) tkill(0x0, 0x7) 2.923765152s ago: executing program 0 (id=7403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x20, 0x1, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 2.437691566s ago: executing program 0 (id=7409): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x180000a, &(0x7f0000000240)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.time\x00', 0x275a, 0x0) 2.288602999s ago: executing program 3 (id=7411): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) 2.022165334s ago: executing program 3 (id=7416): r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x2}, 0x4d13a5ee, 0x1, 0x4, 0xffffffff, 0x0, 0x0, 0xdefe}) 1.922377422s ago: executing program 1 (id=7417): setrlimit(0x6, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.861207535s ago: executing program 6 (id=7419): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x40045017, 0x0) 1.850311663s ago: executing program 2 (id=7420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x84, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffffa7, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x84}}, 0x0) 1.680905652s ago: executing program 3 (id=7421): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000001080)=""/4130, &(0x7f0000000100)=0x1022) 1.479280758s ago: executing program 6 (id=7423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 1.435756873s ago: executing program 1 (id=7424): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{}, 'port0\x00', 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 1.319736076s ago: executing program 3 (id=7425): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x6, 0xf, 0x200, &(0x7f0000001500)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000a0000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb2675596070d780e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fcc30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64220a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f7004000000ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f4efb4253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e0300229351796661c86624eff80435488777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b16dcf2b984de988cd35df2cd7344aa8a9f3432b96fb889c020000000000000066a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 1.319595802s ago: executing program 5 (id=7426): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, 0x0) 1.311783972s ago: executing program 2 (id=7427): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x8, 0x1, 0x0, "69c0161723fc3c13ca662342702d1a459380d13257a4bb97ce001c869ee8c942"}) 1.185312464s ago: executing program 6 (id=7428): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 1.100336653s ago: executing program 5 (id=7429): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000640)) 1.044477106s ago: executing program 1 (id=7430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/25, 0x19}], 0x1) 1.037107667s ago: executing program 2 (id=7431): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000200)={0x0, 0x5, 0x8000, '\x00', 0x0}) 886.73637ms ago: executing program 6 (id=7432): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) 807.883102ms ago: executing program 5 (id=7433): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) 780.335952ms ago: executing program 3 (id=7434): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$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") statx(0xffffffffffffff9c, 0x0, 0x1000, 0x800, &(0x7f00000003c0)) 775.606538ms ago: executing program 1 (id=7435): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x6, 0x0, 0x3aa6, 0x8, 0x2, 0x7, 0x6}, &(0x7f0000000040)={0x1, 0x5368, 0x9, 0x0, 0x8000000000000001, 0x5, 0x4, 0xc}, &(0x7f0000000080)={0xd, 0x3cae, 0xfefffffffffffffa, 0x7, 0x9, 0x9, 0x400, 0x1}, 0x0, 0x0) 636.329955ms ago: executing program 5 (id=7436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000400005000500ffffffff050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) 558.973744ms ago: executing program 2 (id=7437): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000180)="480000001400197f09004b0101048c59028800ffff0001000000000028213ee20600d4ff4affff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace35ee8b12c00", 0x48}], 0x1) 558.234901ms ago: executing program 5 (id=7438): r0 = socket(0x23, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) 461.095305ms ago: executing program 1 (id=7439): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40000000) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000380)) 357.404328ms ago: executing program 6 (id=7440): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x101001) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)='W', 0x1}], 0x1) 356.710068ms ago: executing program 2 (id=7441): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 277.165629ms ago: executing program 2 (id=7442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xae}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 184.758266ms ago: executing program 1 (id=7443): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000100)=0xffffff83) 183.960052ms ago: executing program 5 (id=7444): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0x0, 0xfffffffe}}) 149.123964ms ago: executing program 3 (id=7445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 0s ago: executing program 6 (id=7446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x40}}, 0x8000) kernel console output (not intermixed with test programs): fr=1, Product=2, SerialNumber=3 [ 934.604908][ T787] usb 4-1: Product: syz [ 934.609102][ T787] usb 4-1: Manufacturer: syz [ 934.636087][ T787] usb 4-1: SerialNumber: syz [ 934.675450][ T787] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 934.729239][T21863] bond0: Error: Cannot enslave bond to itself. [ 934.857580][T21867] loop1: detected capacity change from 0 to 64 [ 934.993604][ T31] audit: type=1326 audit(2000524953.600:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21871 comm="syz.5.6298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0f18f749 code=0x7ffc0000 [ 935.125824][ T31] audit: type=1326 audit(2000524953.638:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21871 comm="syz.5.6298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0f18f749 code=0x7ffc0000 [ 935.159952][ T787] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 935.247868][ T31] audit: type=1326 audit(2000524953.647:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21871 comm="syz.5.6298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f2f0f18f749 code=0x7ffc0000 [ 935.251720][ T787] usb 4-1: USB disconnect, device number 35 [ 935.287345][T21878] CIFS mount error: No usable UNC path provided in device string! [ 935.287345][T21878] [ 935.339796][T21878] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 935.387799][ T31] audit: type=1326 audit(2000524953.647:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21871 comm="syz.5.6298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0f18f749 code=0x7ffc0000 [ 935.467398][T21882] loop5: detected capacity change from 0 to 16 [ 935.499054][ T31] audit: type=1326 audit(2000524953.647:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21871 comm="syz.5.6298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0f18f749 code=0x7ffc0000 [ 935.513533][T21882] erofs (device loop5): mounted with root inode @ nid 36. [ 935.603884][T21885] binder: 21884:21885 ioctl c0306201 200000000180 returned -14 [ 935.643989][ T5960] erofs (device loop5): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 9000 [ 935.656165][T21882] erofs (device loop5): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 8192 [ 935.683742][T21882] erofs (device loop5): read error -117 @ 1 of nid 89 [ 935.706605][ T31] audit: type=1800 audit(2000524954.255:74): pid=21882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6303" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 935.835036][T21892] netlink: 'syz.1.6307': attribute type 2 has an invalid length. [ 935.835608][T21886] loop2: detected capacity change from 0 to 4096 [ 935.845008][T21892] netlink: 'syz.1.6307': attribute type 1 has an invalid length. [ 935.852979][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.955530][T21886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.149437][T21890] loop0: detected capacity change from 0 to 4096 [ 936.207457][T21890] ntfs3(loop0): ino=3, Correct links count -> 2. [ 936.301742][ T5950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.210593][ T6082] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 937.250976][T21896] loop3: detected capacity change from 0 to 32768 [ 937.274619][T21896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6311 (21896) [ 937.325884][T21896] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 937.344702][T21896] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 937.404117][T21922] loop1: detected capacity change from 0 to 4096 [ 937.405042][ T6082] usb 5-1: config 2 has an invalid interface number: 50 but max is 0 [ 937.418034][T21922] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 937.450773][ T6082] usb 5-1: config 2 has no interface number 0 [ 937.475214][ T6082] usb 5-1: config 2 interface 50 has no altsetting 0 [ 937.483904][ T787] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 937.516216][T21896] BTRFS info (device loop3): enabling ssd optimizations [ 937.541875][ T6082] usb 5-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=ac.66 [ 937.550938][ T6082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.557622][T21896] BTRFS info (device loop3): turning on async discard [ 937.595036][ T6082] usb 5-1: Product: syz [ 937.599229][ T6082] usb 5-1: Manufacturer: syz [ 937.603832][ T6082] usb 5-1: SerialNumber: syz [ 937.608813][T21896] BTRFS info (device loop3): enabling free space tree [ 937.630192][ T6082] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 937.670920][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 937.682270][ T787] usb 1-1: descriptor type invalid, skip [ 937.687944][ T787] usb 1-1: descriptor type invalid, skip [ 937.739688][ T787] usb 1-1: config 1 interface 0 altsetting 251 bulk endpoint 0x1 has invalid maxpacket 32 [ 937.766118][ T787] usb 1-1: config 1 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 937.803227][ T787] usb 1-1: config 1 interface 0 has no altsetting 0 [ 937.832789][T21914] loop5: detected capacity change from 0 to 32768 [ 937.855423][ T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 937.885638][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.915313][ T787] usb 1-1: Product: syz [ 937.940316][T21914] ERROR: (device loop5): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 937.940316][T21914] [ 937.946192][ T787] usb 1-1: Manufacturer: syz [ 937.972230][ T787] usb 1-1: SerialNumber: syz [ 937.974717][T21914] ERROR: (device loop5): remounting filesystem as read-only [ 937.995010][ T5946] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 938.020113][T21920] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 938.030496][T21914] ERROR: (device loop5): txAbort: [ 938.030496][T21914] [ 938.100481][ T6082] gspca_zc3xx: reg_r err -71 [ 938.105205][ T6082] gspca_zc3xx 5-1:2.50: probe with driver gspca_zc3xx failed with error -71 [ 938.150292][ T6082] usb 5-1: USB disconnect, device number 35 [ 938.336275][ T5954] ERROR: (device loop5): xtTruncate: xt_getpage: xtree page corrupt [ 938.336275][ T5954] [ 938.355189][ T787] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 251 proto 1 vid 0x0525 pid 0xA4A8 [ 938.414756][ T787] usb 1-1: USB disconnect, device number 10 [ 938.472550][ T787] usblp0: removed [ 939.271840][T21959] loop0: detected capacity change from 0 to 128 [ 939.305024][T21939] loop2: detected capacity change from 0 to 32768 [ 939.326161][T21959] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 939.370506][T21939] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6323 (21939) [ 939.431809][T21959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 939.462004][T21939] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 939.505706][T21939] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 939.551567][ T5935] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 939.754948][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 939.807637][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 939.862199][T21939] BTRFS info (device loop2): enabling ssd optimizations [ 939.869189][T21939] BTRFS info (device loop2): turning on async discard [ 939.914293][ T5935] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 939.925127][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.933255][T21939] BTRFS info (device loop2): enabling free space tree [ 939.961210][ T5935] usb 2-1: Product: syz [ 939.965392][ T5935] usb 2-1: Manufacturer: syz [ 939.972730][T21947] loop5: detected capacity change from 0 to 32768 [ 940.005394][ T5935] usb 2-1: SerialNumber: syz [ 940.014423][T21947] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 2903e520-3e83-4863-9cc3-57c7a97787ff [ 940.051243][ T5935] usb 2-1: config 0 descriptor?? [ 940.071026][T21947] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6327 (21947) [ 940.104125][ T5935] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 940.173908][T21947] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 940.196230][T21947] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 940.258130][ T5950] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 940.448891][ T5935] usb 2-1: USB disconnect, device number 32 [ 940.571759][T21947] BTRFS info (device loop5): enabling ssd optimizations [ 940.637136][T21947] BTRFS info (device loop5): turning on async discard [ 940.647915][T21947] BTRFS info (device loop5): enabling free space tree [ 940.722999][T22016] netlink: 'syz.4.6347': attribute type 23 has an invalid length. [ 940.787324][ T6799] udevd[6799]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.027236][ T5954] BTRFS info (device loop5): last unmount of filesystem 2903e520-3e83-4863-9cc3-57c7a97787ff [ 941.463409][T22030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6341'. [ 942.559279][T22054] loop2: detected capacity change from 0 to 4096 [ 942.605008][T22054] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 942.643370][T22054] ntfs3(loop2): ino=3, mi_enum_attr [ 942.691608][T22032] loop4: detected capacity change from 0 to 32768 [ 942.738910][T22032] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6355 (22032) [ 942.865234][T22054] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 942.924780][T22032] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 942.928146][T22054] ntfs3(loop2): ino=1f, "file2" failed to open parent directory r=5 to update [ 942.968584][T22032] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 942.984370][T22070] netlink: 'syz.3.6373': attribute type 1 has an invalid length. [ 943.187155][ T12] ntfs3(loop2): ino=1f, failed to open parent directory r=5 to update [ 943.334667][T22032] BTRFS info (device loop4): enabling ssd optimizations [ 943.365699][T22032] BTRFS info (device loop4): turning on async discard [ 943.389450][T22032] BTRFS info (device loop4): enabling free space tree [ 943.700016][ T5948] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 943.930194][T22111] loop2: detected capacity change from 0 to 256 [ 944.086202][T22111] FAT-fs (loop2): Directory bread(block 64) failed [ 944.153483][T22111] FAT-fs (loop2): Directory bread(block 65) failed [ 944.191473][T22111] FAT-fs (loop2): Directory bread(block 66) failed [ 944.224041][T22111] FAT-fs (loop2): Directory bread(block 67) failed [ 944.230677][T22111] FAT-fs (loop2): Directory bread(block 68) failed [ 944.302611][T22111] FAT-fs (loop2): Directory bread(block 69) failed [ 944.330366][T22111] FAT-fs (loop2): Directory bread(block 70) failed [ 944.336917][T22111] FAT-fs (loop2): Directory bread(block 71) failed [ 944.416857][T22111] FAT-fs (loop2): Directory bread(block 72) failed [ 944.423423][T22111] FAT-fs (loop2): Directory bread(block 73) failed [ 944.477611][T22127] 9p: Bad value for 'rfdno' [ 945.102434][T22143] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6399'. [ 945.362964][T22151] loop0: detected capacity change from 0 to 256 [ 945.444008][T22151] FAT-fs (loop0): Directory bread(block 64) failed [ 945.484653][T22151] FAT-fs (loop0): Directory bread(block 65) failed [ 945.513087][T22151] FAT-fs (loop0): Directory bread(block 66) failed [ 945.527876][T22151] FAT-fs (loop0): Directory bread(block 67) failed [ 945.535242][T22151] FAT-fs (loop0): Directory bread(block 68) failed [ 945.542273][T22151] FAT-fs (loop0): Directory bread(block 69) failed [ 945.560617][T22151] FAT-fs (loop0): Directory bread(block 70) failed [ 945.567170][T22151] FAT-fs (loop0): Directory bread(block 71) failed [ 945.604309][T22151] FAT-fs (loop0): Directory bread(block 72) failed [ 945.610865][T22151] FAT-fs (loop0): Directory bread(block 73) failed [ 945.822220][T22133] loop3: detected capacity change from 0 to 32768 [ 945.868583][T22133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6396 (22133) [ 945.942480][T22133] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 945.991245][T22133] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 946.152376][T22135] loop5: detected capacity change from 0 to 32768 [ 946.261491][T22135] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6398 (22135) [ 946.365462][T22135] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 946.386717][T22133] BTRFS info (device loop3): enabling ssd optimizations [ 946.406158][T22133] BTRFS info (device loop3): turning on async discard [ 946.416960][T22133] BTRFS info (device loop3): enabling free space tree [ 946.437618][T22135] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 946.786971][ T5946] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 946.857260][T22135] BTRFS info (device loop5): enabling ssd optimizations [ 946.906789][T22135] BTRFS info (device loop5): turning on flush-on-commit [ 946.913771][T22135] BTRFS info (device loop5): turning on async discard [ 946.980525][T22135] BTRFS info (device loop5): enabling free space tree [ 947.044224][T22135] BTRFS info (device loop5): force zlib compression, level 3 [ 947.084596][T22135] BTRFS info (device loop5): max_inline set to 4096 [ 947.408466][T22153] loop1: detected capacity change from 0 to 32768 [ 947.445608][ T5954] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 947.503207][T22153] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 947.528654][T22153] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 947.618569][T22153] XFS (loop1): Ending clean mount [ 947.708559][ T6421] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 947.880095][ T5951] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 947.901608][ T6421] usb 5-1: Using ep0 maxpacket: 16 [ 947.915307][ T6421] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 947.922388][ T787] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 947.954892][ T6421] usb 5-1: config 0 has no interface number 0 [ 947.972065][ T6421] usb 5-1: config 0 interface 237 has no altsetting 0 [ 947.990417][ T6421] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 948.011437][ T6421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.028987][ T6421] usb 5-1: Product: syz [ 948.033306][ T6421] usb 5-1: Manufacturer: syz [ 948.047606][ T6421] usb 5-1: SerialNumber: syz [ 948.078934][ T6421] usb 5-1: config 0 descriptor?? [ 948.114314][ T6421] snd_usb_podhd 5-1:0.237: Line 6 POD HD300 found [ 948.141451][ T787] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 948.168271][ T787] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 948.189452][ T787] usb 3-1: config 220 has no interface number 2 [ 948.200351][ T787] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 948.242055][ T787] usb 3-1: config 220 interface 0 has no altsetting 0 [ 948.252764][ T787] usb 3-1: config 220 interface 76 has no altsetting 0 [ 948.296543][ T787] usb 3-1: config 220 interface 1 has no altsetting 0 [ 948.347329][ T787] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 948.368388][ T6421] snd_usb_podhd 5-1:0.237: cannot get proper max packet size [ 948.390026][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.423135][ T787] usb 3-1: Product: syz [ 948.430204][ T6421] snd_usb_podhd 5-1:0.237: Line 6 POD HD300 now disconnected [ 948.456915][ T787] usb 3-1: Manufacturer: syz [ 948.465856][ T6421] snd_usb_podhd 5-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 948.472719][ T787] usb 3-1: SerialNumber: syz [ 948.674438][ T6421] usb 5-1: USB disconnect, device number 36 [ 948.804651][ T787] usb 3-1: selecting invalid altsetting 0 [ 948.848783][ T787] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 948.893754][ T787] uvcvideo 3-1:220.0: No valid video chain found. [ 948.947295][ T787] usb 3-1: selecting invalid altsetting 0 [ 948.980841][ T787] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 949.031145][ T787] usb 3-1: USB disconnect, device number 31 [ 949.285376][T22227] loop5: detected capacity change from 0 to 32768 [ 949.345409][T22227] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6423 (22227) [ 949.367591][T22228] loop0: detected capacity change from 0 to 32768 [ 949.379775][T22228] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6424 (22228) [ 949.414559][T22227] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 949.454454][T22228] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 949.483476][T22227] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 949.500842][T22228] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 949.511660][T22227] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 949.800798][T22228] BTRFS info (device loop0): enabling ssd optimizations [ 949.826056][T22228] BTRFS info (device loop0): turning on async discard [ 949.833230][T22228] BTRFS info (device loop0): enabling free space tree [ 949.841410][T22227] BTRFS info (device loop5): rebuilding free space tree [ 949.884518][T22227] BTRFS info (device loop5): disabling free space tree [ 949.900931][T22227] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 949.910605][T22227] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 949.961001][T22271] loop4: detected capacity change from 0 to 512 [ 949.975836][T22227] BTRFS info (device loop5): setting nodatasum [ 950.017778][T22271] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 950.071636][T22271] EXT4-fs (loop4): invalid journal inode [ 950.077492][T22227] BTRFS info (device loop5): allowing degraded mounts [ 950.099071][T22271] EXT4-fs (loop4): can't get journal size [ 950.109784][T22227] BTRFS info (device loop5): turning on async discard [ 950.211613][T22227] BTRFS info (device loop5): enabling disk space caching [ 950.212000][ T5943] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 950.218756][T22227] BTRFS info (device loop5): force clearing of disk cache [ 950.240055][T22271] EXT4-fs (loop4): 1 truncate cleaned up [ 950.278800][T22271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.282847][T22236] loop3: detected capacity change from 0 to 32768 [ 950.330015][T22227] BTRFS info (device loop5): force zlib compression, level 3 [ 950.632589][T22227] BTRFS info (device loop5): balance: start -sprofiles=system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=18446744073709547521,usage=4294963201..4294967295 [ 950.704241][T22227] BTRFS info (device loop5): balance: ended with status: 0 [ 950.796448][ T5948] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.090788][ T5954] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 951.125755][T22280] loop2: detected capacity change from 0 to 4096 [ 951.130453][T22282] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.139761][T22282] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.169037][T22280] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 951.615190][T22287] loop4: detected capacity change from 0 to 1024 [ 951.626031][T22289] net_ratelimit: 2012 callbacks suppressed [ 951.626056][T22289] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 951.986300][ T4325] hfsplus: b-tree write err: -5, ino 4 [ 952.137108][T22282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.219001][T22282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.570952][T22278] loop0: detected capacity change from 0 to 32768 [ 953.251468][ T4325] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.311756][ T4325] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.320696][ T4325] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.386725][ T4325] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.725104][T22324] Unsupported ieee802154 address type: 0 [ 953.788715][T22326] netlink: 'syz.0.6456': attribute type 5 has an invalid length. [ 954.084028][T22335] loop0: detected capacity change from 0 to 256 [ 954.124142][T22335] exfat: Deprecated parameter 'namecase' [ 954.143024][T22335] exfat: Deprecated parameter 'namecase' [ 954.162266][T22335] exfat: Deprecated parameter 'namecase' [ 954.178347][T22335] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 954.227557][T22335] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 955.135644][T22360] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 955.328202][T22332] loop3: detected capacity change from 0 to 32768 [ 955.379542][T22332] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6459 (22332) [ 955.474415][T22332] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 955.503626][T22332] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 955.704403][T22390] binder: 22384:22390 ioctl c018620c 200000000100 returned -22 [ 955.745844][T22332] BTRFS info (device loop3): enabling ssd optimizations [ 955.789212][T22332] BTRFS info (device loop3): turning on async discard [ 955.836599][T22332] BTRFS info (device loop3): enabling free space tree [ 956.135656][ T5946] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 956.457163][T22410] loop2: detected capacity change from 0 to 1024 [ 956.486373][T22410] EXT4-fs: Ignoring removed oldalloc option [ 956.517790][T22410] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 956.520112][T22410] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 956.533536][T22410] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 956.533920][T22410] EXT4-fs (loop2): orphan cleanup on readonly fs [ 956.534225][T22410] EXT4-fs error (device loop2): ext4_free_blocks:6727: comm syz.2.6491: Freeing blocks not in datazone - block = 0, count = 4096 [ 956.540155][T22410] EXT4-fs (loop2): Remounting filesystem read-only [ 956.540260][T22410] EXT4-fs (loop2): 1 orphan inode deleted [ 956.542272][T22410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 956.646063][ T6082] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 956.823915][ T6082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 956.823974][ T6082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 956.831101][ T6082] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 956.831148][ T6082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.831186][ T6082] usb 2-1: Product: syz [ 956.831215][ T6082] usb 2-1: Manufacturer: syz [ 956.831243][ T6082] usb 2-1: SerialNumber: syz [ 956.834584][ T6082] usb 2-1: config 0 descriptor?? [ 956.836994][ T6082] hub 2-1:0.0: bad descriptor, ignoring hub [ 956.837031][ T6082] hub 2-1:0.0: probe with driver hub failed with error -5 [ 956.862937][ T6082] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input80 [ 956.874966][T22422] netlink: 'syz.0.6494': attribute type 1 has an invalid length. [ 956.875003][T22422] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6494'. [ 956.980275][ T5950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.039476][T22444] loop5: detected capacity change from 0 to 4096 [ 958.430044][T22428] infiniband syz0: set active [ 958.484829][T22428] infiniband syz0: added bond_slave_0 [ 958.548887][T22458] loop1: detected capacity change from 0 to 256 [ 958.579916][T22458] exfat: Deprecated parameter 'utf8' [ 958.597667][T22458] exfat: Deprecated parameter 'utf8' [ 958.603557][T22458] exfat: Deprecated parameter 'utf8' [ 958.641177][T22428] RDS/IB: syz0: added [ 958.647837][T22428] smc: adding ib device syz0 with port count 1 [ 958.654221][T22428] smc: ib device syz0 port 1 has no pnetid [ 958.660487][T22458] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 958.904797][T22458] exFAT-fs (loop1): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 958.914472][T22458] exFAT-fs (loop1): Filesystem has been set read-only [ 958.977952][T22465] loop5: detected capacity change from 0 to 4096 [ 959.124264][T22474] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 959.294478][T22477] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 959.954508][T22497] bpf: Bad value for 'mode' [ 960.656810][T22519] loop1: detected capacity change from 0 to 512 [ 960.695543][ T9208] usb 2-1: USB disconnect, device number 33 [ 960.717919][T22519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 960.820836][T22519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.883691][T22519] ext4 filesystem being mounted at /1059/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.977096][T22519] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:335: inode #15: comm syz.1.6542: verity file corrupted; can't find descriptor [ 961.019313][T22524] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.026750][T22524] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.069076][T22519] EXT4-fs (loop1): Remounting filesystem read-only [ 961.103061][T22519] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 961.314799][ T5951] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.333990][T22508] loop2: detected capacity change from 0 to 32768 [ 961.377260][T22508] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6535 (22508) [ 961.418599][T22524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.429086][T22508] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 961.454985][T22508] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 961.480101][T22524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.494869][T22508] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 961.666156][T22508] BTRFS info (device loop2): rebuilding free space tree [ 961.720465][T22508] BTRFS info (device loop2): disabling free space tree [ 961.771595][T22508] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 961.818063][T22508] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 961.857140][T22508] BTRFS info (device loop2): setting nodatasum [ 961.887021][T22508] BTRFS info (device loop2): allowing degraded mounts [ 961.917117][T22508] BTRFS info (device loop2): turning on async discard [ 961.937261][T22508] BTRFS info (device loop2): enabling disk space caching [ 961.971461][T22508] BTRFS info (device loop2): force clearing of disk cache [ 961.978622][T22508] BTRFS info (device loop2): force zlib compression, level 3 [ 962.011736][T22524] sit1: left allmulticast mode [ 962.049219][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.098337][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.118502][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.175961][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.195873][T22508] BTRFS info (device loop2): balance: start -sprofiles=system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=18446744073709547521,usage=4294963201..4294967295 [ 962.259029][T22508] BTRFS info (device loop2): balance: ended with status: 0 [ 962.529148][ T5950] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 963.087833][ T31] audit: type=1326 audit(2000524979.885:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5856f8f749 code=0x7ff00000 [ 963.184885][ T31] audit: type=1326 audit(2000524979.885:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5856f8f749 code=0x7ff00000 [ 963.288641][ T31] audit: type=1326 audit(2000524979.885:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5856f8f749 code=0x7ff00000 [ 963.298395][T22590] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 963.363849][ T31] audit: type=1326 audit(2000524979.885:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5856f8f749 code=0x7ff00000 [ 963.448795][ T31] audit: type=1326 audit(2000524979.885:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5856f8f749 code=0x7ff00000 [ 963.512182][ T31] audit: type=1326 audit(2000524979.885:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5856f8f749 code=0x7ff00000 [ 963.616493][ T787] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 963.625802][ T31] audit: type=1326 audit(2000524979.885:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5856f8f749 code=0x7ff00000 [ 963.670943][T22594] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.678361][T22594] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.687649][ T31] audit: type=1326 audit(2000524979.885:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5856f8f749 code=0x7ff00000 [ 963.764600][ T31] audit: type=1326 audit(2000524979.885:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5856f8f749 code=0x7ff00000 [ 963.795865][ T31] audit: type=1326 audit(2000524979.885:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22584 comm="syz.1.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5856f8f749 code=0x7ff00000 [ 963.795927][ T787] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 963.911724][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.923789][ T787] usb 1-1: Product: syz [ 963.934325][ T787] usb 1-1: Manufacturer: syz [ 963.940481][ T787] usb 1-1: SerialNumber: syz [ 963.971672][ T787] usb 1-1: config 0 descriptor?? [ 964.095499][T22594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.146254][T22594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.207354][ T787] mos7840 1-1:0.0: required endpoints missing [ 964.503348][ T5935] usb 1-1: USB disconnect, device number 11 [ 964.539167][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.560029][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.583365][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.622315][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.030745][T22605] loop3: detected capacity change from 0 to 32768 [ 965.059762][T22605] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6574 (22605) [ 965.161035][T22605] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 965.198465][T22605] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 965.235321][T22605] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 965.482899][T22605] BTRFS info (device loop3): rebuilding free space tree [ 965.551752][T22605] BTRFS info (device loop3): disabling free space tree [ 965.567879][T22605] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 965.616388][T22605] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 965.638990][T22605] BTRFS info (device loop3): setting nodatasum [ 965.639028][T22605] BTRFS info (device loop3): allowing degraded mounts [ 965.639058][T22605] BTRFS info (device loop3): turning on async discard [ 965.639087][T22605] BTRFS info (device loop3): enabling disk space caching [ 965.639117][T22605] BTRFS info (device loop3): force clearing of disk cache [ 965.639147][T22605] BTRFS info (device loop3): force zlib compression, level 3 [ 965.779642][T22605] BTRFS info (device loop3): balance: start -sprofiles=system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=18446744073709547521,usage=4294963201..4294967295 [ 965.779857][T22605] BTRFS info (device loop3): balance: ended with status: 0 [ 965.961013][ T5946] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 966.795917][T22659] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 967.193173][T22674] loop0: detected capacity change from 0 to 128 [ 967.254394][T22674] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 967.318921][T22674] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 967.922844][T22690] loop0: detected capacity change from 0 to 4096 [ 968.037460][T22694] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 968.095985][T22695] wg1: entered promiscuous mode [ 968.100935][T22695] wg1: entered allmulticast mode [ 968.162666][T22663] loop3: detected capacity change from 0 to 32768 [ 968.201502][T22663] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6594 (22663) [ 968.298989][T22663] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 968.339064][T22663] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 968.391763][T22663] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 968.567470][T22677] loop5: detected capacity change from 0 to 32768 [ 968.575645][T22677] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6602 (22677) [ 968.679347][T22677] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 968.731649][T22677] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 968.855634][T22663] BTRFS info (device loop3): rebuilding free space tree [ 968.920200][T22663] BTRFS info (device loop3): disabling free space tree [ 968.972661][T22663] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 969.007739][T22663] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 969.108541][T22663] BTRFS info (device loop3): allowing degraded mounts [ 969.125038][T22663] BTRFS info (device loop3): enabling ssd optimizations [ 969.148981][T22677] BTRFS info (device loop5): enabling ssd optimizations [ 969.159268][T22663] BTRFS info (device loop3): turning on async discard [ 969.164928][T22677] BTRFS info (device loop5): turning on async discard [ 969.172797][T22677] BTRFS info (device loop5): enabling free space tree [ 969.218610][T22663] BTRFS info (device loop3): enabling disk space caching [ 969.249830][T22663] BTRFS info (device loop3): force clearing of disk cache [ 969.290567][T22663] BTRFS info (device loop3): use zlib compression, level 3 [ 969.422013][ T5954] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 969.576975][T22663] BTRFS info (device loop3): balance: start -f -ssoft,usage=8,limit=0..131072 [ 969.718470][T22663] BTRFS info (device loop3): relocating block group 1048576 flags system [ 969.993631][T22762] loop4: detected capacity change from 0 to 2048 [ 970.042122][T22663] BTRFS info (device loop3): balance: ended with status: 0 [ 970.052646][T22762] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 970.197180][T22768] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 970.378136][ T5946] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 970.395745][T22720] loop1: detected capacity change from 0 to 32768 [ 970.440646][T22720] (syz.1.6617,22720,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 970.501508][T22720] (syz.1.6617,22720,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 970.695961][T22720] JBD2: Ignoring recovery information on journal [ 970.894041][T22720] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 971.548474][ T5951] ocfs2: Unmounting device (7,1) on (node local) [ 971.737242][T22772] loop0: detected capacity change from 0 to 32768 [ 971.775103][T22772] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6632 (22772) [ 971.872656][T22772] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 971.912512][T22772] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 972.239437][T22772] BTRFS info (device loop0): enabling ssd optimizations [ 972.282006][T22772] BTRFS info (device loop0): turning on async discard [ 972.355695][T22772] BTRFS info (device loop0): enabling free space tree [ 972.431332][T22833] comedi comedi4: bad chanlist[0]=0x04100003 chan=3 range length=2 [ 972.605413][ T5943] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 973.488835][T22870] loop5: detected capacity change from 0 to 128 [ 973.549512][T22870] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 973.676473][ T6082] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 973.868912][ T6082] usb 5-1: Using ep0 maxpacket: 8 [ 973.893262][ T6082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 973.942458][ T6082] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 973.957125][T22880] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6676'. [ 973.972492][ T6082] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 974.010234][ T6082] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.041836][T22887] netlink: 'syz.0.6677': attribute type 10 has an invalid length. [ 974.050348][T22887] hsr0: entered promiscuous mode [ 974.097151][ T6082] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 974.139330][ T6082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.149569][T22887] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 974.179976][ T6082] usb 5-1: Product: syz [ 974.191737][ T6082] usb 5-1: Manufacturer: syz [ 974.200588][ T6082] usb 5-1: SerialNumber: syz [ 974.211196][T22887] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 974.235211][T22867] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 974.259584][ T6082] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 974.275543][T22887] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 974.283908][ T6082] usbtest 5-1:1.0: Linux user mode ISO test driver [ 974.297941][ T6082] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 974.586141][ T6082] usb 5-1: USB disconnect, device number 37 [ 974.617299][ T9208] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 974.689434][T22903] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 974.809919][ T9208] usb 6-1: Using ep0 maxpacket: 16 [ 974.831156][ T9208] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 974.858784][ T9208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.889087][ T9208] usb 6-1: Product: syz [ 974.899472][ T9208] usb 6-1: Manufacturer: syz [ 974.914825][ T9208] usb 6-1: SerialNumber: syz [ 974.937813][ T9208] usb 6-1: config 0 descriptor?? [ 974.955682][ T9208] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 975.139518][T22920] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 975.159411][T22921] kAFS: unable to lookup cell '(,c¾ûL' [ 975.160957][T22922] loop3: detected capacity change from 0 to 16 [ 975.188353][ T9208] usb 6-1: clie_3_5_startup: get config number bad return length: 0 [ 975.195791][T22922] erofs (device loop3): mounted with root inode @ nid 36. [ 975.222368][ T9208] visor 6-1:0.0: probe with driver visor failed with error -5 [ 975.232155][T22922] erofs (device loop3): readahead error at folio 2 @ nid 89 [ 975.261157][ T5960] erofs (device loop3): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 8192 [ 975.277852][T22922] erofs (device loop3): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 4096 [ 975.304429][T22922] erofs (device loop3): read error -117 @ 0 of nid 89 [ 975.328183][ T31] kauditd_printk_skb: 66 callbacks suppressed [ 975.328208][ T31] audit: type=1800 audit(2000524991.334:151): pid=22922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6692" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 975.406213][ T9208] usb 6-1: USB disconnect, device number 26 [ 975.729185][ T6082] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 975.839008][T22938] loop1: detected capacity change from 0 to 2048 [ 975.860398][T22938] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 975.922061][ T6082] usb 3-1: Using ep0 maxpacket: 8 [ 975.955838][ T6082] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.988270][T22945] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 976.003128][ T6082] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 976.021527][ T6082] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 976.034891][ T6082] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 976.105311][ T6082] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 976.136767][ T6082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 976.144797][ T6082] usb 3-1: SerialNumber: syz [ 976.194236][T22928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 976.224227][ T6082] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 976.274899][ T6082] usb-storage 3-1:1.0: USB Mass Storage device detected [ 976.308083][ T6082] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 976.414073][ T6082] scsi host1: usb-storage 3-1:1.0 [ 976.823398][T22975] netlink: 'syz.1.6716': attribute type 1 has an invalid length. [ 977.247933][T22992] netlink: 'syz.5.6724': attribute type 49 has an invalid length. [ 977.515183][T23003] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6729'. [ 977.777361][T22958] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 978.758129][T23037] ip6t_srh: unknown srh match flags 4000 [ 978.766434][ T9208] usb 3-1: USB disconnect, device number 32 [ 978.913024][T23046] loop4: detected capacity change from 0 to 512 [ 978.976973][T23046] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.6750: bg 0: block 248: padding at end of block bitmap is not set [ 979.002903][T23046] Quota error (device loop4): write_blk: dquota write failed [ 979.010422][T23046] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 979.064689][T23046] EXT4-fs error (device loop4): ext4_acquire_dquot:6984: comm syz.4.6750: Failed to acquire dquot type 1 [ 979.093819][T23046] EXT4-fs (loop4): 1 truncate cleaned up [ 979.130031][T23046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.170064][T23046] ext4 filesystem being mounted at /1098/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 979.280098][T23046] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 979.357185][T23046] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 131074 [ 979.444093][T23046] EXT4-fs error (device loop4): ext4_acquire_dquot:6984: comm syz.4.6750: Failed to acquire dquot type 1 [ 979.723727][ T5948] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.016463][T23078] loop0: detected capacity change from 0 to 2048 [ 980.082580][T23078] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 980.479331][T23093] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 980.872741][ T6082] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 980.945179][T23065] loop2: detected capacity change from 0 to 40427 [ 980.993305][T23065] F2FS-fs (loop2): build fault injection rate: 771 [ 981.020441][T23065] F2FS-fs (loop2): invalid crc value [ 981.077026][ T6082] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 981.104616][ T6082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 981.148264][ T6082] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD [ 981.194669][ T6082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 981.245899][ T6082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 981.265493][ T6082] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 981.277597][ T6082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.303736][ T6082] usb 5-1: Product: syz [ 981.329665][ T6082] usb 5-1: Manufacturer: syz [ 981.346096][ T6082] usb 5-1: SerialNumber: syz [ 981.376560][ T6082] usb 5-1: config 0 descriptor?? [ 981.402634][T23118] loop5: detected capacity change from 0 to 1764 [ 981.406543][T23065] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 981.429663][ T6082] iguanair 5-1:0.0: failed to get version [ 981.451749][T23065] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 981.460116][ T6082] iguanair 5-1:0.0: probe with driver iguanair failed with error -90 [ 981.546015][T23118] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 981.603637][ T31] audit: type=1326 audit(2000524997.208:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23122 comm="syz.1.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5856f8f749 code=0x7ffc0000 [ 981.609057][ T6084] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 981.710069][ T31] audit: type=1326 audit(2000524997.236:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23122 comm="syz.1.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f5856f8f749 code=0x7ffc0000 [ 981.788786][ T31] audit: type=1326 audit(2000524997.376:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23122 comm="syz.1.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5856f8f749 code=0x7ffc0000 [ 981.803690][ T6082] usb 5-1: USB disconnect, device number 38 [ 981.938767][ T6084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 981.993374][ T6084] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 982.061452][ T6084] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 982.090161][ T6084] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 982.122194][ T6084] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 982.152397][ T6084] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.190250][ T6084] usb 1-1: config 0 descriptor?? [ 982.432663][ T6084] hdpvr 1-1:0.0: firmware version 0x8 dated [ 982.647760][ T6084] hdpvr 1-1:0.0: device init failed [ 982.668438][ T6084] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 982.701567][ T6084] usb 1-1: USB disconnect, device number 12 [ 982.802011][T23149] netlink: 'syz.5.6796': attribute type 10 has an invalid length. [ 982.831407][T23149] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6796'. [ 983.073883][T23159] netlink: 'syz.5.6800': attribute type 2 has an invalid length. [ 983.103424][T23159] netlink: 'syz.5.6800': attribute type 1 has an invalid length. [ 983.736954][T23177] ieee802154 phy0 wpan0: encryption failed: -22 [ 984.081393][T23153] loop1: detected capacity change from 0 to 32768 [ 984.146851][T23153] jfs_strtoUCS: char2uni returned -22. [ 984.178068][T23153] charset = euc-jp, char = 0xff [ 984.207738][T23155] loop3: detected capacity change from 0 to 32768 [ 984.241111][T23155] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 887d9942-e600-4c87-b6a7-9547099dc0cc [ 984.303162][T23155] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6795 (23155) [ 984.388603][T23155] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 984.444219][T23155] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 984.723691][T23155] BTRFS info (device loop3): enabling ssd optimizations [ 984.753649][T23155] BTRFS info (device loop3): turning on async discard [ 984.784171][T23155] BTRFS info (device loop3): enabling free space tree [ 985.193491][ T5946] BTRFS info (device loop3): last unmount of filesystem 887d9942-e600-4c87-b6a7-9547099dc0cc [ 985.291753][T23173] loop4: detected capacity change from 0 to 40427 [ 985.331471][T23173] F2FS-fs (loop4): build fault injection rate: 19 [ 985.337932][T23173] F2FS-fs (loop4): build fault injection type: 0x3bffd1 [ 985.469466][T23173] F2FS-fs (loop4): invalid crc value [ 985.517695][T23173] F2FS-fs (loop4): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4162/0xa7c0 [ 985.543801][T23173] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12) [ 985.599549][T23226] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6826'. [ 985.672044][T23226] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6826'. [ 985.771149][T23181] loop2: detected capacity change from 0 to 32768 [ 985.900456][T23181] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 986.144208][T23181] XFS (loop2): Ending clean mount [ 986.517418][ T5950] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 986.537281][ T31] audit: type=1326 audit(2000525001.801:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23257 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 986.607250][ T31] audit: type=1326 audit(2000525001.801:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23257 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 986.631833][ T31] audit: type=1326 audit(2000525001.829:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23257 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 986.657242][ T31] audit: type=1326 audit(2000525001.829:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23257 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 986.679995][ T31] audit: type=1326 audit(2000525001.829:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23257 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 987.467162][T23280] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 987.895575][ T9208] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 987.917478][T23252] loop1: detected capacity change from 0 to 32768 [ 987.943765][T23252] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6833 (23252) [ 987.983309][T23294] netlink: 'syz.5.6853': attribute type 3 has an invalid length. [ 988.017985][T23294] netlink: 'syz.5.6853': attribute type 1 has an invalid length. [ 988.047477][T23252] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 988.068011][T23294] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6853'. [ 988.080644][T23296] program syz.0.6854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 988.099502][T23252] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 988.111965][ T9208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 988.118243][T23252] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 988.123222][T23294] NCSI netlink: No device for ifindex 0 [ 988.151816][ T9208] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 988.161526][ T9208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 988.226666][ T9208] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 988.238051][ T9208] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 988.247136][ T9208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.281856][ T9208] usb 5-1: config 0 descriptor?? [ 988.394820][T23252] BTRFS info (device loop1): rebuilding free space tree [ 988.446639][T23252] BTRFS info (device loop1): disabling free space tree [ 988.456108][T23252] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 988.466472][T23252] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 988.481641][T23252] BTRFS info (device loop1): setting nodatasum [ 988.489028][T23252] BTRFS info (device loop1): allowing degraded mounts [ 988.496232][T23252] BTRFS info (device loop1): turning on async discard [ 988.503226][T23252] BTRFS info (device loop1): enabling disk space caching [ 988.514478][T23252] BTRFS info (device loop1): force clearing of disk cache [ 988.544756][ T9208] hdpvr 5-1:0.0: firmware version 0x1e dated »–¸&S¶1;¨“ÃO·X^„œ wÒÎ–Š g/ƒ µn#»† [ 988.554682][T23252] BTRFS info (device loop1): force zlib compression, level 3 [ 988.622342][ T787] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 988.669680][T23252] BTRFS info (device loop1): balance: start -sprofiles=system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=18446744073709547521,usage=4294963201..4294967295 [ 988.752042][T23252] BTRFS info (device loop1): balance: ended with status: 0 [ 988.775014][ T9208] hdpvr 5-1:0.0: device init failed [ 988.780343][ T9208] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 988.809011][ T787] usb 6-1: Using ep0 maxpacket: 8 [ 988.814017][ T9208] usb 5-1: USB disconnect, device number 39 [ 988.831791][ T787] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 988.853499][ T787] usb 6-1: config 0 has no interface number 0 [ 988.876049][ T787] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 988.895318][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.914641][T23291] loop2: detected capacity change from 0 to 32768 [ 988.929506][ T787] usb 6-1: Product: syz [ 988.944498][ T787] usb 6-1: Manufacturer: syz [ 988.954137][T23291] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 00fd2727-c1c2-424c-a41f-1232b1e6ab15 [ 988.959947][ T787] usb 6-1: SerialNumber: syz [ 988.992942][ T787] usb 6-1: config 0 descriptor?? [ 988.996072][T23291] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6851 (23291) [ 989.015914][ T5951] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 989.111665][T23291] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 989.144667][T23291] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 989.210211][T23291] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 989.248567][ T787] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 989.315821][ T787] usb 6-1: USB disconnect, device number 27 [ 989.499506][T23291] BTRFS info (device loop2): rebuilding free space tree [ 989.572372][T23291] BTRFS info (device loop2): disabling free space tree [ 989.598297][T23291] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 989.635927][T23291] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 989.691197][T23291] BTRFS info (device loop2): allowing degraded mounts [ 989.761907][T23291] BTRFS info (device loop2): enabling ssd optimizations [ 989.771821][T23291] BTRFS info (device loop2): turning on async discard [ 989.801425][T23291] BTRFS info (device loop2): enabling disk space caching [ 989.808499][T23291] BTRFS info (device loop2): force clearing of disk cache [ 989.865794][T23291] BTRFS info (device loop2): use zlib compression, level 3 [ 990.127461][T23291] BTRFS info (device loop2): balance: start -f -ssoft,usage=8,limit=0..131072 [ 990.145032][T23291] BTRFS info (device loop2): relocating block group 1048576 flags system [ 990.181048][T23364] netlink: 756 bytes leftover after parsing attributes in process `syz.4.6872'. [ 990.300297][T23291] BTRFS info (device loop2): balance: ended with status: 0 [ 990.644643][ T5950] BTRFS info (device loop2): last unmount of filesystem 00fd2727-c1c2-424c-a41f-1232b1e6ab15 [ 990.871707][T23381] deleting an unspecified loop device is not supported. [ 991.572905][ T9208] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 991.775747][ T9208] usb 4-1: Using ep0 maxpacket: 8 [ 991.795668][ T9208] usb 4-1: unable to get BOS descriptor or descriptor too short [ 991.840497][ T9208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 147, setting to 64 [ 991.913209][ T9208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 991.945937][ T9208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 992.019337][ T9208] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 992.062050][ T9208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 992.108800][ T9208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 992.160116][ T9208] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 992.206925][ T9208] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 992.255130][ T9208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.280538][T23376] loop5: detected capacity change from 0 to 40427 [ 992.285752][ T9208] usb 4-1: Product: syz [ 992.296536][ T9208] usb 4-1: Manufacturer: syz [ 992.307247][ T9208] usb 4-1: SerialNumber: syz [ 992.323922][ T9208] usb 4-1: config 0 descriptor?? [ 992.329288][T23376] F2FS-fs (loop5): build fault injection rate: 771 [ 992.353335][T23376] F2FS-fs (loop5): invalid crc value [ 992.360542][T23393] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 992.404667][ T9208] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 992.620422][T23421] loop0: detected capacity change from 0 to 1024 [ 992.634872][ T9208] usb 4-1: USB disconnect, device number 36 [ 992.691468][T23421] hfsplus: invalid length 256 has been corrected to 255 [ 992.725056][T23376] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 992.731553][T23421] hfsplus: invalid length 256 has been corrected to 255 [ 992.786974][T23376] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 992.793533][T23421] hfsplus: invalid length 256 has been corrected to 255 [ 992.913118][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.038136][ T50] hfsplus: b-tree write err: -5, ino 4 [ 993.495683][T23409] loop1: detected capacity change from 0 to 32768 [ 993.590528][T23409] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 993.722007][T23409] XFS (loop1): Ending clean mount [ 993.768631][T23434] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.775992][T23434] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.780099][T23409] XFS (loop1): Quotacheck needed: Please wait. [ 993.893668][T23409] XFS (loop1): Quotacheck: Done. [ 994.189521][ T5951] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 994.989968][T23474] loop2: detected capacity change from 0 to 1024 [ 995.027367][T23474] EXT4-fs (loop2): orphan cleanup on readonly fs [ 995.045094][T23474] EXT4-fs (loop2): 1 truncate cleaned up [ 995.126975][T23474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 995.314435][ T5950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.545666][T23434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.687639][T23434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.521201][T23507] loop2: detected capacity change from 0 to 32768 [ 996.535578][T23507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6935 (23507) [ 996.603222][T23507] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 996.626162][T23507] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 996.776891][T23507] BTRFS info (device loop2): enabling ssd optimizations [ 996.795058][T23507] BTRFS info (device loop2): turning on async discard [ 996.807655][T23507] BTRFS info (device loop2): enabling free space tree [ 996.815340][T23436] netlink: 'syz.0.6907': attribute type 13 has an invalid length. [ 996.893817][ T6579] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.940805][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.994335][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.003288][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.078925][ T5950] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 997.156253][T23529] netlink: 'syz.3.6940': attribute type 1 has an invalid length. [ 997.205333][T23529] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6940'. [ 997.873255][T23547] binder: 23543:23547 ioctl c0306201 200000000100 returned -22 [ 998.460511][ T8413] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 998.480360][T23526] loop1: detected capacity change from 0 to 32768 [ 998.546912][T23526] ERROR: (device loop1): diAllocAG: nfreeinos = 0, but iag on freelist [ 998.546912][T23526] [ 998.619669][T23526] ERROR: (device loop1): remounting filesystem as read-only [ 998.627656][T23526] ialloc: diAlloc returned -5! [ 998.660849][ T8413] usb 3-1: Using ep0 maxpacket: 16 [ 998.690269][ T8413] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.734034][ T8413] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 998.778621][ T8413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.821163][ T8413] usb 3-1: Product: syz [ 998.826128][ T8413] usb 3-1: Manufacturer: syz [ 998.830736][ T8413] usb 3-1: SerialNumber: syz [ 998.892070][ T8413] usb 3-1: config 0 descriptor?? [ 998.955648][ T8413] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 998.974630][ T8413] gspca_stv06xx: st6422 sensor detected [ 999.109845][T23480] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 999.291821][T23480] usb 6-1: Using ep0 maxpacket: 8 [ 999.310639][T23480] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 999.340881][T23480] usb 6-1: config 179 has no interface number 0 [ 999.381658][T23480] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 999.413650][T23590] loop4: detected capacity change from 0 to 256 [ 999.431629][T23480] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 999.449001][T23590] vfat: Bad value for 'dmask' [ 999.487598][T23480] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 999.507948][ T8413] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 999.550699][ T8413] usb 3-1: USB disconnect, device number 33 [ 999.558821][T23480] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 999.572985][T23480] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 999.635193][T23480] usb 6-1: config 179 interface 65 has no altsetting 0 [ 999.642117][T23480] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 999.711803][T23480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.819949][T23480] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input84 [ 999.999335][T23574] loop3: detected capacity change from 0 to 32768 [ 1000.057843][T23574] (syz.3.6960,23574,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1000.111098][T23574] (syz.3.6960,23574,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1000.126064][T23603] loop0: detected capacity change from 0 to 128 [ 1000.208764][T23574] JBD2: Ignoring recovery information on journal [ 1000.216081][T23603] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1000.258732][T23603] ext4 filesystem being mounted at /1127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1000.288407][ T113] usb 6-1: USB disconnect, device number 28 [ 1000.288578][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1000.390113][T23574] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1000.392703][T23603] EXT4-fs warning (device loop0): verify_group_input:136: Cannot add at group 7 (only 1 groups) [ 1000.654936][T23615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6979'. [ 1000.684345][ T5943] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1000.927741][T23621] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6982'. [ 1000.946515][ T5946] ocfs2: Unmounting device (7,3) on (node local) [ 1001.029084][T23625] loop1: detected capacity change from 0 to 128 [ 1001.522792][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1001.874084][T23646] loop0: detected capacity change from 0 to 4096 [ 1001.953012][T23646] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1002.007076][T23480] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1002.082474][T23646] ntfs3(loop0): ino=19, mi_enum_attr [ 1002.146837][T23646] ntfs3(loop0): failed to convert "c46c" to maciceland [ 1002.170647][T23480] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1002.183836][T23646] ntfs3(loop0): ino=20, mi_enum_attr [ 1002.190147][T23480] usb 4-1: config 0 has no interface number 0 [ 1002.218745][T23480] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1002.256962][T23480] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1002.272292][T23480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.287667][T23664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7003'. [ 1002.301140][T23480] usb 4-1: Product: syz [ 1002.316884][T23480] usb 4-1: Manufacturer: syz [ 1002.343629][T23480] usb 4-1: SerialNumber: syz [ 1002.367830][T23480] usb 4-1: config 0 descriptor?? [ 1002.396018][T23647] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1002.412995][T23480] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1002.461172][T23480] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1002.599810][T23677] loop5: detected capacity change from 0 to 64 [ 1002.653039][T23480] scsi host1: usb-storage 4-1:0.20 [ 1002.798908][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1002.920507][ T113] usb 4-1: USB disconnect, device number 37 [ 1002.969590][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1002.989336][ T9] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1002.997804][T23661] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1003.048898][ T9] usb 3-1: config 0 has no interface number 0 [ 1003.087249][ T9] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1003.129779][ T9] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1003.148760][T23691] loop4: detected capacity change from 0 to 8 [ 1003.150202][ T9] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1003.182503][ T9] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1003.197027][T23693] CIFS mount error: No usable UNC path provided in device string! [ 1003.197027][T23693] [ 1003.214179][ T9] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1003.237511][T23693] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1003.246379][ T9] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1003.266522][ T9] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1003.317309][ T9] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 1003.350089][ T9] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1003.382412][ T9] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1003.402180][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.428074][ T9] usb 3-1: Product: syz [ 1003.439101][ T9] usb 3-1: Manufacturer: syz [ 1003.453517][ T9] usb 3-1: SerialNumber: syz [ 1003.485215][ T9] usb 3-1: config 0 descriptor?? [ 1003.503350][T23672] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1003.550905][T23672] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1003.587430][ T9] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1003.616647][ T9] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1003.651452][ T9] scsi host1: microtekX6 [ 1003.850857][ T113] usb 3-1: USB disconnect, device number 34 [ 1004.632240][T23703] loop5: detected capacity change from 0 to 32768 [ 1004.725477][T23703] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 1004.761736][T23703] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 1004.838220][T23736] xt_ecn: cannot match TCP bits for non-tcp packets [ 1004.859588][T23703] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 1004.886411][ T113] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 1004.894020][ T113] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 1005.171020][ T113] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 259ms [ 1005.210629][ T113] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 1005.238633][T23703] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 1005.240158][T23748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7042'. [ 1005.321340][T23748] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7042'. [ 1005.388038][T23748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7042'. [ 1005.949651][T23764] loop3: detected capacity change from 0 to 1024 [ 1005.987014][T23766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1006.231777][ T1003] hfsplus: b-tree write err: -5, ino 4 [ 1006.357706][T23776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7056'. [ 1006.635996][T23754] loop2: detected capacity change from 0 to 32768 [ 1006.666075][T23786] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1006.677485][T23754] (syz.2.7044,23754,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1006.733403][T23754] (syz.2.7044,23754,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1006.872197][T23754] JBD2: Ignoring recovery information on journal [ 1007.079227][T23754] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1007.512207][ T5950] ocfs2: Unmounting device (7,2) on (node local) [ 1007.666528][T23808] loop0: detected capacity change from 0 to 4096 [ 1007.717767][T23808] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1007.800256][T23808] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 1007.853320][T23808] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 1008.003962][T23797] loop1: detected capacity change from 0 to 32768 [ 1008.012171][ T12] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 1008.028241][ T5943] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 1008.035170][ T5943] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1008.048916][T23797] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7066 (23797) [ 1008.063001][ T5943] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 1008.073138][ T12] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 1008.104482][T23797] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1008.122298][T23797] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1008.131548][T23797] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1008.223815][T23825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.386260][T23797] BTRFS info (device loop1): rebuilding free space tree [ 1008.445358][T23843] loop5: detected capacity change from 0 to 64 [ 1008.491468][T23797] BTRFS info (device loop1): disabling free space tree [ 1008.521204][T23797] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1008.572198][T23797] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1008.641727][T23797] BTRFS info (device loop1): allowing degraded mounts [ 1008.649396][T23850] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7084'. [ 1008.659303][T23797] BTRFS info (device loop1): enabling ssd optimizations [ 1008.666666][T23797] BTRFS info (device loop1): turning on async discard [ 1008.684518][T23797] BTRFS info (device loop1): enabling disk space caching [ 1008.699464][T23797] BTRFS info (device loop1): force clearing of disk cache [ 1008.710671][T23797] BTRFS info (device loop1): use zlib compression, level 3 [ 1008.761298][T23852] netlink: 'syz.0.7085': attribute type 1 has an invalid length. [ 1008.798562][T23852] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7085'. [ 1008.864989][T23797] BTRFS info (device loop1): balance: start -f -ssoft,usage=8,limit=0..131072 [ 1008.879266][T23797] BTRFS info (device loop1): relocating block group 1048576 flags system [ 1008.937320][T23797] BTRFS info (device loop1): balance: ended with status: 0 [ 1009.155722][ T5951] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1009.230392][T23862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1009.310411][T23866] openvswitch: netlink: IP tunnel dst address not specified [ 1009.554931][ T6138] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1009.738458][ T6138] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1009.769857][ T6138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.777910][ T6138] usb 3-1: Product: syz [ 1009.799384][ T6138] usb 3-1: Manufacturer: syz [ 1009.822021][ T6138] usb 3-1: SerialNumber: syz [ 1009.838126][ T6138] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1009.864753][ T6138] r8152-cfgselector 3-1: config 0 descriptor?? [ 1010.093078][T23889] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1010.352464][T23896] loop0: detected capacity change from 0 to 64 [ 1010.366376][ T113] r8152-cfgselector 3-1: USB disconnect, device number 35 [ 1010.408396][T23896] syz.0.7106: attempt to access beyond end of device [ 1010.408396][T23896] loop0: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 1010.473131][T23896] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 1010.518777][T23897] Cannot find del_set index 286 as target [ 1010.546469][T23896] Trying to free block not in datazone [ 1010.678408][T23902] loop1: detected capacity change from 0 to 16 [ 1010.709953][T23902] erofs (device loop1): mounted with root inode @ nid 36. [ 1010.786477][T23902] CIFS mount error: No usable UNC path provided in device string! [ 1010.786477][T23902] [ 1010.826966][T23902] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1011.387775][T23893] loop5: detected capacity change from 0 to 32768 [ 1011.399224][T23917] loop3: detected capacity change from 0 to 1024 [ 1011.440183][T23893] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7105 (23893) [ 1011.453293][T23917] hfsplus: Filesystem is marked locked, mounting read-only. [ 1011.494093][T23893] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1011.531002][T23893] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 1011.565934][T23893] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1011.884370][T23893] BTRFS info (device loop5): rebuilding free space tree [ 1011.945147][T23893] BTRFS info (device loop5): disabling free space tree [ 1011.981626][T23893] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1012.014676][T23893] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1012.068763][T23893] BTRFS info (device loop5): allowing degraded mounts [ 1012.075580][T23893] BTRFS info (device loop5): enabling ssd optimizations [ 1012.127855][T23893] BTRFS info (device loop5): turning on async discard [ 1012.144630][T23893] BTRFS info (device loop5): enabling disk space caching [ 1012.155421][T23893] BTRFS info (device loop5): force clearing of disk cache [ 1012.176272][T23893] BTRFS info (device loop5): use zlib compression, level 3 [ 1012.302366][T23954] syz.2.7126 uses old SIOCAX25GETINFO [ 1012.397339][T23924] loop0: detected capacity change from 0 to 32768 [ 1012.407777][T23893] BTRFS info (device loop5): balance: start -f -ssoft,usage=8,limit=0..131072 [ 1012.422791][T23893] BTRFS info (device loop5): relocating block group 1048576 flags system [ 1012.476171][T23893] BTRFS info (device loop5): balance: ended with status: 0 [ 1012.494459][T23924] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1012.599230][T23924] XFS (loop0): Ending clean mount [ 1012.665644][T23924] XFS (loop0): Quotacheck needed: Please wait. [ 1012.775445][T23924] XFS (loop0): Quotacheck: Done. [ 1012.812133][ T5954] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1013.053989][T23975] nft_compat: unsupported protocol 5 [ 1013.067955][ T5943] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1013.767007][ T113] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1013.944151][ T113] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1013.970380][ T113] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1013.991599][ T113] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1014.031591][ T113] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1014.063199][ T113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.093712][ T113] usb 6-1: Product: syz [ 1014.113158][ T113] usb 6-1: Manufacturer: syz [ 1014.160181][ T113] usb 6-1: SerialNumber: syz [ 1014.182189][ T113] usb 6-1: config 0 descriptor?? [ 1014.205517][T23985] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1014.235441][T23985] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1014.273323][ T113] usb 6-1: ucan: probing device on interface #0 [ 1014.362631][T24008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1014.491405][ T113] usb 6-1: ucan: device protocol version 0 is not supported [ 1014.515463][ T113] usb 6-1: ucan: probe failed; try to update the device firmware [ 1014.568862][ T6138] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1014.729114][ T6138] usb 2-1: Using ep0 maxpacket: 8 [ 1014.737731][ T113] usb 6-1: USB disconnect, device number 29 [ 1014.745943][ T6138] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1014.761206][ T6138] usb 2-1: config 179 has no interface number 0 [ 1014.776496][ T6138] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1014.811388][ T6138] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1014.842176][ T6138] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1014.868063][ T6138] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1014.878238][ T6138] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1014.912797][ T6138] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1014.925548][ T6138] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1014.945760][ T6138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.963571][T24002] loop0: detected capacity change from 0 to 32768 [ 1014.982946][T24002] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7145 (24002) [ 1015.010752][ T6138] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input86 [ 1015.075970][T24002] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1015.092096][T24002] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1015.124844][T24002] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1015.275610][T24033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7157'. [ 1015.360532][T24002] BTRFS info (device loop0): rebuilding free space tree [ 1015.422357][T24002] BTRFS info (device loop0): disabling free space tree [ 1015.453386][ T6138] usb 2-1: USB disconnect, device number 34 [ 1015.459480][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1015.480224][T24002] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1015.522183][T24002] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1015.571847][T24002] BTRFS info (device loop0): allowing degraded mounts [ 1015.606458][T24002] BTRFS info (device loop0): enabling ssd optimizations [ 1015.613656][T24048] Unsupported ieee802154 address type: 0 [ 1015.648217][T24002] BTRFS info (device loop0): turning on async discard [ 1015.693511][T24002] BTRFS info (device loop0): enabling disk space caching [ 1015.733135][T24002] BTRFS info (device loop0): force clearing of disk cache [ 1015.776855][T24002] BTRFS info (device loop0): use zlib compression, level 3 [ 1015.891304][T24002] BTRFS info (device loop0): balance: start -f -ssoft,usage=8,limit=0..131072 [ 1015.915759][ T113] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1015.941517][T24002] BTRFS info (device loop0): relocating block group 1048576 flags system [ 1016.042576][T24002] BTRFS info (device loop0): balance: ended with status: 0 [ 1016.086799][ T113] usb 3-1: Using ep0 maxpacket: 16 [ 1016.121949][ T113] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1016.153213][ T113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1016.191456][ T113] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1016.204925][ T5943] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1016.251641][ T113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.279236][ T113] usb 3-1: Product: syz [ 1016.283704][ T113] usb 3-1: Manufacturer: syz [ 1016.317409][ T113] usb 3-1: SerialNumber: syz [ 1016.338070][ T113] usb 3-1: config 0 descriptor?? [ 1016.376556][ T113] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1016.582424][T24066] netlink: 'syz.1.7171': attribute type 1 has an invalid length. [ 1016.596700][T23480] usb 3-1: USB disconnect, device number 36 [ 1016.640613][T24066] netlink: 'syz.1.7171': attribute type 2 has an invalid length. [ 1016.643029][T24070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7172'. [ 1017.740098][T24089] loop2: detected capacity change from 0 to 32768 [ 1017.820140][T24089] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1017.866305][T24089] XFS (loop2): Ending clean mount [ 1017.888725][T24089] XFS (loop2): Quotacheck needed: Please wait. [ 1017.920350][T24089] XFS (loop2): Quotacheck: Done. [ 1017.976646][ T5950] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1020.656488][T24105] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7182'. [ 1020.882774][T24112] syz.3.7187 (24112): /proc/24110/oom_adj is deprecated, please use /proc/24110/oom_score_adj instead. [ 1020.916375][T24113] loop0: detected capacity change from 0 to 1024 [ 1020.967670][T24113] EXT4-fs: Ignoring removed bh option [ 1021.009862][T24113] EXT4-fs: inline encryption not supported [ 1021.034420][T24113] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1021.057751][ T5944] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1021.068022][ T5944] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1021.078917][T24113] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1021.087604][ T5944] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1021.095897][ T5944] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1021.105111][ T5944] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1021.137702][T24113] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.7186: lblock 2 mapped to illegal pblock 2 (length 1) [ 1021.187693][ T5960] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1021.195089][ T5960] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1021.203224][ T5960] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1021.211870][ T5960] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1021.220674][ T5960] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1021.259340][T24113] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1021.306968][T24113] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.7186: lblock 0 mapped to illegal pblock 48 (length 1) [ 1021.399380][T24113] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1021.442981][T24113] EXT4-fs error (device loop0): ext4_acquire_dquot:6984: comm syz.0.7186: Failed to acquire dquot type 0 [ 1021.496699][T24113] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1021.569746][T24113] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.7186: mark_inode_dirty error [ 1021.638337][T24113] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 1021.717917][T24113] EXT4-fs (loop0): 1 orphan inode deleted [ 1021.736514][T24113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.743250][ T4325] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 1021.804258][ T4325] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1021.814653][ T4325] EXT4-fs error (device loop0): ext4_release_dquot:7020: comm kworker/u8:13: Failed to release dquot type 0 [ 1021.860653][T24138] loop3: detected capacity change from 0 to 256 [ 1021.883658][ T4325] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm kworker/u8:13: lblock 2 mapped to illegal pblock 2 (length 1) [ 1021.926544][T24138] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd6e00b17, utbl_chksum : 0xe619d30d) [ 1021.975932][ T4325] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1022.002858][ T4325] EXT4-fs error (device loop0): ext4_write_dquot:6964: comm kworker/u8:13: Failed to commit dquot type 0 [ 1022.064000][T24138] exFAT-fs (loop3): valid_size(4096) is greater than size(0) [ 1022.064162][ T4325] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 1022.103238][ T5943] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.145256][T24109] loop2: detected capacity change from 0 to 32768 [ 1022.152812][ T5943] EXT4-fs error (device loop0): __ext4_get_inode_loc:4829: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1022.185668][T24109] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7184 (24109) [ 1022.217534][ T5943] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 1022.240902][T24109] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1022.268196][ T5943] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 1022.321430][T24109] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1022.416938][T24136] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1022.483197][T24136] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 1022.620589][T24109] BTRFS info (device loop2): enabling ssd optimizations [ 1022.661525][T24109] BTRFS info (device loop2): turning on flush-on-commit [ 1022.668927][T24109] BTRFS info (device loop2): turning on async discard [ 1022.710806][ T31] audit: type=1326 audit(2000525035.652:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.0.7206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 1022.768857][T24167] tmpfs: Group quota inode hardlimit too large. [ 1022.775402][T24109] BTRFS info (device loop2): enabling free space tree [ 1022.789377][T24109] BTRFS info (device loop2): force zlib compression, level 3 [ 1022.797207][ T31] audit: type=1326 audit(2000525035.652:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.0.7206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 1022.820239][ T31] audit: type=1326 audit(2000525035.652:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24165 comm="syz.0.7206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 1022.825517][T24109] BTRFS info (device loop2): max_inline set to 4096 [ 1022.982670][T24173] loop0: detected capacity change from 0 to 128 [ 1023.071315][T24173] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1023.125623][T24173] ext4 filesystem being mounted at /1173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.225971][T24118] chnl_net:caif_netlink_parms(): no params data found [ 1023.240300][T24173] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.7208: No space for directory leaf checksum. Please run e2fsck -D. [ 1023.312126][T24173] EXT4-fs error (device loop0): __ext4_find_entry:1624: inode #2: comm syz.0.7208: checksumming directory block 0 [ 1023.356316][ T5950] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1023.411360][ T5960] Bluetooth: hci6: command tx timeout [ 1023.730469][ T5943] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1023.880518][T24192] loop1: detected capacity change from 0 to 2048 [ 1023.915446][T24192] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1023.965373][T24194] loop5: detected capacity change from 0 to 256 [ 1023.998100][T24195] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1024.044597][T24192] NILFS (loop1): the device already has a read/write mount. [ 1024.080283][T24194] FAT-fs (loop5): Directory bread(block 64) failed [ 1024.110802][T24118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.129890][T24194] FAT-fs (loop5): Directory bread(block 65) failed [ 1024.136553][T24194] FAT-fs (loop5): Directory bread(block 66) failed [ 1024.149930][T24118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.169799][T24194] FAT-fs (loop5): Directory bread(block 67) failed [ 1024.181116][T24118] bridge_slave_0: entered allmulticast mode [ 1024.193338][T24194] FAT-fs (loop5): Directory bread(block 68) failed [ 1024.199923][T24194] FAT-fs (loop5): Directory bread(block 69) failed [ 1024.204462][T24118] bridge_slave_0: entered promiscuous mode [ 1024.252443][T24118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.274260][T24194] FAT-fs (loop5): Directory bread(block 70) failed [ 1024.291549][T24118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.298778][T24194] FAT-fs (loop5): Directory bread(block 71) failed [ 1024.305434][T24194] FAT-fs (loop5): Directory bread(block 72) failed [ 1024.342603][T24118] bridge_slave_1: entered allmulticast mode [ 1024.385188][T24118] bridge_slave_1: entered promiscuous mode [ 1024.389936][T24194] FAT-fs (loop5): Directory bread(block 73) failed [ 1024.423393][T24201] netlink: 'syz.1.7219': attribute type 10 has an invalid length. [ 1024.473419][T24203] loop0: detected capacity change from 0 to 16 [ 1024.514351][T24203] erofs (device loop0): mounted with root inode @ nid 36. [ 1024.542327][T24203] erofs (device loop0): xattr_isize 12 of nid 46 is not supported yet [ 1024.568185][T24201] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1024.642988][T24185] loop3: detected capacity change from 0 to 32768 [ 1024.711619][T24118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.747929][T24185] ERROR: (device loop3): diAllocAG: numfree > numinos [ 1024.747929][T24185] [ 1024.820033][T24118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.841304][T24185] ialloc: diAlloc returned -5! [ 1024.877464][T24207] siw: device registration error -23 [ 1025.010448][T24212] loop5: detected capacity change from 0 to 164 [ 1025.161265][T24212] Symlink component flag not implemented [ 1025.197362][T24212] Symlink component flag not implemented (7) [ 1025.201425][T24118] team0: Port device team_slave_0 added [ 1025.330399][T24118] team0: Port device team_slave_1 added [ 1025.371560][T24221] loop2: detected capacity change from 0 to 256 [ 1025.520256][T24221] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1025.604638][T24118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.639918][ T5960] Bluetooth: hci6: command tx timeout [ 1025.656911][T24118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.687544][T24118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.869075][T24227] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1025.890973][T24118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.897925][T24118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.997185][T24118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.327504][ T31] audit: type=1400 audit(2000525039.029:163): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=24240 comm="syz.5.7239" [ 1026.370114][T24118] hsr_slave_0: entered promiscuous mode [ 1026.406008][T24118] hsr_slave_1: entered promiscuous mode [ 1026.434158][T24118] debugfs: 'hsr0' already exists in 'hsr' [ 1026.456677][T24118] Cannot create hsr debugfs directory [ 1026.775141][T24254] loop2: detected capacity change from 0 to 164 [ 1026.830605][T24254] Unable to read rock-ridge attributes [ 1026.879258][T24257] loop1: detected capacity change from 0 to 16 [ 1026.921095][T24257] erofs (device loop1): mounted with root inode @ nid 36. [ 1027.120552][T24219] loop3: detected capacity change from 0 to 32768 [ 1027.180233][T24219] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 1027.260380][T24219] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 1027.334710][T24219] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 1027.375195][T24219] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6 [ 1027.408653][T24219] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: H: s:SH f:eEcH e:0 p:0 [(none)] gfs2_fill_super+0x1d3f/0x2f90 [ 1027.455987][T24219] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 1027.468757][T24219] CPU: 1 UID: 0 PID: 24219 Comm: syz.3.7226 Not tainted syzkaller #0 PREEMPT(full) [ 1027.468806][T24219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1027.468830][T24219] Call Trace: [ 1027.468842][T24219] [ 1027.468856][T24219] dump_stack_lvl+0x16c/0x1f0 [ 1027.468920][T24219] gfs2_withdraw+0xc6/0x1d0 [ 1027.468967][T24219] gfs2_jdesc_check+0x2b0/0x2f0 [ 1027.469028][T24219] init_inodes+0x14ee/0x2ce0 [ 1027.469095][T24219] ? __pfx_init_inodes+0x10/0x10 [ 1027.469153][T24219] ? gfs2_fill_super+0x1d3f/0x2f90 [ 1027.469198][T24219] ? init_sb+0xa50/0x10d0 [ 1027.469253][T24219] ? __pfx_snprintf+0x10/0x10 [ 1027.469326][T24219] ? gfs2_fill_super+0x1d3f/0x2f90 [ 1027.469371][T24219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.469414][T24219] gfs2_fill_super+0x1d3f/0x2f90 [ 1027.469480][T24219] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1027.469534][T24219] ? gfs2_fill_super+0x19ba/0x2f90 [ 1027.469579][T24219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.469620][T24219] ? find_held_lock+0x2b/0x80 [ 1027.469673][T24219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.469717][T24219] ? set_blocksize+0x406/0x500 [ 1027.469766][T24219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.469807][T24219] ? sb_set_blocksize+0xfe/0x320 [ 1027.469852][T24219] ? get_tree_bdev_flags+0x38c/0x620 [ 1027.469889][T24219] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1027.469934][T24219] get_tree_bdev_flags+0x38c/0x620 [ 1027.469972][T24219] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1027.470022][T24219] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1027.470061][T24219] ? vfs_parse_fs_qstr+0x144/0x1c0 [ 1027.470120][T24219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.470166][T24219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.470210][T24219] ? apparmor_capable+0x1d7/0x4e0 [ 1027.470253][T24219] gfs2_get_tree+0x4e/0x280 [ 1027.470304][T24219] vfs_get_tree+0x8e/0x330 [ 1027.470362][T24219] path_mount+0x7bf/0x23a0 [ 1027.470416][T24219] ? rcu_is_watching+0x12/0xc0 [ 1027.470456][T24219] ? __pfx_path_mount+0x10/0x10 [ 1027.470512][T24219] ? kmem_cache_free+0x2d8/0x770 [ 1027.470571][T24219] ? putname+0xf5/0x1a0 [ 1027.470629][T24219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.470672][T24219] ? putname+0xf5/0x1a0 [ 1027.470727][T24219] ? __x64_sys_mount+0x293/0x310 [ 1027.470785][T24219] __x64_sys_mount+0x293/0x310 [ 1027.470840][T24219] ? __pfx___x64_sys_mount+0x10/0x10 [ 1027.470892][T24219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.470939][T24219] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.470994][T24219] do_syscall_64+0xcd/0xf80 [ 1027.471055][T24219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.471092][T24219] RIP: 0033:0x7f3f97f90eea [ 1027.471121][T24219] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1027.471157][T24219] RSP: 002b:00007f3f98ef8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1027.471191][T24219] RAX: ffffffffffffffda RBX: 00007f3f98ef8ef0 RCX: 00007f3f97f90eea [ 1027.471216][T24219] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f3f98ef8eb0 [ 1027.471240][T24219] RBP: 0000200000000000 R08: 00007f3f98ef8ef0 R09: 000000000000881d [ 1027.471264][T24219] R10: 000000000000881d R11: 0000000000000246 R12: 0000200000000040 [ 1027.471287][T24219] R13: 00007f3f98ef8eb0 R14: 000000000001272b R15: 00002000000001c0 [ 1027.471337][T24219] [ 1027.471352][T24219] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: my journal (0) is bad: -5 [ 1027.681435][T24118] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1027.868263][ T5960] Bluetooth: hci6: command tx timeout [ 1028.118829][T24118] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1028.169097][T24118] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1028.243870][T24118] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1028.475645][T24261] loop5: detected capacity change from 0 to 32768 [ 1028.552164][T24261] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1028.600456][T24118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.622160][T24271] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7252 (24271) [ 1028.631699][T24118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.653648][T14358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.660848][T14358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.683255][T14358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.690413][T14358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.733112][T24261] XFS (loop5): Ending clean mount [ 1028.761365][T24271] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1028.784769][T24261] XFS (loop5): Quotacheck needed: Please wait. [ 1028.820947][T24271] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 1028.864538][T24261] XFS (loop5): Quotacheck: Done. [ 1029.056771][ T5954] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1029.075087][T24271] BTRFS info (device loop2): enabling ssd optimizations [ 1029.100543][T24271] BTRFS info (device loop2): turning on async discard [ 1029.111293][T24271] BTRFS info (device loop2): enabling free space tree [ 1029.515083][ T5950] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1029.583799][T24326] set_capacity_and_notify: 1 callbacks suppressed [ 1029.583825][T24326] loop3: detected capacity change from 0 to 256 [ 1029.692190][T24326] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x542a3d5d, utbl_chksum : 0xe619d30d) [ 1029.726789][T24278] loop1: detected capacity change from 0 to 32768 [ 1029.832269][T24278] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7255 (24278) [ 1029.874349][T24118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.881462][T24278] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1029.881555][T24278] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 1030.081248][ T5960] Bluetooth: hci6: command tx timeout [ 1030.134823][T24347] loop5: detected capacity change from 0 to 65 [ 1030.168424][T24347] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1030.232301][T24278] BTRFS info (device loop1): enabling ssd optimizations [ 1030.284589][T24278] BTRFS info (device loop1): turning on async discard [ 1030.291409][T24278] BTRFS info (device loop1): enabling free space tree [ 1030.563793][T24357] loop3: detected capacity change from 0 to 2048 [ 1030.660506][T24357] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1030.866065][ T5951] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1031.306101][T24372] netlink: 'syz.5.7276': attribute type 21 has an invalid length. [ 1031.356197][T24118] veth0_vlan: entered promiscuous mode [ 1031.404576][T24118] veth1_vlan: entered promiscuous mode [ 1031.571096][T24118] veth0_macvtap: entered promiscuous mode [ 1031.649107][T24118] veth1_macvtap: entered promiscuous mode [ 1031.657533][T24382] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1031.698474][T24382] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1031.742990][T24118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.787662][T24118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.849141][ T1003] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.888106][ T1003] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.960809][ T1003] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.007580][ T1003] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.053273][T24390] loop3: detected capacity change from 0 to 8 [ 1032.099128][T24390] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1032.190318][T24390] cramfs: Error -5 while decompressing! [ 1032.196155][T24390] cramfs: ffffffff9acf7d68(26)->ffff888069052000(4096) [ 1032.254747][ T6259] udevd[6259]: incorrect cramfs checksum on /dev/loop3 [ 1032.303507][T24390] cramfs: Error -3 while decompressing! [ 1032.327486][T24390] cramfs: ffffffff9acf7d82(26)->ffff88804a0cd000(4096) [ 1032.343375][T24390] cramfs: Error -3 while decompressing! [ 1032.370116][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.379681][T24390] cramfs: ffffffff9acf7d9c(16)->ffff88804a0cc000(4096) [ 1032.413170][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.419595][ T5905] udevd[5905]: incorrect cramfs checksum on /dev/loop3 [ 1032.440272][T24390] cramfs: Error -5 while decompressing! [ 1032.481722][T24390] cramfs: ffffffff9acf7d68(26)->ffff888069052000(4096) [ 1032.585056][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.592919][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.846482][T24412] loop1: detected capacity change from 0 to 64 [ 1032.855090][T24410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1032.901788][T24414] loop3: detected capacity change from 0 to 64 [ 1032.911398][T24412] hfs: unable to locate alternate MDB [ 1032.957566][T24412] hfs: continuing without an alternate MDB [ 1033.097700][T24419] netlink: 'syz.5.7298': attribute type 10 has an invalid length. [ 1033.152371][T24419] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1034.344040][T24420] loop6: detected capacity change from 0 to 32768 [ 1034.391710][T24420] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7181 (24420) [ 1034.450416][T24458] loop1: detected capacity change from 0 to 16 [ 1034.480481][T24420] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1034.491496][T24458] erofs (device loop1): mounted with root inode @ nid 36. [ 1034.529219][T24420] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 1034.556647][T24458] erofs (device loop1): corrupted dir block 0 @ nid 36 [ 1034.571275][T24420] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1034.896365][T24420] BTRFS info (device loop6): rebuilding free space tree [ 1035.001649][T24420] BTRFS info (device loop6): disabling free space tree [ 1035.039093][T24420] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1035.108235][T24420] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1035.187816][T24420] BTRFS info (device loop6): allowing degraded mounts [ 1035.209875][T24420] BTRFS info (device loop6): enabling ssd optimizations [ 1035.246467][T24420] BTRFS info (device loop6): turning on async discard [ 1035.253278][T24420] BTRFS info (device loop6): enabling disk space caching [ 1035.275830][T24494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7325'. [ 1035.304306][T24420] BTRFS info (device loop6): force clearing of disk cache [ 1035.313651][T24420] BTRFS info (device loop6): use zlib compression, level 3 [ 1035.329495][T24495] loop2: detected capacity change from 0 to 2048 [ 1035.419915][T24495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.528034][T24420] BTRFS info (device loop6): balance: start -f -ssoft,usage=8,limit=0..131072 [ 1035.621410][T24420] BTRFS info (device loop6): relocating block group 1048576 flags system [ 1035.696134][T24505] netlink: 'syz.3.7330': attribute type 1 has an invalid length. [ 1035.708737][ T5950] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.733392][T23480] hid (null): report_id 2445601295 is invalid [ 1035.755149][T24420] BTRFS info (device loop6): balance: ended with status: 0 [ 1035.758093][T23480] hid (null): report_id 0 is invalid [ 1035.791846][T23480] hid (null): global environment stack underflow [ 1035.810393][T23480] hid (null): unknown global tag 0xe [ 1035.826930][T23480] hid-generic 2BD5:3849DFF5:F76C68F0.0001: report_id 2445601295 is invalid [ 1035.886123][T23480] hid-generic 2BD5:3849DFF5:F76C68F0.0001: item 0 4 1 8 parsing failed [ 1035.920642][T23480] hid-generic 2BD5:3849DFF5:F76C68F0.0001: probe with driver hid-generic failed with error -22 [ 1036.082296][T24118] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1036.330494][T24474] loop0: detected capacity change from 0 to 32768 [ 1036.450141][T24474] ERROR: (device loop0): diAllocAG: numfree > numinos [ 1036.450141][T24474] [ 1036.498634][T24474] ialloc: diAlloc returned -5! [ 1036.743410][T24531] netlink: 'syz.2.7343': attribute type 1 has an invalid length. [ 1037.085453][T24536] loop0: detected capacity change from 0 to 2048 [ 1037.119212][T24538] loop5: detected capacity change from 0 to 128 [ 1037.138825][T24536] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485 [ 1037.205712][T24538] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4636: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1037.228694][T24536] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1037.243893][T24538] EXT4-fs (loop5): Encoding requested by superblock is unknown [ 1037.328080][T24538] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1038.153352][T24528] loop3: detected capacity change from 0 to 32768 [ 1038.179835][T24528] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7341 (24528) [ 1038.244805][T24528] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1038.270303][T24528] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1038.301397][T24528] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1038.430566][ T5934] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1038.493824][T24543] loop1: detected capacity change from 0 to 32768 [ 1038.559076][T24543] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 040c65a1-699e-467f-90d6-1346e60056ee [ 1038.612339][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 1038.623234][T24543] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7348 (24543) [ 1038.630781][ T5934] usb 6-1: config 0 has an invalid interface number: 161 but max is 0 [ 1038.661600][T24549] loop0: detected capacity change from 0 to 32768 [ 1038.662921][ T5934] usb 6-1: config 0 has no interface number 0 [ 1038.685498][ T5934] usb 6-1: config 0 interface 161 has no altsetting 0 [ 1038.712862][ T5934] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1038.736876][T24549] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7350 (24549) [ 1038.746768][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.766450][ T5934] usb 6-1: Product: syz [ 1038.770754][ T5934] usb 6-1: Manufacturer: syz [ 1038.806383][ T5934] usb 6-1: SerialNumber: syz [ 1038.811375][T24528] BTRFS info (device loop3): rebuilding free space tree [ 1038.818637][T24549] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1038.836527][ T5934] usb 6-1: config 0 descriptor?? [ 1038.843398][T24543] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1038.860060][T24549] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1038.878194][ T5934] ums-jumpshot 6-1:0.161: USB Mass Storage device detected [ 1038.905301][T24528] BTRFS info (device loop3): disabling free space tree [ 1038.911707][T24543] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1038.932542][T24528] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1038.942910][T24543] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1038.974597][T24528] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1038.975599][ T5934] ums-jumpshot 6-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 1039.024769][T24528] BTRFS info (device loop3): allowing degraded mounts [ 1039.048821][T24550] loop2: detected capacity change from 0 to 32768 [ 1039.104664][T24528] BTRFS info (device loop3): enabling ssd optimizations [ 1039.158742][T24528] BTRFS info (device loop3): turning on async discard [ 1039.165551][T24528] BTRFS info (device loop3): enabling disk space caching [ 1039.188922][T24550] ERROR: (device loop2): dtSearch: stack overrun! [ 1039.188922][T24550] [ 1039.231639][ T5934] usb 6-1: USB disconnect, device number 30 [ 1039.290947][T24528] BTRFS info (device loop3): force clearing of disk cache [ 1039.291729][T24550] ERROR: (device loop2): remounting filesystem as read-only [ 1039.317888][T24528] BTRFS info (device loop3): use zlib compression, level 3 [ 1039.365000][T24550] btstack dump: [ 1039.368498][T24550] bn = 0, index = 4 [ 1039.378023][T24550] bn = 0, index = 4 [ 1039.381863][T24550] bn = 0, index = 4 [ 1039.399673][T24550] bn = 0, index = 4 [ 1039.410446][T24550] bn = 0, index = 4 [ 1039.424781][T24550] bn = 0, index = 4 [ 1039.433345][T24550] bn = 0, index = 4 [ 1039.437886][T24550] bn = 0, index = 0 [ 1039.441734][T24550] jfs_lookup: dtSearch returned -5 [ 1039.526260][T24549] BTRFS info (device loop0): enabling ssd optimizations [ 1039.581173][T24549] BTRFS info (device loop0): turning on async discard [ 1039.590633][T24543] BTRFS info (device loop1): rebuilding free space tree [ 1039.616529][T24549] BTRFS info (device loop0): enabling free space tree [ 1039.681018][T24543] BTRFS info (device loop1): disabling free space tree [ 1039.734942][T24543] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1039.798333][T24543] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1039.840929][ T5946] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1039.936085][T24611] loop6: detected capacity change from 0 to 4096 [ 1039.936292][T24543] BTRFS info (device loop1): allowing degraded mounts [ 1040.033768][ T5943] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1040.045667][T24543] BTRFS info (device loop1): enabling ssd optimizations [ 1040.081607][T24543] BTRFS info (device loop1): turning on async discard [ 1040.098617][T24543] BTRFS info (device loop1): enabling disk space caching [ 1040.105677][T24543] BTRFS info (device loop1): force clearing of disk cache [ 1040.150399][T24619] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1040.169729][T24543] BTRFS info (device loop1): use zlib compression, level 3 [ 1040.254173][T24611] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1040.333523][T24611] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1040.411311][T24611] Remounting filesystem read-only [ 1040.461833][T24611] NILFS (loop6): error -5 truncating bmap (ino=12) [ 1040.510159][T24543] BTRFS info (device loop1): balance: start -f -ssoft,usage=8,limit=0..131072 [ 1040.571412][T24543] BTRFS info (device loop1): relocating block group 1048576 flags system [ 1040.590441][T24623] netlink: 'syz.2.7364': attribute type 5 has an invalid length. [ 1040.750058][T24118] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 1040.809426][T24543] BTRFS info (device loop1): balance: ended with status: 0 [ 1041.172229][T24636] netlink: 'syz.0.7370': attribute type 1 has an invalid length. [ 1041.190365][ T5951] BTRFS info (device loop1): last unmount of filesystem 040c65a1-699e-467f-90d6-1346e60056ee [ 1041.350054][T24631] loop5: detected capacity change from 0 to 4096 [ 1041.366815][T24631] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1041.586047][T24643] tmpfs: Bad value for 'nr_blocks' [ 1041.968343][T24647] loop2: detected capacity change from 0 to 2048 [ 1042.045117][T24652] netlink: 'syz.3.7378': attribute type 1 has an invalid length. [ 1042.129645][T24654] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1042.195707][T24647] syz.2.7376: attempt to access beyond end of device [ 1042.195707][T24647] loop2: rw=8388608, sector=1688849860263942, nr_sectors = 2 limit=2048 [ 1042.322162][T24647] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=0) [ 1042.495036][T24662] 9pnet: Found fid 0 not clunked [ 1042.743296][T24670] netlink: 'syz.3.7387': attribute type 2 has an invalid length. [ 1043.031643][T24679] loop0: detected capacity change from 0 to 256 [ 1043.501511][T24690] loop1: detected capacity change from 0 to 2048 [ 1043.568569][ T31] audit: type=1326 audit(980.430:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.0.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 1043.600428][T24690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.613359][ T31] audit: type=1326 audit(980.458:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.0.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 1043.635924][ T31] audit: type=1326 audit(980.458:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.0.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 1043.660263][ T31] audit: type=1326 audit(980.458:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.0.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 1043.683093][ T31] audit: type=1326 audit(980.458:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.0.7398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5d18f749 code=0x7ffc0000 [ 1043.734452][T24695] loop3: detected capacity change from 0 to 2048 [ 1043.790877][T24690] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 1043.836387][T24707] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1043.885699][T24695] syz.3.7399: attempt to access beyond end of device [ 1043.885699][T24695] loop3: rw=8388608, sector=1688849860263942, nr_sectors = 2 limit=2048 [ 1043.957690][T24695] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 1044.101536][ T5951] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.696279][T24727] loop1: detected capacity change from 0 to 136 [ 1045.137376][T24741] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7420'. [ 1045.867981][T24723] loop0: detected capacity change from 0 to 32768 [ 1045.917974][T24723] (syz.0.7409,24723,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1045.969773][T24723] (syz.0.7409,24723,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1046.047273][T24723] JBD2: Ignoring recovery information on journal [ 1046.104886][T24723] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1046.111434][T24773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7433'. [ 1046.171492][T24770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7432'. [ 1046.195157][T24776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7436'. [ 1046.271796][T24778] loop3: detected capacity change from 0 to 512 [ 1046.401392][T24778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.687772][ T5946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.794947][ T4325] [ 1046.797310][ T4325] ====================================================== [ 1046.804326][ T4325] WARNING: possible circular locking dependency detected [ 1046.811341][ T4325] syzkaller #0 Not tainted [ 1046.815748][ T4325] ------------------------------------------------------ [ 1046.822773][ T4325] kworker/u8:13/4325 is trying to acquire lock: [ 1046.829006][ T4325] ffff888034832950 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x17c/0x230 [ 1046.838658][ T4325] [ 1046.838658][ T4325] but task is already holding lock: [ 1046.846019][ T4325] ffff888034830b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 1046.855892][ T4325] [ 1046.855892][ T4325] which lock already depends on the new lock. [ 1046.855892][ T4325] [ 1046.866288][ T4325] [ 1046.866288][ T4325] the existing dependency chain (in reverse order) is: [ 1046.875294][ T4325] [ 1046.875294][ T4325] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1046.883747][ T4325] ext4_writepages+0x224/0x7d0 [ 1046.889048][ T4325] do_writepages+0x27a/0x600 [ 1046.894170][ T4325] __writeback_single_inode+0x168/0x14a0 [ 1046.900333][ T4325] writeback_single_inode+0x425/0x10f0 [ 1046.906325][ T4325] write_inode_now+0x170/0x1e0 [ 1046.911621][ T4325] iput.part.0+0x815/0x1190 [ 1046.916672][ T4325] iput+0x35/0x40 [ 1046.920851][ T4325] ext4_xattr_block_set+0x67c/0x3640 [ 1046.926775][ T4325] ext4_expand_extra_isize_ea+0x1442/0x1ab0 [ 1046.933214][ T4325] __ext4_expand_extra_isize+0x346/0x480 [ 1046.939385][ T4325] __ext4_mark_inode_dirty+0x544/0x840 [ 1046.945370][ T4325] ext4_evict_inode+0x713/0x1730 [ 1046.950844][ T4325] evict+0x3c2/0xad0 [ 1046.955296][ T4325] iput.part.0+0x621/0x1190 [ 1046.960344][ T4325] iput+0x35/0x40 [ 1046.964520][ T4325] ext4_orphan_cleanup+0x731/0x11e0 [ 1046.970253][ T4325] ext4_fill_super+0x7ec1/0xb570 [ 1046.975730][ T4325] get_tree_bdev_flags+0x38c/0x620 [ 1046.981389][ T4325] vfs_get_tree+0x8e/0x330 [ 1046.986348][ T4325] path_mount+0x7bf/0x23a0 [ 1046.991302][ T4325] __x64_sys_mount+0x293/0x310 [ 1046.996605][ T4325] do_syscall_64+0xcd/0xf80 [ 1047.001651][ T4325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.008071][ T4325] [ 1047.008071][ T4325] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 1047.015649][ T4325] down_read+0x9b/0x460 [ 1047.020333][ T4325] ext4_setattr+0x869/0x28e0 [ 1047.025450][ T4325] notify_change+0x6d2/0x1290 [ 1047.030651][ T4325] chown_common+0x549/0x680 [ 1047.035686][ T4325] do_fchownat+0x1a7/0x200 [ 1047.040646][ T4325] __x64_sys_chown+0x7b/0xc0 [ 1047.045772][ T4325] do_syscall_64+0xcd/0xf80 [ 1047.050820][ T4325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.057247][ T4325] [ 1047.057247][ T4325] -> #0 (jbd2_handle){++++}-{0:0}: [ 1047.064571][ T4325] __lock_acquire+0x1669/0x2890 [ 1047.069956][ T4325] lock_acquire+0x179/0x330 [ 1047.074994][ T4325] wait_transaction_locked+0x191/0x230 [ 1047.080996][ T4325] add_transaction_credits+0x110/0xe60 [ 1047.087007][ T4325] start_this_handle+0x3e7/0x1410 [ 1047.092608][ T4325] jbd2__journal_start+0x394/0x6a0 [ 1047.098264][ T4325] __ext4_journal_start_sb+0x195/0x640 [ 1047.104252][ T4325] ext4_do_writepages+0xc23/0x3c80 [ 1047.109891][ T4325] ext4_writepages+0x37a/0x7d0 [ 1047.115180][ T4325] do_writepages+0x27a/0x600 [ 1047.120302][ T4325] __writeback_single_inode+0x168/0x14a0 [ 1047.126463][ T4325] writeback_sb_inodes+0x72e/0x1ce0 [ 1047.132188][ T4325] __writeback_inodes_wb+0xf8/0x2d0 [ 1047.137908][ T4325] wb_writeback+0x799/0xae0 [ 1047.142951][ T4325] wb_workfn+0x8a0/0xbb0 [ 1047.147718][ T4325] process_one_work+0x9ba/0x1b20 [ 1047.153190][ T4325] worker_thread+0x6c8/0xf10 [ 1047.158312][ T4325] kthread+0x3c5/0x780 [ 1047.162911][ T4325] ret_from_fork+0x983/0xb10 [ 1047.168032][ T4325] ret_from_fork_asm+0x1a/0x30 [ 1047.173337][ T4325] [ 1047.173337][ T4325] other info that might help us debug this: [ 1047.173337][ T4325] [ 1047.183550][ T4325] Chain exists of: [ 1047.183550][ T4325] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 1047.183550][ T4325] [ 1047.196965][ T4325] Possible unsafe locking scenario: [ 1047.196965][ T4325] [ 1047.204402][ T4325] CPU0 CPU1 [ 1047.209754][ T4325] ---- ---- [ 1047.215107][ T4325] rlock(&sbi->s_writepages_rwsem); [ 1047.220399][ T4325] lock(&ei->xattr_sem); [ 1047.227250][ T4325] lock(&sbi->s_writepages_rwsem); [ 1047.234971][ T4325] lock(jbd2_handle); [ 1047.239046][ T4325] [ 1047.239046][ T4325] *** DEADLOCK *** [ 1047.239046][ T4325] [ 1047.247174][ T4325] 4 locks held by kworker/u8:13/4325: [ 1047.252537][ T4325] #0: ffff8881416f0948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1047.263294][ T4325] #1: ffffc9000d967c90 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1047.275176][ T4325] #2: ffff888034b3e0e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 1047.285767][ T4325] #3: ffff888034830b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 1047.296082][ T4325] [ 1047.296082][ T4325] stack backtrace: [ 1047.301971][ T4325] CPU: 0 UID: 0 PID: 4325 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1047.302013][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1047.302041][ T4325] Workqueue: writeback wb_workfn (flush-8:0) [ 1047.302088][ T4325] Call Trace: [ 1047.302100][ T4325] [ 1047.302112][ T4325] dump_stack_lvl+0x116/0x1f0 [ 1047.302167][ T4325] print_circular_bug+0x275/0x340 [ 1047.302208][ T4325] check_noncircular+0x146/0x160 [ 1047.302251][ T4325] __lock_acquire+0x1669/0x2890 [ 1047.302295][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.302341][ T4325] lock_acquire+0x179/0x330 [ 1047.302379][ T4325] ? wait_transaction_locked+0x17c/0x230 [ 1047.302430][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.302471][ T4325] ? prepare_to_wait_exclusive+0xe4/0x2b0 [ 1047.302509][ T4325] ? wait_transaction_locked+0x17c/0x230 [ 1047.302557][ T4325] wait_transaction_locked+0x191/0x230 [ 1047.302603][ T4325] ? wait_transaction_locked+0x17c/0x230 [ 1047.302651][ T4325] ? __pfx_wait_transaction_locked+0x10/0x10 [ 1047.302698][ T4325] ? stack_depot_save_flags+0x29/0x9b0 [ 1047.302736][ T4325] ? ret_from_fork_asm+0x1a/0x30 [ 1047.302789][ T4325] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1047.302829][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.302873][ T4325] add_transaction_credits+0x110/0xe60 [ 1047.302921][ T4325] ? wb_workfn+0x8a0/0xbb0 [ 1047.302955][ T4325] ? process_one_work+0x9ba/0x1b20 [ 1047.302999][ T4325] ? worker_thread+0x6c8/0xf10 [ 1047.303044][ T4325] ? kthread+0x3c5/0x780 [ 1047.303081][ T4325] ? ret_from_fork+0x983/0xb10 [ 1047.303120][ T4325] ? __pfx_add_transaction_credits+0x10/0x10 [ 1047.303169][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.303209][ T4325] ? lock_acquire+0x179/0x330 [ 1047.303248][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.303297][ T4325] start_this_handle+0x3e7/0x1410 [ 1047.303357][ T4325] ? __pfx_start_this_handle+0x10/0x10 [ 1047.303410][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.303453][ T4325] ? rcu_is_watching+0x12/0xc0 [ 1047.303484][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.303525][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.303565][ T4325] ? kmem_cache_alloc_noprof+0x2af/0x770 [ 1047.303618][ T4325] ? jbd2__journal_start+0x249/0x6a0 [ 1047.303672][ T4325] jbd2__journal_start+0x394/0x6a0 [ 1047.303724][ T4325] __ext4_journal_start_sb+0x195/0x640 [ 1047.303760][ T4325] ? ext4_do_writepages+0xc23/0x3c80 [ 1047.303798][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.303844][ T4325] ext4_do_writepages+0xc23/0x3c80 [ 1047.303881][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.303939][ T4325] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1047.303980][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.304029][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.304074][ T4325] ? ext4_writepages+0x37a/0x7d0 [ 1047.304109][ T4325] ext4_writepages+0x37a/0x7d0 [ 1047.304147][ T4325] ? __pfx_ext4_writepages+0x10/0x10 [ 1047.304195][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.304235][ T4325] ? __lock_acquire+0x436/0x2890 [ 1047.304273][ T4325] ? __pfx_ext4_writepages+0x10/0x10 [ 1047.304312][ T4325] do_writepages+0x27a/0x600 [ 1047.304352][ T4325] ? __pfx_do_writepages+0x10/0x10 [ 1047.304390][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.304430][ T4325] ? reacquire_held_locks+0xcd/0x1f0 [ 1047.304472][ T4325] __writeback_single_inode+0x168/0x14a0 [ 1047.304510][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.304552][ T4325] ? __pfx___writeback_single_inode+0x10/0x10 [ 1047.304588][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.304629][ T4325] ? do_raw_spin_unlock+0x172/0x230 [ 1047.304676][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.304720][ T4325] writeback_sb_inodes+0x72e/0x1ce0 [ 1047.304765][ T4325] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1047.304803][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.304843][ T4325] ? __lock_acquire+0x436/0x2890 [ 1047.304904][ T4325] ? __pfx___up_read+0x10/0x10 [ 1047.304948][ T4325] ? __writeback_inodes_wb+0x104/0x2d0 [ 1047.304990][ T4325] __writeback_inodes_wb+0xf8/0x2d0 [ 1047.305033][ T4325] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 1047.305070][ T4325] ? queue_io+0x3f6/0x4f0 [ 1047.305124][ T4325] wb_writeback+0x799/0xae0 [ 1047.305163][ T4325] ? __pfx_wb_writeback+0x10/0x10 [ 1047.305196][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.305242][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.305282][ T4325] ? get_nr_dirty_inodes+0x170/0x1e0 [ 1047.305317][ T4325] wb_workfn+0x8a0/0xbb0 [ 1047.305354][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.305395][ T4325] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1047.305446][ T4325] ? __pfx_wb_workfn+0x10/0x10 [ 1047.305489][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.305530][ T4325] ? rcu_is_watching+0x12/0xc0 [ 1047.305563][ T4325] process_one_work+0x9ba/0x1b20 [ 1047.305615][ T4325] ? __pfx_process_one_work+0x10/0x10 [ 1047.305659][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.305705][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.305745][ T4325] ? assign_work+0x1a0/0x250 [ 1047.305788][ T4325] worker_thread+0x6c8/0xf10 [ 1047.305840][ T4325] ? __pfx_worker_thread+0x10/0x10 [ 1047.305884][ T4325] kthread+0x3c5/0x780 [ 1047.305923][ T4325] ? __pfx_kthread+0x10/0x10 [ 1047.305962][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.306003][ T4325] ? rcu_is_watching+0x12/0xc0 [ 1047.306037][ T4325] ? __pfx_kthread+0x10/0x10 [ 1047.306076][ T4325] ret_from_fork+0x983/0xb10 [ 1047.306113][ T4325] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.306151][ T4325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.306192][ T4325] ? __switch_to+0x7af/0x10d0 [ 1047.306236][ T4325] ? __pfx_kthread+0x10/0x10 [ 1047.306276][ T4325] ret_from_fork_asm+0x1a/0x30 [ 1047.306337][ T4325] [ 1048.098943][ T5943] ocfs2: Unmounting device (7,0) on (node local)