last executing test programs: 4m46.936157845s ago: executing program 0 (id=36): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000140)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x1, 0xd59f83, 0x19f2, 0x3f, 0x8, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x2c, {0x8, 0xffffffff}, 0xd0, 0x9}}) 4m46.644628231s ago: executing program 0 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) 4m46.101121263s ago: executing program 0 (id=44): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x80000099, 0x23b) 4m45.817557091s ago: executing program 0 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 4m45.474223443s ago: executing program 0 (id=51): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003a80)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)={0x10, 0xffffffffffffffda, 0x3}, 0x10) 4m44.541821765s ago: executing program 0 (id=61): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) 4m43.80580179s ago: executing program 32 (id=61): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) 3m30.510893499s ago: executing program 4 (id=621): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x800) 3m30.108540414s ago: executing program 4 (id=625): socket$qrtr(0x2a, 0x2, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x19, 0xb}, 0x18) 3m29.855881906s ago: executing program 4 (id=629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe0000000085000000c0000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffdad, &(0x7f0000000000)="6306f700"/13, 0x0, 0x100, 0x2000000, 0x0, 0x46}, 0x28) 3m29.500974875s ago: executing program 4 (id=632): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m28.40639501s ago: executing program 4 (id=640): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m25.416248067s ago: executing program 4 (id=663): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x121a40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r0, 0x8910, 0x0) 3m24.758717823s ago: executing program 33 (id=663): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x121a40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r0, 0x8910, 0x0) 1m55.191964174s ago: executing program 5 (id=1458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, 0x0) 1m54.484144231s ago: executing program 5 (id=1463): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x26c, &(0x7f0000000ac0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820}}, {{&(0x7f0000001580)=@file={0x1, './file2\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x0) 1m53.356983502s ago: executing program 5 (id=1472): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0, 0x5}) 1m52.637051666s ago: executing program 5 (id=1475): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x1400c, &(0x7f0000000300)={[{@test_dummy_encryption}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x470, &(0x7f0000000880)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m51.631111915s ago: executing program 5 (id=1487): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280), &(0x7f0000048000)=0x1, 0x0) 1m50.912435828s ago: executing program 5 (id=1495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x84}}, 0xe040) 1m50.097024676s ago: executing program 34 (id=1495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x84}}, 0xe040) 1m33.450523927s ago: executing program 7 (id=1619): r0 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000200)={0x20000000, 0x2, 0x100000001}) 1m29.530372271s ago: executing program 7 (id=1650): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000600)=0xdfa, 0x4) 1m28.763266519s ago: executing program 35 (id=1650): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000600)=0xdfa, 0x4) 4.981880351s ago: executing program 3 (id=2331): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0) 4.547274635s ago: executing program 3 (id=2335): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@gettaction={0x14, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4000040) 4.309045187s ago: executing program 3 (id=2338): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000001300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) 4.050427972s ago: executing program 3 (id=2342): socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3b, &(0x7f0000000000)=ANY=[]) 3.683695452s ago: executing program 6 (id=2357): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x80) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x0, 0x4b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x200) 3.323481115s ago: executing program 9 (id=2348): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.156144936s ago: executing program 1 (id=2362): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 3.03377416s ago: executing program 2 (id=2350): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) 2.850656694s ago: executing program 9 (id=2351): r0 = syz_io_uring_setup(0x1105, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x8000000, 0x8000021e}, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000000)) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x40000006}) 2.850423914s ago: executing program 6 (id=2352): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e224e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2.718089442s ago: executing program 8 (id=2353): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x1018000, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYBLOB="77d82830b378c4618abbc652e7d26b775067055d7a5e570defe872030312fad60e73457614f78a4b38eacd24aa143e626c9233c27b858b279741bc4b2b22505ef7ec6e3dd95ab62cd6d3cbe30f6e0d10bdd53a3ccd8fb7341cf2888de144a478d48e3b424c8244af357b5283480092b3882aa2", @ANYBLOB="be7b925eb3aa45497b2ecb74fddb9a6cc2cc4eb1f4d530d454", @ANYRESHEX, @ANYRESDEC, @ANYRES8], 0x8, 0x2eb, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x0, 0x6, 0x9}) 2.383305621s ago: executing program 2 (id=2354): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)="711f0b8d0bf8464eb5913da976f1", 0xe}, 0x1, 0x0, 0x0, 0xc045}, 0x0) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}}], 0x40000000000019e, 0x142, 0x0) 2.382344047s ago: executing program 6 (id=2368): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c003900ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="08000500", @ANYRES64=r0], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 2.302398592s ago: executing program 9 (id=2355): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x86, 0x23, 0x9, 0xdedb, 0xd, "0e000700ae230400"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 2.200746251s ago: executing program 8 (id=2356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) 2.023322044s ago: executing program 2 (id=2358): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2.01264558s ago: executing program 1 (id=2359): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="be5f06fbf203ff82", 0x8, 0x80, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) 1.942427867s ago: executing program 9 (id=2360): r0 = io_uring_setup(0x758a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x213}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000100)}, 0x8}], 0x55, 0x40012020, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.743582975s ago: executing program 2 (id=2361): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0xff8d}], 0x600, 0x0, 0x0) 1.711925264s ago: executing program 8 (id=2363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 1.670555451s ago: executing program 3 (id=2364): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') 1.649341462s ago: executing program 6 (id=2365): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x3}, {0x1}, {0x8}}}, 0x24}}, 0x40004) 1.543724754s ago: executing program 1 (id=2366): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000000140)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@nfs_stale_rw}, {@rodir}, {@shortname_win95}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlate}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x1, 0x27b, &(0x7f0000000640)="$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") inotify_init1(0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000005c0)=""/188, 0xbc) 1.437618899s ago: executing program 9 (id=2367): r0 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000300)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) keyctl$chown(0x4, r0, r2, 0xee01) 1.360193768s ago: executing program 8 (id=2369): syz_mount_image$fuse(0x0, 0x0, 0x283016, 0x0, 0x11, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefb, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) syz_emit_ethernet(0x76, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffa5556c3d6c7286dd60ee960000403afffe8000000000000000000000000000bbff0200000000000000000000000000010200"], 0x0) 1.359887834s ago: executing program 6 (id=2370): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000000340)='~', 0x1, 0x24008015, &(0x7f0000000140)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x7ff, 0x9fa6, 0xf, 0x8000, 0xaf9}, 0x14) 1.083720823s ago: executing program 1 (id=2371): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="aefe252cd3", 0x5}], 0x1, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000017c0)="bd876fe329ad", 0x6}], 0x1, 0x0, 0x0, 0x4040000}}, {{&(0x7f0000003a80)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f0000005e40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x60046}}], 0x4, 0x40000) 1.068347413s ago: executing program 9 (id=2372): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) 1.050820355s ago: executing program 2 (id=2373): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x40280, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)='Z') mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 943.728926ms ago: executing program 8 (id=2374): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x6, 0x100040, 0xff, 0x2, 0x8, 0x351, 0x0, 0x0, 0x8, 0x1}}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0xb, 0xfffffff3, 0x5, 0x6, 0xdd}) 722.20243ms ago: executing program 6 (id=2375): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3886dd2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 722.10252ms ago: executing program 1 (id=2376): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 588.68961ms ago: executing program 8 (id=2377): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x400000c, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x40200, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffe, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x8000a]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 516.966615ms ago: executing program 1 (id=2378): socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3b, &(0x7f0000000000)=ANY=[]) 2.967653ms ago: executing program 3 (id=2379): syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x200004c, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x143, &(0x7f0000001580)="$eJzs0LFLAmEYx/Hf25VGZRoZ2JAFDR2JeZ7YFqGRIGQHRbugFwSakYu0NbT5J0hUQtPhEI0NZi2GB2L/RMtBUNBovPdeWFBD+/PZ3u/zvo94m2umDB8gQdgoFY+O9XJZzy/saJnU7s3t3STvbgCjP+br9v1mAniRgOYwYJ0CeQAPHmD/oKCv5EoFfrYSgAwgOS66AnF3jDe/aFGnyYtAa0Y09ZcWc5qLv/UO9vUvgSXepgb73gFUaqGG8bTdaafDy9dzEs7SoflphvPqtx7Uq2pqtj4RkLCnP14hyfi750g73I00jJ7ZyWxpGc2MqepqTIkqSrzH/3m8b38UjonfYc7RhUDQjbcT5wjDnlv3zAOgdfGhFb1uP4DXQx/QxV8TVqnlsoGRetbvG4Ik42s9IYQQQgghhBDyb58BAAD//8kVZzA=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 0s ago: executing program 2 (id=2391): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x8080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r1}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 1, Product=2, SerialNumber=3 [ 290.426483][ T5834] usb 7-1: Product: syz [ 290.436712][ T5834] usb 7-1: Manufacturer: syz [ 290.446660][ T5834] usb 7-1: SerialNumber: syz [ 290.464983][ T5834] usb 7-1: config 0 descriptor?? [ 290.550788][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 290.697938][T10238] syz.1.1569 uses obsolete (PF_INET,SOCK_PACKET) [ 290.701160][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 290.713367][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.740362][ T24] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 290.755993][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 290.772496][ T24] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 290.789461][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.807877][ T24] usb 8-1: Product: syz [ 290.825446][ T24] usb 8-1: Manufacturer: syz [ 290.828235][T10044] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 290.839010][ T24] usb 8-1: SerialNumber: syz [ 290.875181][T10044] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 290.896515][ T24] usb 8-1: config 0 descriptor?? [ 290.925228][T10044] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 290.973420][T10044] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 291.090387][ T5834] peak_usb 7-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 291.284724][ T5834] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 291.333135][ T5834] usb 7-1: USB disconnect, device number 13 [ 291.367661][ T24] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 291.558077][T10254] loop1: detected capacity change from 0 to 4096 [ 291.574981][ T24] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 291.585880][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.592742][ T24] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 291.599287][ T24] usb 8-1: USB disconnect, device number 7 [ 291.734593][T10044] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.805035][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.812255][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.912763][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.919965][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.474203][T10276] use of bytesused == 0 is deprecated and will be removed in the future, [ 292.551458][T10276] use the actual size instead. [ 292.743427][T10281] loop7: detected capacity change from 0 to 4096 [ 292.875111][T10289] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.000179][T10281] NILFS error (device loop7): nilfs_dotdot: directory #12 missing '.' [ 293.095981][T10281] Remounting filesystem read-only [ 293.262384][ T7822] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 293.351231][T10044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.391542][ T5834] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 293.573496][ T5834] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.618120][ T5834] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.681143][ T5834] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 293.715196][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 293.750522][T10308] loop6: detected capacity change from 0 to 2048 [ 293.757896][ T5834] usb 4-1: SerialNumber: syz [ 293.851531][T10313] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.003790][ T5834] usb 4-1: 0:2 : does not exist [ 294.291493][ T5834] usb 4-1: USB disconnect, device number 15 [ 294.399336][ T7088] udevd[7088]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.453584][T10324] ipvlan2: entered promiscuous mode [ 294.499707][T10324] bridge0: port 3(ipvlan2) entered blocking state [ 294.545837][T10324] bridge0: port 3(ipvlan2) entered disabled state [ 294.577747][T10324] ipvlan2: entered allmulticast mode [ 294.597450][T10324] bridge0: entered allmulticast mode [ 294.632899][T10324] ipvlan2: left allmulticast mode [ 294.640471][T10324] bridge0: left allmulticast mode [ 294.743087][T10331] loop7: detected capacity change from 0 to 1024 [ 294.800257][T10331] hfsplus: bad catalog entry type [ 294.987368][T10044] veth0_vlan: entered promiscuous mode [ 295.018131][ T133] hfsplus: b-tree write err: -5, ino 25 [ 295.029938][T10044] veth1_vlan: entered promiscuous mode [ 295.041981][ T133] hfsplus: b-tree write err: -5, ino 4 [ 295.047596][ T133] hfsplus: b-tree write err: -5, ino 2 [ 295.241478][T10044] veth0_macvtap: entered promiscuous mode [ 295.282897][T10044] veth1_macvtap: entered promiscuous mode [ 295.300017][T10341] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 295.399243][T10044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.504753][T10044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.625622][ T133] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.655128][ T133] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.744538][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'. [ 295.764394][ T133] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.905037][ T133] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.093914][T10360] loop6: detected capacity change from 0 to 4096 [ 296.212205][T10360] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0002] [ 296.243497][T10368] loop2: detected capacity change from 0 to 512 [ 296.325800][T10360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.386641][T10368] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0002] [ 296.416158][T10368] System zones: 0-2, 18-18, 34-34 [ 296.422258][T10368] EXT4-fs (loop2): orphan cleanup on readonly fs [ 296.428696][T10368] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #4: comm syz.2.1609: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2052(4), depth 0(0) [ 296.440891][ T30] audit: type=1800 audit(1774877035.131:58): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1607" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 296.446539][T10368] loop2: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 296.470605][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 296.486173][ C0] EXT4-fs (loop2): last error at time 1774877035: ext4_ext_check_inode:521: inode 4 [ 296.556803][T10360] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 296.575389][T10368] EXT4-fs error (device loop2): ext4_quota_enable:7219: comm syz.2.1609: Bad quota inode: 4, type: 1 [ 296.636489][T10368] loop2: lost filesystem error report for type 5 error -117 [ 296.641839][T10368] EXT4-fs warning (device loop2): ext4_enable_quotas:7257: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 296.707116][T10368] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 296.941610][T10368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.955031][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.973031][ T6119] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.032998][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.276372][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.310692][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.433998][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.733615][T10395] loop2: detected capacity change from 0 to 64 [ 298.321750][T10394] loop6: detected capacity change from 0 to 65536 [ 298.404488][T10394] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 298.590115][T10394] XFS (loop6): Metadata CRC error detected at xfs_agi_read_verify+0x139/0x1e0, xfs_agi block 0x2 [ 298.600864][T10394] XFS (loop6): Unmount and run xfs_repair [ 298.606617][T10394] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 298.614065][T10394] 00000000: 58 41 47 49 00 00 00 02 00 00 00 00 00 00 40 00 XAGI..........@. [ 298.623014][T10394] 00000010: 00 00 00 40 00 00 00 04 00 00 00 01 00 00 00 37 ...@...........7 [ 298.632152][T10394] 00000020: 00 00 00 20 ff ff ff ff ff ff ff ff ff ff ff ff ... ............ [ 298.643866][T10394] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 298.652837][T10394] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 298.661742][T10394] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 298.670682][T10394] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 298.679551][T10394] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 298.691053][T10394] XFS (loop6): metadata I/O error in "xfs_read_agi+0x29b/0x600" at daddr 0x2 len 1 error 74 [ 298.701356][T10394] loop6: lost filesystem error report for type 5 error -117 [ 298.701391][T10394] XFS (loop6): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 298.717984][T10394] XFS (loop6): Failed to read root inode 0x20, error 117 [ 298.725552][T10394] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 298.953005][T10416] loop3: detected capacity change from 0 to 1024 [ 299.083177][T10416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.228426][T10403] loop7: detected capacity change from 0 to 32768 [ 299.270687][ T30] audit: type=1800 audit(1774877037.981:59): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1624" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 299.305634][ T976] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 299.500746][ T976] usb 9-1: Using ep0 maxpacket: 16 [ 299.530077][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.547870][ T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.620671][ T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.630521][ T976] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 299.711001][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1621'. [ 299.737657][ T976] usb 9-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 299.791134][ T976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.836950][ T976] usb 9-1: config 0 descriptor?? [ 300.236379][T10444] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.1633'. [ 300.326222][ T976] gembird 0003:11FF:3331.001B: unknown main item tag 0x0 [ 300.367106][ T976] gembird 0003:11FF:3331.001B: unknown main item tag 0x0 [ 300.390660][ T976] gembird 0003:11FF:3331.001B: unknown main item tag 0x0 [ 300.420677][ T976] gembird 0003:11FF:3331.001B: unknown main item tag 0x0 [ 300.427790][ T976] gembird 0003:11FF:3331.001B: unknown main item tag 0x0 [ 300.499336][ T976] gembird 0003:11FF:3331.001B: unknown main item tag 0x0 [ 300.543063][ T976] gembird 0003:11FF:3331.001B: unknown main item tag 0x0 [ 300.588361][ T976] gembird 0003:11FF:3331.001B: unknown main item tag 0x0 [ 300.632956][T10452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.647174][ T976] gembird 0003:11FF:3331.001B: unknown main item tag 0x0 [ 300.657867][T10453] loop2: detected capacity change from 0 to 128 [ 300.671433][ T976] gembird 0003:11FF:3331.001B: unknown main item tag 0x0 [ 300.716264][ T976] gembird 0003:11FF:3331.001B: hidraw0: USB HID v1.00 Device [HID 11ff:3331] on usb-dummy_hcd.8-1/input0 [ 300.767938][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 300.818243][ T976] usb 9-1: USB disconnect, device number 2 [ 300.838081][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 300.878325][T10458] loop7: detected capacity change from 0 to 1024 [ 301.204070][T10462] fido_id[10462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 301.252517][ T7822] hfsplus: bad catalog entry type [ 301.324758][T10468] loop3: detected capacity change from 0 to 256 [ 301.524365][T10475] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 301.540494][T10468] FAT-fs (loop3): Directory bread(block 64) failed [ 301.545136][T10475] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1647'. [ 301.573890][T10468] FAT-fs (loop3): Directory bread(block 65) failed [ 301.581960][T10475] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1647'. [ 301.616074][T10468] FAT-fs (loop3): Directory bread(block 66) failed [ 301.642285][T10468] FAT-fs (loop3): Directory bread(block 67) failed [ 301.654251][T10468] FAT-fs (loop3): Directory bread(block 68) failed [ 301.666755][T10475] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 301.675501][T10468] FAT-fs (loop3): Directory bread(block 69) failed [ 301.692952][T10468] FAT-fs (loop3): Directory bread(block 70) failed [ 301.700078][T10468] FAT-fs (loop3): Directory bread(block 71) failed [ 301.744717][ T58] hfsplus: b-tree write err: -5, ino 25 [ 301.753191][T10475] netlink: 'syz.1.1647': attribute type 8 has an invalid length. [ 301.760968][T10468] FAT-fs (loop3): Directory bread(block 72) failed [ 301.761015][T10468] FAT-fs (loop3): Directory bread(block 73) failed [ 301.776189][ T58] hfsplus: b-tree write err: -5, ino 4 [ 301.798396][ T58] hfsplus: b-tree write err: -5, ino 2 [ 301.834033][T10475] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1647'. [ 301.866132][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.256912][T10484] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.276799][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.297457][T10482] loop1: detected capacity change from 0 to 256 [ 302.342459][T10482] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 302.390067][T10482] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 302.583792][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.624845][T10470] loop6: detected capacity change from 0 to 32768 [ 302.730126][T10470] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 302.813706][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.875335][T10470] XFS (loop6): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 302.938871][T10503] loop3: detected capacity change from 0 to 512 [ 303.024972][T10503] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 303.037086][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.062377][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.063044][T10470] XFS (loop6): Starting recovery (logdev: internal) [ 303.078789][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.089519][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.098181][T10503] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 303.108391][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.170961][T10503] EXT4-fs (loop3): orphan cleanup on readonly fs [ 303.226179][T10503] EXT4-fs warning (device loop3): ext4_enable_quotas:7257: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 303.251681][T10470] XFS (loop6): Ending recovery (logdev: internal) [ 303.281730][T10503] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 303.310757][T10503] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.1657: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 303.390700][T10503] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 303.392513][T10503] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1657: couldn't read orphan inode 13 (err -117) [ 303.401822][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 303.401856][ C1] EXT4-fs (loop3): last error at time 1774877042: ext4_ext_check_inode:521: inode 13 [ 303.461518][T10503] loop3: lost filesystem error report for type 5 error -117 [ 303.483856][T10503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 303.577014][T10510] loop1: detected capacity change from 0 to 4096 [ 303.664170][T10510] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 303.669843][T10503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.693342][ T6119] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 303.747975][T10503] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 303.787218][T10503] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2842c09c, mo2=0002] [ 303.862519][T10503] System zones: 0-2, 18-18, 34-34 [ 303.888716][T10503] EXT4-fs warning (device loop3): ext4_enable_quotas:7257: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 303.954041][T10504] chnl_net:caif_netlink_parms(): no params data found [ 304.413850][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.439137][T10522] loop1: detected capacity change from 0 to 2048 [ 304.473460][ T12] bridge_slave_1: left allmulticast mode [ 304.479165][ T12] bridge_slave_1: left promiscuous mode [ 304.505074][T10522] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=66359, location=66359 [ 304.550850][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.566627][T10522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.619325][ T12] bridge_slave_0: left allmulticast mode [ 304.663761][ T12] bridge_slave_0: left promiscuous mode [ 304.672892][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.213006][ T5852] Bluetooth: hci2: command tx timeout [ 305.250718][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 305.406981][ T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 305.427545][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.451540][ T24] usb 2-1: Product: syz [ 305.455772][ T24] usb 2-1: Manufacturer: syz [ 305.460386][ T24] usb 2-1: SerialNumber: syz [ 305.481815][ T24] usb 2-1: config 0 descriptor?? [ 305.541710][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.631079][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.683634][ T12] bond0 (unregistering): Released all slaves [ 305.696672][T10532] loop3: detected capacity change from 0 to 32768 [ 305.732587][T10532] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1667 (10532) [ 305.778483][ T5843] usb 2-1: USB disconnect, device number 8 [ 305.827296][T10532] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 305.859836][T10532] BTRFS info (device loop3): using sha256 checksum algorithm [ 306.053689][T10532] BTRFS info (device loop3): enabling ssd optimizations [ 306.088995][T10532] BTRFS info (device loop3): turning on async discard [ 306.128227][T10532] BTRFS info (device loop3): enabling free space tree [ 306.406925][ T976] hid_parser_main: 28 callbacks suppressed [ 306.406957][ T976] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 306.472110][T10504] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.479283][T10504] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.492665][ T976] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 306.529116][T10532] BTRFS info (device loop3): balance: start -sdevid=0,drange=4014..1 [ 306.541343][T10504] bridge_slave_0: entered allmulticast mode [ 306.592451][T10532] BTRFS info (device loop3): balance: ended with status: 0 [ 306.607881][T10504] bridge_slave_0: entered promiscuous mode [ 306.690801][T10504] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.741983][T10504] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.765284][T10581] fido_id[10581]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 306.783006][T10504] bridge_slave_1: entered allmulticast mode [ 306.833035][T10504] bridge_slave_1: entered promiscuous mode [ 306.879555][ T5840] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.024445][ T12] hsr_slave_0: left promiscuous mode [ 307.090377][ T12] hsr_slave_1: left promiscuous mode [ 307.103738][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.160484][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.271120][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.297544][ T5852] Bluetooth: hci2: command tx timeout [ 307.302004][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.474326][ T12] veth1_macvtap: left promiscuous mode [ 307.479981][ T12] veth0_macvtap: left promiscuous mode [ 307.534822][ T12] veth1_vlan: left promiscuous mode [ 307.540131][ T12] veth0_vlan: left promiscuous mode [ 308.113957][T10617] loop1: detected capacity change from 0 to 4096 [ 308.223073][T10619] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.264074][T10617] NILFS (loop1): cannot delete checkpoints: invalid range [2026, 1792) [ 308.281395][T10617] NILFS (loop1): error -22 preparing GC: cannot delete checkpoints [ 308.513651][T10610] loop3: detected capacity change from 0 to 32768 [ 308.549657][T10610] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1690 (10610) [ 308.589905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 308.620229][T10610] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 308.640189][T10610] BTRFS info (device loop3): using sha256 checksum algorithm [ 308.659303][ T12] team0 (unregistering): Port device team_slave_0 removed [ 308.790943][ T976] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 308.822979][T10610] BTRFS info (device loop3): enabling ssd optimizations [ 308.829974][T10610] BTRFS info (device loop3): turning on async discard [ 308.837656][T10610] BTRFS info (device loop3): enabling free space tree [ 308.846792][T10610] BTRFS info (device loop3): enabling auto defrag [ 308.855114][T10610] BTRFS info (device loop3): max_inline set to 4096 [ 308.956527][ T976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 308.968801][ T5840] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 308.986874][ T976] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 309.004472][ T976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 309.030425][ T976] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 309.040515][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.088579][ T976] usb 2-1: Product: syz [ 309.114749][ T976] usb 2-1: Manufacturer: syz [ 309.119401][ T976] usb 2-1: SerialNumber: syz [ 309.151098][ T976] usb 2-1: config 0 descriptor?? [ 309.158951][T10622] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 309.174465][T10622] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 309.186845][ T976] usb 2-1: ucan: probing device on interface #0 [ 309.264980][T10504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.337973][T10504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.370871][ T5852] Bluetooth: hci2: command tx timeout [ 309.421485][T10504] team0: Port device team_slave_0 added [ 309.434252][T10504] team0: Port device team_slave_1 added [ 309.696092][T10504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.707555][T10646] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 309.740303][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.779246][T10504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.868338][T10504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.903480][T10504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.905878][T10651] Invalid source name [ 309.953411][ T976] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 309.979844][ T976] usb 2-1: USB disconnect, device number 9 [ 310.041546][T10504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.183636][T10656] loop6: detected capacity change from 0 to 4096 [ 310.552324][T10504] hsr_slave_0: entered promiscuous mode [ 310.553715][T10504] hsr_slave_1: entered promiscuous mode [ 310.554590][T10504] debugfs: 'hsr0' already exists in 'hsr' [ 310.554622][T10504] Cannot create hsr debugfs directory [ 310.701669][T10668] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 311.453489][ T5852] Bluetooth: hci2: command tx timeout [ 311.662044][T10692] loop3: detected capacity change from 0 to 4096 [ 311.738055][T10697] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.917632][T10504] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 312.026036][T10504] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 312.156524][T10504] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 312.239303][T10504] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 312.570914][ T976] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 312.668236][T10504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.768910][ T976] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 312.770383][T10504] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.799045][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.821210][ T976] usb 4-1: Product: syz [ 312.825564][ T976] usb 4-1: Manufacturer: syz [ 312.841644][ T976] usb 4-1: SerialNumber: syz [ 312.874900][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.882117][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.912480][ T976] usb 4-1: config 0 descriptor?? [ 312.945296][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.952523][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.243207][ T5843] usb 4-1: USB disconnect, device number 16 [ 313.305063][T10738] netlink: 'syz.8.1728': attribute type 142 has an invalid length. [ 313.345388][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.361092][T10738] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1728'. [ 313.534167][T10745] delete_channel: no stack [ 313.637762][T10706] loop1: detected capacity change from 0 to 32768 [ 313.775570][T10706] JBD2: Ignoring recovery information on journal [ 313.985668][ T976] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 313.988273][T10504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.056845][T10706] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 314.182819][ T976] usb 9-1: Using ep0 maxpacket: 16 [ 314.206991][ T976] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.240742][ T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.280742][ T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 314.320755][ T976] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 314.350988][ T976] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.363993][ T5843] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 314.437426][ T976] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 314.481000][ T976] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 314.492351][ T976] usb 9-1: Manufacturer: syz [ 314.516668][ T5839] ocfs2: Unmounting device (7,1) on (node local) [ 314.521405][ T976] usb 9-1: config 0 descriptor?? [ 314.567254][ T5843] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.590709][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 314.603636][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 314.634314][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 314.673535][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 314.687323][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 314.717132][ T5843] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 314.753825][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 314.804141][ T5843] usb 3-1: Product: syz [ 314.808372][ T5843] usb 3-1: Manufacturer: syz [ 314.835550][ T5843] usb 3-1: SerialNumber: syz [ 314.865618][ T5843] usb 3-1: config 0 descriptor?? [ 314.960668][ T976] rc_core: IR keymap rc-hauppauge not found [ 314.966624][ T976] Registered IR keymap rc-empty [ 315.002038][ T976] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 315.030802][ T29] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 315.053277][ T976] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 315.079109][ T976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 315.102969][T10783] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1741'. [ 315.115250][ T5843] radio-si470x 3-1:0.0: DeviceID=0x25af ChipID=0x0000 [ 315.143176][ T5843] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 315.170457][ T976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input17 [ 315.219732][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.239016][ T976] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 315.251991][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.281977][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.308420][ T976] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 315.313126][ T29] usb 7-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 315.333025][ T5843] radio-si470x 3-1:0.0: software version 37, hardware version 175 [ 315.354379][ T976] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 315.354908][ T5843] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 315.385061][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.401716][ T976] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 315.423436][T10788] loop1: detected capacity change from 0 to 128 [ 315.427216][ T29] usb 7-1: config 0 descriptor?? [ 315.451061][ T976] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 315.503029][T10788] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 315.516316][ T976] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 315.540922][ T976] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 315.544094][ T5843] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 315.560927][ T976] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 315.568864][T10788] ext4 filesystem being mounted at /293/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 315.582106][ T976] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 315.609028][T10504] veth0_vlan: entered promiscuous mode [ 315.620788][ T976] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 315.642264][T10504] veth1_vlan: entered promiscuous mode [ 315.650412][ T5843] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 315.679541][ T5843] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 315.684030][ T976] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 315.708980][ T5843] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 315.753855][ T976] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 315.784205][ T5843] usb 3-1: USB disconnect, device number 20 [ 315.821521][ T5834] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 315.828824][T10504] veth0_macvtap: entered promiscuous mode [ 315.858792][ T5839] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.870395][T10504] veth1_macvtap: entered promiscuous mode [ 315.894887][ T976] usb 9-1: USB disconnect, device number 3 [ 315.950471][T10504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.967827][T10504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.001547][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 316.009313][ T29] wacom 0003:056A:0000.001D: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 316.009868][ T73] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.051922][ T5834] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 316.073211][ T73] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.092218][ T5834] usb 4-1: config 0 has no interface number 0 [ 316.119401][ T29] wacom 0003:056A:0000.001D: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.6-1/input0 [ 316.149693][ T5834] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 316.164026][ T73] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.178906][ T29] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0000.001D/input/input18 [ 316.182451][ T73] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.200693][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.233401][ T5834] usb 4-1: Product: syz [ 316.249463][ T5834] usb 4-1: Manufacturer: syz [ 316.276298][ T5834] usb 4-1: SerialNumber: syz [ 316.345369][ T5834] usb 4-1: config 0 descriptor?? [ 316.387233][ T5834] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 316.401690][ T29] usb 7-1: USB disconnect, device number 14 [ 316.497588][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.504093][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.638461][T10799] fido_id[10799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 316.675328][ T5834] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 316.730428][ T5834] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 316.783769][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.850678][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.919546][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 3 [ 317.111813][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.138446][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 317.144605][ T976] usb 4-1: USB disconnect, device number 17 [ 317.180216][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.234434][ T976] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 317.315859][ T976] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 317.381611][ T976] quatech2 4-1:0.51: device disconnected [ 317.910179][ T5932] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 317.949878][T10834] loop2: detected capacity change from 0 to 2048 [ 318.054920][T10834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.105668][ T5932] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 318.105725][ T5932] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 318.105778][ T5932] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 318.108407][ T5932] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 318.108453][ T5932] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.108490][ T5932] usb 10-1: Product: syz [ 318.108517][ T5932] usb 10-1: Manufacturer: syz [ 318.108545][ T5932] usb 10-1: SerialNumber: syz [ 318.113058][ T5932] usb 10-1: config 0 descriptor?? [ 318.121095][T10830] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 318.121271][T10830] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 318.145096][ T5932] usb 10-1: ucan: probing device on interface #0 [ 318.213379][T10844] loop3: detected capacity change from 0 to 128 [ 318.563290][ T5932] usb 10-1: ucan: device reported invalid device info [ 318.563328][ T5932] usb 10-1: ucan: probe failed; try to update the device firmware [ 318.814566][ T5925] usb 10-1: USB disconnect, device number 2 [ 319.633166][ T29] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 319.724048][T10886] loop9: detected capacity change from 0 to 2048 [ 319.762845][T10886] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.830404][ T29] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.872893][ T29] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.910944][ T29] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.914090][T10893] loop3: detected capacity change from 0 to 256 [ 319.945848][T10893] exfat: Deprecated parameter 'namecase' [ 320.006699][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.030888][T10893] exfat: Deprecated parameter 'namecase' [ 320.034814][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1776'. [ 320.062973][T10886] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.120131][T10878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 320.151743][T10893] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 320.194877][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.428319][T10504] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.847313][ T5847] usb 3-1: USB disconnect, device number 21 [ 321.071101][ T5932] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 321.251165][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 321.275393][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.320662][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.360788][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 321.417979][ T5932] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 321.454430][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.520735][ T5932] usb 2-1: config 0 descriptor?? [ 321.999176][ T5932] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 322.040421][T10942] loop9: detected capacity change from 0 to 512 [ 322.058507][ T5932] microsoft 0003:045E:07DA.001E: unknown main item tag 0x7 [ 322.080846][ T5932] microsoft 0003:045E:07DA.001E: report is too long [ 322.100147][ T5932] microsoft 0003:045E:07DA.001E: item 0 4 0 8 parsing failed [ 322.133802][ T5932] microsoft 0003:045E:07DA.001E: parse failed [ 322.140043][ T5932] microsoft 0003:045E:07DA.001E: probe with driver microsoft failed with error -22 [ 322.211254][T10942] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #11: comm syz.9.1790: invalid indirect mapped block 4294967295 (level 1) [ 322.304548][ T5932] usb 2-1: USB disconnect, device number 10 [ 322.324885][T10942] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 322.326193][T10942] EXT4-fs error (device loop9): ext4_free_branches:1020: inode #11: comm syz.9.1790: invalid indirect mapped block 4294967295 (level 1) [ 322.336014][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 322.336047][ C1] EXT4-fs (loop9): initial error at time 1774877061: ext4_free_branches:1020: inode 11 [ 322.336101][ C1] EXT4-fs (loop9): last error at time 1774877061: ext4_free_branches:1020: inode 11 [ 322.451420][T10942] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 322.452101][T10942] EXT4-fs (loop9): 2 truncates cleaned up [ 322.525074][T10942] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.798157][T10924] loop3: detected capacity change from 0 to 32768 [ 322.830164][T10957] loop6: detected capacity change from 0 to 1024 [ 322.886173][T10504] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.925813][T10924] [ 322.925813][T10924] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 322.925813][T10924] [ 322.975043][T10957] hfsplus: bad catalog entry type [ 323.025640][T10924] read_mapping_page failed! [ 323.081409][T10924] ERROR: (device loop3): txAbort: [ 323.081409][T10924] [ 323.124265][T10933] loop2: detected capacity change from 0 to 32768 [ 323.169108][T10960] jfs_rmdir: dtDelete returned -2 [ 323.195914][T10933] [ 323.195914][T10933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.195914][T10933] [ 323.250443][ T1001] hfsplus: b-tree write err: -5, ino 25 [ 323.254294][T10967] Bluetooth: MGMT ver 1.23 [ 323.266983][ T1001] hfsplus: b-tree write err: -5, ino 4 [ 323.291501][ T1001] hfsplus: b-tree write err: -5, ino 2 [ 323.292744][T10966] loop1: detected capacity change from 0 to 1024 [ 323.346398][T10966] EXT4-fs: Ignoring removed bh option [ 323.361681][T10933] [ 323.361681][T10933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.361681][T10933] [ 323.390751][T10966] EXT4-fs: inline encryption not supported [ 323.428723][T10933] [ 323.428723][T10933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.428723][T10933] [ 323.439443][T10966] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.471306][ T58] ERROR: (device loop3): diWrite: ixpxd invalid [ 323.471306][ T58] [ 323.480315][ T58] ERROR: (device loop3): txAbort: [ 323.480315][ T58] [ 323.497711][T10933] [ 323.497711][T10933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.497711][T10933] [ 323.550777][T10933] [ 323.550777][T10933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.550777][T10933] [ 323.610797][ T58] jfs_write_inode: jfs_commit_inode failed! [ 323.618305][ T5840] [ 323.618305][ T5840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.618305][ T5840] [ 323.643006][T10933] [ 323.643006][T10933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.643006][T10933] [ 323.654337][T10966] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 323.700804][ T5840] [ 323.700804][ T5840] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.700804][ T5840] [ 323.736041][T10966] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #3: block 2: comm syz.1.1797: lblock 2 mapped to illegal pblock 2 (length 1) [ 323.808526][T10933] [ 323.808526][T10933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.808526][T10933] [ 323.858452][T10966] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 323.861091][T10966] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 323.878309][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 323.878350][ C0] EXT4-fs (loop1): initial error at time 1774877062: ext4_map_blocks:786: inode 3: block 2 [ 323.878422][ C0] EXT4-fs (loop1): last error at time 1774877062: ext4_map_blocks:786: inode 3: block 2 [ 323.906054][ T5831] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 323.915901][ T110] [ 323.915901][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 323.915901][ T110] [ 323.986326][T10966] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #3: block 48: comm syz.1.1797: lblock 0 mapped to illegal pblock 48 (length 1) [ 324.054423][T10966] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 324.054779][T10966] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 324.112278][ T5831] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.144654][ T5831] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 324.156396][T10966] EXT4-fs error (device loop1): ext4_acquire_dquot:7024: comm syz.1.1797: Failed to acquire dquot type 0 [ 324.210680][ T5831] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.220180][ T5826] [ 324.220180][ T5826] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.220180][ T5826] [ 324.220335][T10966] loop1: lost filesystem error report for type 5 error -117 [ 324.242733][ T5826] [ 324.242733][ T5826] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 324.242733][ T5826] [ 324.260938][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.281269][T10966] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 324.321457][T10973] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 324.345130][ T5831] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.360695][T10966] loop1: lost filesystem error report for type 5 error -117 [ 324.364199][T10966] EXT4-fs error (device loop1): ext4_evict_inode:265: inode #11: comm syz.1.1797: mark_inode_dirty error [ 324.443272][T10966] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 324.466267][T10966] EXT4-fs warning (device loop1): ext4_evict_inode:267: couldn't mark inode dirty (err -117) [ 324.509581][T10966] EXT4-fs (loop1): 1 orphan inode deleted [ 324.524870][ T1156] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 324.546563][T10966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.587296][ T1156] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 324.612030][ T1156] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 324.706943][T10987] loop3: detected capacity change from 0 to 1024 [ 324.714851][ T1156] EXT4-fs error (device loop1): ext4_release_dquot:7060: comm kworker/u8:11: Failed to release dquot type 0 [ 324.922330][ T30] audit: type=1800 audit(1774877063.641:60): pid=10987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1801" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 324.926720][T10987] hfsplus: request for non-existent node 16777216 in B*Tree [ 324.982921][T10966] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #3: block 48: comm syz.1.1797: lblock 0 mapped to illegal pblock 48 (length 1) [ 324.991335][ T5831] usb 10-1: USB disconnect, device number 3 [ 325.019161][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1807'. [ 325.036599][T10966] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 325.040817][T10987] hfsplus: request for non-existent node 16777216 in B*Tree [ 325.292645][ T5851] Bluetooth: hci2: command 0x0401 tx timeout [ 325.298885][ T5852] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 325.323869][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.434519][T11002] loop8: detected capacity change from 0 to 512 [ 325.448824][T11002] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 325.505177][T11002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 325.529262][T11002] System zones: 1-12 [ 325.603790][T11002] EXT4-fs error (device loop8): ext4_iget_extra_inode:5039: inode #15: comm syz.8.1812: corrupted in-inode xattr: e_value size too large [ 325.650715][ T5831] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 325.650802][T11002] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 325.660616][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 325.676248][ C1] EXT4-fs (loop8): initial error at time 1774877064: ext4_iget_extra_inode:5039: inode 15 [ 325.686255][ C1] EXT4-fs (loop8): last error at time 1774877064: ext4_iget_extra_inode:5039: inode 15 [ 325.728208][T11002] EXT4-fs error (device loop8): ext4_orphan_get:1400: comm syz.8.1812: couldn't read orphan inode 15 (err -117) [ 325.796319][T11002] loop8: lost filesystem error report for type 5 error -117 [ 325.799013][T11002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.823563][T11009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1811'. [ 325.867399][T11015] loop3: detected capacity change from 0 to 256 [ 325.898677][ T5831] usb 7-1: Using ep0 maxpacket: 16 [ 325.922161][T11015] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 325.923101][ T5831] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 325.990714][ T5831] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.031851][T11015] exFAT-fs (loop3): failed to exfat_utf8_to_utf16 (err : -22) nls len : 1 [ 326.047395][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 326.140332][ T5831] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.209698][ T5831] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 326.251568][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.346436][T10044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.350238][ T5831] usb 7-1: config 0 descriptor?? [ 326.485625][ T5831] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input21 [ 327.057183][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 327.082495][ T5932] usb 7-1: USB disconnect, device number 15 [ 327.088088][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'. [ 327.112802][ T5174] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 327.333828][T11044] loop8: detected capacity change from 0 to 1024 [ 327.626838][T11047] loop9: detected capacity change from 0 to 4096 [ 327.669309][T11047] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 327.787128][T11047] ntfs3(loop9): ino=18, mi_enum_attr [ 327.831444][T11047] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 327.996657][T11047] ntfs3(loop9): ino=0, attr_set_size_ex [ 328.060404][T11058] loop6: detected capacity change from 0 to 128 [ 328.140484][T11058] EXT4-fs (loop6): Test dummy encryption mode enabled [ 328.219098][T11058] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.367552][T11058] ext4 filesystem being mounted at /279/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 328.869722][ T6119] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 329.220718][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 329.400692][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 329.428415][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.458159][ T24] usb 4-1: config 0 has no interface number 0 [ 329.488499][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.511178][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.538164][ T24] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 329.572271][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.604207][ T24] usb 4-1: config 0 descriptor?? [ 329.795165][T11098] loop1: detected capacity change from 0 to 16 [ 329.837059][T11098] erofs (device loop1): mounted with root inode @ nid 36. [ 329.907832][T11098] erofs (device loop1): per-inode big pcluster without sb feature for nid 89 [ 329.942307][T11098] erofs (device loop1): per-inode big pcluster without sb feature for nid 89 [ 329.993956][T11098] erofs (device loop1): readahead error at folio 3 @ nid 89 [ 330.030826][T11098] erofs (device loop1): per-inode big pcluster without sb feature for nid 89 [ 330.046232][ T24] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 330.070729][T11098] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 330.078134][ T24] ft260 0003:0403:6030.001F: unknown main item tag 0x0 [ 330.101486][T11098] erofs (device loop1): per-inode big pcluster without sb feature for nid 89 [ 330.131470][T11098] erofs (device loop1): readahead error at folio 1 @ nid 89 [ 330.169436][T11098] erofs (device loop1): per-inode big pcluster without sb feature for nid 89 [ 330.225153][T11098] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 330.238606][ T24] ft260 0003:0403:6030.001F: failed to retrieve chip version [ 330.251209][T11098] erofs (device loop1): per-inode big pcluster without sb feature for nid 89 [ 330.260276][ T24] ft260 0003:0403:6030.001F: probe with driver ft260 failed with error -71 [ 330.284788][T11098] erofs (device loop1): per-inode big pcluster without sb feature for nid 89 [ 330.297735][ T24] usb 4-1: USB disconnect, device number 18 [ 330.344509][T11098] erofs (device loop1): read error -117 @ 0 of nid 89 [ 330.374948][ T30] audit: type=1800 audit(1774877069.091:61): pid=11098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1846" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 330.513333][T11084] loop2: detected capacity change from 0 to 32768 [ 330.767539][T11084] ialloc: diAlloc returned -5! [ 330.805997][T11111] ialloc: diAlloc returned -5! [ 330.806621][T11092] loop8: detected capacity change from 0 to 32768 [ 330.853762][T11092] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1844 (11092) [ 330.933273][T11092] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 330.952015][ T5847] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 330.956358][T11092] BTRFS info (device loop8): using sha256 checksum algorithm [ 331.143566][ T5847] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 331.208281][T11092] BTRFS info (device loop8): enabling ssd optimizations [ 331.219726][ T5847] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 331.247420][T11092] BTRFS info (device loop8): turning on async discard [ 331.270949][T11092] BTRFS info (device loop8): enabling free space tree [ 331.290972][ T5847] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 331.333462][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.380274][T11114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 331.412825][ T5847] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.440270][T11092] BTRFS info (device loop8): balance: start -sdevid=0,drange=4014..1 [ 331.494574][T11092] BTRFS info (device loop8): balance: ended with status: 0 [ 331.848281][T10044] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 331.962853][ T5925] usb 2-1: USB disconnect, device number 11 [ 332.959328][T11166] loop2: detected capacity change from 0 to 2048 [ 333.085496][T11145] loop3: detected capacity change from 0 to 32768 [ 333.111614][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1869'. [ 333.122416][T11172] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.194921][T11166] NILFS (loop2): failed to count free inodes: err=-34 [ 333.205005][T11145] JBD2: Ignoring recovery information on journal [ 333.228833][ T5847] IPVS: starting estimator thread 0... [ 333.343438][T11180] loop8: detected capacity change from 0 to 4096 [ 333.365869][T11177] IPVS: using max 23 ests per chain, 55200 per kthread [ 333.448615][T11145] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 333.501538][T11185] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.579442][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 333.623018][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 333.697924][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 333.723087][ T5826] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 333.765923][ T5826] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 333.775379][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 333.824076][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 333.832857][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 333.841700][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 333.850377][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 333.864438][ T5826] Remounting filesystem read-only [ 333.883886][ T5826] NILFS (loop2): error -5 truncating bmap (ino=16) [ 333.891052][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 333.918614][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 333.937641][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 333.979689][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 333.994884][ T5826] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 334.022846][ T5840] ocfs2: Unmounting device (7,3) on (node local) [ 334.039503][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 334.109387][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 334.189194][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 334.241004][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 334.284816][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 334.286341][T11200] loop2: detected capacity change from 0 to 64 [ 334.324203][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 334.351590][T11198] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 334.369660][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 334.400196][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 334.430225][T11180] NILFS (loop8): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 334.474285][T11180] NILFS (loop8): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 334.544543][T11199] nvme_fabrics: missing parameter 'transport=%s' [ 334.552176][T11199] nvme_fabrics: missing parameter 'nqn=%s' [ 334.756601][T11209] loop9: detected capacity change from 0 to 64 [ 334.801692][T11207] veth0_to_team: entered promiscuous mode [ 334.818659][T11202] nvme_fabrics: missing parameter 'transport=%s' [ 334.836125][T11202] nvme_fabrics: missing parameter 'nqn=%s' [ 335.511771][T11230] sch_tbf: peakrate 6762417878432097402 is lower than or equals to rate 8022975959529529383 ! [ 336.695142][T11227] loop8: detected capacity change from 0 to 32768 [ 336.754406][T11272] loop2: detected capacity change from 0 to 65 [ 336.794298][T11272] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 336.822583][ T30] audit: type=1800 audit(1774877075.541:62): pid=11227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1893" name="file2" dev="loop8" ino=5 res=0 errno=0 [ 337.075663][T11227] ERROR: (device loop8): dbAdjCtl: Corrupt dmapctl page [ 337.075663][T11227] [ 337.087346][T11284] loop6: detected capacity change from 0 to 256 [ 337.161519][T11227] ERROR: (device loop8): remounting filesystem as read-only [ 337.195195][T11284] FAT-fs (loop6): Directory bread(block 64) failed [ 337.214973][T11284] FAT-fs (loop6): Directory bread(block 65) failed [ 337.257200][T11284] FAT-fs (loop6): Directory bread(block 66) failed [ 337.322858][T11284] FAT-fs (loop6): Directory bread(block 67) failed [ 337.329578][T11284] FAT-fs (loop6): Directory bread(block 68) failed [ 337.366544][T11282] loop9: detected capacity change from 0 to 4096 [ 337.389527][T11284] FAT-fs (loop6): Directory bread(block 69) failed [ 337.440842][T11284] FAT-fs (loop6): Directory bread(block 70) failed [ 337.460074][T11289] loop1: detected capacity change from 0 to 64 [ 337.469888][T11284] FAT-fs (loop6): Directory bread(block 71) failed [ 337.494074][T11291] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.502521][T11284] FAT-fs (loop6): Directory bread(block 72) failed [ 337.559447][T11284] FAT-fs (loop6): Directory bread(block 73) failed [ 338.220101][ T5847] kernel write not supported for file /uhid (pid: 5847 comm: kworker/1:5) [ 338.960625][ T30] audit: type=1326 audit(1774877077.671:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f5f9c819 code=0x7ffc0000 [ 339.071425][ T30] audit: type=1326 audit(1774877077.671:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f5f9c819 code=0x7ffc0000 [ 339.091897][T11326] loop8: detected capacity change from 0 to 1024 [ 339.172079][ T30] audit: type=1326 audit(1774877077.671:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f5f9c819 code=0x7ffc0000 [ 339.329943][ T30] audit: type=1326 audit(1774877077.711:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f5f9c819 code=0x7ffc0000 [ 339.383077][ T1001] hfsplus: b-tree write err: -5, ino 25 [ 339.388835][ T1001] hfsplus: b-tree write err: -5, ino 4 [ 339.410269][T11332] loop1: detected capacity change from 0 to 256 [ 339.422538][ T1001] hfsplus: b-tree write err: -5, ino 2 [ 339.438255][ T30] audit: type=1326 audit(1774877077.711:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe6f5f9c819 code=0x7ffc0000 [ 339.458647][ T1001] hfsplus: b-tree write err: -5, ino 17 [ 339.545865][ T30] audit: type=1326 audit(1774877077.711:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f5f9c819 code=0x7ffc0000 [ 339.598196][T11334] ALSA: seq fatal error: cannot create timer (-22) [ 339.631165][ T30] audit: type=1326 audit(1774877077.711:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f5f9c819 code=0x7ffc0000 [ 339.727908][ T30] audit: type=1326 audit(1774877077.721:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f5f9c819 code=0x7ffc0000 [ 339.752887][ T30] audit: type=1326 audit(1774877077.721:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f5f9c819 code=0x7ffc0000 [ 339.974266][T11340] sctp: [Deprecated]: syz.1.1946 (pid 11340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.974266][T11340] Use struct sctp_sack_info instead [ 340.048534][T11311] loop9: detected capacity change from 0 to 32768 [ 340.058122][T11345] sctp: [Deprecated]: syz.1.1946 (pid 11345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.058122][T11345] Use struct sctp_sack_info instead [ 340.058913][T11344] loop6: detected capacity change from 0 to 256 [ 340.137789][T11318] loop3: detected capacity change from 0 to 32768 [ 340.167732][T11344] exfat: Deprecated parameter 'utf8' [ 340.207130][T11318] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1935 (11318) [ 340.268138][T11344] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 340.317585][T11318] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 340.344430][T11318] BTRFS info (device loop3): using crc32c checksum algorithm [ 340.595378][T11367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1953'. [ 340.689804][T11318] BTRFS info (device loop3): enabling ssd optimizations [ 340.730700][T11318] BTRFS info (device loop3): turning on flush-on-commit [ 340.737727][T11318] BTRFS info (device loop3): enabling free space tree [ 340.801078][T11318] BTRFS info (device loop3): enabling auto defrag [ 340.807565][T11318] BTRFS info (device loop3): use lzo compression, level 1 [ 340.876462][T11318] BTRFS info (device loop3): max_inline set to 4096 [ 340.938990][T11375] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 340.996453][T11375] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.1956: bad orphan inode 15 [ 341.024448][T11375] loop9: lost filesystem error report for type 5 error -117 [ 341.030799][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 341.044626][ C0] EXT4-fs (loop9): initial error at time 1774877079: ext4_orphan_get:1423 [ 341.053230][ C0] EXT4-fs (loop9): last error at time 1774877079: ext4_orphan_get:1423 [ 341.093361][T11375] ext4_test_bit(bit=14, block=18) = 1 [ 341.098794][T11375] is_bad_inode(inode)=0 [ 341.135978][ T5847] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 341.153865][T11375] NEXT_ORPHAN(inode)=1023 [ 341.193212][T11375] max_ino=32 [ 341.196453][T11375] i_nlink=0 [ 341.246763][T11375] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2970: inode #15: comm syz.9.1956: corrupted xattr block 19: invalid header [ 341.328490][T11375] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 341.347531][ T5847] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 341.348430][T11375] EXT4-fs warning (device loop9): ext4_evict_inode:285: xattr delete (err -117) [ 341.411400][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.447879][T11383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.470743][ T5847] usb 3-1: Product: syz [ 341.482376][ T5847] usb 3-1: Manufacturer: syz [ 341.497281][ T5847] usb 3-1: SerialNumber: syz [ 341.591060][ T5840] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 341.626920][T11375] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 341.640379][ T5847] usb 3-1: config 0 descriptor?? [ 341.654776][ T5847] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 341.684276][T11375] ext2 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.769120][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 341.860691][ T5847] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 341.870443][ T5847] usb 3-1: media controller created [ 341.955831][ T6119] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.015313][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.031807][ T5925] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 342.212536][ T5925] usb 9-1: Using ep0 maxpacket: 32 [ 342.231286][ T5925] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 342.271015][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.318932][ T5925] usb 9-1: config 0 descriptor?? [ 342.425336][T10504] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 342.533805][ T5925] as10x_usb: device has been detected [ 342.559288][ T5925] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 342.601774][ T5847] DVB: Unable to find symbol mt352_attach() [ 342.713528][ T5847] DVB: Unable to find symbol nxt6000_attach() [ 342.719883][ T5847] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 342.737699][T11400] set_capacity_and_notify: 3 callbacks suppressed [ 342.737728][T11400] loop6: detected capacity change from 0 to 4096 [ 342.765783][ T5847] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 342.772940][ T5925] usb 9-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 342.848553][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'. [ 342.857665][ T976] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 342.898970][ T5847] dvb-usb: schedule remote query interval to 1000 msecs. [ 342.945661][ T5847] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 342.987283][ T5925] as10x_usb: error during firmware upload part1 [ 343.015287][T11416] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.021871][ T5847] dvb-usb: bulk message failed: -22 (7/0) [ 343.056183][ T5925] Registered device nBox DVB-T Dongle [ 343.087151][ T5925] usb 9-1: USB disconnect, device number 4 [ 343.098686][ T976] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.119880][ T5847] dvb-usb: bulk message failed: -22 (7/0) [ 343.170640][ T976] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 343.212327][ T976] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.253641][ T5847] usb 3-1: USB disconnect, device number 22 [ 343.296193][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.414213][T11406] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 343.435115][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1970'. [ 343.449400][ T976] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.458722][ T5925] Unregistered device nBox DVB-T Dongle [ 343.471717][ T5925] as10x_usb: device has been disconnected [ 343.509326][T11422] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1969'. [ 343.535483][T11423] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1970'. [ 343.732468][ T5847] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 344.046258][T11433] tipc: Started in network mode [ 344.081165][T11433] tipc: Node identity e0000002, cluster identity 4711 [ 344.088447][ T976] usb 4-1: USB disconnect, device number 19 [ 344.154916][T11433] tipc: Enabling of bearer rejected, failed to enable media [ 344.331995][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.344894][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.364545][ T5925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.466461][T11440] loop9: detected capacity change from 0 to 2048 [ 344.553979][T11440] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 344.620935][T11440] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 344.690795][T11440] UDF-fs: Scanning with blocksize 512 failed [ 344.731659][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 344.741008][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 344.870845][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.924903][T11440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.130873][ T5925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.146586][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 345.345620][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.402288][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.449623][ T9] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 345.504850][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.631997][ T9] usb 2-1: config 0 descriptor?? [ 346.101792][T11490] loop8: detected capacity change from 0 to 512 [ 346.114055][ T9] hid-led 0003:1D34:000A.0020: item fetching failed at offset 0/3 [ 346.135147][ T9] hid-led 0003:1D34:000A.0020: probe with driver hid-led failed with error -22 [ 346.173073][T11490] EXT4-fs (loop8): Test dummy encryption mode enabled [ 346.209295][T11492] loop3: detected capacity change from 0 to 64 [ 346.223975][T11490] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 346.304732][T11490] EXT4-fs (loop8): 1 truncate cleaned up [ 346.370947][T11492] hfs: small file entry [ 346.443907][ T5925] usb 2-1: USB disconnect, device number 12 [ 346.524461][T11490] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.755691][T11473] loop2: detected capacity change from 0 to 32768 [ 346.786976][T10044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.856437][T11473] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 346.887415][T11511] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 347.156907][T11473] XFS (loop2): Ending clean mount [ 347.217600][T11473] XFS (loop2): Quotacheck needed: Please wait. [ 347.469697][T11473] XFS (loop2): Quotacheck: Done. [ 347.705122][T11530] loop9: detected capacity change from 0 to 32768 [ 347.717366][T11530] workqueue: name exceeds WQ_NAME_LEN. Truncating to: gfs2-glock/__"_z#˱1 [ 347.744010][T11530] gfs2: fsid=__"_z#˱1 I3wʂX9K8~Ջ3fk~|E: Trying to join cluster "lock_nolock", "__"_z#˱1 I3wʂX9K8~Ջ3fk~|E" [ 347.762818][T11530] gfs2: fsid=__"_z#˱1 I3wʂX9K8~Ջ3fk~|E: Now mounting FS (format 1801)... [ 347.817374][T11530] gfs2: fsid=__"_z#˱1 I3wʂX9K8~Ջ3fk~|E.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 347.837734][T11530] gfs2: fsid=__"_z#˱1 I3wʂX9K8~Ջ3fk~|E.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6 [ 347.853512][T11530] gfs2: fsid=__"_z#˱1 I3wʂX9K8~Ջ3fk~|E.0: H: s:SH f:eEcH e:0 p:0 [(none)] gfs2_fill_super+0x1d3d/0x2cf0 [ 347.869601][T11530] gfs2: fsid=__"_z#˱1 I3wʂX9K8~Ջ3fk~|E.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 347.883065][T11530] CPU: 1 UID: 0 PID: 11530 Comm: syz.9.2005 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.883131][T11530] Tainted: [L]=SOFTLOCKUP [ 347.883144][T11530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.883168][T11530] Call Trace: [ 347.883180][T11530] [ 347.883193][T11530] dump_stack_lvl+0x100/0x190 [ 347.883261][T11530] gfs2_withdraw.cold+0xa/0xed [ 347.883308][T11530] gfs2_jdesc_check+0x2b0/0x2f0 [ 347.883377][T11530] init_inodes+0x13ac/0x27c0 [ 347.883438][T11530] ? vsnprintf+0x411/0x1240 [ 347.883508][T11530] ? __pfx_init_inodes+0x10/0x10 [ 347.883567][T11530] ? gfs2_fill_super+0x1d3d/0x2cf0 [ 347.883619][T11530] ? init_sb+0xb83/0xfd0 [ 347.883681][T11530] ? __pfx_snprintf+0x10/0x10 [ 347.883775][T11530] ? gfs2_fill_super+0x1d3d/0x2cf0 [ 347.883827][T11530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.883877][T11530] gfs2_fill_super+0x1d3d/0x2cf0 [ 347.883930][T11530] ? __pfx_vsnprintf+0x10/0x10 [ 347.884009][T11530] ? __pfx_gfs2_fill_super+0x10/0x10 [ 347.884062][T11530] ? __pfx_snprintf+0x10/0x10 [ 347.884129][T11530] ? gfs2_fill_super+0x19ba/0x2cf0 [ 347.884182][T11530] ? find_held_lock+0x2b/0x80 [ 347.884231][T11530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.884279][T11530] ? set_blocksize+0x1cf/0x460 [ 347.884330][T11530] ? setup_bdev_super+0x337/0x730 [ 347.884384][T11530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.884432][T11530] ? sb_set_blocksize+0x1fe/0x290 [ 347.884497][T11530] ? get_tree_bdev_flags+0x38c/0x620 [ 347.884546][T11530] get_tree_bdev_flags+0x38c/0x620 [ 347.884599][T11530] ? __pfx_gfs2_fill_super+0x10/0x10 [ 347.884656][T11530] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 347.884715][T11530] ? rcu_is_watching+0x12/0xc0 [ 347.884768][T11530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.884817][T11530] ? apparmor_capable+0x1d7/0x4d0 [ 347.884866][T11530] gfs2_get_tree+0x4e/0x280 [ 347.884922][T11530] vfs_get_tree+0x92/0x320 [ 347.884964][T11530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.885017][T11530] path_mount+0x7d0/0x23d0 [ 347.885067][T11530] ? __pfx_path_mount+0x10/0x10 [ 347.885105][T11530] ? lockdep_hardirqs_on+0x78/0x100 [ 347.885146][T11530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.885200][T11530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.885249][T11530] ? kmem_cache_free+0x124/0x6a0 [ 347.885310][T11530] ? __x64_sys_mount+0x293/0x310 [ 347.885349][T11530] __x64_sys_mount+0x293/0x310 [ 347.885392][T11530] ? __pfx___x64_sys_mount+0x10/0x10 [ 347.885435][T11530] ? do_user_addr_fault+0x8d6/0x12f0 [ 347.885480][T11530] ? srso_alias_return_thunk+0x5/0xfbef5 [ 347.885536][T11530] do_syscall_64+0x106/0xf80 [ 347.885574][T11530] ? irqentry_exit+0x138/0x670 [ 347.885618][T11530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.885660][T11530] RIP: 0033:0x7ff943f9da8a [ 347.885693][T11530] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.885732][T11530] RSP: 002b:00007ff944d7fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 347.885777][T11530] RAX: ffffffffffffffda RBX: 00007ff944d7fee0 RCX: 00007ff943f9da8a [ 347.885803][T11530] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 00007ff944d7fea0 [ 347.885829][T11530] RBP: 0000200000000000 R08: 00007ff944d7fee0 R09: 000000000000881d [ 347.885855][T11530] R10: 000000000000881d R11: 0000000000000246 R12: 0000200000000080 [ 347.885880][T11530] R13: 00007ff944d7fea0 R14: 0000000000012729 R15: 0000200000000600 [ 347.885933][T11530] [ 347.885948][T11530] gfs2: fsid=__"_z#˱1 I3wʂX9K8~Ջ3fk~|E.0: my journal (0) is bad: -5 [ 348.252127][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 348.395818][ T5826] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 348.410804][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.485910][T11545] loop6: detected capacity change from 0 to 512 [ 348.648678][T11545] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #11: comm syz.6.2011: invalid indirect mapped block 256 (level 2) [ 348.731043][T11545] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 348.740601][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 348.756388][ C0] EXT4-fs (loop6): initial error at time 1774877087: ext4_free_branches:1020: inode 11 [ 348.766149][ C0] EXT4-fs (loop6): last error at time 1774877087: ext4_free_branches:1020: inode 11 [ 348.806879][T11545] EXT4-fs (loop6): 2 truncates cleaned up [ 348.852997][T11545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.038170][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 349.038197][ T30] audit: type=1800 audit(1774877087.751:78): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2011" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 349.213494][T11528] loop3: detected capacity change from 0 to 32768 [ 349.319148][T11528] ea_get: invalid extended attribute [ 349.358086][T11528] ffff888054d5cc70: 04 00 00 00 .... [ 349.378932][ T6119] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.520710][ T5843] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 349.740669][ T5843] usb 9-1: Using ep0 maxpacket: 16 [ 349.779933][T11571] loop6: detected capacity change from 0 to 256 [ 349.791431][ T5843] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 349.834183][T11571] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 349.849573][T11565] loop9: detected capacity change from 0 to 4096 [ 349.858565][ T5843] usb 9-1: config 0 interface 0 has no altsetting 0 [ 349.883802][ T5843] usb 9-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 349.931378][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.977123][ T5843] usb 9-1: config 0 descriptor?? [ 350.006319][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 350.459735][ T5843] logitech 0003:046D:C24F.0021: unknown main item tag 0x6 [ 350.512740][ T5843] logitech 0003:046D:C24F.0021: invalid report_size 26545 [ 350.561617][ T5843] logitech 0003:046D:C24F.0021: item 0 2 1 7 parsing failed [ 350.603517][ T5843] logitech 0003:046D:C24F.0021: parse failed [ 350.609677][ T5843] logitech 0003:046D:C24F.0021: probe with driver logitech failed with error -22 [ 350.690179][ T5843] usb 9-1: USB disconnect, device number 5 [ 351.130742][ T5852] Bluetooth: hci2: command 0x0401 tx timeout [ 351.149542][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 351.212840][T11563] loop2: detected capacity change from 0 to 32768 [ 351.310901][T11563] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 351.547305][T11563] XFS (loop2): Ending clean mount [ 351.757734][T11621] loop6: detected capacity change from 0 to 256 [ 351.933215][ T5826] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 351.953219][T11621] FAT-fs (loop6): Directory bread(block 64) failed [ 352.010102][T11621] FAT-fs (loop6): Directory bread(block 65) failed [ 352.021363][T11621] FAT-fs (loop6): Directory bread(block 66) failed [ 352.061238][T11621] FAT-fs (loop6): Directory bread(block 67) failed [ 352.067913][T11621] FAT-fs (loop6): Directory bread(block 68) failed [ 352.177825][T11621] FAT-fs (loop6): Directory bread(block 69) failed [ 352.222200][T11621] FAT-fs (loop6): Directory bread(block 70) failed [ 352.249545][T11621] FAT-fs (loop6): Directory bread(block 71) failed [ 352.285121][T11621] FAT-fs (loop6): Directory bread(block 72) failed [ 352.301432][T11621] FAT-fs (loop6): Directory bread(block 73) failed [ 352.391996][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2038'. [ 352.425473][T11591] loop3: detected capacity change from 0 to 32768 [ 352.500505][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 352.509716][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 352.516928][T11591] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2027 (11591) [ 352.670728][T11591] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 352.731243][T11591] BTRFS info (device loop3): using crc32c checksum algorithm [ 352.964968][T11651] xt_hashlimit: size too large, truncated to 1048576 [ 352.993749][T11591] BTRFS info (device loop3): enabling ssd optimizations [ 353.023025][T11591] BTRFS info (device loop3): turning on flush-on-commit [ 353.050139][T11591] BTRFS info (device loop3): enabling free space tree [ 353.053548][T11659] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2043'. [ 353.088282][T11591] BTRFS info (device loop3): enabling auto defrag [ 353.121419][T11662] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2043'. [ 353.131116][T11591] BTRFS info (device loop3): use lzo compression, level 1 [ 353.138270][T11591] BTRFS info (device loop3): max_inline set to 4096 [ 353.193802][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'. [ 353.244972][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2045'. [ 353.255722][T11663] netlink: 'syz.1.2045': attribute type 15 has an invalid length. [ 353.590201][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2047'. [ 353.774033][ T5840] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 353.910675][ T5847] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 354.122067][ T5847] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 354.154574][ T5847] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 354.198424][ T5847] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 354.235731][T11687] loop1: detected capacity change from 0 to 256 [ 354.252402][ T5847] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 354.264366][T11687] exfat: Deprecated parameter 'utf8' [ 354.269737][T11687] exfat: Deprecated parameter 'utf8' [ 354.320735][T11687] exfat: Deprecated parameter 'utf8' [ 354.334946][ T5847] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 354.371729][ T5847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.423999][ T5847] usb 10-1: config 0 descriptor?? [ 354.439423][T11687] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 354.580001][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 354.646027][ T5847] hdpvr 10-1:0.0: firmware version 0x0 dated [ 354.664008][ T5847] hdpvr 10-1:0.0: untested firmware, the driver might not work. [ 354.877956][T11694] loop2: detected capacity change from 0 to 4096 [ 354.961689][T11694] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 355.045343][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2062'. [ 355.131914][T11694] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 355.248051][ T5847] hdpvr 10-1:0.0: Could not setup controls [ 355.267167][ T5847] hdpvr 10-1:0.0: registering videodev failed [ 355.346123][ T5847] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -71 [ 355.376204][ T5847] usb 10-1: USB disconnect, device number 4 [ 355.382394][ T5843] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 355.555009][T11710] loop2: detected capacity change from 0 to 128 [ 355.564822][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 355.591393][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.612569][ T5843] usb 4-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 355.652014][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.700367][ T5843] usb 4-1: config 0 descriptor?? [ 355.881218][T11715] loop9: detected capacity change from 0 to 128 [ 355.904704][T11715] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 356.180688][ T5843] sony 0003:12BA:0100.0022: hidraw0: USB HID v7f.fd Device [HID 12ba:0100] on usb-dummy_hcd.3-1/input0 [ 356.261857][ T5843] sony 0003:12BA:0100.0022: failed to claim input [ 356.278609][ T29] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 356.394303][ T976] usb 4-1: USB disconnect, device number 20 [ 356.471389][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 356.497114][ T29] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 356.522614][T11724] fido_id[11724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 356.526614][ T29] usb 3-1: config 0 has no interface number 0 [ 356.604325][ T29] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 356.621590][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.634379][ T29] usb 3-1: Product: syz [ 356.638615][ T29] usb 3-1: Manufacturer: syz [ 356.657363][T11707] loop8: detected capacity change from 0 to 32768 [ 356.661156][ T29] usb 3-1: SerialNumber: syz [ 356.724924][ T29] usb 3-1: config 0 descriptor?? [ 356.756360][ T29] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 356.810877][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.948164][T11728] loop9: detected capacity change from 0 to 256 [ 356.965043][ T29] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 357.048976][T11728] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011e09, chksum : 0x7e84ed8f, utbl_chksum : 0xe619d30d) [ 357.065242][ T29] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 357.372244][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 357.457346][T11720] loop1: detected capacity change from 0 to 32768 [ 357.513543][T11720] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2071 (11720) [ 357.594250][T11721] loop6: detected capacity change from 0 to 32768 [ 357.611574][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 357.612650][ T976] usb 3-1: USB disconnect, device number 23 [ 357.630117][T11720] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 357.673354][ T976] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 357.689473][T11720] BTRFS info (device loop1): using crc32c checksum algorithm [ 357.735282][T11721] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 357.751714][ T976] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 357.772002][ T976] quatech2 3-1:0.51: device disconnected [ 357.857712][T11721] XFS (loop6): Ending clean mount [ 357.949121][T11720] BTRFS info (device loop1): enabling ssd optimizations [ 357.976724][T11720] BTRFS info (device loop1): turning on flush-on-commit [ 357.997047][T11720] BTRFS info (device loop1): enabling free space tree [ 358.015291][T11720] BTRFS info (device loop1): enabling auto defrag [ 358.038546][T11760] netlink: 'syz.3.2081': attribute type 29 has an invalid length. [ 358.054143][T11720] BTRFS info (device loop1): use lzo compression, level 1 [ 358.084282][ T6119] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 358.087779][T11760] netlink: 'syz.3.2081': attribute type 29 has an invalid length. [ 358.109818][T11720] BTRFS info (device loop1): max_inline set to 4096 [ 358.621190][ T5839] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 359.491763][ T976] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 359.523200][T11793] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2097'. [ 359.607761][T11794] loop2: detected capacity change from 0 to 1024 [ 359.679627][ T976] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 359.712375][ T976] usb 10-1: config 0 has no interface number 0 [ 359.749758][ T976] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 359.818136][ T976] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.834824][T11794] hfsplus: b-tree write err: -5, ino 2 [ 359.883972][ T976] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 359.920958][ T976] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.975176][ T976] usb 10-1: Product: syz [ 359.979584][ T976] usb 10-1: Manufacturer: syz [ 360.005403][ T976] usb 10-1: SerialNumber: syz [ 360.035800][ T73] hfsplus: b-tree write err: -5, ino 25 [ 360.083950][ T73] hfsplus: b-tree write err: -5, ino 4 [ 360.089663][ T73] hfsplus: b-tree write err: -5, ino 2 [ 360.107535][ T976] usb 10-1: config 0 descriptor?? [ 360.126594][ T73] hfsplus: b-tree write err: -5, ino 26 [ 360.151115][T11790] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 360.162588][ T976] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 360.231824][ T976] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 360.476874][T11773] loop8: detected capacity change from 0 to 32768 [ 360.608815][T11773] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 360.629279][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 360.703842][ T29] usb 10-1: USB disconnect, device number 5 [ 360.769801][ T29] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 360.835082][ T29] cyberjack 10-1:0.69: device disconnected [ 360.872159][T11773] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 360.944751][T11773] XFS (loop8): Starting recovery (logdev: internal) [ 361.035813][T11773] XFS (loop8): Ending recovery (logdev: internal) [ 361.116878][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2110'. [ 361.172850][ T30] audit: type=1800 audit(1774877099.891:79): pid=11773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2086" name="file1" dev="loop8" ino=4422 res=0 errno=0 [ 361.189632][T11804] loop6: detected capacity change from 0 to 32768 [ 361.287795][T11832] mmap: syz.3.2111 (11832): VmData 37453824 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 361.353541][T11804] find_entry called with index = 0 [ 361.359933][T11804] read_mapping_page failed! [ 361.371993][T10044] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 361.397266][T11804] ERROR: (device loop6): txAbort: [ 361.397266][T11804] [ 361.436831][T11804] ERROR: (device loop6): diFree: numfree > numinos [ 361.436831][T11804] [ 361.636353][T11838] loop2: detected capacity change from 0 to 512 [ 361.717494][ T976] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 361.729112][T11841] loop3: detected capacity change from 0 to 128 [ 361.793428][T11838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.820424][T11841] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 361.873114][T11841] hpfs: filesystem error: improperly stopped [ 361.879163][T11841] hpfs: You really don't want any checks? You are crazy... [ 361.951760][T11841] hpfs: hpfs_map_sector(): read error [ 361.957189][T11841] hpfs: code page support is disabled [ 361.977141][ T976] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.030449][ T976] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.060838][T11841] hpfs: hpfs_map_4sectors(): unaligned read [ 362.066884][T11841] hpfs: hpfs_map_4sectors(): unaligned read [ 362.070185][ T976] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.141246][ T976] usb 10-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 362.149873][T11841] hpfs: filesystem error: unable to find root dir [ 362.171943][ T976] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.195512][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.272966][ T976] usb 10-1: config 0 descriptor?? [ 362.274801][T11841] hpfs: hpfs_map_4sectors(): unaligned read [ 362.376606][T11849] loop1: detected capacity change from 0 to 1024 [ 362.431810][T11853] netlink: 'syz.2.2119': attribute type 5 has an invalid length. [ 362.728984][ T976] belkin 0003:1020:0006.0023: item fetching failed at offset 0/3 [ 362.769562][ T976] belkin 0003:1020:0006.0023: parse failed [ 362.776394][ T976] belkin 0003:1020:0006.0023: probe with driver belkin failed with error -22 [ 363.033300][T11867] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 363.044958][ T5834] usb 10-1: USB disconnect, device number 6 [ 363.207413][T11873] loop6: detected capacity change from 0 to 512 [ 363.275505][T11873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.310346][T11879] loop1: detected capacity change from 0 to 1024 [ 363.406495][T11879] hfsplus: bad catalog entry type [ 363.547542][ T1001] hfsplus: b-tree write err: -5, ino 25 [ 363.555326][ T1001] hfsplus: b-tree write err: -5, ino 4 [ 363.579478][ T6119] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.580700][ T1001] hfsplus: b-tree write err: -5, ino 2 [ 363.842558][T11890] loop9: detected capacity change from 0 to 164 [ 364.004643][T11890] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 364.584995][T11911] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2146'. [ 364.948250][T11924] loop3: detected capacity change from 0 to 512 [ 364.971934][T11924] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 365.063062][T11924] EXT4-fs (loop3): 1 truncate cleaned up [ 365.089054][ T5851] Bluetooth: hci0: unexpected event for opcode 0x002f [ 365.138334][T11924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.446228][T11900] loop8: detected capacity change from 0 to 32768 [ 365.466248][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.748183][T11944] loop9: detected capacity change from 0 to 256 [ 365.768324][T11946] loop3: detected capacity change from 0 to 512 [ 365.787561][T11944] exfat: Deprecated parameter 'utf8' [ 365.822896][T11944] exfat: Deprecated parameter 'namecase' [ 365.871826][T11946] EXT4-fs (loop3): 1 truncate cleaned up [ 365.929862][T11944] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 365.965141][T11946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.167692][T11946] EXT4-fs: can't change dax mount option while remounting [ 366.474401][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.850689][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 367.027873][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 367.076775][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 367.107642][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 367.149567][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 367.193325][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 367.240639][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.312099][ T9] usb 2-1: config 0 descriptor?? [ 367.554780][ T9] hdpvr 2-1:0.0: firmware version 0x0 dated [ 367.581784][ T9] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 367.723448][T11994] loop8: detected capacity change from 0 to 1024 [ 367.761906][T11994] EXT4-fs: Ignoring removed mblk_io_submit option [ 367.791634][T11994] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.813227][T11994] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 367.881178][T11994] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #11: comm syz.8.2185: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 367.906547][T12003] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 367.925066][T11994] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 367.927937][T11994] EXT4-fs error (device loop8): ext4_orphan_get:1400: comm syz.8.2185: couldn't read orphan inode 11 (err -117) [ 367.937255][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 367.937292][ C0] EXT4-fs (loop8): initial error at time 1774877106: ext4_ext_check_inode:521: inode 11 [ 367.937350][ C0] EXT4-fs (loop8): last error at time 1774877106: ext4_ext_check_inode:521: inode 11 [ 368.016510][T11994] loop8: lost filesystem error report for type 5 error -117 [ 368.047980][ T9] hdpvr 2-1:0.0: Could not setup controls [ 368.058365][T11994] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.103522][ T9] hdpvr 2-1:0.0: registering videodev failed [ 368.182334][ T9] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 368.239131][ T9] usb 2-1: USB disconnect, device number 13 [ 368.407553][T10044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.639523][T12020] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 368.646102][T12020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.688476][T12020] vhci_hcd vhci_hcd.0: Device attached [ 368.717907][T12021] vhci_hcd: connection closed [ 368.718331][ T1001] vhci_hcd vhci_hcd.3: stop threads [ 368.745626][ T1001] vhci_hcd vhci_hcd.3: release socket [ 368.773809][ T1001] vhci_hcd vhci_hcd.3: disconnect device [ 369.508860][T12043] loop8: detected capacity change from 0 to 4096 [ 369.622577][T12043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.714052][T12029] loop9: detected capacity change from 0 to 32768 [ 369.800878][T12029] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 369.837600][T10044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.953187][T12029] XFS (loop9): Ending clean mount [ 370.020868][ T976] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 370.205257][T10504] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 370.237899][ T976] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 370.270804][ T976] usb 4-1: config 0 has no interface number 0 [ 370.276998][ T976] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.296957][ T976] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 370.306600][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.319004][ T976] usb 4-1: Product: syz [ 370.326443][ T976] usb 4-1: Manufacturer: syz [ 370.331804][ T976] usb 4-1: SerialNumber: syz [ 370.343843][ T976] usb 4-1: config 0 descriptor?? [ 370.423872][ T976] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 370.738852][T12077] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2219'. [ 370.773856][ T976] usb 4-1: USB disconnect, device number 21 [ 370.793883][ T976] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 371.473483][T12069] loop2: detected capacity change from 0 to 32768 [ 372.073002][ T30] audit: type=1326 audit(1774877110.791:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12104 comm="syz.6.2231" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9cff9c819 code=0x0 [ 372.128284][T12110] loop8: detected capacity change from 0 to 512 [ 372.195529][T12110] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 372.281840][T12110] EXT4-fs (loop8): 1 truncate cleaned up [ 372.345647][T12110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.555917][T12081] loop9: detected capacity change from 0 to 32768 [ 372.625812][T12081] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2221 (12081) [ 372.909088][T12081] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 372.910522][T10044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.962641][T12081] BTRFS info (device loop9): using crc32c checksum algorithm [ 373.215499][T12081] BTRFS info (device loop9): enabling ssd optimizations [ 373.223235][T12081] BTRFS info (device loop9): turning on flush-on-commit [ 373.230270][T12081] BTRFS info (device loop9): enabling free space tree [ 373.238857][T12081] BTRFS info (device loop9): enabling auto defrag [ 373.245407][T12081] BTRFS info (device loop9): use lzo compression, level 1 [ 373.252913][T12081] BTRFS info (device loop9): max_inline set to 4096 [ 373.450842][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.522401][T12142] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 373.576212][T10504] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.675123][T12148] loop2: detected capacity change from 0 to 8 [ 373.703666][T12148] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 373.729638][ T7088] udevd[7088]: incorrect cramfs checksum on /dev/loop2 [ 373.857346][ T7088] udevd[7088]: incorrect cramfs checksum on /dev/loop2 [ 374.367775][T12160] loop9: detected capacity change from 0 to 2048 [ 374.521342][T12164] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.559711][ T30] audit: type=1800 audit(1774877113.271:81): pid=12160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2249" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 375.268449][T12178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2257'. [ 375.321870][T12178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2257'. [ 375.603731][T12187] loop1: detected capacity change from 0 to 64 [ 375.826438][T12183] loop6: detected capacity change from 0 to 4096 [ 376.025762][T12171] loop9: detected capacity change from 0 to 32768 [ 376.103670][T12171] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2253 (12171) [ 376.154050][T12171] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 376.198032][T12171] BTRFS info (device loop9): using crc32c checksum algorithm [ 376.366827][T12201] loop1: detected capacity change from 0 to 512 [ 376.545077][T12183] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 376.581052][T12171] BTRFS info (device loop9): enabling ssd optimizations [ 376.588412][T12171] BTRFS info (device loop9): turning on flush-on-commit [ 376.608165][T12171] BTRFS info (device loop9): enabling free space tree [ 376.619537][T12171] BTRFS info (device loop9): enabling auto defrag [ 376.626390][T12171] BTRFS info (device loop9): use lzo compression, level 1 [ 376.633874][T12171] BTRFS info (device loop9): max_inline set to 4096 [ 376.641449][T12183] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 376.727073][ T30] audit: type=1800 audit(1774877115.441:82): pid=12183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2256" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 376.727654][T12183] ntfs3(loop6): ino=1e, "file1" attr_set_size_ex [ 376.779300][T12175] loop8: detected capacity change from 0 to 32768 [ 376.803873][T12179] loop3: detected capacity change from 0 to 32768 [ 376.857202][T12213] loop2: detected capacity change from 0 to 512 [ 376.952717][T12175] BTRFS info: device /dev/loop8 (7:8) using temp-fsid 5133ca7b-f6b4-4872-8d6d-5272fb3f0aa4 [ 376.971572][T12213] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 377.013668][T12175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2255 (12175) [ 377.031157][T12182] ntfs3(loop6): ino=1e, "file1" attr_set_size_ex [ 377.049898][T12171] BTRFS info (device loop9 state M): setting nodatasum [ 377.124297][T12218] loop1: detected capacity change from 0 to 128 [ 377.124427][T12175] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 377.146515][T12213] EXT4-fs (loop2): 1 truncate cleaned up [ 377.154282][T12171] BTRFS info (device loop9 state M): max_inline set to 4096 [ 377.180076][T12218] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 377.192190][T12213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.230815][T12175] BTRFS info (device loop8): using crc32c checksum algorithm [ 377.335826][T12218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.521997][T12175] BTRFS info (device loop8): enabling ssd optimizations [ 377.529000][T12175] BTRFS info (device loop8): turning on flush-on-commit [ 377.579065][ T13] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 377.618287][ T6119] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 377.650689][T12175] BTRFS info (device loop8): enabling free space tree [ 377.652080][T10504] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 377.657517][T12175] BTRFS info (device loop8): enabling auto defrag [ 377.657560][T12175] BTRFS info (device loop8): use lzo compression, level 1 [ 377.720075][ T6119] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 377.757971][ T6119] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 377.770116][ T58] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 377.787791][T12175] BTRFS info (device loop8): max_inline set to 4096 [ 377.811902][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.935851][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.954110][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.990873][ T5932] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 378.210686][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 378.242176][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 378.271930][T10044] BTRFS info (device loop8): last unmount of filesystem 5133ca7b-f6b4-4872-8d6d-5272fb3f0aa4 [ 378.292490][ T5932] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 378.331017][ T5932] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 378.355995][T12240] netlink: 'syz.2.2271': attribute type 1 has an invalid length. [ 378.386731][ T5932] usb 4-1: New USB device found, idVendor=04b4, idProduct=930b, bcdDevice= 0.40 [ 378.408965][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.448808][ T5932] usb 4-1: Product: syz [ 378.459885][ T5932] usb 4-1: Manufacturer: syz [ 378.480668][ T5932] usb 4-1: SerialNumber: syz [ 378.776924][ T5932] usb 4-1: unit 5 not found! [ 378.970249][ T5932] usb 4-1: USB disconnect, device number 22 [ 379.234999][T12256] loop9: detected capacity change from 0 to 1024 [ 381.657936][T12287] loop3: detected capacity change from 0 to 40427 [ 381.713906][T12281] loop6: detected capacity change from 0 to 32768 [ 381.733994][T12308] loop2: detected capacity change from 0 to 64 [ 381.797565][T12281] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2286 (12281) [ 382.000686][T12281] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 382.042311][T12281] BTRFS info (device loop6): using crc32c checksum algorithm [ 382.097587][T12287] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 382.142183][T12287] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 382.512133][T12281] BTRFS info (device loop6): enabling ssd optimizations [ 382.534633][T12281] BTRFS info (device loop6): turning on flush-on-commit [ 382.571901][T12281] BTRFS info (device loop6): enabling free space tree [ 382.579543][T12281] BTRFS info (device loop6): enabling auto defrag [ 382.595932][T12281] BTRFS info (device loop6): use lzo compression, level 1 [ 382.698513][T12281] BTRFS info (device loop6): max_inline set to 4096 [ 383.007065][T12302] loop1: detected capacity change from 0 to 32768 [ 383.244464][T12302] JBD2: Ignoring recovery information on journal [ 383.252747][T12349] loop8: detected capacity change from 0 to 2048 [ 383.406230][T12349] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.460819][ T976] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 383.511032][T12302] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 383.540765][T12349] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.613790][ T6119] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 383.693647][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 383.707840][ T976] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 383.774759][ T976] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 383.790387][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.840598][ T976] usb 3-1: Product: syz [ 383.844800][ T976] usb 3-1: Manufacturer: syz [ 383.856088][ T976] usb 3-1: SerialNumber: syz [ 383.871939][T12355] overlayfs: Failed to create volatile/dirty file. [ 383.904039][ T976] usb 3-1: config 0 descriptor?? [ 383.918588][ T976] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 383.941894][ T976] usb 3-1: setting power ON [ 383.946822][ T976] dvb-usb: bulk message failed: -22 (2/0) [ 384.024688][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 384.052835][ T5839] ocfs2: Unmounting device (7,1) on (node local) [ 384.065030][ T976] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 384.115623][ T976] usb 3-1: media controller created [ 384.162444][T12350] dvb-usb: bulk message failed: -22 (3/0) [ 384.168721][T12350] dvb-usb: bulk message failed: -22 (3/0) [ 384.214776][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.285040][T10044] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.379189][ T976] usb 3-1: selecting invalid altsetting 6 [ 384.385908][ T976] usb 3-1: digital interface selection failed (-22) [ 384.392612][ T976] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 384.435404][ T976] usb 3-1: setting power OFF [ 384.460148][ T976] dvb-usb: bulk message failed: -22 (2/0) [ 384.511994][ T976] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 384.579866][ T976] (NULL device *): no alternate interface [ 384.732654][T12365] overlayfs: invalid origin (0000) [ 384.774650][ T976] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 384.870681][ T976] usb 3-1: USB disconnect, device number 24 [ 385.249872][ T976] hid-generic 0005:4C4A:5508.0024: item fetching failed at offset 0/1 [ 385.315949][ T976] hid-generic 0005:4C4A:5508.0024: probe with driver hid-generic failed with error -22 [ 385.658960][T12386] can0: slcan on ptm0. [ 385.723893][T12391] macvtap1: entered promiscuous mode [ 385.751015][T12391] macvtap1: entered allmulticast mode [ 385.779878][T12391] dummy0: entered promiscuous mode [ 385.803713][T12391] dummy0: entered allmulticast mode [ 385.841452][T12391] team0: Device macvtap1 failed to register rx_handler [ 385.864635][T12397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2324'. [ 385.898407][T12391] dummy0: left allmulticast mode [ 385.904028][T12391] dummy0: left promiscuous mode [ 386.047766][T12397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2324'. [ 386.061153][ T5843] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 386.200402][T12384] can0 (unregistered): slcan off ptm0. [ 386.251490][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 386.265180][ T5843] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 386.293479][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.329101][ T5843] usb 3-1: config 0 descriptor?? [ 386.341575][T12404] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2328'. [ 386.377542][ T5843] gspca_main: sq930x-2.14.0 probing 041e:403c [ 386.450688][ T29] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 386.515673][T12409] loop9: detected capacity change from 0 to 512 [ 386.600475][T12409] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.614075][ T29] usb 2-1: not running at top speed; connect to a high speed hub [ 386.627629][ T29] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 386.638195][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.647660][ T29] usb 2-1: Product: syz [ 386.653154][ T29] usb 2-1: Manufacturer: syz [ 386.657991][ T29] usb 2-1: SerialNumber: syz [ 386.888161][T10504] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.000269][T12419] tc_dump_action: action bad kind [ 387.103741][T12422] ieee802154 phy0 wpan0: encryption failed: -126 [ 387.220635][ T5843] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 387.283261][ T5843] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 387.302288][ T29] qmi_wwan 2-1:251.0: probe with driver qmi_wwan failed with error -22 [ 387.347039][ T5843] usb 3-1: USB disconnect, device number 25 [ 387.545853][ T29] usb 2-1: USB disconnect, device number 14 [ 387.761216][ T5843] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 387.872591][T12443] loop8: detected capacity change from 0 to 7 [ 387.897274][T12446] loop2: detected capacity change from 0 to 512 [ 387.910502][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.920428][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 387.931517][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 387.942244][ T5843] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 387.953209][T12446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.960559][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.968962][ T5843] usb 4-1: config 179 has no interface number 0 [ 387.975002][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 387.981839][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 387.989699][ T5843] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 387.999074][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 388.000636][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 388.011488][ T5843] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 388.018963][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 388.029463][ T5843] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 388.063340][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 388.072999][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 388.081955][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 388.091612][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 388.100608][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 388.110312][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 388.118229][T12443] ldm_validate_partition_table(): Disk read failed. [ 388.130128][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 388.139822][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 388.160743][ T5843] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 388.170017][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 388.181819][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 388.197979][ T5843] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 388.212484][ T5843] usb 4-1: config 179 interface 65 has no altsetting 0 [ 388.225471][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 388.235156][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 388.239069][ T5843] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 388.247942][T12443] Dev loop8: unable to read RDB block 0 [ 388.281354][T12443] loop8: unable to read partition table [ 388.320864][T12443] loop8: partition table beyond EOD, truncated [ 388.333549][T12443] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 388.348248][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.437510][ T5843] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input24 [ 388.511784][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.546448][ T30] audit: type=1326 audit(1774877127.261:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12454 comm="syz.1.2362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6f5f9c819 code=0x0 [ 388.571786][ T5174] input input24: unable to receive magic message: -110 [ 388.637039][ T5174] input input24: unable to receive magic message: -32 [ 388.795538][ T5174] input input24: unable to receive magic message: -32 [ 388.921709][ T5174] input input24: unable to receive magic message: -32 [ 388.971139][ T5174] input input24: unable to receive magic message: -32 [ 388.999378][T12465] loop8: detected capacity change from 0 to 128 [ 389.032060][ T5843] usb 4-1: USB disconnect, device number 23 [ 389.038154][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 389.229898][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2368'. [ 389.280803][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2368'. [ 390.081522][T12490] loop1: detected capacity change from 0 to 256 [ 390.927270][T12487] loop3: detected capacity change from 0 to 32768 [ 391.028224][T12487] JBD2: Ignoring recovery information on journal [ 391.149180][T12514] loop6: detected capacity change from 0 to 7 [ 391.189826][T12514] ldm_validate_partition_table(): Disk read failed. [ 391.224659][T12514] Dev loop6: unable to read RDB block 0 [ 391.249014][T12487] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 391.412281][ T5925] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 391.502242][T12518] [ 391.504604][T12518] ====================================================== [ 391.511624][T12518] WARNING: possible circular locking dependency detected [ 391.518654][T12518] syzkaller #0 Tainted: G L [ 391.524642][T12518] ------------------------------------------------------ [ 391.531753][T12518] syz.8.2377/12518 is trying to acquire lock: [ 391.537842][T12518] ffff88801c6ada20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 391.548107][T12518] [ 391.548107][T12518] but task is already holding lock: [ 391.555480][T12518] ffff888026b90060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 391.566818][T12518] [ 391.566818][T12518] which lock already depends on the new lock. [ 391.566818][T12518] [ 391.577235][T12518] [ 391.577235][T12518] the existing dependency chain (in reverse order) is: [ 391.586265][T12518] [ 391.586265][T12518] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 391.594929][T12518] blk_alloc_queue+0x610/0x790 [ 391.600255][T12518] blk_mq_alloc_queue+0x174/0x290 [ 391.605854][T12518] __blk_mq_alloc_disk+0x29/0x120 [ 391.611419][T12518] loop_add+0x498/0xb60 [ 391.616125][T12518] loop_init+0x1d3/0x200 [ 391.620913][T12518] do_one_initcall+0x11d/0x760 [ 391.626219][T12518] kernel_init_freeable+0x6e5/0x7a0 [ 391.631968][T12518] kernel_init+0x1f/0x1e0 [ 391.636850][T12518] ret_from_fork+0x754/0xd80 [ 391.641976][T12518] ret_from_fork_asm+0x1a/0x30 [ 391.647285][T12518] [ 391.647285][T12518] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 391.654539][T12518] fs_reclaim_acquire+0xc4/0x100 [ 391.660042][T12518] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 391.665964][T12518] __kernfs_iattrs+0x126/0x400 [ 391.671281][T12518] __kernfs_setattr+0x4d/0x3c0 [ 391.676595][T12518] kernfs_iop_setattr+0xda/0x130 [ 391.682083][T12518] notify_change+0xb25/0x1330 [ 391.687320][T12518] do_truncate+0x1df/0x240 [ 391.692284][T12518] path_openat+0x2a55/0x31a0 [ 391.697430][T12518] do_file_open+0x20e/0x430 [ 391.702493][T12518] do_sys_openat2+0x10d/0x1e0 [ 391.707716][T12518] __x64_sys_openat+0x12d/0x210 [ 391.713100][T12518] do_syscall_64+0x106/0xf80 [ 391.718226][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.724656][T12518] [ 391.724656][T12518] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 391.733202][T12518] __lock_acquire+0x14b8/0x2630 [ 391.738621][T12518] lock_acquire+0x1cf/0x380 [ 391.743724][T12518] down_read+0x99/0x460 [ 391.748418][T12518] kernfs_iop_getattr+0x9c/0xf0 [ 391.753816][T12518] vfs_getattr_nosec+0x2d4/0x430 [ 391.759308][T12518] vfs_getattr+0x4a/0x60 [ 391.764101][T12518] loop_query_min_dio_size.isra.0+0x117/0x250 [ 391.770728][T12518] lo_ioctl+0x13aa/0x1bc0 [ 391.775620][T12518] blkdev_ioctl+0x5ad/0x6f0 [ 391.780678][T12518] __x64_sys_ioctl+0x18e/0x210 [ 391.785991][T12518] do_syscall_64+0x106/0xf80 [ 391.791122][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.797555][T12518] [ 391.797555][T12518] other info that might help us debug this: [ 391.797555][T12518] [ 391.807783][T12518] Chain exists of: [ 391.807783][T12518] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 391.807783][T12518] [ 391.822270][T12518] Possible unsafe locking scenario: [ 391.822270][T12518] [ 391.829723][T12518] CPU0 CPU1 [ 391.835082][T12518] ---- ---- [ 391.840441][T12518] lock(&q->q_usage_counter(io)#23); [ 391.845837][T12518] lock(fs_reclaim); [ 391.852349][T12518] lock(&q->q_usage_counter(io)#23); [ 391.860261][T12518] rlock(&root->kernfs_iattr_rwsem); [ 391.865644][T12518] [ 391.865644][T12518] *** DEADLOCK *** [ 391.865644][T12518] [ 391.873778][T12518] 3 locks held by syz.8.2377/12518: [ 391.878971][T12518] #0: ffff888026d50448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 391.889223][T12518] #1: ffff888026b90060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 391.900981][T12518] #2: ffff888026b90098 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 391.912936][T12518] [ 391.912936][T12518] stack backtrace: [ 391.918830][T12518] CPU: 0 UID: 0 PID: 12518 Comm: syz.8.2377 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.918881][T12518] Tainted: [L]=SOFTLOCKUP [ 391.918894][T12518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.918916][T12518] Call Trace: [ 391.918928][T12518] [ 391.918943][T12518] dump_stack_lvl+0x100/0x190 [ 391.919001][T12518] print_circular_bug.cold+0x178/0x1c7 [ 391.919062][T12518] check_noncircular+0x146/0x160 [ 391.919122][T12518] __lock_acquire+0x14b8/0x2630 [ 391.919189][T12518] lock_acquire+0x1cf/0x380 [ 391.919243][T12518] ? kernfs_iop_getattr+0x9c/0xf0 [ 391.919292][T12518] ? __pfx___might_resched+0x10/0x10 [ 391.919335][T12518] down_read+0x99/0x460 [ 391.919376][T12518] ? kernfs_iop_getattr+0x9c/0xf0 [ 391.919420][T12518] ? find_held_lock+0x2b/0x80 [ 391.919463][T12518] ? __pfx_down_read+0x10/0x10 [ 391.919503][T12518] ? kernfs_root+0xee/0x2a0 [ 391.919549][T12518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.919602][T12518] kernfs_iop_getattr+0x9c/0xf0 [ 391.919649][T12518] vfs_getattr_nosec+0x2d4/0x430 [ 391.919706][T12518] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 391.919755][T12518] vfs_getattr+0x4a/0x60 [ 391.919811][T12518] loop_query_min_dio_size.isra.0+0x117/0x250 [ 391.919869][T12518] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 391.919943][T12518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.919989][T12518] lo_ioctl+0x13aa/0x1bc0 [ 391.920048][T12518] ? __pfx_lo_ioctl+0x10/0x10 [ 391.920103][T12518] ? tomoyo_path_number_perm+0x46d/0x580 [ 391.920145][T12518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.920191][T12518] ? kasan_quarantine_put+0x104/0x240 [ 391.920233][T12518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.920277][T12518] ? blk_get_meta_cap+0xd4/0x6c0 [ 391.920329][T12518] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 391.920381][T12518] ? tomoyo_path_number_perm+0x28f/0x580 [ 391.920422][T12518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.920471][T12518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.920513][T12518] ? blkdev_common_ioctl+0x515/0x2ba0 [ 391.920578][T12518] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 391.920638][T12518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.920682][T12518] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 391.920733][T12518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.920778][T12518] ? do_vfs_ioctl+0x226/0x13e0 [ 391.920825][T12518] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 391.920881][T12518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.920931][T12518] ? find_held_lock+0x2b/0x80 [ 391.920982][T12518] ? srso_alias_return_thunk+0x5/0xfbef5 [ 391.921034][T12518] ? __pfx_lo_ioctl+0x10/0x10 [ 391.921097][T12518] blkdev_ioctl+0x5ad/0x6f0 [ 391.921152][T12518] ? __pfx_blkdev_ioctl+0x10/0x10 [ 391.921209][T12518] ? __pfx_blkdev_ioctl+0x10/0x10 [ 391.921263][T12518] __x64_sys_ioctl+0x18e/0x210 [ 391.921309][T12518] do_syscall_64+0x106/0xf80 [ 391.921344][T12518] ? irqentry_exit+0x138/0x670 [ 391.921382][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.921418][T12518] RIP: 0033:0x7f8bb439c819 [ 391.921445][T12518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.921480][T12518] RSP: 002b:00007f8bb520d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.921513][T12518] RAX: ffffffffffffffda RBX: 00007f8bb4616090 RCX: 00007f8bb439c819 [ 391.921543][T12518] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 391.921565][T12518] RBP: 00007f8bb4432c91 R08: 0000000000000000 R09: 0000000000000000 [ 391.921587][T12518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.921609][T12518] R13: 00007f8bb4616128 R14: 00007f8bb4616090 R15: 00007ffec98ce638 [ 391.921646][T12518] [ 392.308192][ T5840] ocfs2: Unmounting device (7,3) on (node local) [ 392.394858][T12514] loop6: unable to read partition table [ 392.401032][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 392.409970][ T5925] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 392.416491][T12514] loop6: partition table beyond EOD, truncated [ 392.418557][ T5925] usb 2-1: config 179 has no interface number 0 [ 392.431253][ T5925] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 392.444366][ T5925] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 392.457758][ T5925] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 392.470836][ T6047] ldm_validate_partition_table(): Disk read failed. [ 392.477548][ T5925] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 392.478672][T12514] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 392.488996][ T5925] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 392.489054][ T5925] usb 2-1: config 179 interface 65 has no altsetting 0 [ 392.489108][ T5925] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 392.489149][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.497484][ T5925] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input25 [ 392.542378][ T6047] Dev loop6: unable to read RDB block 0 [ 392.542978][ T6047] loop6: unable to read partition table [ 392.543166][ T6047] loop6: partition table beyond EOD, truncated [ 392.596176][T12518] ldm_validate_partition_table(): Disk read failed. [ 392.611012][ T5174] input input25: unable to receive magic message: -110 [ 392.617749][T12518] Dev loop6: unable to read RDB block 0 [ 392.637157][T12518] loop6: unable to read partition table [ 392.651576][ T5174] input input25: unable to receive magic message: -32 [ 392.664942][T12518] loop6: partition table beyond EOD, truncated [ 392.676328][T12527] loop3: detected capacity change from 0 to 8 [ 392.683152][T12518] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 392.697552][ T5174] input input25: unable to receive magic message: -32 [ 392.722587][T12527] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 392.731973][ T5174] input input25: unable to receive magic message: -32 [ 392.747052][ T5190] ldm_validate_partition_table(): Disk read failed. [ 392.755619][ T5174] input input25: unable to receive magic message: -32 [ 392.764995][ T5174] input input25: unable to receive magic message: -32 [ 392.772145][ T5190] Dev loop6: unable to read RDB block 0 [ 392.779041][ T5190] loop6: unable to read partition table [ 392.785759][ T5190] loop6: partition table beyond EOD, truncated [ 392.960971][ T9] usb 2-1: USB disconnect, device number 15 [ 392.966953][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19