last executing test programs: 1m29.235320716s ago: executing program 4 (id=33): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) 1m28.930423754s ago: executing program 4 (id=37): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m28.452598212s ago: executing program 4 (id=41): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x300000f, 0x12, r0, 0x0) r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1m28.294705581s ago: executing program 4 (id=42): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x14444, &(0x7f0000000fc0)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@noadinicb}, {@mode={'mode', 0x3d, 0xfff}}, {@uid_forget}, {@uid_forget}, {@dmode={'dmode', 0x3d, 0x2}}, {@noadinicb}, {@rootdir={'rootdir', 0x3d, 0x2}}, {@nostrict}]}, 0xfe, 0xc22, &(0x7f00000002c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) 1m27.276021972s ago: executing program 4 (id=47): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000080)={0x4, 0xffffffff, 0x3}) 1m26.554106355s ago: executing program 4 (id=54): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) 1m26.29448911s ago: executing program 32 (id=54): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) 53.043473623s ago: executing program 2 (id=396): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) 52.872908333s ago: executing program 2 (id=398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb715) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) 52.75111493s ago: executing program 2 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000001480)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 52.734370821s ago: executing program 2 (id=403): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000500)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20400, 0x38) getdents64(r0, 0x0, 0x0) 52.481423346s ago: executing program 2 (id=405): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 52.051923152s ago: executing program 2 (id=413): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 51.992151525s ago: executing program 33 (id=413): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 13.882245736s ago: executing program 0 (id=775): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240448d5) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [], [0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) 13.756910584s ago: executing program 0 (id=777): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) sendmsg$inet(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f00000011c0)='8', 0x1}], 0x1}, 0x0) 13.64866023s ago: executing program 0 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) 13.535762267s ago: executing program 0 (id=781): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x4, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8000000000000000, 0xa8d02) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 13.023155787s ago: executing program 0 (id=785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x8f, 0x0, 0x2}]}) 12.403108984s ago: executing program 0 (id=791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000608000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000004000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014110180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 12.060597654s ago: executing program 34 (id=791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000608000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000004000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014110180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 3.912284018s ago: executing program 5 (id=842): syz_mount_image$ocfs2(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f0000000500)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cc85bf8e749e04e", @ANYRES16, @ANYRESOCT, @ANYRES16], 0x11, 0x445c, &(0x7f0000004a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x14a408, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 2.809788393s ago: executing program 5 (id=856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003400020202020202000008003500000000d5"], 0x38}}, 0x0) 2.448636305s ago: executing program 5 (id=863): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file1\x00', 0x30008c0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x11, 0x2fe, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) syz_mount_image$msdos(&(0x7f0000003a40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000080)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.114771404s ago: executing program 3 (id=866): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000b"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.995148062s ago: executing program 5 (id=867): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') r1 = fanotify_init(0x0, 0x2) fanotify_mark(r1, 0x1, 0x8000039, r0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0x70000, 0x2) 1.991782012s ago: executing program 3 (id=868): syz_mount_image$minix(&(0x7f0000000300), &(0x7f00000001c0)='./file2\x00', 0xa00000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c0, &(0x7f0000000500)="$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") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) 1.798086603s ago: executing program 5 (id=871): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4c40, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5836e4040200516940a0000000109022400010000000009040000025883b200090585000000000000090507"], 0x0) 1.793941283s ago: executing program 3 (id=872): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.529410489s ago: executing program 3 (id=876): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x200, 0x1000, 0xd6e}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000003c0)={0x2, {0x2, 0x0, 0x0, 0x4101, 0x400}}) 1.415510846s ago: executing program 6 (id=877): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000846, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001600)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") setuid(0xee01) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 1.407161966s ago: executing program 3 (id=878): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@nodiscard}, {@noflush_merge}, {@quota}, {@alloc_mode_reuse}, {@compress_chksum}, {@disable_roll_forward}, {@adaptive_mode}, {@flush_merge}, {@fsync_mode_posix}, {@jqfmt_vfsv0}, {@data_flush}, {@adaptive_mode}, {@whint_mode_fs}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001440)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa060, 0x2, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000002004ddb49a000000000000000000f8ff00080000000000001ae60000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458ddc992861ac00000080ffffffffffffffff001700", "90be8bf4bd0000003d0325fe000000010000001000"}}) 1.289622943s ago: executing program 1 (id=879): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in=@local, 0xfffd, 0x1, 0x4e21, 0x1, 0xa}, {0x2, 0xfffffffffffffffc, 0x3, 0x0, 0x4, 0x4, 0x0, 0x100000001}, {0x40000000020, 0x40000000, 0x54, 0x3}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@local, 0xffffffde, 0x0, 0x3, 0x0, 0x4d, 0x3}}, 0xe8) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 1.198339979s ago: executing program 1 (id=880): writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="dc91", 0x2}], 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 1.109646804s ago: executing program 1 (id=881): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x5fb5, 0x0, 0xfffffffd}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r3 = socket(0x22, 0x2, 0x25) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r3, 0x0, 0x0, 0x0, 0x20, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 963.066513ms ago: executing program 1 (id=882): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, 0x0, 0x0) 896.318907ms ago: executing program 6 (id=883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x200408c4}, 0x400c812) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 891.307277ms ago: executing program 1 (id=884): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0), 0x8) 779.038653ms ago: executing program 1 (id=885): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$eJzs3b9vHFkdAPA3Y4fYIQE7pAgSEisRCQTIslMFHAnHceLYiQkKJEI0m7W9SQxrb2SvEUUK00WiQqJAFBFIdK4iF7ThT6ChzNWR7opr7nRSdD7tzqy9M96V96xd+5L7fIqdnfdrnvc78+ZNMX5xqvZkZaOwslEorRWqS482Lhf+WK1srpZDfEzaHv/U8R2f7vTjPDnpc+/r7O71m79+cDmE/y7//83u7u5uqBsMbU20fP/k42dLrdumOFen3m425Vb7xo/sdyGECwf6VTcQQvjtf0KIQgjX0rTpdDscQjgXkrwHz/7ysNCj3rx8Xb5afLvwfGfy0vz2i503HQtGIfyj8t2fPl798AcDkx/8uEeHBwAAAAAAAAAAAAAAAADgHTd77+79X41PhFdRGNyODr6vO5tuO70fu9sz3+//HwsAAAAAAAAAAAAAAAAAAABfUfvv/xei823e/59Jt1Md6u/+ov99pH/mfnl35sb4RLr+e3Qg/0qa9NG1gTDaZt33/Prv13L1D67/HtJV13vjShRlVqsfCVE81tKPkRDHY2Mh/Ctd+P1idCauVDdqP3lU3Vxb7lk33lnZ+Cer92eiky7o3238p3Ptt49/L33nwNlU33/Yu1PsvZaN/0DHcv/+c9RV/K/n6h1H/Dm6bPyToXS4tcBUMgDU4//XwcPjP5Nrvz/xP7X3bTgUMiNAfQ5TiDrPV8jKxj/5XTNDZ/pDdrr+P8vF/0au/ZMa/7fyNyLaysb/G420oUyJ/et/ND78+r+Za/8k4l/v/5b7f1ey8T+dJGZm1MnP2+34P5trvyX+n/ay3/fjtJ/fijJnwHaUpHf6f3VkZeM/dCB///kv7mr+dytXv//Pf9njNp//msP/j6Lk+Y/2svEf7liu2+t/Llev3+P/VGP+x1Fl43+mkdacOyd3/pHGZ7fxn8+136/4N/o21Iz//njy+ekk/Z/mf13Jxv+bSWLcWmKr8dmY/0WHz/9v59o/iflfvf9bcX+P+r7Ixv9sx3L1+P+vi/v/nVy9/sc/hHFz/SPLxv9cx3KN63/o8Pgv5Or1O/4/7GfjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+A6XQ7EqJ4LLMfx2NjIVxP9y+GM9Fiabm4WKku/WEjhJk0vRDOR48r1cVSpbiyVl0uF0uVSnUphBtp/oUwFG1UqrXiaunpzb22hqMn5dJ6bbFcqoUQZtP074VzzbYWV2qrpachhFt7ed+Oq+tPn5TWissr6z8fHx8fD3N7fRiNyn+qlddqydGT3BDm9+qORC2da2Tf3uvL2ej31c31tVKlkX6npU6lulSqtNRZSPP+Fkaj2vrm2lKpVi5Wqo+bxztJU+l2Zu7eb+7dmTiQ/zBKttPH2y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvqRXkz/7ewhhMNmLQwhTzS9Ru/IvX5evFt8uPN+ZvDS//WLnzanj7S4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBfswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYZf+URoIojgAvxkL/1Qew2rZ7WxXFNHCFcET6DE8jB7FS3gHCwtbCwkkMyRsspAmKcL3NY/dHzPvwTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgINz+zQ8P7ZdRIqT/+OIz9ev79X8vtT3q83nj/YwI7tz9zBc37Rdefe0ll+WXz99nqd/v28vsaxn9bv6GO3JeJ8Wap/Tybmm9m1qvtr3PFJuIqIv+UXKuWm2uwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBk7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA///+NR/5") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}, {@userxattr}, {@xino_on}]}) 630.667573ms ago: executing program 6 (id=886): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r0, 0x801, 0x200400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 598.416045ms ago: executing program 3 (id=887): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000000200)=ANY=[], 0xfd, 0x2b6, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x100) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000000)={0x14}, 0x14) 569.746596ms ago: executing program 6 (id=888): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x3f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 467.145162ms ago: executing program 7 (id=889): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 423.559445ms ago: executing program 7 (id=890): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x0, 0x2, 0x3, 0x6}) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x7}) 410.230485ms ago: executing program 6 (id=891): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$eJzs3U1rXFUfAPD/nUzSNu3zNIVS1IUUurBSO2kSXyoI1pWIFgu6r0MyDSWTTslMShMLtgu7cSNFELEgfgD3LotfwE9R0EKREnQhQuRO7qTTZCavE2fS+f3gtufMuTfn/nPuOTln7gw3gL51Mv0nF/FiRHydRBxtKstHVnhyZb+lJ7cm0y2J5eVP/kgiyV5r7J9k/x/OMi9ExC9fRpzJra+3urA4UyyXS3NZfrQ2e320urB49upscbo0Xbo2PjFx/o2J8bfferNjsb566a/vPn7wwfmvTi19+9OjY/eSuBBHsrLmOHbhdnPmZPGfLDUYF9bsONaBynpJ0u0TYEcGsn4+GOkYcDQGsl4PPP++iIhloE8l+j/0qcY8oLG279A6eN94/N7KAqge+1Bz/PmV90biYH1tNLyUPLMySte7Ix2oP63j59/v30u32Ph9iEOb5AG25fadiDiXz68f/5Ns/Nu5c/U3jze2to5++/sD3fQgnf+81mr+l1ud/0SL+c/hFn13Jzbv/7lHHaimrXT+907L+e/q0DUykOX+V5/zDSZXrpZL5yLi/xFxOgYPpPmN7uecX3q43K6sef6Xbmn9jblgdh6P8geePWaqWCtGxNBu4m54fCfipXyr+JPV9k9atH/6+7i0xTpOlO6/3K5s8/j31vKPEa+0bP+nd7SSje9Pjtavh9HGVbHen3dP/Nqu/m7Hn7b/8MbxjyTN92ur26/jh4N/l9qVpfEP7+D6H0o+racbneBmsVabG4sYSj5a//r402Mb+cb+afynT63E/+xkJbfh9Z8uvj7bYvx3j99tu2svtP/Uttp/+4mHH37+fbv6tzb+vV5Pnc5eyca/1rJrZasnuNvfHwAAAAAAAPSSXEQciSRXWE3ncoXCyuc7jsdwrlyp1s5cqcxfm4r6d2VHYjDXuNN9tOnzEGPZ52Eb+fE1+YmIOBYR3wwcqucLk5XyVLeDBwAAAAAAAAAAAAAAAAAAgB5xuM33/1O/DXT77IA9V3+wwYFunwXQDZs+8r8TT3oCetKm/R94bun/0L/0f+hfa/t/R54sDOwL/v5D/9L/oX/p/9C/9H8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqEsXL6bb8tKTW5NpfurGwvxM5cbZqVJ1pjA7P1mYrMxdL0xXKtPlUmGyMrvZzytXKtfHxmP+5mitVK2NVhcWL89W5q/VLl+dLU6XLpcG/5OoAAAAAAAAAAAAAAAAAAAAYH+pLizOFMvl0txqIp+VzK0v6tPEu9ETp7GXAa7Y0eH5XolibxLvD/TEaewmcSdr3u0d1aUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa+DcAAP//Rm0oPg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x10, 0x3, 0x7c27) write$qrtrtun(r0, &(0x7f0000000240)="8c", 0x1) 288.434193ms ago: executing program 7 (id=892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x400002, r2}) 277.040053ms ago: executing program 7 (id=893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 104.107094ms ago: executing program 7 (id=894): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 7.190869ms ago: executing program 7 (id=895): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0xffffffff, 0x20}, 0xc) 6.788519ms ago: executing program 5 (id=896): syz_mount_image$gfs2(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x1818800, &(0x7f0000000000)=ANY=[], 0x0, 0x125f2, &(0x7f000001a500)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f0000000000), &(0x7f00000003c0)=ANY=[], 0x841, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0xfe37, 0x0) 0s ago: executing program 6 (id=897): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) kernel console output (not intermixed with test programs): s_btree_read_buf_block+0x1db/0x2d0" at daddr 0x18 len 8 error 74 [ 87.216714][ T4950] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.254737][ T4950] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.257616][ T5276] XFS (loop1): Failed to read root inode 0x1140, error 117 [ 87.353754][ T4958] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 87.362257][ T4958] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.413337][ T4958] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.423704][ T4950] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.432759][ T4950] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.461930][ T4958] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.472729][ T4950] usb 6-1: Product: syz [ 87.482785][ T4950] usb 6-1: Manufacturer: syz [ 87.496554][ T4958] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.513780][ T4958] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.522958][ T4958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.554497][ T4950] cdc_wdm 6-1:1.0: skipping garbage [ 87.560508][ T4950] cdc_wdm 6-1:1.0: skipping garbage [ 87.568941][ T4950] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 87.690930][ T5321] set_capacity_and_notify: 6 callbacks suppressed [ 87.690943][ T5321] loop2: detected capacity change from 0 to 1024 [ 87.705295][ T5322] IPVS: ip_vs_add_dest(): server weight less than zero [ 87.789511][ T4961] usb 6-1: USB disconnect, device number 4 [ 87.795824][ T4958] usb 4-1: GET_CAPABILITIES returned 0 [ 87.801827][ T4958] usbtmc 4-1:16.0: can't read capabilities [ 87.804226][ T5321] MPI: mpi too large (187712 bits) [ 87.890099][ T154] hfsplus: b-tree write err: -5, ino 4 [ 88.029039][ T4958] usb 4-1: USB disconnect, device number 6 [ 88.386488][ T5358] loop5: detected capacity change from 0 to 512 [ 88.426827][ T5363] ieee802154 phy0 wpan0: encryption failed: -22 [ 88.438349][ T5358] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 88.465541][ T5358] EXT4-fs (loop5): 1 truncate cleaned up [ 88.481550][ T5358] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 88.613294][ T4958] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 88.750029][ T5377] loop2: detected capacity change from 0 to 64 [ 88.863956][ T5382] loop1: detected capacity change from 0 to 1024 [ 88.902472][ T5377] attempt to access beyond end of device [ 88.902472][ T5377] loop2: rw=0, want=1026, limit=64 [ 88.990447][ T5377] Buffer I/O error on dev loop2, logical block 512, async page read [ 89.032746][ T5377] attempt to access beyond end of device [ 89.032746][ T5377] loop2: rw=0, want=113154, limit=64 [ 89.060232][ T5382] hfsplus: request for non-existent node 62977 in B*Tree [ 89.075215][ T4958] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 89.091049][ T5377] Buffer I/O error on dev loop2, logical block 56576, async page read [ 89.104678][ T4958] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 89.105003][ T5382] hfsplus: request for non-existent node 62977 in B*Tree [ 89.191714][ T5392] netlink: 'syz.5.288': attribute type 8 has an invalid length. [ 89.236930][ T502] hfsplus: b-tree write err: -5, ino 3 [ 89.295190][ T5395] loop5: detected capacity change from 0 to 2048 [ 89.358629][ T4958] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 89.372244][ T4958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.387702][ T4958] usb 1-1: Product: syz [ 89.392263][ T4958] usb 1-1: Manufacturer: syz [ 89.405650][ T5395] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.409930][ T4958] usb 1-1: SerialNumber: syz [ 89.432494][ T4958] usb 1-1: config 0 descriptor?? [ 89.464354][ T5355] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.483701][ T5355] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.564467][ T5405] loop1: detected capacity change from 0 to 512 [ 89.721937][ T5355] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.768337][ T5355] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.979062][ T5427] loop7: detected capacity change from 0 to 7 [ 90.009303][ T4448] Dev loop7: unable to read RDB block 7 [ 90.025079][ T4448] loop7: unable to read partition table [ 90.030494][ T5429] loop5: detected capacity change from 0 to 2048 [ 90.036881][ T4448] loop7: partition table beyond EOD, truncated [ 90.085671][ T5427] Dev loop7: unable to read RDB block 7 [ 90.111607][ T5427] loop7: unable to read partition table [ 90.122955][ T5427] loop7: partition table beyond EOD, truncated [ 90.153149][ T5427] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 90.248223][ T5409] loop3: detected capacity change from 0 to 32768 [ 90.250657][ T4958] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 90.468925][ T4958] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 90.489068][ T5429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.562476][ T4958] usb 1-1: USB disconnect, device number 7 [ 90.595642][ T5409] XFS (loop3): Mounting V5 Filesystem [ 90.658854][ T5461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 90.769557][ T5409] XFS (loop3): Ending clean mount [ 90.872789][ T4187] XFS (loop3): Unmounting Filesystem [ 90.968910][ T5473] loop1: detected capacity change from 0 to 1024 [ 91.264549][ T502] hfsplus: b-tree write err: -5, ino 4 [ 91.329494][ T5496] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.419724][ T5492] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 91.568598][ T5499] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.594396][ T5494] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 91.602947][ T5494] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 91.616697][ T5498] EXT4-fs (loop1): Ignoring removed orlov option [ 91.671216][ T5498] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 91.697810][ T5504] capability: warning: `syz.3.308' uses 32-bit capabilities (legacy support in use) [ 91.758451][ T5494] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 91.770957][ T4835] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 91.789511][ T4835] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 91.799983][ T5498] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.315: corrupted in-inode xattr [ 91.850718][ T5515] genirq: Flags mismatch irq 1. 00000000 (dt2814) vs. 00000080 (i8042) [ 91.890231][ T5498] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.315: couldn't read orphan inode 15 (err -117) [ 92.040289][ T5498] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,sysvgroups,noload,nombcache,noblock_validity,init_itable=0x0000000000000051,nogrpid,,errors=continue. Quota mode: none. [ 92.091956][ T4835] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 302ms [ 92.148912][ T4835] gfs2: fsid=syz:syz.0: jid=0: Done [ 92.174759][ T5494] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 92.649409][ T5543] capability: warning: `syz.3.325' uses deprecated v2 capabilities in a way that may be insecure [ 92.747845][ T5544] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.941829][ T5560] set_capacity_and_notify: 5 callbacks suppressed [ 92.941845][ T5560] loop6: detected capacity change from 0 to 2640 [ 92.969751][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.980842][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.019702][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.030694][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.038780][ T5018] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 93.072265][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.083216][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.113396][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.124329][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.129593][ T5568] loop5: detected capacity change from 0 to 256 [ 93.144747][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.155730][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.174139][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.185105][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.196816][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.207751][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.216149][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.227073][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.239171][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.265763][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.277070][ T4500] ldm_validate_partition_table(): Disk read failed. [ 93.305665][ T5568] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 93.306240][ T4500] Dev loop6: unable to read RDB block 0 [ 93.347830][ T4500] loop6: unable to read partition table [ 93.376587][ T5560] ldm_validate_partition_table(): Disk read failed. [ 93.390088][ T5573] tap0: tun_chr_ioctl cmd 2147767511 [ 93.401187][ T5560] Dev loop6: unable to read RDB block 0 [ 93.433994][ T5560] loop6: unable to read partition table [ 93.460427][ T5560] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 93.488834][ T5575] netlink: 60 bytes leftover after parsing attributes in process `syz.5.333'. [ 93.503536][ T5018] usb 3-1: config 0 has no interfaces? [ 93.511618][ T5577] loop1: detected capacity change from 0 to 128 [ 93.517630][ T5018] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 93.518551][ T5575] netlink: 60 bytes leftover after parsing attributes in process `syz.5.333'. [ 93.541106][ T5575] netlink: 60 bytes leftover after parsing attributes in process `syz.5.333'. [ 93.546411][ T5018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.563967][ T5575] netlink: 60 bytes leftover after parsing attributes in process `syz.5.333'. [ 93.600656][ T5018] usb 3-1: config 0 descriptor?? [ 93.610246][ T5577] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 93.649739][ T5577] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.811389][ T5585] xt_hashlimit: max too large, truncated to 1048576 [ 93.870798][ T3561] ldm_validate_partition_table(): Disk read failed. [ 93.900225][ T5539] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 93.906860][ T3561] Dev loop6: unable to read RDB block 0 [ 93.924964][ T5018] usb 3-1: USB disconnect, device number 4 [ 93.936242][ T3561] loop6: unable to read partition table [ 94.170736][ T5594] loop1: detected capacity change from 0 to 8 [ 94.231743][ T5594] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 94.273445][ T4836] Bluetooth: hci5: command 0x1003 tx timeout [ 94.283520][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 94.380986][ T5588] loop3: detected capacity change from 0 to 32768 [ 94.481460][ T5588] [ 94.481460][ T5588] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.481460][ T5588] [ 94.565547][ T5588] jfs_create: dtInsert returned -EIO [ 94.565794][ T5605] loop1: detected capacity change from 0 to 512 [ 94.570938][ T5588] ERROR: (device loop3): jfs_create: [ 94.570938][ T5588] [ 94.649482][ T5605] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.677729][ T5596] loop5: detected capacity change from 0 to 32768 [ 94.680666][ T5605] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 94.752211][ T5596] XFS (loop5): Mounting V5 Filesystem [ 94.759815][ T5605] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 94.761407][ T5613] loop2: detected capacity change from 0 to 128 [ 94.805542][ T5605] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.345: attempt to clear invalid blocks 2 len 1 [ 94.846499][ T5605] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.345: invalid indirect mapped block 1819239214 (level 0) [ 94.862469][ T5613] FAT-fs (loop2): Directory bread(block 162) failed [ 94.869322][ T5613] FAT-fs (loop2): Directory bread(block 163) failed [ 94.877265][ T5613] FAT-fs (loop2): Directory bread(block 164) failed [ 94.884087][ T5613] FAT-fs (loop2): Directory bread(block 165) failed [ 94.890912][ T5613] FAT-fs (loop2): Directory bread(block 166) failed [ 94.898003][ T5613] FAT-fs (loop2): Directory bread(block 167) failed [ 94.905061][ T5613] FAT-fs (loop2): Directory bread(block 168) failed [ 94.911691][ T5613] FAT-fs (loop2): Directory bread(block 169) failed [ 94.933565][ T5613] FAT-fs (loop2): Directory bread(block 162) failed [ 94.939671][ T5605] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.345: invalid indirect mapped block 1819239214 (level 1) [ 94.954287][ T5596] XFS (loop5): Ending clean mount [ 94.961349][ T5605] EXT4-fs (loop1): 1 truncate cleaned up [ 94.967933][ T4187] [ 94.967933][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 94.967933][ T4187] [ 94.968749][ T5605] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 94.982391][ T5613] FAT-fs (loop2): Directory bread(block 163) failed [ 95.002483][ T4187] [ 95.002483][ T4187] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.002483][ T4187] [ 95.021707][ T5613] attempt to access beyond end of device [ 95.021707][ T5613] loop2: rw=3, want=232, limit=128 [ 95.038711][ T5613] attempt to access beyond end of device [ 95.038711][ T5613] loop2: rw=2051, want=234, limit=128 [ 95.039160][ T5596] XFS (loop5): Quotacheck needed: Please wait. [ 95.099816][ T5596] XFS (loop5): Quotacheck: Done. [ 95.103674][ T5605] EXT4-fs (loop1): shut down requested (2) [ 95.116429][ T5605] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 95.143024][ T5605] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 95.281231][ T4506] XFS (loop5): Unmounting Filesystem [ 95.435158][ T5624] loop2: detected capacity change from 0 to 512 [ 95.554971][ T5624] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 95.567477][ T5624] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.046429][ T5643] loop3: detected capacity change from 0 to 8 [ 96.353278][ T4950] Bluetooth: hci5: command 0x1001 tx timeout [ 96.359375][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 96.594811][ T5655] block nbd0: server does not support multiple connections per device. [ 96.612658][ T5655] block nbd0: shutting down sockets [ 96.716727][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.365'. [ 96.863088][ T5662] team0 (unregistering): Port device team_slave_0 removed [ 96.898612][ T5662] team0 (unregistering): Port device team_slave_1 removed [ 96.925865][ T4835] kernel read not supported for file /dsp (pid: 4835 comm: kworker/0:18) [ 97.111644][ T5671] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 97.465315][ T5691] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.377'. [ 97.514050][ T5691] netlink: zone id is out of range [ 97.528212][ T5691] netlink: zone id is out of range [ 97.556348][ T5691] netlink: del zone limit has 8 unknown bytes [ 97.575801][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 98.098315][ T4958] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 98.107602][ T5724] set_capacity_and_notify: 2 callbacks suppressed [ 98.107616][ T5724] loop3: detected capacity change from 0 to 512 [ 98.170315][ T5724] EXT4-fs (loop3): Ignoring removed nobh option [ 98.191135][ T5724] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 98.249018][ T5724] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.393: iget: bad i_size value: 38620345925642 [ 98.298239][ T5724] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.393: couldn't read orphan inode 15 (err -117) [ 98.311134][ T5724] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 98.322345][ T5736] ip6erspan0: tun_chr_ioctl cmd 1074025677 [ 98.331564][ T5736] ip6erspan0: linktype set to 1 [ 98.350151][ T5724] ALSA: mixer_oss: invalid OSS volume 'ôF)/S®ù~ÛIÃñÞÜÛƒñðf´ºñëcj' [ 98.444047][ T5018] Bluetooth: hci5: command 0x1009 tx timeout [ 98.493130][ T5742] loop2: detected capacity change from 0 to 8 [ 98.512021][ T5746] loop3: detected capacity change from 0 to 128 [ 98.523894][ T4958] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 98.541926][ T4958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.561183][ T5746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 98.583450][ T5746] System zones: 1-3, 19-19, 35-36 [ 98.590175][ T5746] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 98.627851][ T5746] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.673710][ T4958] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 98.693586][ T4958] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 98.701607][ T4958] usb 6-1: Manufacturer: syz [ 98.709520][ T4958] usb 6-1: config 0 descriptor?? [ 98.738354][ T4185] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 98.780932][ T4185] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 98.893353][ T4958] rc_core: IR keymap rc-hauppauge not found [ 98.899402][ T4958] Registered IR keymap rc-empty [ 98.906556][ T4958] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 98.923574][ T4958] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 99.000615][ T5762] loop1: detected capacity change from 0 to 512 [ 99.046990][ T4958] usb 6-1: USB disconnect, device number 5 [ 99.066992][ T5762] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.083601][ T5762] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.121849][ T5762] EXT4-fs (loop1): shut down requested (1) [ 99.217371][ T3084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.339954][ T3084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.460218][ T3084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.545690][ T3084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.564931][ T5769] loop3: detected capacity change from 0 to 32768 [ 99.629812][ T5769] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.412 (5769) [ 99.708093][ T5769] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 99.736030][ T5769] BTRFS info (device loop3): metadata ratio 2 [ 99.745700][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 99.753398][ T4835] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.755343][ T5769] BTRFS info (device loop3): allowing degraded mounts [ 99.768412][ T5769] BTRFS info (device loop3): force zlib compression, level 3 [ 99.776010][ T5769] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 99.787155][ T5769] BTRFS info (device loop3): use zstd compression, level 3 [ 99.794629][ T5769] BTRFS info (device loop3): force clearing of disk cache [ 99.801994][ T5769] BTRFS info (device loop3): turning on flush-on-commit [ 99.809681][ T5769] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 99.821412][ T5769] BTRFS info (device loop3): trying to use backup root at mount time [ 99.852165][ T5769] BTRFS info (device loop3): using free space tree [ 99.865512][ T5769] BTRFS info (device loop3): has skinny extents [ 100.004427][ T4835] usb 2-1: Using ep0 maxpacket: 16 [ 100.063081][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.070777][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.078946][ T5774] device bridge_slave_0 entered promiscuous mode [ 100.091070][ T5769] BTRFS info (device loop3): enabling ssd optimizations [ 100.101086][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.111304][ T5769] BTRFS info (device loop3): clearing free space tree [ 100.115246][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.125955][ T4835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.139029][ T5774] device bridge_slave_1 entered promiscuous mode [ 100.142793][ T5769] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.159278][ T4835] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 100.184335][ T5769] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.199727][ T4835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.240060][ T5769] BTRFS info (device loop3): creating free space tree [ 100.243432][ T4835] usb 2-1: config 0 descriptor?? [ 100.259044][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.264383][ T5769] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.288504][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.317296][ T5769] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.355262][ T5774] team0: Port device team_slave_0 added [ 100.385571][ T5774] team0: Port device team_slave_1 added [ 100.433854][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.440830][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.506063][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.557335][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.580904][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.607472][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.633428][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.771829][ T4835] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 100.852362][ T5774] device hsr_slave_0 entered promiscuous mode [ 100.900586][ T5774] device hsr_slave_1 entered promiscuous mode [ 100.928045][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.947803][ T5774] Cannot create hsr debugfs directory [ 101.169990][ T13] usb 2-1: USB disconnect, device number 5 [ 101.336976][ T5846] netlink: 72 bytes leftover after parsing attributes in process `syz.3.422'. [ 101.341868][ T5825] loop5: detected capacity change from 0 to 40427 [ 101.359219][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 101.393131][ T3084] device hsr_slave_0 left promiscuous mode [ 101.405140][ T5825] F2FS-fs (loop5): build fault injection attr: rate: 7, type: 0x1ffff [ 101.416678][ C0] F2FS-fs (loop5) : inject read IO error in f2fs_read_end_io of blk_update_request+0x876/0x1200 [ 101.427521][ T3084] device hsr_slave_1 left promiscuous mode [ 101.434683][ T3084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.442304][ T3084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.450564][ T5825] F2FS-fs (loop5) : inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4480/0x6de0 [ 101.451152][ T3084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.467707][ T3084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.471604][ T5825] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12) [ 101.487774][ T3084] device bridge_slave_1 left promiscuous mode [ 101.498014][ T3084] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.512765][ T3084] device bridge_slave_0 left promiscuous mode [ 101.521411][ T3084] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.537164][ T3084] device veth1_macvtap left promiscuous mode [ 101.543385][ T3084] device veth0_macvtap left promiscuous mode [ 101.549458][ T3084] device veth1_vlan left promiscuous mode [ 101.555648][ T3084] device veth0_vlan left promiscuous mode [ 101.567071][ T4228] Bluetooth: hci1: command 0x0409 tx timeout [ 101.751060][ T5856] netlink: 124 bytes leftover after parsing attributes in process `syz.1.425'. [ 101.853076][ T5854] loop3: detected capacity change from 0 to 32768 [ 101.946210][ T5854] XFS (loop3): Mounting V5 Filesystem [ 101.957505][ T3084] team0 (unregistering): Port device team_slave_1 removed [ 101.979774][ T3084] team0 (unregistering): Port device team_slave_0 removed [ 102.010344][ T3084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.022329][ T5854] XFS (loop3): Ending clean mount [ 102.041277][ T5854] XFS (loop3): Quotacheck needed: Please wait. [ 102.051534][ T3084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.116156][ T5854] XFS (loop3): Quotacheck: Done. [ 102.138339][ T3084] bond0 (unregistering): Released all slaves [ 102.173526][ T4187] XFS (loop3): Unmounting Filesystem [ 102.201441][ T5861] netlink: 48 bytes leftover after parsing attributes in process `syz.5.427'. [ 102.215845][ T5774] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.243687][ T5774] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.305758][ T5774] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.338851][ T5881] program syz.1.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.349541][ T5774] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.510995][ T5898] loop1: detected capacity change from 0 to 16 [ 102.646442][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.665557][ T5898] erofs: (device loop1): mounted with root inode @ nid 36. [ 102.758766][ T26] audit: type=1800 audit(1768866954.410:6): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.435" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 102.794472][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.832859][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.846098][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.880689][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.901235][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.972603][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.979742][ T502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.063233][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.138772][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.196750][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.250967][ T502] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.258093][ T502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.326121][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.364313][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.425127][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.471424][ T5931] loop3: detected capacity change from 0 to 64 [ 103.475564][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.508932][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.536107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.576251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.619508][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.633370][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 103.641171][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.663692][ T4228] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 103.672818][ T26] audit: type=1800 audit(1768866955.320:7): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.445" name="file2" dev="loop3" ino=21 res=0 errno=0 [ 103.707745][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.447'. [ 103.784538][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.803156][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.878630][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.955424][ T4961] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.093560][ T4228] usb 1-1: config 3 has an invalid interface number: 184 but max is 0 [ 104.111980][ T4228] usb 1-1: config 3 has no interface number 0 [ 104.128704][ T5953] loop3: detected capacity change from 0 to 512 [ 104.128729][ T4228] usb 1-1: config 3 interface 184 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 104.171035][ T4228] usb 1-1: config 3 interface 184 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 104.199487][ T5953] EXT4-fs (loop3): Ignoring removed oldalloc option [ 104.218059][ T4228] usb 1-1: config 3 interface 184 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 104.240697][ T5953] EXT4-fs (loop3): 1 truncate cleaned up [ 104.250915][ T5953] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 104.256593][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.276113][ T4961] usb 2-1: Using ep0 maxpacket: 16 [ 104.314481][ T4228] usb 1-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=c1.5f [ 104.353648][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.372805][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.420640][ T4961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.437321][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.449027][ T4228] keyspan 1-1:3.184: Keyspan 2 port adapter converter detected [ 104.457763][ T4961] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 104.476370][ T4228] keyspan 1-1:3.184: found no endpoint descriptor for endpoint 87 [ 104.499190][ T4961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.507381][ T4228] keyspan 1-1:3.184: found no endpoint descriptor for endpoint 7 [ 104.528592][ T4961] usb 2-1: config 0 descriptor?? [ 104.551434][ T4228] keyspan 1-1:3.184: found no endpoint descriptor for endpoint 81 [ 104.569917][ T4228] keyspan 1-1:3.184: found no endpoint descriptor for endpoint 1 [ 104.569988][ T4228] keyspan 1-1:3.184: found no endpoint descriptor for endpoint 85 [ 104.570045][ T4228] keyspan 1-1:3.184: found no endpoint descriptor for endpoint 5 [ 104.599770][ T4228] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 104.601720][ T4228] keyspan 1-1:3.184: found no endpoint descriptor for endpoint 83 [ 104.601767][ T4228] keyspan 1-1:3.184: found no endpoint descriptor for endpoint 3 [ 104.601821][ T4228] keyspan 1-1:3.184: found no endpoint descriptor for endpoint 4 [ 104.601872][ T4228] keyspan 1-1:3.184: found no endpoint descriptor for endpoint 86 [ 104.601915][ T4228] keyspan 1-1:3.184: found no endpoint descriptor for endpoint 6 [ 104.602796][ T4228] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 104.672647][ T4228] usb 1-1: USB disconnect, device number 8 [ 104.677501][ T4228] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 104.679795][ T4228] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 104.680251][ T4228] keyspan 1-1:3.184: device disconnected [ 105.001620][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.002261][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.036520][ T4961] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 105.062980][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.068405][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.131640][ T5774] device veth0_vlan entered promiscuous mode [ 105.140260][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.151905][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.179566][ T5774] device veth1_vlan entered promiscuous mode [ 105.301457][ T5774] device veth0_macvtap entered promiscuous mode [ 105.354607][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.403768][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.411906][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.421296][ T5995] loop0: detected capacity change from 0 to 2048 [ 105.453480][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.480320][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.496290][ T13] usb 2-1: USB disconnect, device number 6 [ 105.517597][ T5774] device veth1_macvtap entered promiscuous mode [ 105.571869][ T5995] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.607194][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.607217][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.607226][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.607237][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.607246][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.607258][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.607269][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.607280][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.646530][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.646662][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.647859][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.705224][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.810748][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 105.908220][ T6016] loop3: detected capacity change from 0 to 1024 [ 105.989100][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.989117][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.989133][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.989140][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.989151][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.989170][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.989181][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.990513][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.991210][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.991812][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.001984][ T5774] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.002017][ T5774] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.002040][ T5774] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.002064][ T5774] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.151410][ T6016] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 106.151505][ T6016] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.217555][ T310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.343816][ T6016] EXT4-fs error (device loop3): ext4_free_blocks:6234: comm syz.3.462: Freeing blocks not in datazone - block = 0, count = 16 [ 106.372028][ T310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.375198][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.375248][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.380586][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.397573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.416293][ T6028] loop0: detected capacity change from 0 to 2048 [ 106.501446][ T502] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 112: padding at end of block bitmap is not set [ 106.503367][ T502] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 106.503393][ T502] EXT4-fs (loop3): This should not happen!! Data will be lost [ 106.503393][ T502] [ 106.503406][ T502] EXT4-fs (loop3): Total free blocks count 0 [ 106.503417][ T502] EXT4-fs (loop3): Free/Dirty block details [ 106.503428][ T502] EXT4-fs (loop3): free_blocks=16 [ 106.503441][ T502] EXT4-fs (loop3): dirty_blocks=16 [ 106.503453][ T502] EXT4-fs (loop3): Block reservation details [ 106.503464][ T502] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 106.540760][ T6028] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.540795][ T6028] NILFS (loop0): mounting unchecked fs [ 106.552799][ T6028] NILFS (loop0): recovery complete [ 106.598970][ T6034] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.936506][ T6037] loop3: detected capacity change from 0 to 32768 [ 107.094297][ T6037] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 107.094341][ T6037] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 107.098446][ T6023] loop1: detected capacity change from 0 to 32768 [ 107.152991][ T6037] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 107.156205][ T4961] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 107.156248][ T4961] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 107.181901][ T6046] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.183596][ T6023] XFS: ikeep mount option is deprecated. [ 107.278152][ T6023] XFS: ikeep mount option is deprecated. [ 107.297170][ T4961] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 140ms [ 107.304994][ T4961] gfs2: fsid=syz:syz.0: jid=0: Done [ 107.311053][ T6037] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 107.414616][ T6060] loop0: detected capacity change from 0 to 512 [ 107.451192][ T6023] XFS (loop1): Mounting V5 Filesystem [ 107.506370][ T6060] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.618734][ T6060] EXT4-fs (loop0): 1 truncate cleaned up [ 107.658485][ T6060] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.713333][ T4228] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 107.804294][ T4489] wlan1: Trigger new scan to find an IBSS to join [ 107.850544][ T6023] XFS (loop1): Ending clean mount [ 107.883474][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 107.891154][ T6023] XFS (loop1): Quotacheck needed: Please wait. [ 108.052314][ T6023] XFS (loop1): Quotacheck: Done. [ 108.134666][ T6064] loop6: detected capacity change from 0 to 32768 [ 108.145123][ T4228] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 108.209061][ T4228] usb 6-1: config 0 interface 0 has no altsetting 0 [ 108.285430][ T6064] XFS (loop6): Mounting V5 Filesystem [ 108.354712][ T4188] XFS (loop1): Unmounting Filesystem [ 108.403382][ T4228] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.426603][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 108.484075][ T4228] usb 6-1: Product: syz [ 108.524080][ T4228] usb 6-1: Manufacturer: syz [ 108.528714][ T4228] usb 6-1: SerialNumber: syz [ 108.599630][ T4228] usb 6-1: config 0 descriptor?? [ 108.633547][ T6067] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.677439][ T4228] usb 6-1: selecting invalid altsetting 0 [ 108.702729][ T6086] loop0: detected capacity change from 0 to 32768 [ 108.762323][ T6064] XFS (loop6): Ending clean mount [ 108.786997][ T6064] XFS (loop6): Quotacheck needed: Please wait. [ 108.923613][ T4834] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 108.949302][ T6067] usb 6-1: selecting invalid altsetting 0 [ 108.959398][ T6067] usb 6-1: 0:0: usb_set_interface failed (-22) [ 108.971698][ T6065] usb 6-1: selecting invalid altsetting 0 [ 108.980076][ T6065] usb 6-1: 0:0: usb_set_interface failed (-22) [ 108.986871][ T6065] usb 6-1: selecting invalid altsetting 0 [ 108.992861][ T6065] usb 6-1: 0:0: usb_set_interface failed (-22) [ 109.048411][ T6065] usb 6-1: selecting invalid altsetting 0 [ 109.069100][ T6064] XFS (loop6): Quotacheck: Done. [ 109.092058][ T6065] usb 6-1: 0:0: usb_set_interface failed (-22) [ 109.117335][ T4836] usb 6-1: USB disconnect, device number 6 [ 109.287121][ T5774] XFS (loop6): Unmounting Filesystem [ 109.314662][ T4834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 109.339130][ T4834] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 109.374970][ T4834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.400402][ T4834] usb 4-1: config 0 descriptor?? [ 109.440884][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 109.451134][ T6106] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 109.894649][ T6148] device ip6_vti0 entered promiscuous mode [ 109.917055][ T4834] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v1.01 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 110.135316][ T6155] loop5: detected capacity change from 0 to 128 [ 110.145239][ T13] usb 4-1: USB disconnect, device number 7 [ 110.230767][ T6155] FAT-fs (loop5): Directory bread(block 162) failed [ 110.309825][ T6155] FAT-fs (loop5): Directory bread(block 163) failed [ 110.351766][ T6155] FAT-fs (loop5): Directory bread(block 164) failed [ 110.401008][ T6155] FAT-fs (loop5): Directory bread(block 165) failed [ 110.433105][ T6158] loop0: detected capacity change from 0 to 32768 [ 110.448721][ T6155] FAT-fs (loop5): Directory bread(block 166) failed [ 110.455817][ T6155] FAT-fs (loop5): Directory bread(block 167) failed [ 110.462814][ T6155] FAT-fs (loop5): Directory bread(block 168) failed [ 110.470009][ T6155] FAT-fs (loop5): Directory bread(block 169) failed [ 110.504624][ T6158] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 110.512837][ T6158] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 110.543749][ T6155] FAT-fs (loop5): Directory bread(block 162) failed [ 110.562036][ T6158] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 110.571192][ T4834] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 110.580664][ T6155] FAT-fs (loop5): Directory bread(block 163) failed [ 110.580896][ T4834] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 110.606705][ T6143] loop6: detected capacity change from 0 to 32768 [ 110.635995][ T6155] attempt to access beyond end of device [ 110.635995][ T6155] loop5: rw=3, want=232, limit=128 [ 110.679599][ T4834] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 98ms [ 110.688163][ T6155] attempt to access beyond end of device [ 110.688163][ T6155] loop5: rw=2051, want=234, limit=128 [ 110.707858][ T4834] gfs2: fsid=syz:syz.0: jid=0: Done [ 110.715599][ T6143] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.489 (6143) [ 110.731516][ T6158] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 110.851384][ T6143] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 110.864236][ T6143] BTRFS info (device loop6): turning on sync discard [ 110.889464][ T6143] BTRFS info (device loop6): max_inline at 0 [ 110.905320][ T6143] BTRFS info (device loop6): using free space tree [ 110.956329][ T6143] BTRFS info (device loop6): has skinny extents [ 110.968185][ T6174] loop1: detected capacity change from 0 to 64 [ 111.352554][ T6143] BTRFS info (device loop6): enabling ssd optimizations [ 111.757115][ T6220] loop0: detected capacity change from 0 to 512 [ 112.190807][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.511'. [ 112.246557][ T6185] loop3: detected capacity change from 0 to 32768 [ 112.480011][ T6251] loop1: detected capacity change from 0 to 256 [ 112.490739][ T6185] XFS (loop3): Mounting V5 Filesystem [ 112.555048][ T6256] loop0: detected capacity change from 0 to 256 [ 112.593399][ T4228] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 112.630337][ T6185] XFS (loop3): Ending clean mount [ 112.701797][ T6185] XFS (loop3): Quotacheck needed: Please wait. [ 112.784235][ T502] wlan1: Trigger new scan to find an IBSS to join [ 112.824556][ T6185] XFS (loop3): Quotacheck: Done. [ 112.940458][ T4187] XFS (loop3): Unmounting Filesystem [ 113.019925][ T4228] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 113.033472][ T4228] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 113.053516][ T4256] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.069681][ T4228] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 113.083843][ T4228] usb 7-1: config 220 has no interface number 2 [ 113.090193][ T4228] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 113.109353][ T4228] usb 7-1: config 220 interface 0 has no altsetting 0 [ 113.116446][ T4228] usb 7-1: config 220 interface 76 has no altsetting 0 [ 113.129197][ T4228] usb 7-1: config 220 interface 1 has no altsetting 0 [ 113.305179][ T6270] loop5: detected capacity change from 0 to 32768 [ 113.313415][ T4228] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 113.322497][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.344672][ T4228] usb 7-1: Product: syz [ 113.348854][ T4228] usb 7-1: Manufacturer: syz [ 113.363021][ T4228] usb 7-1: SerialNumber: syz [ 113.376956][ T6272] mmap: syz.3.524 (6272): VmData 35373056 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 113.484683][ T4256] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 113.508835][ T6275] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 113.514629][ T4256] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.628061][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.528'. [ 113.633654][ T4256] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 113.664106][ T4256] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 113.669149][ T6279] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-tlb(5) [ 113.681579][ T4256] usb 1-1: Manufacturer: syz [ 113.715736][ T4256] usb 1-1: config 0 descriptor?? [ 113.748988][ T154] wlan1: Creating new IBSS network, BSSID 8e:5c:b6:55:2f:c4 [ 113.783523][ T4228] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 113.802500][ T4228] usb 7-1: No valid video chain found. [ 113.813082][ T4228] usb 7-1: selecting invalid altsetting 0 [ 113.920164][ T4256] rc_core: IR keymap rc-hauppauge not found [ 113.930657][ T4256] Registered IR keymap rc-empty [ 113.937156][ T4228] usb 7-1: selecting invalid altsetting 0 [ 113.942917][ T4228] usbtest: probe of 7-1:220.1 failed with error -22 [ 113.968676][ T4256] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 113.985802][ T4228] usb 7-1: USB disconnect, device number 2 [ 113.998425][ T4256] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 114.083004][ T6295] set_capacity_and_notify: 1 callbacks suppressed [ 114.083019][ T6295] loop5: detected capacity change from 0 to 256 [ 114.099688][ T4256] usb 1-1: USB disconnect, device number 9 [ 114.292633][ T6299] loop6: detected capacity change from 0 to 2048 [ 114.340500][ T6299] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.369429][ T6295] FAT-fs (loop5): Directory bread(block 64) failed [ 114.386760][ T6295] FAT-fs (loop5): Directory bread(block 65) failed [ 114.406221][ T6299] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 114.420274][ T6295] FAT-fs (loop5): Directory bread(block 66) failed [ 114.436440][ T6295] FAT-fs (loop5): Directory bread(block 67) failed [ 114.446617][ T6295] FAT-fs (loop5): Directory bread(block 68) failed [ 114.468651][ T6295] FAT-fs (loop5): Directory bread(block 69) failed [ 114.486116][ T6295] FAT-fs (loop5): Directory bread(block 70) failed [ 114.510461][ T6295] FAT-fs (loop5): Directory bread(block 71) failed [ 114.536256][ T6295] FAT-fs (loop5): Directory bread(block 72) failed [ 114.562124][ T6295] FAT-fs (loop5): Directory bread(block 73) failed [ 114.580196][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 114.604152][ T6305] netlink: 'syz.0.540': attribute type 7 has an invalid length. [ 114.607638][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 114.683634][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 114.769000][ T4228] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.866827][ T6309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.876456][ T6315] loop0: detected capacity change from 0 to 2048 [ 115.030234][ T6324] loop6: detected capacity change from 0 to 2048 [ 115.031307][ T6315] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.067304][ T4228] usb 4-1: Using ep0 maxpacket: 8 [ 115.131809][ T6327] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.310678][ T6324] NILFS (loop6): error -2 truncating bmap (ino=16) [ 115.387071][ T6317] loop1: detected capacity change from 0 to 32768 [ 115.408304][ T4228] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 115.419081][ T6324] syz.6.547 (6324) used greatest stack depth: 20408 bytes left [ 115.426800][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.445681][ T4228] usb 4-1: Product: syz [ 115.449843][ T4228] usb 4-1: Manufacturer: syz [ 115.455338][ T4228] usb 4-1: SerialNumber: syz [ 115.463541][ T4228] usb 4-1: config 0 descriptor?? [ 115.516386][ T4228] gspca_main: se401-2.14.0 probing 047d:5003 [ 115.555653][ T4834] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 115.576129][ T6326] loop5: detected capacity change from 0 to 40427 [ 115.601583][ T6326] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 115.613593][ T6317] XFS (loop1): Mounting V5 Filesystem [ 115.628752][ T6326] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 115.659315][ T6326] F2FS-fs (loop5): invalid crc value [ 115.679199][ T6326] F2FS-fs (loop5): Found nat_bits in checkpoint [ 115.775013][ T6317] XFS (loop1): Ending clean mount [ 115.813441][ T4834] usb 1-1: Using ep0 maxpacket: 8 [ 115.818419][ T6326] F2FS-fs (loop5): Start checkpoint disabled! [ 115.840839][ T6326] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 115.850752][ T4188] XFS (loop1): Unmounting Filesystem [ 115.974034][ T4834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.978163][ T4228] gspca_se401: Frame size: 1x0 bayer [ 115.989853][ T6326] attempt to access beyond end of device [ 115.989853][ T6326] loop5: rw=10241, want=45104, limit=40427 [ 116.067718][ T4834] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 116.092564][ T4834] usb 1-1: config 4 has no interface number 0 [ 116.105488][ T4834] usb 1-1: config 4 interface 30 has no altsetting 0 [ 116.109245][ T310] attempt to access beyond end of device [ 116.109245][ T310] loop5: rw=2049, want=40976, limit=40427 [ 116.210644][ T4228] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 116.231064][ T4228] usb 4-1: USB disconnect, device number 8 [ 116.347812][ T4834] usb 1-1: string descriptor 0 read error: -22 [ 116.365002][ T4834] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 116.379057][ T6359] loop6: detected capacity change from 0 to 128 [ 116.399085][ T4834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.472582][ T6359] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.485291][ T4834] dw2102: su3000_identify_state [ 116.491165][ T4834] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 116.496678][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 116.499645][ T4834] dw2102: su3000_power_ctrl: 1, initialized 0 [ 116.524035][ T6359] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.533381][ T4834] dvb-usb: bulk message failed: -22 (2/0) [ 116.550693][ T6365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.553'. [ 116.560786][ T4834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.604214][ T4834] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 116.623180][ T4834] usb 1-1: media controller created [ 116.636971][ T6371] loop1: detected capacity change from 0 to 64 [ 116.643340][ T4834] dvb-usb: bulk message failed: -22 (6/0) [ 116.649498][ T4834] dw2102: i2c transfer failed. [ 116.658027][ T4834] dvb-usb: bulk message failed: -22 (6/0) [ 116.683756][ T4834] dw2102: i2c transfer failed. [ 116.688569][ T4834] dvb-usb: bulk message failed: -22 (6/0) [ 116.694674][ T4834] dw2102: i2c transfer failed. [ 116.699456][ T6330] dvb-usb: bulk message failed: -22 (3/0) [ 116.706648][ T6330] dw2102: i2c transfer failed. [ 116.711534][ T6330] dvb-usb: bulk message failed: -22 (4/0) [ 116.762230][ T6330] dw2102: i2c transfer failed. [ 116.780005][ T6330] dvb-usb: bulk message failed: -22 (6/0) [ 116.798905][ T6371] overlayfs: upper fs needs to support d_type. [ 116.833412][ T4235] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 116.849432][ T6330] dw2102: i2c transfer failed. [ 116.856906][ T6371] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 116.873434][ T6330] dw2102: i2c wr: len=66 is too big! [ 116.873434][ T6330] [ 116.889675][ T6371] overlayfs: failed to set xattr on upper [ 116.908076][ T4834] dvb-usb: bulk message failed: -22 (6/0) [ 116.916097][ T4834] dw2102: i2c transfer failed. [ 116.927519][ T6371] overlayfs: ...falling back to index=off,metacopy=off. [ 116.946047][ T4834] dvb-usb: bulk message failed: -22 (6/0) [ 116.951798][ T4834] dw2102: i2c transfer failed. [ 116.981799][ T4834] dvb-usb: bulk message failed: -22 (6/0) [ 116.994814][ T4834] dw2102: i2c transfer failed. [ 117.005218][ T4834] dvb-usb: MAC address: 02:02:02:02:02:02 [ 117.042972][ T4834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.066237][ T6371] Trying to free block not in datazone [ 117.093473][ T4235] usb 6-1: Using ep0 maxpacket: 32 [ 117.098510][ T4834] dvb-usb: bulk message failed: -22 (3/0) [ 117.126134][ T4834] dw2102: command 0x0e transfer failed. [ 117.131715][ T4834] dvb-usb: bulk message failed: -22 (3/0) [ 117.169394][ T4834] dw2102: command 0x0e transfer failed. [ 117.236024][ T4235] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 117.263302][ T4235] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 117.311846][ T4235] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 117.353339][ T4235] usb 6-1: config 1 has no interface number 0 [ 117.359476][ T4235] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.378620][ T4235] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 117.392141][ T6407] loop1: detected capacity change from 0 to 4096 [ 117.392199][ T4235] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 117.425624][ T4235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.472409][ T6407] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.503597][ T4834] dvb-usb: bulk message failed: -22 (3/0) [ 117.509768][ T4834] dw2102: command 0x0e transfer failed. [ 117.524886][ T4834] dvb-usb: bulk message failed: -22 (3/0) [ 117.545329][ T4834] dw2102: command 0x0e transfer failed. [ 117.549497][ T4235] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 117.559997][ T4834] dvb-usb: bulk message failed: -22 (1/0) [ 117.566023][ T4834] dw2102: command 0x51 transfer failed. [ 117.571685][ T4834] dvb-usb: bulk message failed: -22 (5/0) [ 117.578042][ T4834] dw2102: i2c probe for address 0x68 failed. [ 117.584859][ T4834] dvb-usb: bulk message failed: -22 (5/0) [ 117.592224][ T4834] dw2102: i2c probe for address 0x69 failed. [ 117.598377][ T4834] dvb-usb: bulk message failed: -22 (5/0) [ 117.604385][ T4834] dw2102: i2c probe for address 0x6a failed. [ 117.610483][ T4834] dw2102: probing for demodulator failed. Is the external power switched on? [ 117.620815][ T4834] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 117.744122][ T4235] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 117.774954][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 117.803392][ T4834] rc_core: IR keymap rc-tt-1500 not found [ 117.809146][ T4834] Registered IR keymap rc-empty [ 117.834552][ T4834] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 117.862043][ T4834] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input12 [ 117.900218][ T6434] loop3: detected capacity change from 0 to 64 [ 117.903774][ T4834] dvb-usb: schedule remote query interval to 250 msecs. [ 117.933275][ T4834] dw2102: su3000_power_ctrl: 0, initialized 1 [ 117.949084][ T4834] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 117.975530][ T4834] usb 1-1: USB disconnect, device number 10 [ 118.030621][ T6434] overlayfs: upper fs needs to support d_type. [ 118.071045][ T6434] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 118.091937][ T6434] overlayfs: failed to set xattr on upper [ 118.098430][ T6438] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.112145][ T6434] overlayfs: ...falling back to index=off,metacopy=off. [ 118.124653][ T4834] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 118.151189][ T6439] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.171534][ T6438] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.199803][ T6434] Trying to free block not in datazone [ 118.417206][ T6449] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 118.567402][ T4448] Dev loop7: unable to read RDB block 7 [ 118.573063][ T4448] loop7: unable to read partition table [ 118.598184][ T6455] Set syz0 is full, maxelem 0 reached [ 118.609517][ T4448] loop7: partition table beyond EOD, truncated [ 118.641540][ T6438] EXT4-fs (loop0): shut down requested (1) [ 118.659214][ T6454] Dev loop7: unable to read RDB block 7 [ 118.672793][ T6454] loop7: unable to read partition table [ 118.693458][ T6454] loop7: partition table beyond EOD, truncated [ 118.727866][ T6454] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 118.755684][ T4228] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 118.779449][ T6458] EXT4-fs (loop1): Ignoring removed bh option [ 118.835087][ T6458] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 118.897681][ T6458] EXT4-fs (loop1): 1 truncate cleaned up [ 118.921329][ T6458] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 119.121604][ T6469] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 119.212686][ T6469] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 119.328731][ T26] audit: type=1800 audit(1768866971.981:8): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.595" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 119.393021][ T6478] set_capacity_and_notify: 6 callbacks suppressed [ 119.393034][ T6478] loop6: detected capacity change from 0 to 64 [ 119.516358][ T6478] overlayfs: upper fs needs to support d_type. [ 119.539089][ T6478] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 119.590496][ T13] usb 6-1: USB disconnect, device number 7 [ 119.597374][ T6478] overlayfs: failed to set xattr on upper [ 119.603109][ T6478] overlayfs: ...falling back to index=off,metacopy=off. [ 119.622067][ T13] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 119.727377][ T6478] Trying to free block not in datazone [ 119.872752][ T6497] loop5: detected capacity change from 0 to 512 [ 119.944835][ T6497] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.091114][ T6497] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 120.106875][ T6497] FAT-fs (loop5): Filesystem has been set read-only [ 120.133691][ T6497] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 120.198627][ T6497] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 120.210344][ T6471] loop0: detected capacity change from 0 to 40427 [ 120.253550][ T6497] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 120.263697][ T6471] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x1ffff [ 120.272035][ T6471] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x724 [ 120.313689][ T6484] loop3: detected capacity change from 0 to 32768 [ 120.336249][ T6471] F2FS-fs (loop0): invalid crc value [ 120.382643][ T6471] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.436788][ T6484] XFS (loop3): Mounting V5 Filesystem [ 120.472165][ T6471] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 120.503969][ T6516] loop1: detected capacity change from 0 to 512 [ 120.524053][ T6471] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.588494][ T6516] EXT4-fs (loop1): Ignoring removed orlov option [ 120.620067][ T6484] XFS (loop3): Ending clean mount [ 120.649255][ T6516] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 120.724539][ T6516] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.605: corrupted in-inode xattr [ 120.762470][ T6471] F2FS-fs (loop0) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6a4/0x1dc0 [ 120.793101][ T4187] XFS (loop3): Unmounting Filesystem [ 120.819600][ T6516] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.605: couldn't read orphan inode 15 (err -117) [ 120.855066][ T6471] attempt to access beyond end of device [ 120.855066][ T6471] loop0: rw=2049, want=45104, limit=40427 [ 120.901651][ T6521] loop5: detected capacity change from 0 to 32768 [ 120.925164][ T6516] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,sysvgroups,noload,nombcache,noblock_validity,init_itable=0x0000000000000051,nogrpid,,errors=continue. Quota mode: none. [ 121.072395][ T6503] loop6: detected capacity change from 0 to 32768 [ 121.145726][ T6521] XFS (loop5): Mounting V5 Filesystem [ 121.212806][ T6503] ERROR: (device loop6): dbFindCtl: Corrupt dmapctl page [ 121.212806][ T6503] [ 121.256477][ T6503] ERROR: (device loop6): remounting filesystem as read-only [ 121.397534][ T6521] XFS (loop5): Ending clean mount [ 121.438168][ T6544] loop3: detected capacity change from 0 to 4096 [ 121.523946][ T4506] XFS (loop5): Unmounting Filesystem [ 121.635129][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 121.642753][ T6552] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.908517][ T6561] loop1: detected capacity change from 0 to 512 [ 121.914334][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.612'. [ 122.030902][ T6561] EXT4-fs (loop1): Ignoring removed orlov option [ 122.063521][ T6561] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.114176][ T6561] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.617: bad orphan inode 458763 [ 122.173160][ T6572] loop6: detected capacity change from 0 to 4096 [ 122.194460][ T6561] EXT4-fs (loop1): Remounting filesystem read-only [ 122.214254][ T6561] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000004,grpid,acl,errors=remount-ro,orlov,. Quota mode: none. [ 122.259299][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 122.313523][ T6561] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.617: bg 0: block 256: padding at end of block bitmap is not set [ 122.345124][ T6585] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.403558][ T6561] EXT4-fs (loop1): Remounting filesystem read-only [ 122.433839][ T6590] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 122.737923][ T26] audit: type=1800 audit(1768866975.391:9): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.629" name=64F26161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 dev="loop1" ino=1048626 res=0 errno=0 [ 122.781551][ T310] hfsplus: b-tree write err: -5, ino 4 [ 122.935898][ T6609] block nbd0: server does not support multiple connections per device. [ 122.985695][ T6609] block nbd0: shutting down sockets [ 123.054153][ T310] hfsplus: b-tree write err: -5, ino 4 [ 123.179027][ T6615] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 123.184983][ T6632] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.324131][ T6632] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 123.349034][ T6639] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 123.371791][ T6632] FAT-fs (loop1): Filesystem has been set read-only [ 123.383442][ T4835] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 123.398358][ T6632] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 123.470333][ T6632] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 123.493545][ T6632] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 123.625229][ T4835] usb 7-1: Using ep0 maxpacket: 16 [ 123.638686][ T6647] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 123.669181][ T6647] NILFS (loop3): mounting unchecked fs [ 123.720153][ T6647] NILFS (loop3): recovery complete [ 123.743638][ T4835] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 123.744223][ T6657] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.772178][ T4835] usb 7-1: config 0 has no interface number 0 [ 123.803904][ T4835] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 123.849891][ T4835] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 123.901577][ T6670] netlink: 40 bytes leftover after parsing attributes in process `syz.5.652'. [ 124.002520][ T4834] hid-generic 0005:15C2:3010.0007: item fetching failed at offset 0/1 [ 124.036727][ T4834] hid-generic: probe of 0005:15C2:3010.0007 failed with error -22 [ 124.093669][ T4835] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 124.123945][ T4835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.146282][ T4835] usb 7-1: Product: syz [ 124.150477][ T4835] usb 7-1: Manufacturer: syz [ 124.171349][ T4835] usb 7-1: SerialNumber: syz [ 124.178681][ T4835] usb 7-1: config 0 descriptor?? [ 124.197474][ T6681] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.213556][ T6627] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.221355][ T6627] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.233551][ T4235] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 124.389404][ T6681] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.531373][ T6627] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.580491][ T6627] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.693651][ T4235] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 124.706499][ T4235] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.843612][ T4235] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 124.866478][ T4235] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 124.868757][ T6674] set_capacity_and_notify: 10 callbacks suppressed [ 124.868770][ T6674] loop0: detected capacity change from 0 to 32768 [ 124.895596][ T4235] usb 6-1: Manufacturer: syz [ 124.922268][ T4235] usb 6-1: config 0 descriptor?? [ 125.001949][ T6674] XFS (loop0): Mounting V5 Filesystem [ 125.063593][ T4835] asix 7-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 125.085733][ T4835] asix: probe of 7-1:0.251 failed with error -524 [ 125.133433][ T4235] rc_core: IR keymap rc-hauppauge not found [ 125.144296][ T4235] Registered IR keymap rc-empty [ 125.164025][ T4235] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 125.221342][ T4235] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 125.264549][ T6718] loop6: detected capacity change from 0 to 524288000 [ 125.272787][ T4256] usb 7-1: USB disconnect, device number 3 [ 125.274092][ T6674] XFS (loop0): Ending clean mount [ 125.326315][ T6674] XFS (loop0): Quotacheck needed: Please wait. [ 125.333339][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 125.359278][ T4235] usb 6-1: USB disconnect, device number 8 [ 125.403356][ T6722] loop_set_status: loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) has still dirty pages (nrpages=3) [ 125.435967][ T6696] loop1: detected capacity change from 0 to 32768 [ 125.472240][ T6674] XFS (loop0): Quotacheck: Done. [ 125.526520][ T6696] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 125.608177][ T6696] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 125.662027][ T4186] XFS (loop0): Unmounting Filesystem [ 125.836968][ T4835] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 125.875814][ T4835] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 125.910591][ T4835] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 125.938139][ T4835] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 125.967351][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 125.986360][ T4835] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 125.998846][ T4835] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 126.008596][ T4835] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 126.019947][ T4835] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 126.039153][ T4835] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 126.049174][ T4835] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 126.060004][ T4835] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 126.069767][ T4835] hid-generic 00A0:0006:0003.0008: unknown main item tag 0x0 [ 126.123671][ T4835] hid-generic 00A0:0006:0003.0008: hidraw0: HID v0.05 Device [syz1] on syz0 [ 126.433605][ T4835] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 126.443422][ T4834] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 126.813667][ T4834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.824893][ T4835] usb 4-1: config 0 has no interfaces? [ 126.830388][ T4835] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 126.849905][ T4834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.860102][ T4835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.868425][ T4834] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 126.897656][ T4835] usb 4-1: config 0 descriptor?? [ 126.903824][ T4834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.921753][ T4834] usb 6-1: config 0 descriptor?? [ 127.091473][ T6796] loop6: detected capacity change from 0 to 4096 [ 127.116263][ T13] kernel write not supported for file /snd/seq (pid: 13 comm: kworker/0:1) [ 127.158792][ T13] usb 4-1: USB disconnect, device number 9 [ 127.221576][ T6804] loop0: detected capacity change from 0 to 512 [ 127.277629][ T6804] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.415373][ T4834] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 127.429994][ T6804] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 127.448406][ T4834] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 127.463049][ T6804] FAT-fs (loop0): Filesystem has been set read-only [ 127.471644][ T6804] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 127.499401][ T6804] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 127.510965][ T6804] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 127.528788][ T6809] loop1: detected capacity change from 0 to 2048 [ 127.581134][ T6809] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.596622][ T26] audit: type=1800 audit(1768866980.251:10): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.688" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 127.613493][ T4834] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 127.691018][ T4235] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 127.833433][ T4834] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 127.851978][ T4834] cp2112: probe of 0003:10C4:EA90.0009 failed with error -71 [ 127.880866][ T4834] usb 6-1: USB disconnect, device number 9 [ 127.956378][ T6822] fido_id[6822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 128.049935][ T6828] netlink: 'syz.3.695': attribute type 2 has an invalid length. [ 128.133431][ T4235] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.140848][ T6832] loop3: detected capacity change from 0 to 128 [ 128.156900][ T6814] loop0: detected capacity change from 0 to 32768 [ 128.163723][ T4235] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 128.218785][ T6814] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.689 (6814) [ 128.233635][ T4256] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.294101][ T6814] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 128.330341][ T6814] BTRFS info (device loop0): setting nodatacow, compression disabled [ 128.358975][ T6814] BTRFS info (device loop0): force clearing of disk cache [ 128.373844][ T6814] BTRFS info (device loop0): enabling ssd optimizations [ 128.378329][ T4235] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.397500][ T4235] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.410531][ T6814] BTRFS info (device loop0): using spread ssd allocation scheme [ 128.425646][ T4235] usb 7-1: Product: syz [ 128.429835][ T4235] usb 7-1: Manufacturer: syz [ 128.440027][ T4235] usb 7-1: SerialNumber: syz [ 128.448751][ T6814] BTRFS info (device loop0): turning off barriers [ 128.461069][ T6814] BTRFS info (device loop0): disabling free space tree [ 128.469520][ T6814] BTRFS info (device loop0): not using ssd optimizations [ 128.477931][ T6814] BTRFS info (device loop0): not using spread ssd allocation scheme [ 128.486529][ T6814] BTRFS info (device loop0): has skinny extents [ 128.494833][ T4235] usb 7-1: bad CDC descriptors [ 128.523681][ T4256] usb 2-1: Using ep0 maxpacket: 32 [ 128.552258][ T6814] BTRFS info (device loop0): clearing free space tree [ 128.559403][ T6814] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.571688][ T6814] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.619707][ T310] BTRFS info (device loop0): space_info 5 has 10600448 free, is not full [ 128.628273][ T310] BTRFS info (device loop0): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=884736, readonly=0 zone_unusable=0 [ 128.642152][ T310] BTRFS info (device loop0): global_block_rsv: size 851968 reserved 851968 [ 128.650848][ T310] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 128.658622][ T310] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 128.663456][ T4256] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 128.666366][ T310] BTRFS info (device loop0): delayed_block_rsv: size 32768 reserved 32768 [ 128.682896][ T310] BTRFS info (device loop0): delayed_refs_rsv: size 196608 reserved 0 [ 128.683238][ T4256] usb 2-1: config 0 has no interface number 0 [ 128.713311][ T4256] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.724902][ T4256] usb 2-1: config 0 interface 85 has no altsetting 0 [ 128.741252][ T310] BTRFS info (device loop0): cannot satisfy tickets, dumping space info [ 128.749873][ T310] BTRFS info (device loop0): space_info 5 has 10633216 free, is full [ 128.758018][ T310] BTRFS info (device loop0): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=851968, readonly=0 zone_unusable=0 [ 128.771711][ T310] BTRFS info (device loop0): global_block_rsv: size 851968 reserved 851968 [ 128.780439][ T310] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 128.788127][ T310] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 128.795893][ T310] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 128.803727][ T310] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 128.811431][ T310] BTRFS info (device loop0): failing ticket with 72057594038521856 bytes [ 128.821313][ T6814] BTRFS info (device loop0): space_info 5 has 10633216 free, is full [ 128.829450][ T6814] BTRFS info (device loop0): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=851968, readonly=0 zone_unusable=0 [ 128.843363][ T6814] BTRFS info (device loop0): global_block_rsv: size 851968 reserved 851968 [ 128.852063][ T6814] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 128.859767][ T6814] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 128.867479][ T6814] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 128.875365][ T6814] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 128.904983][ T4256] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 128.920803][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.930373][ T4256] usb 2-1: Product: syz [ 128.939143][ T4256] usb 2-1: Manufacturer: syz [ 128.943889][ T4256] usb 2-1: SerialNumber: syz [ 128.968325][ T4256] usb 2-1: config 0 descriptor?? [ 129.127513][ T4347] usb 7-1: USB disconnect, device number 4 [ 129.587186][ T6865] loop6: detected capacity change from 0 to 512 [ 129.643564][ T4256] appletouch 2-1:0.85: Geyser mode initialized. [ 129.651738][ T4256] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input14 [ 129.662481][ T6865] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.771227][ T6865] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 129.799989][ T6865] FAT-fs (loop6): Filesystem has been set read-only [ 129.811466][ T6865] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 129.827247][ T4235] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 129.858716][ T4347] usb 2-1: USB disconnect, device number 7 [ 129.866478][ T6865] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 129.884061][ T6865] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 129.908994][ T4347] appletouch 2-1:0.85: input: appletouch disconnected [ 129.977566][ T6871] loop0: detected capacity change from 0 to 512 [ 129.980331][ T6869] loop5: detected capacity change from 0 to 32768 [ 130.066044][ T6871] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.108236][ T6871] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.123353][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 130.165428][ T6869] XFS (loop5): Mounting V5 Filesystem [ 130.205545][ T6871] EXT4-fs (loop0): shut down requested (1) [ 130.265268][ T4235] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 130.286741][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.317711][ T4235] usb 4-1: config 0 descriptor?? [ 130.323048][ T6869] XFS (loop5): Ending clean mount [ 130.327887][ T6889] loop6: detected capacity change from 0 to 4096 [ 130.334507][ T6869] XFS (loop5): Quotacheck needed: Please wait. [ 130.430978][ T6892] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.448250][ T6869] XFS (loop5): Quotacheck: Done. [ 130.560862][ T4506] XFS (loop5): Unmounting Filesystem [ 130.595196][ T4235] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 130.613992][ T4235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.677127][ T4235] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 130.703304][ T4235] usb 4-1: media controller created [ 130.730957][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.768199][ T6899] loop6: detected capacity change from 0 to 4096 [ 130.823381][ T4235] az6027: usb out operation failed. (-71) [ 130.846676][ T4235] az6027: usb out operation failed. (-71) [ 130.870479][ T4235] stb0899_attach: Driver disabled by Kconfig [ 130.897399][ T4235] az6027: no front-end attached [ 130.897399][ T4235] [ 130.944762][ T4235] az6027: usb out operation failed. (-71) [ 130.950522][ T4235] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 130.970846][ T26] audit: type=1800 audit(1768866983.621:11): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.711" name="file0" dev="loop6" ino=0 res=0 errno=0 [ 130.972328][ T4235] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 131.066462][ T4235] dvb-usb: schedule remote query interval to 400 msecs. [ 131.082980][ T4235] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 131.111992][ T4235] usb 4-1: USB disconnect, device number 10 [ 131.203949][ T4235] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 131.335528][ T6908] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 131.407024][ T6896] loop0: detected capacity change from 0 to 40427 [ 131.436541][ T6900] loop1: detected capacity change from 0 to 32768 [ 131.459122][ T6914] netlink: 64 bytes leftover after parsing attributes in process `syz.3.720'. [ 131.510445][ T6900] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.713 (6900) [ 131.516830][ T6896] F2FS-fs (loop0): invalid crc value [ 131.544577][ T6896] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.608520][ T6900] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 131.642577][ T6900] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 131.668629][ T6919] loop3: detected capacity change from 0 to 1024 [ 131.675675][ T6900] BTRFS info (device loop1): use zstd compression, level 3 [ 131.687006][ T6896] F2FS-fs (loop0): Start checkpoint disabled! [ 131.693862][ T6900] BTRFS info (device loop1): using free space tree [ 131.721762][ T6900] BTRFS info (device loop1): has skinny extents [ 131.728256][ T6896] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 131.759663][ T6919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.991451][ T154] attempt to access beyond end of device [ 131.991451][ T154] loop0: rw=2049, want=40984, limit=40427 [ 132.033023][ T6911] loop5: detected capacity change from 0 to 32768 [ 132.083467][ T6900] BTRFS info (device loop1): enabling ssd optimizations [ 132.139979][ T6911] XFS (loop5): Mounting V5 Filesystem [ 132.313143][ T6911] XFS (loop5): Ending clean mount [ 132.498225][ T6956] loop6: detected capacity change from 0 to 512 [ 132.520565][ T4506] XFS (loop5): Unmounting Filesystem [ 132.605131][ T6953] loop3: detected capacity change from 0 to 8192 [ 132.700154][ T6956] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 132.718763][ T6953] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 132.758271][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.764716][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.777328][ T6956] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.789104][ T6953] REISERFS (device loop3): using ordered data mode [ 132.795804][ T6953] reiserfs: using flush barriers [ 132.808608][ T6953] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.847757][ T6953] REISERFS (device loop3): checking transaction log (loop3) [ 132.872428][ T6953] REISERFS (device loop3): Using tea hash to sort names [ 132.897417][ T6953] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 132.916597][ T6956] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 132.942989][ T6956] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 132.953830][ T6956] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.725: Failed to acquire dquot type 0 [ 133.620231][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.6.734'. [ 133.663062][ T6981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.676439][ T6984] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.811596][ T6984] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 133.881738][ T6984] FAT-fs (loop5): Filesystem has been set read-only [ 133.923729][ T6984] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 134.006163][ T6984] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 134.044712][ T6984] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 134.457396][ T6989] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.736 (6989) [ 134.509091][ T6989] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 134.543416][ T4228] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 134.568272][ T6989] BTRFS info (device loop6): setting nodatacow, compression disabled [ 134.597129][ T4317] hfsplus: b-tree write err: -5, ino 4 [ 134.608873][ T6989] BTRFS info (device loop6): force clearing of disk cache [ 134.658351][ T6989] BTRFS info (device loop6): enabling ssd optimizations [ 134.673892][ T6989] BTRFS info (device loop6): using spread ssd allocation scheme [ 134.681563][ T6989] BTRFS info (device loop6): turning off barriers [ 134.723326][ T6989] BTRFS info (device loop6): disabling free space tree [ 134.765075][ T6989] BTRFS info (device loop6): not using ssd optimizations [ 134.772161][ T6989] BTRFS info (device loop6): not using spread ssd allocation scheme [ 134.823544][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 134.833550][ T6989] BTRFS info (device loop6): has skinny extents [ 134.895506][ T7021] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.965800][ T7021] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.072196][ T7048] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.086880][ T7048] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.132015][ T6989] BTRFS info (device loop6): clearing free space tree [ 135.143876][ T6989] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.170076][ T4228] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 135.187278][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.203447][ T6989] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.206063][ T4228] usb 4-1: Product: syz [ 135.237456][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.759'. [ 135.248430][ T4228] usb 4-1: Manufacturer: syz [ 135.253042][ T4228] usb 4-1: SerialNumber: syz [ 135.266085][ T7053] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 135.294950][ T4228] usb 4-1: config 0 descriptor?? [ 135.364923][ T4228] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 135.439014][ T310] BTRFS info (device loop6): space_info 5 has 10600448 free, is not full [ 135.447910][ T310] BTRFS info (device loop6): space_info total=11534336, used=49152, pinned=0, reserved=0, may_use=884736, readonly=0 zone_unusable=0 [ 135.462555][ T310] BTRFS info (device loop6): global_block_rsv: size 851968 reserved 851968 [ 135.471232][ T310] BTRFS info (device loop6): trans_block_rsv: size 0 reserved 0 [ 135.478918][ T310] BTRFS info (device loop6): chunk_block_rsv: size 0 reserved 0 [ 135.486613][ T310] BTRFS info (device loop6): delayed_block_rsv: size 32768 reserved 32768 [ 135.495167][ T310] BTRFS info (device loop6): delayed_refs_rsv: size 196608 reserved 0 [ 135.795916][ T4228] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 135.965834][ T7072] set_capacity_and_notify: 6 callbacks suppressed [ 135.965849][ T7072] loop1: detected capacity change from 0 to 2048 [ 136.031079][ T7060] loop5: detected capacity change from 0 to 32768 [ 136.072141][ T7076] loop0: detected capacity change from 0 to 512 [ 136.134723][ T7072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.190541][ T7076] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 136.245292][ T7076] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #13: comm syz.0.767: iget: bad i_size value: 12154757448730 [ 136.274808][ T1109] usb 4-1: USB disconnect, device number 11 [ 136.281002][ T7060] XFS (loop5): Mounting V5 Filesystem [ 136.341354][ T1109] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 136.398083][ T7076] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.767: couldn't read orphan inode 13 (err -117) [ 136.429945][ T1109] visor 4-1:0.0: device disconnected [ 136.434153][ T7076] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x000000000000ffff,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.,errors=continue. Quota mode: writeback. [ 136.498481][ T7060] XFS (loop5): Ending clean mount [ 136.559409][ T7076] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 136.591280][ T7060] XFS (loop5): Quotacheck needed: Please wait. [ 136.593060][ T7076] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 136.726739][ T7060] XFS (loop5): Quotacheck: Done. [ 136.830934][ T4506] XFS (loop5): Unmounting Filesystem [ 137.042525][ T7092] loop1: detected capacity change from 0 to 4096 [ 137.083513][ T1109] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 137.133381][ T7092] EXT4-fs (loop1): Test dummy encryption mode enabled [ 137.150507][ T7092] EXT4-fs (loop1): bad block size 8192 [ 137.393426][ T1109] usb 4-1: Using ep0 maxpacket: 8 [ 137.542157][ T7105] loop1: detected capacity change from 0 to 2048 [ 137.601646][ T7116] netlink: 'syz.0.780': attribute type 2 has an invalid length. [ 137.671835][ T7114] loop6: detected capacity change from 0 to 4096 [ 137.698888][ T7105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.708202][ T1109] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 137.710161][ T7119] loop0: detected capacity change from 0 to 1024 [ 137.733250][ T1109] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 137.741361][ T1109] usb 4-1: Product: syz [ 137.804591][ T1109] usb 4-1: Manufacturer: syz [ 137.809233][ T1109] usb 4-1: SerialNumber: syz [ 137.844263][ T1109] usb 4-1: config 0 descriptor?? [ 137.855367][ T7114] ntfs: volume version 3.1. [ 137.856306][ T7119] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.975210][ T1109] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 138.023320][ T26] audit: type=1800 audit(1768866990.671:12): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.781" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 138.625239][ T1109] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 138.698386][ T7125] loop5: detected capacity change from 0 to 32768 [ 138.863589][ T1109] usb 4-1: USB disconnect, device number 12 [ 138.918774][ T7125] XFS (loop5): Mounting V5 Filesystem [ 138.923358][ T4834] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.947034][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.050025][ T7125] XFS (loop5): Ending clean mount [ 139.081365][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.109054][ T7125] XFS (loop5): Quotacheck needed: Please wait. [ 139.163483][ T4834] usb 2-1: Using ep0 maxpacket: 8 [ 139.182118][ T7125] XFS (loop5): Quotacheck: Done. [ 139.221384][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.323438][ T4834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.341085][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.353101][ T4506] XFS (loop5): Unmounting Filesystem [ 139.358914][ T7146] loop6: detected capacity change from 0 to 32768 [ 139.423590][ T4834] usb 2-1: config index 0 descriptor too short (expected 51, got 18) [ 139.431716][ T4834] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 139.443138][ T7146] [ 139.443138][ T7146] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.443138][ T7146] [ 139.479838][ T4834] usb 2-1: config 4 has no interface number 0 [ 139.525788][ T4834] usb 2-1: config 4 interface 30 has no altsetting 0 [ 139.833514][ T4834] usb 2-1: string descriptor 0 read error: -22 [ 139.839752][ T4834] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 139.871748][ T4834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.936141][ T5774] [ 139.936141][ T5774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.936141][ T5774] [ 139.959321][ T4834] dw2102: su3000_identify_state [ 139.969868][ T4834] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 139.974312][ T5774] [ 139.974312][ T5774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.974312][ T5774] [ 140.000631][ T4834] dw2102: su3000_power_ctrl: 1, initialized 0 [ 140.048723][ T4834] dvb-usb: bulk message failed: -22 (2/0) [ 140.082203][ T4834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.234442][ T4834] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 140.248471][ T7177] loop6: detected capacity change from 0 to 2048 [ 140.288521][ T4834] usb 2-1: media controller created [ 140.313302][ T4834] dvb-usb: bulk message failed: -22 (6/0) [ 140.328890][ T4448] loop6: p1 < > p4 < > [ 140.333356][ T4448] loop6: partition table partially beyond EOD, truncated [ 140.351542][ T7158] chnl_net:caif_netlink_parms(): no params data found [ 140.359110][ T4834] dw2102: i2c transfer failed. [ 140.375681][ T4448] loop6: p4 start 42180 is beyond EOD, truncated [ 140.391923][ T7142] dw2102: i2c rd: len=112 is too big! [ 140.391923][ T7142] [ 140.423359][ T4834] dvb-usb: bulk message failed: -22 (6/0) [ 140.429521][ T4834] dw2102: i2c transfer failed. [ 140.468911][ T7177] loop6: p1 < > p4 < > [ 140.470326][ T4834] dvb-usb: bulk message failed: -22 (6/0) [ 140.474459][ T7177] loop6: partition table partially beyond EOD, [ 140.501428][ T4834] dw2102: i2c transfer failed. [ 140.503447][ T7177] truncated [ 140.520116][ T7177] loop6: p4 start 42180 is beyond EOD, truncated [ 140.543280][ T4834] dvb-usb: bulk message failed: -22 (6/0) [ 140.563297][ T4834] dw2102: i2c transfer failed. [ 140.608075][ T4834] dvb-usb: bulk message failed: -22 (6/0) [ 140.623928][ T4834] dw2102: i2c transfer failed. [ 140.628834][ T4834] dvb-usb: bulk message failed: -22 (6/0) [ 140.636573][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.664135][ T4834] dw2102: i2c transfer failed. [ 140.669308][ T4834] dvb-usb: MAC address: 02:02:02:02:02:02 [ 140.675349][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.695805][ T7158] device bridge_slave_0 entered promiscuous mode [ 140.744712][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 140.784675][ T4834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.786640][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.808268][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.830732][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 140.860779][ T4834] dvb-usb: bulk message failed: -22 (3/0) [ 140.865303][ T7158] device bridge_slave_1 entered promiscuous mode [ 140.890305][ T4834] dw2102: command 0x0e transfer failed. [ 140.907023][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 140.914393][ T4834] dvb-usb: bulk message failed: -22 (3/0) [ 140.920740][ T7158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.949567][ T7158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.955544][ T4834] dw2102: command 0x0e transfer failed. [ 141.110203][ T7158] team0: Port device team_slave_0 added [ 141.140712][ T7158] team0: Port device team_slave_1 added [ 141.166444][ T7181] loop5: detected capacity change from 0 to 32768 [ 141.171477][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.180212][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.209756][ T7158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.239435][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.255245][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.300173][ T7181] XFS (loop5): Mounting V5 Filesystem [ 141.311248][ T4834] dvb-usb: bulk message failed: -22 (3/0) [ 141.322087][ T4834] dw2102: command 0x0e transfer failed. [ 141.331505][ T4834] dvb-usb: bulk message failed: -22 (3/0) [ 141.346131][ T4834] dw2102: command 0x0e transfer failed. [ 141.351706][ T4834] dvb-usb: bulk message failed: -22 (1/0) [ 141.361749][ T4834] dw2102: command 0x51 transfer failed. [ 141.361872][ T7158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.370552][ T4834] dvb-usb: bulk message failed: -22 (5/0) [ 141.390281][ T4834] dw2102: i2c probe for address 0x68 failed. [ 141.396502][ T4834] dvb-usb: bulk message failed: -22 (5/0) [ 141.402349][ T4834] dw2102: i2c probe for address 0x69 failed. [ 141.414860][ T4834] dvb-usb: bulk message failed: -22 (5/0) [ 141.421187][ T4834] dw2102: i2c probe for address 0x6a failed. [ 141.431821][ T4834] dw2102: probing for demodulator failed. Is the external power switched on? [ 141.443026][ T4834] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 141.496177][ T7181] XFS (loop5): Ending clean mount [ 141.541173][ T7158] device hsr_slave_0 entered promiscuous mode [ 141.562674][ T7158] device hsr_slave_1 entered promiscuous mode [ 141.617082][ T4834] rc_core: IR keymap rc-tt-1500 not found [ 141.622841][ T4834] Registered IR keymap rc-empty [ 141.643488][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 141.645936][ T4834] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 141.689264][ T4834] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input17 [ 141.704371][ T4834] dvb-usb: schedule remote query interval to 250 msecs. [ 141.711348][ T4834] dw2102: su3000_power_ctrl: 0, initialized 1 [ 141.719425][ T4834] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 141.730775][ T4834] usb 2-1: USB disconnect, device number 8 [ 141.747885][ T4506] XFS (loop5): Unmounting Filesystem [ 141.789726][ T4834] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 141.889356][ T7158] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 141.939629][ T7158] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 141.965536][ T7158] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 142.010157][ T7158] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 142.193578][ T154] device hsr_slave_0 left promiscuous mode [ 142.218824][ T154] device hsr_slave_1 left promiscuous mode [ 142.239976][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.247631][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.264873][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.272284][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.280318][ T154] device bridge_slave_1 left promiscuous mode [ 142.288841][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.298104][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.310019][ T154] device veth1_macvtap left promiscuous mode [ 142.316159][ T154] device veth0_macvtap left promiscuous mode [ 142.322207][ T154] device veth1_vlan left promiscuous mode [ 142.328344][ T154] device veth0_vlan left promiscuous mode [ 142.472800][ T154] team0 (unregistering): Port device team_slave_1 removed [ 142.487881][ T154] team0 (unregistering): Port device team_slave_0 removed [ 142.501900][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.517702][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.577280][ T154] bond0 (unregistering): Released all slaves [ 142.710894][ T7158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.730500][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.745202][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.756687][ T7158] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.785098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.800819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.837814][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.844943][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.854680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.864321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.872879][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.880007][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.890529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.901922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.918864][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.943549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.976796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.005208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.015084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.025356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.035082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.044094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.052671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.064639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.075065][ T7158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.266068][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.274047][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.294398][ T7158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.651549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.668950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.710803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.718955][ T1325] Bluetooth: hci2: command 0x041b tx timeout [ 143.735703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.750027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.758498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.779474][ T7158] device veth0_vlan entered promiscuous mode [ 143.810918][ T7158] device veth1_vlan entered promiscuous mode [ 143.817532][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 143.875681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.884923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.903740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.923675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.937119][ T7158] device veth0_macvtap entered promiscuous mode [ 143.956474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.976077][ T7158] device veth1_macvtap entered promiscuous mode [ 144.020826][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.039601][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.063270][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.083255][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.093099][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.123316][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.133175][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.185968][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.197104][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.220556][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.243349][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.263677][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.276613][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.287674][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.298356][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.308728][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.319384][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.331392][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.339654][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.361236][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.380451][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.390720][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.414184][ T7158] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.422899][ T7158] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.432856][ T7158] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.442462][ T7158] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.542667][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.567121][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.577768][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.587470][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.604292][ T502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.625851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.950210][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.6.804'. [ 144.962542][ T7329] loop5: detected capacity change from 0 to 512 [ 144.982669][ T7333] loop3: detected capacity change from 0 to 2048 [ 145.010652][ T7337] loop7: detected capacity change from 0 to 512 [ 145.087650][ T7329] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 145.108432][ T7337] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.110145][ T7333] EXT4-fs (loop3): inline encryption not supported [ 145.148213][ T7329] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 145.159556][ T7329] System zones: 0-1, 15-15, 18-18, 34-34 [ 145.168907][ T7329] EXT4-fs (loop5): orphan cleanup on readonly fs [ 145.182287][ T7329] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 145.197993][ T7329] EXT4-fs warning (device loop5): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 145.313867][ T7329] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 145.323604][ T7337] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 145.354468][ T7333] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,inlinecrypt,grpquota,grpid,,errors=continue. Quota mode: writeback. [ 145.412128][ T7333] EXT4-fs (loop3): shut down requested (2) [ 145.453438][ T7337] FAT-fs (loop7): Filesystem has been set read-only [ 145.471898][ T7329] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.806: bg 0: block 40: padding at end of block bitmap is not set [ 145.514092][ T7337] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 145.534082][ T7358] kvm [7356]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000067 [ 145.558960][ T7329] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 145.614548][ T7337] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 145.630376][ T7329] EXT4-fs (loop5): 1 truncate cleaned up [ 145.681645][ T7329] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.707428][ T7337] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 145.793834][ T4249] Bluetooth: hci2: command 0x040f tx timeout [ 145.842360][ T7329] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 146.023296][ T1109] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 146.247877][ T7385] loop5: detected capacity change from 0 to 1024 [ 146.261705][ T7388] tipc: Started in network mode [ 146.277703][ T7388] tipc: Node identity ac14140f, cluster identity 4711 [ 146.344880][ T7388] tipc: New replicast peer: 255.255.255.255 [ 146.402017][ T7388] tipc: Enabled bearer , priority 10 [ 146.414964][ T7395] Attempt to restore checkpoint with obsolete wellknown handles [ 146.423602][ T1109] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.439437][ T26] audit: type=1800 audit(1768866999.091:13): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.822" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 146.443819][ T1109] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.470454][ T1109] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 146.481501][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.564701][ T1109] hub 2-1:4.0: USB hub found [ 146.778296][ T1109] hub 2-1:4.0: 13 ports detected [ 146.786480][ T1109] usb 2-1: selecting invalid altsetting 1 [ 146.814952][ T7413] loop6: detected capacity change from 0 to 1024 [ 146.821427][ T1109] hub 2-1:4.0: Using single TT (err -22) [ 146.863069][ T7414] loop5: detected capacity change from 0 to 4096 [ 146.869674][ T1109] hub 2-1:4.0: insufficient power available to use all downstream ports [ 146.983725][ T1109] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 146.990666][ T1109] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 147.035136][ T7414] ntfs: volume version 3.1. [ 147.105187][ T1109] usb 2-1: USB disconnect, device number 9 [ 147.139260][ T7429] loop7: detected capacity change from 0 to 512 [ 147.171527][ T7425] hfsplus: catalog searching failed [ 147.230756][ T7429] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.295744][ T7429] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.838: inode has both inline data and extents flags [ 147.330950][ T7429] EXT4-fs (loop7): Remounting filesystem read-only [ 147.416551][ T7429] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.838: couldn't read orphan inode 15 (err -117) [ 147.437507][ T1109] tipc: Node number set to 2886997007 [ 147.468934][ T7429] EXT4-fs (loop7): Remounting filesystem read-only [ 147.511706][ T7429] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodiscard,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,acl,. Quota mode: writeback. [ 147.658266][ T7452] loop1: detected capacity change from 0 to 8 [ 147.675748][ T7429] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #2: comm syz.7.838: invalid size [ 147.729957][ T7429] EXT4-fs (loop7): Remounting filesystem read-only [ 147.821204][ T4950] hid-generic 0005:04F3:0400.000A: item fetching failed at offset 0/1 [ 147.862041][ T7460] loop3: detected capacity change from 0 to 2048 [ 147.878734][ T4834] Bluetooth: hci2: command 0x0419 tx timeout [ 147.885398][ T4950] hid-generic: probe of 0005:04F3:0400.000A failed with error -22 [ 147.916817][ T7452] SQUASHFS error: xz decompression failed, data probably corrupt [ 147.937012][ T7452] SQUASHFS error: Failed to read block 0xa8: -5 [ 147.973957][ T7460] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.000837][ T7460] EXT4-fs (loop3): shut down requested (1) [ 148.003853][ T7442] loop5: detected capacity change from 0 to 32768 [ 148.009655][ T7452] SQUASHFS error: xz decompression failed, data probably corrupt [ 148.009725][ T7452] SQUASHFS error: Failed to read block 0xa8: -5 [ 148.009887][ T26] audit: type=1800 audit(1768867000.661:14): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.847" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 148.098624][ T7442] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 148.108469][ T7442] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 148.130033][ T502] (kworker/u4:4,502,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 148.186347][ T7442] (syz.5.842,7442,1):ocfs2_double_lock:1188 ERROR: status = -2 [ 148.232559][ T7442] (syz.5.842,7442,1):ocfs2_rename:1297 ERROR: status = -2 [ 148.331136][ T7442] (syz.5.842,7442,1):ocfs2_rename:1687 ERROR: status = -2 [ 148.402963][ T4506] ocfs2: Unmounting device (7,5) on (node local) [ 148.453399][ T4411] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 148.638509][ T7490] program syz.1.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.645271][ T7485] loop3: detected capacity change from 0 to 4096 [ 148.687834][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.856'. [ 148.723400][ T4411] usb 8-1: Using ep0 maxpacket: 32 [ 148.774089][ T7485] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 148.819110][ T7497] loop5: detected capacity change from 0 to 64 [ 148.843577][ T4411] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 148.859731][ T4411] usb 8-1: config 0 has no interface number 0 [ 148.864324][ T7485] ntfs3: loop3: Failed to load $Extend. [ 148.896714][ T4411] usb 8-1: config 0 interface 184 has no altsetting 0 [ 148.976130][ T7497] hfs: unable to locate alternate MDB [ 149.000248][ T7497] hfs: continuing without an alternate MDB [ 149.073885][ T4411] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 149.103916][ T4411] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.126622][ T4411] usb 8-1: Product: syz [ 149.130818][ T4411] usb 8-1: Manufacturer: syz [ 149.150459][ T7503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.866'. [ 149.162881][ T4411] usb 8-1: SerialNumber: syz [ 149.175120][ T4411] usb 8-1: config 0 descriptor?? [ 149.228572][ T7488] loop6: detected capacity change from 0 to 32768 [ 149.236745][ T4411] smsc75xx v1.0.0 [ 149.369102][ T7488] JBD2: Ignoring recovery information on journal [ 149.550887][ T7488] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 149.784475][ T4834] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 149.817901][ T5774] ocfs2: Unmounting device (7,6) on (node local) [ 149.942902][ T7530] program syz.1.879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.042173][ T7533] netlink: 165 bytes leftover after parsing attributes in process `syz.1.880'. [ 150.113986][ T4411] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 150.140945][ T4411] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 150.156553][ T7536] delete_channel: no stack [ 150.165416][ T4834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 150.178563][ T4411] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 150.200627][ T4834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 150.225709][ T4411] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 150.245338][ T4834] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 150.258589][ T7534] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.292276][ T4411] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 150.312336][ T4834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.336002][ T7528] F2FS-fs (loop3): invalid crc value [ 150.339699][ T4411] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 150.363123][ T4834] usb 6-1: config 0 descriptor?? [ 150.372256][ T4411] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 150.378587][ T7528] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.402443][ T4411] usb 8-1: USB disconnect, device number 2 [ 150.514386][ T7528] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 150.611401][ T4187] attempt to access beyond end of device [ 150.611401][ T4187] loop3: rw=2049, want=45104, limit=40427 [ 150.623684][ T4347] usb 6-1: USB disconnect, device number 10 [ 150.948697][ T7559] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 150.974495][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.7.893'. [ 150.996369][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.7.893'. [ 151.009731][ T7559] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,jqfmt=vfsv0,. Quota mode: none. [ 151.033579][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.117394][ T7547] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 151.189846][ T7547] overlayfs: upper fs does not support tmpfile. [ 151.205816][ T7547] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 151.215548][ T7547] [ 151.217886][ T7547] ====================================================== [ 151.224902][ T7547] WARNING: possible circular locking dependency detected [ 151.231930][ T7547] syzkaller #0 Not tainted [ 151.236341][ T7547] ------------------------------------------------------ [ 151.243352][ T7547] syz.1.885/7547 is trying to acquire lock: [ 151.249225][ T7547] ffff88807369ed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 151.262424][ T7547] [ 151.262424][ T7547] but task is already holding lock: [ 151.269764][ T7547] ffff888057bd5c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 151.279220][ T7547] [ 151.279220][ T7547] which lock already depends on the new lock. [ 151.279220][ T7547] [ 151.289600][ T7547] [ 151.289600][ T7547] the existing dependency chain (in reverse order) is: [ 151.298683][ T7547] [ 151.298683][ T7547] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 151.306484][ T7547] down_read+0x44/0x2e0 [ 151.311145][ T7547] ocfs2_init_acl+0x307/0x770 [ 151.316380][ T7547] ocfs2_mknod+0x15cb/0x2510 [ 151.321693][ T7547] ocfs2_create+0x192/0x420 [ 151.326698][ T7547] path_openat+0x11db/0x2fa0 [ 151.331788][ T7547] do_filp_open+0x1e2/0x410 [ 151.336990][ T7547] do_sys_openat2+0x150/0x4b0 [ 151.342187][ T7547] __x64_sys_openat+0x135/0x160 [ 151.347551][ T7547] do_syscall_64+0x4c/0xa0 [ 151.352473][ T7547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.358883][ T7547] [ 151.358883][ T7547] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 151.367387][ T7547] down_read+0x44/0x2e0 [ 151.372050][ T7547] ocfs2_start_trans+0x3a6/0x6f0 [ 151.377502][ T7547] ocfs2_modify_bh+0xe0/0x4c0 [ 151.382681][ T7547] ocfs2_local_read_info+0x13c8/0x1750 [ 151.388638][ T7547] dquot_load_quota_sb+0x756/0xac0 [ 151.394350][ T7547] dquot_load_quota_inode+0x2d8/0x5d0 [ 151.400222][ T7547] ocfs2_enable_quotas+0x1c5/0x490 [ 151.405920][ T7547] ocfs2_fill_super+0x3cd2/0x50f0 [ 151.411444][ T7547] mount_bdev+0x287/0x3c0 [ 151.416304][ T7547] legacy_get_tree+0xe6/0x180 [ 151.421489][ T7547] vfs_get_tree+0x88/0x270 [ 151.426405][ T7547] do_new_mount+0x24a/0xa40 [ 151.431409][ T7547] __se_sys_mount+0x2e3/0x3d0 [ 151.436599][ T7547] do_syscall_64+0x4c/0xa0 [ 151.441775][ T7547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.448169][ T7547] [ 151.448169][ T7547] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 151.455622][ T7547] ocfs2_start_trans+0x2a7/0x6f0 [ 151.461060][ T7547] ocfs2_mknod+0xf5a/0x2510 [ 151.466057][ T7547] ocfs2_create+0x192/0x420 [ 151.471059][ T7547] path_openat+0x11db/0x2fa0 [ 151.476154][ T7547] do_filp_open+0x1e2/0x410 [ 151.481162][ T7547] do_sys_openat2+0x150/0x4b0 [ 151.486361][ T7547] __x64_sys_openat+0x135/0x160 [ 151.491724][ T7547] do_syscall_64+0x4c/0xa0 [ 151.496646][ T7547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.503041][ T7547] [ 151.503041][ T7547] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 151.513531][ T7547] down_write+0x38/0x60 [ 151.518198][ T7547] ocfs2_reserve_local_alloc_bits+0x11c/0x25f0 [ 151.524937][ T7547] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 151.531765][ T7547] ocfs2_mknod+0xef8/0x2510 [ 151.536770][ T7547] ocfs2_create+0x192/0x420 [ 151.541773][ T7547] path_openat+0x11db/0x2fa0 [ 151.546870][ T7547] do_filp_open+0x1e2/0x410 [ 151.551889][ T7547] do_sys_openat2+0x150/0x4b0 [ 151.557068][ T7547] __x64_sys_openat+0x135/0x160 [ 151.562424][ T7547] do_syscall_64+0x4c/0xa0 [ 151.567342][ T7547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.573737][ T7547] [ 151.573737][ T7547] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 151.584359][ T7547] __lock_acquire+0x2c42/0x7d10 [ 151.589858][ T7547] lock_acquire+0x19e/0x400 [ 151.594867][ T7547] down_write+0x38/0x60 [ 151.599521][ T7547] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 151.605918][ T7547] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 151.612747][ T7547] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 151.618878][ T7547] ocfs2_xattr_set+0xc38/0x13e0 [ 151.624228][ T7547] __vfs_setxattr+0x3e0/0x420 [ 151.629404][ T7547] __vfs_setxattr_noperm+0x129/0x5e0 [ 151.635188][ T7547] vfs_setxattr+0x167/0x2e0 [ 151.640189][ T7547] ovl_get_workdir+0x9d3/0x1230 [ 151.645540][ T7547] ovl_fill_super+0x1824/0x2a30 [ 151.650890][ T7547] mount_nodev+0x52/0xe0 [ 151.655637][ T7547] legacy_get_tree+0xe6/0x180 [ 151.660900][ T7547] vfs_get_tree+0x88/0x270 [ 151.665822][ T7547] do_new_mount+0x24a/0xa40 [ 151.670824][ T7547] __se_sys_mount+0x2e3/0x3d0 [ 151.676005][ T7547] do_syscall_64+0x4c/0xa0 [ 151.680920][ T7547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.687316][ T7547] [ 151.687316][ T7547] other info that might help us debug this: [ 151.687316][ T7547] [ 151.697528][ T7547] Chain exists of: [ 151.697528][ T7547] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 151.697528][ T7547] [ 151.714454][ T7547] Possible unsafe locking scenario: [ 151.714454][ T7547] [ 151.721880][ T7547] CPU0 CPU1 [ 151.727233][ T7547] ---- ---- [ 151.732572][ T7547] lock(&oi->ip_xattr_sem); [ 151.737140][ T7547] lock(&journal->j_trans_barrier); [ 151.744923][ T7547] lock(&oi->ip_xattr_sem); [ 151.752006][ T7547] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 151.759270][ T7547] [ 151.759270][ T7547] *** DEADLOCK *** [ 151.759270][ T7547] [ 151.767389][ T7547] 4 locks held by syz.1.885/7547: [ 151.772389][ T7547] #0: ffff8880242a20e0 (&type->s_umount_key#67/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 151.782465][ T7547] #1: ffff888062ffe460 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 151.791682][ T7547] #2: ffff888057bd5f48 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 151.802192][ T7547] #3: ffff888057bd5c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 151.812175][ T7547] [ 151.812175][ T7547] stack backtrace: [ 151.818055][ T7547] CPU: 1 PID: 7547 Comm: syz.1.885 Not tainted syzkaller #0 [ 151.825321][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.835542][ T7547] Call Trace: [ 151.838805][ T7547] [ 151.841723][ T7547] dump_stack_lvl+0x188/0x250 [ 151.846385][ T7547] ? load_image+0x400/0x400 [ 151.850866][ T7547] ? show_regs_print_info+0x20/0x20 [ 151.856053][ T7547] ? print_circular_bug+0x12b/0x1a0 [ 151.861237][ T7547] check_noncircular+0x296/0x330 [ 151.866157][ T7547] ? add_chain_block+0x940/0x940 [ 151.871077][ T7547] ? lockdep_lock+0xf1/0x1f0 [ 151.875661][ T7547] ? mark_lock+0x94/0x320 [ 151.879972][ T7547] __lock_acquire+0x2c42/0x7d10 [ 151.884931][ T7547] ? verify_lock_unused+0x140/0x140 [ 151.890120][ T7547] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 151.895820][ T7547] ? do_raw_spin_lock+0x128/0x2f0 [ 151.900846][ T7547] ? mutex_unlock+0x10/0x10 [ 151.905501][ T7547] ? __rwlock_init+0x140/0x140 [ 151.910243][ T7547] ? do_raw_spin_unlock+0x11d/0x230 [ 151.915422][ T7547] lock_acquire+0x19e/0x400 [ 151.919914][ T7547] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 151.925972][ T7547] ? __bfs+0x2a3/0x5c0 [ 151.930024][ T7547] ? __might_sleep+0xf0/0xf0 [ 151.934634][ T7547] ? read_lock_is_recursive+0x10/0x10 [ 151.939988][ T7547] ? verify_lock_unused+0x140/0x140 [ 151.945168][ T7547] down_write+0x38/0x60 [ 151.949300][ T7547] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 151.955352][ T7547] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 151.961236][ T7547] ? mark_lock+0x94/0x320 [ 151.965548][ T7547] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 151.971510][ T7547] ? lock_chain_count+0x20/0x20 [ 151.976427][ T7547] ? __rwlock_init+0x140/0x140 [ 151.981171][ T7547] ? ocfs2_block_group_search+0x470/0x470 [ 151.986871][ T7547] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 151.992743][ T7547] ? lockdep_hardirqs_on+0x94/0x140 [ 151.997929][ T7547] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 152.003887][ T7547] ? _raw_spin_unlock+0x40/0x40 [ 152.008812][ T7547] ? stack_trace_save+0xa6/0xf0 [ 152.013640][ T7547] ? stack_trace_snprint+0xf0/0xf0 [ 152.018727][ T7547] ? stack_depot_save+0x404/0x440 [ 152.023737][ T7547] ? __kasan_kmalloc+0xcc/0xf0 [ 152.028477][ T7547] ? __kasan_kmalloc+0xb5/0xf0 [ 152.033219][ T7547] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 152.039701][ T7547] ? ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 152.045485][ T7547] ? ocfs2_xattr_set+0xc38/0x13e0 [ 152.050485][ T7547] ? __vfs_setxattr+0x3e0/0x420 [ 152.055400][ T7547] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 152.060838][ T7547] ? vfs_setxattr+0x167/0x2e0 [ 152.065493][ T7547] ? ovl_get_workdir+0x9d3/0x1230 [ 152.070496][ T7547] ? ovl_fill_super+0x1824/0x2a30 [ 152.075495][ T7547] ? mount_nodev+0x52/0xe0 [ 152.079890][ T7547] ? legacy_get_tree+0xe6/0x180 [ 152.084722][ T7547] ? vfs_get_tree+0x88/0x270 [ 152.089293][ T7547] ? do_new_mount+0x24a/0xa40 [ 152.093946][ T7547] ? __se_sys_mount+0x2e3/0x3d0 [ 152.098788][ T7547] ? do_syscall_64+0x4c/0xa0 [ 152.103358][ T7547] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.109425][ T7547] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 152.115751][ T7547] ? ocfs2_init_steal_slots+0x150/0x150 [ 152.121278][ T7547] ? ocfs2_xattr_block_set+0x2e10/0x2e10 [ 152.126891][ T7547] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 152.132500][ T7547] ? _raw_spin_unlock+0x24/0x40 [ 152.137330][ T7547] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 152.143374][ T7547] ? ocfs2_truncate_log_needs_flush+0x12c/0x300 [ 152.149594][ T7547] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 152.155465][ T7547] ? up_write+0x1bb/0x420 [ 152.159773][ T7547] ocfs2_xattr_set+0xc38/0x13e0 [ 152.164615][ T7547] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 152.170316][ T7547] ? __lock_acquire+0x7d10/0x7d10 [ 152.175318][ T7547] ? __rwlock_init+0x140/0x140 [ 152.180152][ T7547] ? do_raw_spin_unlock+0x11d/0x230 [ 152.185328][ T7547] ? posix_xattr_acl+0x8f/0xb0 [ 152.190069][ T7547] ? evm_protect_xattr+0x33c/0x9b0 [ 152.195160][ T7547] ? ocfs2_xattr_user_set+0xa7/0xf0 [ 152.200336][ T7547] ? ocfs2_xattr_user_get+0xe0/0xe0 [ 152.205515][ T7547] __vfs_setxattr+0x3e0/0x420 [ 152.210174][ T7547] __vfs_setxattr_noperm+0x129/0x5e0 [ 152.215443][ T7547] vfs_setxattr+0x167/0x2e0 [ 152.219934][ T7547] ? xattr_permission+0x500/0x500 [ 152.224940][ T7547] ? up_write+0x1bb/0x420 [ 152.229249][ T7547] ? do_raw_spin_unlock+0x11d/0x230 [ 152.234432][ T7547] ovl_get_workdir+0x9d3/0x1230 [ 152.239270][ T7547] ? ovl_get_upper+0x600/0x600 [ 152.244019][ T7547] ovl_fill_super+0x1824/0x2a30 [ 152.248862][ T7547] ? ovl_mount+0x30/0x30 [ 152.253083][ T7547] ? sget+0x427/0x440 [ 152.257130][ T7547] ? free_anon_bdev+0x20/0x20 [ 152.261874][ T7547] ? ovl_mount+0x30/0x30 [ 152.266097][ T7547] mount_nodev+0x52/0xe0 [ 152.270321][ T7547] legacy_get_tree+0xe6/0x180 [ 152.275327][ T7547] ? virtio_fs_zero_page_range+0x120/0x120 [ 152.281375][ T7547] vfs_get_tree+0x88/0x270 [ 152.285856][ T7547] do_new_mount+0x24a/0xa40 [ 152.290339][ T7547] __se_sys_mount+0x2e3/0x3d0 [ 152.294997][ T7547] ? __x64_sys_mount+0xc0/0xc0 [ 152.299742][ T7547] ? lockdep_hardirqs_on+0x94/0x140 [ 152.304922][ T7547] ? __x64_sys_mount+0x1c/0xc0 [ 152.309663][ T7547] do_syscall_64+0x4c/0xa0 [ 152.314057][ T7547] ? clear_bhb_loop+0x30/0x80 [ 152.318714][ T7547] ? clear_bhb_loop+0x30/0x80 [ 152.323374][ T7547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.329256][ T7547] RIP: 0033:0x7fc93ba83cb9 [ 152.333653][ T7547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.353235][ T7547] RSP: 002b:00007fc939cdf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.361634][ T7547] RAX: ffffffffffffffda RBX: 00007fc93bcfefa0 RCX: 00007fc93ba83cb9 [ 152.369587][ T7547] RDX: 0000200000000340 RSI: 00002000000000c0 RDI: 0000000000000000 [ 152.377537][ T7547] RBP: 00007fc93baf1bf7 R08: 0000200000000180 R09: 0000000000000000 [ 152.385485][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.393432][ T7547] R13: 00007fc93bcff038 R14: 00007fc93bcfefa0 R15: 00007ffc47490c68 [ 152.401387][ T7547] [ 152.404477][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.595715][ T1109] kernel write not supported for file /dsp1 (pid: 1109 comm: kworker/1:2) [ 152.613648][ T7547] overlayfs: upper fs missing required features. [ 152.654464][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 152.746362][ T7577] set_capacity_and_notify: 7 callbacks suppressed [ 152.746376][ T7577] loop5: detected capacity change from 0 to 32768 [ 152.885365][ T7577] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 152.896638][ T7577] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 152.907484][ T7577] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 152.916989][ T1109] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 152.924313][ T1109] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 152.951700][ T1109] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 27ms [ 152.959289][ T1109] gfs2: fsid=syz:syz.0: jid=0: Done [ 152.964807][ T7577] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 153.030867][ T7577] gfs2: fsid=syz:syz.0: found 1 quota changes