last executing test programs: 19m1.299489046s ago: executing program 32 (id=2080): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x4008040}, 0x2000004) 15m46.311762677s ago: executing program 33 (id=5324): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 15m1.710763776s ago: executing program 0 (id=6096): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffd}}}}}}]}, 0x48}}, 0x0) 15m1.158230858s ago: executing program 0 (id=6103): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f00000000c0)={[{@utf8}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@utf8}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}, {@uni_xlate}, {@shortname_win95}]}, 0x3, 0x36b, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 15m0.468460764s ago: executing program 0 (id=6110): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) 15m0.284863635s ago: executing program 0 (id=6114): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 14m59.243322337s ago: executing program 0 (id=6138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000680), 0x4) 14m57.931193098s ago: executing program 0 (id=6163): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000400)={{0x58, 0x47}, 'port1\x00', 0xa0, 0x0, 0x9, 0x8, 0xe, 0xfffffffc, 0x8, 0x0, 0x0, 0x8}) 14m57.6848405s ago: executing program 34 (id=6163): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000400)={{0x58, 0x47}, 'port1\x00', 0xa0, 0x0, 0x9, 0x8, 0xe, 0xfffffffc, 0x8, 0x0, 0x0, 0x8}) 10m22.558771562s ago: executing program 7 (id=11329): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) 10m22.387609137s ago: executing program 7 (id=11332): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000e00), 0x12) 10m22.225212852s ago: executing program 7 (id=11336): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x2, @mcast2, 0xc}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) 10m22.018986024s ago: executing program 7 (id=11339): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000001bc0)={[{@keep_last_dots}, {@sys_tz}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@allow_utime={'allow_utime', 0x3d, 0x9}}, {@errors_remount}, {@gid}, {@namecase}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}, 0x1, 0x1529, &(0x7f0000000680)="$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") mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) 10m21.788337763s ago: executing program 7 (id=11343): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8000000, 0x0, 0x0, 0x6, 0x0, 0xb, 0x2000], [0x10001, 0x4, 0x6, 0x200000, 0x0, 0x0, 0x9], [0x7, 0xed, 0xbd7, 0x0, 0x0, 0x2000000]], '\x00', [{}, {0xd, 0x81}, {}, {0x0, 0x8}, {0x3, 0x7}, {0x8000000, 0x4005f, 0x1}, {0x1}, {0xfffffffd}, {0xdf}, {}, {}, {0x0, 0x8001}], '\x00', 0x5}) 10m21.243094555s ago: executing program 7 (id=11353): r0 = gettid() ptrace$setopts(0x4206, r0, 0xfcb, 0x15) 10m20.868031308s ago: executing program 35 (id=11353): r0 = gettid() ptrace$setopts(0x4206, r0, 0xfcb, 0x15) 9m0.992453089s ago: executing program 3 (id=12385): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$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") chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 8m59.801377186s ago: executing program 3 (id=12406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xff46}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x0) 8m59.545185404s ago: executing program 3 (id=12411): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) recvfrom$l2tp(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 8m59.399585314s ago: executing program 3 (id=12415): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 8m58.926843988s ago: executing program 3 (id=12426): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) poll(&(0x7f0000000480)=[{r0, 0x3c2}], 0x1, 0x6) 8m58.184889533s ago: executing program 3 (id=12433): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x228087) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xa02) 8m57.745928542s ago: executing program 36 (id=12433): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x228087) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xa02) 3m50.476064296s ago: executing program 8 (id=17146): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newqdisc={0x14c, 0x24, 0xbad689febb22c699, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xb, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "200d9e59b96aa56231d6b273ba884915292b46f1e0738572cac4714168804b555b57fabe9def50e59cd40fcb3bb5d8897e32fa2bef29cf699de9f218957ada1e5010f7c7fbeba418dbdce7fd0cdcfa2af5d0cfae8f523d47449a0f7994d2697f3547856336ec2e1dd70e7af4cd9ffd0c0214d0feed7b1f64d6c1a7cce402b4e305618c6b38e4476320e587a44c04aed0d6d000244c9cd2ac33d0c66725a421dd664508d9027aca0ba871e154650550212b7d3a92d5e8b65c2308ae3f889b95325718c12375d2525ac3b4f6d06cc08380c43aea9df0a1e9e619cf220639576c6516df4d054452efd0ff9d38f54935c48b1994da4840bdd4ecb2207e9f85bbc726"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x10000, 0x8, 0x9, 0x4, 0x20, 0x15}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 3m50.355720389s ago: executing program 8 (id=17149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 3m50.135325784s ago: executing program 8 (id=17156): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) 3m50.047079003s ago: executing program 8 (id=17158): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m49.60816008s ago: executing program 8 (id=17171): r0 = syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x11, r0, 0x7, &(0x7f0000000080)) 3m49.027541252s ago: executing program 8 (id=17176): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="05000000c30400"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000ff03"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40040090) 3m48.577659847s ago: executing program 37 (id=17176): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="05000000c30400"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000ff03"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40040090) 54.532584376s ago: executing program 6 (id=19753): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000680), &(0x7f0000000140)=""/158}, 0x20) 54.380665024s ago: executing program 6 (id=19756): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000640)={{0x2, 0x0, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 54.266663822s ago: executing program 6 (id=19759): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e31}, 0x6e, 0x0}}], 0x2, 0x40008004) 54.142149778s ago: executing program 6 (id=19763): mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x81) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) linkat(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x1000) 54.004335842s ago: executing program 6 (id=19767): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, r0, 0x1008, 0x973f, 0x6, 0x1}) 53.267660003s ago: executing program 6 (id=19773): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32) 52.802425835s ago: executing program 38 (id=19773): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x2, @remote, 0x80}}}, 0x32) 4.879747782s ago: executing program 1 (id=20225): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40004}}], 0x1, 0x8041) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 3.151543125s ago: executing program 4 (id=20262): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200900) 2.966216686s ago: executing program 4 (id=20265): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x8000001d) 2.343220232s ago: executing program 9 (id=20275): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1210092, &(0x7f0000000500)=ANY=[], 0x5, 0x1531, &(0x7f0000000a40)="$eJzs3AuYjlX3MPC19t43Y5r0NMlh2Huvm4cG2yRJDklySJIkSc4JSZMkCYkhp6QhCTlOksMQksPEpHE+H3JOkleSJCEhyf6uKX3+b/3fq/7f2/t5/++s33Xd1+w1z7PWs+5nzTX34blmvu42vFaT2tUbERH8U/CXLykAEAMAgwHgGgAIAKB8fPn47MfzSEz5516E/bUeTL/SHbArieefs/H8czaef87G88/ZeP45G88/Z+P552w8f8Zysq0zC13LW87dLt3/jwG+/58D8fE/Z+P5/8fw3vf5Hyfx/HM2nn/OxvPP2Xj+ORvPP2fj+ecs9jcxz5+xnOwvuY+c+1Kxf/gc8b/5c4Zf36p/sk7x4Jcy/6o+g/+nvCv0Y8cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLIc55y9TAPDr+kr3xRhjjDHGGGOMsb+Oz32lO2CMMcYYY4wxxti/HgIoCQoCyAW5IQbyQCxcBXFwNeSFayAC10I8XAf54HrIDwWgIBSCBCgMRUCDAQsEIRSFYhCF4lACboBEKAmloDQ4KANJcCOUhZugHNwM5eEWqAC3QkWoBJWhCtwGVeF2qAZ3QHW4E2pATagFteEuqIN3Q124B+rBvVAf7oMGcD80hAegETwIjeEhaAIPQ1NoBs2hBbSEVtD6t/nwZ/Kfh17wAvSGPpACfaEfvAj9YQAMhEEwGF6CIfAyDIVXIBWGwXB4FUbAazASXodRMBrGwBswFsbBeJgAE2ESpMGbMBneginwNkyFaTAdZkA6zIRZ8A7MhjkwF96FefAezIcFsBAWQQa8D4thCWTCB7AUPoQsWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFb4CLbBdtgBO2EX7IY98DHshU9gH3wK++Gz/2H+2d/kd0dAQIECFSrMhbkwBmMwFmMxDuMwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJF0KBBQsKiWBSjGMUSWAITMRFLYSl06DAJk7As3oTlsByWx/JYAStgRayElbAKVsGqWBWrYTWsfusCAKyBtbAW3oV34d1YF+tiPayH9bE+NsAG2BAbYiNshI2xMTbBJtgUm2JzbI4tsSW2xtbYBttgW2yL7bE9dsAO2BE7YjImYyfshJ2xM3bBLtgVu2I37IbdsQf2wOfxeXwBX8A+WEP0xX7YD/tjfxyIg3AQvoRD8GV8GV/BVByGw/FVfBVfw5F4BkfhaByDY7CqGIfjcQKSmIRpmIaTcTJOwSk4FafhNJyB6TgTZ+EsnI1zcA6+i/PwPXwPF+ACXIQZmIGLcQlmYiYuxbOYhctwOa7AlQC4EtfgWlyD63EDrsdNuAm34Bb8CD/C7bgdd+JO3I278WP8GD/BTzAVmwHAATyAB/EgHsJDeBgP4xE8gkfxKB7DY3gcj+MJPImn8CSextN4Bs/iOTyH5/E8XsBnE75svLvkulQQ2ZRQIpfIJWJEjIgVsSJOxIm8Iq+IiIiIF/Ein8gn8ov8oqAoKBJEgigiiggjjCARiqKiqIiKqCghSohEkShKiVKir3AiSSSJsqKsKCfKifLiFlFB3Coqikqinasiqoiqor2rJu4Q1UV1UUPUFLVEbVFb1BF1RF1RV9QT9UR9UV8oAGgo+uJAfFBkT6aJGIZNxXBsLlqIlqKVeA0fEW3ESGwr2on24jExGkdhR9HGJYsnRScxHjuLp8UEfEZ0FZOwm3hOdBc9RE/xvOgl2rreoo+Yin1FPzED+4sBYqAYJGZjTZE9sVriFZEqhonh4lWxCF8TI8XrYpQYLcaIN8RYMU6MFxPERDFJpIk3xWTxlpgi3hZTxTQxXcwQ6WKmmCXeEbPFHDFXvCvmiffEfLFALBSLRIZ4XywWS0Sm+EAsFR+KLLFMLBcrxEqxSqwWa8RasU6sFxvERrFJbBZbxFbxkdgmtosdYqfYJXaLPeJjsVd8IvaJT8V+8Zk4IP4mDorPxSHxhTgsvhRHxFfiqPhaHBPfiOOijzghTopT4jtxWnwvzoiz4pz4QZwXP4oL4idxUXgBEqWQUioZyFwyt4yReWSsvErGyatlXnmNjMhrZby8TuaT18v8soAsKAvJBFlYFpFaGmklyVAWlcVkVBaXJeQNMlGWlKVkaelkGZkkb5Rl5U2ynLxZlpe3yAryVllRVpKVZRV5m6wqb5fV5B2yurxT1pA1ZS1ZW94l68i7ZV15j6wn75X15X2ygbxfNpQPyEbyQdlYPiSbyIdlU9lMNpctZEvZSraWj8g28lHZVraT7eVjsoN8XHaUT8hk+aTsJJ+SneXTsot8RnaVz8pu8jnZXfaQPeVP8qL0srfsI1NkX9lPvij7y+xj4SA5WL4kh8iX5VD5ikyVw+Rw+aocIV+TI+XrcpQcLcfIN+RYOU6OlxPkRDlJpsk35WT5lpwi35ZT5TQ5Xc6Q6XKmHHip0tw/kf/Wr/kefzkky5lyaEqqHJayRW6VH8ltcrvcIXfKXXK33CP3yL1yr9wn98n9cr88IA/Ig/KgPCQPycPysDwij8ij8qg8Jo/J4/K4PCFPyh/kd/K0/F6ekWflWfmDPC/PywuX3gNQqISSSqlA5VK5VYzKo2LVVSpOXa3yCgBQ16p4dZ3Kp65X+VUBVVAVUgmqsCqitDLKKlKhKqqKqagqrkqoG1SiKqlKqdLKqTIqSd2oIv9k/t/3J3/tb8X0X94p1Vq1Vm1UG9VWtVXtVXvVQXVQHVVHlaySVSfVSXVWnVUX1UV1VV1VN9VNdVfdVU/VU/VSvVRvBJWiUlQ/9aLqrwaogWqQGqxeUkPUEDVUDVWpKlUNV8PVCDVCjVQj1Sg1So1RY9RYNVaNV+PVRDVRpak0NVlNVlPUFDVVTVXT1XSVrtLVLDVLzVaz1Vw1V81T89R8NV8tVAtVhspQi9Vilaky1VK1VGWpZWqZWqFWqFVqlVqj1qh1ap3aoDaoTWqTylJb1Va1TW1TO9QOtUvtUnvUHrVX7VX71D61X+1XB9QBdVAdVIfUIXVYHVZH1BF1VB1Vx9QxdVwdVyfUCXVKnVKn1Wl1Rp1R59Q5dV6dVxfUBXVRXcw+7QtEIAIVqCBXkCuICWKC2CA2iAvigrxB3iASRIL4ID7IF1wf5A8KBAWDQkFCUDgoEujABDagIAyKBsWCaFA8KBHcECQGJYNSQenABWWCpODGoGxwU1AuuDkoH9wSVAhuDSoGlYLKQZXgtqBqcHtQLbgjqB7cGdQIaga1gtrBXUGd4O6gbnBPUC+4N6gf3Bc0CO4PGgYPBI2CB4PGwUNBk+DhoGnQLGgetAhaBq2C1n9Vfcyu7/2ZAo+63rqPzg19dT/9ou6vB+iBepAerF/SQ/TLeqh+RafqYXp4zKt6hH5Nj9Sv61F6tB6j39Bj9Tg9Xk/QE/Uknabf1JP1W3qKfltP1dP0dD1Dp+uZepZ+R8/Wc/Rc/a6ep9/T8/UCvVAv0hn6fb1YL9GZ+gO9VH+os/QyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1R3qb3q536J16l96t9+iP9V79id6nP9X79Wf6gP6bPqg/14f0F/qw/lIf0V/po/prfUx/o4/rb/UJfVKf0t/p0/p7fUaf1ef0D/q8/lFf0D/pi9pnn9xnH96NMsrkMrlMjIkxsSbWxJk4k9fkNRETMfEm3uQz+Ux+k98UNAVNgkkwRUwRk40MmaKmqImaqClhSphEk2hKmVLGGWeSTJIpa8qacqacKW/KmwqmgqloKprKprK5zdxmbje3mzvMHeZOc6epaWqa2qa2qWPqmLqmrqln6pn6pr5pYBqYhqahaWQamcamsWlimpimpqlpbpqblqalaW1amzamjWlr2pr2pr3pYDqYjqajSTbJppPpZDqbzqaL6WK6mq6mm+lmupvupqfpaXqZXqa36W1STIrpZ/qZ/qa/GWgGmsFmsBlihpihZqhJNalmuBluRpgRZqQZaUaZ0WaMecOMNePMeDPBTDSTTJpJM5PNZDPFTDFTzVQz3Uw36SbdzDKzzGwz28w1c808M8/MN/PNQrPQZJgMs9gsNpkm0yw1S02WyTLLzXKz0qw0q81qs9asNevNerPRbDSbzWaz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQRMDh8xhc9gcMUfMUXPUHDPHzHFz3JwwJ8wpc8qcNqfNGXPGnDPnzHnzo7lgfjIXjTcxNo+NtVfZOHu1zWuvsb+NC9pCNsEWtkWstvltgb+LjbU20Za0pWxp62wZm2Rv/F1c0VaylW0Ve5utam+31X4X17F327r2HlvP3mtr27v+Lq5v77MN7MO2oW1mG9kWtrFtZZvYh21T28w2ty1sS9vKdrCP2472CZtsn7Sd7FO/ixfbJXatXWfX2w12r/3EnrM/2KP2a3ve/mh72z52sH3JDrEv26H2FZtqh/0uHmPfsGPtODveTrAT7aTfxdPtDJtuZ9pZ9h072875XZxh37fzbKadbxfYhXbRz3F2T5n2A7vUfmiz7DK73K6wK+0qu9qu+b+9rrCb7Ga7xe6xH9ttdrvdYXfaXXb3z3H2fuyzn9r99jN7xH5lD9rP7SF7zB62X/4cZ+/fMfuNPW6/tSfsSXvKfmdP2+/tGXv25/3P3vfv7E/2ovUWCEmQJEUB5aLcFEN5KJauoji6mvLSNRShaymerqN8dD3lpwJUkApRAhWmIqTJkCWikIpSMYpScSpBN1AilaRSVJoclaEkupHK0k1Ujm6m8nQLVaBbqSJVospUhW6jqnQ7VaM7qDrdSTWoJtWi2nQX1aG7qS7dQ/XoXqpP91EDup8a0gPUiB6kxvQQNaGHqSk1o+bUglpSK2pNj1AbepTaUjtqT49RB3qcOtITlExPUid6ijrT09SFnqGu9Cx1o+eoO/WgnvQ89aIXqDf1oRTqS/3oRepPA2ggDaLB9FINAKCh9Aql0jAaTq/SCHqNRtLrNIpG0xh6g8bSOBpPE2giTaI0epMm01s0hd6mqTSNptMMSqeZNIveodk0h+bSuzSP3qP5tIAW0iLKoPdpMS2hTPqAltKHlEXLaDmtoJW0ilbTGp8bgNbTBtpIm2gzbaGt9BFto+2EtJN20W7aQx/TXvqE9tGntJ8+owOEeJA+p0P0BR2mL+kIfUVH6Ws6Rt/QcfqWTtBJOkXf0Wn6ns7QWTpHP9B5+pEu0E90kTxBiKEIZajCIMwV5g5jwjxhbHhVGBdeHeYNrwkj4bVhfHhdmC+8PswfFggLhoXChLBwWCTUoQltSGEYFg2LhdGweFgivCFMDEuGpcLSoQvLhEnhjWHZ8KawXHhzWD68JawQ3hpWDCuFD99bJbwtrBreHlYL7wirh3eGNcKaYa2wdnhXWCe8O6wb3hPWC+8Ny4X3hQ3C+8OG4QNho/DBsHH4UNgkfDhsGjYLm4ctwpZhq7B1+EjYJnw0bBu2C9uHj4UdwsfDjuETYXL4ZNgpfOoPH08J+4b9whfDF0Pv75ELo4uiGdH3o4ujS6KZ0Q+iS6MfRrOiy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo1ui3tfODQ6dcNIpF7hcLreLcXlcrLvKxbmrXV53jYu4a128u87lc9e7/K6AK+gKuQRX2BVx2hlnHbnQFXXFXNQVdyXcDS7RlXSlXGnnXBmX5Fq51q61a+MedW1dO9fePeYec4+7x90T7gn3pOvknnKd3dOui3vGdXXPumfdc6676+F6uuddL/eC6+36uBSX4vq5fq6/6+8GuoFusBvshrghbqgb6lJdqhvuhrsRboQb6Ua6UW6UG+PGuLFurBvvxruJfqJLc2luspvsprgpbqqb6qa76S7dpbtZbpab7Wa7uW6um5c4z813891Ct9BluAy32C12mS7TLXVLXZbLcsvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XP73X53wB04591Bd8h94Q67L90R95U76r52x9w37rj71p1wJ90p95077b53Z9xZd8794M67H90F95O76LxLi7wZmRx5KzIl8nZkamRaZHpkRiQ9MjMyK/JOZHZkTmRuBGFe5L3I/MiCyMLIokhG5P3I4siSSGbkg8jSyIeRrMiyyPLIisjKyKqI94W3hb6oL+ajvrgv4W/wib6kL+VLe+fL+CR/oy/rb/Ll/M2+vL/FV/C3+oq+kq/sm/nmvoVv6Vv51v4R38Y/6tv6dr69f8x38I/7jv4Jn+yf9J38U76zf9p38c/4rv5Z380/57v7Hr6nf9738i/43r6PT/F9fT//ou/vB/iBfpAf7F/yQ/zLfqh/xaf6YX64f9WP8K/5kf51P8qP9mP8G36sH+fH+wl+op/k0/ybfrJ/y0/xb/upfpqf7mf4dD/Tz/Lv+Nl+jp/r3/Xz/Ht+vl/gF/pFPsO/7xf7JT7Tf+CX+g99ll/ml/sVHmJW+dV+jV/r1/n1foPf6Df5zX6L3+o/8tv8dr/D7/S7/G6/x3/s9/pP/D7/qd/vP/MH/N/8Qf+5P+S/8If9l/6I/8of9V/7Y/4bf9x/60/4k/6U/86f9t/7M/6sP+d/8Of9j/6C/8lf5L9ZY4wxxhj7U+QfPN73v/meuLRl6wcAV28vdPi3NTfm/2U9QCR0iADAk326PXjp042UGjVSUlIuPTdLQlBsAQBELufngsvxMmgPj0MytIOy/21/A0SP83Sp/q/bb+tHbwGI/S85MXA5vlz/pn9Qf9y8P6y/ACCx2OWcPHA5vly/3D+oX6DNH9TP83kaQNv/khMHl+PL9ZPgUXgKkv9ooL848KeexRhjjDHGGGPsP8YAUbnLH13fZl+fJ6jLObnhcvxH1+c/+3PXpIwxxhhjjDHGGPsXeaZHzyceSU5u1+VKLQCu5Kvz4s8scv17tPEftpD/Hm38o8WV/s3EGGOMMcYY+6tdPum/0p0wxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGM51/+Pfyd2pfeRMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+TwAAAP//tVgiNQ==") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.280009504s ago: executing program 2 (id=20276): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 2.175279709s ago: executing program 9 (id=20277): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x16, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x334e8b}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.061118533s ago: executing program 4 (id=20279): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/22, 0x16}], 0x1) syz_usb_connect(0x0, 0x143, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102611d7720"], 0x0) close(0x3) 2.005688037s ago: executing program 9 (id=20280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 1.882505697s ago: executing program 9 (id=20283): r0 = fanotify_init(0x20, 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_mark(r0, 0x1, 0x8000000, r2, 0x0) readv(r1, 0x0, 0x0) 1.769043515s ago: executing program 9 (id=20285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 1.742905684s ago: executing program 5 (id=20286): syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x22, &(0x7f0000000140)={0x5, 0xf, 0x22, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xb, 0x6, 0x2, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x7b, 0x81, 0x5, 0xfffa, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x13, 0x2, 0xc, 0x6}]}}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001abed30a9000000000027000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.698348437s ago: executing program 9 (id=20287): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002c80)={0x84, &(0x7f0000002800)={0x40, 0xc, 0x1, "95"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.610103228s ago: executing program 2 (id=20288): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b700009100000000", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.53597236s ago: executing program 1 (id=20289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x2) 1.139187606s ago: executing program 5 (id=20290): unshare(0x20000400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r0, 0xfffffffffffffff5, 0x1) 1.035597525s ago: executing program 5 (id=20291): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="9cf9ad258963981511d9de699a75f5d71cb604eabc48fd892b4dc3737520bd5bda32268404ab99a848bf77fb6a5725f795bbb1f2dfdf284e7f82f6668ecefa6a85a7cc434bd34e91014dabf203309be1bf6999d8f59d0dd567ecf9a87c680dd467a682cb262e4d90b57237e3cdf84c85df4749a4ef6a67dc6556b6ff4ae8f5026f865e4075efa250a02a670d48851a6cf97522e52300c7ef213ef50de6979ee12e2ecb9f5068e3e68e8d06c5ad68570a9e9e1fec5bcfedf4b7f56b0fa96f8b4cdb9f5178efb59d90367e10da96bd6b57ac82f23fd4d18692fe381bc4f2cc390a5056cccee185b77089246101c0647c3486055342dd36"], 0x1, 0x2c2, &(0x7f0000000ac0)="$eJzs3EFLG2kcx/HfGtfEiCYLy8Iu7O7D7mX3EjT7AnbDorBsYBdrpO2hMNZJGzJNZCZYUkrNpfTa1yE99lZo+wa8lF56700KhV48lE5xJtGJxhg1Mal+PyDzz/yfH/OYRPknkGxffXynXPQyRaumsYTRmNTQjpTerZq+ah7HgnpCUQ39PvXhzY9Xrl3/N5fPzy8as5Bb+iNrjJn5+fnd+09+eVmbWn468yyurfSN7ffZt1sTW99vf1q6XfJMyTOVas1YZqVarVkrjm1WS145Y8z/jm15tilVPNtt6xed6tpa3ViV1enkmmt7nrEqdVO266ZWNTW3bqxbVqliMpmMmU7qchvvYU1hc3HRyh3Z9mN93REGbrLTSdfNNTo3C5vnsCcAADBius//4ax/9PyfXw6PXeb/hKS2+f+74+d/ifl/QBptt46Z/3EhuG7OSjb/ftsx/wMAAAAAAAAAAAAAAAAAAAAA8CXY8f2U7/up3WPzVHA7LikhyW/2h7xNDEj08fcjP8c8/n8Oabvos8gH9xKS82i9sF4Ij2E/V1RJjmzNKqWPwfOhKawX/snPz5pAWi+cjWZ+Y70QU7yVb0l3yv/0zVyYN+35r5WMXj+rlL7tfP1sx/yEfvs1ks8opVc3VZWj1eB5vZ9/MGfM3//lD+Qng3UAAAAAAFwEGbPn0Ov3oB8sSOhwP8xH3h/wfX+j2/sDB15fj+uHXr6iEgAAAAAAnJlXv1e2HMd2T1HEJZ0h3v/C96XhbyOm0bg32ou/JI3ANs6rSEgKz5jTxN/txXtK+T2sGZc09LvlBMWw/zMBAAAA6Lf9of8EodcPB7gjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAun16/D6y1/lCr1egSj1wudu6/IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCPgcAAP//1fQbEg==") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000200)='./file0/file0\x00', 0x812488, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus/file0/file0\x00') 980.574005ms ago: executing program 5 (id=20292): syz_mount_image$ocfs2(&(0x7f0000000100), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@localflocks}, {@resv_level}, {@err_ro}, {@coherency_buffered}, {@heartbeat_none}, {@err_cont}, {@coherency_buffered}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@err_ro}, {@nouser_xattr}, {@localalloc={'localalloc', 0x3d, 0x3ff}}]}, 0x18, 0x448c, &(0x7f0000008980)="$eJzs281vG0UDB+DZTd63Tt+2b7763UoWSBABipyegB4obQBVQpSEDyEOjZyPtgEnjhIH9YBEEZwrIXFAnDhwacUdtaf+CxzolWMPhQMXBBeCbK8T7zqmVmU3avo8El7v7M7skF92PZNx40TlyuJafnEtX1zOl+curZ3Kf1IurS8thPgR2enr05le5CT7nXPh3OvvvH8qhKs/D/9vY2NjI1QNhm1NNL3/4/dP55q3DXGmTrXd7Vvrlg9DCKMhhFzI9qcvhPDBjyFEIYShpGw42Q6EEPaF+rEvfrgxnetSb/ru3Zy6MTV5/db9pbsD5y7m254YhfBt6egLl5d+fbrv9C/PdenyAADwr96YvvDe24WJcCcKB273b43XG+P4w8m23fh4g4688mjiBAAAgG1tzf8HozhqXa8bTbZtlgSDie3j7fxbFyZfK0wk679Ry/EXk6LfXu2rraFm132z679Dmfrbr/+2XudhNfrXuO5giOLx1H4cj4+HMHG2vn8k2huXymuV5y+V15fnu9aNx1Y6//pf/VLpJH8I7DT/4Uz7vV//H2n5baru57v3K7arpfPva3ve959HHeU/kqn3KPLn4aXz76+VPdV8Qr7+AKjm/1X/g/MfzbTfq/wPVJ/tUbWvudQToDqGqZa3G6+kfdeLrj1W0vn/p1aWenQmP8h29/9fmfwPZtrfqef/2NneXnW3SOf/31pZ+ktrW/f/UPzg+/9Qpv12+X/Ztf+D1vyr/R/z+d+RdP576oXph2ftJ9np8/9wpv0e3f/XkmXVEA5EYaTpW6e3++sfDo316tqUpnp4pQe92AXS+beu8m/N/+KOxn9HMvWT/Ju+FjzQk/lf47qN+V9jHjIW1ed/bC+d/0Db8zq9/49m6vX88z/KJTOAjc96ep1dKp3/3nrhNgPATvM/lmm/R/k/U3vNNfLf6vDfe+rlBeO/jqTzT6JKfQxcq73Wxn9Ra+5/ZvI/nmm/Kf/sPw3pktbxX7X/Y/HWe9pL57+v7XnV/H9qvu/P1Muz9/+JTL3ez/9CKBjrP7R0/vvbnle7/3MPfv6fzNTrdf7P9rJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnwHCyHQxRPJ7aj+Px8RBGkv0jYW80W5yfmS2V5z5eC2E0Kc+H4ehyqTxbLM0sLpfnF2aKpVJ5LoSDyfHRkIvWSuXKzFJx5dBmWwPRlYXiamV2oVgJIRxOyk+E/Y22ZhcrS8WV2rmNY/+Py6srV4rLM/OLqy8XCoVCOLrZh6Fo4WplYblSv3r9aAjHNusORk2dqx0+vtmXfdFH5fXV5WKpVn6iqU6pPFcsNdU5mRz7OgxFldX15bliZWGmVL7cuN5OOpNsJ89Pvzv95kTTkaj2mq9vNvMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ml05/RL34QQ+ut7cQjhTONNlPwXck3n9927OXVjavL6rftLdwfOXcw3zgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgq7dKzSMBSFAfjcq6Dgoo4+gVNINldFERcjgk/gSzgIPqWP0aFjl1JobiAkDXRp6fB9yyH5ufccuAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO0+tn+/VRNxEpLtcXET//t1fD/K7U+mn3+bMjzMjhvL23zy91U949TfKH8mvxmLfpavn7HV39Ox9895rRnoz3qTPtMza3b3Pz9X2vI+UqIm5Kfp9yrqr97gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA27M2hCYBgEMfRO8Fks7iGTmFUBPcwOp5LOI8mwWAQvvpeOjh+/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4Zl2md+yGOjOrKjP1sm/e/e47tu8+y+bosBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmx04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCgAAP//rivM8w==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) 979.567657ms ago: executing program 4 (id=20293): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB="71756965742c696f636861727365743d69736f383835392d372c63726561746f723d8761b3312c636f6465706167653d6370313235302c7569643d", @ANYRESHEX=0x0, @ANYBLOB='F\x00'], 0x5, 0x2fb, &(0x7f0000000240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) 827.637694ms ago: executing program 4 (id=20294): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) 553.715959ms ago: executing program 2 (id=20295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f21df33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 538.239443ms ago: executing program 1 (id=20296): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f00000018"], 0x20) 361.13826ms ago: executing program 2 (id=20297): r0 = syz_clone(0x82060111, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0xfffffffffffffe4f, 0x0) 279.47001ms ago: executing program 1 (id=20298): syz_open_procfs$namespace(0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) 232.020152ms ago: executing program 2 (id=20299): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000009400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1, 0xc}, {0x2, 0x7}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) 214.04505ms ago: executing program 1 (id=20300): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/140, 0x8c}], 0x1, 0x0, 0x0) 155.402675ms ago: executing program 5 (id=20301): getgroups(0x2, &(0x7f0000000400)=[0x0, 0xee01]) setresgid(r0, r1, r1) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid={'resgid', 0x3d, r1}}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") 139.886196ms ago: executing program 4 (id=20302): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7f) write$FUSE_STATX(r0, &(0x7f0000002200)={0x130, 0x0, 0x0, {0x5, 0xba92, 0x0, '\x00', {0x1000, 0xf, 0x2, 0x8, 0xee01, 0x0, 0x2000, '\x00', 0x80000000, 0x10000, 0xf, 0xde, {0x63, 0x9}, {0xcb, 0x2}, {0x5, 0x6}, {0x1000}, 0x4, 0x4, 0x80000000, 0xa}}}, 0x130) 47.522593ms ago: executing program 1 (id=20303): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0xcc6684230f858bdc) 47.144635ms ago: executing program 2 (id=20304): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="640100001000ffff2cbd7000fbdbdf2500001500", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1], 0x164}, 0x1, 0x0, 0x0, 0x1}, 0x20040804) 0s ago: executing program 5 (id=20305): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.19372" name="/newroot/387/file1/file1" dev="loop2" ino=260 res=1 errno=0 [ 1308.740881][T14137] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1308.826612][ T5879] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1308.838948][ T5879] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.856444][ T5879] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1308.938295][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1308.957251][ T5879] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1308.983367][ T5879] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1309.020358][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1309.029991][T19556] xt_hashlimit: max too large, truncated to 1048576 [ 1309.042163][ T5879] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1309.118014][ T5879] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1309.178594][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1309.206103][ T5879] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1309.247485][ T5879] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1309.289894][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1309.302109][ T5879] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1309.330323][ T5879] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1309.364447][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1309.393537][ T5879] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1309.427810][ T5879] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1309.460419][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1309.483268][ T5879] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1309.492202][ T5879] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1309.556152][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1309.601763][ T5879] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1309.611090][ T5879] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1309.631814][T19545] set_capacity_and_notify: 1 callbacks suppressed [ 1309.631832][T19545] loop9: detected capacity change from 0 to 32768 [ 1309.666193][ T5879] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1309.686040][ T5879] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1309.698777][T19545] xfs: Deprecated parameter 'noattr2' [ 1309.704201][T19545] XFS: noattr2 mount option is deprecated. [ 1309.711324][ T5879] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1309.719697][ T5879] usb 6-1: Product: syz [ 1309.744768][ T5879] usb 6-1: Manufacturer: syz [ 1309.756263][ T5879] usb 6-1: SerialNumber: syz [ 1309.779704][ T5879] usb 6-1: config 0 descriptor?? [ 1309.802274][T19545] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1309.814586][ T5879] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1309.973847][T19545] XFS (loop9): Ending clean mount [ 1309.992135][T19545] XFS (loop9): Quotacheck needed: Please wait. [ 1310.062364][ T5879] usb 6-1: USB disconnect, device number 90 [ 1310.072636][ T5879] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1310.074405][T19545] XFS (loop9): Quotacheck: Done. [ 1310.157152][T19560] loop6: detected capacity change from 0 to 32768 [ 1310.252120][T19560] read_mapping_page failed! [ 1310.264804][T19560] ERROR: (device loop6): txCommit: [ 1310.264804][T19560] [ 1310.269568][T19582] netlink: 678 bytes leftover after parsing attributes in process `syz.2.19400'. [ 1310.292127][ T2780] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1310.532887][ T5939] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1310.748895][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.763865][ T5939] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1310.787978][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.798683][T15138] Bluetooth: hci5: Frame reassembly failed (-84) [ 1310.843294][ T5939] usb 5-1: config 0 descriptor?? [ 1311.024610][T19584] loop2: detected capacity change from 0 to 32768 [ 1311.076421][T19584] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1311.241197][T19584] XFS (loop2): Ending clean mount [ 1311.255902][T19584] XFS (loop2): Quotacheck needed: Please wait. [ 1311.324014][ T5939] lg-g15 0003:046D:C222.0054: unbalanced delimiter at end of report description [ 1311.368075][ T5939] lg-g15 0003:046D:C222.0054: probe with driver lg-g15 failed with error -22 [ 1311.377342][T19584] XFS (loop2): Quotacheck: Done. [ 1311.444096][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19412'. [ 1311.577545][ T5879] usb 5-1: USB disconnect, device number 11 [ 1311.636981][T14137] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1311.663090][T19618] loop6: detected capacity change from 0 to 512 [ 1311.679275][T19618] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1311.969935][T19620] loop6: detected capacity change from 0 to 256 [ 1311.985295][T19620] exfat: Deprecated parameter 'namecase' [ 1311.992040][T19620] exfat: Deprecated parameter 'utf8' [ 1312.026855][T19620] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1312.055904][T19622] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1312.562519][T19643] loop2: detected capacity change from 0 to 1024 [ 1312.622574][T19643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1312.707570][ T29] audit: type=1800 audit(1228.510:697): pid=19643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19426" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1312.819293][T14137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1312.919261][T19655] loop6: detected capacity change from 0 to 256 [ 1312.926467][T19655] exfat: Deprecated parameter 'namecase' [ 1313.004268][T11363] Bluetooth: hci5: command 0x1003 tx timeout [ 1313.004807][T29715] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1313.072000][T19655] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1313.415008][ T355] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1313.595620][ T355] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1313.631561][ T355] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.652413][ T355] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1313.671126][ T355] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1313.699600][ T355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.724809][ T355] usb 3-1: config 0 descriptor?? [ 1314.023198][T19696] cgroup: fork rejected by pids controller in /syz6 [ 1314.183070][ T355] lenovo 0003:17EF:60EE.0055: unknown main item tag 0x0 [ 1314.216693][ T355] lenovo 0003:17EF:60EE.0055: unknown main item tag 0x0 [ 1314.225577][ T355] lenovo 0003:17EF:60EE.0055: unknown main item tag 0x0 [ 1314.234623][ T355] lenovo 0003:17EF:60EE.0055: unknown main item tag 0x0 [ 1314.247874][ T355] lenovo 0003:17EF:60EE.0055: unknown main item tag 0x0 [ 1314.265256][ T355] lenovo 0003:17EF:60EE.0055: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 1314.439626][ T5879] usb 3-1: USB disconnect, device number 50 [ 1314.774471][T19763] loop9: detected capacity change from 0 to 40427 [ 1314.819028][T19763] F2FS-fs (loop9): invalid crc value [ 1315.005932][T19763] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1315.062176][T19763] F2FS-fs (loop9): Start checkpoint disabled! [ 1315.104455][T19763] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1315.140121][T19763] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1315.230374][T15138] kworker/u8:12: attempt to access beyond end of device [ 1315.230374][T15138] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1315.265701][T15138] CPU: 0 UID: 0 PID: 15138 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 1315.265729][T15138] Tainted: [L]=SOFTLOCKUP [ 1315.265736][T15138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1315.265748][T15138] Workqueue: writeback wb_workfn (flush-7:9) [ 1315.265776][T15138] Call Trace: [ 1315.265783][T15138] [ 1315.265792][T15138] dump_stack_lvl+0xe8/0x150 [ 1315.265818][T15138] f2fs_handle_critical_error+0x37c/0x540 [ 1315.265847][T15138] f2fs_write_end_io+0xcdb/0xff0 [ 1315.265881][T15138] __submit_merged_bio+0x256/0x700 [ 1315.265910][T15138] __submit_merged_write_cond+0x3c9/0x4e0 [ 1315.265944][T15138] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1315.265988][T15138] f2fs_write_data_pages+0x2975/0x35e0 [ 1315.266045][T15138] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1315.266081][T15138] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1315.266132][T15138] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1315.266176][T15138] ? __lock_acquire+0x6b5/0x2cf0 [ 1315.266217][T15138] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1315.266238][T15138] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1315.266262][T15138] do_writepages+0x32e/0x550 [ 1315.266292][T15138] ? reacquire_held_locks+0x104/0x190 [ 1315.266314][T15138] ? writeback_sb_inodes+0x477/0x1a20 [ 1315.266340][T15138] __writeback_single_inode+0x133/0x11a0 [ 1315.266362][T15138] ? do_raw_spin_unlock+0xf5/0x210 [ 1315.266385][T15138] writeback_sb_inodes+0x992/0x1a20 [ 1315.266432][T15138] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1315.266450][T15138] ? do_raw_spin_lock+0x12b/0x2f0 [ 1315.266506][T15138] ? rcu_is_watching+0x15/0xb0 [ 1315.266537][T15138] wb_writeback+0x456/0xb70 [ 1315.266561][T15138] ? queue_io+0x2c1/0x4a0 [ 1315.266589][T15138] ? __pfx_wb_writeback+0x10/0x10 [ 1315.266606][T15138] ? do_raw_spin_lock+0x12b/0x2f0 [ 1315.266640][T15138] wb_workfn+0x414/0xf50 [ 1315.266660][T15138] ? look_up_lock_class+0x57/0x110 [ 1315.266694][T15138] ? __pfx_wb_workfn+0x10/0x10 [ 1315.266715][T15138] ? do_raw_spin_lock+0x12b/0x2f0 [ 1315.266736][T15138] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1315.266775][T15138] ? process_one_work+0x87c/0x1650 [ 1315.266795][T15138] process_one_work+0x949/0x1650 [ 1315.266836][T15138] ? __pfx_process_one_work+0x10/0x10 [ 1315.266855][T15138] ? do_raw_spin_lock+0x12b/0x2f0 [ 1315.266889][T15138] worker_thread+0xb46/0x1140 [ 1315.266918][T15138] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1315.266952][T15138] kthread+0x388/0x470 [ 1315.266970][T15138] ? __pfx_worker_thread+0x10/0x10 [ 1315.266988][T15138] ? __pfx_kthread+0x10/0x10 [ 1315.267007][T15138] ret_from_fork+0x51e/0xb90 [ 1315.267031][T15138] ? __pfx_ret_from_fork+0x10/0x10 [ 1315.267051][T15138] ? __switch_to+0xc7d/0x1450 [ 1315.267074][T15138] ? __pfx_kthread+0x10/0x10 [ 1315.267092][T15138] ret_from_fork_asm+0x1a/0x30 [ 1315.267125][T15138] [ 1315.544998][T15138] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1315.603360][ T5899] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1315.799252][T20662] sctp: [Deprecated]: syz.6.19468 (pid 20662) Use of int in max_burst socket option. [ 1315.799252][T20662] Use struct sctp_assoc_value instead [ 1315.832734][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 1315.842393][ T5899] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1315.861686][ T5899] usb 3-1: config 0 has no interface number 0 [ 1315.871410][ T5899] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1315.895972][ T5899] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1315.948706][ T5899] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1315.971791][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.979811][ T5899] usb 3-1: Product: syz [ 1315.986855][ T5899] usb 3-1: Manufacturer: syz [ 1315.991468][ T5899] usb 3-1: SerialNumber: syz [ 1315.999183][ T5899] usb 3-1: config 0 descriptor?? [ 1316.462662][ T5899] radio-si470x 3-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 1316.491493][ T5899] radio-si470x 3-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1316.679978][ T5899] radio-si470x 3-1:0.35: software version 146, hardware version 66 [ 1316.706126][ T5899] radio-si470x 3-1:0.35: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1316.906291][ T5899] radio-si470x 3-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 1316.936052][ T5899] radio-si470x 3-1:0.35: submitting int urb failed (-90) [ 1316.954191][ T5899] radio-si470x 3-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 1316.974218][ T5899] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -22 [ 1317.035252][ T5899] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1317.057010][ T5899] usb 3-1: USB disconnect, device number 51 [ 1317.159843][T20681] loop6: detected capacity change from 0 to 32768 [ 1317.204670][T20681] UFO tlock:0xffffc900029ba360 [ 1317.225963][T20681] MetaData crosses page boundary!! [ 1317.239302][T20681] lblock = 6300000010, size = -820051968 [ 1317.245071][T20681] CPU: 0 UID: 0 PID: 20681 Comm: syz.6.19475 Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.245099][T20681] Tainted: [L]=SOFTLOCKUP [ 1317.245107][T20681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1317.245117][T20681] Call Trace: [ 1317.245126][T20681] [ 1317.245134][T20681] dump_stack_lvl+0xe8/0x150 [ 1317.245165][T20681] __get_metapage+0x9ed/0xde0 [ 1317.245194][T20681] dtSearch+0x591/0x21b0 [ 1317.245249][T20681] jfs_lookup+0x1b0/0x420 [ 1317.245272][T20681] ? __pfx_jfs_lookup+0x10/0x10 [ 1317.245289][T20681] ? d_alloc_parallel+0x14c7/0x1610 [ 1317.245327][T20681] ? __lock_acquire+0x6b5/0x2cf0 [ 1317.245349][T20681] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1317.245373][T20681] ? __raw_spin_lock_init+0x45/0x100 [ 1317.245394][T20681] ? __init_waitqueue_head+0xa9/0x150 [ 1317.245417][T20681] __lookup_slow+0x2b7/0x410 [ 1317.245443][T20681] ? __pfx___lookup_slow+0x10/0x10 [ 1317.245479][T20681] ? down_read+0x272/0x2e0 [ 1317.245505][T20681] lookup_slow+0x53/0x70 [ 1317.245530][T20681] path_lookupat+0x3f5/0x8c0 [ 1317.245569][T20681] filename_lookup+0x256/0x5d0 [ 1317.245598][T20681] ? __pfx_filename_lookup+0x10/0x10 [ 1317.245647][T20681] ? strncpy_from_user+0x150/0x2b0 [ 1317.245674][T20681] ? do_getname+0x151/0x250 [ 1317.245698][T20681] user_path_at+0x40/0x160 [ 1317.245718][T20681] __se_sys_mount+0x2dc/0x420 [ 1317.245748][T20681] ? __pfx___se_sys_mount+0x10/0x10 [ 1317.245776][T20681] ? __x64_sys_mount+0x20/0xc0 [ 1317.245801][T20681] do_syscall_64+0x14d/0xf80 [ 1317.245822][T20681] ? trace_irq_disable+0x3b/0x150 [ 1317.245838][T20681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.245856][T20681] ? clear_bhb_loop+0x40/0x90 [ 1317.245877][T20681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.245894][T20681] RIP: 0033:0x7fef4b19bf79 [ 1317.245913][T20681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.245928][T20681] RSP: 002b:00007fef4c122028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1317.245948][T20681] RAX: ffffffffffffffda RBX: 00007fef4b415fa0 RCX: 00007fef4b19bf79 [ 1317.245961][T20681] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 1317.245973][T20681] RBP: 00007fef4b2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1317.245983][T20681] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000000 [ 1317.245993][T20681] R13: 00007fef4b416038 R14: 00007fef4b415fa0 R15: 00007fff008eb478 [ 1317.246023][T20681] [ 1317.246031][T20681] bread failed! [ 1317.301897][ T5939] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 1317.401808][T20681] jfs_lookup: dtSearch returned -5 [ 1317.589673][T20695] MetaData crosses page boundary!! [ 1317.599800][T20695] lblock = 6300000010, size = -820051968 [ 1317.616849][T20695] CPU: 1 UID: 0 PID: 20695 Comm: syz.6.19475 Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.616880][T20695] Tainted: [L]=SOFTLOCKUP [ 1317.616888][T20695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1317.616899][T20695] Call Trace: [ 1317.616908][T20695] [ 1317.616915][T20695] dump_stack_lvl+0xe8/0x150 [ 1317.616947][T20695] __get_metapage+0x9ed/0xde0 [ 1317.616974][T20695] dtSearch+0x591/0x21b0 [ 1317.617024][T20695] jfs_lookup+0x1b0/0x420 [ 1317.617046][T20695] ? __pfx_jfs_lookup+0x10/0x10 [ 1317.617065][T20695] ? d_alloc_parallel+0x14c7/0x1610 [ 1317.617106][T20695] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1317.617130][T20695] ? __raw_spin_lock_init+0x45/0x100 [ 1317.617152][T20695] ? __init_waitqueue_head+0xa9/0x150 [ 1317.617184][T20695] __lookup_slow+0x2b7/0x410 [ 1317.617212][T20695] ? __pfx___lookup_slow+0x10/0x10 [ 1317.617247][T20695] ? down_read+0x272/0x2e0 [ 1317.617275][T20695] lookup_slow+0x53/0x70 [ 1317.617299][T20695] path_lookupat+0x3f5/0x8c0 [ 1317.617337][T20695] filename_lookup+0x256/0x5d0 [ 1317.617366][T20695] ? __pfx_filename_lookup+0x10/0x10 [ 1317.617408][T20695] ? strncpy_from_user+0x150/0x2b0 [ 1317.617434][T20695] ? do_getname+0x151/0x250 [ 1317.617456][T20695] __se_sys_move_mount+0x2b3/0x4f0 [ 1317.617481][T20695] ? __pfx___se_sys_move_mount+0x10/0x10 [ 1317.617511][T20695] ? __x64_sys_move_mount+0x20/0xc0 [ 1317.617536][T20695] do_syscall_64+0x14d/0xf80 [ 1317.617557][T20695] ? trace_irq_disable+0x3b/0x150 [ 1317.617572][T20695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.617589][T20695] ? clear_bhb_loop+0x40/0x90 [ 1317.617611][T20695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.617629][T20695] RIP: 0033:0x7fef4b19bf79 [ 1317.617646][T20695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.617660][T20695] RSP: 002b:00007fef4c101028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 1317.617680][T20695] RAX: ffffffffffffffda RBX: 00007fef4b416090 RCX: 00007fef4b19bf79 [ 1317.617699][T20695] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffffff [ 1317.617711][T20695] RBP: 00007fef4b2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1317.617722][T20695] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 1317.617733][T20695] R13: 00007fef4b416128 R14: 00007fef4b416090 R15: 00007fff008eb478 [ 1317.617762][T20695] [ 1317.617770][T20695] bread failed! [ 1317.863260][T20695] jfs_lookup: dtSearch returned -5 [ 1317.891789][ T5939] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1317.899240][ T5939] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1317.917737][ T5939] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1317.932081][ T5939] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1317.943294][ T5939] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1317.998429][ T5939] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1318.006273][ T5939] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1318.041122][ T5939] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1318.085471][ T5939] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1318.119691][T20710] kvm: kvm [20709]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 1318.126877][ T5939] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1318.169895][ T5939] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1318.177818][ T5939] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1318.189077][T20712] input: syz0 as /devices/virtual/input/input75 [ 1318.202263][ T5939] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1318.231772][ T5939] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1318.244560][ T5939] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1318.269018][ T5939] usb 6-1: string descriptor 0 read error: -22 [ 1318.276377][ T5939] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1318.294054][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.349972][ T5939] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1318.465844][T20720] loop2: detected capacity change from 0 to 256 [ 1318.480885][T20722] pim6reg: left allmulticast mode [ 1318.512941][T20720] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7c19779b, utbl_chksum : 0xe619d30d) [ 1318.614472][ T5899] usb 6-1: USB disconnect, device number 91 [ 1318.616947][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19496'. [ 1318.650812][T20727] erspan0: entered promiscuous mode [ 1318.727281][T20729] loop2: detected capacity change from 0 to 128 [ 1318.750773][T20729] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1318.781562][T20729] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 1318.801210][T20733] loop9: detected capacity change from 0 to 7 [ 1318.838126][ T2780] Dev loop9: unable to read RDB block 7 [ 1318.846956][T20690] adutux: No device or device unplugged -19 [ 1318.858115][ T2780] loop9: unable to read partition table [ 1318.868127][ T2780] loop9: partition table beyond EOD, truncated [ 1318.870316][T14137] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1318.923879][T20733] Dev loop9: unable to read RDB block 7 [ 1318.929825][T20733] loop9: unable to read partition table [ 1318.935655][T20733] loop9: partition table beyond EOD, truncated [ 1318.966725][T20733] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1318.979516][T20734] Dev loop9: unable to read RDB block 7 [ 1318.994636][T20734] loop9: unable to read partition table [ 1319.004147][T20734] loop9: partition table beyond EOD, truncated [ 1319.011099][T20734] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1319.611977][ T5899] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1319.796460][ T5899] usb 10-1: Using ep0 maxpacket: 16 [ 1319.820980][ T5899] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.838624][T20752] loop2: detected capacity change from 0 to 32768 [ 1319.842534][ T5899] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 13 [ 1319.867534][T20752] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.19507 (20752) [ 1319.893213][ T5899] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1319.914195][ T5899] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.936169][ T5899] usb 10-1: Product: syz [ 1319.947098][T20752] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1319.947136][ T5899] usb 10-1: Manufacturer: syz [ 1319.970179][T20752] BTRFS info (device loop2): using sha256 checksum algorithm [ 1320.000430][ T5899] usb 10-1: SerialNumber: syz [ 1320.031613][T20750] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1320.070519][T20754] loop6: detected capacity change from 0 to 32768 [ 1320.147982][T20752] BTRFS info (device loop2): rebuilding free space tree [ 1320.157305][T20754] JBD2: Ignoring recovery information on journal [ 1320.175391][T20752] BTRFS info (device loop2): turning off barriers [ 1320.181965][T20752] BTRFS info (device loop2): turning on async discard [ 1320.189428][T20752] BTRFS info (device loop2): enabling free space tree [ 1320.196293][T20752] BTRFS info (device loop2): force clearing of disk cache [ 1320.203875][T20752] BTRFS info (device loop2): max_inline set to 17 [ 1320.341092][T20754] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1320.404045][T14137] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1320.823352][T18633] ocfs2: Unmounting device (7,6) on (node local) [ 1320.962957][ T5899] cdc_ncm 10-1:1.0: SET_CRC_MODE failed [ 1320.990061][ T5899] cdc_ncm 10-1:1.0: SET_NTB_FORMAT failed [ 1321.038847][ T5899] cdc_ncm 10-1:1.0: bind() failure [ 1321.059815][ T5899] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1321.078543][ T5899] cdc_ncm 10-1:1.1: bind() failure [ 1321.111917][ T5899] usb 10-1: USB disconnect, device number 31 [ 1321.464657][ T5879] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1321.648801][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 1321.662321][ T5879] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1321.677916][ T5879] usb 3-1: config 0 has no interface number 0 [ 1321.690964][ T5879] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1321.703075][ T5879] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1321.712227][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.742304][ T5879] usb 3-1: config 0 descriptor?? [ 1321.768579][ T5879] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1322.004307][ T5939] usb 3-1: USB disconnect, device number 52 [ 1322.243248][T20820] loop6: detected capacity change from 0 to 32768 [ 1322.294766][T20820] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1322.348754][T20820] XFS (loop6): Ending clean mount [ 1322.362101][T20820] XFS (loop6): Quotacheck needed: Please wait. [ 1322.492299][T20820] XFS (loop6): Quotacheck: Done. [ 1322.601561][T18633] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1322.721738][T20841] netlink: 132 bytes leftover after parsing attributes in process `syz.5.19536'. [ 1323.281882][T20865] loop6: detected capacity change from 0 to 1024 [ 1323.353249][T20865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1323.432097][T20865] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.19547: lblock 0 mapped to illegal pblock 0 (length 6) [ 1323.522271][T20865] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 1323.545405][T20865] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1323.545405][T20865] [ 1323.564068][T20862] loop9: detected capacity change from 0 to 32768 [ 1323.608968][T20872] EXT4-fs error (device loop6): ext4_ext_remove_space:2956: inode #15: comm syz.6.19547: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1323.633587][T20862] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1323.698451][T20872] EXT4-fs error (device loop6) in ext4_setattr:5983: Corrupt filesystem [ 1323.787766][T18633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1323.932705][T20862] XFS (loop9): Ending clean mount [ 1324.119338][ T2780] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1324.307539][ T29] audit: type=1800 audit(1239.226:698): pid=20904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.19559" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1324.522359][T20906] tap0: tun_chr_ioctl cmd 1074025677 [ 1324.538380][T20906] tap0: linktype set to 776 [ 1324.739378][T20920] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1325.349390][T20947] loop9: detected capacity change from 0 to 4096 [ 1325.397943][T20948] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1325.577188][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19583'. [ 1325.732791][T20959] netlink: 220 bytes leftover after parsing attributes in process `syz.4.19586'. [ 1325.885109][T19096] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1326.054325][T19096] usb 3-1: Using ep0 maxpacket: 16 [ 1326.080299][T19096] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1326.100505][T19096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.111460][T19096] usb 3-1: Product: syz [ 1326.122405][T19096] usb 3-1: Manufacturer: syz [ 1326.127147][T19096] usb 3-1: SerialNumber: syz [ 1326.395915][T19096] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1326.434518][T19096] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1326.472392][T19096] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1326.499262][T19096] usb 3-1: media controller created [ 1326.547363][T19096] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1326.611443][T20957] m920x_read = error: -19 [ 1326.682447][T19096] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1326.748587][T20991] loop9: detected capacity change from 0 to 4096 [ 1326.782161][T19096] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1326.812449][T19096] usb 3-1: USB disconnect, device number 53 [ 1326.821375][T20996] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1326.838638][ T5879] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1326.876142][T20991] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 1326.923629][T20991] Remounting filesystem read-only [ 1326.936228][T20991] NILFS error (device loop9): nilfs_readdir: bad page in #2 [ 1327.024942][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 1327.032373][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.046705][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.066613][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1327.090638][ T5879] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1327.104559][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.116136][ T5879] usb 5-1: config 0 descriptor?? [ 1327.576367][ T5879] microsoft 0003:045E:07DA.0056: ignoring exceeding usage max [ 1327.801170][ T5879] microsoft 0003:045E:07DA.0056: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1327.843470][ T5879] microsoft 0003:045E:07DA.0056: no inputs found [ 1327.855186][ T5879] microsoft 0003:045E:07DA.0056: could not initialize ff, continuing anyway [ 1327.874437][ T5879] usb 5-1: USB disconnect, device number 12 [ 1327.889334][ T5899] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1328.007847][T21033] fido_id[21033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1328.032046][T21035] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19619'. [ 1328.066981][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.091848][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.130215][ T5899] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1328.144810][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.169732][ T5899] usb 3-1: config 0 descriptor?? [ 1328.440660][T21054] netlink: 'syz.5.19628': attribute type 6 has an invalid length. [ 1328.452422][T21054] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.19628'. [ 1328.664095][ T5899] cypress 0003:04B4:DE61.0057: unknown main item tag 0x5 [ 1328.677711][ T5899] cypress 0003:04B4:DE61.0057: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.2-1/input0 [ 1328.846828][T21080] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19638'. [ 1328.885565][T19096] usb 3-1: USB disconnect, device number 54 [ 1329.178612][ T355] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1329.341196][ T355] usb 6-1: Using ep0 maxpacket: 32 [ 1329.348025][ T355] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1329.357721][ T355] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.367637][ T355] usb 6-1: config 0 descriptor?? [ 1329.532946][T21089] netlink: 108 bytes leftover after parsing attributes in process `syz.9.19641'. [ 1329.547461][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19641'. [ 1329.600107][ T355] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1329.627691][ T355] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1329.637871][T21092] loop6: detected capacity change from 0 to 512 [ 1329.639586][T21092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1329.663978][T21092] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 1329.676810][T21095] loop2: detected capacity change from 0 to 256 [ 1329.687009][T21092] System zones: 1-2, 4-12, 8-8 [ 1329.703519][T21092] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.19643: iget: bad i_size value: 38620345925642 [ 1329.706844][ T355] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1329.725221][T21092] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1329.725692][T21092] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.19643: couldn't read orphan inode 15 (err -117) [ 1329.735157][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1329.735178][ C1] EXT4-fs (loop6): initial error at time 1244: ext4_orphan_get:1391: inode 15 [ 1329.735206][ C1] EXT4-fs (loop6): last error at time 1244: ext4_orphan_get:1391: inode 15 [ 1329.845917][ T355] usb 6-1: media controller created [ 1329.850416][T21092] loop6: lost filesystem error report for type 5 error -117 [ 1329.894782][T21092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1329.905932][ T355] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1330.045230][ T355] az6027: usb out operation failed. (-71) [ 1330.066263][ T355] az6027: usb out operation failed. (-71) [ 1330.087208][ T355] stb0899_attach: Driver disabled by Kconfig [ 1330.097704][T21092] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.19643: bg 0: block 5: invalid block bitmap [ 1330.099592][ T29] audit: type=1800 audit(1244.570:699): pid=21092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.19643" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1330.114701][ T355] az6027: no front-end attached [ 1330.114701][ T355] [ 1330.196561][T21092] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 1330.214403][T21113] loop9: detected capacity change from 0 to 128 [ 1330.221274][T21092] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1330.221274][T21092] [ 1330.229642][ T355] az6027: usb out operation failed. (-71) [ 1330.236738][ T355] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1330.267194][T21113] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1330.276778][ T355] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input76 [ 1330.279452][T21092] EXT4-fs (loop6): Total free blocks count 0 [ 1330.306924][T21113] hpfs: filesystem error: improperly stopped [ 1330.313270][T21113] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1330.321920][T21092] EXT4-fs (loop6): Free/Dirty block details [ 1330.328981][T21113] hpfs: You really don't want any checks? You are crazy... [ 1330.339449][ T355] dvb-usb: schedule remote query interval to 400 msecs. [ 1330.348765][T21092] EXT4-fs (loop6): free_blocks=0 [ 1330.354633][T21092] EXT4-fs (loop6): dirty_blocks=4 [ 1330.360157][T21113] hpfs: hpfs_map_sector(): read error [ 1330.362066][ T355] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1330.367618][T21113] hpfs: code page support is disabled [ 1330.379168][T21092] EXT4-fs (loop6): Block reservation details [ 1330.385814][T21092] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 1330.403602][T21113] hpfs: hpfs_map_4sectors(): unaligned read [ 1330.409651][T21113] hpfs: hpfs_map_4sectors(): unaligned read [ 1330.443642][ T355] usb 6-1: USB disconnect, device number 92 [ 1330.463067][T21113] hpfs: filesystem error: unable to find root dir [ 1330.513337][T21113] hpfs: hpfs_map_sector(): read error [ 1330.526270][T21113] hpfs: hpfs_map_sector(): read error [ 1330.549157][T18633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.591738][ T355] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1330.720481][T21123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1330.932593][T21109] loop2: detected capacity change from 0 to 32768 [ 1330.989269][T21109] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1331.054951][T21149] xt_hashlimit: size too large, truncated to 1048576 [ 1331.100385][T21109] XFS (loop2): Ending clean mount [ 1331.148753][T21145] loop6: detected capacity change from 0 to 4096 [ 1331.156597][T21145] ntfs3: Unknown parameter 'sys_immu)' [ 1331.176957][T21109] XFS (loop2): Quotacheck needed: Please wait. [ 1331.389301][T21109] XFS (loop2): Quotacheck: Done. [ 1331.417308][ T29] audit: type=1800 audit(1245.789:700): pid=21109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19650" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 1331.578033][T14137] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1331.775933][T21171] ªªªªªª: renamed from vlan0 [ 1332.007447][T21178] loop9: detected capacity change from 0 to 8 [ 1332.280027][T21187] can0: slcan on ttyS3. [ 1332.387387][T21187] can0 (unregistered): slcan off ttyS3. [ 1333.472962][T21236] loop9: detected capacity change from 0 to 256 [ 1333.512713][T21236] exfat: Deprecated parameter 'utf8' [ 1333.565709][T21236] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1334.644082][T21247] loop6: detected capacity change from 0 to 32768 [ 1334.711381][T21247] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1334.745060][T21258] loop2: detected capacity change from 0 to 32768 [ 1334.769188][ T5939] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1334.834288][T21258] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1334.865136][T21247] XFS (loop6): Ending clean mount [ 1334.929323][T21247] XFS (loop6): Quotacheck needed: Please wait. [ 1334.946692][T21258] XFS (loop2): Ending clean mount [ 1334.997360][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 1335.059471][ T5939] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1335.096493][ T5939] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1335.102541][T21247] XFS (loop6): Quotacheck: Done. [ 1335.159485][ T29] audit: type=1800 audit(1249.241:701): pid=21247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.19702" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 1335.165795][ T5939] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1335.227786][T21261] loop9: detected capacity change from 0 to 32768 [ 1335.247776][T18633] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1335.249187][ T5939] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1335.307096][T14137] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1335.307899][ T5939] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1335.325630][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.336949][T21261] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1335.383082][T21261] XFS (loop9): Ending clean mount [ 1335.473910][ T29] audit: type=1800 audit(1249.517:702): pid=21261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.19705" name="file1" dev="loop9" ino=4422 res=0 errno=0 [ 1335.584019][ T5939] usb 6-1: GET_CAPABILITIES returned 0 [ 1335.589576][ T5939] usbtmc 6-1:16.0: can't read capabilities [ 1335.721801][ T2780] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1335.853488][ T5207] usb 6-1: USB disconnect, device number 93 [ 1336.502633][ T5939] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 1336.531413][T21302] loop6: detected capacity change from 0 to 32768 [ 1336.577562][T21302] XFS (loop6): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1336.637601][T21302] XFS (loop6): Starting recovery (logdev: internal) [ 1336.649728][T21314] loop9: detected capacity change from 0 to 32768 [ 1336.663676][T21302] XFS (loop6): Ending recovery (logdev: internal) [ 1336.674252][T21314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.19716 (21314) [ 1336.690214][ T5939] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1336.710729][ T5939] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1336.737871][T21314] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1336.754509][T21314] BTRFS info (device loop9): using crc32c checksum algorithm [ 1336.756991][ T5939] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1336.782596][T21302] XFS (loop6): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1336.796605][ T5939] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1336.811258][T21302] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 1336.823815][ T5939] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1336.825667][T21302] XFS (loop6): Unmount and run xfs_repair [ 1336.842223][T21302] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1336.852643][T21302] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 1336.862207][ T5939] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1336.869757][ T5939] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1336.870465][T21314] BTRFS info (device loop9): setting nodatasum [ 1336.888261][T21302] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 1336.888920][ T5939] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1336.898112][T21302] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 1336.918936][T21314] BTRFS info (device loop9): setting nodatacow [ 1336.926935][ T5939] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1336.938363][ T5939] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1336.944238][T21314] BTRFS info (device loop9): turning on async discard [ 1336.949717][T21302] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 1336.969863][T21314] BTRFS info (device loop9): enabling free space tree [ 1336.971126][T21302] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 1336.984973][T21314] BTRFS info (device loop9): enabling auto defrag [ 1336.987661][T21302] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1336.999336][T21314] BTRFS info (device loop9): max_inline set to 0 [ 1337.005627][T21302] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1337.018520][ T5939] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1337.026494][ T5939] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1337.044375][ T5939] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1337.056292][T21302] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1337.067873][ T5939] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1337.087676][T21302] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74 [ 1337.099112][ T5939] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1337.144650][ T5939] usb 5-1: string descriptor 0 read error: -22 [ 1337.151128][T21302] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x950 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1337.168168][ T5939] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1337.182858][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.215221][T21302] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 1337.229238][ T5939] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1337.308589][T21346] tap0: tun_chr_ioctl cmd 2148553947 [ 1337.308751][ T2780] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1337.345728][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888057b34000 (8)(tap0) start [ 1337.393348][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888057b34000 (3)(tap0) end [ 1337.411544][T18633] XFS (loop6): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1337.558418][ T5207] usb 5-1: USB disconnect, device number 13 [ 1337.857317][ T5899] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1338.030155][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 1338.047470][ T5899] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1338.076274][ T5899] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1338.100184][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.124651][ T5899] usb 3-1: Product: syz [ 1338.131506][ T5899] usb 3-1: Manufacturer: syz [ 1338.136351][ T5899] usb 3-1: SerialNumber: syz [ 1338.147854][ T5899] usb 3-1: config 0 descriptor?? [ 1338.179733][T21349] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1338.229059][ T5899] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1338.280790][T21369] loop9: detected capacity change from 0 to 2048 [ 1338.309203][T21369] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1338.386673][ T6190] udevd[6190]: incorrect nilfs2 checksum on /dev/loop9 [ 1338.407827][T21372] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1338.501672][T21349] loop2: detected capacity change from 0 to 512 [ 1338.509988][T21372] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1338.549054][T21349] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1338.557549][T21372] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1338.587041][T21349] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1338.639059][T21372] Remounting filesystem read-only [ 1338.672657][T21349] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.19724: bad orphan inode 131083 [ 1338.695203][T21369] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1338.707225][T21349] loop2: lost filesystem error report for type 5 error -117 [ 1338.710790][T21349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1338.787852][ T5207] usb 3-1: USB disconnect, device number 55 [ 1338.910328][ T2780] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer [ 1338.970673][T21367] loop6: detected capacity change from 0 to 40427 [ 1339.010531][T21367] F2FS-fs (loop6): invalid crc value [ 1339.028701][T21379] loop9: detected capacity change from 0 to 512 [ 1339.099561][T21379] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.221946][T21379] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1339.243497][T21367] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1339.278850][T21386] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1339.288306][T21367] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1339.382947][T18633] syz-executor: attempt to access beyond end of device [ 1339.382947][T18633] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1339.411080][ T2780] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.425359][T18633] CPU: 0 UID: 0 PID: 18633 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.425387][T18633] Tainted: [L]=SOFTLOCKUP [ 1339.425393][T18633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1339.425411][T18633] Call Trace: [ 1339.425418][T18633] [ 1339.425426][T18633] dump_stack_lvl+0xe8/0x150 [ 1339.425456][T18633] f2fs_handle_critical_error+0x37c/0x540 [ 1339.425484][T18633] f2fs_write_end_io+0xcdb/0xff0 [ 1339.425516][T18633] __submit_merged_bio+0x256/0x700 [ 1339.425544][T18633] __submit_merged_write_cond+0x3c9/0x4e0 [ 1339.425575][T18633] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1339.425619][T18633] f2fs_write_data_pages+0x2975/0x35e0 [ 1339.425680][T18633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1339.425718][T18633] ? do_raw_spin_lock+0x12b/0x2f0 [ 1339.425763][T18633] ? do_raw_spin_unlock+0xf5/0x210 [ 1339.425796][T18633] ? __lock_acquire+0x6b5/0x2cf0 [ 1339.425833][T18633] ? __lock_acquire+0x6b5/0x2cf0 [ 1339.425859][T18633] ? do_raw_spin_lock+0x12b/0x2f0 [ 1339.425885][T18633] ? do_raw_spin_unlock+0xf5/0x210 [ 1339.425904][T18633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1339.425928][T18633] do_writepages+0x32e/0x550 [ 1339.425962][T18633] ? do_raw_spin_unlock+0xf5/0x210 [ 1339.425992][T18633] filemap_fdatawrite+0x1e9/0x2f0 [ 1339.426018][T18633] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1339.426088][T18633] ? do_raw_spin_unlock+0xf5/0x210 [ 1339.426111][T18633] f2fs_sync_dirty_inodes+0x30e/0x860 [ 1339.426144][T18633] f2fs_write_checkpoint+0x9df/0x26a0 [ 1339.426197][T18633] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1339.426271][T18633] kill_f2fs_super+0x314/0x720 [ 1339.426294][T18633] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1339.426325][T18633] ? lockdep_hardirqs_on+0x7a/0x110 [ 1339.426362][T18633] deactivate_locked_super+0xbc/0x130 [ 1339.426388][T18633] cleanup_mnt+0x437/0x4d0 [ 1339.426406][T18633] ? _raw_spin_unlock_irq+0x23/0x50 [ 1339.426430][T18633] task_work_run+0x1d9/0x270 [ 1339.426452][T18633] ? __pfx_task_work_run+0x10/0x10 [ 1339.426482][T18633] exit_to_user_mode_loop+0xed/0x480 [ 1339.426501][T18633] ? rcu_is_watching+0x15/0xb0 [ 1339.426528][T18633] do_syscall_64+0x32d/0xf80 [ 1339.426547][T18633] ? trace_irq_disable+0x3b/0x150 [ 1339.426562][T18633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.426579][T18633] ? clear_bhb_loop+0x40/0x90 [ 1339.426600][T18633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.426616][T18633] RIP: 0033:0x7fef4b19d1d7 [ 1339.426633][T18633] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1339.426647][T18633] RSP: 002b:00007fff008ea6e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1339.426665][T18633] RAX: 0000000000000000 RBX: 00007fef4b231c3b RCX: 00007fef4b19d1d7 [ 1339.426677][T18633] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff008ea7a0 [ 1339.426687][T18633] RBP: 00007fff008ea7a0 R08: 00007fff008eb7a0 R09: 00000000ffffffff [ 1339.426699][T18633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff008eb830 [ 1339.426709][T18633] R13: 00007fef4b231c3b R14: 0000000000131ef9 R15: 00007fff008eb870 [ 1339.426740][T18633] [ 1339.426749][T18633] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1339.542369][T14137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.930662][T21414] loop2: detected capacity change from 0 to 32768 [ 1340.979213][T21414] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1341.106899][T21414] XFS (loop2): Ending clean mount [ 1341.261242][T15133] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888034d5c000 (14)(syz_tun) start [ 1341.281497][ T5899] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1341.305362][T14137] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1341.321269][T15133] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888034d5c000 (12)(syz_tun) end [ 1341.491315][ T5899] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1341.514430][ T5899] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.561331][ T5899] usb 10-1: config 0 descriptor?? [ 1341.578235][ T5899] cp210x 10-1:0.0: cp210x converter detected [ 1341.774088][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88806ae80000 (12)(netdevsim3) start [ 1341.834076][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88806ae80000 (10)(netdevsim3) end [ 1342.129143][T15133] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888036f30000 (12)(netdevsim2) start [ 1342.165893][T15133] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888036f30000 (3)(netdevsim2) end [ 1342.227617][ T5899] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1342.247801][ T5899] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 1342.269023][ T5899] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1342.285459][ T5899] usb 10-1: USB disconnect, device number 32 [ 1342.297705][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1342.306452][ T5899] cp210x 10-1:0.0: device disconnected [ 1342.337844][ T6190] udevd[6190]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 1342.438580][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888055900000 (7)(netdevsim1) start [ 1342.515774][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888055900000 (3)(netdevsim1) end [ 1342.696315][T11363] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1342.718298][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888055904000 (10)() start [ 1342.736206][T11363] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1342.754609][T11363] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1342.766374][T11363] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1342.774103][T11363] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1342.782347][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888055904000 (3)() end [ 1342.963590][ T5899] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1343.145318][ T3497] bridge_slave_1: left allmulticast mode [ 1343.160860][ T3497] bridge_slave_1: left promiscuous mode [ 1343.175938][ T5899] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1343.178024][ T3497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.218101][ T5899] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1343.257448][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1343.270548][ T3497] bridge_slave_0: left allmulticast mode [ 1343.276683][ T3497] bridge_slave_0: left promiscuous mode [ 1343.284807][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1343.291334][ T3497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.329434][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1343.362400][ T5899] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1343.373899][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1343.381967][ T5899] usb 3-1: Product: syz [ 1343.387651][ T5899] usb 3-1: Manufacturer: syz [ 1343.406753][ T5899] cdc_wdm 3-1:1.0: skipping garbage [ 1343.412561][ T5899] cdc_wdm 3-1:1.0: skipping garbage [ 1343.470529][ T5899] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1343.487521][ T5899] cdc_wdm 3-1:1.0: Unknown control protocol [ 1343.591956][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888057dce000 (15)(ip6gretap0) start [ 1343.641521][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888057dce000 (7)(ip6gretap0) end [ 1343.716033][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1343.723009][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1343.729263][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888058c86000 (4)(ip6gretap1) start [ 1343.729396][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1343.753288][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1343.760364][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1343.766999][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1343.772441][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888058c86000 (4)(ip6gretap1) end [ 1343.773548][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1343.796942][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1343.803947][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1343.810578][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1343.817596][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1343.824260][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1343.830559][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1343.837173][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1343.843491][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1343.850111][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1343.856573][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1343.863279][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1343.869567][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1343.876181][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1343.882671][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888079708000 (4)(ip6gretap2) start [ 1343.900255][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888079708000 (4)(ip6gretap2) end [ 1343.921608][ T5899] usb 3-1: USB disconnect, device number 56 [ 1343.927612][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1344.039845][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888053790000 (7)(erspan0) start [ 1344.075830][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888053790000 (7)(erspan0) end [ 1344.111915][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88807cda6000 (4)(erspan1) start [ 1344.151357][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88807cda6000 (4)(erspan1) end [ 1344.201090][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88807d1ee000 (12)(gretap0) start [ 1344.257646][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88807d1ee000 (5)(gretap0) end [ 1344.303250][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880516ce000 (4)(gretap1) start [ 1344.326936][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880516ce000 (4)(gretap1) end [ 1344.346960][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88805f1a4000 (4)(geneve2) start [ 1344.364488][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88805f1a4000 (4)(geneve2) end [ 1344.382351][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888079aaa000 (7)(geneve1) start [ 1344.402024][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888079aaa000 (5)(geneve1) end [ 1344.422245][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88807ae54000 (8)(geneve0) start [ 1344.441822][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88807ae54000 (8)(geneve0) end [ 1344.459486][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880835c4000 (3)(ipvlan2) start [ 1344.482605][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880835c4000 (3)(ipvlan2) end [ 1344.503229][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88802cddc000 (5)(bridge0) start [ 1344.520960][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88802cddc000 (5)(bridge0) end [ 1344.538477][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888051130000 (4)(bridge1) start [ 1344.564128][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.575647][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.584281][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888051130000 (4)(bridge1) end [ 1344.603204][ T3497] bond0 (unregistering): (slave bond6): Releasing backup interface [ 1344.607283][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880517b4000 (4)(bridge2) start [ 1344.629011][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880517b4000 (4)(bridge2) end [ 1344.629211][ T3497] bond0 (unregistering): Released all slaves [ 1344.646118][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880327b0000 (15)(bond0) start [ 1344.681404][ T3497] bond1 (unregistering): Released all slaves [ 1344.695810][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880327b0000 (11)(bond0) end [ 1344.723621][ T3497] bond2 (unregistering): Released all slaves [ 1344.729149][T21520] binder: 21519:21520 ioctl c0306201 200000000640 returned -22 [ 1344.737176][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888056008000 (4)(bond1) start [ 1344.758261][ T3497] bond3 (unregistering): Released all slaves [ 1344.772622][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888056008000 (4)(bond1) end [ 1344.805178][ T3497] bond4 (unregistering): Released all slaves [ 1344.832107][ T3497] bond5 (unregistering): Released all slaves [ 1344.838327][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880355b0000 (4)(bond2) start [ 1344.857873][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880355b0000 (4)(bond2) end [ 1344.897126][ T3497] bond6 (unregistering): Released all slaves [ 1344.924697][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888041258000 (4)(bond3) start [ 1344.951575][ T3497] bond7 (unregistering): Released all slaves [ 1344.954267][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888041258000 (4)(bond3) end [ 1345.006738][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888044b28000 (4)(bond4) start [ 1345.073404][T11363] Bluetooth: hci1: command tx timeout [ 1345.098034][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888044b28000 (3)(bond4) end [ 1345.115394][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88805e4e0000 (3)(bond5) start [ 1345.133301][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88805e4e0000 (3)(bond5) end [ 1345.167118][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880529e8000 (3)(bond6) start [ 1345.184772][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880529e8000 (3)(bond6) end [ 1345.202161][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880790c0000 (3)(bond7) start [ 1345.221060][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880790c0000 (3)(bond7) end [ 1345.360937][ T3497] m1Ie5nè‹Ò: left promiscuous mode [ 1345.402146][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88803588a000 (4)(m1Ie5nè‹Ò) start [ 1345.445358][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88803588a000 (3)(m1Ie5nè‹Ò) end [ 1345.549346][ T5879] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1345.556799][ T3497] : left promiscuous mode [ 1345.592004][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88805118a000 (4)() start [ 1345.679671][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88805118a000 (3)() end [ 1345.687958][T21554] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1345.756697][ T5879] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1345.787213][T21554] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 1345.796672][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.814138][ T5879] usb 10-1: Product: syz [ 1345.818598][ T5879] usb 10-1: Manufacturer: syz [ 1345.829764][ T5879] usb 10-1: SerialNumber: syz [ 1345.842402][T21561] netlink: 232 bytes leftover after parsing attributes in process `syz.2.19804'. [ 1345.855692][ T5879] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1345.877337][ T5207] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1346.019400][T21485] chnl_net:caif_netlink_parms(): no params data found [ 1346.136302][ T3497] IPVS: stopping backup sync thread 16369 ... [ 1346.354567][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888046f50000 (9)(wlan3) start [ 1346.447324][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888046f50000 (3)(wlan3) end [ 1346.570822][T21485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.583936][ T5939] usb 10-1: USB disconnect, device number 33 [ 1346.640676][T21485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.664372][T21485] bridge_slave_0: entered allmulticast mode [ 1346.693629][T21485] bridge_slave_0: entered promiscuous mode [ 1346.718104][T21485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.738731][T21485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.751943][T21485] bridge_slave_1: entered allmulticast mode [ 1346.780220][T21485] bridge_slave_1: entered promiscuous mode [ 1346.956226][T21597] netlink: 'syz.2.19814': attribute type 3 has an invalid length. [ 1346.965984][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19814'. [ 1347.112430][ T5207] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1347.119601][ T5207] ath9k_htc: Failed to initialize the device [ 1347.203545][ T5939] usb 10-1: ath9k_htc: USB layer deinitialized [ 1347.319663][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888039530000 (6)(wlan2) start [ 1347.327129][T11363] Bluetooth: hci1: command tx timeout [ 1347.379880][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888039530000 (3)(wlan2) end [ 1347.391590][T21485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.412491][T21485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.533173][T21485] team0: Port device team_slave_0 added [ 1347.578589][T21485] team0: Port device team_slave_1 added [ 1347.683044][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88803aee4000 (11)(wlan1) start [ 1347.740479][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88803aee4000 (3)(wlan1) end [ 1347.777896][T21485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.786242][T21485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1347.821586][T21485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.887185][T21485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.910937][T21485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.010489][T21485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.013748][T21630] loop2: detected capacity change from 0 to 256 [ 1348.062858][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880412dc000 (4)(wlan0) start [ 1348.113249][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880412dc000 (3)(wlan0) end [ 1348.375269][T21485] hsr_slave_0: entered promiscuous mode [ 1348.410727][T21485] hsr_slave_1: entered promiscuous mode [ 1348.451962][T21485] debugfs: 'hsr0' already exists in 'hsr' [ 1348.473695][T21485] Cannot create hsr debugfs directory [ 1348.703128][T21609] loop9: detected capacity change from 0 to 32768 [ 1348.765081][T21609] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1348.819728][T21609] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1348.852764][T21658] input: syz0 as /devices/virtual/input/input77 [ 1348.997330][T21609] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1349.005108][ T3497] hsr_slave_0: left promiscuous mode [ 1349.022878][ T3497] hsr_slave_1: left promiscuous mode [ 1349.037621][ T30] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1349.057200][ T30] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1349.121607][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888068a44000 (4)(macsec0) start [ 1349.212199][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff888068a44000 (4)(macsec0) end [ 1349.283489][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880257ac000 (4)(veth3) start [ 1349.310443][ T30] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 233ms [ 1349.320371][ T30] gfs2: fsid=syz:syz.0: jid=0: Done [ 1349.325650][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880257ac000 (4)(veth3) end [ 1349.346440][T21609] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1349.358927][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88806ccb4000 (4)(veth2) start [ 1349.438889][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88806ccb4000 (4)(veth2) end [ 1349.493035][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88807daf0000 (4)(vlan0006) start [ 1349.543394][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88807daf0000 (4)(vlan0006) end [ 1349.580479][T11363] Bluetooth: hci1: command tx timeout [ 1349.580882][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88805e948000 (4)(macvlan2) start [ 1349.614849][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88805e948000 (4)(macvlan2) end [ 1349.637614][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880587cc000 (4)(batadv1) start [ 1349.655106][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880587cc000 (4)(batadv1) end [ 1349.680334][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880340ba000 (6)(ipvlan1) start [ 1349.698136][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff8880340ba000 (6)(ipvlan1) end [ 1349.698437][ T3497] team0 (unregistering): Port device team_slave_1 removed [ 1349.725530][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (17)(team_slave_0) cookie=ffff88805895a000 (6)(ipvlan0) start [ 1349.759757][ T3497] team0 (unregistering): Port device team_slave_0 removed [ 1349.763811][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (19)(team_slave_0) cookie=ffff88805895a000 (6)(ipvlan0) end [ 1349.784579][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) start [ 1349.817631][T15138] smc: removing ib device !yz! [ 1349.825054][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (14)(!yz!) rdma_ndev=ffff88802cf04000 (12)(team_slave_0) cookie=ffff88807d844000 (5)(macvlan1) start [ 1349.847160][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (12)(!yz!) rdma_ndev=ffff88802cf04000 (12)(team_slave_0) cookie=ffff88807d844000 (5)(macvlan1) end [ 1349.883731][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (10)(!yz!) rdma_ndev=ffff88802cf04000 (12)(team_slave_0) cookie=ffff8880643d2000 (5)(macvlan0) start [ 1349.906968][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (8)(!yz!) rdma_ndev=ffff88802cf04000 (12)(team_slave_0) cookie=ffff8880643d2000 (5)(macvlan0) end [ 1349.930498][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (8)(!yz!) rdma_ndev=ffff88802cf04000 (12)(team_slave_0) cookie=ffff888042f1e000 (5)(vlan1) start [ 1349.955982][ T37] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (8)(!yz!) rdma_ndev=ffff88802cf04000 (12)(team_slave_0) cookie=ffff888042f1e000 (5)(vlan1) end [ 1349.982243][T15138] smbdirect: ib_dev[!yz!] removed [ 1350.024677][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (0)(!yz!) rdma_ndev=ffff88802cf04000 (12)(team_slave_0) cookie=ffff8880536a4000 (5)(vlan0) start [ 1350.042249][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (0)(!yz!) rdma_ndev=ffff88802cf04000 (12)(team_slave_0) cookie=ffff8880536a4000 (5)(vlan0) end [ 1350.251174][T21688] netlink: 600 bytes leftover after parsing attributes in process `syz.4.19847'. [ 1350.260497][T21688] netlink: 116 bytes leftover after parsing attributes in process `syz.4.19847'. [ 1351.612518][T21703] loop2: detected capacity change from 0 to 32768 [ 1351.687468][T21703] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt [ 1351.687468][T21703] [ 1351.763535][T21703] ERROR: (device loop2): remounting filesystem as read-only [ 1351.798424][T21703] xtLookup: xtSearch returned -5 [ 1351.828362][T21703] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt [ 1351.828362][T21703] [ 1351.839605][T11363] Bluetooth: hci1: command tx timeout [ 1351.854760][T21703] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt [ 1351.854760][T21703] [ 1351.866522][T21703] xtLookup: xtSearch returned -5 [ 1351.871487][T21703] ERROR: (device loop2): xtTruncate: xt_getpage: xtree page corrupt [ 1351.871487][T21703] [ 1352.483172][ T30] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1352.698450][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 1352.714795][ T30] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.743934][ T30] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1352.790108][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1352.796777][ T30] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1352.839807][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.912372][T15138] infiniband: Removed from hash: ib_dev=ffff888079b04000 (0)(!yz!) ndev=ffff88802cf04000 (3)(team_slave_0) [ 1352.937540][ T30] usb 3-1: config 0 descriptor?? [ 1353.515372][ T30] kye 0003:0458:5012.0058: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1353.537208][T15138] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888079b04000 (0)(!yz!) end [ 1353.572652][ T30] kye 0003:0458:5012.0058: unknown main item tag 0x0 [ 1353.587721][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.9.19868'. [ 1353.608494][ T30] kye 0003:0458:5012.0058: unknown main item tag 0x0 [ 1353.632941][ T30] kye 0003:0458:5012.0058: unknown main item tag 0x0 [ 1353.639714][ T30] kye 0003:0458:5012.0058: unknown main item tag 0x0 [ 1353.664014][ T30] kye 0003:0458:5012.0058: unknown main item tag 0x0 [ 1353.683280][ T3497] IPVS: stop unused estimator thread 0... [ 1353.698042][ T5207] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1353.707917][ T30] kye 0003:0458:5012.0058: hidraw0: USB HID v0.01 Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 1353.742269][ T30] kye 0003:0458:5012.0058: tablet-enabling feature report not found [ 1353.750332][ T30] kye 0003:0458:5012.0058: tablet enabling failed [ 1353.813932][T21485] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1353.871440][ T5207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.878216][ T30] usb 3-1: USB disconnect, device number 57 [ 1353.916514][T21485] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1353.923786][ T5207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1353.952713][T21485] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1353.961437][ T5207] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1353.972677][T21762] fido_id[21762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1353.987870][ T5207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.023528][T21485] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1354.046153][ T5207] usb 5-1: config 0 descriptor?? [ 1354.403811][T21485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.493729][T21485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.524358][ T5207] hid-led 0003:0FC5:B080.0059: unknown main item tag 0x0 [ 1354.537957][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.545175][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.632558][T32453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.639767][T32453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.970194][ T5207] hid-led 0003:0FC5:B080.0059: probe with driver hid-led failed with error -71 [ 1355.003107][ T5207] usb 5-1: USB disconnect, device number 14 [ 1355.288708][T21485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1355.485389][T21485] veth0_vlan: entered promiscuous mode [ 1355.537768][T21485] veth1_vlan: entered promiscuous mode [ 1355.682059][T21485] veth0_macvtap: entered promiscuous mode [ 1355.717734][T21485] veth1_macvtap: entered promiscuous mode [ 1355.817999][T21485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1355.878308][T21485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1355.969798][T15138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.989064][T21811] loop2: detected capacity change from 0 to 32768 [ 1356.015610][T15138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.063248][T15138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.084718][T21811] read_mapping_page failed! [ 1356.089279][T21811] ERROR: (device loop2): txCommit: [ 1356.089279][T21811] [ 1356.100046][T15138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.175220][T21834] loop9: detected capacity change from 0 to 2048 [ 1356.234141][T15133] read_mapping_page failed! [ 1356.265967][T15133] ERROR: (device loop2): txCommit: [ 1356.265967][T15133] [ 1356.302879][T21834] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1356.322825][T15133] jfs_write_inode: jfs_commit_inode failed! [ 1356.468373][T15138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.490451][T15133] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1356.513903][T15138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.545065][T15133] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1356.613819][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.623106][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.627393][T15133] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1356.627393][T15133] [ 1356.697774][T15133] EXT4-fs (loop9): Total free blocks count 0 [ 1356.714962][T15133] EXT4-fs (loop9): Free/Dirty block details [ 1356.736415][T15133] EXT4-fs (loop9): free_blocks=2415919504 [ 1356.755849][T15133] EXT4-fs (loop9): dirty_blocks=16 [ 1356.773810][T15133] EXT4-fs (loop9): Block reservation details [ 1356.790916][T15133] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 1356.819731][ T2780] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.967455][T21852] sp0: Synchronizing with TNC [ 1357.013686][T21850] [U] è [ 1357.326007][ T5939] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1357.513519][ T5939] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.548951][ T5939] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.579773][ T5939] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1357.608536][ T5939] usb 10-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 1357.628894][ T5939] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.653794][ T5939] usb 10-1: config 0 descriptor?? [ 1358.152696][ T5939] elecom 0003:056E:010C.005A: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.9-1/input0 [ 1358.373796][T21957] tipc: New replicast peer: 255.255.255.255 [ 1358.381393][ T9] usb 10-1: USB disconnect, device number 34 [ 1358.399459][T21957] tipc: Enabled bearer , priority 10 [ 1358.539829][T21963] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19902'. [ 1358.578911][T21963] netlink: 84 bytes leftover after parsing attributes in process `syz.2.19902'. [ 1358.815645][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19906'. [ 1359.623136][ T355] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1359.628908][ T5899] tipc: Node number set to 1 [ 1359.637780][T21992] cgroup: fork rejected by pids controller in /syz9 [ 1359.900165][ T355] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.923687][ T355] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1359.968665][ T355] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1359.981926][ T355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1360.001866][ T355] usb 3-1: SerialNumber: syz [ 1360.263937][ T355] usb 3-1: 0:2 : does not exist [ 1360.400920][ T355] usb 3-1: USB disconnect, device number 58 [ 1361.556665][ T3497] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1361.568169][ T3497] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.741578][T22789] loop2: detected capacity change from 0 to 1024 [ 1361.761725][ T3497] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1361.788837][ T3497] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.936494][T29715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1361.958158][T29715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1361.967514][T29715] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1361.981377][ T3497] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1361.996046][T29715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1362.005985][T29715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1362.013533][ T12] hfsplus: b-tree write err: -5, ino 25 [ 1362.028272][ T3497] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.086484][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1362.092086][ T12] hfsplus: b-tree write err: -5, ino 2 [ 1362.284467][ T3497] bond0: (slave netdevsim0): Releasing backup interface [ 1362.347323][ T3497] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1362.384374][ T3497] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.676807][T22825] loop9: detected capacity change from 0 to 512 [ 1362.754414][T22825] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1362.802392][T22825] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 1362.846705][T22825] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1362.883841][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1362.890330][ C0] EXT4-fs (loop9): initial error at time 1274: ext4_mb_generate_buddy:1315 [ 1362.899086][ C0] EXT4-fs (loop9): last error at time 1274: ext4_mb_generate_buddy:1315 [ 1362.900014][T22825] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.19945: attempt to clear invalid blocks 2 len 1 [ 1362.993410][T22825] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1362.993913][T22825] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.19945: invalid indirect mapped block 1819239214 (level 0) [ 1362.993945][T22825] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1362.994251][T22825] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.19945: invalid indirect mapped block 1819239214 (level 1) [ 1362.994279][T22825] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1363.002890][T22825] EXT4-fs (loop9): 1 truncate cleaned up [ 1363.036208][T22825] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1363.097589][T22794] chnl_net:caif_netlink_parms(): no params data found [ 1363.189003][T22825] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 1363.239092][T22825] EXT4-fs error (device loop9): __ext4_remount:6806: comm syz.9.19945: Abort forced by user [ 1363.240254][T22825] EXT4-fs (loop9): Remounting filesystem read-only [ 1363.240274][T22825] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1363.384581][ T2780] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.627760][T22859] loop9: detected capacity change from 0 to 128 [ 1363.715652][T22859] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1363.809551][T22866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19956'. [ 1363.871565][T22866] netlink: 'syz.2.19956': attribute type 6 has an invalid length. [ 1363.932162][T22866] netlink: 140 bytes leftover after parsing attributes in process `syz.2.19956'. [ 1363.958339][ T2780] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1364.219763][T22873] netlink: 68 bytes leftover after parsing attributes in process `syz.9.19957'. [ 1364.240312][T22873] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19957'. [ 1364.316966][T11363] Bluetooth: hci2: command tx timeout [ 1364.976614][T22900] loop9: detected capacity change from 0 to 32768 [ 1364.992862][T22900] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1365.015632][T22900] XFS (loop9): Ending clean mount [ 1365.080296][ T2780] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1365.282046][ T3497] bond0 (unregistering): Released all slaves [ 1365.304699][ T3497] bond1 (unregistering): Released all slaves [ 1365.325685][ T3497] bond2 (unregistering): Released all slaves [ 1365.619820][ T3497] : left promiscuous mode [ 1365.687456][T22794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.723699][T22794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.731063][T22794] bridge_slave_0: entered allmulticast mode [ 1365.754997][T22794] bridge_slave_0: entered promiscuous mode [ 1365.772605][ T3497] tipc: Left network mode [ 1365.810630][T22794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.818280][T22794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.854127][T22794] bridge_slave_1: entered allmulticast mode [ 1365.862741][T22794] bridge_slave_1: entered promiscuous mode [ 1366.040346][T22794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.069480][T22794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.080740][ T3497] IPVS: stopping backup sync thread 11586 ... [ 1366.149133][T22936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19976'. [ 1366.258181][T22794] team0: Port device team_slave_0 added [ 1366.293322][T22794] team0: Port device team_slave_1 added [ 1366.484062][T22794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.491071][T22794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.564316][T22914] loop9: detected capacity change from 0 to 32768 [ 1366.578503][T11363] Bluetooth: hci2: command tx timeout [ 1366.597033][T22794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.624389][T22794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.631361][T22794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.639848][T22914] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1366.682896][T22926] loop2: detected capacity change from 0 to 32768 [ 1366.730722][T22794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.779779][T22926] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1366.842949][T22914] XFS (loop9): Ending clean mount [ 1366.890812][T22914] XFS (loop9): Quotacheck needed: Please wait. [ 1367.087265][T22914] XFS (loop9): Quotacheck: Done. [ 1367.096689][T22926] XFS (loop2): Ending clean mount [ 1367.116837][T22794] hsr_slave_0: entered promiscuous mode [ 1367.148859][T22794] hsr_slave_1: entered promiscuous mode [ 1367.181910][T22794] debugfs: 'hsr0' already exists in 'hsr' [ 1367.211739][T22794] Cannot create hsr debugfs directory [ 1367.456813][ T2780] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1367.467084][T14137] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1368.207412][ T3497] hsr_slave_0: left promiscuous mode [ 1368.234305][ T3497] hsr_slave_1: left promiscuous mode [ 1368.318461][ T3497] macsec0: left allmulticast mode [ 1368.347700][ T3497] veth1_macvtap: left allmulticast mode [ 1368.370218][ T3497] veth1_macvtap: left promiscuous mode [ 1368.397620][ T3497] veth0_macvtap: left promiscuous mode [ 1368.824472][T11363] Bluetooth: hci2: command tx timeout [ 1369.048721][T23020] loop9: detected capacity change from 0 to 4096 [ 1369.218403][T23020] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1369.254246][T23020] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 1369.318867][T23008] loop2: detected capacity change from 0 to 32768 [ 1369.323803][T23020] ntfs3(loop9): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size_ex [ 1369.373702][T23008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.19992 (23008) [ 1369.379768][T23020] ntfs3(loop9): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size_ex [ 1369.471110][T23008] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1369.504206][T23008] BTRFS info (device loop2): using sha256 checksum algorithm [ 1369.516752][ T36] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22. [ 1369.525063][ T2780] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1369.567463][ T2780] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1369.612353][T23008] BTRFS info (device loop2): rebuilding free space tree [ 1369.614906][ T2780] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1369.696513][T23008] BTRFS info (device loop2): disabling free space tree [ 1369.706098][T23008] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1369.706617][ T36] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22. [ 1369.719591][T23008] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1369.740996][ T3497] team0 (unregistering): Port device veth0_to_bridge removed [ 1369.771509][T23008] BTRFS info (device loop2): enabling ssd optimizations [ 1369.787856][T23008] BTRFS info (device loop2): turning on async discard [ 1369.794672][T23008] BTRFS info (device loop2): force clearing of disk cache [ 1369.831478][T23008] BTRFS info (device loop2): enabling auto defrag [ 1369.837952][T23008] BTRFS info (device loop2): use zlib compression, level 3 [ 1369.946561][T23008] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4) [ 1370.040558][T14137] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1370.487192][T23074] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1370.561190][ T29] audit: type=1326 audit(1281.915:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23078 comm="syz.2.20012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e719bf79 code=0x7ffc0000 [ 1370.677207][ T29] audit: type=1326 audit(1281.933:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23078 comm="syz.2.20012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e719bf79 code=0x7ffc0000 [ 1370.763507][T23087] loop9: detected capacity change from 0 to 128 [ 1370.796240][ T29] audit: type=1326 audit(1281.942:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23078 comm="syz.2.20012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f43e719bf79 code=0x7ffc0000 [ 1370.829312][ T29] audit: type=1326 audit(1281.942:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23078 comm="syz.2.20012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e719bf79 code=0x7ffc0000 [ 1370.854052][T23087] FAT-fs (loop9): bogus number of FAT sectors [ 1370.871158][T23087] FAT-fs (loop9): Can't find a valid FAT filesystem [ 1370.895436][ T29] audit: type=1326 audit(1281.942:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23078 comm="syz.2.20012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e719bf79 code=0x7ffc0000 [ 1370.948915][ T29] audit: type=1326 audit(1281.961:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23078 comm="syz.2.20012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43e715c84e code=0x7ffc0000 [ 1370.971365][ T29] audit: type=1326 audit(1281.961:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23078 comm="syz.2.20012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43e715c84e code=0x7ffc0000 [ 1371.035519][ T29] audit: type=1326 audit(1281.961:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23078 comm="syz.2.20012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e719bf79 code=0x7ffc0000 [ 1371.078131][T11363] Bluetooth: hci2: command tx timeout [ 1371.204809][ T29] audit: type=1326 audit(1281.961:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23078 comm="syz.2.20012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e719bf79 code=0x7ffc0000 [ 1371.219847][T23094] batadv0: entered allmulticast mode [ 1371.332770][ T29] audit: type=1326 audit(1281.961:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23078 comm="syz.2.20012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f43e719bf79 code=0x7ffc0000 [ 1371.474725][ T3497] IPVS: stop unused estimator thread 0... [ 1371.679761][ T5939] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1371.880002][ T5939] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.901063][ T5939] usb 10-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1371.943390][ T5939] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.968199][T22794] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1371.976207][ T5939] usb 10-1: config 0 descriptor?? [ 1372.009077][T22794] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1372.038791][T22794] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1372.069249][T22794] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1372.362597][T22794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.426805][T22794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.432352][ T5939] dragonrise 0003:0079:0006.005B: unknown main item tag 0x0 [ 1372.443194][ T5939] dragonrise 0003:0079:0006.005B: unknown main item tag 0x0 [ 1372.452508][ T5939] dragonrise 0003:0079:0006.005B: unknown main item tag 0x0 [ 1372.459939][ T5939] dragonrise 0003:0079:0006.005B: item fetching failed at offset 3/5 [ 1372.479849][T15138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.479906][ T5939] dragonrise 0003:0079:0006.005B: parse failed [ 1372.487064][T15138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.494778][ T5939] dragonrise 0003:0079:0006.005B: probe with driver dragonrise failed with error -22 [ 1372.510878][T23124] sock: sock_set_timeout: `syz.4.20027' (pid 23124) tries to set negative timeout [ 1372.551628][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.558874][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.718063][ T5207] usb 10-1: USB disconnect, device number 35 [ 1372.735376][T23130] loop2: detected capacity change from 0 to 1024 [ 1372.750021][T23130] EXT4-fs: Ignoring removed orlov option [ 1372.790387][T23130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1372.943113][T14137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.056027][T22794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1373.244933][T23152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20036'. [ 1373.265027][T23152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20036'. [ 1373.744054][T23164] loop9: detected capacity change from 0 to 256 [ 1373.799557][T22794] veth0_vlan: entered promiscuous mode [ 1373.811647][T23164] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 1373.874612][T22794] veth1_vlan: entered promiscuous mode [ 1374.027005][T22794] veth0_macvtap: entered promiscuous mode [ 1374.060950][T22794] veth1_macvtap: entered promiscuous mode [ 1374.186267][T22794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.242111][T23180] ALSA: mixer_oss: invalid OSS volume '' [ 1374.246945][T22794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.373726][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.396715][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.441528][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.462229][T23185] bad cache= option: nonel : no [ 1374.462229][T23185] type : aead [ 1374.462229][T23185] async : no [ 1374.462229][T23185] blocksize : 16 [ 1374.462229][T23185] ivsize : 0 [ 1374.462229][T23185] maxauthsize : 20 [ 1374.462229][T23185] geniv : [ 1374.462229][T23185] [ 1374.462229][T23185] name : cts(cbc(blowfish)) [ 1374.462229][T23185] driver : cts(cryptd(cbc-blowfish-asm)) [ 1374.462229][T23185] module : kernel [ 1374.462229][T23185] priority : 350 [ 1374.462229][T23185] refcnt : 1 [ 1374.462229][T23185] selftest : passed [ 1374.462229][T23185] internal : no [ 1374.462229][T23185] type : skcipher [ 1374.462229][T23185] async : yes [ 1374.462229][T23185] blocksize : 8 [ 1374.462229][T23185] min keysize : 4 [ 1374.462229][T23185] max keysize : 56 [ 1374.462229][T23185] ivsize : 8 [ 1374.462229][T23185] chunksize : 8 [ 1374.462229][T23185] walksize : 8 [ 1374.462229][T23185] statesize : 0 [ 1374.462229][T23185] [ 1374.462229][T23185] name : rfc4309(aegis128) [ 1374.462229][T23185] driver : rfc4309(aegis128-generic) [ 1374.462229][T23185] module : kernel [ 1374.462229][T23185] priority : 100 [ 1374.462229][T23185] refcnt : 1 [ 1374.462229][T23185] selftest : passed [ 1374.462229][T23185] internal : no [ 1374.462229][T23185] type : aead [ 1374.462229][T23185] async : no [ 1374.462229][T23185] blocksize : 1 [ 1374.462229][T23185] ivsize : 8 [ 1374.462229][T23185] maxauthsize : 16 [ 1374.462229][T23185] geniv : [ 1374.462229][T23185] [ 1374.462229][T23185] name : lrw(aes) [ 1374.462229][T23185] driver : lrw(ecb-aes-aesni) [ 1374.462229][T23185] module : kernel [ 1374.462229][T23185] priority : 400 [ 1374.462229][T23185] refcnt : 1 [ 1374.462229][T23185] selftest : passed [ 1374.462229][T23185] internal : no [ 1374.462229][T23185] type : skcipher [ 1374.463307][T23185] CIFS: VFS: bad cache= option: nonel : no [ 1374.463307][T23185] type : aead [ 1374.463307][T23185] async : no [ 1374.463307][T23185] blocksize : 16 [ 1374.463307][T23185] ivsize : 0 [ 1374.463307][T23185] maxauthsize : 20 [ 1374.463307][T23185] geniv : [ 1374.463307][T23185] [ 1374.463307][T23185] name : cts(cbc(blowfish)) [ 1374.463307][T23185] driver : cts(cryptd(cbc-blowfish-asm)) [ 1374.463307][T23185] module : kernel [ 1374.463307][T23185] priority : 350 [ 1374.463307][T23185] refcnt : 1 [ 1374.463307][T23185] selftest : passed [ 1374.463307][T23185] internal : no [ 1374.463307][T23185] type : skcipher [ 1374.463307][T23185] async : yes [ 1374.463307][T23185] blocksize : 8 [ 1374.463307][T23185] min keysize : 4 [ 1374.463307][T23185] max keysize : 56 [ 1374.463307][T23185] ivsize : 8 [ 1374.463307][T23185] chunksize : 8 [ 1374.463307][T23185] walksize : 8 [ 1374.463307][T23185] statesize : 0 [ 1374.463307][T23185] [ 1374.463307][T23185] name : rfc4309(aegis128) [ 1374.463307][T23185] driver : rfc4309(aegis128-generic) [ 1374.463307][T23185] module : kernel [ 1374.463307][T23185] priority : 100 [ 1374.463307][T23185] refcnt : 1 [ 1374.463307][T23185] selftest : passed [ 1374.463307][T23185] internal : no [ 1374.463307][T23185] type : aead [ 1374.463307][T23185] async : no [ 1374.463307][T23185] blocksize : 1 [ 1374.463307][T23185] ivsize : 8 [ 1374.463307][T23185] maxauthsize : 16 [ 1374.463307][T23185] geniv : [ 1374.463307][T23185] [ 1374.463307][T23185] name : lrw(aes) [ 1374.463307][T23185] driver : lrw(ecb-aes-aesni) [ 1374.463307][T23185] module : kernel [ 1374.463307][T23185] priority : 400 [ 1374.463307][T23185] refcnt : 1 [ 1374.463307][T23185] selftest : passed [ 1374.463307][T23185] internal : no [ 1374.463307][T23185] type : skcipher [ 1374.493330][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.095200][T23197] loop2: detected capacity change from 0 to 16 [ 1375.117316][T23197] erofs (device loop2): mounted with root inode @ nid 36. [ 1375.125427][T23202] block nbd4: not configured, cannot reconfigure [ 1375.129637][T23197] erofs (device loop2): invalid fast symlink size 39 @ nid 83 [ 1375.243392][ T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.280475][ T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.300094][ T58] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.358190][ T58] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1375.419472][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.427417][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.520588][T32453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.536437][T32453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.657483][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1375.774916][T23200] loop9: detected capacity change from 0 to 32768 [ 1375.785765][T23200] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.20057 (23200) [ 1375.833282][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1375.842781][ T9] usb 2-1: config 0 has no interface number 0 [ 1375.848989][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.886388][T23200] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1375.918032][T23200] BTRFS info (device loop9): using sha256 checksum algorithm [ 1375.925601][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1375.957385][T23200] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1375.974073][ T9] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1375.998096][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1376.035482][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.073042][ T9] usb 2-1: config 0 descriptor?? [ 1376.139136][T23200] BTRFS info (device loop9): rebuilding free space tree [ 1376.242668][T23200] BTRFS info (device loop9): disabling free space tree [ 1376.286566][T23200] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1376.299807][T23200] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1376.374965][T23200] BTRFS info (device loop9): enabling ssd optimizations [ 1376.408678][T23200] BTRFS info (device loop9): turning on async discard [ 1376.415508][T23200] BTRFS info (device loop9): enabling disk space caching [ 1376.470805][T23200] BTRFS info (device loop9): force clearing of disk cache [ 1376.477970][T23200] BTRFS info (device loop9): enabling auto defrag [ 1376.513436][T23200] BTRFS info (device loop9): force zlib compression, level 3 [ 1376.520854][T23200] BTRFS info (device loop9): max_inline set to 0 [ 1376.829639][ T12] BTRFS info (device loop9): qgroup scan completed (inconsistency flag cleared) [ 1376.854869][ T9] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.005C/input/input78 [ 1376.951967][ T9] uclogic 0003:28BD:0042.005C: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 1376.998685][ T9] usb 2-1: USB disconnect, device number 48 [ 1377.217328][T23255] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20068'. [ 1377.272840][ T12] BTRFS info (device loop9): qgroup scan completed (inconsistency flag cleared) [ 1377.312294][T23253] fido_id[23253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1377.378046][ T2780] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1377.662324][T23264] ref_ctr_offset mismatch. inode: 0xe8 offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 1378.283441][T23284] loop9: detected capacity change from 0 to 1024 [ 1378.371109][T23284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1378.467927][ T2780] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.832074][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1378.872432][T23311] netlink: 452 bytes leftover after parsing attributes in process `syz.2.20090'. [ 1379.041543][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1379.051570][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.068046][ T9] usb 2-1: Product: syz [ 1379.077117][ T9] usb 2-1: Manufacturer: syz [ 1379.085899][ T9] usb 2-1: SerialNumber: syz [ 1379.086321][T23304] loop9: detected capacity change from 0 to 32768 [ 1379.105443][T23315] loop2: detected capacity change from 0 to 4096 [ 1379.127247][T23304] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1379.206661][T23324] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1379.224749][T23304] XFS (loop9): Ending clean mount [ 1379.371726][T23328] netlink: 'syz.4.20094': attribute type 3 has an invalid length. [ 1379.428100][ T2780] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1379.557075][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1379.591247][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1379.836693][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1379.879362][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1379.907922][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1379.965677][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1380.047027][ T9] usb 2-1: USB disconnect, device number 49 [ 1380.601850][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20115'. [ 1380.659284][T23376] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20115'. [ 1381.366860][T23379] loop2: detected capacity change from 0 to 32768 [ 1381.425323][T23379] (syz.2.20118,23379,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1381.467243][T23379] (syz.2.20118,23379,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1381.529748][T23379] JBD2: Ignoring recovery information on journal [ 1381.762643][T23379] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1382.174907][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1382.174924][ T29] audit: type=1800 audit(1292.631:715): pid=23379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20118" name="file1" dev="loop2" ino=16978 res=0 errno=0 [ 1382.415952][T14137] ocfs2: Unmounting device (7,2) on (node local) [ 1382.738445][T23441] netlink: 60 bytes leftover after parsing attributes in process `syz.9.20140'. [ 1382.774516][T23441] netlink: 60 bytes leftover after parsing attributes in process `syz.9.20140'. [ 1382.807609][T23441] netlink: 60 bytes leftover after parsing attributes in process `syz.9.20140'. [ 1382.851417][ T5939] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1383.038097][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 1383.051490][ T5939] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1383.096943][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.099000][T23460] bond0: entered promiscuous mode [ 1383.117810][T23460] bond_slave_0: entered promiscuous mode [ 1383.130843][T23460] bond_slave_1: entered promiscuous mode [ 1383.132415][ T5939] usb 5-1: Product: syz [ 1383.145623][T23460] batadv0: entered promiscuous mode [ 1383.153275][ T5939] usb 5-1: Manufacturer: syz [ 1383.166790][ T5939] usb 5-1: SerialNumber: syz [ 1383.173882][T23460] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1383.191022][ T5939] usb 5-1: config 0 descriptor?? [ 1383.225078][T23460] bond0: left promiscuous mode [ 1383.229942][T23460] bond_slave_0: left promiscuous mode [ 1383.243295][T23460] bond_slave_1: left promiscuous mode [ 1383.259456][T23460] batadv0: left promiscuous mode [ 1383.481805][ T5939] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1383.690537][T23487] loop2: detected capacity change from 0 to 512 [ 1383.748328][ T29] audit: type=1800 audit(1294.080:716): pid=23487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20156" name="file2" dev="loop2" ino=1049017 res=0 errno=0 [ 1383.788691][T23487] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216) [ 1383.828755][T23487] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 1383.857283][T23487] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 1384.121077][ T5939] gspca_sunplus: reg_w_riv err -71 [ 1384.126309][ T5939] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1384.193288][ T5939] usb 5-1: USB disconnect, device number 15 [ 1386.305829][T23580] loop2: detected capacity change from 0 to 32768 [ 1386.348887][T23580] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1386.449511][T23580] XFS (loop2): Ending clean mount [ 1386.476770][T23580] XFS (loop2): Quotacheck needed: Please wait. [ 1386.613502][T23580] XFS (loop2): Quotacheck: Done. [ 1386.684926][T23585] loop9: detected capacity change from 0 to 32768 [ 1386.713837][T23585] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.20193 (23585) [ 1386.803757][T23585] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1386.831362][T23585] BTRFS info (device loop9): using sha256 checksum algorithm [ 1386.876687][T14137] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1386.977463][T23585] BTRFS info (device loop9): rebuilding free space tree [ 1387.060313][T23585] BTRFS info (device loop9): turning off barriers [ 1387.120129][T23585] BTRFS info (device loop9): turning on async discard [ 1387.142134][T23585] BTRFS info (device loop9): enabling free space tree [ 1387.185147][T23585] BTRFS info (device loop9): force clearing of disk cache [ 1387.247315][T23585] BTRFS info (device loop9): max_inline set to 17 [ 1387.361856][ T2780] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1387.522839][T23616] program syz.2.20194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1387.976559][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1388.154388][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1388.166325][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.179675][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1388.198084][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1388.207742][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.228935][ T9] usb 3-1: config 0 descriptor?? [ 1388.244146][ T9] hub 3-1:0.0: USB hub found [ 1388.457290][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 1388.482850][T23625] netlink: 'syz.1.20202': attribute type 2 has an invalid length. [ 1388.850138][T23634] nbd1: detected capacity change from 0 to 127 [ 1388.875030][T29715] block nbd1: Receive control failed (result -104) [ 1388.909251][ T9] hid-generic 0003:046D:C31C.005D: item fetching failed at offset 0/1 [ 1388.982136][ T9] hid-generic 0003:046D:C31C.005D: probe with driver hid-generic failed with error -22 [ 1389.244803][ T377] usb 3-1: USB disconnect, device number 59 [ 1390.164871][T23682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20228'. [ 1390.166887][T23684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20229'. [ 1390.193567][T23684] netlink: 3 bytes leftover after parsing attributes in process `syz.4.20229'. [ 1390.299157][T23688] loop2: detected capacity change from 0 to 128 [ 1391.282931][T23735] netlink: 'syz.9.20253': attribute type 6 has an invalid length. [ 1392.162092][T23752] loop2: detected capacity change from 0 to 40427 [ 1392.178669][T23752] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(1) [ 1392.188696][T23752] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1392.205436][T23752] F2FS-fs (loop2): invalid crc value [ 1392.390497][T23752] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1392.422364][T23752] F2FS-fs (loop2): Start checkpoint disabled! [ 1392.447856][T23752] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 1392.477810][T23752] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1392.493236][T23752] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1392.577092][T23785] loop9: detected capacity change from 0 to 256 [ 1392.607802][T23785] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1393.122908][ T377] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1393.284794][ T377] usb 5-1: Using ep0 maxpacket: 32 [ 1393.299165][ T377] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1393.307832][ T377] usb 5-1: no configurations [ 1393.317228][ T377] usb 5-1: can't read configurations, error -22 [ 1393.479926][ T5207] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1393.657893][ T5207] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1393.668962][ T5207] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.677223][ T5207] usb 10-1: Product: syz [ 1393.681731][ T5207] usb 10-1: Manufacturer: syz [ 1393.689294][ T5207] usb 10-1: SerialNumber: syz [ 1393.706148][ T5207] usb 10-1: config 0 descriptor?? [ 1394.161201][ T5207] usb 10-1: Firmware version (0.0) predates our first public release. [ 1394.206171][ T5207] usb 10-1: Please update to version 0.2 or newer [ 1394.489932][ T5207] usb 10-1: USB disconnect, device number 36 [ 1394.875289][T23848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20304'. [ 1394.893884][T23846] [ 1394.896242][T23846] ===================================================== [ 1394.896502][T23848] vlan4: entered promiscuous mode [ 1394.903169][T23846] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1394.903198][T23846] syzkaller #0 Tainted: G L [ 1394.903207][T23846] ----------------------------------------------------- [ 1394.903215][T23846] syz.4.20302/23846 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1394.903233][T23846] ffff888052890a98 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1394.903278][T23846] [ 1394.903278][T23846] and this task is already holding: [ 1394.903286][T23846] ffff88804e4d7028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1394.903330][T23846] which would create a new lock dependency: [ 1394.903337][T23846] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1394.903377][T23846] [ 1394.903377][T23846] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1394.903386][T23846] (&dev->event_lock#2){..-.}-{3:3} [ 1394.903406][T23846] [ 1394.903406][T23846] ... which became SOFTIRQ-irq-safe at: [ 1394.903414][T23846] lock_acquire+0xf0/0x2e0 [ 1394.908824][T23848] bond0: entered promiscuous mode [ 1394.915877][T23846] _raw_spin_lock_irqsave+0x40/0x60 [ 1394.915903][T23846] input_inject_event+0xa5/0x340 [ 1394.915921][T23846] led_trigger_event+0x138/0x210 [ 1394.915937][T23846] kbd_bh+0x1f3/0x300 [ 1394.923799][T23848] bond_slave_0: entered promiscuous mode [ 1394.928817][T23846] tasklet_action_common+0x2da/0x4b0 [ 1394.937137][T23848] bond_slave_1: entered promiscuous mode [ 1394.945257][T23846] handle_softirqs+0x22a/0x870 [ 1394.945282][T23846] run_ksoftirqd+0x36/0x60 [ 1394.945311][T23846] smpboot_thread_fn+0x541/0xa50 [ 1395.058158][T23846] kthread+0x388/0x470 [ 1395.062315][T23846] ret_from_fork+0x51e/0xb90 [ 1395.066992][T23846] ret_from_fork_asm+0x1a/0x30 [ 1395.071832][T23846] [ 1395.071832][T23846] to a SOFTIRQ-irq-unsafe lock: [ 1395.078835][T23846] (tasklist_lock){.+.+}-{3:3} [ 1395.078858][T23846] [ 1395.078858][T23846] ... which became SOFTIRQ-irq-unsafe at: [ 1395.091454][T23846] ... [ 1395.091463][T23846] lock_acquire+0xf0/0x2e0 [ 1395.098545][T23846] _raw_read_lock+0x36/0x50 [ 1395.103120][T23846] __do_wait+0xde/0x740 [ 1395.107349][T23846] do_wait+0x1e7/0x540 [ 1395.111490][T23846] kernel_wait+0xd6/0x1c0 [ 1395.115885][T23846] call_usermodehelper_exec_work+0xbe/0x230 [ 1395.121848][T23846] process_one_work+0x949/0x1650 [ 1395.126863][T23846] worker_thread+0xb46/0x1140 [ 1395.131613][T23846] kthread+0x388/0x470 [ 1395.135751][T23846] ret_from_fork+0x51e/0xb90 [ 1395.140424][T23846] ret_from_fork_asm+0x1a/0x30 [ 1395.145251][T23846] [ 1395.145251][T23846] other info that might help us debug this: [ 1395.145251][T23846] [ 1395.155460][T23846] Chain exists of: [ 1395.155460][T23846] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1395.155460][T23846] [ 1395.169005][T23846] Possible interrupt unsafe locking scenario: [ 1395.169005][T23846] [ 1395.177304][T23846] CPU0 CPU1 [ 1395.182648][T23846] ---- ---- [ 1395.188003][T23846] lock(tasklist_lock); [ 1395.192241][T23846] local_irq_disable(); [ 1395.198984][T23846] lock(&dev->event_lock#2); [ 1395.206178][T23846] lock(&client->buffer_lock); [ 1395.213536][T23846] [ 1395.216978][T23846] lock(&dev->event_lock#2); [ 1395.221819][T23846] [ 1395.221819][T23846] *** DEADLOCK *** [ 1395.221819][T23846] [ 1395.229942][T23846] 7 locks held by syz.4.20302/23846: [ 1395.235211][T23846] #0: ffff88802c826118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1395.244333][T23846] #1: ffff88801e716230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1395.254441][T23846] #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1395.264108][T23846] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1395.273686][T23846] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1395.282812][T23846] #5: ffff88804e4d7028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1395.292977][T23846] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1395.302017][T23846] [ 1395.302017][T23846] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1395.312404][T23846] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1395.318052][T23846] IN-SOFTIRQ-W at: [ 1395.322111][T23846] lock_acquire+0xf0/0x2e0 [ 1395.328345][T23846] _raw_spin_lock_irqsave+0x40/0x60 [ 1395.335364][T23846] input_inject_event+0xa5/0x340 [ 1395.342117][T23846] led_trigger_event+0x138/0x210 [ 1395.348868][T23846] kbd_bh+0x1f3/0x300 [ 1395.354662][T23846] tasklet_action_common+0x2da/0x4b0 [ 1395.361756][T23846] handle_softirqs+0x22a/0x870 [ 1395.368327][T23846] run_ksoftirqd+0x36/0x60 [ 1395.374562][T23846] smpboot_thread_fn+0x541/0xa50 [ 1395.381329][T23846] kthread+0x388/0x470 [ 1395.387214][T23846] ret_from_fork+0x51e/0xb90 [ 1395.393618][T23846] ret_from_fork_asm+0x1a/0x30 [ 1395.400186][T23846] INITIAL USE at: [ 1395.404155][T23846] lock_acquire+0xf0/0x2e0 [ 1395.410293][T23846] _raw_spin_lock_irqsave+0x40/0x60 [ 1395.417210][T23846] input_inject_event+0xa5/0x340 [ 1395.423870][T23846] kbd_led_trigger_activate+0xbc/0x100 [ 1395.431054][T23846] led_trigger_set+0x535/0x960 [ 1395.437629][T23846] led_trigger_set_default+0x260/0x2a0 [ 1395.444824][T23846] led_classdev_register_ext+0x787/0x9c0 [ 1395.452187][T23846] input_leds_connect+0x517/0x790 [ 1395.458938][T23846] input_register_device+0xd00/0x1160 [ 1395.466047][T23846] atkbd_connect+0x731/0xa50 [ 1395.472355][T23846] serio_driver_probe+0x82/0xd0 [ 1395.478928][T23846] really_probe+0x267/0xaf0 [ 1395.485152][T23846] __driver_probe_device+0x18c/0x320 [ 1395.492158][T23846] driver_probe_device+0x4f/0x240 [ 1395.498911][T23846] __driver_attach+0x3e7/0x710 [ 1395.505401][T23846] bus_for_each_dev+0x23b/0x2c0 [ 1395.511970][T23846] serio_handle_event+0x20a/0xdd0 [ 1395.518712][T23846] process_one_work+0x949/0x1650 [ 1395.525377][T23846] worker_thread+0xb46/0x1140 [ 1395.531773][T23846] kthread+0x388/0x470 [ 1395.537569][T23846] ret_from_fork+0x51e/0xb90 [ 1395.543879][T23846] ret_from_fork_asm+0x1a/0x30 [ 1395.550361][T23846] } [ 1395.552929][T23846] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1395.562068][T23846] -> (&client->buffer_lock){....}-{3:3} { [ 1395.567790][T23846] INITIAL USE at: [ 1395.571661][T23846] lock_acquire+0xf0/0x2e0 [ 1395.577625][T23846] _raw_spin_lock+0x2e/0x40 [ 1395.583677][T23846] evdev_handle_get_val+0x70/0x9f0 [ 1395.590338][T23846] evdev_ioctl_handler+0x127b/0x1fe0 [ 1395.597172][T23846] __se_sys_ioctl+0xfc/0x170 [ 1395.603312][T23846] do_syscall_64+0x14d/0xf80 [ 1395.609460][T23846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.616905][T23846] } [ 1395.619383][T23846] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1395.627521][T23846] ... acquired at: [ 1395.631314][T23846] _raw_spin_lock+0x2e/0x40 [ 1395.635975][T23846] evdev_handle_get_val+0x70/0x9f0 [ 1395.641248][T23846] evdev_ioctl_handler+0x127b/0x1fe0 [ 1395.646686][T23846] __se_sys_ioctl+0xfc/0x170 [ 1395.651431][T23846] do_syscall_64+0x14d/0xf80 [ 1395.656182][T23846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.662242][T23846] [ 1395.664549][T23846] [ 1395.664549][T23846] the dependencies between the lock to be acquired [ 1395.664556][T23846] and SOFTIRQ-irq-unsafe lock: [ 1395.678068][T23846] -> (tasklist_lock){.+.+}-{3:3} { [ 1395.683354][T23846] HARDIRQ-ON-R at: [ 1395.687494][T23846] lock_acquire+0xf0/0x2e0 [ 1395.693899][T23846] _raw_read_lock+0x36/0x50 [ 1395.700382][T23846] __do_wait+0xde/0x740 [ 1395.706515][T23846] do_wait+0x1e7/0x540 [ 1395.712568][T23846] kernel_wait+0xd6/0x1c0 [ 1395.718881][T23846] call_usermodehelper_exec_work+0xbe/0x230 [ 1395.726755][T23846] process_one_work+0x949/0x1650 [ 1395.733676][T23846] worker_thread+0xb46/0x1140 [ 1395.740333][T23846] kthread+0x388/0x470 [ 1395.746383][T23846] ret_from_fork+0x51e/0xb90 [ 1395.752957][T23846] ret_from_fork_asm+0x1a/0x30 [ 1395.759704][T23846] SOFTIRQ-ON-R at: [ 1395.763851][T23846] lock_acquire+0xf0/0x2e0 [ 1395.770248][T23846] _raw_read_lock+0x36/0x50 [ 1395.776739][T23846] __do_wait+0xde/0x740 [ 1395.782966][T23846] do_wait+0x1e7/0x540 [ 1395.789018][T23846] kernel_wait+0xd6/0x1c0 [ 1395.795327][T23846] call_usermodehelper_exec_work+0xbe/0x230 [ 1395.803205][T23846] process_one_work+0x949/0x1650 [ 1395.810135][T23846] worker_thread+0xb46/0x1140 [ 1395.816799][T23846] kthread+0x388/0x470 [ 1395.822848][T23846] ret_from_fork+0x51e/0xb90 [ 1395.829427][T23846] ret_from_fork_asm+0x1a/0x30 [ 1395.836174][T23846] INITIAL USE at: [ 1395.840231][T23846] lock_acquire+0xf0/0x2e0 [ 1395.846545][T23846] _raw_write_lock_irq+0x3d/0x50 [ 1395.853377][T23846] copy_process+0x247a/0x3cf0 [ 1395.860039][T23846] kernel_clone+0x248/0x8e0 [ 1395.866437][T23846] user_mode_thread+0x110/0x180 [ 1395.873187][T23846] rest_init+0x23/0x300 [ 1395.879251][T23846] start_kernel+0x385/0x3d0 [ 1395.885660][T23846] x86_64_start_reservations+0x24/0x30 [ 1395.893016][T23846] x86_64_start_kernel+0x143/0x1c0 [ 1395.900022][T23846] common_startup_64+0x13e/0x147 [ 1395.906855][T23846] INITIAL READ USE at: [ 1395.911360][T23846] lock_acquire+0xf0/0x2e0 [ 1395.918104][T23846] _raw_read_lock+0x36/0x50 [ 1395.924935][T23846] __do_wait+0xde/0x740 [ 1395.931417][T23846] do_wait+0x1e7/0x540 [ 1395.937823][T23846] kernel_wait+0xd6/0x1c0 [ 1395.944487][T23846] call_usermodehelper_exec_work+0xbe/0x230 [ 1395.952709][T23846] process_one_work+0x949/0x1650 [ 1395.959976][T23846] worker_thread+0xb46/0x1140 [ 1395.966986][T23846] kthread+0x388/0x470 [ 1395.973384][T23846] ret_from_fork+0x51e/0xb90 [ 1395.980304][T23846] ret_from_fork_asm+0x1a/0x30 [ 1395.987402][T23846] } [ 1395.990062][T23846] ... key at: [] tasklist_lock+0x18/0x40 [ 1395.998025][T23846] ... acquired at: [ 1396.001983][T23846] _raw_read_lock+0x36/0x50 [ 1396.006646][T23846] send_sigio+0x101/0x370 [ 1396.011144][T23846] kill_fasync+0x24d/0x4d0 [ 1396.015715][T23846] sock_wake_async+0x137/0x160 [ 1396.020637][T23846] sock_def_readable+0x3c1/0x580 [ 1396.025738][T23846] unix_stream_sendmsg+0x8a3/0xe80 [ 1396.031004][T23846] sock_sendmsg_nosec+0x18f/0x1d0 [ 1396.036189][T23846] ____sys_sendmsg+0x589/0x8c0 [ 1396.041116][T23846] ___sys_sendmsg+0x2a5/0x360 [ 1396.045953][T23846] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1396.051048][T23846] do_syscall_64+0x14d/0xf80 [ 1396.055800][T23846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.061881][T23846] [ 1396.064199][T23846] -> (&f_owner->lock){....}-{3:3} { [ 1396.069491][T23846] INITIAL USE at: [ 1396.073464][T23846] lock_acquire+0xf0/0x2e0 [ 1396.079696][T23846] _raw_write_lock_irq+0x3d/0x50 [ 1396.086356][T23846] __f_setown+0x67/0x370 [ 1396.092320][T23846] generic_setlease+0xacf/0xff0 [ 1396.098899][T23846] do_fcntl_add_lease+0x35e/0x470 [ 1396.105651][T23846] fcntl_setlease+0x123/0x180 [ 1396.112144][T23846] do_fcntl+0x8b3/0x1a20 [ 1396.118107][T23846] __se_sys_fcntl+0xc8/0x150 [ 1396.124414][T23846] do_syscall_64+0x14d/0xf80 [ 1396.130730][T23846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.138339][T23846] INITIAL READ USE at: [ 1396.142737][T23846] lock_acquire+0xf0/0x2e0 [ 1396.149310][T23846] _raw_read_lock_irq+0x45/0x60 [ 1396.156320][T23846] do_fcntl+0x30f/0x1a20 [ 1396.162728][T23846] __se_sys_fcntl+0xc8/0x150 [ 1396.169471][T23846] do_syscall_64+0x14d/0xf80 [ 1396.176217][T23846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.184264][T23846] } [ 1396.186917][T23846] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1396.195844][T23846] ... acquired at: [ 1396.199715][T23846] _raw_read_lock_irqsave+0x48/0x60 [ 1396.205074][T23846] send_sigio+0x38/0x370 [ 1396.209479][T23846] kill_fasync+0x24d/0x4d0 [ 1396.214379][T23846] sock_wake_async+0x137/0x160 [ 1396.219323][T23846] sock_def_readable+0x3c1/0x580 [ 1396.224426][T23846] unix_stream_sendmsg+0x8a3/0xe80 [ 1396.229717][T23846] sock_sendmsg_nosec+0x18f/0x1d0 [ 1396.234901][T23846] ____sys_sendmsg+0x589/0x8c0 [ 1396.239829][T23846] ___sys_sendmsg+0x2a5/0x360 [ 1396.244666][T23846] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1396.249759][T23846] do_syscall_64+0x14d/0xf80 [ 1396.254514][T23846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.260565][T23846] [ 1396.262889][T23846] -> (&new->fa_lock){....}-{3:3} { [ 1396.268001][T23846] INITIAL USE at: [ 1396.271876][T23846] lock_acquire+0xf0/0x2e0 [ 1396.277844][T23846] _raw_write_lock_irq+0x3d/0x50 [ 1396.284334][T23846] fasync_remove_entry+0xf1/0x1c0 [ 1396.290908][T23846] __fput+0x8a5/0xa70 [ 1396.296451][T23846] task_work_run+0x1d9/0x270 [ 1396.302585][T23846] exit_to_user_mode_loop+0xed/0x480 [ 1396.309507][T23846] do_syscall_64+0x32d/0xf80 [ 1396.315650][T23846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.323088][T23846] INITIAL READ USE at: [ 1396.327399][T23846] lock_acquire+0xf0/0x2e0 [ 1396.333810][T23846] _raw_read_lock_irqsave+0x48/0x60 [ 1396.341012][T23846] kill_fasync+0x199/0x4d0 [ 1396.347520][T23846] vcs_notifier+0x14b/0x1f0 [ 1396.354004][T23846] notifier_call_chain+0x1be/0x400 [ 1396.361101][T23846] atomic_notifier_call_chain+0xda/0x180 [ 1396.368716][T23846] vcs_scr_updated+0x94/0xe0 [ 1396.375291][T23846] vcs_write+0xfc9/0x11c0 [ 1396.381604][T23846] vfs_write+0x29a/0xb90 [ 1396.387914][T23846] ksys_write+0x150/0x270 [ 1396.394228][T23846] do_syscall_64+0x14d/0xf80 [ 1396.400814][T23846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.408708][T23846] } [ 1396.411206][T23846] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1396.419876][T23846] ... acquired at: [ 1396.423662][T23846] _raw_read_lock_irqsave+0x48/0x60 [ 1396.429024][T23846] kill_fasync+0x199/0x4d0 [ 1396.433598][T23846] evdev_pass_values+0x627/0xbd0 [ 1396.438696][T23846] evdev_events+0x1e6/0x340 [ 1396.443359][T23846] input_pass_values+0x288/0x890 [ 1396.448454][T23846] input_event_dispose+0x330/0x6b0 [ 1396.453724][T23846] input_inject_event+0x1dd/0x340 [ 1396.458906][T23846] evdev_write+0x325/0x4c0 [ 1396.463478][T23846] vfs_write+0x29a/0xb90 [ 1396.467875][T23846] ksys_write+0x150/0x270 [ 1396.472362][T23846] do_syscall_64+0x14d/0xf80 [ 1396.477125][T23846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.483182][T23846] [ 1396.485487][T23846] [ 1396.485487][T23846] stack backtrace: [ 1396.491359][T23846] CPU: 1 UID: 0 PID: 23846 Comm: syz.4.20302 Tainted: G L syzkaller #0 PREEMPT(full) [ 1396.491379][T23846] Tainted: [L]=SOFTLOCKUP [ 1396.491384][T23846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1396.491392][T23846] Call Trace: [ 1396.491399][T23846] [ 1396.491405][T23846] dump_stack_lvl+0xe8/0x150 [ 1396.491426][T23846] __lock_acquire+0x2a94/0x2cf0 [ 1396.491449][T23846] lock_acquire+0xf0/0x2e0 [ 1396.491464][T23846] ? kill_fasync+0x199/0x4d0 [ 1396.491481][T23846] _raw_read_lock_irqsave+0x48/0x60 [ 1396.491496][T23846] ? kill_fasync+0x199/0x4d0 [ 1396.491509][T23846] kill_fasync+0x199/0x4d0 [ 1396.491521][T23846] ? kill_fasync+0x53/0x4d0 [ 1396.491536][T23846] evdev_pass_values+0x627/0xbd0 [ 1396.491551][T23846] ? evdev_pass_values+0x631/0xbd0 [ 1396.491566][T23846] evdev_events+0x1e6/0x340 [ 1396.491577][T23846] ? evdev_events+0x79/0x340 [ 1396.491591][T23846] ? input_pass_values+0x8d/0x890 [ 1396.491610][T23846] input_pass_values+0x288/0x890 [ 1396.491630][T23846] ? input_handle_event+0x70c/0xf30 [ 1396.491646][T23846] input_event_dispose+0x330/0x6b0 [ 1396.491662][T23846] input_inject_event+0x1dd/0x340 [ 1396.491677][T23846] ? input_inject_event+0xb6/0x340 [ 1396.491693][T23846] evdev_write+0x325/0x4c0 [ 1396.491708][T23846] ? __pfx_evdev_write+0x10/0x10 [ 1396.491720][T23846] ? bpf_lsm_file_permission+0x9/0x20 [ 1396.491735][T23846] ? security_file_permission+0x75/0x260 [ 1396.491752][T23846] ? rw_verify_area+0x255/0x4d0 [ 1396.491764][T23846] ? __pfx_evdev_write+0x10/0x10 [ 1396.491777][T23846] vfs_write+0x29a/0xb90 [ 1396.491791][T23846] ? __pfx_vfs_write+0x10/0x10 [ 1396.491804][T23846] ? __fget_files+0x2a/0x420 [ 1396.491822][T23846] ? __fget_files+0x2a/0x420 [ 1396.491837][T23846] ? __fget_files+0x3a0/0x420 [ 1396.491852][T23846] ? __fget_files+0x2a/0x420 [ 1396.491870][T23846] ksys_write+0x150/0x270 [ 1396.491883][T23846] ? __pfx_ksys_write+0x10/0x10 [ 1396.491900][T23846] do_syscall_64+0x14d/0xf80 [ 1396.491916][T23846] ? trace_irq_disable+0x3b/0x150 [ 1396.491928][T23846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.491941][T23846] ? clear_bhb_loop+0x40/0x90 [ 1396.491956][T23846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.491969][T23846] RIP: 0033:0x7fa72619bf79 [ 1396.491983][T23846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1396.491995][T23846] RSP: 002b:00007fa727053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1396.492010][T23846] RAX: ffffffffffffffda RBX: 00007fa726415fa0 RCX: 00007fa72619bf79 [ 1396.492019][T23846] RDX: 0000000000000130 RSI: 0000200000002200 RDI: 0000000000000004 [ 1396.492027][T23846] RBP: 00007fa7262327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1396.492035][T23846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1396.492043][T23846] R13: 00007fa726416038 R14: 00007fa726415fa0 R15: 00007ffc9427a9c8 [ 1396.492057][T23846]