last executing test programs: 3m33.978908841s ago: executing program 1 (id=38): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r1, r0, 0xff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m33.757693274s ago: executing program 1 (id=40): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2}, 0x40) syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[], 0x0) 3m33.624466552s ago: executing program 1 (id=42): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x2, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) 3m33.456352572s ago: executing program 1 (id=45): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x2210018, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42900, 0xc8) getdents64(r0, &(0x7f0000001f80)=""/4102, 0x1006) 3m32.551044514s ago: executing program 1 (id=54): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) 3m32.027755435s ago: executing program 1 (id=59): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001080)=ANY=[], 0x0) 3m31.59817092s ago: executing program 32 (id=59): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001080)=ANY=[], 0x0) 2m37.50203514s ago: executing program 0 (id=384): timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) timer_gettime(r0, &(0x7f0000000280)) 2m36.369283576s ago: executing program 0 (id=387): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 2m34.111977758s ago: executing program 0 (id=400): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x2, 0x1}]}]}, 0xfc}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @dev, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xf, 0x9, 0x401b}}}}}}, 0x0) 2m33.637450136s ago: executing program 0 (id=411): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x2210018, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42900, 0xc8) getdents64(r0, &(0x7f0000001f80)=""/4102, 0x1006) 2m33.209137311s ago: executing program 0 (id=406): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 2m32.71113244s ago: executing program 0 (id=412): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m32.258073936s ago: executing program 33 (id=412): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 28.047983852s ago: executing program 4 (id=1123): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x5, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) 27.664450534s ago: executing program 4 (id=1125): mknod$loop(&(0x7f0000000700)='./file0\x00', 0x80, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, r0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x54, 0x12, 0x611, 0x70bd26, 0x25dfdbfd, {0x22, 0x65, 0x3, 0x27, {0x4e22, 0x4e22, [0x7fffffff, 0x81, 0x7ff, 0x3], [0x4, 0xfdd, 0x741, 0x9], 0x0, [0x3c11, 0x4]}, 0xa, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "04400000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4044000) 27.476093475s ago: executing program 4 (id=1126): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 27.426471618s ago: executing program 4 (id=1127): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 26.818594864s ago: executing program 4 (id=1128): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r1}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) 26.241733217s ago: executing program 4 (id=1130): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xa00000000000000, 0x12) 25.85726282s ago: executing program 34 (id=1130): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xa00000000000000, 0x12) 4.469652139s ago: executing program 3 (id=1209): syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 2.758059549s ago: executing program 3 (id=1217): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000080)) 2.756505199s ago: executing program 6 (id=1218): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 2.287956106s ago: executing program 3 (id=1220): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 2.22392045s ago: executing program 3 (id=1221): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0)) 2.101210137s ago: executing program 3 (id=1223): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x100000b99) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.88098915s ago: executing program 3 (id=1224): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") rmdir(0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x14, 0x80000000b41, 0x800073, 0x4, 0x3, 0x2, 0xfff, 0x9, 0x6}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@gid}, {@gid}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@dmask={'dmask', 0x3d, 0x10000}}, {@namecase}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@dmask={'dmask', 0x3d, 0x9fd1}}, {@sys_tz}]}, 0x1, 0x1534, &(0x7f0000001f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) 1.72175976s ago: executing program 6 (id=1227): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x200004006}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x7fff800000000}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x2, 0x1, 0x10001, 0x5}) 1.559995559s ago: executing program 5 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x7}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}]}}]}, 0x40}}, 0x4000010) 1.532417261s ago: executing program 2 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r3, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r1], 0x24}}, 0x0) 1.470729564s ago: executing program 6 (id=1230): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000000000300000080"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.375057s ago: executing program 5 (id=1231): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1.357959201s ago: executing program 2 (id=1232): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f00000000c0)='&\x00', 0x40, 0x104, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) r1 = mq_open(&(0x7f0000000040)='&\x00', 0x841, 0x24, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) 1.257628957s ago: executing program 6 (id=1233): setxattr$incfs_id(0x0, 0x0, &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.132707994s ago: executing program 2 (id=1234): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x26, &(0x7f0000000900)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @ipv4=@generic={{0x5, 0x4, 0x0, 0x36, 0x14, 0x64, 0x0, 0x7, 0x1d, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xc}}}}}}}, 0x0) 1.056476699s ago: executing program 6 (id=1235): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001d00), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$TCFLSH(r1, 0x540b, 0x2) 967.416213ms ago: executing program 5 (id=1236): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 867.93746ms ago: executing program 2 (id=1237): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x10fe8, "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"}, 0x11000}) close(r0) 776.371675ms ago: executing program 5 (id=1238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf254900000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x800) 709.346048ms ago: executing program 2 (id=1239): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) 467.917293ms ago: executing program 5 (id=1240): recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000640)}, 0x2}], 0x1, 0x20, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @time={0x640, 0xffffff}, 0x3, {0x1, 0xfc}}) 460.286833ms ago: executing program 2 (id=1241): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r1, 0xb) 219.921487ms ago: executing program 5 (id=1242): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x2000004, &(0x7f0000000bc0)=ANY=[], 0x3, 0x26d, &(0x7f0000000780)="$eJzs3cFLHGcUAPC37rpqLyulUCgtXSiFnhYVereUlkqlLZWlWIp0rWsRV4QKQnNQcwrklEuOOXozBJJDbsn/EMgll5BLyDHecghO0JF1N+4mauJOcH+/y/eY994334zMjHvY2b8/X1leWF1b3N19GsPDuShM/ruXJLkYjYHIR2orAICL5EWSxPMklfVaAIDe8PwHgP7T7fn/00A6DqbDb1msDQA4H2f8/J/LxfXZe49r9clvT1CdDDXDR3NnWiYA8B7NzP758979r0em4s61iJUr69X1ajqm+e8WYykaUY+xKMXLiKQpjX+cmv5hrLxvJKK6snnYv7lezbf3j0cpRiP++OV4/3g51d4/GB+19k9EKT7pvP+Jjv3F+Oarlv5KlOLBP7EajVjY/5ekpX9jvFz+/tfp1/qHDupiO5/p3wcAAAAAAAAAAAAAAAAAAAAAgIupUm4a7fT+nkqlWz7tP/n7gY7ez3P1oL8QnxXicrZHDwAAAAAAAAAAAAAAAAAAAB+Gtf8vLdcajfp/zWD+96WP27e8Lch1SOUP5z/NPH0T7J+Yd52n2D31ZUSc91Hc3qk/3J77ayb7k9nDoPNZvZX5wubfUDMQEQfBpzcma3c3njw7XhNbLddyIb1ua410LLbeLMo9vjkBAAAAAAAAAAAAAAAAAECfOfoacLeKpLcLAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAMHP3+/6mDYnPLzkg6WTP1xXBrcZq82bbf3FYGBwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN96FQAA///OUah7") capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x3, 0x0}) 0s ago: executing program 6 (id=1243): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x2, 0x5, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x2, {{0xa, 0x4e20, 0x0, @mcast2, 0xde9a}}, {{0xa, 0x4e22, 0x200, @mcast2, 0x80000000}}}, 0x108) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @random="8c00defa00", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00048e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "050006", 0x97a, 0x3a, 0xff, @mcast1, @empty}}}}}}}, 0x0) kernel console output (not intermixed with test programs): audit(1770643860.414:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7749 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3c7a39af79 code=0x7ffc0000 [ 189.854930][ T7737] loop4: detected capacity change from 0 to 40427 [ 189.882253][ T7737] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 189.907757][ T7737] F2FS-fs (loop4): invalid crc value [ 189.921340][ T7737] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.040518][ T7737] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.289761][ T7764] f2fs_ckpt-7:4: attempt to access beyond end of device [ 190.289761][ T7764] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.318327][ T7764] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 190.715588][ T7783] loop2: detected capacity change from 0 to 512 [ 190.752438][ T7783] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.796060][ T7783] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.831396][ T7783] EXT4-fs (loop2): 1 truncate cleaned up [ 190.893478][ T7783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.352110][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.949200][ T7808] loop4: detected capacity change from 0 to 1024 [ 191.978881][ T7808] EXT4-fs: inline encryption not supported [ 192.012380][ T7808] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 192.075299][ T7808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.266970][ T7820] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 192.362359][ T6017] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.839013][ T7800] loop2: detected capacity change from 0 to 32768 [ 192.928877][ T7800] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.247097][ T7800] XFS (loop2): Ending clean mount [ 193.301370][ T7800] XFS (loop2): Quotacheck needed: Please wait. [ 193.469725][ T7800] XFS (loop2): Quotacheck: Done. [ 193.939075][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.059191][ T7867] loop3: detected capacity change from 0 to 8192 [ 194.568186][ T7881] pim6reg1: entered promiscuous mode [ 194.575807][ T7881] pim6reg1: entered allmulticast mode [ 194.579014][ T28] kauditd_printk_skb: 146 callbacks suppressed [ 194.579056][ T28] audit: type=1326 audit(1770643865.724:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb214d9af79 code=0x7ffc0000 [ 194.655530][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.663798][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.672065][ T28] audit: type=1326 audit(1770643865.774:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb214d9af79 code=0x7ffc0000 [ 194.709926][ T28] audit: type=1326 audit(1770643865.774:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb214d9af79 code=0x7ffc0000 [ 194.756050][ T28] audit: type=1326 audit(1770643865.784:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb214d9af79 code=0x7ffc0000 [ 194.802647][ T7887] netlink: 'syz.5.598': attribute type 10 has an invalid length. [ 194.806760][ T28] audit: type=1326 audit(1770643865.784:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb214d9af79 code=0x7ffc0000 [ 194.881833][ T7887] bond0: (slave bond_slave_0): Releasing backup interface [ 194.912347][ T28] audit: type=1326 audit(1770643865.784:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb214d9af79 code=0x7ffc0000 [ 194.999845][ T28] audit: type=1326 audit(1770643865.784:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb214d9af79 code=0x7ffc0000 [ 195.052476][ T28] audit: type=1326 audit(1770643865.784:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb214d9af79 code=0x7ffc0000 [ 195.087877][ T28] audit: type=1326 audit(1770643865.784:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb214d9af79 code=0x7ffc0000 [ 195.115418][ T28] audit: type=1326 audit(1770643865.784:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb214d9af79 code=0x7ffc0000 [ 196.376158][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 196.545301][ T7910] loop3: detected capacity change from 0 to 32768 [ 196.578287][ T7910] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.606 (7910) [ 196.601314][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 196.629374][ T23] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.667184][ T23] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.695740][ T23] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 196.713026][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.787363][ T7910] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 196.827610][ T7910] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 196.855405][ T7910] BTRFS info (device loop3): using free space tree [ 196.882583][ T7910] workqueue: max_active 262152 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 196.953817][ T7910] workqueue: max_active 262152 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 197.095504][ T7910] workqueue: max_active 262152 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 197.156792][ T7910] workqueue: max_active 262152 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 197.202923][ T7910] workqueue: max_active 262152 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 197.219080][ T23] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 197.305854][ T7910] workqueue: max_active 262152 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 197.319652][ T7910] workqueue: max_active 262152 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 197.465683][ T7910] BTRFS info (device loop3): enabling ssd optimizations [ 197.506046][ T7910] BTRFS info (device loop3): auto enabling async discard [ 197.518917][ T7967] loop4: detected capacity change from 0 to 1024 [ 197.547259][ T7967] EXT4-fs: Ignoring removed nobh option [ 197.548304][ T23] usb 3-1: USB disconnect, device number 11 [ 197.573927][ T7967] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.635294][ T7967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.788900][ T6017] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.495375][ T5770] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 198.688293][ T7991] loop4: detected capacity change from 0 to 8192 [ 198.695860][ T7998] 9pnet: p9_errstr2errno: server reported unknown error @cƒF S+¼ÿÿÿÿ [ 198.830649][ T7991] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 198.887066][ T7991] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 198.906106][ T7991] REISERFS (device loop4): using ordered data mode [ 198.912709][ T7991] reiserfs: using flush barriers [ 198.966690][ T7991] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.043642][ T5883] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5883) [ 199.080069][ T7991] REISERFS (device loop4): checking transaction log (loop4) [ 199.100304][ T7991] REISERFS (device loop4): Using r5 hash to sort names [ 199.176045][ T7991] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 199.282750][ T8011] sctp: [Deprecated]: syz.5.631 (pid 8011) Use of int in max_burst socket option deprecated. [ 199.282750][ T8011] Use struct sctp_assoc_value instead [ 199.368548][ T7991] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ" [ 200.776950][ T8046] loop4: detected capacity change from 0 to 256 [ 202.163938][ T8091] bond0: entered promiscuous mode [ 202.189825][ T8091] bond_slave_0: entered promiscuous mode [ 202.216300][ T8091] bond_slave_1: entered promiscuous mode [ 202.272162][ T8089] loop5: detected capacity change from 0 to 4096 [ 202.362918][ T8089] ntfs: volume version 3.1. [ 202.576722][ T28] kauditd_printk_skb: 338 callbacks suppressed [ 202.576741][ T28] audit: type=1804 audit(1770643873.724:568): pid=8089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.645" name="/newroot/56/file0/file1" dev="loop5" ino=67 res=1 errno=0 [ 202.604509][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.319449][ T8098] loop3: detected capacity change from 0 to 32768 [ 204.882698][ T8140] loop3: detected capacity change from 0 to 512 [ 205.465089][ T8133] loop4: detected capacity change from 0 to 32768 [ 205.475804][ T8133] XFS: attr2 mount option is deprecated. [ 205.530502][ T968] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 205.573069][ T8133] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 205.694077][ T8133] XFS (loop4): Ending clean mount [ 205.720976][ T8133] XFS (loop4): Quotacheck needed: Please wait. [ 205.757240][ T968] usb 4-1: config 0 has no interfaces? [ 205.780996][ T968] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 205.825415][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.856784][ T968] usb 4-1: config 0 descriptor?? [ 205.876612][ T8133] XFS (loop4): Quotacheck: Done. [ 206.100915][ T6017] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 206.375482][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.390580][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.403852][ T5821] usb 4-1: USB disconnect, device number 9 [ 206.912644][ T8157] loop2: detected capacity change from 0 to 32768 [ 207.029965][ T8157] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.177173][ T8169] loop3: detected capacity change from 0 to 1024 [ 207.280151][ T8169] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.413984][ T8157] XFS (loop2): Ending clean mount [ 207.420875][ T8169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.686573][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.725734][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.044655][ T8171] loop5: detected capacity change from 0 to 32768 [ 208.095647][ T8171] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 208.186002][ T23] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 208.332164][ T5883] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 208.426644][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 208.458239][ T23] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 208.489271][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.524545][ T23] usb 4-1: config 0 descriptor?? [ 208.553398][ T8178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 209.039836][ T23] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 209.265471][ T8178] elan 0003:04F3:0755.000A: pid 8178 passed too short report [ 209.286407][ T23] usb 4-1: USB disconnect, device number 10 [ 209.922327][ T8217] loop4: detected capacity change from 0 to 128 [ 209.973385][ T8217] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 210.102009][ T8217] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.126447][ T8217] ext2 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 210.317607][ T8217] EXT4-fs error (device loop4): ext4_check_dx_root:2266: inode #2: comm syz.4.687: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 210.430631][ T8232] syzkaller1: entered promiscuous mode [ 210.451452][ T8232] syzkaller1: entered allmulticast mode [ 210.516593][ T6017] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.944595][ T8252] loop3: detected capacity change from 0 to 32768 [ 211.963080][ T8252] XFS: attr2 mount option is deprecated. [ 211.985992][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 212.002477][ T8252] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.088275][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.110724][ T8252] XFS (loop3): Ending clean mount [ 212.125351][ T8256] loop5: detected capacity change from 0 to 32768 [ 212.144752][ T8252] XFS (loop3): Quotacheck needed: Please wait. [ 212.172756][ T8256] XFS: noikeep mount option is deprecated. [ 212.179017][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 212.207588][ T8256] XFS: ikeep mount option is deprecated. [ 212.221417][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.250656][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.290000][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 212.290852][ T8252] XFS (loop3): Quotacheck: Done. [ 212.309660][ T8256] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 212.355759][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.357117][ T8256] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.387345][ T23] usb 3-1: config 0 descriptor?? [ 212.559651][ T8256] XFS (loop5): Ending clean mount [ 212.597456][ T8256] XFS (loop5): Quotacheck needed: Please wait. [ 212.607371][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.752518][ T8256] XFS (loop5): Quotacheck: Done. [ 212.868671][ T23] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 212.955492][ T8256] XFS (loop5): User initiated shutdown received. [ 212.976897][ T8256] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 213.023430][ T8256] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 213.187164][ T7211] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.229182][ T5898] usb 3-1: USB disconnect, device number 12 [ 213.317482][ T8287] loop8: detected capacity change from 0 to 7 [ 213.342481][ T8287] Dev loop8: unable to read RDB block 7 [ 213.350607][ T8287] loop8: unable to read partition table [ 213.371329][ T8287] loop8: partition table beyond EOD, truncated [ 213.411836][ T8287] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 213.857805][ T8291] loop5: detected capacity change from 0 to 8192 [ 213.884060][ T8291] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 213.898368][ T8291] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 213.909355][ T8291] REISERFS (device loop5): using ordered data mode [ 213.916207][ T8291] reiserfs: using flush barriers [ 213.946357][ T8291] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.970496][ T8291] REISERFS (device loop5): checking transaction log (loop5) [ 214.247927][ T8291] REISERFS (device loop5): Using tea hash to sort names [ 214.265663][ T8291] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 214.369170][ T8291] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 214.595675][ T8289] loop4: detected capacity change from 0 to 32768 [ 214.647185][ T8289] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 214.880834][ T5781] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 214.970675][ T8315] loop5: detected capacity change from 0 to 512 [ 215.035050][ T8315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.093707][ T8315] EXT4-fs: Ignoring removed bh option [ 215.232374][ T8315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.247148][ T8315] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.383070][ T8330] loop4: detected capacity change from 0 to 128 [ 215.394351][ T8330] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 215.409761][ T8330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.591889][ T7211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.848730][ T8341] loop5: detected capacity change from 0 to 64 [ 216.145062][ T8347] loop3: detected capacity change from 0 to 1024 [ 217.206143][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 217.357617][ T8353] loop2: detected capacity change from 0 to 32768 [ 217.406743][ T8353] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.424663][ T8357] loop4: detected capacity change from 0 to 32768 [ 217.487962][ T8357] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 217.656089][ T8353] XFS (loop2): Ending clean mount [ 217.677185][ T8357] XFS (loop4): Ending clean mount [ 217.735163][ T8353] XFS (loop2): Quotacheck needed: Please wait. [ 217.737489][ T8357] XFS (loop4): Quotacheck needed: Please wait. [ 217.846744][ T8353] XFS (loop2): Quotacheck: Done. [ 217.858735][ T8387] netlink: 'syz.3.741': attribute type 11 has an invalid length. [ 217.886505][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 217.960252][ T8357] XFS (loop4): Quotacheck: Done. [ 218.182775][ T6017] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.186939][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 218.641805][ T8398] loop3: detected capacity change from 0 to 2048 [ 218.715040][ T8398] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 218.735147][ T8398] NILFS (loop3): mounting unchecked fs [ 218.778461][ T8398] NILFS (loop3): recovery complete [ 218.800204][ T8401] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.259587][ T28] audit: type=1326 audit(1770643890.404:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3a99af79 code=0x7ffc0000 [ 219.292804][ T5821] IPVS: starting estimator thread 0... [ 219.298043][ T8412] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 219.338382][ T28] audit: type=1326 audit(1770643890.404:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3a99af79 code=0x7ffc0000 [ 219.396415][ T28] audit: type=1326 audit(1770643890.404:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3a99af79 code=0x7ffc0000 [ 219.398428][ T8411] IPVS: using max 16 ests per chain, 38400 per kthread [ 219.486648][ T28] audit: type=1326 audit(1770643890.404:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a3a99af79 code=0x7ffc0000 [ 219.554950][ T28] audit: type=1326 audit(1770643890.404:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3a99af79 code=0x7ffc0000 [ 219.636290][ T28] audit: type=1326 audit(1770643890.414:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3a99af79 code=0x7ffc0000 [ 219.716756][ T28] audit: type=1326 audit(1770643890.414:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3a99af79 code=0x7ffc0000 [ 219.795940][ T28] audit: type=1326 audit(1770643890.414:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3a99af79 code=0x7ffc0000 [ 219.876196][ T28] audit: type=1326 audit(1770643890.414:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a3a99af79 code=0x7ffc0000 [ 220.004877][ T28] audit: type=1326 audit(1770643890.414:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.5.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3a99af79 code=0x7ffc0000 [ 220.413338][ T8433] loop5: detected capacity change from 0 to 512 [ 220.429297][ T8433] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 220.451954][ T8433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 220.467403][ T8433] System zones: 1-12 [ 220.472871][ T8433] EXT4-fs (loop5): 1 truncate cleaned up [ 220.487157][ T8433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.710336][ T7211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.776207][ T8440] loop3: detected capacity change from 0 to 1024 [ 220.924220][ T8443] hfsplus: request for non-existent node 33554434 in B*Tree [ 220.934910][ T8443] hfsplus: request for non-existent node 33554434 in B*Tree [ 220.945298][ T8443] hfsplus: request for non-existent node 33554434 in B*Tree [ 220.953116][ T8443] hfsplus: request for non-existent node 33554434 in B*Tree [ 220.995503][ T8426] loop2: detected capacity change from 0 to 32768 [ 221.003988][ T8426] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.756 (8426) [ 221.054377][ T8426] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 221.096036][ T8426] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 221.104794][ T8426] BTRFS info (device loop2): enabling ssd optimizations [ 221.145567][ T8426] BTRFS info (device loop2): not using ssd optimizations [ 221.158992][ T12] hfsplus: request for non-existent node 33554434 in B*Tree [ 221.176970][ T8426] BTRFS info (device loop2): turning off barriers [ 221.183535][ T8426] BTRFS info (device loop2): using free space tree [ 221.192210][ T12] hfsplus: request for non-existent node 33554434 in B*Tree [ 221.378774][ T8461] netlink: 60 bytes leftover after parsing attributes in process `syz.5.765'. [ 221.595643][ T8426] BTRFS warning (device loop2): this kernel does not support the compat:1 feature bit [ 221.716450][ T5771] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 221.921853][ T8478] loop5: detected capacity change from 0 to 4096 [ 222.027064][ T8482] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.396680][ T8486] loop3: detected capacity change from 0 to 64 [ 223.103080][ T8504] netlink: 'syz.3.779': attribute type 39 has an invalid length. [ 223.286125][ T5821] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 223.479671][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 223.491465][ T5821] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 223.505520][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.519639][ T5821] usb 6-1: config 0 descriptor?? [ 223.737283][ T8519] loop4: detected capacity change from 0 to 512 [ 223.760316][ T8519] EXT4-fs: Ignoring removed nobh option [ 223.771705][ T8519] EXT4-fs error (device loop4): __ext4_iget:5071: inode #11: block 1: comm syz.4.785: invalid block [ 223.785587][ T5821] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 223.796905][ T8519] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.785: couldn't read orphan inode 11 (err -117) [ 223.800088][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.819105][ T5821] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 223.827079][ T5821] usb 6-1: media controller created [ 223.842359][ T8523] loop2: detected capacity change from 0 to 128 [ 223.867994][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.876254][ T8523] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 223.906581][ T8519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.968344][ T5821] DVB: Unable to find symbol dib7000p_attach() [ 223.976806][ T8523] hpfs: filesystem error: improperly stopped [ 223.982901][ T8523] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 223.983973][ T5821] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 224.040866][ T8523] hpfs: You really don't want any checks? You are crazy... [ 224.070306][ T8523] hpfs: hpfs_map_sector(): read error [ 224.075778][ T8523] hpfs: code page support is disabled [ 224.141474][ T8523] hpfs: hpfs_map_4sectors(): unaligned read [ 224.148864][ T8523] hpfs: hpfs_map_4sectors(): unaligned read [ 224.165080][ T8523] hpfs: filesystem error: unable to find root dir [ 224.186034][ T5821] rc_core: IR keymap rc-dib0700-rc5 not found [ 224.198355][ T5821] Registered IR keymap rc-empty [ 224.204534][ T5821] dvb-usb: could not initialize remote control. [ 224.212521][ T5821] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 224.241192][ T6017] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.304706][ T5821] usb 6-1: USB disconnect, device number 2 [ 224.422573][ T5821] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 224.540488][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 225.481878][ T8558] syzkaller1: entered promiscuous mode [ 225.491074][ T8558] syzkaller1: entered allmulticast mode [ 225.930858][ T8560] loop4: detected capacity change from 0 to 32768 [ 225.943089][ T8560] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.799 (8560) [ 225.976404][ T8560] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 225.987817][ T8560] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 226.003151][ T8560] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 226.019605][ T8560] BTRFS info (device loop4): use lzo compression, level 0 [ 226.027443][ T8560] BTRFS info (device loop4): using free space tree [ 226.078668][ T8560] BTRFS info (device loop4): enabling ssd optimizations [ 226.086538][ T8560] BTRFS info (device loop4): auto enabling async discard [ 226.323254][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.353259][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.366292][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.386356][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.394693][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.436023][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.443515][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.466503][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.473985][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.495981][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.503551][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.537119][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.544697][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.560279][ T5862] hid-generic 00A0:0006:0003.000C: unknown main item tag 0x0 [ 226.569118][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 226.576895][ T5083] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 226.596903][ T5862] hid-generic 00A0:0006:0003.000C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 226.607348][ T5821] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 226.692627][ T6017] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 226.849920][ T5821] usb 4-1: config 0 has an invalid interface number: 212 but max is 0 [ 226.876113][ T5821] usb 4-1: config 0 has no interface number 0 [ 226.910290][ T5821] usb 4-1: config 0 interface 212 has no altsetting 0 [ 226.933435][ T5821] usb 4-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 226.959466][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.006440][ T5821] usb 4-1: Product: syz [ 227.026128][ T5821] usb 4-1: Manufacturer: syz [ 227.056092][ T5821] usb 4-1: SerialNumber: syz [ 227.068822][ T8590] can0: slcan on pty24. [ 227.155414][ T5821] usb 4-1: config 0 descriptor?? [ 227.221208][ T5821] HFC-S_USB: probe of 4-1:0.212 failed with error -5 [ 227.418077][ T5841] usb 4-1: USB disconnect, device number 11 [ 227.642913][ T8588] can0 (unregistered): slcan off pty24. [ 229.358612][ T8651] loop4: detected capacity change from 0 to 128 [ 229.378636][ T8616] loop3: detected capacity change from 0 to 40427 [ 229.417834][ T8616] F2FS-fs (loop3): invalid crc value [ 229.423842][ T8651] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 229.448737][ T8616] F2FS-fs (loop3): Found nat_bits in checkpoint [ 229.506076][ T8651] hpfs: filesystem error: improperly stopped [ 229.532700][ T8651] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 229.572109][ T8651] hpfs: You really don't want any checks? You are crazy... [ 229.602206][ T8651] hpfs: hpfs_map_sector(): read error [ 229.627343][ T8651] hpfs: code page support is disabled [ 229.645433][ T8651] hpfs: hpfs_map_4sectors(): unaligned read [ 229.655054][ T8651] hpfs: hpfs_map_4sectors(): unaligned read [ 229.675407][ T8651] hpfs: filesystem error: unable to find root dir [ 229.694308][ T8616] F2FS-fs (loop3): Start checkpoint disabled! [ 229.735066][ T8655] loop5: detected capacity change from 0 to 1024 [ 229.757981][ T8616] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 230.004388][ T8659] hfsplus: invalid catalog entry type [ 230.047228][ T8655] hfsplus: invalid catalog entry type [ 230.090661][ T8635] loop2: detected capacity change from 0 to 32768 [ 230.145576][ T1116] hfsplus: bad catalog folder entry [ 230.196168][ T1116] hfsplus: bad catalog file entry [ 230.213437][ T8635] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 230.379933][ T8635] XFS (loop2): Ending clean mount [ 230.427836][ T8635] XFS (loop2): Quotacheck needed: Please wait. [ 230.585798][ T8635] XFS (loop2): Quotacheck: Done. [ 230.756134][ T5898] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 230.766800][ T1116] kworker/u4:9: attempt to access beyond end of device [ 230.766800][ T1116] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 230.783732][ T1116] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 230.805166][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 230.966347][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 230.996488][ T968] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 231.012468][ T5898] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 231.026425][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.034498][ T5898] usb 6-1: Product: syz [ 231.056064][ T5898] usb 6-1: Manufacturer: syz [ 231.060765][ T5898] usb 6-1: SerialNumber: syz [ 231.093188][ T5898] usb 6-1: config 0 descriptor?? [ 231.186009][ T968] usb 5-1: Using ep0 maxpacket: 16 [ 231.206200][ T968] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 231.224790][ T968] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 231.235498][ T968] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.250904][ T968] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.267490][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 231.280930][ T968] usb 5-1: SerialNumber: syz [ 231.291444][ T8679] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 231.339165][ T5898] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 231.532131][ T8679] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 231.566517][ T968] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 231.588157][ T968] usb 5-1: USB disconnect, device number 6 [ 232.126854][ T8690] loop3: detected capacity change from 0 to 32768 [ 232.150107][ T5898] gspca_sunplus: reg_w_riv err -71 [ 232.159541][ T5898] sunplus: probe of 6-1:0.0 failed with error -71 [ 232.166736][ T8690] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.833 (8690) [ 232.185483][ T5898] usb 6-1: USB disconnect, device number 3 [ 232.230708][ T8690] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 232.268144][ T8690] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 232.306222][ T8690] BTRFS info (device loop3): setting nodatacow, compression disabled [ 232.322841][ T8690] BTRFS info (device loop3): force clearing of disk cache [ 232.340057][ T8690] BTRFS info (device loop3): enabling ssd optimizations [ 232.349677][ T8690] BTRFS info (device loop3): using spread ssd allocation scheme [ 232.361976][ T8690] BTRFS info (device loop3): turning off barriers [ 232.379400][ T8690] BTRFS info (device loop3): disabling free space tree [ 232.392507][ T8690] BTRFS info (device loop3): not using ssd optimizations [ 232.407352][ T8690] BTRFS info (device loop3): not using spread ssd allocation scheme [ 232.522836][ T8690] BTRFS info (device loop3): rebuilding free space tree [ 232.624249][ T8690] BTRFS info (device loop3): disabling free space tree [ 232.646456][ T8690] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 232.665943][ T8690] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 233.218072][ T5770] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 233.970717][ T8736] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 234.091479][ T8729] loop4: detected capacity change from 0 to 32768 [ 234.131747][ T8729] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.839 (8729) [ 234.163040][ T8738] netlink: 67 bytes leftover after parsing attributes in process `syz.3.843'. [ 234.163082][ T8728] loop5: detected capacity change from 0 to 40427 [ 234.228572][ T8729] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 234.247187][ T8728] F2FS-fs (loop5): invalid crc value [ 234.282665][ T8729] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 234.298799][ T8728] F2FS-fs (loop5): Found nat_bits in checkpoint [ 234.338422][ T8729] BTRFS info (device loop4): using free space tree [ 234.501347][ T8729] BTRFS info (device loop4): enabling ssd optimizations [ 234.546063][ T8729] BTRFS info (device loop4): auto enabling async discard [ 234.586164][ T8728] F2FS-fs (loop5): Start checkpoint disabled! [ 234.612931][ T8728] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 234.817290][ T968] kernel write not supported for file bpf-prog (pid: 968 comm: kworker/1:2) [ 237.631318][ T6017] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 237.814672][ T143] kworker/u4:6: attempt to access beyond end of device [ 237.814672][ T143] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 237.842591][ T143] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 237.869000][ T143] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 238.264193][ T8774] loop3: detected capacity change from 0 to 256 [ 238.572053][ T8779] loop4: detected capacity change from 0 to 8 [ 238.863656][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.876156][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.127083][ T8772] loop2: detected capacity change from 0 to 32768 [ 239.134691][ T8772] XFS: noikeep mount option is deprecated. [ 239.165427][ T8772] XFS: ikeep mount option is deprecated. [ 239.245804][ T8772] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 239.258525][ T8772] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 239.475593][ T5841] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 239.498960][ T8772] XFS (loop2): Ending clean mount [ 239.532896][ T8772] XFS (loop2): Quotacheck needed: Please wait. [ 239.669217][ T8772] XFS (loop2): Quotacheck: Done. [ 239.675996][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 239.686884][ T5841] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 239.696130][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.717211][ T5841] usb 4-1: config 0 descriptor?? [ 239.809200][ T8772] XFS (loop2): User initiated shutdown received. [ 239.815732][ T8772] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 239.830106][ T8772] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 239.922969][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 239.961996][ T5841] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 239.982282][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 240.015410][ T5841] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 240.038048][ T5841] usb 4-1: media controller created [ 240.153052][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.446985][ T5841] DVB: Unable to find symbol dib7000p_attach() [ 240.453242][ T5841] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 240.626538][ T5841] rc_core: IR keymap rc-dib0700-rc5 not found [ 240.640568][ T5841] Registered IR keymap rc-empty [ 240.648328][ T5841] dvb-usb: could not initialize remote control. [ 240.654659][ T5841] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 240.710762][ T5841] usb 4-1: USB disconnect, device number 12 [ 240.851757][ T5841] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 240.920343][ T8807] loop5: detected capacity change from 0 to 32768 [ 240.927927][ T8807] XFS: attr2 mount option is deprecated. [ 240.966281][ T968] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 240.983756][ T8807] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.062092][ T8807] XFS (loop5): Ending clean mount [ 241.081621][ T8807] XFS (loop5): Quotacheck needed: Please wait. [ 241.182806][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.215493][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.231190][ T8807] XFS (loop5): Quotacheck: Done. [ 241.246688][ T968] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.273048][ T968] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.289765][ T8807] XFS (loop5): User initiated shutdown received. [ 241.296631][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.304902][ T8807] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 241.323508][ T8807] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 241.340407][ T968] usb 5-1: config 0 descriptor?? [ 241.424542][ T7211] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.602521][ T8833] loop3: detected capacity change from 0 to 8192 [ 241.640677][ T8833] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 241.658511][ T8833] UDF-fs: Scanning with blocksize 512 failed [ 241.732143][ T8833] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 241.766120][ T8833] UDF-fs: Scanning with blocksize 1024 failed [ 241.791991][ T968] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 241.818813][ T8833] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 241.836291][ T8833] UDF-fs: Scanning with blocksize 2048 failed [ 241.866787][ T968] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 241.899438][ T8833] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.025578][ T8839] loop5: detected capacity change from 0 to 256 [ 242.078469][ T968] usb 5-1: USB disconnect, device number 7 [ 242.132328][ T8839] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 242.149117][ T8839] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 242.209763][ T8837] fido_id[8837]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 243.477766][ T8863] loop2: detected capacity change from 0 to 2048 [ 243.527096][ T8863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.555361][ T8846] loop4: detected capacity change from 0 to 40427 [ 243.596129][ T968] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 243.614886][ T8846] F2FS-fs (loop4): invalid crc value [ 243.627693][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 243.627709][ T28] audit: type=1800 audit(1770643914.774:593): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.883" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 243.674405][ T8846] F2FS-fs (loop4): Found nat_bits in checkpoint [ 243.732667][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.788441][ T968] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 243.804488][ T968] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.814072][ T8846] F2FS-fs (loop4): Start checkpoint disabled! [ 243.836011][ T968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 243.871704][ T968] usb 6-1: SerialNumber: syz [ 243.876809][ T8846] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 244.412837][ T59] kworker/u4:4: attempt to access beyond end of device [ 244.412837][ T59] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 244.446108][ T59] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 244.590036][ T968] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 245.013811][ T8880] loop3: detected capacity change from 0 to 2048 [ 245.155095][ T8880] loop3: p2 p3 p7 [ 245.191336][ T8885] loop4: detected capacity change from 0 to 1024 [ 245.254801][ T8876] loop2: detected capacity change from 0 to 32768 [ 245.283242][ T8876] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.885 (8876) [ 245.393113][ T8876] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.452886][ T8876] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 245.506572][ T8876] BTRFS info (device loop2): setting nodatacow, compression disabled [ 245.568916][ T8876] BTRFS info (device loop2): force clearing of disk cache [ 245.581248][ T8876] BTRFS info (device loop2): enabling ssd optimizations [ 245.616574][ T8876] BTRFS info (device loop2): using spread ssd allocation scheme [ 245.662529][ T8876] BTRFS info (device loop2): turning off barriers [ 245.707217][ T8876] BTRFS info (device loop2): disabling free space tree [ 245.730538][ T5883] udevd[5883]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 245.748686][ T8876] BTRFS info (device loop2): not using ssd optimizations [ 245.796685][ T8876] BTRFS info (device loop2): not using spread ssd allocation scheme [ 245.899133][ T8901] loop4: detected capacity change from 0 to 128 [ 246.027033][ T8901] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 246.039122][ T8901] hpfs: filesystem error: improperly stopped [ 246.045292][ T8901] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 246.054050][ T8901] hpfs: You really don't want any checks? You are crazy... [ 246.066539][ T8901] hpfs: hpfs_map_sector(): read error [ 246.072142][ T8901] hpfs: code page support is disabled [ 246.087510][ T8876] BTRFS info (device loop2): rebuilding free space tree [ 246.113493][ T8901] hpfs: hpfs_map_4sectors(): unaligned read [ 246.121942][ T8901] hpfs: hpfs_map_4sectors(): unaligned read [ 246.128219][ T8901] hpfs: filesystem error: unable to find root dir [ 246.209754][ T8876] BTRFS info (device loop2): disabling free space tree [ 246.242821][ T8876] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 246.279992][ T8876] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 246.365123][ T968] usb 6-1: USB disconnect, device number 4 [ 246.377665][ T968] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 246.572824][ T8921] loop5: detected capacity change from 0 to 512 [ 246.600244][ T8921] ext4: Unknown parameter 'permit_directio' [ 246.863648][ T5771] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 247.401446][ T8933] loop3: detected capacity change from 0 to 4096 [ 247.445645][ T8937] loop5: detected capacity change from 0 to 512 [ 247.558930][ T8937] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 247.607505][ T8933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.621070][ T8937] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 247.693218][ T8937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.806470][ T8937] EXT4-fs warning (device loop5): dx_probe:869: inode #2: comm syz.5.900: Unimplemented hash flags: 0x0001 [ 247.868574][ T8937] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.900: Corrupt directory, running e2fsck is recommended [ 247.960596][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.985071][ T8946] EXT4-fs warning (device loop5): dx_probe:869: inode #2: comm syz.5.900: Unimplemented hash flags: 0x0001 [ 248.027179][ T8946] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.900: Corrupt directory, running e2fsck is recommended [ 248.198863][ T7211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.681753][ T8967] 9pnet: p9_errstr2errno: server reported unknown error È [ 248.747001][ T8970] syzkaller1: entered promiscuous mode [ 248.762581][ T8970] syzkaller1: entered allmulticast mode [ 249.393697][ T8984] bridge_slave_0: left allmulticast mode [ 249.424977][ T8986] capability: warning: `syz.4.914' uses deprecated v2 capabilities in a way that may be insecure [ 249.446609][ T8984] bridge_slave_0: left promiscuous mode [ 249.477717][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.594780][ T8959] loop5: detected capacity change from 0 to 40427 [ 249.617062][ T8959] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 249.625060][ T8984] bridge_slave_1: left allmulticast mode [ 249.640198][ T8959] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 249.656278][ T8984] bridge_slave_1: left promiscuous mode [ 249.672960][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.681401][ T8959] F2FS-fs (loop5): Found nat_bits in checkpoint [ 249.723242][ T8984] bond0: (slave bond_slave_1): Releasing backup interface [ 249.834017][ T8959] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 249.865175][ T8984] team0: Port device team_slave_0 removed [ 249.868978][ T8959] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 249.941480][ T8984] team0: Port device team_slave_1 removed [ 249.992549][ T8984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.033018][ T8984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.057210][ T8984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.064718][ T8984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.085965][ T8988] netlink: 'syz.3.913': attribute type 10 has an invalid length. [ 250.106606][ T8959] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 250.209239][ T8988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.233628][ T8988] team0: Port device bond0 added [ 250.623388][ T9010] loop4: detected capacity change from 0 to 2048 [ 250.666377][ T9010] NILFS (loop4): invalid segment: Inconsistency found [ 250.681684][ T9010] NILFS (loop4): trying rollback from an earlier position [ 250.725103][ T9010] NILFS (loop4): recovery complete [ 250.737660][ T9014] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.755117][ T9040] delete_channel: no stack [ 252.529350][ T9037] loop2: detected capacity change from 0 to 32768 [ 252.553276][ T9055] loop3: detected capacity change from 0 to 4096 [ 252.575028][ T9037] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.928 (9037) [ 252.596062][ T9055] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 252.624346][ T9037] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 252.657283][ T9037] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 252.713256][ T9037] BTRFS info (device loop2): enabling disk space caching [ 252.742774][ T9037] BTRFS info (device loop2): force clearing of disk cache [ 252.776182][ T9055] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 252.793663][ T9037] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 252.837669][ T9037] BTRFS info (device loop2): use zstd compression, level 3 [ 252.863091][ T9037] BTRFS info (device loop2): disk space caching is enabled [ 252.878127][ T9055] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 252.911108][ T9055] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 252.942882][ T9050] loop5: detected capacity change from 0 to 40427 [ 252.989057][ T9050] F2FS-fs (loop5): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 253.011375][ T9050] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 253.019732][ T9073] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 253.039142][ T9050] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 253.082365][ T9050] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 253.095316][ T9050] F2FS-fs (loop5): Image doesn't support compression [ 253.112754][ T9050] F2FS-fs (loop5): invalid crc value [ 253.144808][ T9037] BTRFS info (device loop2): enabling ssd optimizations [ 253.189600][ T9037] BTRFS info (device loop2): auto enabling async discard [ 253.204563][ T9050] F2FS-fs (loop5): Found nat_bits in checkpoint [ 253.223487][ T9037] BTRFS info (device loop2): rebuilding free space tree [ 253.299123][ T5770] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 253.360331][ T9037] BTRFS info (device loop2): disabling free space tree [ 253.400963][ T9037] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 253.440471][ T9037] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 253.467030][ T9050] F2FS-fs (loop5): Start checkpoint disabled! [ 253.527445][ T9050] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 253.557291][ T9050] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 253.958555][ T5771] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 254.056752][ T11] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 254.116643][ T11] F2FS-fs (loop5): invalid blkaddr: 4100, type: 7, run fsck to fix. [ 254.151858][ T11] kworker/u4:0: attempt to access beyond end of device [ 254.151858][ T11] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 254.186002][ T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 254.193617][ T11] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 254.279580][ T9097] netlink: 'syz.2.944': attribute type 5 has an invalid length. [ 254.341008][ T9097] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.351291][ T9097] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.360268][ T9097] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.369243][ T9097] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.495627][ T9097] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.504715][ T9097] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.513947][ T9097] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.523063][ T9097] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.586351][ T9101] io-wq is not configured for unbound workers [ 254.748654][ T9099] netlink: 'syz.2.944': attribute type 5 has an invalid length. [ 254.797766][ T9099] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.806876][ T9099] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.815646][ T9099] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.824716][ T9099] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.851424][ T9099] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.861629][ T9099] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.870669][ T9099] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.879678][ T9099] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.184044][ T9099] Zero length message leads to an empty skb [ 255.526121][ T5862] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 255.710230][ T9113] loop2: detected capacity change from 0 to 32768 [ 255.738192][ T5862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.759798][ T5862] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 255.779929][ T5862] usb 4-1: config 1 has no interface number 0 [ 255.793987][ T5862] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.806695][ T9113] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 255.806699][ T5862] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 255.825112][ T5862] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.842646][ T5862] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.870750][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.917558][ T5862] usb 4-1: Product: syz [ 255.924226][ T5862] usb 4-1: Manufacturer: syz [ 255.935265][ T5862] usb 4-1: SerialNumber: syz [ 256.076559][ T9113] XFS (loop2): Ending clean mount [ 256.085385][ T9113] XFS (loop2): Quotacheck needed: Please wait. [ 256.099404][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.106545][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.198607][ T9113] XFS (loop2): Quotacheck: Done. [ 256.340380][ T5771] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 256.428491][ T5841] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 256.639404][ T5841] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.663745][ T5841] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.676737][ T5841] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 256.690891][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.700461][ T5841] usb 6-1: SerialNumber: syz [ 256.808896][ T5862] cdc_ncm 4-1:1.1: bind() failure [ 256.936298][ T5841] usb 6-1: 0:2 : does not exist [ 256.977216][ T5841] usb 6-1: USB disconnect, device number 5 [ 257.062335][ T5898] usb 4-1: USB disconnect, device number 13 [ 257.107652][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.166110][ T968] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 258.399597][ T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.425947][ T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.461548][ T968] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.505275][ T968] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.523994][ T9144] loop5: detected capacity change from 0 to 40427 [ 258.530678][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.558457][ T968] usb 3-1: config 0 descriptor?? [ 258.564756][ T9144] F2FS-fs (loop5): invalid crc value [ 258.582343][ T9144] F2FS-fs (loop5): Found nat_bits in checkpoint [ 258.723434][ T9144] F2FS-fs (loop5): Start checkpoint disabled! [ 258.751209][ T9144] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 258.879476][ T9144] syz.5.958: attempt to access beyond end of device [ 258.879476][ T9144] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 258.899671][ T9148] loop3: detected capacity change from 0 to 32768 [ 259.063416][ T968] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 259.122641][ T968] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 259.483937][ T5862] usb 3-1: USB disconnect, device number 13 [ 259.664652][ T12] kworker/u4:1: attempt to access beyond end of device [ 259.664652][ T12] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 259.685484][ T12] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 259.787924][ T9154] loop4: detected capacity change from 0 to 40427 [ 259.858236][ T9154] F2FS-fs (loop4): invalid crc value [ 259.895728][ T9154] F2FS-fs (loop4): Found nat_bits in checkpoint [ 260.027031][ T9161] loop8: detected capacity change from 0 to 7 [ 260.064812][ T9161] Dev loop8: unable to read RDB block 7 [ 260.076302][ T9161] loop8: unable to read partition table [ 260.112722][ T9161] loop8: partition table beyond EOD, truncated [ 260.115209][ T9154] F2FS-fs (loop4): Start checkpoint disabled! [ 260.150665][ T9161] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 260.174150][ T9154] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 260.937205][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'. [ 260.975931][ T9172] block nbd0: Unsupported socket: should be TCP or UNIX. [ 260.994374][ T12] kworker/u4:1: attempt to access beyond end of device [ 260.994374][ T12] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 261.036008][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 261.053505][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 261.496767][ T9170] loop5: detected capacity change from 0 to 32768 [ 261.583861][ T9170] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 261.709322][ T9170] XFS (loop5): Ending clean mount [ 261.760287][ T9184] loop2: detected capacity change from 0 to 1024 [ 261.825963][ T28] audit: type=1800 audit(1770644184.960:594): pid=9170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.965" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 261.948053][ T28] audit: type=1804 audit(1770644185.090:595): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.965" name="/newroot/135/file1/file1" dev="loop5" ino=4422 res=1 errno=0 [ 262.058406][ T9187] syz.2.971: attempt to access beyond end of device [ 262.058406][ T9187] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 262.144070][ T9190] syz.2.971: attempt to access beyond end of device [ 262.144070][ T9190] loop2: rw=0, sector=393308, nr_sectors = 2 limit=1024 [ 262.257899][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 262.266896][ T9190] syz.2.971: attempt to access beyond end of device [ 262.266896][ T9190] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 262.318840][ T7211] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 262.341723][ T9183] syz.2.971: attempt to access beyond end of device [ 262.341723][ T9183] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 263.599404][ T968] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 263.806590][ T968] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 263.826151][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.850787][ T968] usb 5-1: config 0 descriptor?? [ 263.913134][ T9219] loop2: detected capacity change from 0 to 2048 [ 264.071641][ T9219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.128298][ T9223] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 264.307491][ T968] [drm:udl_init] *ERROR* Selecting channel failed [ 264.375642][ T968] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 264.412762][ T968] [drm] Initialized udl on minor 2 [ 264.449157][ T968] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 264.495294][ T968] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 264.524962][ T5843] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 264.542565][ T968] usb 5-1: USB disconnect, device number 8 [ 264.557871][ T5843] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 264.716150][ T5898] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 264.918160][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.926355][ T9227] loop2: detected capacity change from 0 to 40427 [ 264.971541][ T9227] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 264.982022][ T9227] F2FS-fs (loop2): invalid crc value [ 264.990814][ T5898] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 265.014238][ T9227] F2FS-fs (loop2): Found nat_bits in checkpoint [ 265.044644][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.070207][ T9227] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 265.145663][ T5898] usb 4-1: config 0 descriptor?? [ 265.232516][ T9227] F2FS-fs (loop2): access invalid blkaddr:2816 [ 265.240056][ T9227] CPU: 0 PID: 9227 Comm: syz.2.988 Not tainted syzkaller #0 [ 265.247411][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 265.257663][ T9227] Call Trace: [ 265.261095][ T9227] [ 265.264168][ T9227] dump_stack_lvl+0x18c/0x250 [ 265.268953][ T9227] ? show_regs_print_info+0x20/0x20 [ 265.274217][ T9227] ? f2fs_get_next_page_offset+0x690/0x690 [ 265.280166][ T9227] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 265.285599][ T9227] f2fs_map_blocks+0xde5/0x3e60 [ 265.290531][ T9227] ? __might_sleep+0xe0/0xe0 [ 265.295185][ T9227] ? f2fs_get_block_locked+0xe0/0xe0 [ 265.300523][ T9227] ? unwind_get_return_address+0x91/0xc0 [ 265.306208][ T9227] ? down_read_killable+0x340/0x340 [ 265.311475][ T9227] ? stack_trace_save+0xaa/0x100 [ 265.316470][ T9227] ? stack_trace_snprint+0xf0/0xf0 [ 265.321633][ T9227] f2fs_fiemap+0x93d/0x16d0 [ 265.326197][ T9227] ? f2fs_overwrite_io+0x200/0x200 [ 265.331359][ T9227] ? __might_fault+0xaa/0x120 [ 265.336077][ T9227] ? __might_fault+0xaa/0x120 [ 265.340791][ T9227] ? __might_fault+0xc6/0x120 [ 265.345504][ T9227] ? __might_fault+0xaa/0x120 [ 265.350217][ T9227] do_vfs_ioctl+0x1505/0x1cc0 [ 265.354936][ T9227] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 265.360662][ T9227] ? tomoyo_path_number_perm+0x217/0x620 [ 265.366350][ T9227] ? __lock_acquire+0x7d40/0x7d40 [ 265.371437][ T9227] ? slab_free_freelist_hook+0x130/0x1a0 [ 265.377117][ T9227] ? tomoyo_path_number_perm+0x500/0x620 [ 265.382876][ T9227] ? __kmem_cache_free+0xba/0x1e0 [ 265.387947][ T9227] ? tomoyo_path_number_perm+0x5b4/0x620 [ 265.393624][ T9227] ? tomoyo_path_number_perm+0x217/0x620 [ 265.399309][ T9227] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 265.404957][ T9227] ? __fget_files+0x28/0x4b0 [ 265.409598][ T9227] ? __fget_files+0x28/0x4b0 [ 265.414250][ T9227] ? bpf_lsm_file_ioctl+0x9/0x10 [ 265.419228][ T9227] ? security_file_ioctl+0x80/0xa0 [ 265.424397][ T9227] __se_sys_ioctl+0x83/0x170 [ 265.429046][ T9227] do_syscall_64+0x55/0xa0 [ 265.433512][ T9227] ? clear_bhb_loop+0x40/0x90 [ 265.438224][ T9227] ? clear_bhb_loop+0x40/0x90 [ 265.442939][ T9227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.448867][ T9227] RIP: 0033:0x7f34a4f9af79 [ 265.453331][ T9227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.472973][ T9227] RSP: 002b:00007f34a5dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.481421][ T9227] RAX: ffffffffffffffda RBX: 00007f34a5215fa0 RCX: 00007f34a4f9af79 [ 265.489493][ T9227] RDX: 0000200000000080 RSI: 00000000c020660b RDI: 0000000000000004 [ 265.497495][ T9227] RBP: 00007f34a50316e0 R08: 0000000000000000 R09: 0000000000000000 [ 265.505542][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.513558][ T9227] R13: 00007f34a5216038 R14: 00007f34a5215fa0 R15: 00007ffd98a83058 [ 265.521580][ T9227] [ 265.524723][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.593366][ T5898] usbhid 4-1:0.0: can't add hid device: -71 [ 265.600668][ T5898] usbhid: probe of 4-1:0.0 failed with error -71 [ 265.617506][ T5898] usb 4-1: USB disconnect, device number 14 [ 265.966270][ T9241] netlink: 36 bytes leftover after parsing attributes in process `syz.5.993'. [ 265.995992][ T968] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 266.188252][ T5898] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 266.205620][ T968] usb 5-1: config 0 has no interfaces? [ 266.211574][ T968] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 266.242774][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.269975][ T968] usb 5-1: config 0 descriptor?? [ 266.414646][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 266.452338][ T5898] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 266.469150][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.509646][ T5898] usb 4-1: config 0 descriptor?? [ 266.529439][ T788] usb 5-1: USB disconnect, device number 9 [ 266.535582][ T5898] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 266.730757][ C1] usb 4-1: unknown answer from device [ 266.736885][ C1] input input25: Pen battery low [ 266.924629][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1001'. [ 266.935164][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 266.943131][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 266.950946][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 266.951018][ T5123] usb 4-1: control msg error: -71 [ 266.958419][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 266.971654][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 266.979937][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 266.987495][ C1] usb 4-1: pegasus_irq - urb shutting down with status: -2 [ 266.996184][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.003591][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.011158][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.018910][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.026393][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.033891][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.043880][ T5123] usb 4-1: control msg error: -71 [ 267.049849][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.057436][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.064724][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.072196][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.079536][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.086954][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.094257][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.101593][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.108989][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.116521][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.123819][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.131300][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.138613][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.145962][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.154139][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.161610][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.169055][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.176470][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.183866][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.191276][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.198849][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.206444][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.213843][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.221294][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.228651][ C0] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 267.267023][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.274621][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.282387][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.289846][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.297270][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.304655][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.312250][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.319812][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.335993][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.336745][ T5123] usb 4-1: control msg error: -71 [ 267.346394][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.356381][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.363892][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.375738][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.383409][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.395944][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.405975][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 267.413328][ C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 267.447393][ T5898] usb 4-1: USB disconnect, device number 15 [ 268.570035][ T9269] loop3: detected capacity change from 0 to 512 [ 268.678279][ T9269] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 268.765100][ T9261] loop5: detected capacity change from 0 to 131072 [ 268.773897][ T9261] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 268.780781][ T9261] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 268.797225][ T9261] F2FS-fs (loop5): invalid crc value [ 268.816173][ T9269] EXT4-fs (loop3): 1 truncate cleaned up [ 268.822938][ T9269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.845521][ T9261] F2FS-fs (loop5): Found nat_bits in checkpoint [ 268.907589][ T9261] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 268.915459][ T9261] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 269.153015][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.253973][ T9257] loop2: detected capacity change from 0 to 65536 [ 269.382202][ T9257] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 269.459865][ T9257] XFS (loop2): Ending clean mount [ 269.463472][ T9263] loop4: detected capacity change from 0 to 40427 [ 269.483954][ T9257] XFS (loop2): Quotacheck needed: Please wait. [ 269.513155][ T9263] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 269.566216][ T9263] F2FS-fs (loop4): Image doesn't support compression [ 269.573051][ T9263] F2FS-fs (loop4): Image doesn't support compression [ 269.636854][ T9263] F2FS-fs (loop4): invalid crc value [ 269.643852][ T9257] XFS (loop2): Quotacheck: Done. [ 269.676174][ T9263] F2FS-fs (loop4): Found nat_bits in checkpoint [ 269.777322][ T5771] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 269.864792][ T9263] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 270.131751][ T9263] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 270.269279][ T6017] syz-executor: attempt to access beyond end of device [ 270.269279][ T6017] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 270.286860][ T6017] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 270.294014][ T6017] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 271.353412][ T9315] loop5: detected capacity change from 0 to 4096 [ 271.420420][ T9315] ntfs: volume version 3.1. [ 271.431575][ T9317] loop3: detected capacity change from 0 to 2048 [ 271.453874][ T9317] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 271.526717][ T9319] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.623742][ T9315] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 271.678662][ T9315] ntfs: (device loop5): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 271.788789][ T9324] netlink: 'syz.4.1021': attribute type 4 has an invalid length. [ 272.006591][ T9319] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 272.046847][ T9319] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 272.066921][ T9319] Remounting filesystem read-only [ 272.115968][ T59] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 272.123003][ T59] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 272.152199][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.180670][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.190632][ T9331] loop5: detected capacity change from 0 to 2048 [ 272.209513][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.226823][ T9331] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 272.238871][ T59] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 272.269174][ T59] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 272.287140][ T9331] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.299979][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.346076][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.355035][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.409439][ T59] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 272.417619][ T59] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 272.424965][ T59] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 272.455141][ T59] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 272.471683][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.530306][ T59] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 272.556072][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.565028][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.613088][ T59] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 272.636010][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.678300][ T59] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 272.724438][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.752284][ T9338] loop5: detected capacity change from 0 to 2048 [ 272.775414][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.802240][ T59] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 272.822838][ T9338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.839497][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 272.864616][ T5770] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 272.904947][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 272.926174][ T5770] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 272.954797][ T5770] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 272.976999][ T5770] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 272.985671][ T5770] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 273.011558][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 273.028438][ T5770] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 273.049763][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 273.088647][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 273.098628][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 273.147536][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 273.154324][ T5770] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 273.189331][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 273.224219][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 273.245349][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 273.381624][ T9328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1024'. [ 273.821099][ T9357] netlink: 'syz.4.1034': attribute type 5 has an invalid length. [ 273.885705][ T9357] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.894763][ T9357] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.904156][ T9357] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.913090][ T9357] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.950557][ T9357] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.960039][ T9357] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.969638][ T9357] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.978994][ T9357] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.096044][ T9358] netlink: 'syz.4.1034': attribute type 5 has an invalid length. [ 274.131244][ T9358] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.140545][ T9358] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.149538][ T9358] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.158356][ T9358] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.232921][ T9358] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.242233][ T9358] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.251362][ T9358] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.260367][ T9358] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.871160][ T9369] loop3: detected capacity change from 0 to 32768 [ 274.905978][ T9365] loop5: detected capacity change from 0 to 32768 [ 274.932562][ T9369] [ 274.932562][ T9369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.932562][ T9369] [ 274.974828][ T9369] ERROR: (device loop3): diWrite: ixpxd invalid [ 274.974828][ T9369] [ 275.019123][ T9369] ERROR: (device loop3): txCommit: [ 275.019123][ T9369] [ 275.048254][ T9365] JBD2: Ignoring recovery information on journal [ 275.108434][ T59] ERROR: (device loop3): diWrite: ixpxd invalid [ 275.108434][ T59] [ 275.120053][ T59] ERROR: (device loop3): txCommit: [ 275.120053][ T59] [ 275.129687][ T59] jfs_write_inode: jfs_commit_inode failed! [ 275.136794][ T5770] [ 275.136794][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.136794][ T5770] [ 275.153049][ T5770] [ 275.153049][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.153049][ T5770] [ 275.231201][ T9365] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 275.527461][ T28] audit: type=1800 audit(1770644198.680:596): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1037" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 275.683449][ T9388] loop4: detected capacity change from 0 to 4096 [ 275.801222][ T7211] ocfs2: Unmounting device (7,5) on (node local) [ 275.844150][ T9390] loop2: detected capacity change from 0 to 4096 [ 275.896011][ T28] audit: type=1804 audit(1770644199.040:597): pid=9388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1046" name="/newroot/238/file0/file0" dev="loop4" ino=0 res=1 errno=0 [ 276.031691][ T9390] ntfs: volume version 3.1. [ 276.143638][ T9390] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 276.181049][ T9390] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 276.306868][ T788] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 276.506852][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 276.544148][ T788] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 276.556778][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.580414][ T788] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 276.596050][ T5862] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 276.610866][ T9402] loop4: detected capacity change from 0 to 4096 [ 276.659478][ T9402] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 276.796002][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 276.803503][ T5862] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 276.817461][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 276.829128][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 276.844640][ T5862] usb 6-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 276.870051][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.899346][ T5862] usb 6-1: config 0 descriptor?? [ 277.351834][ T5862] wacom 0003:056A:0307.000F: unknown main item tag 0x2 [ 277.371845][ T5862] wacom 0003:056A:0307.000F: unknown main item tag 0x7 [ 277.402498][ T5862] wacom 0003:056A:0307.000F: hidraw0: USB HID v0.00 Device [HID 056a:0307] on usb-dummy_hcd.5-1/input0 [ 277.563157][ T9410] loop4: detected capacity change from 0 to 32768 [ 277.602206][ T788] gspca_nw80x: reg_w err -71 [ 277.608878][ T788] nw80x: probe of 4-1:3.0 failed with error -71 [ 277.617879][ T788] usb 4-1: USB disconnect, device number 16 [ 277.654612][ T9410] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.666865][ T968] usb 6-1: USB disconnect, device number 6 [ 277.827913][ T9410] XFS (loop4): Ending clean mount [ 277.939183][ T9410] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 277.951521][ T9410] XFS (loop4): Unmount and run xfs_repair [ 277.958737][ T9410] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 277.967697][ T9410] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 277.979715][ T9410] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 277.996369][ T9410] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 278.006566][ T9410] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 278.015790][ T9410] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 278.025458][ T9410] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 278.034806][ T9410] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 278.045423][ T9410] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 278.057478][ T9410] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 278.079672][ T9410] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 278.101340][ T9410] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 278.139132][ T6017] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.700367][ T9426] loop5: detected capacity change from 0 to 8192 [ 278.717286][ T9426] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.030524][ T9439] loop5: detected capacity change from 0 to 512 [ 279.043665][ T9439] EXT4-fs: Ignoring removed i_version option [ 279.088299][ T9439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.233199][ T7211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.072833][ T9462] loop2: detected capacity change from 0 to 512 [ 280.151809][ T9462] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 280.515558][ T9468] loop4: detected capacity change from 0 to 1024 [ 280.542635][ T9468] EXT4-fs: Ignoring removed bh option [ 280.588298][ T9468] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 280.648322][ T9468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.012106][ T6017] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.520981][ T9503] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 282.229549][ T9521] loop5: detected capacity change from 0 to 2048 [ 282.276070][ T9527] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.319503][ T28] audit: type=1800 audit(1770644205.460:598): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1097" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 282.347762][ T9521] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12 [ 282.450826][ T9521] Remounting filesystem read-only [ 282.546289][ T5898] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 282.746075][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 282.759406][ T5898] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 282.772945][ T5898] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.784332][ T5898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.798117][ T5898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.821179][ T5898] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.848244][ T5898] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.861014][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.093974][ T5898] usb 5-1: GET_CAPABILITIES returned 0 [ 283.106303][ T5898] usbtmc 5-1:16.0: can't read capabilities [ 283.363684][ T5841] usb 5-1: USB disconnect, device number 10 [ 283.374235][ T9523] usbtmc 5-1:16.0: stb usb_control_msg returned -71 [ 283.633151][ T9559] loop5: detected capacity change from 0 to 1024 [ 283.642107][ T9559] EXT4-fs: Ignoring removed orlov option [ 283.648471][ T9559] EXT4-fs: inline encryption not supported [ 283.666844][ T9559] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 283.686074][ T9559] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 283.720850][ T9559] EXT4-fs (loop5): invalid journal inode [ 283.737327][ T9559] EXT4-fs (loop5): can't get journal size [ 283.766327][ T9559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.777670][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 283.940753][ T7211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.098829][ T9566] loop5: detected capacity change from 0 to 128 [ 284.155978][ T9566] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 284.215279][ T9566] hpfs: filesystem error: improperly stopped [ 284.252058][ T9566] hpfs: You really don't want any checks? You are crazy... [ 284.296446][ T9566] hpfs: hpfs_map_sector(): read error [ 284.301923][ T9566] hpfs: code page support is disabled [ 284.330937][ T9566] hpfs: hpfs_map_4sectors(): unaligned read [ 284.356723][ T9566] hpfs: hpfs_map_4sectors(): unaligned read [ 284.362707][ T9566] hpfs: filesystem error: unable to find root dir [ 284.750343][ T9581] loop4: detected capacity change from 0 to 512 [ 284.846298][ T9581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.056590][ T6017] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.156359][ T5843] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 285.288276][ T9579] loop5: detected capacity change from 0 to 32768 [ 285.335027][ T9579] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 285.345985][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 285.353440][ T5843] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 285.362450][ T5843] usb 3-1: config 2 has no interface number 0 [ 285.369440][ T5843] usb 3-1: config 2 interface 88 has no altsetting 0 [ 285.383086][ T5843] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 285.402371][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.417969][ T9599] loop4: detected capacity change from 0 to 512 [ 285.432129][ T9599] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 285.443803][ T5843] usb 3-1: Product: syz [ 285.451364][ T5843] usb 3-1: Manufacturer: syz [ 285.457260][ T5843] usb 3-1: SerialNumber: syz [ 285.482567][ T9599] EXT4-fs (loop4): 1 truncate cleaned up [ 285.498436][ T9599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.600954][ T9579] XFS (loop5): Ending clean mount [ 285.775314][ T5862] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 285.788622][ T28] audit: type=1800 audit(1770644208.920:599): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1127" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 285.816522][ T5862] XFS (loop5): Unmount and run xfs_repair [ 285.822346][ T5862] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 285.846039][ T5862] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 285.854988][ T5862] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 285.870375][ T6017] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 285.893316][ T5862] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 285.904745][ T5862] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 285.916406][ T5862] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 285.925328][ T5862] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 285.936897][ T5862] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 285.966037][ T5862] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 285.976004][ T9579] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74 [ 286.016125][ T9579] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 286.033315][ T9579] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 286.120041][ T7211] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.366605][ T6017] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.525419][ T5843] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 286.539441][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.566824][ T5843] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 286.616612][ T5843] asix: probe of 3-1:2.88 failed with error -71 [ 286.658814][ T5843] usb 3-1: USB disconnect, device number 14 [ 286.759749][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.860826][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.927997][ T9606] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1132'. [ 287.083990][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.765021][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.783992][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.793475][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.861617][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.877170][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 287.895357][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.145264][ T9627] loop2: detected capacity change from 0 to 131072 [ 289.171895][ T9627] F2FS-fs (loop2): invalid crc value [ 289.182352][ T9614] loop3: detected capacity change from 0 to 32768 [ 289.231198][ T9627] F2FS-fs (loop2): Found nat_bits in checkpoint [ 289.287334][ T9627] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 289.317988][ T28] audit: type=1800 audit(1770644212.470:600): pid=9627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1139" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 289.349928][ T9614] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 289.601813][ T9614] XFS (loop3): Ending clean mount [ 289.728272][ T9614] XFS (loop3): Quotacheck needed: Please wait. [ 289.916202][ T9614] XFS (loop3): Quotacheck: Done. [ 290.038936][ T51] Bluetooth: hci1: command tx timeout [ 290.173692][ T9643] loop5: detected capacity change from 0 to 32768 [ 290.197241][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 290.435319][ T9623] chnl_net:caif_netlink_parms(): no params data found [ 290.907015][ T9667] loop5: detected capacity change from 0 to 128 [ 290.995350][ T9667] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 291.032439][ T9667] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 291.224670][ T9677] loop3: detected capacity change from 0 to 512 [ 291.274812][ T7211] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.307009][ T9677] EXT4-fs: Ignoring removed oldalloc option [ 291.326037][ T9677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.439401][ T9623] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.454734][ T9623] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.462655][ T9623] bridge_slave_0: entered allmulticast mode [ 291.471700][ T9623] bridge_slave_0: entered promiscuous mode [ 291.528160][ T9623] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.571335][ T9623] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.579281][ T9623] bridge_slave_1: entered allmulticast mode [ 291.588008][ T9623] bridge_slave_1: entered promiscuous mode [ 291.740151][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.892352][ T9684] loop5: detected capacity change from 0 to 4096 [ 291.910456][ T9623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.931885][ T9684] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 292.021237][ T9623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.064612][ T9688] netlink: 'syz.3.1148': attribute type 10 has an invalid length. [ 292.088665][ T51] Bluetooth: hci1: command tx timeout [ 292.150020][ T9688] team0: Port device dummy0 added [ 292.198104][ T11] hsr_slave_0: left promiscuous mode [ 292.204493][ T11] hsr_slave_1: left promiscuous mode [ 292.211120][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.232664][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.252005][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.269695][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.291475][ T11] bridge_slave_1: left allmulticast mode [ 292.310323][ T11] bridge_slave_1: left promiscuous mode [ 292.330644][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.427797][ T11] bridge_slave_0: left allmulticast mode [ 292.450643][ T11] bridge_slave_0: left promiscuous mode [ 292.462242][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.540712][ T11] veth1_macvtap: left promiscuous mode [ 292.552538][ T11] veth0_macvtap: left promiscuous mode [ 292.560656][ T11] veth1_vlan: left promiscuous mode [ 292.577208][ T11] veth0_vlan: left promiscuous mode [ 293.580987][ T11] team0 (unregistering): Port device team_slave_1 removed [ 293.649798][ T11] team0 (unregistering): Port device team_slave_0 removed [ 293.720041][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.731247][ T11] bond_slave_1 (unregistering): left promiscuous mode [ 293.795248][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.805265][ T11] bond_slave_0 (unregistering): left promiscuous mode [ 294.176391][ T51] Bluetooth: hci1: command tx timeout [ 294.305050][ T11] bond0 (unregistering): Released all slaves [ 294.414957][ T9689] netlink: 'syz.3.1148': attribute type 10 has an invalid length. [ 294.444980][ T9689] team0: Port device dummy0 removed [ 294.462244][ T9689] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 294.603054][ T9623] team0: Port device team_slave_0 added [ 294.631139][ T9623] team0: Port device team_slave_1 added [ 294.752312][ T9623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.779884][ T9623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.807160][ T9706] loop5: detected capacity change from 0 to 512 [ 294.844713][ T9706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.905927][ T9623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.936337][ T9706] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1151: invalid indirect mapped block 4294967295 (level 1) [ 294.998949][ T9623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.044804][ T9623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.075990][ T9706] EXT4-fs (loop5): Remounting filesystem read-only [ 295.082843][ T9706] EXT4-fs (loop5): 2 truncates cleaned up [ 295.147460][ T9706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.201675][ T9623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.420598][ T7211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.421788][ T9623] hsr_slave_0: entered promiscuous mode [ 295.450834][ T9623] hsr_slave_1: entered promiscuous mode [ 295.460524][ T9623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.475723][ T9623] Cannot create hsr debugfs directory [ 296.074145][ T9623] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 296.114004][ T9623] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 296.144867][ T9623] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 296.180047][ T9623] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 296.246334][ T51] Bluetooth: hci1: command tx timeout [ 296.304104][ T9739] loop2: detected capacity change from 0 to 8 [ 296.372855][ T9739] SQUASHFS error: zlib decompression failed, data probably corrupt [ 296.423432][ T9739] SQUASHFS error: Failed to read block 0x9b: -5 [ 296.456067][ T9739] SQUASHFS error: Unable to read metadata cache entry [99] [ 296.480699][ T9739] SQUASHFS error: Unable to read inode 0x127 [ 296.620889][ T9623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.705968][ T9623] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.752574][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.759862][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.840684][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.847958][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.963240][ T9756] loop5: detected capacity change from 0 to 128 [ 296.996302][ T9754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.004540][ T9754] IPv6: NLM_F_CREATE should be set when creating new route [ 297.011950][ T9754] IPv6: NLM_F_CREATE should be set when creating new route [ 297.019289][ T9754] IPv6: NLM_F_CREATE should be set when creating new route [ 297.037907][ T9756] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.084556][ T9756] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 297.299696][ T9733] loop3: detected capacity change from 0 to 32768 [ 297.402598][ T9733] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 297.429211][ T9733] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 297.472585][ T7211] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.633052][ T9733] XFS (loop3): Ending clean mount [ 297.685794][ T9733] XFS (loop3): Quotacheck needed: Please wait. [ 297.832717][ T9623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.876670][ T9733] XFS (loop3): Quotacheck: Done. [ 298.039984][ T5770] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 298.395505][ T9793] loop2: detected capacity change from 0 to 256 [ 298.530001][ T9623] veth0_vlan: entered promiscuous mode [ 298.544805][ T9793] FAT-fs (loop2): Directory bread(block 64) failed [ 298.579218][ T9793] FAT-fs (loop2): Directory bread(block 65) failed [ 298.591713][ T9623] veth1_vlan: entered promiscuous mode [ 298.607234][ T9793] FAT-fs (loop2): Directory bread(block 66) failed [ 298.613870][ T9793] FAT-fs (loop2): Directory bread(block 67) failed [ 298.665222][ T9793] FAT-fs (loop2): Directory bread(block 68) failed [ 298.705962][ T9793] FAT-fs (loop2): Directory bread(block 69) failed [ 298.724313][ T9623] veth0_macvtap: entered promiscuous mode [ 298.730528][ T9793] FAT-fs (loop2): Directory bread(block 70) failed [ 298.757269][ T9793] FAT-fs (loop2): Directory bread(block 71) failed [ 298.775513][ T9623] veth1_macvtap: entered promiscuous mode [ 298.781866][ T9793] FAT-fs (loop2): Directory bread(block 72) failed [ 298.804696][ T9793] FAT-fs (loop2): Directory bread(block 73) failed [ 298.834268][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.864410][ T9801] loop3: detected capacity change from 0 to 256 [ 298.884536][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.906978][ T9801] exfat: Deprecated parameter 'utf8' [ 298.912817][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.926066][ T9801] exfat: Deprecated parameter 'namecase' [ 298.960974][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.999150][ T9801] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 299.014536][ T9623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.027407][ T5821] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 299.085083][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.127941][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.144522][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.165652][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.194639][ T9623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.217925][ T5821] usb 6-1: Using ep0 maxpacket: 16 [ 299.230871][ T5821] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.256022][ T5821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 299.274686][ T9623] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.284527][ T5821] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 299.322627][ T9623] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.331589][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.366071][ T9623] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.385368][ T9623] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.386879][ T5821] usb 6-1: config 0 descriptor?? [ 299.671171][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.702638][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.774192][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.803825][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.883700][ T5821] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 300.453591][ T9812] usb 6-1: USB disconnect, device number 7 [ 300.750413][ T9809] loop3: detected capacity change from 0 to 40427 [ 300.806938][ T9809] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 300.828808][ T9809] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 300.858607][ T9809] F2FS-fs (loop3): invalid crc value [ 300.905106][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1172'. [ 300.919952][ T9809] F2FS-fs (loop3): Found nat_bits in checkpoint [ 301.154715][ T9809] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 301.175951][ T9809] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 301.289500][ T9844] loop2: detected capacity change from 0 to 256 [ 301.384551][ T9844] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 301.477699][ T9833] f2fs_ckpt-7:3: attempt to access beyond end of device [ 301.477699][ T9833] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 301.503100][ T9833] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 301.557440][ T9848] loop6: detected capacity change from 0 to 1024 [ 301.918769][ T968] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 301.947298][ T61] hfsplus: b-tree write err: -5, ino 4 [ 302.163067][ T968] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.190364][ T968] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.222093][ T968] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 302.241148][ T968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 302.270618][ T968] usb 6-1: SerialNumber: syz [ 302.505562][ T968] usb 6-1: 0:2 : does not exist [ 302.535993][ T23] psmouse serio5: Failed to reset mouse on : -5 [ 302.554139][ T9865] veth1_to_hsr: entered promiscuous mode [ 302.586585][ T9865] macvlan2: entered promiscuous mode [ 302.588242][ T968] usb 6-1: USB disconnect, device number 8 [ 302.678215][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.819623][ T9872] loop6: detected capacity change from 0 to 256 [ 302.857852][ T9872] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 302.901442][ T9872] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 303.016757][ T9872] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000006) [ 303.038521][ T9872] exFAT-fs (loop6): Filesystem has been set read-only [ 303.053385][ T9872] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000006) [ 303.625611][ T9898] loop5: detected capacity change from 0 to 256 [ 303.772927][ T9898] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd509bb81, utbl_chksum : 0xe619d30d) [ 304.266237][ T5843] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 304.445942][ T5843] usb 6-1: Using ep0 maxpacket: 32 [ 304.459644][ T5843] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 304.483933][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.493205][ T9920] loop3: detected capacity change from 0 to 4096 [ 304.503721][ T5843] usb 6-1: config 0 descriptor?? [ 304.552587][ T9924] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.716212][ T5862] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 304.776146][ T5843] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 304.797622][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.831257][ T5843] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 304.867068][ T5843] usb 6-1: media controller created [ 304.918606][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.952733][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.987529][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.995312][ T5843] az6027: usb out operation failed. (-71) [ 305.019251][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.051939][ T5862] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.071694][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.127534][ T5862] usb 7-1: config 0 descriptor?? [ 305.623369][ T5862] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 305.698786][ T5862] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 305.779531][ T5862] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 305.836421][ T9937] loop5: detected capacity change from 0 to 128 [ 305.907918][ T9937] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 305.983477][ T5843] az6027: usb out operation failed. (-71) [ 305.989405][ T5843] stb0899_attach: Driver disabled by Kconfig [ 305.995562][ T5843] az6027: no front-end attached [ 305.995562][ T5843] [ 305.998812][ T9937] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.090538][ T5862] usb 7-1: USB disconnect, device number 2 [ 306.264669][ T9931] loop3: detected capacity change from 0 to 131072 [ 306.273358][ T9931] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 306.281609][ T9931] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 306.290434][ T5843] az6027: usb out operation failed. (-71) [ 306.296592][ T5843] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 306.306141][ T5843] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input31 [ 306.323264][ T9931] F2FS-fs (loop3): invalid crc value [ 306.343476][ T9939] fido_id[9939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 306.360340][ T5843] dvb-usb: schedule remote query interval to 400 msecs. [ 306.369681][ T5843] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 306.385607][ T9931] F2FS-fs (loop3): Found nat_bits in checkpoint [ 306.430389][ T5843] usb 6-1: USB disconnect, device number 9 [ 306.477576][ T9931] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 306.487047][ T9931] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 306.515457][ T28] audit: type=1800 audit(1770644229.660:601): pid=9931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1199" name="file2" dev="loop3" ino=8 res=0 errno=0 [ 306.680967][ T5843] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 307.317013][ T23] misc userio: Buffer overflowed, userio client isn't keeping up [ 307.915943][ T5862] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 308.149659][ T5862] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 308.166102][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.195987][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.214029][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 308.230093][ T5862] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 308.240202][ T5862] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 308.249364][ T5862] usb 7-1: Manufacturer: syz [ 308.256953][ T5862] usb 7-1: config 0 descriptor?? [ 308.336243][ T5843] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 308.391030][ T23] input: PS/2 Generic Mouse as /devices/serio5/input/input29 [ 308.536815][ T5843] usb 6-1: Using ep0 maxpacket: 32 [ 308.546940][ T5843] usb 6-1: config 0 has an invalid interface number: 225 but max is 0 [ 308.555202][ T5843] usb 6-1: config 0 has no interface number 0 [ 308.571829][ T5843] usb 6-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 308.585952][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.594023][ T5843] usb 6-1: Product: syz [ 308.601906][ T7411] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 308.609763][ T5843] usb 6-1: Manufacturer: syz [ 308.614537][ T5843] usb 6-1: SerialNumber: syz [ 308.624201][ T5843] usb 6-1: config 0 descriptor?? [ 308.634478][ T23] psmouse serio5: Failed to enable mouse on [ 308.682258][ T5862] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 308.705138][ T5862] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 308.735111][ T5862] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 308.805211][ T7411] usb 4-1: config 0 has no interfaces? [ 308.819439][ T7411] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 308.836247][ T7411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.864562][ T7411] usb 4-1: Product: syz [ 308.870923][ T7411] usb 4-1: Manufacturer: syz [ 308.875635][ T7411] usb 4-1: SerialNumber: syz [ 308.897077][ T7411] usb 4-1: config 0 descriptor?? [ 309.029724][ T5862] usb 7-1: USB disconnect, device number 3 [ 309.271710][ T5843] mos7840 6-1:0.225: required endpoints missing [ 309.286707][ T5843] usb 6-1: USB disconnect, device number 10 [ 309.345513][ T9975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.360925][ T9975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.372954][ T7411] usb 4-1: USB disconnect, device number 17 [ 309.849757][ T9987] Bluetooth: MGMT ver 1.22 [ 310.105500][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 310.118573][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 310.126022][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 310.136212][ T51] Workqueue: hci1 hci_rx_work [ 310.141041][ T51] Call Trace: [ 310.145306][ T51] [ 310.148276][ T51] dump_stack_lvl+0x18c/0x250 [ 310.153005][ T51] ? show_regs_print_info+0x20/0x20 [ 310.158248][ T51] ? load_image+0x400/0x400 [ 310.162800][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 310.167951][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 310.172665][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 310.177911][ T51] kobject_add_internal+0x61c/0xcc0 [ 310.183158][ T51] kobject_add+0x164/0x240 [ 310.187608][ T51] ? __rwlock_init+0x150/0x150 [ 310.192419][ T51] ? kobject_init+0x1e0/0x1e0 [ 310.197137][ T51] ? _raw_spin_unlock+0x28/0x40 [ 310.202031][ T51] ? get_device_parent+0x366/0x390 [ 310.207212][ T51] device_add+0x408/0xc20 [ 310.211584][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 310.216588][ T51] le_conn_complete_evt+0xf5d/0x1540 [ 310.221951][ T51] ? hci_event_packet+0x4cb/0x1270 [ 310.227121][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 310.233777][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 310.239805][ T51] ? skb_pull_data+0xfb/0x200 [ 310.244550][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 310.250272][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 310.256404][ T51] hci_event_packet+0x7ba/0x1270 [ 310.261410][ T51] ? bis_list+0x290/0x290 [ 310.265794][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 310.271030][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 310.276281][ T51] hci_rx_work+0x43a/0xd60 [ 310.280786][ T51] ? process_scheduled_works+0x96f/0x15d0 [ 310.286548][ T51] process_scheduled_works+0xa5d/0x15d0 [ 310.292159][ T51] ? assign_work+0x430/0x430 [ 310.296826][ T51] ? assign_work+0x3d0/0x430 [ 310.301475][ T51] worker_thread+0xa55/0xfc0 [ 310.306140][ T51] kthread+0x2fa/0x390 [ 310.310244][ T51] ? pr_cont_work+0x560/0x560 [ 310.314963][ T51] ? kthread_blkcg+0xd0/0xd0 [ 310.319613][ T51] ret_from_fork+0x48/0x80 [ 310.324067][ T51] ? kthread_blkcg+0xd0/0xd0 [ 310.328686][ T51] ret_from_fork_asm+0x11/0x20 [ 310.333509][ T51] [ 310.338795][ T51] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 310.353019][ T51] Bluetooth: hci1: failed to register connection device [ 310.638010][T10009] loop2: detected capacity change from 0 to 1024 [ 310.855023][ T11] hfsplus: b-tree write err: -5, ino 4 [ 311.919899][T10013] loop3: detected capacity change from 0 to 32768 [ 311.961453][T10013] (syz.3.1224,10013,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 312.022237][T10013] (syz.3.1224,10013,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 312.070791][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1238'. [ 312.139021][T10013] JBD2: Ignoring recovery information on journal [ 312.299238][T10013] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 312.480110][T10069] loop5: detected capacity change from 0 to 256 [ 312.501860][T10063] ceph: No mds server is up or the cluster is laggy [ 312.588720][T10069] FAT-fs (loop5): Directory bread(block 64) failed [ 312.616368][T10069] FAT-fs (loop5): Directory bread(block 65) failed [ 312.640883][T10069] FAT-fs (loop5): Directory bread(block 66) failed [ 312.666343][T10069] FAT-fs (loop5): Directory bread(block 67) failed [ 312.687024][T10069] FAT-fs (loop5): Directory bread(block 68) failed [ 312.715136][T10069] FAT-fs (loop5): Directory bread(block 69) failed [ 312.740566][T10069] FAT-fs (loop5): Directory bread(block 70) failed [ 312.760342][T10069] FAT-fs (loop5): Directory bread(block 71) failed [ 312.778294][T10069] FAT-fs (loop5): Directory bread(block 72) failed [ 312.823655][T10069] FAT-fs (loop5): Directory bread(block 73) failed [ 312.923576][T10013] [ 312.925989][T10013] ====================================================== [ 312.933060][T10013] WARNING: possible circular locking dependency detected [ 312.940143][T10013] syzkaller #0 Not tainted [ 312.944598][T10013] ------------------------------------------------------ [ 312.951663][T10013] syz.3.1224/10013 is trying to acquire lock: [ 312.957789][T10013] ffff888069e69538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 312.967299][T10013] [ 312.967299][T10013] but task is already holding lock: [ 312.974712][T10013] ffff88805dd298e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 312.985074][T10013] [ 312.985074][T10013] which lock already depends on the new lock. [ 312.985074][T10013] [ 312.995527][T10013] [ 312.995527][T10013] the existing dependency chain (in reverse order) is: [ 313.004585][T10013] [ 313.004585][T10013] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 313.013167][T10013] down_read+0x46/0x2e0 [ 313.017909][T10013] ocfs2_start_trans+0x3a8/0x6f0 [ 313.023429][T10013] ocfs2_mknod+0xf1d/0x2300 [ 313.028515][T10013] ocfs2_create+0x196/0x430 [ 313.033594][T10013] path_openat+0x12a0/0x3230 [ 313.038763][T10013] do_filp_open+0x1f5/0x430 [ 313.043834][T10013] do_sys_openat2+0x134/0x1d0 [ 313.049341][T10013] __x64_sys_openat+0x139/0x160 [ 313.055214][T10013] do_syscall_64+0x55/0xa0 [ 313.060188][T10013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.066633][T10013] [ 313.066633][T10013] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 313.074144][T10013] ocfs2_start_trans+0x2a9/0x6f0 [ 313.079645][T10013] ocfs2_truncate_file+0x631/0x1440 [ 313.085410][T10013] ocfs2_setattr+0x158d/0x1bc0 [ 313.090737][T10013] notify_change+0xb0d/0xe10 [ 313.095891][T10013] do_truncate+0x1b0/0x240 [ 313.100865][T10013] path_openat+0x2a32/0x3230 [ 313.106036][T10013] do_filp_open+0x1f5/0x430 [ 313.111105][T10013] do_sys_openat2+0x134/0x1d0 [ 313.116336][T10013] __x64_sys_creat+0x90/0xb0 [ 313.121571][T10013] do_syscall_64+0x55/0xa0 [ 313.126545][T10013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.133151][T10013] [ 313.133151][T10013] -> #1 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 313.141081][T10013] down_write+0x97/0x200 [ 313.145888][T10013] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 313.152429][T10013] ocfs2_truncate_file+0xde5/0x1440 [ 313.158212][T10013] ocfs2_setattr+0x158d/0x1bc0 [ 313.163548][T10013] notify_change+0xb0d/0xe10 [ 313.168689][T10013] do_truncate+0x1b0/0x240 [ 313.173650][T10013] path_openat+0x2a32/0x3230 [ 313.178786][T10013] do_filp_open+0x1f5/0x430 [ 313.183846][T10013] do_sys_openat2+0x134/0x1d0 [ 313.189071][T10013] __x64_sys_creat+0x90/0xb0 [ 313.194212][T10013] do_syscall_64+0x55/0xa0 [ 313.199184][T10013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.205621][T10013] [ 313.205621][T10013] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 313.213504][T10013] __lock_acquire+0x2df1/0x7d40 [ 313.218904][T10013] lock_acquire+0x19e/0x420 [ 313.223960][T10013] down_read+0x46/0x2e0 [ 313.228668][T10013] ocfs2_init_acl+0x30a/0x770 [ 313.233904][T10013] ocfs2_mknod+0x140f/0x2300 [ 313.239058][T10013] ocfs2_create+0x196/0x430 [ 313.244112][T10013] path_openat+0x12a0/0x3230 [ 313.249245][T10013] do_filp_open+0x1f5/0x430 [ 313.254290][T10013] do_sys_openat2+0x134/0x1d0 [ 313.259518][T10013] __x64_sys_openat+0x139/0x160 [ 313.264914][T10013] do_syscall_64+0x55/0xa0 [ 313.269888][T10013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.276328][T10013] [ 313.276328][T10013] other info that might help us debug this: [ 313.276328][T10013] [ 313.286577][T10013] Chain exists of: [ 313.286577][T10013] &oi->ip_xattr_sem --> sb_internal#3 --> &journal->j_trans_barrier [ 313.286577][T10013] [ 313.300542][T10013] Possible unsafe locking scenario: [ 313.300542][T10013] [ 313.308011][T10013] CPU0 CPU1 [ 313.313399][T10013] ---- ---- [ 313.318780][T10013] rlock(&journal->j_trans_barrier); [ 313.324179][T10013] lock(sb_internal#3); [ 313.331063][T10013] lock(&journal->j_trans_barrier); [ 313.338898][T10013] rlock(&oi->ip_xattr_sem); [ 313.343604][T10013] [ 313.343604][T10013] *** DEADLOCK *** [ 313.343604][T10013] [ 313.351769][T10013] 8 locks held by syz.3.1224/10013: [ 313.356987][T10013] #0: ffff888064754418 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 313.366272][T10013] #1: ffff888069e69818 (&type->i_mutex_dir_key#18){+.+.}-{3:3}, at: path_openat+0x7dc/0x3230 [ 313.376572][T10013] #2: ffff888069f03498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 313.390277][T10013] #3: ffff888069f01818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 313.403985][T10013] #4: ffff888069f06d98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 313.417953][T10013] #5: ffff888064754608 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xf1d/0x2300 [ 313.427228][T10013] #6: ffff88805dd298e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 313.437965][T10013] #7: ffff8880664de990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f7a/0x21c0 [ 313.447878][T10013] [ 313.447878][T10013] stack backtrace: [ 313.453798][T10013] CPU: 0 PID: 10013 Comm: syz.3.1224 Not tainted syzkaller #0 [ 313.461290][T10013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 313.471378][T10013] Call Trace: [ 313.474691][T10013] [ 313.477649][T10013] dump_stack_lvl+0x18c/0x250 [ 313.482370][T10013] ? load_image+0x400/0x400 [ 313.486900][T10013] ? show_regs_print_info+0x20/0x20 [ 313.492140][T10013] ? print_circular_bug+0x12b/0x1a0 [ 313.497409][T10013] check_noncircular+0x2fc/0x400 [ 313.502411][T10013] ? print_deadlock_bug+0x5d0/0x5d0 [ 313.507648][T10013] ? _find_first_zero_bit+0xd3/0x100 [ 313.513054][T10013] ? add_lock_to_list+0x191/0x280 [ 313.518153][T10013] __lock_acquire+0x2df1/0x7d40 [ 313.523068][T10013] ? verify_lock_unused+0x140/0x140 [ 313.528298][T10013] ? __lock_acquire+0x7d40/0x7d40 [ 313.533351][T10013] ? do_raw_spin_lock+0x11f/0x2c0 [ 313.538416][T10013] lock_acquire+0x19e/0x420 [ 313.542941][T10013] ? ocfs2_init_acl+0x30a/0x770 [ 313.547930][T10013] ? __might_sleep+0xe0/0xe0 [ 313.552549][T10013] ? read_lock_is_recursive+0x20/0x20 [ 313.557967][T10013] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 313.564617][T10013] ? dquot_alloc_inode+0x772/0xa40 [ 313.569789][T10013] down_read+0x46/0x2e0 [ 313.574061][T10013] ? ocfs2_init_acl+0x30a/0x770 [ 313.578979][T10013] ocfs2_init_acl+0x30a/0x770 [ 313.583705][T10013] ? ocfs2_mknod_locked+0x159/0x290 [ 313.588949][T10013] ? ocfs2_acl_chmod+0x330/0x330 [ 313.593925][T10013] ? dquot_alloc_inode+0x8ac/0xa40 [ 313.599083][T10013] ? dquot_alloc_inode+0x15e/0xa40 [ 313.604347][T10013] ? ocfs2_block_signals+0x9b/0xe0 [ 313.609537][T10013] ? ocfs2_init_security_get+0x139/0x1a0 [ 313.615240][T10013] ocfs2_mknod+0x140f/0x2300 [ 313.620026][T10013] ? ocfs2_mkdir+0x430/0x430 [ 313.624670][T10013] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 313.630597][T10013] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 313.636561][T10013] ? ocfs2_inode_unlock+0xa5/0x140 [ 313.641705][T10013] ? __lock_acquire+0x7d40/0x7d40 [ 313.646762][T10013] ? __rwlock_init+0x150/0x150 [ 313.651573][T10013] ? do_raw_spin_unlock+0x121/0x230 [ 313.656904][T10013] ? rcu_is_watching+0x15/0xb0 [ 313.661712][T10013] ? ocfs2_lookup+0x494/0x950 [ 313.666417][T10013] ocfs2_create+0x196/0x430 [ 313.671026][T10013] ? ocfs2_update_inode_fsync_trans+0x240/0x240 [ 313.677307][T10013] ? from_kgid+0x16d/0x690 [ 313.681783][T10013] ? ocfs2_lookup+0x950/0x950 [ 313.686522][T10013] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 313.691527][T10013] ? inode_permission+0xf3/0x480 [ 313.696540][T10013] ? bpf_lsm_inode_create+0x9/0x10 [ 313.701797][T10013] ? security_inode_create+0xb7/0x100 [ 313.707225][T10013] ? ocfs2_lookup+0x950/0x950 [ 313.712000][T10013] path_openat+0x12a0/0x3230 [ 313.716749][T10013] ? do_filp_open+0x430/0x430 [ 313.721466][T10013] ? __virt_addr_valid+0x18c/0x540 [ 313.726625][T10013] do_filp_open+0x1f5/0x430 [ 313.731279][T10013] ? vfs_tmpfile+0x490/0x490 [ 313.736042][T10013] ? _raw_spin_unlock+0x28/0x40 [ 313.740931][T10013] ? alloc_fd+0x58f/0x630 [ 313.745306][T10013] do_sys_openat2+0x134/0x1d0 [ 313.750037][T10013] ? do_sys_open+0xe0/0xe0 [ 313.754482][T10013] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 313.760499][T10013] ? lock_chain_count+0x20/0x20 [ 313.765382][T10013] __x64_sys_openat+0x139/0x160 [ 313.770352][T10013] do_syscall_64+0x55/0xa0 [ 313.774801][T10013] ? clear_bhb_loop+0x40/0x90 [ 313.779508][T10013] ? clear_bhb_loop+0x40/0x90 [ 313.784212][T10013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.790185][T10013] RIP: 0033:0x7f3c7a39af79 [ 313.794638][T10013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.814273][T10013] RSP: 002b:00007f3c7b244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 313.822716][T10013] RAX: ffffffffffffffda RBX: 00007f3c7a615fa0 RCX: 00007f3c7a39af79 [ 313.830725][T10013] RDX: 0000000000141042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 313.838749][T10013] RBP: 00007f3c7a4316e0 R08: 0000000000000000 R09: 0000000000000000 [ 313.846757][T10013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.854754][T10013] R13: 00007f3c7a616038 R14: 00007f3c7a615fa0 R15: 00007ffd6f4d2868 [ 313.862761][T10013] [ 314.030862][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 317.540498][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.556883][ T1283] ieee802154 phy1 wpan1: encryption failed: -22