last executing test programs: 6m57.897294368s ago: executing program 3 (id=559): socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x5f}], 0x1}, 0x0) 6m57.69817549s ago: executing program 3 (id=562): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000000480)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000fbff00000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) 6m57.414733255s ago: executing program 3 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 6m57.197719228s ago: executing program 3 (id=566): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x4, 0x339, &(0x7f0000000140)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xee00) 6m56.924386103s ago: executing program 3 (id=568): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) 6m56.479353241s ago: executing program 3 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000012002102000000000000000007"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6m56.101680367s ago: executing program 32 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000012002102000000000000000007"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5m14.593370458s ago: executing program 0 (id=1895): openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x800140) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56) 5m14.488259891s ago: executing program 0 (id=1898): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 5m14.307220803s ago: executing program 0 (id=1901): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x85481, 0x104) ioctl$BTRFS_IOC_DEFRAG(r0, 0x40081271, 0x3) 5m13.962858649s ago: executing program 0 (id=1907): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000064c0)='./bus\x00', 0x28108c0, &(0x7f0000006980)=ANY=[], 0xfe, 0x61cb, &(0x7f0000006c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 5m12.643707301s ago: executing program 0 (id=1918): r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x100) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1000000d}) 5m11.753970706s ago: executing program 0 (id=1930): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000100003"], 0x40}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x754d}], 0x1, 0x10200, &(0x7f0000001bc0)) 5m11.430609071s ago: executing program 33 (id=1930): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000100003"], 0x40}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x754d}], 0x1, 0x10200, &(0x7f0000001bc0)) 4m34.43217693s ago: executing program 1 (id=2274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="33fa2abd7000fcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="140004006361696630000000020000000000000008000500060000000c001780060005"], 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 4m34.290921662s ago: executing program 1 (id=2275): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x9, 0x5, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 4m32.458452193s ago: executing program 5 (id=2287): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, r0, 0x0, 0x3a) 4m32.289253855s ago: executing program 1 (id=2290): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 4m32.201684697s ago: executing program 5 (id=2291): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 4m31.981167091s ago: executing program 1 (id=2294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) 4m31.962937721s ago: executing program 5 (id=2296): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x3e01, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x8ff600000, 0x1000000}], 0x0) 4m31.753810324s ago: executing program 1 (id=2297): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x4000, 0xffff4a9c0080ffff, 0x0) 4m31.576374557s ago: executing program 5 (id=2299): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55d, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4m31.554601227s ago: executing program 1 (id=2300): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfd, 0x6c2, &(0x7f0000001180)="$eJzs3V1v29Ydx/EfJdmS3SEo1iEogjQ+SVbAwTJFkhsHRnZRjqZsbpIokPJmAwOKbrGLIHa2JRmw+CbzzR6A7g3sLsDQi72IArvuu9iuNqDY7jYMGDiQFPVgPThKbGdtvx+jFUX+ec6fpKK/aYmHAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAspz1SqVqqeG1trbNZM564DezJ3mNLE9bm9ONdOLGtD7n4n4lK/5PpZLeTme//Y1+yMX4f9d0OX12WaX4oaTDNy6+efetQi5bf0rCL0OzNvj46eHzP0q7j14gNq+Zm3+dlHuBoA235YW+17Q3XOOFvllbXa3c2qyHpu413HAn7LhN4wRuruMHZtm5YaprayvGLe/4W62NdbvhZjPvfLtWqaya7xXTAy2pHDqbXqPhtTaSmHhxHHPHfPyjNMC1m8bs3d/fXRnI59m4fRwHVU/akjiodlJQrVKrVau1WnX19trtO5VKYWRGJWZVejQSceovWnzBnO4bOPAKcnH9/4slNVRSS1valhn742hdgXw1Jyzvyur/u7fcqf0O1v+sys/1F19SUv+vpM+uTKr/E3IxMskK45ZYE+bP9jOXZGT0WE91qAf6UPva164enULbRmbpVFo5h58NuWrJUyhfnpqykzmmO8doTataVUUfaFN1hTKqy1NDrkLtKFRHbvyKmo+PlitbHfkKZLQsRzdkVNWa1rQiI1dl7cjXllra0Lps/SuKoj3dT/b7Sj+n/PEjryyoOmEjiipkr7td1aZsbbeYF3Ws/v/4Wbp2t/5XqP9fVenroJg+fDYtBvg/EHXP/2e0dDbZAAAAAACAs2Alf323kk/l35EUqe413MrrTgsAAAAAAJwiS1FRl2Wl38rXO7I4/wcAAAAA4MvGSq6xsyQtJl/qt/qXS73IHwHy55AiAAAAAAB4RcmV/1fmpSgZtGJJ1kzn/wAAAAAA4AvgtwNj7BeyMXaj7GP9nKSlvxatT/9RVDBnHbW3v2kd2PES+6AbM/INgE79knWhO1Bv8jAvKXnmuJetbm/dQTB74w5+vnfSWP9WcCyB+fxgAxMSsOKeVwvdZ/pYV9NVrnbHmb93mFOyJO1lse413LLjN+5WZdsXch13u/OLh/d/KQW97dy7v79b/slP9+8luRzFs44O4kafDaWTG78z+rk8ScZbSK65GLfFC6pnXf6u1Vy0kn4r2fbnZR/kBjuadgD6ff5a19Jjdi1KYxcPeyPuW9JSMvhDtZwcsqGtD+asfhbV41s+7kBMyKL0VqEgXU9jri9fTx+y/OJ2clbpW3mpVh49BkNZ1AazOHlfWP8c2RfTspBVivfFSpzFn+OGjmXxw0/TlVdmy2LkiADA67LXr0LJIOYjdTcrD9mb2kvVnZOr+/vD1f3JH6JIOkp+vSh0P5uY2ktJ8Tv6spXUofl0QPfCpTHv6JXyv6Mosi+UNPiO/t8o1auxL1bdjqIoOr6tf+rfA6mb9kgW/4mi6G41qSS/P1ZVn8crPD+wPhnfb9io5eNdeOvJwc+SAfBjH+1+tPuwVltZrbxXqdyuaS75VaH7kBe1BwAw4uR77CQRuSkR1nu6mrZx9d7f302nhire17tfKcjs655uZrcQWBrf6uLA1xBupmet0rXF9HHx0Fx88+6CNBBrFZI7vNyceFaX1NKBdmu92Oy+Q8fPAPuxK2d5CAAAOHfXJtRhaaj+a7j+l4bq/00tpxHLl8aedw/X8u7Zce+UflJs9eTk3z/lnQEAwFeEG3xuLXZ+YwWB1/6gurZWtTubrgl85/sm8NY3XOO1Om7gbNqtDde0A7/jO37DtAMVvQU3NOFWu+0HHVP3A9P2Q287ufO76d76PXSbdqvjOWG74dqhaxy/1bGdjln3Qse0t77b8MJNN0hWDtuu49U9x+54fsuE/lbguGVjQtcdCPTW3VbHq3vxZMu0A69pBzvmB35jq+madTd0Aq/d8dMGs768Vt0PmkmzZUUz3+gQAIAvo8dPDx98uL+/++j4xEJ8ap7OOdKEmNGJ+X6D+d7E695GAAAwrF/AZ1ipdIYJAQAAAAAAAAAAAAAAAAAAAACAESdf0jfjxNy4iwWlbE7x5xe6c/Qr9S8xHGnH0mknNstEbta1sksiDh98NiV4oTcn2/2DMUezdKo3pZfewL99TXojmaN0TuH09+HClIN7FhPf2Uv36OQ9pgl7rNg7FoX4n0M2rvXpZfjwkwmLoiiKpq9eHE5jftoGDk8UJD2af4WtON/3IQDn738BAAD//1ccObY=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/31, 0x1f) getdents(r0, 0xfffffffffffffffd, 0x58) 4m30.869631489s ago: executing program 5 (id=2306): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0xf5, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x6, 0x4}, 0x20) 4m30.19908059s ago: executing program 5 (id=2309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x4, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) 4m29.647560509s ago: executing program 34 (id=2309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x4, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) 4m16.437513287s ago: executing program 35 (id=2300): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696467726f636b706572916964652c00add51ea2b35249a135fa479f9069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f50263af07e2638e5c5522fc046bdeb75ac5ae4dfa74f42b394b1587068ecfa5acd43d2ca29a5d67adb9bfb87ce6ccb85cb9ae05ac0000000000", @ANYRESOCT], 0xfd, 0x6c2, &(0x7f0000001180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/31, 0x1f) getdents(r0, 0xfffffffffffffffd, 0x58) 49.496963125s ago: executing program 4 (id=4204): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0) 49.048223022s ago: executing program 4 (id=4208): unshare(0x22020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000004c00)="b3dc9fe7478480c33fc6be5a279d9eb6", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000004fc0)="06088180b0429ab331ab13f480078d22", 0x10) 48.956077864s ago: executing program 4 (id=4209): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000380)='io.pressure\x00', 0x2, 0x0) pread64(r1, &(0x7f00000003c0)=""/214, 0xd6, 0x5) 48.821119816s ago: executing program 4 (id=4212): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utimes(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={{0x77359400}}) 47.863217922s ago: executing program 4 (id=4224): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r2, 0x90d, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) 47.076479255s ago: executing program 4 (id=4229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) setrlimit(0xf, &(0x7f0000000200)={0xda, 0x101}) 46.848966978s ago: executing program 36 (id=4229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) setrlimit(0xf, &(0x7f0000000200)={0xda, 0x101}) 15.101957091s ago: executing program 2 (id=4586): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f00000002c0)=0x700) rename(&(0x7f0000000200)='./file2\x00', &(0x7f0000000080)='./file1\x00') 14.712808728s ago: executing program 2 (id=4593): r0 = socket$inet6(0xa, 0x802, 0x88) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000003c0)=0x800000001, 0x4) 14.551648121s ago: executing program 2 (id=4598): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xe59}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb2, 0x2, 0x83bb, 0x22dc, 0x6, 0x6}, {0x3, 0x2, 0x5, 0x1, 0x40, 0x2}, 0xff, 0xeb1, 0xa19}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xfea888542bc078f6}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 14.299875995s ago: executing program 2 (id=4603): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 14.120245978s ago: executing program 2 (id=4606): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 13.792326933s ago: executing program 2 (id=4612): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delqdisc={0x1e4, 0x25, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x10, 0x8}, {0xffff, 0xd}}, [@TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1c, 0xfc, 0xffe3, 0x7252, 0x0, 0x2, 0x5, 0x3}}, {0xa, 0x2, [0x32, 0x23, 0x1]}}, {{0x1c, 0x1, {0x3, 0xb1, 0x9, 0xedd, 0x0, 0x91a8, 0x8}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x85, 0x6, 0x81, 0x1, 0x4, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x7, 0x2, 0xecc7, 0x1, 0x5, 0x8d2}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x5, 0x800, 0x6, 0x0, 0x3, 0x3ff}}, {0x4}}]}, @qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40801}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x600}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 13.3633972s ago: executing program 37 (id=4612): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delqdisc={0x1e4, 0x25, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x10, 0x8}, {0xffff, 0xd}}, [@TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1c, 0xfc, 0xffe3, 0x7252, 0x0, 0x2, 0x5, 0x3}}, {0xa, 0x2, [0x32, 0x23, 0x1]}}, {{0x1c, 0x1, {0x3, 0xb1, 0x9, 0xedd, 0x0, 0x91a8, 0x8}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x85, 0x6, 0x81, 0x1, 0x4, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x7, 0x2, 0xecc7, 0x1, 0x5, 0x8d2}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x5, 0x800, 0x6, 0x0, 0x3, 0x3ff}}, {0x4}}]}, @qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40801}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x600}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.830782173s ago: executing program 6 (id=4673): write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) 2.735327675s ago: executing program 9 (id=4613): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\a\x00'], 0x50) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) 2.618855937s ago: executing program 9 (id=4674): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.870596599s ago: executing program 8 (id=4680): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.628292323s ago: executing program 7 (id=4682): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730104000000000095000000000000005e3498cb8e07dd751c57da9e7683df754faadb08c265cbeeb969578cab5136dd4a0e8a7e57b5493e821f6302d2986417b36d7a512abfa6d1d11dc44c50cbfd04eb1d015e99cea9e175b3666ed460d3303a3f2858e24c57d983a3"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.572417934s ago: executing program 7 (id=4683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.510122535s ago: executing program 9 (id=4684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) 1.492292976s ago: executing program 8 (id=4685): unshare(0x22020600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) 1.340274168s ago: executing program 9 (id=4686): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x0, 0x1, 0x49, "210e6e7adefdbb98a6818746fdc00004684df126bafd9e958c032d5279edd419d9e99062c937725afc13b7a98bd49324bb91c20e8ce09d478441c5c72a46856eb80b3690a3f3d9aa99"}, 0x0, 0x0, 0x0, 0x0}) 1.339893298s ago: executing program 7 (id=4687): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 1.306544719s ago: executing program 8 (id=4688): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nls={'nls', 0x3d, 'cp437'}}]}, 0x1, 0x5d4, &(0x7f0000001980)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000000100)=""/173, 0xad) 1.292671999s ago: executing program 6 (id=4689): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x803, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) 1.172477371s ago: executing program 8 (id=4690): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.171685061s ago: executing program 7 (id=4691): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) close_range(r0, 0xffffffffffffffff, 0x0) 1.072466523s ago: executing program 6 (id=4692): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8000000) 1.039547143s ago: executing program 7 (id=4693): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000040)={[{@noquota}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@errors_continue}, {@errors_continue}, {}, {@uid}, {@quota}, {@uid}, {@usrquota}]}, 0x1, 0x614f, &(0x7f000000ccc0)="$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") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 426.732694ms ago: executing program 6 (id=4694): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000b00)={@random="9139a817b9cb", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xdd, 0x100, @void}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/211, 0x45}, {0x0}], 0x2}, 0x7ff}], 0x1, 0x400100ea, 0x0) 328.438575ms ago: executing program 8 (id=4695): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000009c0)=ANY=[], 0x1, 0xc36, &(0x7f0000002540)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000380)=""/200, 0xc8) getdents(r0, 0x0, 0x0) 217.978057ms ago: executing program 6 (id=4696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e002000028008000100100000000a0004000000150000000000080003000000000008000500", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 98.302419ms ago: executing program 8 (id=4697): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r2, 0x1a3, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x8800) 405.92µs ago: executing program 6 (id=4698): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) 0s ago: executing program 7 (id=4699): syz_read_part_table(0x405b, &(0x7f0000004080)="$eJzszjFKA1EUBdCbxMGvDARBK0EM9jJ2VrOL6SVrsFZxdmIZXIArsnQLIyhGEkW0CKicU73P5b1/wx9RltMoycP8fi/J8Sx907yGW2/5zvtSc5Zqt4xTJ7n8eLNbbL43AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwS41XXtdraVlO88P0V23O66QcTJPbSar2aJT9ZHb6yd1J8phklOQpSTfdUH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J+5WHltr8f1F6t3J+nb6mW8STIMw/Dtb0vSLX7SE57ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKMCAAD//wx/Es8=") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f218e929 code=0x7ffc0000 [ 445.808720][ T28] audit: type=1326 audit(446.059:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f63f218e929 code=0x7ffc0000 [ 445.860418][ T28] audit: type=1326 audit(446.059:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.6.3555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f63f218e929 code=0x7ffc0000 [ 446.435874][T15165] loop7: detected capacity change from 0 to 32768 [ 446.491578][T15165] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 446.595713][T15165] XFS (loop7): Ending clean mount [ 446.874539][T11662] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 446.891294][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3573'. [ 446.900956][T15203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3573'. [ 447.689318][T11992] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 447.769224][T15233] block nbd1: server does not support multiple connections per device. [ 447.777831][T15233] block nbd1: shutting down sockets [ 447.898951][T11992] usb 3-1: Using ep0 maxpacket: 16 [ 447.906089][T11992] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.927642][T11992] usb 3-1: config 0 interface 0 has no altsetting 0 [ 447.934948][T11992] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 447.957022][T11992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.974433][T11992] usb 3-1: config 0 descriptor?? [ 448.019005][ T23] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 448.058222][T15245] kernel read not supported for file /file1 (pid: 15245 comm: syz.4.3592) [ 448.232374][ T23] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 448.242541][ T23] usb 7-1: config 0 interface 0 has no altsetting 0 [ 448.279077][ T23] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 448.290019][ T23] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 448.298267][ T23] usb 7-1: Product: syz [ 448.302781][ T23] usb 7-1: Manufacturer: syz [ 448.307451][ T23] usb 7-1: SerialNumber: syz [ 448.324328][ T23] usb 7-1: config 0 descriptor?? [ 448.345289][ T23] usb 7-1: selecting invalid altsetting 0 [ 448.418567][T11992] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 448.607216][T15258] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 448.618152][ T9] usb 7-1: USB disconnect, device number 9 [ 448.637506][T15258] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 448.901738][T11992] usb 3-1: USB disconnect, device number 23 [ 449.028768][T15261] loop4: detected capacity change from 0 to 32768 [ 449.042764][T15261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3599 (15261) [ 449.057952][T15261] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 449.069124][T15261] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 449.079496][T15261] BTRFS info (device loop4): setting nodatacow, compression disabled [ 449.088608][T15261] BTRFS info (device loop4): max_inline at 0 [ 449.094652][T15261] BTRFS info (device loop4): turning off barriers [ 449.101255][T15261] BTRFS info (device loop4): force zlib compression, level 3 [ 449.109552][T15261] BTRFS info (device loop4): doing ref verification [ 449.116233][T15261] BTRFS info (device loop4): force clearing of disk cache [ 449.123472][T15261] BTRFS info (device loop4): enabling ssd optimizations [ 449.130738][T15261] BTRFS info (device loop4): max_inline at 4096 [ 449.136989][T15261] BTRFS info (device loop4): using free space tree [ 449.165683][T15261] BTRFS info (device loop4): auto enabling async discard [ 449.182574][T15261] BTRFS info (device loop4): rebuilding free space tree [ 449.272057][ T7257] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 450.128060][ T5760] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 450.255389][T15296] loop4: detected capacity change from 0 to 32768 [ 450.322102][ T5760] usb 3-1: Using ep0 maxpacket: 8 [ 450.343919][ T5760] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 450.374156][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.397899][ T5760] usb 3-1: Product: syz [ 450.402146][ T5760] usb 3-1: Manufacturer: syz [ 450.406789][ T5760] usb 3-1: SerialNumber: syz [ 450.438823][ T5760] usb 3-1: config 0 descriptor?? [ 450.678445][ T5760] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 450.687860][ T5760] gspca_sunplus: reg_w_riv err -71 [ 450.693108][ T5760] sunplus: probe of 3-1:0.0 failed with error -71 [ 450.717759][ T5760] usb 3-1: USB disconnect, device number 24 [ 450.917621][ T5857] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 450.988756][T15308] loop6: detected capacity change from 0 to 2048 [ 451.001790][T15308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 451.063031][T11417] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.145487][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 451.158232][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.177027][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.190644][ T5857] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 451.199891][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.210687][ T5857] usb 5-1: config 0 descriptor?? [ 451.219246][ T5857] hub 5-1:0.0: USB hub found [ 451.262908][T15316] loop7: detected capacity change from 0 to 512 [ 451.300277][T15316] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 451.423711][ T5857] hub 5-1:0.0: 1 port detected [ 451.437596][T11662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 451.837757][ T5857] usb 5-1: USB disconnect, device number 19 [ 452.883482][T15360] loop6: detected capacity change from 0 to 164 [ 452.925893][T15364] loop7: detected capacity change from 0 to 512 [ 452.995631][T15364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.091876][T11662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.394708][T15379] netlink: 'syz.7.3642': attribute type 32 has an invalid length. [ 453.692811][T15391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3646'. [ 453.781388][T15393] sch_tbf: burst 4398 is lower than device lo mtu (39799) ! [ 454.687348][T15409] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.695160][T15409] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.973465][T15423] loop7: detected capacity change from 0 to 256 [ 455.046819][T15423] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 455.645629][T11992] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 455.849822][T15446] loop7: detected capacity change from 0 to 32768 [ 455.861431][T11992] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 455.871010][T11992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.879565][T11992] usb 5-1: Product: syz [ 455.883790][T11992] usb 5-1: Manufacturer: syz [ 455.888968][T11992] usb 5-1: SerialNumber: syz [ 455.896467][T11992] usb 5-1: config 0 descriptor?? [ 455.905393][T15446] XFS (loop7): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 455.966166][T15446] XFS (loop7): Ending clean mount [ 456.031857][T11662] XFS (loop7): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 456.330134][T11992] usb 5-1: Firmware: major: 0, minor: 1, hardware type: ATUSB (1) [ 456.350173][T11992] usb 5-1: Firmware version (0.1) predates our first public release. [ 456.400491][T11992] usb 5-1: Please update to version 0.2 or newer [ 456.627875][T11992] usb 5-1: USB disconnect, device number 20 [ 457.387588][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 457.513394][T15477] loop6: detected capacity change from 0 to 32768 [ 457.554148][T15477] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 457.571059][T15477] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 457.645767][T15477] (syz.6.3679,15477,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 457.767725][T11417] ocfs2: Unmounting device (7,6) on (node local) [ 458.200210][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3694'. [ 458.220352][T15512] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.249083][T15514] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3695'. [ 458.291771][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.315651][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.335347][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.545431][ T5857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 458.705047][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 458.738128][T15533] loop6: detected capacity change from 0 to 128 [ 458.771400][T15533] FAT-fs (loop6): bogus number of reserved sectors [ 458.789501][T15533] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 458.823552][T15533] FAT-fs (loop6): Can't find a valid FAT filesystem [ 458.924639][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 458.936636][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 458.946451][ T9] usb 5-1: config 9 has an invalid interface number: 4 but max is 0 [ 458.954704][ T9] usb 5-1: config 9 has no interface number 0 [ 458.971724][ T9] usb 5-1: config 9 interface 4 has no altsetting 0 [ 458.987575][ T9] usb 5-1: New USB device found, idVendor=2cb7, idProduct=0104, bcdDevice=43.2f [ 459.007825][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.024698][ T9] usb 5-1: Product: syz [ 459.028970][ T9] usb 5-1: Manufacturer: syz [ 459.034157][ T9] usb 5-1: SerialNumber: syz [ 459.294873][ T5857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.489987][T15534] loop7: detected capacity change from 0 to 40427 [ 459.504861][T15534] F2FS-fs (loop7): invalid crc value [ 459.515941][T15534] F2FS-fs (loop7): Found nat_bits in checkpoint [ 459.595509][T15534] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 459.835360][ T9] usb 5-1: USB disconnect, device number 21 [ 460.145545][ T5779] block nbd1: Receive control failed (result -32) [ 460.147427][ T5783] block nbd1: Receive control failed (result -32) [ 460.224585][T15563] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 460.331273][T15571] loop6: detected capacity change from 0 to 256 [ 460.358913][T15571] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 460.843973][T11992] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 461.043854][T11992] usb 3-1: Using ep0 maxpacket: 32 [ 461.054988][T11992] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 461.063150][T11992] usb 3-1: config 0 has no interface number 0 [ 461.087109][T11992] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 461.105638][T11992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.124016][T11992] usb 3-1: Product: syz [ 461.128835][T11992] usb 3-1: Manufacturer: syz [ 461.133477][T11992] usb 3-1: SerialNumber: syz [ 461.158489][T11992] usb 3-1: config 0 descriptor?? [ 461.176298][T11992] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 461.203593][T15576] loop7: detected capacity change from 0 to 40427 [ 461.231337][T15576] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff [ 461.242265][T15576] F2FS-fs (loop7): Image doesn't support compression [ 461.258812][T15576] F2FS-fs (loop7): heap/no_heap options were deprecated [ 461.269522][T15576] F2FS-fs (loop7): Image doesn't support compression [ 461.291895][T15576] F2FS-fs (loop7): invalid crc value [ 461.311826][T15576] F2FS-fs (loop7): Found nat_bits in checkpoint [ 461.404095][T11992] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 461.426569][T11992] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 461.461109][T15576] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 461.578493][T11662] syz-executor: attempt to access beyond end of device [ 461.578493][T11662] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 461.624178][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 105 [ 461.643756][T11662] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 461.834909][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 461.842912][T11992] usb 3-1: USB disconnect, device number 25 [ 461.855039][T11992] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 461.890257][T11992] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 461.912352][T11992] quatech2 3-1:0.51: device disconnected [ 462.093892][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.160643][T15619] loop4: detected capacity change from 0 to 1024 [ 462.226034][ T6134] hfsplus: b-tree write err: -5, ino 4 [ 462.684813][T15633] overlayfs: failed to resolve './file0': -2 [ 462.776254][T15639] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 462.936859][T15643] loop6: detected capacity change from 0 to 128 [ 462.965132][T15643] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 463.037311][T15643] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 463.230974][T15627] loop4: detected capacity change from 0 to 40427 [ 463.245648][T15627] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 463.277284][T15627] F2FS-fs (loop4): invalid crc value [ 463.312245][T15627] F2FS-fs (loop4): Found nat_bits in checkpoint [ 463.414228][T15627] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 463.492358][ T7257] syz-executor: attempt to access beyond end of device [ 463.492358][ T7257] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 463.515520][ T7257] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 463.756875][T15668] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3768'. [ 464.137549][T15678] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3766'. [ 464.169101][T15678] nbd: socks must be embedded in a SOCK_ITEM attr [ 464.400224][T15689] loop4: detected capacity change from 0 to 16 [ 464.410785][T15689] erofs: (device loop4): mounted with root inode @ nid 36. [ 464.867813][T15708] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3779'. [ 464.879512][T15708] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3779'. [ 464.898676][T15706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3779'. [ 464.910408][T15708] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3779'. [ 465.004580][T15713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3781'. [ 465.160524][T15719] loop7: detected capacity change from 0 to 16 [ 465.169608][T15719] erofs: (device loop7): mounted with root inode @ nid 36. [ 466.047795][T15737] loop6: detected capacity change from 0 to 32768 [ 466.087532][T15737] XFS (loop6): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 466.146860][T15737] XFS (loop6): Ending clean mount [ 466.365902][T11417] XFS (loop6): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 466.485279][T15764] ax25_connect(): syz.4.3799 uses autobind, please contact jreuter@yaina.de [ 466.538927][T15764] ax25_connect(): syz.4.3799 uses autobind, please contact jreuter@yaina.de [ 467.559218][T15774] loop6: detected capacity change from 0 to 32768 [ 467.579368][T15774] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 467.796407][T15774] XFS (loop6): Ending clean mount [ 467.834201][T15774] XFS (loop6): Quotacheck needed: Please wait. [ 467.914636][T15774] XFS (loop6): Quotacheck: Done. [ 468.036689][T11417] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 468.564569][T15816] loop6: detected capacity change from 0 to 16 [ 468.596057][T15816] erofs: (device loop6): mounted with root inode @ nid 36. [ 469.729928][T15836] loop4: detected capacity change from 0 to 32768 [ 469.739342][T15843] loop6: detected capacity change from 0 to 8192 [ 469.771745][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 469.771763][ T28] audit: type=1800 audit(470.317:263): pid=15843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3838" name="file1" dev="loop6" ino=1048688 res=0 errno=0 [ 469.782374][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.840978][T15836] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 469.975613][T15836] XFS (loop4): Ending clean mount [ 470.219745][ T7257] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 470.361134][T15856] loop6: detected capacity change from 0 to 2048 [ 470.409121][T15858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3831'. [ 470.460330][T15856] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.514548][T11992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.531683][T11992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.542204][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.563041][ T28] audit: type=1800 audit(471.127:264): pid=15856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3840" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 470.753131][ T5818] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.772323][T15864] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 470.862541][ T5818] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.876012][T11417] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 471.150802][T15868] loop4: detected capacity change from 0 to 32768 [ 471.167626][T15868] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 471.180830][T15868] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 471.230104][T15868] (syz.4.3841,15868,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 471.300346][ T7257] ocfs2: Unmounting device (7,4) on (node local) [ 471.336412][T15874] loop7: detected capacity change from 0 to 1024 [ 471.346035][T15874] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 471.404911][T15874] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.533715][T11662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.776798][T15889] loop6: detected capacity change from 0 to 64 [ 471.836577][T15889] hfs: unable to locate alternate MDB [ 471.851968][T15889] hfs: continuing without an alternate MDB [ 471.857843][T15891] lo: left promiscuous mode [ 471.858893][T15891] tunl0: left promiscuous mode [ 471.890836][T15891] gre0: left promiscuous mode [ 471.917541][ T28] audit: type=1800 audit(472.477:265): pid=15889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3844" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 471.939838][T15891] gretap0: left promiscuous mode [ 471.972892][T15891] erspan0: left promiscuous mode [ 471.978756][T15891] ip_vti0: left promiscuous mode [ 472.011147][T15891] ip6_vti0: left promiscuous mode [ 472.035674][T15891] sit0: left promiscuous mode [ 472.041302][T15891] ip6tnl0: left promiscuous mode [ 472.073185][T15891] ip6gre0: left promiscuous mode [ 472.079134][T15891] syz_tun: left promiscuous mode [ 472.103635][T15891] ip6gretap0: left promiscuous mode [ 472.109758][T15891] bridge0: left promiscuous mode [ 472.142823][T15891] vcan0: left promiscuous mode [ 472.148103][T15891] bond0: left promiscuous mode [ 472.158245][T15891] bond_slave_0: left promiscuous mode [ 472.192597][T15891] bond_slave_1: left promiscuous mode [ 472.202411][T15891] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 472.731971][T11992] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 472.761876][T15910] loop7: detected capacity change from 0 to 32768 [ 472.775415][T15910] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 472.791337][T15910] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 472.837199][T15910] (syz.7.3851,15910,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 472.899187][T11662] ocfs2: Unmounting device (7,7) on (node local) [ 472.941950][T11992] usb 7-1: Using ep0 maxpacket: 8 [ 472.950236][T11992] usb 7-1: unable to get BOS descriptor or descriptor too short [ 472.959774][T11992] usb 7-1: config 9 has an invalid interface number: 4 but max is 0 [ 472.968714][T11992] usb 7-1: config 9 has no interface number 0 [ 472.975230][T11992] usb 7-1: config 9 interface 4 has no altsetting 0 [ 472.986112][T11992] usb 7-1: New USB device found, idVendor=2cb7, idProduct=0104, bcdDevice=43.2f [ 472.995518][T11992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.003711][T11992] usb 7-1: Product: syz [ 473.008040][T11992] usb 7-1: Manufacturer: syz [ 473.012835][T11992] usb 7-1: SerialNumber: syz [ 473.787826][T11992] usb 7-1: USB disconnect, device number 10 [ 473.937893][T15936] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 474.086566][ T5783] block nbd2: Receive control failed (result -32) [ 474.100037][ T5779] block nbd2: Receive control failed (result -32) [ 474.426060][T15950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3867'. [ 474.448334][T15950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3867'. [ 474.464805][T15947] loop4: detected capacity change from 0 to 4096 [ 474.481081][T15947] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 474.493376][T15950] erspan0: entered promiscuous mode [ 474.505343][T15950] gretap0: entered promiscuous mode [ 474.514169][T15950] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 474.525486][T15950] Cannot create hsr debugfs directory [ 474.581882][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 474.883839][T15961] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.891086][T15961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.898775][T15961] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.906040][T15961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.929594][T15961] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 474.972052][ T5818] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 475.162258][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 475.172514][ T5818] usb 3-1: unable to get BOS descriptor or descriptor too short [ 475.190006][ T5818] usb 3-1: config 9 has an invalid interface number: 4 but max is 0 [ 475.199544][ T5818] usb 3-1: config 9 has no interface number 0 [ 475.216049][ T5818] usb 3-1: config 9 interface 4 has no altsetting 0 [ 475.235104][ T5818] usb 3-1: New USB device found, idVendor=2cb7, idProduct=0104, bcdDevice=43.2f [ 475.249417][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.263760][ T5818] usb 3-1: Product: syz [ 475.270353][ T5818] usb 3-1: Manufacturer: syz [ 475.277508][ T5818] usb 3-1: SerialNumber: syz [ 475.288159][T15971] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 476.055658][ T5818] usb 3-1: USB disconnect, device number 26 [ 476.659059][ T5783] block nbd3: Receive control failed (result -32) [ 476.673090][ T5779] block nbd3: Receive control failed (result -32) [ 477.516379][T16014] loop4: detected capacity change from 0 to 40427 [ 477.545204][T16014] F2FS-fs (loop4): invalid crc value [ 477.563155][T16014] F2FS-fs (loop4): Found nat_bits in checkpoint [ 477.656275][T16014] F2FS-fs (loop4): Start checkpoint disabled! [ 477.669569][T16014] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 477.930716][T16031] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 478.126637][ T6134] kworker/u4:20: attempt to access beyond end of device [ 478.126637][ T6134] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 478.147282][ T6134] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 478.159436][ T6134] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 480.022530][T16072] loop7: detected capacity change from 0 to 4096 [ 480.032687][T16072] ntfs3: loop7: Different NTFS sector size (1024) and media sector size (512). [ 482.537836][ T5779] block nbd4: Receive control failed (result -32) [ 482.552034][ T5783] block nbd4: Receive control failed (result -32) [ 482.716982][T16104] loop4: detected capacity change from 0 to 1764 [ 483.108745][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3943'. [ 483.211099][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 483.340962][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 483.516478][ T28] audit: type=1326 audit(484.078:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16125 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 483.562421][ T28] audit: type=1326 audit(484.108:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16125 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 483.603323][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 483.611797][ T28] audit: type=1326 audit(484.108:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16125 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 483.639968][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.656022][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 483.662918][ T28] audit: type=1326 audit(484.108:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16125 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 483.689452][ T28] audit: type=1326 audit(484.108:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16125 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 483.692945][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 483.722399][ T28] audit: type=1326 audit(484.108:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16125 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 483.747811][ T9] usb 5-1: Product: syz [ 483.761054][ T9] usb 5-1: Manufacturer: syz [ 483.765766][ T9] usb 5-1: SerialNumber: syz [ 483.787687][ T9] usb 5-1: config 0 descriptor?? [ 483.814298][ T9] usb 5-1: selecting invalid altsetting 0 [ 483.817447][ T28] audit: type=1326 audit(484.108:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16125 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 483.888075][ T28] audit: type=1326 audit(484.108:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16125 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9308f858e7 code=0x7ffc0000 [ 483.927440][ T28] audit: type=1326 audit(484.108:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16125 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9308f2ab19 code=0x7ffc0000 [ 483.970700][ T28] audit: type=1326 audit(484.108:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16125 comm="syz.7.3946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 483.997561][T16131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3948'. [ 484.190028][ T23] usb 5-1: USB disconnect, device number 22 [ 484.490934][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 484.846452][T16142] loop6: detected capacity change from 0 to 32768 [ 484.892440][T16142] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 485.036811][T16161] loop4: detected capacity change from 0 to 1024 [ 485.065756][T16142] XFS (loop6): Ending clean mount [ 485.084456][T16142] XFS (loop6): Quotacheck needed: Please wait. [ 485.112564][ T6122] XFS (loop6): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 485.126720][ T6122] XFS (loop6): Unmount and run xfs_repair [ 485.133233][ T6122] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 485.146720][ T6122] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 485.156032][ T6122] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 485.165132][ T6122] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 485.175318][ T6122] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 485.184383][ T6122] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 485.195568][T16161] hfsplus: catalog searching failed [ 485.202511][ T6122] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 485.229542][ T6122] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 485.240818][ T6122] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 485.260507][ T6122] XFS (loop6): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 485.279039][T16142] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 485.314302][ T6122] hfsplus: b-tree write err: -5, ino 3 [ 485.408230][T16142] XFS (loop6): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 485.424398][T16142] XFS (loop6): Unmount and run xfs_repair [ 485.430186][T16142] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 485.437794][T16142] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 485.447504][T16142] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 485.469702][T16142] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 485.487285][T16142] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 485.496906][T16142] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 485.506361][T16142] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 485.517860][T16142] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 485.544138][T16142] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 485.558383][T16142] XFS (loop6): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 485.582615][T16142] XFS (loop6): page discard on page ffffea00005d9900, inode 0x2446, pos 2048. [ 485.620072][ T9] loop6: writeback error on inode 9286, offset 0, sector 18692 [ 485.740625][T11417] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 486.114879][T16173] loop6: detected capacity change from 0 to 512 [ 486.132962][T16173] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 486.148059][T16173] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 486.159359][T16173] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 486.171139][T16173] EXT4-fs (loop6): 1 truncate cleaned up [ 486.178077][T16173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.199236][T16173] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 486.253684][T11417] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.387964][T16183] loop7: detected capacity change from 0 to 256 [ 486.419042][T16183] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e2c, utbl_chksum : 0xe619d30d) [ 487.430504][T16190] loop7: detected capacity change from 0 to 32768 [ 487.496881][T16190] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 487.640406][T16189] loop4: detected capacity change from 0 to 40427 [ 487.701470][T16189] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 487.710037][T16189] F2FS-fs (loop4): Image doesn't support compression [ 487.750669][T16189] F2FS-fs (loop4): heap/no_heap options were deprecated [ 487.767947][T16189] F2FS-fs (loop4): Image doesn't support compression [ 487.775521][T16190] XFS (loop7): Ending clean mount [ 487.793197][T16190] XFS (loop7): Quotacheck needed: Please wait. [ 487.818762][T16189] F2FS-fs (loop4): invalid crc value [ 487.842593][ T9] XFS (loop7): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 487.856700][T16189] F2FS-fs (loop4): Found nat_bits in checkpoint [ 487.870906][ T9] XFS (loop7): Unmount and run xfs_repair [ 487.894037][ T9] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 487.909878][ T9] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 487.919367][ T9] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 487.928641][ T9] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 487.939783][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 487.956079][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 487.972398][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 487.980891][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 487.991808][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 487.999327][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 488.003559][T16189] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 488.011283][ T9] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 488.023188][ T9] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 488.032787][ T9] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 488.042396][ T9] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 488.051660][ T9] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 488.061126][ T11] XFS (loop7): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 488.086090][T16190] XFS (loop7): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 488.268616][ T9] XFS (loop7): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 488.307888][ T9] XFS (loop7): Unmount and run xfs_repair [ 488.315289][ T7257] syz-executor: attempt to access beyond end of device [ 488.315289][ T7257] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 488.349027][ T9] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 488.360721][ T7257] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 488.367904][ T9] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 488.389990][ T9] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 488.400778][ T9] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 488.409672][ T9] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 488.419740][ T9] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 488.428790][ T9] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 488.438161][ T9] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 488.447264][ T9] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 488.458038][T16190] XFS (loop7): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 488.521621][T16190] XFS (loop7): page discard on page ffffea0001290380, inode 0x2446, pos 2048. [ 488.575246][ T9] loop7: writeback error on inode 9286, offset 0, sector 18692 [ 488.655318][T16209] chnl_net:caif_netlink_parms(): no params data found [ 488.839526][T11662] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 488.939884][T16209] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.000739][T16209] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.009623][T16209] bridge_slave_0: entered allmulticast mode [ 489.052275][T16209] bridge_slave_0: entered promiscuous mode [ 489.072553][T16209] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.079745][T16209] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.118892][T16209] bridge_slave_1: entered allmulticast mode [ 489.127331][T16209] bridge_slave_1: entered promiscuous mode [ 489.307982][T16209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.349777][T16209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.476430][T16209] team0: Port device team_slave_0 added [ 489.516038][T16209] team0: Port device team_slave_1 added [ 489.627943][T16209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.637077][T16209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.665473][T16209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.678378][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3987'. [ 489.695561][T16209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.711947][T16209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.742548][T16209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.764853][T16250] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 489.904507][T16209] hsr_slave_0: entered promiscuous mode [ 489.933876][T16209] hsr_slave_1: entered promiscuous mode [ 489.951223][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 489.951238][ T28] audit: type=1326 audit(490.509:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.7.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 489.988228][T16209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.008502][T16209] Cannot create hsr debugfs directory [ 490.033988][ T28] audit: type=1326 audit(490.549:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.7.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 490.090135][ T28] audit: type=1326 audit(490.559:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.7.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 490.122379][ T5779] Bluetooth: hci2: command tx timeout [ 490.157596][ T28] audit: type=1326 audit(490.569:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.7.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 490.255887][ T28] audit: type=1326 audit(490.569:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.7.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 490.309285][ T28] audit: type=1326 audit(490.569:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.7.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 490.344642][ T28] audit: type=1326 audit(490.569:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.7.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 490.442672][ T28] audit: type=1326 audit(490.569:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.7.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 490.510738][ T28] audit: type=1326 audit(490.569:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.7.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 490.565507][ T28] audit: type=1326 audit(490.569:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16254 comm="syz.7.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9308f8e929 code=0x7ffc0000 [ 490.634712][T16209] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.700403][T16251] loop6: detected capacity change from 0 to 40427 [ 490.853381][T16209] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.039801][T16209] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.221095][T16209] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.438233][T16267] loop4: detected capacity change from 0 to 32768 [ 491.527337][T16267] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 491.672894][T16267] XFS (loop4): Ending clean mount [ 491.714867][T16209] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 491.785656][T16209] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 491.813745][T16292] loop7: detected capacity change from 0 to 64 [ 491.823303][T16209] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 491.836882][T16209] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 491.844245][T16292] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 491.892608][ T7257] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 492.084649][T16209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.154115][T16209] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.181820][ T5779] Bluetooth: hci2: command tx timeout [ 492.191948][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.199268][ T6134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.240016][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.247275][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.517999][T16309] loop4: detected capacity change from 0 to 736 [ 492.667581][T16209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.838161][T16209] veth0_vlan: entered promiscuous mode [ 492.866364][T16209] veth1_vlan: entered promiscuous mode [ 492.955568][T16209] veth0_macvtap: entered promiscuous mode [ 493.015539][T16209] veth1_macvtap: entered promiscuous mode [ 493.070886][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.090197][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.103745][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.121407][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.137525][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.148215][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.182346][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.203343][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.233727][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.244650][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.257859][T16209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.275807][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.307085][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.323303][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.334131][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.344274][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.357215][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.378231][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.390626][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.407379][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.421868][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.434460][T16209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.460903][T16329] netlink: 'syz.7.4015': attribute type 9 has an invalid length. [ 493.468712][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4015'. [ 493.501556][T16209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.510334][T16209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.525903][T16209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.537260][T16209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.722521][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4018'. [ 493.738471][T16340] loop6: detected capacity change from 0 to 256 [ 493.808653][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.839012][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.872165][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.880066][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.250588][ T5779] Bluetooth: hci2: command tx timeout [ 494.669194][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4032'. [ 495.389462][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4045'. [ 495.455865][T16401] loop6: detected capacity change from 0 to 512 [ 495.525190][T16402] loop4: detected capacity change from 0 to 4096 [ 495.577233][T16402] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 495.667333][ T28] audit: type=1800 audit(496.219:289): pid=16402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4046" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 495.808428][T16410] loop4: detected capacity change from 0 to 1024 [ 495.816828][T16410] hfsplus: unable to parse mount options [ 495.880845][ T5760] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 495.920534][ T23] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 496.065067][ T5760] usb 7-1: Using ep0 maxpacket: 8 [ 496.077097][ T5760] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 496.086507][ T5760] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.095089][ T5760] usb 7-1: Product: syz [ 496.099614][ T5760] usb 7-1: Manufacturer: syz [ 496.104643][ T5760] usb 7-1: SerialNumber: syz [ 496.115583][ T5760] usb 7-1: config 0 descriptor?? [ 496.130511][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 496.140718][ T5811] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 496.141190][ T23] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 496.163387][ T23] usb 3-1: config 0 has no interface number 0 [ 496.176200][ T23] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 496.186238][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.195060][ T23] usb 3-1: Product: syz [ 496.199261][ T23] usb 3-1: Manufacturer: syz [ 496.203968][ T23] usb 3-1: SerialNumber: syz [ 496.211670][ T23] usb 3-1: config 0 descriptor?? [ 496.219586][ T23] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 496.320754][ T5811] usb 5-1: Using ep0 maxpacket: 32 [ 496.329101][ T5811] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 496.340939][ T5760] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 496.347346][ T5811] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 496.348165][ T5779] Bluetooth: hci2: command tx timeout [ 496.356589][ T5811] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 496.372016][ T5811] usb 5-1: config 1 has no interface number 0 [ 496.378208][ T5811] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 496.391125][ T5811] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 496.405715][ T5811] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 496.415555][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.433890][ T23] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 496.447206][ T23] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 496.448034][ T5811] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 496.674289][ T5811] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 496.839041][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 496.848041][T11992] usb 3-1: USB disconnect, device number 27 [ 496.861161][T11992] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 496.879444][T11992] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 496.892545][T11992] quatech2 3-1:0.51: device disconnected [ 496.946456][ T5760] gspca_sunplus: reg_w_riv err -71 [ 496.953064][ T5760] sunplus: probe of 7-1:0.0 failed with error -71 [ 496.962219][ T5760] usb 7-1: USB disconnect, device number 11 [ 497.105788][ T5811] usb 5-1: USB disconnect, device number 23 [ 497.112999][ T5811] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 497.756905][T16428] loop4: detected capacity change from 0 to 64 [ 497.778309][T16428] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 498.143697][T16439] loop4: detected capacity change from 0 to 512 [ 498.162047][T16439] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 498.197532][T16439] EXT4-fs (loop4): 1 truncate cleaned up [ 498.201483][T16441] sp0: Synchronizing with TNC [ 498.205405][T16439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.307701][ T7257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.352739][T16447] loop7: detected capacity change from 0 to 2048 [ 498.397826][T16447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.413702][T16451] loop4: detected capacity change from 0 to 512 [ 498.473827][T16447] EXT4-fs error (device loop7): ext4_ext_precache:627: inode #2: comm syz.7.4066: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 498.475458][T16451] EXT4-fs (loop4): 1 orphan inode deleted [ 498.498843][ T1081] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 498.501901][T16451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.560823][ T1081] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:6: Failed to release dquot type 1 [ 498.578310][T16447] EXT4-fs (loop7): Remounting filesystem read-only [ 498.626520][T11662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.697595][ T28] audit: type=1800 audit(499.239:290): pid=16451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4067" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 498.783703][ T7257] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.824413][ T3431] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 498.845665][ T3431] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:9: Failed to release dquot type 1 [ 498.940139][T16465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.182572][T16478] batadv_slave_1: entered promiscuous mode [ 499.231556][T16477] batadv_slave_1: left promiscuous mode [ 499.438211][T16490] loop7: detected capacity change from 0 to 2048 [ 499.470682][T16490] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 499.490810][T16490] UDF-fs: Scanning with blocksize 512 failed [ 499.529981][T16490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 499.850505][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 500.320452][ T5818] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 500.347140][T16502] loop7: detected capacity change from 0 to 32768 [ 500.382909][T16502] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 500.552391][ T5818] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 500.573393][ T5818] usb 3-1: config 0 has no interface number 0 [ 500.595134][ T5818] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 500.604996][T16502] XFS (loop7): Ending clean mount [ 500.612715][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.628367][ T5818] usb 3-1: Product: syz [ 500.632815][ T5818] usb 3-1: Manufacturer: syz [ 500.637558][ T5818] usb 3-1: SerialNumber: syz [ 500.653638][T16502] XFS (loop7): Quotacheck needed: Please wait. [ 500.664934][ T5818] usb 3-1: config 0 descriptor?? [ 500.747812][T16502] XFS (loop7): Quotacheck: Done. [ 500.779626][T16502] XFS (loop7): User initiated shutdown received. [ 500.788650][T16502] XFS (loop7): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 500.802560][T16502] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 500.842498][T11662] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 500.906586][ T5818] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 500.947991][ T5818] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 500.965073][ T5818] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 500.977795][ T5818] usb 3-1: media controller created [ 501.071926][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.146665][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.154152][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.666437][T16550] loop7: detected capacity change from 0 to 32768 [ 501.707212][T16550] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 501.802387][T11662] ocfs2: Unmounting device (7,7) on (node local) [ 502.136420][T16563] loop7: detected capacity change from 0 to 1024 [ 502.145058][T16563] EXT4-fs: Ignoring removed oldalloc option [ 502.153846][T16563] EXT4-fs: Ignoring removed bh option [ 502.162205][T16563] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 502.180368][ T5818] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 502.222082][T16563] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.273739][ T5818] usb 3-1: USB disconnect, device number 28 [ 502.389143][T11662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.877537][T16570] loop6: detected capacity change from 0 to 32768 [ 504.065291][T16607] loop7: detected capacity change from 0 to 8192 [ 504.362028][T16616] bridge_slave_0: default FDB implementation only supports local addresses [ 505.016973][T16619] loop6: detected capacity change from 0 to 32768 [ 505.162279][T16638] netlink: 'syz.2.4145': attribute type 12 has an invalid length. [ 505.190273][T16638] netlink: 'syz.2.4145': attribute type 29 has an invalid length. [ 505.200167][T16638] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4145'. [ 505.219524][T16638] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4145'. [ 505.832428][T16657] wireguard: wg1: Could not create IPv4 socket [ 506.074536][T16644] loop7: detected capacity change from 0 to 32768 [ 506.174590][T16644] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 506.177150][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4155'. [ 506.301901][ T28] audit: type=1800 audit(506.849:291): pid=16644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4148" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 506.435214][T16665] loop6: detected capacity change from 0 to 1764 [ 506.762582][T11662] ocfs2: Unmounting device (7,7) on (node local) [ 507.350338][ T5825] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 507.387796][T16698] loop6: detected capacity change from 0 to 4096 [ 507.514069][T16703] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4173'. [ 507.570308][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 507.577321][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.590638][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.600843][ T5825] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 507.609952][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.623494][ T5825] usb 5-1: config 0 descriptor?? [ 507.785161][T16708] loop6: detected capacity change from 0 to 4096 [ 507.790928][T16713] 9pnet_fd: Insufficient options for proto=fd [ 508.032740][T16719] loop6: detected capacity change from 0 to 1024 [ 508.040006][T16719] EXT4-fs: Ignoring removed oldalloc option [ 508.046367][T16719] EXT4-fs: Ignoring removed bh option [ 508.059778][ T5825] wacom 0003:056A:0000.0026: ignoring exceeding usage max [ 508.073019][ T5825] wacom 0003:056A:0000.0026: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 508.086519][ T5825] wacom 0003:056A:0000.0026: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.4-1/input0 [ 508.108327][ T5825] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0000.0026/input/input45 [ 508.229426][T16723] loop6: detected capacity change from 0 to 128 [ 508.334524][ T5825] usb 5-1: USB disconnect, device number 24 [ 508.529722][T16730] loop6: detected capacity change from 0 to 2048 [ 509.310194][ T23] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 509.500506][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 509.514299][ T23] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 509.526735][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.539866][ T23] usb 7-1: config 0 descriptor?? [ 509.548733][T16755] usb usb8: usbfs: process 16755 (syz.7.4198) did not claim interface 6 before use [ 509.558915][ T23] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 509.947407][T16760] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 509.971002][T16760] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 509.984872][T16760] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 510.008459][T16760] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 510.020558][T16760] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 510.060857][T16760] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 510.365116][ T23] gspca_nw80x: reg_r err -71 [ 510.370885][ T23] nw80x: probe of 7-1:0.0 failed with error -71 [ 510.397915][ T23] usb 7-1: USB disconnect, device number 12 [ 510.434636][T16774] loop7: detected capacity change from 0 to 2048 [ 510.456445][T16774] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.780321][T16782] loop7: detected capacity change from 0 to 22 [ 510.787642][T16782] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 510.811854][T16782] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 510.957368][T16786] loop4: detected capacity change from 0 to 1024 [ 510.987709][T16786] EXT4-fs: Ignoring removed bh option [ 510.999386][T16790] loop6: detected capacity change from 0 to 128 [ 511.007054][T16790] EXT4-fs: Ignoring removed nobh option [ 511.007969][T16786] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 511.057464][T16786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.676884][T16811] loop6: detected capacity change from 0 to 2048 [ 511.869885][ T7257] EXT4-fs error (device loop4): ext4_read_inline_dir:1565: inode #12: block 7: comm syz-executor: path /850/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 511.911392][ T7257] EXT4-fs (loop4): Remounting filesystem read-only [ 511.930327][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout [ 512.010447][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 512.016558][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 512.023107][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout [ 512.204929][T13173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.364430][ T28] audit: type=1326 audit(512.919:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16820 comm="syz.6.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f218e929 code=0x7fc00000 [ 512.650259][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.090265][ T28] audit: type=1326 audit(513.629:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16820 comm="syz.6.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f63f218e929 code=0x7fc00000 [ 513.130688][ T28] audit: type=1326 audit(513.629:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16820 comm="syz.6.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f218e929 code=0x7fc00000 [ 513.180082][ T28] audit: type=1326 audit(513.629:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16820 comm="syz.6.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f218e929 code=0x7fc00000 [ 513.230186][ T28] audit: type=1326 audit(513.629:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16820 comm="syz.6.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f218e929 code=0x7fc00000 [ 513.271042][ T28] audit: type=1326 audit(513.629:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16820 comm="syz.6.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f218e929 code=0x7fc00000 [ 513.323256][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 513.330174][ T28] audit: type=1326 audit(513.629:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16820 comm="syz.6.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f218e929 code=0x7fc00000 [ 513.336197][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 513.376153][ T28] audit: type=1326 audit(513.629:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16820 comm="syz.6.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f218e929 code=0x7fc00000 [ 513.376197][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 513.417527][ T28] audit: type=1326 audit(513.629:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16820 comm="syz.6.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f218e929 code=0x7fc00000 [ 513.440376][ T5857] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 513.449372][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 513.449721][T16842] unsupported nla_type 52263 [ 513.466971][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 513.479924][ T28] audit: type=1326 audit(513.639:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16820 comm="syz.6.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63f218e929 code=0x7fc00000 [ 513.502227][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 513.643509][ T5857] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 513.660921][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.681595][ T5857] usb 3-1: config 0 descriptor?? [ 513.853991][T16839] chnl_net:caif_netlink_parms(): no params data found [ 513.929250][T16853] loop6: detected capacity change from 0 to 512 [ 513.999533][T16839] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.010730][T16839] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.027850][T16839] bridge_slave_0: entered allmulticast mode [ 514.036268][T16839] bridge_slave_0: entered promiscuous mode [ 514.053416][T16839] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.072228][T16839] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.079567][T16839] bridge_slave_1: entered allmulticast mode [ 514.090569][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout [ 514.096430][T16839] bridge_slave_1: entered promiscuous mode [ 514.154137][T16839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.168031][T16839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.236120][T16839] team0: Port device team_slave_0 added [ 514.248279][T16839] team0: Port device team_slave_1 added [ 514.322436][T16839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.346852][T16839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.382599][T16839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.389936][T16860] loop7: detected capacity change from 0 to 2048 [ 514.416960][T16839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.420243][T16860] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 514.434987][T16839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.470381][T16839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.499447][T16863] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 514.513975][ T5857] pegasus: probe of 3-1:0.0 failed with error -71 [ 514.550749][ T5857] usb 3-1: USB disconnect, device number 29 [ 514.562197][T16862] loop6: detected capacity change from 0 to 8192 [ 514.587596][T16860] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 3044605952 [ 514.598965][T16860] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=15) [ 514.609190][T16839] hsr_slave_0: entered promiscuous mode [ 514.611354][T16860] Remounting filesystem read-only [ 514.635166][T16860] NILFS (loop7): error -5 truncating bmap (ino=15) [ 514.645207][T16839] hsr_slave_1: entered promiscuous mode [ 514.680225][T16839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.700178][T16839] Cannot create hsr debugfs directory [ 514.760762][T11662] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 514.779542][T11662] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 514.790501][T11662] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 514.806608][T11662] NILFS (loop7): discard dirty block: blocknr=37, size=1024 [ 514.830503][T11662] NILFS (loop7): discard dirty block: blocknr=38, size=1024 [ 514.840269][T11662] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 514.866135][T11662] NILFS (loop7): discard dirty page: offset=134217728, ino=15 [ 514.886829][T11662] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 514.900032][T11662] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 514.908977][T11662] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 514.932697][T11662] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 514.952835][T11662] NILFS (loop7): discard dirty page: offset=0, ino=3 [ 514.959590][T11662] NILFS (loop7): discard dirty block: blocknr=42, size=1024 [ 514.981940][T11662] NILFS (loop7): discard dirty block: blocknr=43, size=1024 [ 514.989328][T11662] NILFS (loop7): discard dirty block: blocknr=44, size=1024 [ 515.022233][T11662] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 515.047405][T11662] NILFS (loop7): discard dirty page: offset=229376, ino=3 [ 515.071606][T11662] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 515.095540][T11662] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 515.120662][T11662] NILFS (loop7): discard dirty block: blocknr=50, size=1024 [ 515.128025][T11662] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 515.269827][T16839] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 515.322595][T16839] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 515.344300][T16839] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 515.364948][T16839] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 515.593529][T16839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.611177][ T5085] Bluetooth: hci3: command tx timeout [ 515.637277][T16839] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.683999][T16881] tipc: Started in network mode [ 515.688937][T16881] tipc: Node identity ac14140f, cluster identity 4711 [ 515.728003][T16881] tipc: New replicast peer: 255.255.255.255 [ 515.746533][T16881] tipc: Enabled bearer , priority 26 [ 515.769469][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.776723][ T6118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.808414][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.815689][ T6118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.166570][T16899] loop7: detected capacity change from 0 to 1024 [ 516.181693][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout [ 516.223645][T16899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.301328][T11662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.352461][T16839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.844989][T16839] veth0_vlan: entered promiscuous mode [ 516.860292][T11992] tipc: Node number set to 2886997007 [ 516.873273][T16839] veth1_vlan: entered promiscuous mode [ 516.917512][T16839] veth0_macvtap: entered promiscuous mode [ 516.932070][T16839] veth1_macvtap: entered promiscuous mode [ 516.956423][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.987803][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.008769][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.019396][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.039344][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.059432][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.072435][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.094994][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.114372][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.129729][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.143951][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.155184][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.174797][T16839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.471358][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.490362][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.508526][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.519659][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.550178][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.574457][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.594955][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.609439][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.629804][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.641732][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.655120][T16839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.665715][T16839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.678323][T16839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.692766][ T5085] Bluetooth: hci3: command tx timeout [ 517.697742][T16839] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.707458][T16839] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.716810][T16839] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.726193][T16839] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.844105][T16932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 517.851969][T16932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 517.858453][T16932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 517.864769][T16932] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 517.871338][T16932] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 517.886612][T16932] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 518.010061][ T6118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.017952][ T6118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.069674][ T6134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.077654][ T6134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.151724][T16941] loop7: detected capacity change from 0 to 2048 [ 518.187321][T16941] EXT4-fs (loop7): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.413263][T16946] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 518.992249][T16952] loop6: detected capacity change from 0 to 2048 [ 519.171834][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 519.171852][ T28] audit: type=1800 audit(519.719:338): pid=16941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4265" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 519.692372][T11662] EXT4-fs (loop7): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 519.860197][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 519.931525][ T5085] Bluetooth: hci3: command 0x0419 tx timeout [ 519.931865][T16816] Bluetooth: hci2: command 0x0c1a tx timeout [ 519.937697][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 520.200075][T16961] loop8: detected capacity change from 0 to 32768 [ 520.275779][T16961] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 520.513125][T16968] loop7: detected capacity change from 0 to 32768 [ 520.585584][T16968] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 520.691533][T16968] XFS (loop7): Ending clean mount [ 520.698653][T16839] ocfs2: Unmounting device (7,8) on (node local) [ 520.716373][T16968] XFS (loop7): Quotacheck needed: Please wait. [ 520.849016][T16968] XFS (loop7): Quotacheck: Done. [ 520.971532][T11662] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 521.305300][T16989] loop8: detected capacity change from 0 to 256 [ 521.346811][T16989] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 521.372184][T16989] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 521.435302][T16989] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 521.451446][T16991] loop6: detected capacity change from 0 to 2048 [ 521.630603][T16989] exFAT-fs (loop8): error, invalid access to FAT (entry 0xffffffff) [ 521.639351][T16989] exFAT-fs (loop8): Filesystem has been set read-only [ 522.020792][ T5085] Bluetooth: hci3: command 0x0419 tx timeout [ 522.125351][T17014] loop7: detected capacity change from 0 to 512 [ 522.147573][T17014] EXT4-fs: Ignoring removed nobh option [ 522.161205][T17015] ptrace attach of "./syz-executor exec"[16839] was attempted by ""[17015] [ 522.186259][T17014] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 522.223182][T17014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 522.257238][T17014] EXT4-fs (loop7): orphan cleanup on readonly fs [ 522.281048][T17014] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.4294: attempt to clear invalid blocks 1024 len 1 [ 522.337892][T17025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4299'. [ 522.340564][T17014] EXT4-fs (loop7): Remounting filesystem read-only [ 522.368938][T17026] loop8: detected capacity change from 0 to 256 [ 522.403246][T17014] EXT4-fs (loop7): 1 truncate cleaned up [ 522.412113][T17014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 522.435330][T17026] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 522.691847][T11662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 523.430300][T17051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4308'. [ 523.921330][ T28] audit: type=1326 audit(1292.481:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17064 comm="syz.8.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 523.943286][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.001238][ T28] audit: type=1326 audit(1292.511:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17064 comm="syz.8.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 524.065013][ T28] audit: type=1326 audit(1292.531:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17064 comm="syz.8.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 524.092651][ T5085] Bluetooth: hci3: command 0x0419 tx timeout [ 524.104323][T17071] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4317'. [ 524.131547][T17071] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4317'. [ 524.140408][ T28] audit: type=1326 audit(1292.531:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17064 comm="syz.8.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 524.162751][ T28] audit: type=1326 audit(1292.541:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17064 comm="syz.8.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 524.169425][T17071] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4317'. [ 524.188195][ T28] audit: type=1326 audit(1292.541:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17064 comm="syz.8.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 524.266690][ T28] audit: type=1326 audit(1292.541:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17064 comm="syz.8.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 524.319981][ T28] audit: type=1326 audit(1292.551:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17064 comm="syz.8.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 524.341942][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.390484][ T28] audit: type=1326 audit(1292.551:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17064 comm="syz.8.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 524.420855][ T28] audit: type=1326 audit(1292.551:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17064 comm="syz.8.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 524.442721][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.759483][T17091] loop7: detected capacity change from 0 to 1764 [ 524.799747][T17091] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 525.015135][T17079] loop8: detected capacity change from 0 to 32768 [ 525.086806][T17079] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 525.129941][ T28] audit: type=1800 audit(1293.691:349): pid=17079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4321" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 525.400078][T17108] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 525.431412][T17108] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 525.511891][T16839] ocfs2: Unmounting device (7,8) on (node local) [ 525.905674][T17110] loop8: detected capacity change from 0 to 512 [ 525.961876][T17110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 526.007926][T17114] loop7: detected capacity change from 0 to 2048 [ 526.048383][ T28] audit: type=1800 audit(1294.601:350): pid=17110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4333" name="file1" dev="loop8" ino=18 res=0 errno=0 [ 526.127632][T17114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.171264][ T5085] Bluetooth: hci3: command 0x0419 tx timeout [ 526.270057][T16839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 526.371684][T17117] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 526.400771][T17117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 526.402404][T11662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.431223][T17117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 526.451279][T17117] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 526.787449][T17133] loop7: detected capacity change from 0 to 512 [ 526.803480][T17133] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 527.272041][T17153] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 527.283489][T17153] batman_adv: batadv0: Adding interface: gretap1 [ 527.289947][T17153] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.317470][T17153] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 527.501024][ T5811] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 527.724898][ T5811] usb 3-1: config 0 has no interfaces? [ 527.733224][ T5811] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 527.748813][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.761241][ T5811] usb 3-1: Product: syz [ 527.765471][ T5811] usb 3-1: Manufacturer: syz [ 527.770104][ T5811] usb 3-1: SerialNumber: syz [ 527.799106][ T5811] r8152-cfgselector 3-1: config 0 descriptor?? [ 527.880000][T17167] input: syz0 as /devices/virtual/input/input48 [ 528.054701][ T5811] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 528.111907][T17174] loop7: detected capacity change from 0 to 1024 [ 528.158903][T17174] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.221359][T17174] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 528.240463][T17174] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 528.254945][T17174] EXT4-fs (loop7): This should not happen!! Data will be lost [ 528.254945][T17174] [ 528.265025][T17174] EXT4-fs (loop7): Total free blocks count 0 [ 528.271307][T17174] EXT4-fs (loop7): Free/Dirty block details [ 528.277579][T17174] EXT4-fs (loop7): free_blocks=4293918720 [ 528.284149][T17174] EXT4-fs (loop7): dirty_blocks=80 [ 528.289516][T17174] EXT4-fs (loop7): Block reservation details [ 528.295963][T17174] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 528.343047][ T8] usb 3-1: USB disconnect, device number 30 [ 528.407582][T11662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.417294][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout [ 528.421350][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 528.498801][ T5783] Bluetooth: hci3: command 0x0419 tx timeout [ 528.498821][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout [ 528.626477][T17185] loop7: detected capacity change from 0 to 4096 [ 528.649398][T17185] ntfs3: loop7: Different NTFS sector size (4096) and media sector size (512). [ 529.239426][T17210] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4376'. [ 529.299711][T17210] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4376'. [ 529.551184][ T5818] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 529.642376][T17227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'. [ 529.761139][ T5818] usb 7-1: Using ep0 maxpacket: 16 [ 529.780224][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.813311][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.833776][ T5818] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 529.851192][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.869074][ T5818] usb 7-1: config 0 descriptor?? [ 529.921926][T17236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.264433][T17248] loop7: detected capacity change from 0 to 128 [ 530.300111][T17248] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 530.326650][ T5818] playstation 0003:054C:05C4.0027: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.6-1/input0 [ 530.689692][ T5818] playstation 0003:054C:05C4.0027: Failed to retrieve feature with reportID 163: -71 [ 530.714723][ T5818] playstation 0003:054C:05C4.0027: Failed to retrieve DualShock4 firmware info: -71 [ 530.743017][ T5818] playstation 0003:054C:05C4.0027: Failed to get firmware info from DualShock4 [ 530.765423][ T5818] playstation 0003:054C:05C4.0027: Failed to create dualshock4. [ 530.788115][ T5818] playstation: probe of 0003:054C:05C4.0027 failed with error -71 [ 530.819533][ T5818] usb 7-1: USB disconnect, device number 13 [ 531.034669][T17277] IPv6: Can't replace route, no match found [ 531.394029][T17285] sctp: [Deprecated]: syz.2.4411 (pid 17285) Use of int in max_burst socket option. [ 531.394029][T17285] Use struct sctp_assoc_value instead [ 531.995146][T17303] loop6: detected capacity change from 0 to 4096 [ 532.362862][T17318] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 532.491726][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 533.914273][T17364] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 533.934949][T17364] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 534.095894][T17369] IPv6: NLM_F_REPLACE set, but no existing node found! [ 534.351523][ T5825] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 534.371768][ T8] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 534.548779][ T5825] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 534.551574][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 534.557428][ T5825] usb 3-1: config 0 has no interface number 0 [ 534.565309][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.579667][ T5825] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 534.579700][ T5825] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 534.579739][ T5825] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 534.579762][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.585042][ T5825] usb 3-1: config 0 descriptor?? [ 534.596611][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.632936][ T5825] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input51 [ 534.650125][ T8] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 534.660821][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.676405][ T8] usb 7-1: config 0 descriptor?? [ 534.841033][ T5825] usb 3-1: USB disconnect, device number 31 [ 535.122419][ T8] savu 0003:1E7D:2D5A.0028: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 535.282187][T17395] loop7: detected capacity change from 0 to 256 [ 535.388546][ T8] usb 7-1: USB disconnect, device number 14 [ 535.876947][T17419] loop7: detected capacity change from 0 to 512 [ 535.884721][T17419] EXT4-fs: Ignoring removed orlov option [ 535.890702][T17419] EXT4-fs: Ignoring removed oldalloc option [ 535.897248][T17419] ext4: Unknown parameter 'defcontext' [ 536.240654][T17429] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 536.269227][T17429] batman_adv: batadv0: Adding interface: gretap1 [ 536.283636][T17429] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.347220][T17429] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 536.512879][T17423] loop8: detected capacity change from 0 to 32768 [ 536.527516][T17423] (syz.8.4475,17423,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 536.554585][T17423] (syz.8.4475,17423,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 536.583453][T17423] JBD2: Ignoring recovery information on journal [ 536.635406][T17423] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 536.666301][T17438] loop6: detected capacity change from 0 to 256 [ 536.679810][T17438] exfat: Deprecated parameter 'utf8' [ 536.789060][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4483'. [ 537.106208][T16839] ocfs2: Unmounting device (7,8) on (node local) [ 537.320277][T17458] loop6: detected capacity change from 0 to 1024 [ 537.334784][T17458] EXT4-fs: Ignoring removed nobh option [ 537.350894][T17458] EXT4-fs: Ignoring removed nobh option [ 537.379785][T17458] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 537.400359][T17458] EXT4-fs error (device loop6): ext4_get_journal_inode:5805: comm syz.6.4490: inode #4294967295: comm syz.6.4490: iget: illegal inode # [ 537.424845][T17458] EXT4-fs (loop6): no journal found [ 537.430154][T17458] EXT4-fs (loop6): can't get journal size [ 537.462166][T17458] EXT4-fs (loop6): failed to initialize system zone (-22) [ 537.469618][T17458] EXT4-fs (loop6): mount failed [ 538.155190][T17483] loop6: detected capacity change from 0 to 2048 [ 538.401339][T17491] loop6: detected capacity change from 0 to 128 [ 538.829206][T17507] loop6: detected capacity change from 0 to 4096 [ 538.849617][T17507] NILFS (loop6): invalid segment: Checksum error in segment payload [ 538.867868][T17507] NILFS (loop6): trying rollback from an earlier position [ 538.900085][T17507] NILFS (loop6): write access unavailable, cannot proceed [ 539.049682][T17507] loop6: detected capacity change from 0 to 512 [ 539.076686][T17507] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec01c, mo2=0002] [ 539.085536][T17507] EXT4-fs (loop6): write access unavailable, skipping orphan cleanup [ 539.095427][T17507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 539.148299][T11417] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.636300][T17534] loop8: detected capacity change from 0 to 16 [ 539.669602][T17534] erofs: (device loop8): mounted with root inode @ nid 36. [ 539.929381][T17541] loop7: detected capacity change from 0 to 4096 [ 539.956942][T17541] ntfs3: loop7: Different NTFS sector size (1024) and media sector size (512). [ 540.047035][T17541] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 540.146777][T17552] loop8: detected capacity change from 0 to 256 [ 540.188255][T17554] input: syz0 as /devices/virtual/input/input52 [ 540.861234][T17581] loop8: detected capacity change from 0 to 764 [ 540.902849][T17581] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 541.163495][T17585] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4544'. [ 541.328319][T17576] loop7: detected capacity change from 0 to 32768 [ 541.363021][T17573] loop6: detected capacity change from 0 to 32768 [ 541.384327][T17576] JBD2: Ignoring recovery information on journal [ 541.504428][T17576] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 541.584643][T17591] loop8: detected capacity change from 0 to 512 [ 541.644321][T17591] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.707414][ T28] audit: type=1800 audit(1310.259:351): pid=17591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4546" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 541.784034][ T28] audit: type=1800 audit(1310.269:352): pid=17591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4546" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 541.824073][T16839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.870463][T11662] ocfs2: Unmounting device (7,7) on (node local) [ 542.033746][T17601] mmap: syz.8.4549 (17601): VmData 45854720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 542.400821][T17607] loop8: detected capacity change from 0 to 8192 [ 542.439435][T17615] block nbd2: shutting down sockets [ 542.784708][T17628] syz.7.4560: attempt to access beyond end of device [ 542.784708][T17628] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 542.798706][T17628] syz.7.4560: attempt to access beyond end of device [ 542.798706][T17628] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 542.812166][T17628] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 542.822391][T17628] syz.7.4560: attempt to access beyond end of device [ 542.822391][T17628] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 542.836812][T17628] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 542.866184][T17628] syz.7.4560: attempt to access beyond end of device [ 542.866184][T17628] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 542.922266][T17628] syz.7.4560: attempt to access beyond end of device [ 542.922266][T17628] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 542.936220][ T5811] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 542.951672][T17628] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 542.969872][T17628] syz.7.4560: attempt to access beyond end of device [ 542.969872][T17628] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 542.996055][T17628] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 543.007464][T17628] syz.7.4560: attempt to access beyond end of device [ 543.007464][T17628] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 543.021245][T17628] syz.7.4560: attempt to access beyond end of device [ 543.021245][T17628] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 543.034738][T17628] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 543.045172][T17628] syz.7.4560: attempt to access beyond end of device [ 543.045172][T17628] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 543.058779][T17628] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 543.069117][T17628] syz.7.4560: attempt to access beyond end of device [ 543.069117][T17628] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 543.121078][T17628] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 543.134140][T17628] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 543.145199][ T5811] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 543.146080][T17628] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 543.172932][ T5811] usb 7-1: config 0 has no interface number 0 [ 543.193858][ T5811] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 543.208039][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.233484][ T5811] usb 7-1: config 0 descriptor?? [ 543.245541][ T5811] usb 7-1: selecting invalid altsetting 1 [ 543.274558][ T5811] dvb_ttusb_budget: ttusb_init_controller: error [ 543.293236][ T5811] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 543.377247][ T5811] DVB: Unable to find symbol cx22700_attach() [ 543.477284][ T5811] DVB: Unable to find symbol tda10046_attach() [ 543.511482][ T5811] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 543.544869][ T5811] usb 7-1: USB disconnect, device number 15 [ 543.555751][T17648] loop8: detected capacity change from 0 to 128 [ 543.598574][T17648] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 543.741748][T16839] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 544.083753][T17658] netem: incorrect gi model size [ 544.265529][T17666] loop8: detected capacity change from 0 to 64 [ 544.402411][T17670] netlink: 'syz.6.4580': attribute type 1 has an invalid length. [ 544.751366][T17685] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.4587'. [ 545.264632][T17708] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 545.748632][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4608'. [ 545.782332][T17727] macsec0: entered promiscuous mode [ 545.907940][T17732] loop8: detected capacity change from 0 to 2048 [ 545.930336][T17732] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 546.002988][ T6134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.019217][T17733] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 546.070606][ T28] audit: type=1800 audit(1314.628:353): pid=17732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4610" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 546.115797][T17732] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 546.185311][T17732] Remounting filesystem read-only [ 546.192141][T17732] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 3044605952 [ 546.204619][T17732] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=15) [ 546.226529][ T6134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.236661][T17732] NILFS (loop8): error -5 truncating bmap (ino=15) [ 546.256666][T17732] NILFS (loop8): discard dirty page: offset=0, ino=15 [ 546.270284][T17732] NILFS (loop8): discard dirty block: blocknr=22, size=1024 [ 546.281605][T17732] NILFS (loop8): discard dirty block: blocknr=0, size=1024 [ 546.295758][T17732] NILFS (loop8): discard dirty block: blocknr=0, size=1024 [ 546.308986][T17732] NILFS (loop8): discard dirty block: blocknr=0, size=1024 [ 546.439797][ T6134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.444014][T16839] NILFS (loop8): discard dirty page: offset=0, ino=6 [ 546.479914][T16839] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 546.515995][T16839] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 546.531868][T16839] NILFS (loop8): discard dirty block: blocknr=37, size=1024 [ 546.539614][T16839] NILFS (loop8): discard dirty block: blocknr=38, size=1024 [ 546.562809][T16839] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 546.580632][T16839] NILFS (loop8): discard dirty page: offset=0, ino=3 [ 546.601508][T16839] NILFS (loop8): discard dirty block: blocknr=42, size=1024 [ 546.609341][T16839] NILFS (loop8): discard dirty block: blocknr=43, size=1024 [ 546.630007][T16839] NILFS (loop8): discard dirty block: blocknr=44, size=1024 [ 546.645977][ T6134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.656547][T16839] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 546.692204][T16839] NILFS (loop8): discard dirty page: offset=229376, ino=3 [ 546.705251][T16839] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 546.737513][T16839] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 546.753090][T16839] NILFS (loop8): discard dirty block: blocknr=50, size=1024 [ 546.765249][T16839] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 547.127487][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 547.142232][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 547.154501][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 547.178651][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 547.217247][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 547.225003][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 547.577809][ T28] audit: type=1326 audit(1316.128:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17759 comm="syz.8.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 547.632557][ T28] audit: type=1326 audit(1316.138:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17759 comm="syz.8.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 547.662766][ T28] audit: type=1326 audit(1316.168:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17759 comm="syz.8.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 547.733206][ T28] audit: type=1326 audit(1316.168:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17759 comm="syz.8.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d718e929 code=0x7ffc0000 [ 548.271876][T17746] chnl_net:caif_netlink_parms(): no params data found [ 548.283344][ T5811] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 548.512218][ T5811] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 548.527378][ T5811] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 548.545388][ T5811] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 548.556155][ T5811] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 548.587136][ T5811] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 548.636878][ T5811] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 548.660197][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 548.678281][ T5811] usb 7-1: Product: syz [ 548.682513][ T5811] usb 7-1: Manufacturer: syz [ 548.698873][ T5811] cdc_wdm 7-1:1.0: skipping garbage [ 548.713957][ T5811] cdc_wdm 7-1:1.0: skipping garbage [ 548.746789][ T5811] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 548.752785][ T5811] cdc_wdm 7-1:1.0: Unknown control protocol [ 548.871794][T17746] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.883101][T17746] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.894919][T17746] bridge_slave_0: entered allmulticast mode [ 548.902621][T17746] bridge_slave_0: entered promiscuous mode [ 548.972532][T17746] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.981687][ T5811] usb 7-1: USB disconnect, device number 16 [ 549.004565][T17746] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.022184][T17746] bridge_slave_1: entered allmulticast mode [ 549.044946][T17746] bridge_slave_1: entered promiscuous mode [ 549.247131][T17746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.260382][T17746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.285370][ T6134] hsr_slave_0: left promiscuous mode [ 549.292542][ T6134] hsr_slave_1: left promiscuous mode [ 549.293994][ T5783] Bluetooth: hci2: command tx timeout [ 549.310722][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.320955][T17791] loop8: detected capacity change from 0 to 32768 [ 549.330451][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.332821][T17791] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.4632 (17791) [ 549.352932][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.360772][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.361409][T17791] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 549.378869][T17791] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 549.379604][ T6134] bridge_slave_1: left allmulticast mode [ 549.393761][T17791] BTRFS info (device loop8): force clearing of disk cache [ 549.393788][T17791] BTRFS info (device loop8): setting nodatacow, compression disabled [ 549.393809][T17791] BTRFS info (device loop8): turning off barriers [ 549.393827][T17791] BTRFS info (device loop8): enabling auto defrag [ 549.393846][T17791] BTRFS info (device loop8): turning on sync discard [ 549.401234][T17791] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 549.439879][ T6134] bridge_slave_1: left promiscuous mode [ 549.440600][T17791] BTRFS info (device loop8): trying to use backup root at mount time [ 549.451836][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.454555][T17791] BTRFS info (device loop8): enabling ssd optimizations [ 549.468658][T17791] BTRFS info (device loop8): using spread ssd allocation scheme [ 549.478678][ T6134] bridge_slave_0: left allmulticast mode [ 549.479579][T17791] BTRFS info (device loop8): using free space tree [ 549.484540][ T6134] bridge_slave_0: left promiscuous mode [ 549.486762][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.543078][ T6122] BTRFS warning (device loop8): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 549.559852][ T6134] veth1_macvtap: left promiscuous mode [ 549.567156][ T6134] veth0_macvtap: left promiscuous mode [ 549.572865][ T6134] veth1_vlan: left promiscuous mode [ 549.578327][T17791] BTRFS warning (device loop8): couldn't read tree root [ 549.578418][ T6134] veth0_vlan: left promiscuous mode [ 549.633581][T17791] BTRFS warning (device loop8): try to load backup roots slot 1 [ 549.646547][ T6118] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 549.663183][T17791] BTRFS warning (device loop8): couldn't read tree root [ 549.671697][T17791] BTRFS warning (device loop8): try to load backup roots slot 2 [ 549.680813][ T3431] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 549.692130][T17791] BTRFS warning (device loop8): couldn't read tree root [ 549.712965][T17791] BTRFS warning (device loop8): try to load backup roots slot 3 [ 549.736679][T17791] BTRFS info (device loop8): rebuilding free space tree [ 549.802078][T17791] BTRFS info (device loop8): checking UUID tree [ 549.959137][T16839] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 550.930452][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4643'. [ 551.355130][T17829] loop8: detected capacity change from 0 to 32768 [ 551.363339][T17829] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.4641 (17829) [ 551.376932][ T5783] Bluetooth: hci2: command tx timeout [ 551.451657][T17829] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 551.464132][ T6134] team0 (unregistering): Port device team_slave_1 removed [ 551.476179][T17829] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 551.493978][T17829] BTRFS info (device loop8): force zlib compression, level 3 [ 551.512113][T17829] BTRFS info (device loop8): force clearing of disk cache [ 551.519592][T17829] BTRFS info (device loop8): setting nodatasum [ 551.526425][T17829] BTRFS info (device loop8): use zlib compression, level 3 [ 551.557770][T17829] BTRFS info (device loop8): allowing degraded mounts [ 551.567040][T17829] BTRFS info (device loop8): enabling disk space caching [ 551.574601][T17829] BTRFS info (device loop8): disk space caching is enabled [ 551.584851][ T6134] team0 (unregistering): Port device team_slave_0 removed [ 551.677174][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.680971][T17829] BTRFS info (device loop8): enabling ssd optimizations [ 551.704032][T17829] BTRFS info (device loop8): auto enabling async discard [ 551.719277][T17829] BTRFS info (device loop8): rebuilding free space tree [ 551.765858][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.834938][T17829] BTRFS info (device loop8): disabling free space tree [ 551.841951][T17829] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 551.861537][T17829] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 552.025935][T16839] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 552.756907][ T6134] bond0 (unregistering): Released all slaves [ 552.896515][T17746] team0: Port device team_slave_0 added [ 552.913526][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4643'. [ 552.926872][T17746] team0: Port device team_slave_1 added [ 553.029065][T17746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.042672][T17746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.072023][T17746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.085784][T17746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.125068][T17746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.180077][T17746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.403104][T17746] hsr_slave_0: entered promiscuous mode [ 553.448806][T17746] hsr_slave_1: entered promiscuous mode [ 553.460546][T17859] loop6: detected capacity change from 0 to 512 [ 553.483428][T17746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.483685][ T5783] Bluetooth: hci2: command tx timeout [ 553.493947][T17746] Cannot create hsr debugfs directory [ 553.731520][T17863] loop8: detected capacity change from 0 to 512 [ 553.850309][T17863] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.158272][T17859] loop6: detected capacity change from 0 to 32768 [ 554.171558][T16839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.317544][T17746] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 554.341241][T17746] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 554.368405][T17746] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 554.394653][T17746] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 554.564533][T17746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.617032][T17746] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.648575][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.655951][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.707515][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.714720][ T6122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.001576][T17899] loop6: detected capacity change from 0 to 512 [ 555.178745][T17746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.200565][T17906] loop6: detected capacity change from 0 to 256 [ 555.534245][ T5783] Bluetooth: hci2: command tx timeout [ 555.811231][T17746] veth0_vlan: entered promiscuous mode [ 555.838083][T17746] veth1_vlan: entered promiscuous mode [ 555.918846][T17746] veth0_macvtap: entered promiscuous mode [ 555.942531][T17746] veth1_macvtap: entered promiscuous mode [ 555.977853][T17746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.989643][T17746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.999776][T17746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.037563][T17746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.049791][T17746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.060563][T17746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.070452][T17746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.081175][T17746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.091339][T17746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.102440][T17746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.130489][T17746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.150904][T17746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.166736][T17746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.169808][T17923] loop8: detected capacity change from 0 to 32768 [ 556.183529][T17931] loop6: detected capacity change from 0 to 1024 [ 556.198778][T17923] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.4666 (17923) [ 556.218706][T17746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.221913][T17923] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 556.240803][T17746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.241088][T17923] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 556.259931][T17931] tmpfs: Bad value for 'nr_inodes' [ 556.269080][T17746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.277655][T17923] BTRFS info (device loop8): setting nodatacow, compression disabled [ 556.292694][T17746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.301146][T17923] BTRFS info (device loop8): max_inline at 0 [ 556.304162][T17746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.309217][T17923] BTRFS info (device loop8): using free space tree [ 556.329309][T17746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.342138][T17746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.354177][T17746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.369592][T17746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.381811][T17746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.401332][T17746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.417927][T17746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.423772][T17923] BTRFS info (device loop8): auto enabling async discard [ 556.431631][T17746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.448129][T17746] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.458013][T17746] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.467098][T17746] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.476040][T17746] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.620268][ T6134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.655255][ T6134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.694111][T16839] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 556.723317][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.732205][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.224377][ T5825] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 557.424758][ T5825] usb 7-1: Using ep0 maxpacket: 32 [ 557.433057][ T5825] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 557.444567][ T5825] usb 7-1: config 0 has no interface number 0 [ 557.453468][ T5825] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 557.470126][T17963] netlink: 292 bytes leftover after parsing attributes in process `syz.8.4676'. [ 557.479815][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.496387][ T5825] usb 7-1: Product: syz [ 557.500626][ T5825] usb 7-1: Manufacturer: syz [ 557.508140][ T5825] usb 7-1: SerialNumber: syz [ 557.515812][ T5825] usb 7-1: config 0 descriptor?? [ 557.529009][ T5825] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 557.549072][ T5825] usb 7-1: selecting invalid altsetting 1 [ 557.562307][ T5825] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 557.582225][T17965] misc userio: The device must be registered before sending interrupts [ 557.582995][ T5825] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 557.611396][ T5825] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 557.637881][ T5825] usb 7-1: media controller created [ 557.705951][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 557.804841][ T5825] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 557.812005][ T5825] zl10353_read_register: readreg error (reg=127, ret==-71) [ 557.845102][ T5825] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 557.881150][T17971] loop8: detected capacity change from 0 to 1024 [ 557.904886][T17971] EXT4-fs: Ignoring removed nobh option [ 557.916522][T17971] EXT4-fs: Ignoring removed bh option [ 557.941414][T17971] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 557.959660][ T5825] usb 7-1: USB disconnect, device number 17 [ 558.000079][T17971] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.187844][T16839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.433212][T17992] loop8: detected capacity change from 0 to 1024 [ 558.625140][ T8] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 558.856458][ T8] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 558.874510][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.906317][ T8] usb 10-1: config 0 descriptor?? [ 558.914106][ T8] cp210x 10-1:0.0: cp210x converter detected [ 559.343252][ T8] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 559.362093][ T8] usb 10-1: cp210x converter now attached to ttyUSB0 [ 559.428544][T18002] loop7: detected capacity change from 0 to 32768 [ 559.443010][T18007] loop8: detected capacity change from 0 to 2048 [ 559.472329][T18007] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 559.494287][T18002] find_entry called with index = 0 [ 559.518819][T18002] read_mapping_page failed! [ 559.523576][T18002] ERROR: (device loop7): txCommit: [ 559.523576][T18002] [ 559.547985][T18002] ERROR: (device loop7): diFree: numfree > numinos [ 559.547985][T18002] [ 559.597132][ T8] usb 10-1: USB disconnect, device number 2 [ 559.606560][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 559.638573][ T8] cp210x 10-1:0.0: device disconnected [ 559.644027][ T112] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 559.652713][ T112] ------------[ cut here ]------------ [ 559.658539][ T112] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 559.705177][ T112] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 559.711316][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted 6.6.94-syzkaller #0 [ 559.719197][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.729292][ T112] RIP: 0010:txUnlock+0xc87/0xcb0 [ 559.734275][ T112] Code: 5f d8 58 07 0f 0b e8 28 83 83 fe 48 c7 c7 80 14 e4 8a 48 c7 c6 79 10 e4 8a ba a3 03 00 00 48 c7 c1 60 21 e4 8a e8 39 d8 58 07 <0f> 0b e8 02 83 83 fe 48 c7 c7 80 14 e4 8a 48 c7 c6 79 10 e4 8a ba [ 559.753916][ T112] RSP: 0018:ffffc90002ca7d08 EFLAGS: 00010246 [ 559.760009][ T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: fce63637ede48800 [ 559.768007][ T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 559.776014][ T112] RBP: ffffc9000281a3a8 R08: ffffc90002ca7907 R09: 1ffff92000594f20 [ 559.784014][ T112] R10: dffffc0000000000 R11: fffff52000594f21 R12: ffff888076d21c98 [ 559.792013][ T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880301b2294 [ 559.799768][T18015] loop8: detected capacity change from 0 to 4096 [ 559.799992][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 559.815281][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.821878][ T112] CR2: 0000001b2c919ff8 CR3: 000000005099b000 CR4: 00000000003506f0 [ 559.829867][ T112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 559.837853][ T112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 559.845843][ T112] Call Trace: [ 559.849138][ T112] [ 559.852081][ T112] ? lockdep_hardirqs_on+0x98/0x150 [ 559.857293][ T112] jfs_lazycommit+0x570/0xa60 [ 559.861994][ T112] ? txFreelock+0x5a0/0x5a0 [ 559.866508][ T112] ? do_task_dead+0xd0/0xd0 [ 559.871020][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 559.875975][ T112] kthread+0x2fa/0x390 [ 559.880053][ T112] ? txFreelock+0x5a0/0x5a0 [ 559.884580][ T112] ? kthread_blkcg+0xd0/0xd0 [ 559.889174][ T112] ret_from_fork+0x48/0x80 [ 559.893600][ T112] ? kthread_blkcg+0xd0/0xd0 [ 559.898194][ T112] ret_from_fork_asm+0x11/0x20 [ 559.902981][ T112] [ 559.906009][ T112] Modules linked in: [ 559.920687][T18015] ntfs3: loop8: ino=3, Correct links count -> 2. [ 559.921673][ T112] ---[ end trace 0000000000000000 ]--- [ 559.932831][ T112] RIP: 0010:txUnlock+0xc87/0xcb0 [ 559.938771][ T112] Code: 5f d8 58 07 0f 0b e8 28 83 83 fe 48 c7 c7 80 14 e4 8a 48 c7 c6 79 10 e4 8a ba a3 03 00 00 48 c7 c1 60 21 e4 8a e8 39 d8 58 07 <0f> 0b e8 02 83 83 fe 48 c7 c7 80 14 e4 8a 48 c7 c6 79 10 e4 8a ba [ 559.958892][ T112] RSP: 0018:ffffc90002ca7d08 EFLAGS: 00010246 [ 559.966418][ T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: fce63637ede48800 [ 559.974688][ T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 559.982693][ T112] RBP: ffffc9000281a3a8 R08: ffffc90002ca7907 R09: 1ffff92000594f20 [ 559.990819][ T112] R10: dffffc0000000000 R11: fffff52000594f21 R12: ffff888076d21c98 [ 559.998941][ T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880301b2294 [ 560.007022][ T112] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 560.022484][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.029461][ T112] CR2: 00007f63f237e2d8 CR3: 000000006a2ba000 CR4: 00000000003506e0 [ 560.037686][ T112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.045753][ T112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.053770][ T112] Kernel panic - not syncing: Fatal exception [ 560.060168][ T112] Kernel Offset: disabled [ 560.064502][ T112] Rebooting in 86400 seconds..