last executing test programs: 1m23.215733467s ago: executing program 2 (id=115): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m21.99585438s ago: executing program 2 (id=126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4000, 0xe000, 0x3, 0x2f, 0x0, @private=0xa010101, @multicast1}, {0xa001, 0x880b, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}, "3ef46412"}}}}}}}, 0x36) 1m21.098563669s ago: executing program 2 (id=135): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 1m20.965527483s ago: executing program 2 (id=137): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x21) getdents64(r0, 0x0, 0x0) 1m19.971203693s ago: executing program 2 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10005}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1m17.537071237s ago: executing program 2 (id=167): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) eventfd(0x100000ae) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m17.036092937s ago: executing program 32 (id=167): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) eventfd(0x100000ae) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 43.061543183s ago: executing program 4 (id=406): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0xfb, 0x6a8, &(0x7f0000001dc0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) linkat(r0, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xd1) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 42.69532182s ago: executing program 4 (id=410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41083aeb894e76f3c7fc753f2fca40d24553fdd9396171c35ecfd0932f37aa306040bd37f78526b319e572be0ae8b40f01b3835c385e789683bed9c65ccd19545b738fb470ef7c7247c631882fe3cee1ad627ad729a685446e0c1b6ca16a98bececc6ed604084f0de672a6143", 0xa2}, {&(0x7f0000001840)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed6980a5794e38f83ba0c77252adc9d177719cb1f7991ee501ad1ff9d69f88d4bb7a70b76402fd5b363", 0x4f}, {&(0x7f0000000840)="3b9eccc918ce8c50894cb802b04e9492b64a02d85d3ed05eac49318868ad13e4fa9e2f1b165dfcc79e43ed30bb0c212bebb71afc79347f2f1a90e936a487e1ce171789626d34ffa8e3b4415ad869955133f81fab7f450d7ef6df7bf6a16cc39fd78e88662ffd1c3b31ffe836682b1ad9c331a068a75d12fd346d77f5cdacee9fee2203a321c260b0b5fdc8b5d7d43148f4b0fb550dd9d8746f0a0444cfa52af90a966921f9cb48b0c99727166a2f59c12dae2fcc4d891258bd723b5fd1fcb4cb219c87fadebe2582802ef18165f5ff67ba0d4eb4d3ef1f80ba9dff1a74dd5874b3d8017ff61b5174d9660e54f2b5f94f29f6665567b2ca6d0549a500a428ce29b197f754f8e3b6c7dc21260ce97551074886667837db75c9a21cdf92b14dcb2e1f997bab3bf1902b8d8e9eb238c021fdbe48675473dac385e2fada25f767ce5e7576c2dc496841123c81314f100e0648405f0ca9b5aa012d9316f3945e613aba10d1fbc2917143ed606c5513394343c9fac6f95ee678031ba5f4a81d8c2ae0d31c5711c91845f07b0add2bb4bd0f700217044582adf1850b0af5f04b63906918b7312fc3a800d67d8293604321633c41153f83662b2cbec354cf9c33e9eaa8ab2c5e4d86f82d379e98ad8d749595829b548ad77596448bf718c5e52a7dac04f62fde8ab1cc55ee5b6fd57327c8e678c1c8f9b8c235c132faffc553d54253f67d40075d91b7abaa303e5844ee31871fcdded3d8de8df952ae53e60d73e57267117129a4b42df34faa3287bb1c475d9ef904b7a4d33f1f8014e59905c3dc145e3974d71487ce05c9149fb4f9788ef0f519151d82391d783df5753819a0d967d842e60d28257741fb8b794b18a4e2f2f4f10412aa580062d0ef3691f4bdc14d283d672ae10fbbe23fa15f9225642aad56cc8a36538afe97750a0bf313cf3b9fdd881aa067b3b6ad9a69c04b50c9b4f8e29c11d7dcaf08b57ecd5cfd8a01b0e50313d09ea6b3634867f0c23c06055e04c36bddcdc6f4e30b2b6c0b0fa25a20843570bd582df937f7f48cd8e07abcfeaef4f8a72b34978ba5c95d65731943cdf2df8357311bb28d7d72fb9226dcbd059b14242c6fd4ab1ac90367a27ab715ebe553416966ceb79db37cd2dc45687269e4da211fbfdd77a44c730a4732a12ff99fd151d205379bee91935a7bf4eef879d564872fdb2d7c399972ce5d44b59ea05d19a6b00c717b1dd3401a169b4402152b6f21c84c865f00ed0a9da758decaf1ad20138b80bee54a918d5d7dd5432c7ee34ae786cf7f55ea7f67229c39b81cccf80ccb424d139df240a9b18b3c4223de42e71ee7264a1c5db8da2d7fb3dfae2befb2f26e0c996d204ba3df39b111c445f3affed9c9fc8c2b67630de56b5a922f3fd7e0c2ef97df3ad486354937c4606a91874c7403dadaeabd03fe82c92cde4d67c6ac2ad7eedc9761224bf0c6b73ba60934f5c2db9846de4c41c6cb2f5ac6a7ad47418279f6cdd951679c1530ee4dab6d81a8cb41db64fc28ab9598c26fe51f6ddb0900a971aacc92a7e2dfbb596a1571609a4b8bc86c5c218b9220ceca304b7052a58e8c6ce427e4c9b127a133e625c02bf77a89ebff746f829401230f2a757c3ce04a6d01b35350973d24637526278fa724cb3053fd04cba673f682992041dc1cbebe9b574e5ab39307d695b2470cc21122e9c587301630351eeaa5dc1c8bb685ce2b0f4cc25d584354799858c2a11fe1b70518659acff13ad9702e6fd3116d311628bbd9b86f6a09c2a00ad08440860b621716799576b0de92285d0700004719a1eddbb691878526c34ad392e1d72f04d7830686f792152e7e497bc76721aa1c0493698efb8f463d0403d134b9ca6b19240e496edad804be73acb88b0fd1e0de3f00f83a135cf1b58376137e6e93136682343440fd4f96f00d56f9ff265cf5f4b8cc663d56eace1c1eb9fc8bcfcc5f947f14633886ae2b4c6b2bdeb71fcc7802945e484188b3f0425fd96996780f4f9e5ba028e5a600c65bdf6fc6936fc5f9e1792a02cb428f97262167e47a13f6a6634b99eb1791e7cd82f14c8c3353a52569c12e5b40a404564b4cba2fa7f247fbd74e1ab16f4caf68f6ebad58634970c1336d38c3feaf2b5c4eb8afb45aedb65c54b7e6a811c337d68ca5fc58279d7c4c524eb02bb36cd61f6269ce6b81e542e86500c837f7144962b2a6772981bed18a2173e41d73a74235f468305b3f0d5bd0a8f6ce90f6ba63f25322705d6464f9a24cdc13a528a9ae5f3907aa7018f5a1582c5242dbd325d05fef384da2f2cbd65ac0905a2311d75f72e2e1d30d34a62f91ebb79464ad1ca22b94e84d14c2337d13a017f80b3011d715c8629b1a2b638d4e20cdd639ad3db15e85db21494fb5e6ea599f0412d2b238a8a93b9bc930a9e126942c04f26e27631a2a46ef3115c683494bf2d805d03f76b07ea99380725914d01de34b1a5ab51487ea4c70c9591d6f84db21bb1c65c29d47a61b4e227e8bd917e6ff9d8cc1027bd2cf453b49d59cc9d21b13533df66c76cade633aaea0345f8d6e3b14375cc99d0b3e4c0eab870c9bc7b6911014fa556c8db62c3fcfec23deb242278c49b743987d0f65969f2e517b8de7d0b2a74865246cb4f32d40e1a4ea050563f28d3b9f598cf16265b270183cbaf91a2ef96c5aaaf7223a0bdf83c9fbdb324497e11aa4ed8ef02c5c9b7556504c957f2123603c62df3098ba82cd8d9f9738af6067e509159689741a262afd436b8d21c6104d092e66e2fbefa0b7e2c84c6d8ed44410224929b5ff349bef8d9ed6df6193424858f58039e4437b01e12517c86056108c7e6bc21caa884b9f3fd116657b2c8ca30ea557e6c4b60641686d0edf7c49a1c26589f82715e2e1914385bb91100169cf509aa1f3372ab65ccb422d1db5ff6acfde3af9bc2aef6e01455ac94f9d9655dc6020e858f97bb69dce077215d1427f61aabe63786384a2195ce411207aea8af9e3a0e736bf1af08ce4aecf45ce79c46a7f3cb111b14c54de5ef13c54b68fa5fa11bfbbf6bfcde697b300a2bbc152260db6bd5d9e9a648d9e54531c4e16610b885dd9e2f620879ca8d126f843630f17ddc42fb502a0f51ee6c630eb734c54891094684f9e34e5331ccb5570bed0fc99361e681e9e2f9ee16c8d3d89ddc7b1e51c70942b0a890d69411f1e8a8e73c6415eeb848a6987f806af7ef5c62ec16b862164943325b8c5b3ae2d8df2e33bb5dac9546c2b32070d05bb2753c6ade48f1c54fb0e3333c2de138a736a19e895037090336bc5e7e3683f7cdf148d20f5bbcfaa458fb9a24faa62c7151577ac9ab8f10af0e70b35c8c2d5d30c53e394d1eda842fef1647ec686022df373ca10be06ab8d74b56f2c7108f08d56b6c9e3980c6f30e14a1a154c5fec893deb607868eeeb6f981cfd08056b54f3327bb733cbd64c7c79447489dd6950b07c079544da5f184e21dbe9478dc0b5ed245e0dc9f60b577d0230e4a92fe1d7c2d1cb354f65da8f28692159b103e6564c58854f8bedc969f4e1158b58a90f21aa67686fcd74a8cc8909fe8557662582bf916cb409af96267dc0cbb5232309c5934e152e758f28518f37fa1da83fdfefb0f2991a13aa4c03e4f8ba4e2721a7c5e78474c05581299f3e9d24c433685dcea029494a7b7bd74cc986b3a4a92b5f6a21a2f7dcee7605474e1508ab632a9a4aa1992c7bf3d9265bffb047cdd0ebce043e411a3260de73af0dcbf6197a60a81846b3ae05db1227d5fc2815a9a7572764bbcf83d47fe202ffff6bda074405bb6132e3063bfd0ebdca4b8f8074f784bb0823fba59188764a37f73adcbcd80e", 0xa98}], 0x3}, 0x20000044) 42.338422585s ago: executing program 4 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd28, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x59}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8048}, 0x4804) 42.160553353s ago: executing program 4 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00') 41.961464133s ago: executing program 4 (id=419): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 41.29212576s ago: executing program 4 (id=425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r2, 0x40000) 41.058587633s ago: executing program 33 (id=425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r2, 0x40000) 5.575957551s ago: executing program 1 (id=676): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73ba1f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 5.348257724s ago: executing program 1 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x12, &(0x7f0000000000)={[{@gquota}, {@nolargeio}, {@swalloc}]}, 0x81, 0x9820, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x4, 0xb831, 0x3ffe}) 4.444581785s ago: executing program 1 (id=685): r0 = socket$inet6(0xa, 0x3, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x4, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x1ff, 0x4, 0xfffffffe, 0x0, 0x80000, 0xc000, 0x0, 0x0, 0x0, 0x41, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) 3.148342564s ago: executing program 1 (id=698): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.628733796s ago: executing program 5 (id=703): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000380)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x20000000000000, 0x12) 2.533028606s ago: executing program 5 (id=704): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000082000040"]) 2.379635942s ago: executing program 5 (id=716): unshare(0x600) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) io_setup(0x10, 0x0) 2.266027783s ago: executing program 5 (id=707): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0xfffffffffffffef1, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}], 0x4000000000001b7, 0x120, 0x0) 1.922317827s ago: executing program 0 (id=711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008104"]) 1.768927413s ago: executing program 0 (id=712): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x5f) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 1.6938054s ago: executing program 0 (id=713): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000), 0xfe, 0x264, &(0x7f0000000700)="$eJzs3TtoJHUcB/Df7MM1JkjURhAfICIaCLEQBBttFAISgoigQkTEShIhJthlrWwstFZJZRPE7nJXHteEaw6uzd2lyDVXXLjiwhV3xR6zs3tsNhvy2Mccmc8HNjP/nf9rYL7/TIqZBFBYkxHxUUSUI2IqIqoRkXRWeCP7TLaK62NbCxGNxuf3kma9rJxptxuPiHpEfBBRaR9b3fx698H2p2//vlJ969/Nr8ZGdX6d9nZ3Ptv/Z+63C7PvrZZa3020tp3nMUhJj+8qScSLwxjsKZFU8p4BJzH/y/830ty/FBFvNvNfjVIrsn8sP3OlGu/+fVTbP+9ef2WUcwUGr9Gopr8D6w2gcErNe+CkNB0R2X6pND2d3cPfLCfx49Lyz1M/LK0sfp/3SgUMQFLP/u7d+eRS7eJ4V/7vlLP8n8j7Q54pMBRp/r+Y37iV7u+X854NMBKvZps0/1Pfrr0T8g+FI/9QXPIPxSX/cA6cMbvyD8Ul/1Bc8g/nWLW9U+95WP6huOQfiqsr/7k8jwvkozP/AECxNGp5P4EM5CXv9QcAAAAAAAAAAAAAAAAAADhsfWxrof0Z1ZhX/4rY+zgiKgfHrzWPlpv/jzji2ebP5+4nabUnkqxZX755vc8O+vTfgJ++nqudrv7ztwc7/mlde204/f56sHjku+3WFiPqaeWZSuXw9Z+0rr9jHdn/C8c0rH53sgEGJekqf/jlaMfv9mgj3/FntyMup+vPTK/1rxQvN7e915+Jzlcsn9FPD/vsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJF5HAAA//+4Vmsn") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10b142, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)) fallocate(r0, 0x10, 0x8fff, 0x7fff) 1.407057779s ago: executing program 5 (id=715): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) 1.387093861s ago: executing program 0 (id=717): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0xfff, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffc, 0x200000000000, 0x101}, 0x0, 0x0, 0x1, 0x1, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, r1) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x7, 0xe9, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) 1.09430272s ago: executing program 0 (id=719): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x4e20, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0x4, {{0x2, 0x4e22, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @remote}}}, 0x108) 1.030304907s ago: executing program 3 (id=720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000e05000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x6f, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000000000008d04000000060000ff"]) 1.022526878s ago: executing program 0 (id=721): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 844.691235ms ago: executing program 6 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 759.042864ms ago: executing program 3 (id=724): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x110c230000, 0x4003, 0x2, @thr={0x0, 0x0}}) 747.925935ms ago: executing program 6 (id=725): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x59e, &(0x7f0000000540)={0x0, 0xaee1, 0x0, 0x2, 0x130}, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 561.394764ms ago: executing program 6 (id=726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f00000000c0)={0x68, 0x0, [{0x80000007, 0x200, 0xa, 0x4, 0x5, 0x1, 0xffffffff}, {0x80000019, 0x8, 0x5, 0xa, 0x0, 0x5, 0x3ff}, {0x40000001, 0x20000, 0x0, 0x7, 0x10, 0x5}, {0x40000007, 0x7, 0x2, 0x3, 0xfffffffd, 0x6, 0x7}]}) 560.764144ms ago: executing program 3 (id=736): r0 = msgget$private(0x0, 0x480) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200"], 0x401, 0x0) msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x401, 0x0) msgsnd(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100"], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) 417.357798ms ago: executing program 5 (id=727): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdnZZ6W5LYcuQ8vkks/vePJb3nSbffW86bzoBPLHGs5c0Ym9EfJ5EjBX704gYzksjEcutf3dn5cp0tiWxuvrOv0kkEXF75cp0+/9Kivdd2Us1/2T89UvEM5W1/S4sXT7XaDZnLxX1icXzH04sLF0+OH++cXb27OyFQ69OHp567cixV44M7FiXjqaf/fnmG99dO/P1Hz8ee+HTJE7E7qKt+zgGZTzGOz+TbtWIeG/QnZWkUhxPr+MEAODxk3bN4fbGWFTyUstY1OdLDQ4AAAAYiE8iYhUAAADY5hLn/wAAALDNtdcB3F65Mt3eyl2RADwqt05GRK2V/+37+1st1VjO30diKCJG7yRddwa17veuDaD/8Yj44auj+7Ittug+fKC35asR8Vyv8T/J87+W/xWPtfmfRsTkAPofv6cu/+HReZj8PzGA/uU/AAAAAAAADM71k60L+Wuv/6Wd9T/R4/pfpce1uwex8fW/9OYAugF6uHUy4vWuZ/vc6cr/Qq1S1J7K1wMMJXPzzdnJiHg6Ig7E0I6sPrVOH9/+dPzvfm3d6/+yLeu/vRawiONmdcf/PzPTWGw8zDEDLbeuRjxf7ZX/SWf8T/qs/337Pvv47fTPc/3aNs5/YKusfhOxv+f4f/eJbsn6z+ebyOcDE+1ZwVqnX/z1+379y38oTzb+j66f/7Wk+3mdC5vvY3L04Nl+bQ86/x9OTuVPFR0u9n3cWFy8NBUxnLy1dv+hzccM21E7H9r5kuX/gZd6n/+vN//Pkuz94lsijYhG8Z7VP7inzx1nfv+iXzzGfyhPlv8zmxr/N1/48t2VU/36v7/x/0g+ph8o9vj9H6zvfhO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgcZJGxO5I0nqnnKb1esSuiHg2RtPmxYXFl+cufnRhJmuLqMVQOjffnJ2MiLFWPcnqU3n5bv3QPfXDEbEnIq6N7czr9emLzZmyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICOXRGxO5K0HhFpXk7Ter3V9s9Y2dEBAAAAA1MrOwAAAABgyzn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAh7dl3/UYSEcvHd+ZbZrhoGyo1MmCrpWUHAJSmUnYAQGmqZQcAlMY5PpBs0D7St8UMAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBJsn/v9RtJRCwf35lvmeGibajUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftI3xYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnycLS5XONZnP2koKCgkKnUPY3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvZfwEAAP//vlL7zw==") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x8001, 0x4, 0xd92, 0x0, 0x2401}) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000000c0)={0x4, 0x9669, 0x2000, 0x4, 0x20000000, 0xa, 0x2401}) 387.224072ms ago: executing program 6 (id=728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0) 361.684043ms ago: executing program 1 (id=729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000000000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) 334.498386ms ago: executing program 3 (id=730): syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x400, 0x1000, 0x1cc0014, r2}) 193.444271ms ago: executing program 3 (id=731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0x519, 0x80, 0x0, 0x1bc}, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r2, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 130.205427ms ago: executing program 1 (id=732): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0x1000000000000c8, 0x0, 0x2, 0x8, 0x4, 0xfffffffffffffffc, 0x5166}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) 129.826147ms ago: executing program 6 (id=733): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffff9, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x4, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xbe6, 0x5, 0x0, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x609, 0x7, 0xf4c, 0x8, 0x2, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffd, 0x80008071, 0x7, 0x17, 0x1, 0x3, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x0, 0x0, 0x5, 0x6, 0x8, 0xb, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x1, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x3, 0x1, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x76, 0xea4, 0x0, 0x5, 0xf6e3, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0x20b, 0x4, 0xa, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x200, 0xda, 0x7, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x3, 0x42, 0x3], [0x7, 0x40a, 0xc9, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x1, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xfff, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x1000002, 0x57, 0x5, 0x3, 0x1, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xb, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xcb, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xfcee, 0xd4, 0x200, 0xffff3441, 0xffe]}, 0x45c) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 613.58µs ago: executing program 6 (id=734): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8002, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x3f, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x2, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(r0) 0s ago: executing program 3 (id=745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x2, 0x0, [{0x40000022, 0x0, 0x3}, {0x2ee, 0x0, 0xdf69}]}) kernel console output (not intermixed with test programs): id=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 82.770580][ T4555] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 82.919510][ T26] audit: type=1326 audit(1763220445.163:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 83.045186][ T26] audit: type=1326 audit(1763220445.173:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 83.130628][ T26] audit: type=1326 audit(1763220445.193:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 83.197475][ T4571] loop2: detected capacity change from 0 to 64 [ 83.247504][ T26] audit: type=1326 audit(1763220445.193:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.0.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 83.715454][ T4588] loop2: detected capacity change from 0 to 256 [ 83.837658][ T4586] loop4: detected capacity change from 0 to 32768 [ 83.898610][ T4586] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.93 (4586) [ 83.898668][ T4588] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.931060][ T4588] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 83.947446][ T4553] loop3: detected capacity change from 0 to 32768 [ 83.975127][ T4588] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 84.001632][ T4586] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 84.010998][ T4586] BTRFS info (device loop4): using free space tree [ 84.017545][ T4586] BTRFS info (device loop4): has skinny extents [ 84.081232][ T4553] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.80 (4553) [ 84.159837][ T4553] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 84.211842][ T4553] BTRFS info (device loop3): using free space tree [ 84.219418][ T4553] BTRFS info (device loop3): has skinny extents [ 84.319209][ T4467] kernel write not supported for file /70/gid_map (pid: 4467 comm: kworker/1:12) [ 84.401210][ T4586] BTRFS info (device loop4): enabling ssd optimizations [ 84.528044][ T4636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 84.540583][ T4553] BTRFS info (device loop3): enabling ssd optimizations [ 84.547880][ T4636] tipc: Started in network mode [ 84.591134][ T4636] tipc: Node identity @emory.en, cluster identity 8 [ 84.819752][ T4553] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 84.905029][ T4645] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.030832][ T4653] loop4: detected capacity change from 0 to 512 [ 85.270509][ T4661] loop1: detected capacity change from 0 to 256 [ 85.353537][ T4661] exfat: Deprecated parameter 'utf8' [ 85.387627][ T4661] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 85.755087][ T4679] loop4: detected capacity change from 0 to 64 [ 85.787961][ T4677] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 85.791314][ T4467] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.811410][ T4677] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.837474][ T4679] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 85.870745][ T4681] Zero length message leads to an empty skb [ 86.191319][ T4467] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 86.208528][ T4467] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.239287][ T4467] usb 1-1: config 0 descriptor?? [ 86.267819][ T4696] loop4: detected capacity change from 0 to 4096 [ 86.293231][ T4467] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 86.340005][ T4698] loop3: detected capacity change from 0 to 4096 [ 86.347566][ T4696] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.413939][ T4696] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz.4.119: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 86.472618][ T4696] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.119: directory missing '..' [ 86.492835][ T4701] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.511190][ T4467] gp8psk: usb in 128 operation failed. [ 86.551249][ T4467] gp8psk: usb in 137 operation failed. [ 86.556866][ T4467] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.591567][ T4467] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 86.601946][ T4467] usb 1-1: media controller created [ 86.610553][ T4689] loop2: detected capacity change from 0 to 32768 [ 86.624774][ T4467] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.662075][ T4689] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.115 (4689) [ 86.689915][ T4467] gp8psk_fe: Frontend attached [ 86.703210][ T4467] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 86.720471][ T4705] loop3: detected capacity change from 0 to 256 [ 86.724532][ T4467] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 86.761209][ T4689] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 86.784085][ T1110] cfg80211: failed to load regulatory.db [ 86.795229][ T4689] BTRFS info (device loop2): using free space tree [ 86.813349][ T4689] BTRFS info (device loop2): has skinny extents [ 86.883614][ T4705] FAT-fs (loop3): Directory bread(block 64) failed [ 86.890679][ T4705] FAT-fs (loop3): Directory bread(block 65) failed [ 86.891424][ T4467] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 86.917175][ T4467] gp8psk: found Genpix USB device pID = 203 (hex) [ 86.951297][ T4705] FAT-fs (loop3): Directory bread(block 66) failed [ 86.958126][ T4705] FAT-fs (loop3): Directory bread(block 67) failed [ 86.987283][ T4705] FAT-fs (loop3): Directory bread(block 68) failed [ 87.059043][ T4705] FAT-fs (loop3): Directory bread(block 69) failed [ 87.071259][ T4689] BTRFS info (device loop2): enabling ssd optimizations [ 87.088920][ T4705] FAT-fs (loop3): Directory bread(block 70) failed [ 87.127799][ T4705] FAT-fs (loop3): Directory bread(block 71) failed [ 87.137609][ T4705] FAT-fs (loop3): Directory bread(block 72) failed [ 87.140673][ T4670] usb 1-1: USB disconnect, device number 2 [ 87.160915][ T4689] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4) [ 87.168803][ T4705] FAT-fs (loop3): Directory bread(block 73) failed [ 87.390095][ T4670] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 87.868992][ T4752] loop3: detected capacity change from 0 to 1024 [ 88.099115][ T4759] loop8: detected capacity change from 0 to 8 [ 88.106375][ T4757] Process accounting resumed [ 88.150573][ T4759] Dev loop8: unable to read RDB block 8 [ 88.166576][ T4759] loop8: unable to read partition table [ 88.188037][ T4759] loop8: partition table beyond EOD, truncated [ 88.228384][ T4759] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 88.293671][ T4765] loop2: detected capacity change from 0 to 512 [ 88.390179][ T4765] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.410116][ T4765] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.447251][ T4765] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.137: path /: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 88.474156][ T4746] loop4: detected capacity change from 0 to 32768 [ 88.518325][ T4765] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 12: comm syz.2.137: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 88.544092][ T4746] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.130 (4746) [ 88.638833][ T4746] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 88.660708][ T4765] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.137: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 88.694055][ T4746] BTRFS info (device loop4): setting nodatacow, compression disabled [ 88.719646][ T4746] BTRFS info (device loop4): max_inline at 0 [ 88.734847][ T4746] BTRFS info (device loop4): enabling disk space caching [ 88.752112][ T4746] BTRFS info (device loop4): turning off barriers [ 88.769506][ T4765] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 14: comm syz.2.137: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 88.791183][ T4746] BTRFS info (device loop4): turning on flush-on-commit [ 88.798418][ T4746] BTRFS info (device loop4): doing ref verification [ 88.851193][ T4746] BTRFS info (device loop4): force clearing of disk cache [ 88.858518][ T4746] BTRFS info (device loop4): enabling ssd optimizations [ 88.866637][ T4765] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 15: comm syz.2.137: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 88.893045][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 88.903171][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 88.910765][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.920858][ T4201] Workqueue: hci2 hci_rx_work [ 88.925589][ T4201] Call Trace: [ 88.928410][ T4765] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.137: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 88.928893][ T4201] [ 88.928930][ T4201] dump_stack_lvl+0x168/0x230 [ 88.956294][ T4746] BTRFS info (device loop4): max_inline at 4096 [ 88.956695][ T4201] ? show_regs_print_info+0x20/0x20 [ 88.968226][ T4201] ? load_image+0x3b0/0x3b0 [ 88.972781][ T4201] sysfs_create_dir_ns+0x252/0x280 [ 88.978089][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 88.983151][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 88.987872][ T4201] ? le_conn_complete_evt+0xcbc/0x1590 [ 88.989024][ T4746] BTRFS info (device loop4): disk space caching is enabled [ 88.993367][ T4201] ? hci_event_packet+0xe05/0x12f0 [ 88.993399][ T4201] ? process_one_work+0x863/0x1000 [ 88.993423][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 88.993450][ T4201] kobject_add_internal+0x662/0xd00 [ 88.993481][ T4201] kobject_add+0x152/0x210 [ 88.993506][ T4201] ? kobject_init+0x1d0/0x1d0 [ 88.993532][ T4201] ? klist_children_get+0x50/0x50 [ 89.035868][ T4201] ? get_device_parent+0x121/0x3f0 [ 89.041027][ T4201] device_add+0x483/0xfb0 [ 89.045419][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 89.050395][ T4201] le_conn_complete_evt+0xcbc/0x1590 [ 89.055734][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 89.056368][ T4746] BTRFS info (device loop4): has skinny extents [ 89.060914][ T4201] ? __mutex_trylock_common+0x14f/0x250 [ 89.060951][ T4201] hci_le_meta_evt+0x289/0x3b80 [ 89.060975][ T4201] ? hci_event_packet+0x36d/0x12f0 [ 89.060999][ T4201] ? hci_event_packet+0x2e2/0x12f0 [ 89.061023][ T4201] ? __lock_acquire+0x7c60/0x7c60 [ 89.061057][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 89.061080][ T4201] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 89.061105][ T4201] ? mark_lock+0x94/0x320 [ 89.078845][ T4765] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 17: comm syz.2.137: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 89.082886][ T4201] ? mutex_unlock+0x10/0x10 [ 89.082920][ T4201] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 89.082949][ T4201] ? lock_chain_count+0x20/0x20 [ 89.082973][ T4201] ? __rwlock_init+0x140/0x140 [ 89.082997][ T4201] hci_event_packet+0xe05/0x12f0 [ 89.083023][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 89.159113][ T4201] ? rcu_lock_release+0x20/0x20 [ 89.164014][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 89.169262][ T4201] hci_rx_work+0x255/0xa10 [ 89.173847][ T4201] process_one_work+0x863/0x1000 [ 89.178850][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 89.184510][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 89.189836][ T4201] ? _raw_spin_lock_irq+0xab/0xe0 [ 89.194899][ T4201] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 89.200313][ T4201] ? wq_worker_running+0x97/0x170 [ 89.205374][ T4201] worker_thread+0xaa8/0x12a0 [ 89.210088][ T4201] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 89.216012][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 89.221249][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 89.226479][ T4201] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 89.227880][ T4184] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 89.232408][ T4201] kthread+0x436/0x520 [ 89.232431][ T4201] ? rcu_lock_release+0x20/0x20 [ 89.232452][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 89.232473][ T4201] ret_from_fork+0x1f/0x30 [ 89.232510][ T4201] [ 89.234999][ T4201] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 89.288626][ T4201] Bluetooth: hci2: failed to register connection device [ 89.302953][ T4184] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 12: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 89.401427][ T4184] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 89.523992][ T4184] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 89.545000][ T4184] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 89.631934][ T4814] loop0: detected capacity change from 0 to 1024 [ 89.652048][ T4184] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 89.680337][ T4184] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 89.695564][ T4746] BTRFS info (device loop4): clearing free space tree [ 89.715234][ T4746] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.743315][ T4184] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 89.768180][ T4746] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.832693][ T4184] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 89.870490][ T4184] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 89.897651][ T4184] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 89.965789][ T4184] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 90.039726][ T4184] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 90.106080][ T4819] loop1: detected capacity change from 0 to 8192 [ 90.156898][ T4819] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 90.175408][ T4819] REISERFS (device loop1): using ordered data mode [ 90.182752][ T4819] reiserfs: using flush barriers [ 90.191433][ T4819] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.240851][ T4819] REISERFS (device loop1): checking transaction log (loop1) [ 90.260284][ T4828] netlink: 'syz.3.154': attribute type 6 has an invalid length. [ 90.398945][ T4833] loop3: detected capacity change from 0 to 256 [ 90.444160][ T4819] REISERFS (device loop1): Using tea hash to sort names [ 90.486591][ T4819] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 90.496212][ T4833] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 91.117316][ T4839] loop1: detected capacity change from 0 to 256 [ 91.139798][ T4841] device syzkaller1 entered promiscuous mode [ 91.377885][ T4843] loop0: detected capacity change from 0 to 32768 [ 91.417660][ T4847] use of bytesused == 0 is deprecated and will be removed in the future, [ 91.438283][ T4843] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.160 (4843) [ 91.489213][ T4843] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 91.498122][ T4843] BTRFS info (device loop0): enabling disk space caching [ 91.499143][ T4847] use the actual size instead. [ 91.505225][ T4843] BTRFS info (device loop0): turning on flush-on-commit [ 91.505252][ T4843] BTRFS info (device loop0): doing ref verification [ 91.505270][ T4843] BTRFS info (device loop0): use no compression [ 91.505285][ T4843] BTRFS info (device loop0): force clearing of disk cache [ 91.505313][ T4843] BTRFS info (device loop0): disabling disk space caching [ 91.505329][ T4843] BTRFS info (device loop0): has skinny extents [ 91.896926][ T4340] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.961237][ T4843] BTRFS info (device loop0): enabling ssd optimizations [ 91.969640][ T4843] BTRFS info (device loop0): clearing free space tree [ 91.976726][ T4843] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 91.986524][ T4843] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.516552][ T4340] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.696770][ T4878] loop4: detected capacity change from 0 to 32768 [ 92.749289][ T4340] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.818777][ T4878] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 92.818777][ T4878] [ 92.885686][ T4878] jfs_create: dtInsert returned -EIO [ 92.912857][ T4340] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.941149][ T4878] ERROR: (device loop4): jfs_create: [ 92.941149][ T4878] [ 93.483276][ T4888] chnl_net:caif_netlink_parms(): no params data found [ 93.524603][ T4340] tipc: Left network mode [ 93.610926][ T4892] loop1: detected capacity change from 0 to 32768 [ 93.644633][ T4892] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.173 (4892) [ 93.668563][ T4908] loop4: detected capacity change from 0 to 512 [ 93.682722][ T4906] netlink: 3 bytes leftover after parsing attributes in process `syz.3.177'. [ 93.704650][ T4906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.177'. [ 93.731106][ T4906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.177'. [ 93.751153][ T4892] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 93.771006][ T4892] BTRFS info (device loop1): using free space tree [ 93.777765][ T4892] BTRFS info (device loop1): has skinny extents [ 93.828677][ T4908] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.178: inode has both inline data and extents flags [ 93.925868][ T4908] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.178: couldn't read orphan inode 15 (err -117) [ 93.989295][ T4908] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.144687][ T4419] Bluetooth: hci5: Frame reassembly failed (-84) [ 94.212920][ T4888] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.220143][ T4888] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.243723][ T4892] BTRFS info (device loop1): enabling ssd optimizations [ 94.269731][ T4888] device bridge_slave_0 entered promiscuous mode [ 94.451830][ T4888] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.502026][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.562906][ T4888] device bridge_slave_1 entered promiscuous mode [ 94.598366][ T4954] loop4: detected capacity change from 0 to 32768 [ 94.631310][ T4651] Bluetooth: hci1: command 0x0409 tx timeout [ 95.102513][ T4954] XFS (loop4): Mounting V5 Filesystem [ 95.188439][ T4888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.198613][ T4954] XFS (loop4): Ending clean mount [ 95.210240][ T4954] XFS (loop4): Quotacheck needed: Please wait. [ 95.253385][ T4888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.361639][ T4888] team0: Port device team_slave_0 added [ 95.371341][ T4954] XFS (loop4): Quotacheck: Done. [ 95.417862][ T4888] team0: Port device team_slave_1 added [ 95.432337][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 95.445467][ T4194] XFS (loop4): Unmounting Filesystem [ 95.594446][ T4888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.609146][ T4888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.713144][ T4888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.736819][ T4888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.756999][ T4888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.788515][ T4888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.807483][ T4994] device macvlan2 entered promiscuous mode [ 95.914118][ T4996] device macvlan3 entered promiscuous mode [ 95.989589][ T4998] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.040093][ T4888] device hsr_slave_0 entered promiscuous mode [ 96.078003][ T4888] device hsr_slave_1 entered promiscuous mode [ 96.094314][ T4888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.108087][ T4888] Cannot create hsr debugfs directory [ 96.151355][ T4666] Bluetooth: hci5: command 0x1003 tx timeout [ 96.157531][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 96.164471][ T5000] tipc: Started in network mode [ 96.169375][ T5000] tipc: Node identity 7f000001, cluster identity 4711 [ 96.179508][ T5000] tipc: Enabled bearer , priority 10 [ 96.249764][ T5005] loop3: detected capacity change from 0 to 256 [ 96.293285][ T5005] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.335296][ T5005] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.351089][ T4738] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.395780][ T4340] device hsr_slave_0 left promiscuous mode [ 96.421298][ T4340] device hsr_slave_1 left promiscuous mode [ 96.442190][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.463887][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.486642][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.502700][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.510719][ T4340] device bridge_slave_1 left promiscuous mode [ 96.531408][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.606144][ T4340] device bridge_slave_0 left promiscuous mode [ 96.611067][ T4738] usb 5-1: Using ep0 maxpacket: 8 [ 96.625004][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.709589][ T4340] device veth1_macvtap left promiscuous mode [ 96.716730][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 96.729314][ T4340] device veth0_macvtap left promiscuous mode [ 96.739594][ T4340] device veth1_vlan left promiscuous mode [ 96.741415][ T4738] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.745773][ T4340] device veth0_vlan left promiscuous mode [ 96.767608][ T4738] usb 5-1: config 0 has no interface number 0 [ 96.780684][ T4738] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.804797][ T4738] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.822667][ T4738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.844032][ T4738] usb 5-1: config 0 descriptor?? [ 96.897585][ T4738] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 97.031179][ T4465] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.113308][ T4738] usb 5-1: USB disconnect, device number 2 [ 97.170145][ T4340] team0 (unregistering): Port device team_slave_1 removed [ 97.188493][ T4340] team0 (unregistering): Port device team_slave_0 removed [ 97.197747][ T4667] tipc: Node number set to 2130706433 [ 97.214262][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.229784][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.281168][ T4465] usb 4-1: Using ep0 maxpacket: 32 [ 97.315621][ T4340] bond0 (unregistering): Released all slaves [ 97.401207][ T4465] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 97.412096][ T4465] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 97.451192][ T4465] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 97.471874][ T4465] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 97.505550][ T4465] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.542201][ T4888] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.566220][ T5031] loop1: detected capacity change from 0 to 1024 [ 97.578574][ T4888] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.630231][ T4888] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.646080][ T4888] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.671430][ T4465] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 97.696034][ T4465] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 97.727811][ T4465] usb 4-1: Product: syz [ 97.744198][ T4465] usb 4-1: Manufacturer: syz [ 97.751196][ T4465] usb 4-1: SerialNumber: syz [ 97.796451][ T4465] usb 4-1: config 0 descriptor?? [ 97.881424][ T4465] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 97.936586][ T4465] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 97.991438][ T4888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.071997][ T1108] usb 4-1: USB disconnect, device number 3 [ 98.096074][ T1108] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 98.105356][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.121660][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.142933][ T4888] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.175034][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.204589][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.221843][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.228959][ T4419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.237018][ T4667] Bluetooth: hci5: command 0x1001 tx timeout [ 98.243750][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 98.270173][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.281574][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.290903][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.305717][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.312920][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.367357][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.409259][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.473621][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.509646][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.546744][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.621780][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.649376][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.682336][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.697238][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.742064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.777825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.791247][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 98.805339][ T4888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.330291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.370727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.409433][ T4888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.441546][ T5088] device syzkaller1 entered promiscuous mode [ 99.837870][ T5105] loop4: detected capacity change from 0 to 256 [ 100.026130][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.046946][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.115752][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 100.193273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.212089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.242995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.267049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.284229][ T4888] device veth0_vlan entered promiscuous mode [ 100.301330][ T4667] Bluetooth: hci5: command 0x1009 tx timeout [ 100.339745][ T4888] device veth1_vlan entered promiscuous mode [ 100.421357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.442088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.470826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.511857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.536086][ T4888] device veth0_macvtap entered promiscuous mode [ 100.564465][ T4888] device veth1_macvtap entered promiscuous mode [ 100.607168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.611800][ T4465] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 100.627458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.696091][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.709632][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.720364][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.740408][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.760689][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.783057][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.802226][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.843020][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.863274][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 100.880401][ T4888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.952483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.972204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.013184][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.054080][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.114437][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.126493][ T5146] netlink: 'syz.1.225': attribute type 29 has an invalid length. [ 101.134994][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.151280][ T4465] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 101.170714][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.187321][ T4465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.197993][ T4465] usb 5-1: Product: syz [ 101.215392][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.241288][ T4465] usb 5-1: Manufacturer: syz [ 101.246075][ T4465] usb 5-1: SerialNumber: syz [ 101.257081][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.287833][ T4465] usb 5-1: config 0 descriptor?? [ 101.294274][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.316730][ T4888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.334064][ T5146] netlink: 'syz.1.225': attribute type 29 has an invalid length. [ 101.361396][ T5147] netlink: 'syz.1.225': attribute type 29 has an invalid length. [ 101.394055][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.422131][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.435944][ T4888] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.445184][ T4888] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.454572][ T4888] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.469910][ T4888] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.480809][ T5150] netlink: 'syz.1.225': attribute type 29 has an invalid length. [ 101.491351][ T5150] netlink: 'syz.1.225': attribute type 29 has an invalid length. [ 101.499312][ T5150] netlink: 'syz.1.225': attribute type 29 has an invalid length. [ 101.522875][ T5150] netlink: 'syz.1.225': attribute type 29 has an invalid length. [ 101.542844][ T5150] netlink: 'syz.1.225': attribute type 29 has an invalid length. [ 101.560297][ T5150] netlink: 'syz.1.225': attribute type 29 has an invalid length. [ 101.568218][ T4465] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 101.624970][ T5158] input: syz1 as /devices/virtual/input/input5 [ 101.648771][ T5150] netlink: 'syz.1.225': attribute type 29 has an invalid length. [ 101.796598][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.817385][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.862249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.880015][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 101.895108][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.914254][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.938666][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.161336][ T5172] af_packet: tpacket_rcv: packet too big, clamped from 78 to 4294967286. macoff=82 [ 102.161770][ T5173] user requested TSC rate below hardware speed [ 102.281338][ T4465] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 102.319966][ T4465] usb 5-1: USB disconnect, device number 3 [ 102.349877][ T5184] loop1: detected capacity change from 0 to 256 [ 102.499696][ T5184] FAT-fs (loop1): Directory bread(block 64) failed [ 102.548948][ T5184] FAT-fs (loop1): Directory bread(block 65) failed [ 102.588500][ T5184] FAT-fs (loop1): Directory bread(block 66) failed [ 102.631301][ T5184] FAT-fs (loop1): Directory bread(block 67) failed [ 102.672465][ T5184] FAT-fs (loop1): Directory bread(block 68) failed [ 102.703347][ T5184] FAT-fs (loop1): Directory bread(block 69) failed [ 102.730578][ T5184] FAT-fs (loop1): Directory bread(block 70) failed [ 102.773504][ T5184] FAT-fs (loop1): Directory bread(block 71) failed [ 102.797925][ T5184] FAT-fs (loop1): Directory bread(block 72) failed [ 102.819690][ T5183] loop3: detected capacity change from 0 to 65536 [ 102.836943][ T5184] FAT-fs (loop1): Directory bread(block 73) failed [ 103.027434][ T5183] XFS (loop3): Mounting V5 Filesystem [ 103.135412][ T5208] pimreg: tun_chr_ioctl cmd 1074025681 [ 103.141274][ T5208] pimreg: tun_chr_ioctl cmd 1074025681 [ 103.175355][ T5183] XFS (loop3): Ending clean mount [ 103.187776][ T5183] XFS (loop3): Quotacheck needed: Please wait. [ 103.265022][ T5183] XFS (loop3): Quotacheck: Done. [ 103.482520][ T4189] XFS (loop3): Unmounting Filesystem [ 103.853883][ T5223] loop5: detected capacity change from 0 to 2048 [ 103.952707][ T5223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.996653][ T5199] loop4: detected capacity change from 0 to 40427 [ 104.064266][ T5199] F2FS-fs (loop4): invalid crc value [ 104.151094][ T5199] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.397747][ T5199] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 104.547589][ T5239] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 104.560154][ T5199] attempt to access beyond end of device [ 104.560154][ T5199] loop4: rw=2049, want=45104, limit=40427 [ 104.644570][ T5245] loop3: detected capacity change from 0 to 512 [ 104.728813][ T5245] EXT4-fs (loop3): 1 truncate cleaned up [ 104.764064][ T5245] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.919883][ T5259] loop1: detected capacity change from 0 to 1024 [ 104.951743][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.247'. [ 105.031936][ T5254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.064434][ T5259] EXT4-fs (loop1): Ignoring removed nobh option [ 105.074865][ T5259] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.155435][ T5259] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=5856c018, mo2=0102] [ 105.217445][ T5254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.227492][ T5259] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,usrjquota=,abort,noinit_itable,discard,debug,grpquota,noblock_validity,user_xattr,lazytime,nobh,,errors=continue. Quota mode: writeback. [ 105.609243][ T5278] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.636282][ T5276] loop3: detected capacity change from 0 to 1024 [ 105.665749][ T5276] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 105.731123][ T5276] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.831752][ T5276] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 105.839951][ T5276] System zones: 0-1, 3-36 [ 105.859138][ T26] audit: type=1326 audit(1763220468.553:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 105.893376][ T5276] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 105.936001][ T5286] device veth1_to_bond entered promiscuous mode [ 106.004538][ T5285] device veth1_to_bond left promiscuous mode [ 106.051085][ T26] audit: type=1326 audit(1763220468.663:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 106.218243][ T26] audit: type=1326 audit(1763220468.663:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 106.297699][ T26] audit: type=1326 audit(1763220468.673:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 106.411126][ T26] audit: type=1326 audit(1763220468.673:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 106.500416][ T5304] loop4: detected capacity change from 0 to 1024 [ 106.521563][ T26] audit: type=1326 audit(1763220468.673:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 106.550378][ T5309] device vlan2 entered promiscuous mode [ 106.559186][ T5309] device ip6gretap0 entered promiscuous mode [ 106.628981][ T5314] loop3: detected capacity change from 0 to 128 [ 106.663036][ T26] audit: type=1326 audit(1763220468.673:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 106.754556][ T26] audit: type=1326 audit(1763220468.713:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 106.755077][ T5314] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.841879][ T5314] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.879387][ T26] audit: type=1326 audit(1763220468.713:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b44f66c9 code=0x7ffc0000 [ 107.082201][ T5324] loop4: detected capacity change from 0 to 128 [ 107.122624][ T5325] loop1: detected capacity change from 0 to 8 [ 107.199286][ T5324] EXT4-fs (loop4): Test dummy encryption mode enabled [ 107.236961][ T5324] EXT4-fs (loop4): Test dummy encryption mode enabled [ 107.270831][ T5324] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 107.306545][ T5324] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 107.387034][ T5324] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 107.472036][ T5324] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.504784][ T5334] loop5: detected capacity change from 0 to 512 [ 107.597570][ T5337] loop1: detected capacity change from 0 to 512 [ 107.733142][ T5337] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 107.757505][ T5337] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.786382][ T5347] loop3: detected capacity change from 0 to 128 [ 107.922459][ T5347] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.998465][ T5347] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.051152][ T5347] EXT4-fs (loop3): shut down requested (0) [ 108.206120][ T5338] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 108.560753][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 108.781175][ T5382] loop4: detected capacity change from 0 to 256 [ 108.811217][ T2302] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 108.882034][ T5387] loop3: detected capacity change from 0 to 4096 [ 108.914760][ T5382] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.925808][ T5382] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 108.978611][ T5387] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.984470][ T5382] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 109.013954][ T5382] exFAT-fs (loop4): hint_cluster is invalid (17) [ 109.081106][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.237174][ T2302] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 109.248563][ T2302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.351224][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 109.360231][ T2302] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 109.379591][ T2302] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 109.398349][ T2302] usb 6-1: Manufacturer: syz [ 109.423175][ T2302] usb 6-1: config 0 descriptor?? [ 109.501869][ T1108] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 109.520568][ T1108] usb 2-1: config 0 has no interface number 0 [ 109.591290][ T2302] rc_core: IR keymap rc-hauppauge not found [ 109.597274][ T2302] Registered IR keymap rc-empty [ 109.614074][ T2302] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 109.649423][ T2302] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 109.685889][ T5416] netlink: 32 bytes leftover after parsing attributes in process `syz.4.300'. [ 109.721642][ T1108] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 109.722317][ T5416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.300'. [ 109.735236][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.761043][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 109.768170][ T1108] usb 2-1: Product: syz [ 109.789922][ T5366] udc-core: couldn't find an available UDC or it's busy [ 109.794263][ T1108] usb 2-1: Manufacturer: syz [ 109.809377][ T5366] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.827194][ T1108] usb 2-1: SerialNumber: syz [ 109.834260][ T4738] usb 6-1: USB disconnect, device number 2 [ 109.921319][ T1108] usb 2-1: config 0 descriptor?? [ 109.958665][ T5423] loop0: detected capacity change from 0 to 1024 [ 109.983035][ T1108] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 110.086251][ T5423] hfsplus: xattr searching failed [ 110.099684][ T5423] process 'syz.0.302' launched './file0' with NULL argv: empty string added [ 110.140159][ T5423] hfsplus: xattr searching failed [ 110.151936][ T5423] hfsplus: xattr searching failed [ 110.208324][ T1108] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 110.245889][ T1108] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 110.288908][ T5414] loop3: detected capacity change from 0 to 32768 [ 110.513760][ T5414] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 110.536859][ T5429] loop0: detected capacity change from 0 to 8192 [ 110.581413][ T5429] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 110.601336][ T5429] REISERFS (device loop0): using ordered data mode [ 110.650776][ T5429] reiserfs: using flush barriers [ 110.668857][ T5429] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.737422][ T5429] REISERFS (device loop0): checking transaction log (loop0) [ 110.792498][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 110.804322][ T5429] REISERFS (device loop0): Using r5 hash to sort names [ 110.836271][ T5429] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 110.921151][ T4738] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.025573][ T5451] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿî§<< G4š¶mÿ±â½ÆuÆÌëê0º‰wÆ2ÝK×]<ýÌàÈŒÏðÿD|ÙÊÞÔ«öWgéÛ½{XA¨Î>®\µ«ý}O´LqQÞ·¸ùχ [ 111.025573][ T5451] ðOÉQ±•Çý6ÿÛÐb" [ 111.191263][ T4738] usb 5-1: Using ep0 maxpacket: 32 [ 111.489871][ T5458] loop3: detected capacity change from 0 to 32768 [ 111.532017][ T4738] usb 5-1: config 155 has an invalid interface number: 182 but max is 0 [ 111.543888][ T4738] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 111.559098][ T4738] usb 5-1: config 155 has 2 interfaces, different from the descriptor's value: 1 [ 111.578609][ T4738] usb 5-1: config 155 has no interface number 1 [ 111.592374][ T4738] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 111.615911][ T4738] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 111.629638][ T4738] usb 5-1: config 155 interface 182 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 111.643753][ T4738] usb 5-1: config 155 interface 182 has no altsetting 0 [ 111.646179][ T5440] loop5: detected capacity change from 0 to 32768 [ 111.682012][ T5458] XFS (loop3): Mounting V5 Filesystem [ 111.794954][ T5458] XFS (loop3): Ending clean mount [ 111.803817][ T5458] XFS (loop3): Quotacheck needed: Please wait. [ 111.812198][ T4738] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 111.828130][ T2302] usb 2-1: USB disconnect, device number 2 [ 111.834169][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 111.844438][ T5440] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 111.858678][ T4738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.870425][ T2302] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 111.885338][ T2302] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 111.898302][ T2302] quatech2 2-1:0.51: device disconnected [ 111.931082][ T4738] usb 5-1: Product: syz [ 111.953433][ T4738] usb 5-1: Manufacturer: syz [ 111.960902][ T5440] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 111.998614][ T4738] usb 5-1: SerialNumber: syz [ 112.061444][ T5443] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 112.138864][ T4738] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 112.180418][ T5483] loop1: detected capacity change from 0 to 32768 [ 112.197706][ T5487] loop0: detected capacity change from 0 to 128 [ 112.200205][ T4738] imon 5-1:155.0: unable to initialize intf0, err -19 [ 112.216001][ T4738] imon:imon_probe: failed to initialize context! [ 112.224009][ T4738] imon 5-1:155.0: unable to register, err -19 [ 112.247738][ T5458] XFS (loop3): Quotacheck: Done. [ 112.276208][ T5483] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.316 (5483) [ 112.308740][ T5487] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.319703][ T5487] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.362263][ T5488] overlayfs: upper fs does not support tmpfile. [ 112.376965][ T5488] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 112.386457][ T5488] overlayfs: failed to set xattr on upper [ 112.393452][ T5488] overlayfs: ...falling back to index=off,metacopy=off. [ 112.404363][ T5483] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 112.405903][ T4189] XFS (loop3): Unmounting Filesystem [ 112.413080][ T5483] BTRFS info (device loop1): using free space tree [ 112.413101][ T5483] BTRFS info (device loop1): has skinny extents [ 112.433051][ T4738] imon 5-1:155.182: inconsistent driver matching [ 112.439429][ T4738] imon 5-1:155.182: unable to register, err -22 [ 112.446519][ T5488] overlayfs: upper fs missing required features. [ 112.494927][ T4738] imon: probe of 5-1:155.182 failed with error -22 [ 112.544982][ T4738] usb 5-1: USB disconnect, device number 4 [ 112.608562][ T4888] ocfs2: Unmounting device (7,5) on (node local) [ 112.745924][ T5483] BTRFS info (device loop1): enabling ssd optimizations [ 112.839721][ T26] audit: type=1800 audit(1763220475.543:21): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.316" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 112.941417][ T5513] loop5: detected capacity change from 0 to 4096 [ 113.003052][ T5517] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.070049][ T5519] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.077277][ T5519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.199458][ T5513] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 113.231095][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.651382][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.693680][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.761394][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.835551][ T1108] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.881176][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.952422][ T1108] usb 1-1: config 0 descriptor?? [ 114.300843][ T5530] loop3: detected capacity change from 0 to 32768 [ 114.338898][ T5530] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.327 (5530) [ 114.409661][ T5526] loop4: detected capacity change from 0 to 131072 [ 114.503177][ T4888] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 114.513547][ T5526] F2FS-fs (loop4): invalid crc value [ 114.516938][ T1108] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 114.529923][ T5526] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.587883][ T5526] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 114.600164][ T5526] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 114.774198][ T5530] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 114.809340][ T5530] BTRFS info (device loop3): using free space tree [ 114.826489][ T5530] BTRFS info (device loop3): has skinny extents [ 114.837960][ T1108] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 114.921926][ T1108] usb 1-1: USB disconnect, device number 3 [ 115.214397][ T5556] loop1: detected capacity change from 0 to 32768 [ 115.341225][ T5556] (syz.1.330,5556,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.356497][ T5556] (syz.1.330,5556,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.361167][ T5530] BTRFS info (device loop3): enabling ssd optimizations [ 115.441241][ T5556] (syz.1.330,5556,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 115.453383][ T5558] fido_id[5558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 115.475458][ T5556] (syz.1.330,5556,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 115.492425][ T5556] JBD2: Ignoring recovery information on journal [ 115.584110][ T5556] (syz.1.330,5556,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 115.598333][ T5556] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 115.615050][ T5556] (syz.1.330,5556,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 115.658309][ T5556] (syz.1.330,5556,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 115.684508][ T5541] loop5: detected capacity change from 0 to 32768 [ 115.813950][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 116.110552][ T5576] loop4: detected capacity change from 0 to 8192 [ 116.235355][ T5541] XFS (loop5): Mounting V5 Filesystem [ 116.284263][ T5576] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 116.392787][ T5541] XFS (loop5): Ending clean mount [ 116.407715][ T5576] REISERFS (device loop4): using ordered data mode [ 116.459933][ T5576] reiserfs: using flush barriers [ 116.474386][ T5576] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.513010][ T5576] REISERFS (device loop4): checking transaction log (loop4) [ 116.548424][ T5576] REISERFS (device loop4): Using r5 hash to sort names [ 116.571886][ T5576] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 116.649305][ T4888] XFS (loop5): Unmounting Filesystem [ 116.761556][ T26] audit: type=1800 audit(1763220479.463:22): pid=5576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.334" name="bus" dev="loop4" ino=2 res=0 errno=0 [ 116.792219][ T5605] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.102753][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.364408][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 117.511465][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.544421][ T13] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 117.594667][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.641716][ T13] usb 1-1: config 0 descriptor?? [ 117.840490][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.347'. [ 118.107401][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 118.154693][ T13] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 118.373877][ T13] usb 1-1: USB disconnect, device number 4 [ 118.636671][ T5630] loop4: detected capacity change from 0 to 32768 [ 118.792476][ T5630] XFS (loop4): Mounting V5 Filesystem [ 118.804990][ T5668] loop3: detected capacity change from 0 to 4096 [ 118.847996][ T5678] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.948602][ T5650] loop5: detected capacity change from 0 to 32768 [ 118.964295][ T5650] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.350 (5650) [ 118.994417][ T5650] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 119.039968][ T5630] XFS (loop4): Ending clean mount [ 119.058057][ T5650] BTRFS info (device loop5): enabling disk space caching [ 119.105351][ T5650] BTRFS info (device loop5): use no compression [ 119.118260][ T5630] XFS (loop4): User initiated shutdown received. [ 119.135003][ T5630] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 119.141556][ T5650] BTRFS info (device loop5): force clearing of disk cache [ 119.203601][ T5630] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 119.241698][ T5650] BTRFS info (device loop5): turning on sync discard [ 119.286676][ T5650] BTRFS info (device loop5): disabling disk space caching [ 119.309843][ T5650] BTRFS info (device loop5): has skinny extents [ 119.416746][ T4194] XFS (loop4): Unmounting Filesystem [ 119.934899][ T5650] BTRFS info (device loop5): enabling ssd optimizations [ 119.971985][ T5699] loop3: detected capacity change from 0 to 65536 [ 119.989999][ T5650] BTRFS info (device loop5): clearing free space tree [ 119.997213][ T5728] loop1: detected capacity change from 0 to 136 [ 120.014924][ T5650] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.025065][ T5650] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.093995][ T26] audit: type=1800 audit(1763220482.793:23): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.350" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 120.137918][ T5699] XFS (loop3): Mounting V5 Filesystem [ 120.144910][ T5728] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 120.202012][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.363246][ T5650] BTRFS info (device loop5): balance: start -sconvert=raid0,soft [ 120.384393][ T5699] XFS (loop3): Ending clean mount [ 120.441815][ T5650] BTRFS info (device loop5): relocating block group 1048576 flags system [ 120.472720][ T4189] XFS (loop3): Unmounting Filesystem [ 120.491147][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 120.611332][ T13] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 120.619581][ T13] usb 1-1: config 0 has no interface number 0 [ 120.648422][ T5749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.360'. [ 120.831408][ T13] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 120.840520][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.886655][ T5650] BTRFS info (device loop5): balance: ended with status: 0 [ 120.895458][ T13] usb 1-1: Product: syz [ 120.899654][ T13] usb 1-1: Manufacturer: syz [ 120.941297][ T13] usb 1-1: SerialNumber: syz [ 120.957870][ T13] usb 1-1: config 0 descriptor?? [ 120.958905][ T5751] loop1: detected capacity change from 0 to 8192 [ 121.042007][ T13] smsc95xx v2.0.0 [ 121.058065][ T5751] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.350477][ T5758] loop4: detected capacity change from 0 to 8192 [ 121.403375][ T4321] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 15 /dev/loop5 scanned by udevd (4321) [ 121.457988][ T5758] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 121.504687][ T5758] REISERFS (device loop4): using ordered data mode [ 121.586406][ T5758] reiserfs: using flush barriers [ 121.651071][ T5758] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 121.747153][ T5758] REISERFS (device loop4): checking transaction log (loop4) [ 121.785103][ T5779] loop3: detected capacity change from 0 to 16 [ 121.821260][ T5758] REISERFS (device loop4): Using r5 hash to sort names [ 121.863762][ T5779] erofs: (device loop3): mounted with root inode @ nid 36. [ 121.882454][ T5758] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 121.931100][ T4465] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.149153][ T13] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 122.208127][ T13] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 122.261272][ T13] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 122.288622][ T13] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 122.301458][ T4465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.323672][ T4465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.346718][ T13] usb 1-1: USB disconnect, device number 5 [ 122.388176][ T4465] usb 2-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 122.415665][ T4465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.452636][ T4465] usb 2-1: config 0 descriptor?? [ 122.735881][ T5790] loop4: detected capacity change from 0 to 40427 [ 122.756457][ T5797] loop0: detected capacity change from 0 to 64 [ 122.770638][ T5778] loop5: detected capacity change from 0 to 32768 [ 122.800632][ T5790] F2FS-fs (loop4): invalid crc value [ 122.848853][ T5790] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.907465][ T5790] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.022699][ T5778] XFS (loop5): Mounting V5 Filesystem [ 123.230902][ T4465] wacom 0003:056A:030C.0003: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.1-1/input0 [ 123.296776][ T5778] XFS (loop5): Ending clean mount [ 123.460022][ T4465] usb 2-1: USB disconnect, device number 3 [ 123.495175][ T4463] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 123.529680][ T4463] XFS (loop5): Unmount and run xfs_repair [ 123.565803][ T4463] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 123.571543][ T5831] fido_id[5831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 123.599595][ T13] kernel write not supported for file /uinput (pid: 13 comm: kworker/0:1) [ 123.629930][ T4463] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 123.660259][ T4463] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 08 ................ [ 123.720117][ T4463] 00000020: 00 00 00 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ...Ny.B..... ... [ 123.756687][ T4463] 00000030: 00 00 00 00 9f 6b f4 9e 00 00 00 07 00 00 00 01 .....k.......... [ 123.791137][ T4463] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 123.813312][ T5847] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.851032][ T4463] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.875753][ T4463] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.897419][ T4463] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 123.910480][ T5846] loop0: detected capacity change from 0 to 4096 [ 123.936791][ T5778] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x4 len 4 error 74 [ 123.959342][ T5778] XFS (loop5): page discard on page ffffea0001a5de00, inode 0x1806, offset 0. [ 124.038293][ T4888] XFS (loop5): Unmounting Filesystem [ 124.045446][ T5846] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 124.205174][ T5846] ntfs: volume version 3.1. [ 124.633962][ T154] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 124.676635][ T5836] loop4: detected capacity change from 0 to 32768 [ 124.965647][ T5836] XFS (loop4): Mounting V5 Filesystem [ 125.056860][ T5880] loop5: detected capacity change from 0 to 512 [ 125.062631][ T5871] loop3: detected capacity change from 0 to 32768 [ 125.104240][ T5836] XFS (loop4): Ending clean mount [ 125.116929][ T5836] XFS (loop4): Quotacheck needed: Please wait. [ 125.148598][ T5880] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 125.163792][ T5880] System zones: 0-2, 18-18, 34-35 [ 125.188197][ T5871] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 125.198709][ T5871] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 125.229123][ T5836] XFS (loop4): Quotacheck: Done. [ 125.243591][ T5871] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 125.268862][ T5880] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.318920][ T5880] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.331224][ T4194] XFS (loop4): Unmounting Filesystem [ 125.352855][ T5871] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 125.814738][ T5897] loop5: detected capacity change from 0 to 22 [ 125.852755][ T5897] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 125.917770][ T5897] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 126.130164][ T5907] loop4: detected capacity change from 0 to 1024 [ 126.158372][ T5905] loop0: detected capacity change from 0 to 2048 [ 126.261557][ T5905] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.602939][ T5919] loop0: detected capacity change from 0 to 512 [ 126.679137][ T5919] EXT4-fs (loop0): Ignoring removed bh option [ 126.740181][ T5919] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 126.829093][ T5919] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.050467][ T5932] loop1: detected capacity change from 0 to 1024 [ 127.150526][ T5932] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.280004][ T5932] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,i_version,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 127.379482][ T26] audit: type=1804 audit(1763220490.073:24): pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.414" name="/newroot/97/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 127.404339][ T5923] loop5: detected capacity change from 0 to 32768 [ 127.435665][ T5946] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 127.458612][ T5946] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 127.483194][ T26] audit: type=1804 audit(1763220490.163:25): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.414" name="/newroot/97/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 127.727196][ T5954] netlink: 'syz.3.422': attribute type 11 has an invalid length. [ 127.811212][ T5923] XFS (loop5): Mounting V5 Filesystem [ 127.980709][ T5951] loop0: detected capacity change from 0 to 65536 [ 127.999251][ T5923] XFS (loop5): Ending clean mount [ 128.016600][ T5923] XFS (loop5): Quotacheck needed: Please wait. [ 128.225596][ T5951] XFS (loop0): Mounting V5 Filesystem [ 128.295299][ T5923] XFS (loop5): Quotacheck: Done. [ 128.387607][ T5951] XFS (loop0): Ending clean mount [ 128.498090][ T4183] XFS (loop0): Unmounting Filesystem [ 128.608763][ T4888] XFS (loop5): Unmounting Filesystem [ 129.071036][ T4743] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.274925][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 129.431354][ T4743] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 129.471840][ T4743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.537442][ T4743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.551085][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.558200][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.566921][ T5980] device bridge_slave_0 entered promiscuous mode [ 129.577086][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.584585][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.593090][ T5980] device bridge_slave_1 entered promiscuous mode [ 129.620512][ T4743] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 129.684511][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.729550][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.731303][ T4743] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 129.781047][ T4743] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 129.808109][ T4743] usb 2-1: Manufacturer: syz [ 129.833357][ T6002] loop0: detected capacity change from 0 to 512 [ 129.852613][ T4743] usb 2-1: config 0 descriptor?? [ 129.897809][ T6000] loop5: detected capacity change from 0 to 4096 [ 129.924522][ T6002] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.429: inode has both inline data and extents flags [ 129.952839][ T5980] team0: Port device team_slave_0 added [ 129.992082][ T5980] team0: Port device team_slave_1 added [ 130.000724][ T6002] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.429: couldn't read orphan inode 15 (err -117) [ 130.051175][ T6005] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.087779][ T6002] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.172650][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.211098][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.233387][ T5993] loop3: detected capacity change from 0 to 32768 [ 130.338173][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.344436][ T4743] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 130.448782][ T4743] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 130.506607][ T4743] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 130.535637][ T5993] XFS (loop3): Mounting V5 Filesystem [ 130.586705][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.616459][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.662703][ T13] usb 2-1: USB disconnect, device number 4 [ 130.702596][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.802816][ T4666] Bluetooth: hci4: command 0x0409 tx timeout [ 130.812481][ T5993] XFS (loop3): Ending clean mount [ 130.861966][ T6022] Set syz1 is full, maxelem 46 reached [ 130.929062][ T26] audit: type=1800 audit(1763220493.623:26): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.435" name="bus" dev="loop3" ino=6153 res=0 errno=0 [ 130.965203][ T5980] device hsr_slave_0 entered promiscuous mode [ 131.032452][ T5980] device hsr_slave_1 entered promiscuous mode [ 131.110464][ T4189] XFS (loop3): Unmounting Filesystem [ 131.432258][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 131.654209][ T5980] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 131.753747][ T5980] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 131.780505][ T5980] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 131.811456][ T5980] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 131.838647][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.900602][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 131.917546][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 131.947944][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.051205][ T4463] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.065284][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.160595][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.190112][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.250267][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.270434][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.289714][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.311076][ T4463] usb 1-1: Using ep0 maxpacket: 32 [ 132.351847][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.367987][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.389163][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.396328][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.412083][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.441316][ T4463] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.481227][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.491492][ T4463] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.502543][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.531232][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.540792][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.571421][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.590637][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.611560][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.622955][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.642367][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.661385][ T4463] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.682183][ T4463] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 132.690570][ T4463] usb 1-1: Product: syz [ 132.736655][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.747251][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.756615][ T4463] usb 1-1: Manufacturer: syz [ 132.785858][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.802761][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.817747][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.827394][ T4463] hub 1-1:4.0: USB hub found [ 132.842009][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.864798][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.869752][ T5980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.871437][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.878602][ T2302] Bluetooth: hci4: command 0x041b tx timeout [ 133.075683][ T4463] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 133.143578][ T4463] usb 1-1: USB disconnect, device number 6 [ 133.366926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.376486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.431320][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.619765][ T6070] loop5: detected capacity change from 0 to 32768 [ 133.737836][ T26] audit: type=1800 audit(1763220496.433:27): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.457" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 133.910874][ T6073] loop1: detected capacity change from 0 to 32768 [ 133.931365][ T4460] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.037252][ T6073] XFS (loop1): Mounting V5 Filesystem [ 134.115047][ T6073] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 134.171256][ T4460] usb 1-1: Using ep0 maxpacket: 32 [ 134.233127][ T6073] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 134.243456][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 134.266943][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.291222][ T4460] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.295498][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.317694][ T4460] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.347841][ T4460] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.378219][ T4460] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 134.402561][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.417709][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.431813][ T4460] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.442080][ T4460] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 134.444179][ T5980] device veth0_vlan entered promiscuous mode [ 134.451518][ T4460] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.479219][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.499466][ T6073] XFS (loop1): Ending clean mount [ 134.502224][ T4460] usb 1-1: config 0 descriptor?? [ 134.511879][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.564657][ T6073] XFS (loop1): Quotacheck needed: Please wait. [ 134.586235][ T5980] device veth1_vlan entered promiscuous mode [ 134.626459][ T4229] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1803 dinode [ 134.704495][ T4229] XFS (loop1): Unmount and run xfs_repair [ 134.726311][ T4229] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 134.733799][ T4229] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 134.743572][ T4229] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 134.758916][ T4229] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 134.761345][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.768597][ T4229] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 134.793489][ T4229] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 134.796936][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.812126][ T4229] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 134.836253][ T5980] device veth0_macvtap entered promiscuous mode [ 134.842247][ T4229] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 134.869855][ T4229] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 134.888361][ T144] device hsr_slave_0 left promiscuous mode [ 134.911320][ T144] device hsr_slave_1 left promiscuous mode [ 134.949037][ T6073] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 134.968136][ T4667] Bluetooth: hci4: command 0x040f tx timeout [ 134.979580][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.989489][ T4186] XFS (loop1): Unmounting Filesystem [ 135.000081][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.013206][ T4460] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 135.029520][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.042314][ T4460] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 135.047478][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.063013][ T4460] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 135.075870][ T144] device bridge_slave_1 left promiscuous mode [ 135.087899][ T4460] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 135.091464][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.116395][ T4460] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 135.126004][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.154574][ T4460] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 135.169492][ T144] device veth1_macvtap left promiscuous mode [ 135.170769][ T4460] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 135.176200][ T144] device veth0_macvtap left promiscuous mode [ 135.197722][ T144] device veth1_vlan left promiscuous mode [ 135.211605][ T144] device veth0_vlan left promiscuous mode [ 135.231012][ C1] hid-thrustmaster 0003:044F:B65D.0005: Unknown packet type 0x0, unable to proceed further with wheel init [ 135.517361][ T4460] usb 1-1: USB disconnect, device number 7 [ 135.808542][ T6147] netlink: 'syz.1.468': attribute type 11 has an invalid length. [ 135.865880][ T144] team0 (unregistering): Port device team_slave_1 removed [ 135.882984][ T144] team0 (unregistering): Port device team_slave_0 removed [ 135.896697][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.918274][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.001429][ T144] bond0 (unregistering): Released all slaves [ 136.084434][ T5980] device veth1_macvtap entered promiscuous mode [ 136.109173][ T6135] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 136.140030][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.153075][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.185093][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.231995][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.263115][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.291128][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.311064][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.341078][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.378079][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.399697][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.409422][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.483096][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.499608][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.510993][ T4461] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 136.522693][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.533921][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.544817][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.556127][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.566363][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.577612][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.599967][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.619146][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.629071][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.641132][ T4463] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.662245][ T5980] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.681926][ T5980] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.690713][ T5980] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.719855][ T5980] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.751244][ T4461] usb 6-1: Using ep0 maxpacket: 8 [ 136.856046][ T6162] loop1: detected capacity change from 0 to 256 [ 136.868900][ T6153] loop0: detected capacity change from 0 to 32768 [ 136.881346][ T4461] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 136.890399][ T4461] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.901833][ T4461] usb 6-1: config 0 has no interface number 0 [ 136.927412][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.947020][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.962825][ T6162] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.999309][ T26] audit: type=1800 audit(1763220499.703:28): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.471" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 137.021446][ T4650] Bluetooth: hci4: command 0x0419 tx timeout [ 137.024935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.035006][ T4463] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 137.051440][ T4463] usb 4-1: config 0 has no interface number 0 [ 137.078130][ T4463] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 13042, setting to 1024 [ 137.090171][ T4461] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 137.100276][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.124466][ T4461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.133379][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.164913][ T4463] usb 4-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 137.175527][ T4461] usb 6-1: Product: syz [ 137.179727][ T4461] usb 6-1: Manufacturer: syz [ 137.197893][ T4461] usb 6-1: SerialNumber: syz [ 137.214811][ T4461] usb 6-1: config 0 descriptor?? [ 137.223225][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.362120][ T4463] usb 4-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 137.391928][ T4463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.411713][ T4463] usb 4-1: Product: syz [ 137.425413][ T4463] usb 4-1: Manufacturer: syz [ 137.453655][ T4463] usb 4-1: SerialNumber: syz [ 137.476516][ T4460] usb 6-1: USB disconnect, device number 3 [ 137.483589][ T4463] usb 4-1: config 0 descriptor?? [ 137.523713][ T6157] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 137.588978][ T4463] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 137.783802][ T4460] usb 4-1: USB disconnect, device number 4 [ 138.034971][ T6192] loop0: detected capacity change from 0 to 128 [ 138.101157][ T4667] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 138.178205][ T6192] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.230432][ T6192] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.414141][ T4465] kernel read not supported for file /usbmon9 (pid: 4465 comm: kworker/1:11) [ 138.551326][ T4667] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.585294][ T4667] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.594653][ T6206] loop3: detected capacity change from 0 to 4096 [ 138.618973][ T4667] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 138.668476][ T4667] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 138.821432][ T4667] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.840873][ T4667] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.851631][ T4667] usb 7-1: SerialNumber: syz [ 139.025503][ T4189] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 139.042256][ T4189] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 139.189302][ T4667] usb 7-1: 0:2 : does not exist [ 139.217350][ T4667] usb 7-1: unit 5 not found! [ 139.358398][ T4667] usb 7-1: USB disconnect, device number 2 [ 139.531059][ T4463] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.703361][ T4721] udevd[4721]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.891398][ T4463] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.091307][ T4463] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.133642][ T4463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.136558][ T6224] loop1: detected capacity change from 0 to 32768 [ 140.181396][ T4463] usb 1-1: Product: syz [ 140.206248][ T4463] usb 1-1: Manufacturer: syz [ 140.210895][ T4463] usb 1-1: SerialNumber: syz [ 140.307714][ T26] audit: type=1800 audit(1763220503.003:29): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.487" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 140.420730][ T6265] loop3: detected capacity change from 0 to 164 [ 141.218930][ T6284] loop3: detected capacity change from 0 to 8 [ 141.381266][ T4463] cdc_ncm 1-1:1.0: bind() failure [ 141.389889][ T4463] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 141.461917][ T4463] cdc_ncm 1-1:1.1: bind() failure [ 141.509073][ T4463] usb 1-1: USB disconnect, device number 8 [ 141.515068][ T4465] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 141.593717][ T6293] loop5: detected capacity change from 0 to 1024 [ 141.646782][ T6293] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 141.678024][ T6293] EXT4-fs (loop5): group descriptors corrupted! [ 141.858371][ T6302] loop5: detected capacity change from 0 to 512 [ 141.902571][ T4465] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.955069][ T6302] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 141.970652][ T4465] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.048337][ T6302] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 142.175866][ T6302] EXT4-fs (loop5): 1 truncate cleaned up [ 142.181189][ T4465] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.195682][ T4465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.213556][ T6302] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000002e,lazytime,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 142.214336][ T4465] usb 2-1: Product: syz [ 142.255939][ T4465] usb 2-1: Manufacturer: syz [ 142.263513][ T4465] usb 2-1: SerialNumber: syz [ 142.342028][ T26] audit: type=1800 audit(1763220505.053:30): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.509" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 142.611183][ T4465] usb 2-1: 0:2 : does not exist [ 142.635717][ T6289] loop6: detected capacity change from 0 to 40427 [ 142.712605][ T4465] usb 2-1: USB disconnect, device number 5 [ 142.757883][ T4721] udevd[4721]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.813300][ T6289] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff [ 142.884613][ T6289] F2FS-fs (loop6): invalid crc value [ 142.938015][ T6289] F2FS-fs (loop6): Found nat_bits in checkpoint [ 143.097199][ T6289] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 143.230636][ T5980] attempt to access beyond end of device [ 143.230636][ T5980] loop6: rw=2049, want=45104, limit=40427 [ 144.651551][ T6345] validate_nla: 15 callbacks suppressed [ 144.651570][ T6345] netlink: 'syz.5.518': attribute type 6 has an invalid length. [ 144.711496][ T6353] loop1: detected capacity change from 0 to 32768 [ 144.786587][ T6353] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.519 (6353) [ 144.848122][ T6353] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 144.870471][ T6353] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 144.913762][ T6353] BTRFS info (device loop1): use zstd compression, level 3 [ 144.948750][ T6353] BTRFS info (device loop1): using free space tree [ 144.966816][ T6353] BTRFS info (device loop1): has skinny extents [ 145.042191][ T6363] loop6: detected capacity change from 0 to 32768 [ 145.155087][ T26] audit: type=1800 audit(1763220507.853:31): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.515" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 145.294697][ T6353] BTRFS info (device loop1): enabling ssd optimizations [ 145.317516][ T26] audit: type=1800 audit(1763220508.013:32): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.519" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 145.665819][ T6403] loop5: detected capacity change from 0 to 4096 [ 145.902795][ T6412] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.940391][ T6432] loop5: detected capacity change from 0 to 8192 [ 147.057590][ T6440] loop1: detected capacity change from 0 to 1024 [ 147.123033][ T6440] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 147.141109][ T6440] EXT4-fs (loop1): group descriptors corrupted! [ 147.619896][ T6445] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 147.661615][ T6445] FAT-fs (loop5): Filesystem has been set read-only [ 147.682494][ T6448] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 147.870100][ T6463] loop6: detected capacity change from 0 to 128 [ 147.888310][ T6467] loop1: detected capacity change from 0 to 8 [ 148.046129][ T6463] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.061519][ T6463] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.561812][ T6484] loop6: detected capacity change from 0 to 1024 [ 148.617359][ T6443] loop3: detected capacity change from 0 to 40427 [ 148.662879][ T6484] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 148.695323][ T6443] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 148.723619][ T6484] EXT4-fs (loop6): group descriptors corrupted! [ 148.760715][ T6443] F2FS-fs (loop3): invalid crc value [ 148.795403][ T6443] F2FS-fs (loop3): Found nat_bits in checkpoint [ 148.971131][ T6443] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.226074][ T4189] attempt to access beyond end of device [ 149.226074][ T4189] loop3: rw=2049, want=45104, limit=40427 [ 149.701049][ T4743] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 149.953709][ T6507] loop5: detected capacity change from 0 to 8 [ 150.106725][ T4743] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.137409][ T4743] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.321376][ T4743] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.347715][ T4743] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.366247][ T4743] usb 7-1: Product: syz [ 150.370467][ T4743] usb 7-1: Manufacturer: syz [ 150.385648][ T4743] usb 7-1: SerialNumber: syz [ 150.731447][ T4743] usb 7-1: 0:2 : does not exist [ 150.779330][ T4743] usb 7-1: USB disconnect, device number 3 [ 150.852092][ T6518] loop0: detected capacity change from 0 to 32768 [ 150.866086][ T6516] loop3: detected capacity change from 0 to 32768 [ 150.917504][ T6518] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.563 (6518) [ 150.973956][ T6518] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 150.989703][ T6518] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 151.027896][ T4721] udevd[4721]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.043718][ T6518] BTRFS info (device loop0): use zstd compression, level 3 [ 151.069324][ T6518] BTRFS info (device loop0): using free space tree [ 151.076088][ T26] audit: type=1800 audit(1763220513.763:33): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.561" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 151.124047][ T6518] BTRFS info (device loop0): has skinny extents [ 151.395043][ T6545] loop6: detected capacity change from 0 to 4096 [ 151.472021][ T6518] BTRFS info (device loop0): enabling ssd optimizations [ 151.551078][ T6555] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.563227][ T26] audit: type=1800 audit(1763220514.263:34): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.563" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 151.716792][ T6562] loop1: detected capacity change from 0 to 64 [ 152.883997][ T6590] loop6: detected capacity change from 0 to 1024 [ 153.005553][ T6590] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 2: comm syz.6.579: lblock 2 mapped to illegal pblock 2 (length 1) [ 153.069651][ T6590] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 153.131929][ T6590] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 48: comm syz.6.579: lblock 0 mapped to illegal pblock 48 (length 1) [ 153.150781][ T6590] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 153.198598][ T6590] EXT4-fs error (device loop6): ext4_acquire_dquot:6209: comm syz.6.579: Failed to acquire dquot type 0 [ 153.254635][ T6590] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 153.300605][ T6590] EXT4-fs error (device loop6): ext4_evict_inode:282: inode #11: comm syz.6.579: mark_inode_dirty error [ 153.327782][ T6601] netlink: 'syz.1.582': attribute type 3 has an invalid length. [ 153.361098][ T6601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'. [ 153.370364][ T6590] EXT4-fs warning (device loop6): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 153.392341][ T6590] EXT4-fs (loop6): 1 orphan inode deleted [ 153.410239][ T6590] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 153.433960][ T6564] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.449791][ T4190] block nbd0: Receive control failed (result -32) [ 153.459863][ T6583] block nbd0: shutting down sockets [ 153.574865][ T6564] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 153.622512][ T6590] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm syz.6.579: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.656746][ T6564] EXT4-fs error (device loop6): ext4_release_dquot:6245: comm kworker/u4:8: Failed to release dquot type 0 [ 153.787793][ T6590] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 1 [ 153.841081][ T6590] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 980643439 [ 153.902366][ T6590] EXT4-fs error (device loop6): ext4_acquire_dquot:6209: comm syz.6.579: Failed to acquire dquot type 0 [ 154.002777][ T4419] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.024997][ T6593] loop5: detected capacity change from 0 to 40427 [ 154.068024][ T4419] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 154.115052][ T4419] EXT4-fs error (device loop6): ext4_release_dquot:6245: comm kworker/u4:7: Failed to release dquot type 0 [ 154.173891][ T6593] F2FS-fs (loop5): invalid crc value [ 154.195492][ T5980] EXT4-fs error (device loop6): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 154.231162][ T6593] F2FS-fs (loop5): Found nat_bits in checkpoint [ 154.327832][ T5980] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 154.380573][ T5980] EXT4-fs error (device loop6): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 154.461890][ T6628] loop0: detected capacity change from 0 to 32768 [ 154.483375][ T6593] F2FS-fs (loop5): Start checkpoint disabled! [ 154.521230][ T6628] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 154.600529][ T6593] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 154.722469][ T6628] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 154.749486][ T6642] netlink: 176 bytes leftover after parsing attributes in process `syz.6.588'. [ 154.856606][ T4183] ocfs2: Unmounting device (7,0) on (node local) [ 155.074455][ T6650] loop0: detected capacity change from 0 to 1024 [ 155.156260][ T6650] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 155.246768][ T6650] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 155.284396][ T1238] attempt to access beyond end of device [ 155.284396][ T1238] loop5: rw=1, want=45104, limit=40427 [ 155.297137][ T6650] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 155.319794][ T1238] attempt to access beyond end of device [ 155.319794][ T1238] loop5: rw=2049, want=40984, limit=40427 [ 155.323831][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 155.344628][ T6650] JBD2: no valid journal superblock found [ 155.386478][ T6650] EXT4-fs (loop0): error loading journal [ 155.574802][ T6660] loop1: detected capacity change from 0 to 2048 [ 155.601668][ T6662] loop3: detected capacity change from 0 to 2048 [ 155.679253][ T6665] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.807655][ T6662] NILFS (loop3): invalid segment: Inconsistency found [ 155.833985][ T6664] loop0: detected capacity change from 0 to 32768 [ 155.864581][ T6662] NILFS (loop3): trying rollback from an earlier position [ 155.938454][ T6662] NILFS (loop3): recovery complete [ 155.967819][ T6667] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.300211][ T6669] loop0: detected capacity change from 0 to 4096 [ 156.490183][ T6669] ntfs: volume version 3.1. [ 156.563598][ T6671] loop3: detected capacity change from 0 to 4096 [ 156.740713][ T6654] loop6: detected capacity change from 0 to 40427 [ 156.967277][ T6654] F2FS-fs (loop6): Found nat_bits in checkpoint [ 156.974163][ T6686] loop1: detected capacity change from 0 to 1024 [ 157.217416][ T6654] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 157.421166][ T6654] attempt to access beyond end of device [ 157.421166][ T6654] loop6: rw=10241, want=45104, limit=40427 [ 157.591059][ T5980] attempt to access beyond end of device [ 157.591059][ T5980] loop6: rw=2049, want=45112, limit=40427 [ 157.606629][ T6673] loop5: detected capacity change from 0 to 32768 [ 157.835272][ T6673] XFS (loop5): Mounting V5 Filesystem [ 157.841058][ T4740] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.969246][ T6673] XFS (loop5): Ending clean mount [ 158.127675][ T6673] XFS (loop5): Quotacheck needed: Please wait. [ 158.207355][ T4740] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.227530][ T4740] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 158.257945][ T4740] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.278298][ T6673] XFS (loop5): Quotacheck: Done. [ 158.457731][ T6700] loop0: detected capacity change from 0 to 40427 [ 158.480572][ T4888] XFS (loop5): Unmounting Filesystem [ 158.491262][ T4740] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 158.519295][ T4740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 158.531601][ T4740] usb 2-1: Product: syz [ 158.536493][ T4740] usb 2-1: Manufacturer: syz [ 158.542414][ T4740] usb 2-1: SerialNumber: syz [ 158.567815][ T6700] F2FS-fs (loop0): Found nat_bits in checkpoint [ 158.724958][ T6753] loop3: detected capacity change from 0 to 256 [ 158.788076][ T6700] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 158.793993][ T6753] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.843984][ T4740] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 158.878644][ T6753] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 158.999574][ T6753] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 159.058649][ T4740] usb 2-1: USB disconnect, device number 6 [ 159.113027][ T4740] usblp0: removed [ 159.205919][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.628'. [ 159.279946][ T6763] tipc: Started in network mode [ 159.288412][ T6763] tipc: Node identity @emory.en, cluster identity 8 [ 159.494733][ T6773] loop5: detected capacity change from 0 to 256 [ 159.621994][ T6773] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 159.647122][ T6777] loop6: detected capacity change from 0 to 2048 [ 159.812554][ T6777] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 159.912719][ T6777] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.918414][ T6783] loop1: detected capacity change from 0 to 32768 [ 159.965036][ T6783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.633 (6783) [ 160.015790][ T6783] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 160.024610][ T6783] BTRFS info (device loop1): using free space tree [ 160.031313][ T6783] BTRFS info (device loop1): has skinny extents [ 160.288335][ T6809] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.377663][ T6783] BTRFS info (device loop1): enabling ssd optimizations [ 160.984078][ T6845] loop3: detected capacity change from 0 to 64 [ 161.121906][ T6848] loop5: detected capacity change from 0 to 4096 [ 161.304902][ T6855] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.788420][ T6875] loop8: detected capacity change from 0 to 8 [ 161.833496][ T6875] Dev loop8: unable to read RDB block 8 [ 161.863033][ T4190] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 161.872943][ T6875] loop8: unable to read partition table [ 161.873357][ T6875] loop8: partition table beyond EOD, [ 161.878985][ T4190] CPU: 0 PID: 4190 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 161.891943][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 161.902020][ T4190] Workqueue: hci4 hci_rx_work [ 161.906732][ T4190] Call Trace: [ 161.910032][ T4190] [ 161.912983][ T4190] dump_stack_lvl+0x168/0x230 [ 161.917693][ T4190] ? show_regs_print_info+0x20/0x20 [ 161.922923][ T4190] ? load_image+0x3b0/0x3b0 [ 161.927474][ T4190] sysfs_create_dir_ns+0x252/0x280 [ 161.932616][ T4190] ? __lock_acquire+0x7c60/0x7c60 [ 161.937682][ T4190] ? sysfs_warn_dup+0xa0/0xa0 [ 161.942385][ T4190] ? le_conn_complete_evt+0xcbc/0x1590 [ 161.947870][ T4190] ? hci_event_packet+0xe05/0x12f0 [ 161.953012][ T4190] ? process_one_work+0x863/0x1000 [ 161.958153][ T4190] ? do_raw_spin_unlock+0x11d/0x230 [ 161.963389][ T4190] kobject_add_internal+0x662/0xd00 [ 161.967962][ T6875] truncated [ 161.968617][ T4190] kobject_add+0x152/0x210 [ 161.976151][ T4190] ? kobject_init+0x1d0/0x1d0 [ 161.980867][ T4190] ? klist_children_get+0x50/0x50 [ 161.985919][ T4190] ? get_device_parent+0x121/0x3f0 [ 161.991062][ T4190] device_add+0x483/0xfb0 [ 161.991286][ T6875] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 161.995447][ T4190] hci_conn_add_sysfs+0xd1/0x1e0 [ 161.995484][ T4190] le_conn_complete_evt+0xcbc/0x1590 [ 161.995523][ T4190] ? cs_le_create_conn+0x5e0/0x5e0 [ 162.020092][ T4190] ? __mutex_trylock_common+0x14f/0x250 [ 162.025677][ T4190] hci_le_meta_evt+0x289/0x3b80 [ 162.030567][ T4190] ? hci_event_packet+0x36d/0x12f0 [ 162.035710][ T4190] ? hci_event_packet+0x2e2/0x12f0 [ 162.040849][ T4190] ? __lock_acquire+0x7c60/0x7c60 [ 162.045921][ T4190] ? hci_remote_host_features_evt+0x280/0x280 [ 162.052018][ T4190] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 162.057702][ T4190] ? mark_lock+0x94/0x320 [ 162.062083][ T4190] ? mutex_unlock+0x10/0x10 [ 162.066619][ T4190] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 162.072634][ T4190] ? lock_chain_count+0x20/0x20 [ 162.077534][ T4190] ? __rwlock_init+0x140/0x140 [ 162.082327][ T4190] hci_event_packet+0xe05/0x12f0 [ 162.087372][ T4190] ? lockdep_hardirqs_on+0x94/0x140 [ 162.092608][ T4190] ? rcu_lock_release+0x20/0x20 [ 162.097493][ T4190] ? hci_send_to_monitor+0x9c/0x4a0 [ 162.102727][ T4190] hci_rx_work+0x255/0xa10 [ 162.107168][ T4190] process_one_work+0x863/0x1000 [ 162.112126][ T4190] ? worker_detach_from_pool+0x240/0x240 [ 162.117769][ T4190] ? lockdep_hardirqs_off+0x70/0x100 [ 162.123099][ T4190] ? _raw_spin_lock_irq+0xab/0xe0 [ 162.128134][ T4190] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 162.133519][ T4190] ? wq_worker_running+0x97/0x170 [ 162.138551][ T4190] worker_thread+0xaa8/0x12a0 [ 162.143262][ T4190] kthread+0x436/0x520 [ 162.147345][ T4190] ? rcu_lock_release+0x20/0x20 [ 162.152210][ T4190] ? kthread_blkcg+0xd0/0xd0 [ 162.156818][ T4190] ret_from_fork+0x1f/0x30 [ 162.161257][ T4190] [ 162.170146][ T4190] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 162.183652][ T4190] Bluetooth: hci4: failed to register connection device [ 162.205639][ T6891] loop1: detected capacity change from 0 to 1024 [ 162.387811][ T6898] loop5: detected capacity change from 0 to 4096 [ 162.448427][ T6902] loop0: detected capacity change from 0 to 256 [ 162.489218][ T6898] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.637220][ T6902] FAT-fs (loop0): Directory bread(block 64) failed [ 162.664401][ T6898] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz.5.662: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 162.684332][ T6902] FAT-fs (loop0): Directory bread(block 65) failed [ 162.701237][ T6902] FAT-fs (loop0): Directory bread(block 66) failed [ 162.707827][ T6902] FAT-fs (loop0): Directory bread(block 67) failed [ 162.766950][ T6902] FAT-fs (loop0): Directory bread(block 68) failed [ 162.821030][ T6902] FAT-fs (loop0): Directory bread(block 69) failed [ 162.827686][ T6902] FAT-fs (loop0): Directory bread(block 70) failed [ 162.835435][ T6898] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz.5.662: directory missing '..' [ 162.880033][ T6902] FAT-fs (loop0): Directory bread(block 71) failed [ 162.880793][ T6913] netlink: 'syz.1.665': attribute type 6 has an invalid length. [ 162.901078][ T6902] FAT-fs (loop0): Directory bread(block 72) failed [ 162.907798][ T6902] FAT-fs (loop0): Directory bread(block 73) failed [ 163.292136][ T6919] loop3: detected capacity change from 0 to 8192 [ 163.327911][ T6919] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 163.382134][ T6919] REISERFS (device loop3): using ordered data mode [ 163.388702][ T6919] reiserfs: using flush barriers [ 163.430487][ T6919] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.450003][ T6919] REISERFS (device loop3): checking transaction log (loop3) [ 163.686071][ T6947] netlink: 3 bytes leftover after parsing attributes in process `syz.6.675'. [ 163.753453][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.6.675'. [ 163.797607][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.6.675'. [ 163.913623][ T6919] REISERFS (device loop3): Using tea hash to sort names [ 163.937755][ T6919] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 163.984707][ T6963] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.205076][ T6962] loop1: detected capacity change from 0 to 32768 [ 164.317091][ T6962] XFS (loop1): Mounting V5 Filesystem [ 164.485589][ T6962] XFS (loop1): Ending clean mount [ 164.499483][ T6962] XFS (loop1): Quotacheck needed: Please wait. [ 164.661351][ T6962] XFS (loop1): Quotacheck: Done. [ 164.748016][ T6957] loop5: detected capacity change from 0 to 32768 [ 164.757757][ T4186] XFS (loop1): Unmounting Filesystem [ 164.771261][ T6992] device macvlan2 entered promiscuous mode [ 164.836841][ T6957] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.679 (6957) [ 164.842871][ T6994] device macvlan3 entered promiscuous mode [ 164.973465][ T6957] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 164.985728][ T6957] BTRFS info (device loop5): using free space tree [ 164.993389][ T6957] BTRFS info (device loop5): has skinny extents [ 165.180633][ T7012] loop0: detected capacity change from 0 to 256 [ 165.238283][ T7012] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.238409][ T7015] loop6: detected capacity change from 0 to 1024 [ 165.283821][ T7012] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.531436][ T6957] BTRFS info (device loop5): enabling ssd optimizations [ 166.084104][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 166.672402][ T7066] user requested TSC rate below hardware speed [ 166.687021][ T4651] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 166.788652][ T7073] input: syz1 as /devices/virtual/input/input12 [ 166.956659][ T7080] netlink: 'syz.5.707': attribute type 29 has an invalid length. [ 166.972016][ T7080] netlink: 'syz.5.707': attribute type 29 has an invalid length. [ 167.002975][ T7080] netlink: 'syz.5.707': attribute type 29 has an invalid length. [ 167.023643][ T7080] netlink: 'syz.5.707': attribute type 29 has an invalid length. [ 167.041797][ T7080] netlink: 'syz.5.707': attribute type 29 has an invalid length. [ 167.057094][ T7080] netlink: 'syz.5.707': attribute type 29 has an invalid length. [ 167.066280][ T7080] netlink: 'syz.5.707': attribute type 29 has an invalid length. [ 167.074655][ T7080] netlink: 'syz.5.707': attribute type 29 has an invalid length. [ 167.083721][ T7080] netlink: 'syz.5.707': attribute type 29 has an invalid length. [ 167.092155][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'. [ 167.102601][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.185805][ T7082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.281452][ T4651] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 167.296620][ T4651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.312953][ T4651] usb 2-1: Product: syz [ 167.317299][ T4651] usb 2-1: Manufacturer: syz [ 167.322610][ T4651] usb 2-1: SerialNumber: syz [ 167.338622][ T4651] usb 2-1: config 0 descriptor?? [ 167.534945][ T7100] loop0: detected capacity change from 0 to 128 [ 167.591268][ T4651] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 167.614020][ T7100] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.625512][ T7100] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.637737][ T7105] loop3: detected capacity change from 0 to 1024 [ 167.703915][ T7100] EXT4-fs (loop0): shut down requested (0) [ 167.723445][ T7105] EXT4-fs (loop3): Ignoring removed orlov option [ 167.729857][ T7105] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 167.800606][ T7105] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a814c018, mo2=0002] [ 167.837959][ T7105] System zones: 0-1, 3-12 [ 167.911998][ T7105] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,mblk_io_submit,debug,,errors=continue. Quota mode: writeback. [ 168.312372][ T4647] Bluetooth: hci4: command 0x0406 tx timeout [ 168.318585][ T4651] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 168.330652][ T4651] usb 2-1: USB disconnect, device number 7 [ 168.790704][ T7122] loop0: detected capacity change from 0 to 32768 [ 168.881484][ T7122] (syz.0.721,7122,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 168.909454][ T7147] netlink: 312 bytes leftover after parsing attributes in process `syz.1.729'. [ 168.942399][ T7122] (syz.0.721,7122,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.040182][ T7122] JBD2: Ignoring recovery information on journal [ 169.070759][ T7155] netlink: 32 bytes leftover after parsing attributes in process `syz.3.731'. [ 169.080881][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.731'. [ 169.099074][ T7146] loop5: detected capacity change from 0 to 4096 [ 169.155019][ T7154] loop1: detected capacity change from 0 to 1024 [ 169.168248][ T7122] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 169.238252][ T7154] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 169.247688][ T7122] [ 169.250047][ T7122] ====================================================== [ 169.256790][ T7146] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.257080][ T7122] WARNING: possible circular locking dependency detected [ 169.257100][ T7122] syzkaller #0 Not tainted [ 169.279674][ T7122] ------------------------------------------------------ [ 169.286796][ T7122] syz.0.721/7122 is trying to acquire lock: [ 169.292710][ T7122] ffff888072301808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x122/0x24c0 [ 169.306344][ T7122] [ 169.306344][ T7122] but task is already holding lock: [ 169.313745][ T7122] ffff8880723acda0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 169.324664][ T7122] [ 169.324664][ T7122] which lock already depends on the new lock. [ 169.324664][ T7122] [ 169.335090][ T7122] [ 169.335090][ T7122] the existing dependency chain (in reverse order) is: [ 169.344124][ T7122] [ 169.344124][ T7122] -> #7 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 169.353012][ T7122] down_write+0x38/0x60 [ 169.357730][ T7122] ocfs2_lock_global_qf+0x1e5/0x270 [ 169.363477][ T7122] ocfs2_acquire_dquot+0x29d/0xaf0 [ 169.369141][ T7122] dqget+0x778/0xeb0 [ 169.373587][ T7122] ocfs2_setattr+0xc93/0x1a10 [ 169.378819][ T7122] notify_change+0xbcd/0xee0 [ 169.383966][ T7122] chown_common+0x483/0x610 [ 169.389015][ T7122] ksys_fchown+0xe2/0x150 [ 169.393887][ T7122] __x64_sys_fchown+0x76/0x80 [ 169.399122][ T7122] do_syscall_64+0x4c/0xa0 [ 169.404080][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.410555][ T7122] [ 169.410555][ T7122] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 169.421099][ T7122] down_write+0x38/0x60 [ 169.425800][ T7122] ocfs2_lock_global_qf+0x1c7/0x270 [ 169.431544][ T7122] ocfs2_acquire_dquot+0x29d/0xaf0 [ 169.437293][ T7122] dqget+0x778/0xeb0 [ 169.441741][ T7122] ocfs2_setattr+0xc93/0x1a10 [ 169.447234][ T7122] notify_change+0xbcd/0xee0 [ 169.452374][ T7122] chown_common+0x483/0x610 [ 169.457432][ T7122] ksys_fchown+0xe2/0x150 [ 169.462310][ T7122] __x64_sys_fchown+0x76/0x80 [ 169.467632][ T7122] do_syscall_64+0x4c/0xa0 [ 169.472591][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.479050][ T7122] [ 169.479050][ T7122] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 169.486720][ T7122] __mutex_lock_common+0x1eb/0x2390 [ 169.492469][ T7122] mutex_lock_nested+0x17/0x20 [ 169.497783][ T7122] dquot_commit+0x5a/0x410 [ 169.502733][ T7122] ext4_write_dquot+0x1f0/0x360 [ 169.507076][ T7154] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.508131][ T7122] mark_all_dquot_dirty+0xf9/0x400 [ 169.508158][ T7122] __dquot_free_space+0x7ca/0xb90 [ 169.531307][ T7122] ext4_free_blocks+0x1af5/0x2480 [ 169.536886][ T7122] ext4_ext_remove_space+0x1eaa/0x43a0 [ 169.542901][ T7122] ext4_ext_truncate+0x192/0x240 [ 169.548383][ T7122] ext4_truncate+0x9f1/0x10d0 [ 169.553608][ T7122] ext4_evict_inode+0xb43/0x1080 [ 169.559089][ T7122] evict+0x485/0x870 [ 169.563514][ T7122] vfs_rmdir+0x3b4/0x430 [ 169.568305][ T7122] do_rmdir+0x295/0x710 [ 169.572990][ T7122] __x64_sys_unlinkat+0xc0/0xe0 [ 169.578371][ T7122] do_syscall_64+0x4c/0xa0 [ 169.583346][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.589779][ T7122] [ 169.589779][ T7122] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 169.597514][ T7122] down_write+0x38/0x60 [ 169.602223][ T7122] ext4_truncate+0x96d/0x10d0 [ 169.607438][ T7122] ext4_setattr+0xffe/0x19e0 [ 169.612562][ T7122] notify_change+0xbcd/0xee0 [ 169.617717][ T7122] do_truncate+0x197/0x220 [ 169.622680][ T7122] do_sys_ftruncate+0x31b/0x3d0 [ 169.628075][ T7122] do_syscall_64+0x4c/0xa0 [ 169.633028][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.639613][ T7122] [ 169.639613][ T7122] -> #3 (jbd2_handle){++++}-{0:0}: [ 169.646946][ T7122] start_this_handle+0x1338/0x15a0 [ 169.652618][ T7122] jbd2__journal_start+0x2b7/0x5a0 [ 169.658283][ T7122] jbd2_journal_start+0x26/0x30 [ 169.663672][ T7122] ocfs2_start_trans+0x374/0x6c0 [ 169.669155][ T7122] ocfs2_fileattr_set+0x2fe/0x7d0 [ 169.674718][ T7122] vfs_fileattr_set+0x842/0xaf0 [ 169.680110][ T7122] do_vfs_ioctl+0x1767/0x1de0 [ 169.685343][ T7122] __se_sys_ioctl+0x83/0x170 [ 169.690578][ T7122] do_syscall_64+0x4c/0xa0 [ 169.695529][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.701973][ T7122] [ 169.701973][ T7122] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 169.710507][ T7122] down_read+0x44/0x2e0 [ 169.715208][ T7122] ocfs2_start_trans+0x368/0x6c0 [ 169.720713][ T7122] ocfs2_fileattr_set+0x2fe/0x7d0 [ 169.726373][ T7122] vfs_fileattr_set+0x842/0xaf0 [ 169.731768][ T7122] do_vfs_ioctl+0x1767/0x1de0 [ 169.736993][ T7122] __se_sys_ioctl+0x83/0x170 [ 169.742145][ T7122] do_syscall_64+0x4c/0xa0 [ 169.747121][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.753589][ T7122] [ 169.753589][ T7122] -> #1 (sb_internal#5){.+.+}-{0:0}: [ 169.761082][ T7122] ocfs2_start_trans+0x269/0x6c0 [ 169.766557][ T7122] ocfs2_mknod+0xe2f/0x22b0 [ 169.771584][ T7122] ocfs2_create+0x192/0x410 [ 169.776620][ T7122] path_openat+0x11e1/0x2f30 [ 169.781735][ T7122] do_filp_open+0x1b3/0x3e0 [ 169.786766][ T7122] do_sys_openat2+0x142/0x4a0 [ 169.791975][ T7122] __x64_sys_openat+0x135/0x160 [ 169.797352][ T7122] do_syscall_64+0x4c/0xa0 [ 169.802405][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.808831][ T7122] [ 169.808831][ T7122] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 169.819447][ T7122] __lock_acquire+0x2c33/0x7c60 [ 169.824854][ T7122] lock_acquire+0x197/0x3f0 [ 169.829918][ T7122] down_write+0x38/0x60 [ 169.834598][ T7122] ocfs2_reserve_local_alloc_bits+0x122/0x24c0 [ 169.841277][ T7122] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 169.848128][ T7122] ocfs2_lock_allocators+0x2f7/0x5b0 [ 169.853933][ T7122] ocfs2_extend_allocation+0x397/0x1760 [ 169.860006][ T7122] ocfs2_extend_no_holes+0x20b/0x490 [ 169.865831][ T7122] ocfs2_acquire_dquot+0x5fe/0xaf0 [ 169.871553][ T7122] dqget+0x778/0xeb0 [ 169.875970][ T7122] ocfs2_setattr+0xc93/0x1a10 [ 169.881170][ T7122] notify_change+0xbcd/0xee0 [ 169.886305][ T7122] chown_common+0x483/0x610 [ 169.891328][ T7122] ksys_fchown+0xe2/0x150 [ 169.896182][ T7122] __x64_sys_fchown+0x76/0x80 [ 169.901381][ T7122] do_syscall_64+0x4c/0xa0 [ 169.906322][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.912994][ T7122] [ 169.912994][ T7122] other info that might help us debug this: [ 169.912994][ T7122] [ 169.923242][ T7122] Chain exists of: [ 169.923242][ T7122] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 169.923242][ T7122] [ 169.943234][ T7122] Possible unsafe locking scenario: [ 169.943234][ T7122] [ 169.950682][ T7122] CPU0 CPU1 [ 169.956062][ T7122] ---- ---- [ 169.961423][ T7122] lock(&ocfs2_quota_ip_alloc_sem_key); [ 169.967076][ T7122] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 169.976887][ T7122] lock(&ocfs2_quota_ip_alloc_sem_key); [ 169.985041][ T7122] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 169.992474][ T7122] [ 169.992474][ T7122] *** DEADLOCK *** [ 169.992474][ T7122] [ 170.000641][ T7122] 5 locks held by syz.0.721/7122: [ 170.005674][ T7122] #0: ffff88807d9d0460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 170.015440][ T7122] #1: ffff8880723aa648 (&type->i_mutex_dir_key#13){+.+.}-{3:3}, at: chown_common+0x3c6/0x610 [ 170.025720][ T7122] #2: ffff88807229c0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x290/0xaf0 [ 170.035737][ T7122] #3: ffff8880723ad108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 170.048699][ T7122] #4: ffff8880723acda0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 170.060005][ T7122] [ 170.060005][ T7122] stack backtrace: [ 170.065929][ T7122] CPU: 1 PID: 7122 Comm: syz.0.721 Not tainted syzkaller #0 [ 170.073230][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.083287][ T7122] Call Trace: [ 170.086674][ T7122] [ 170.089650][ T7122] dump_stack_lvl+0x168/0x230 [ 170.094335][ T7122] ? load_image+0x3b0/0x3b0 [ 170.098848][ T7122] ? show_regs_print_info+0x20/0x20 [ 170.104067][ T7122] ? print_circular_bug+0x12b/0x1a0 [ 170.109272][ T7122] check_noncircular+0x274/0x310 [ 170.114211][ T7122] ? add_chain_block+0x940/0x940 [ 170.119150][ T7122] ? lockdep_lock+0xdc/0x1e0 [ 170.123758][ T7122] ? verify_lock_unused+0x140/0x140 [ 170.128957][ T7122] ? mark_lock+0x94/0x320 [ 170.133308][ T7122] __lock_acquire+0x2c33/0x7c60 [ 170.138174][ T7122] ? verify_lock_unused+0x140/0x140 [ 170.143371][ T7122] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 170.149003][ T7122] ? do_raw_spin_lock+0x11d/0x280 [ 170.154028][ T7122] ? mutex_unlock+0x10/0x10 [ 170.158531][ T7122] ? __rwlock_init+0x140/0x140 [ 170.163300][ T7122] ? __rwlock_init+0x140/0x140 [ 170.168061][ T7122] ? do_raw_spin_unlock+0x11d/0x230 [ 170.173264][ T7122] lock_acquire+0x197/0x3f0 [ 170.177773][ T7122] ? ocfs2_reserve_local_alloc_bits+0x122/0x24c0 [ 170.184142][ T7122] ? __might_sleep+0xf0/0xf0 [ 170.188925][ T7122] ? read_lock_is_recursive+0x10/0x10 [ 170.194296][ T7122] ? mark_lock+0x94/0x320 [ 170.198630][ T7122] ? __lock_acquire+0x13ad/0x7c60 [ 170.203668][ T7122] down_write+0x38/0x60 [ 170.207825][ T7122] ? ocfs2_reserve_local_alloc_bits+0x122/0x24c0 [ 170.214150][ T7122] ocfs2_reserve_local_alloc_bits+0x122/0x24c0 [ 170.220311][ T7122] ? _raw_spin_unlock+0x40/0x40 [ 170.225165][ T7122] ? stack_trace_save+0x98/0xe0 [ 170.230016][ T7122] ? verify_lock_unused+0x140/0x140 [ 170.235227][ T7122] ? stack_depot_save+0x404/0x440 [ 170.240265][ T7122] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 170.246948][ T7122] ? __kasan_kmalloc+0xcc/0xf0 [ 170.251725][ T7122] ? __kasan_kmalloc+0xb5/0xf0 [ 170.256487][ T7122] ? ocfs2_reserve_clusters_with_limit+0xe7/0xba0 [ 170.262908][ T7122] ? ocfs2_lock_allocators+0x2f7/0x5b0 [ 170.268367][ T7122] ? ocfs2_extend_allocation+0x397/0x1760 [ 170.274091][ T7122] ? ocfs2_extend_no_holes+0x20b/0x490 [ 170.279569][ T7122] ? ocfs2_acquire_dquot+0x5fe/0xaf0 [ 170.284885][ T7122] ? ocfs2_setattr+0xc93/0x1a10 [ 170.289846][ T7122] ? notify_change+0xbcd/0xee0 [ 170.294838][ T7122] ? chown_common+0x483/0x610 [ 170.299534][ T7122] ? ksys_fchown+0xe2/0x150 [ 170.304053][ T7122] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 170.310133][ T7122] ? __lock_acquire+0x7c60/0x7c60 [ 170.315170][ T7122] ? do_raw_spin_lock+0x11d/0x280 [ 170.320287][ T7122] ? __rwlock_init+0x140/0x140 [ 170.325057][ T7122] ? do_raw_spin_unlock+0x11d/0x230 [ 170.330259][ T7122] ? _raw_spin_unlock+0x24/0x40 [ 170.335116][ T7122] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 170.341185][ T7122] ? ocfs2_reserve_clusters_with_limit+0x168/0xba0 [ 170.347689][ T7122] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 170.354024][ T7122] ? ocfs2_reserve_clusters+0x30/0x30 [ 170.359402][ T7122] ? rcu_is_watching+0x11/0xa0 [ 170.364164][ T7122] ? ocfs2_num_free_extents+0x2de/0x5a0 [ 170.369713][ T7122] ? ocfs2_validate_extent_block+0x550/0x550 [ 170.375697][ T7122] ? ocfs2_read_blocks_sync+0xb30/0xb30 [ 170.381245][ T7122] ? __kernel_text_address+0x9a/0x100 [ 170.386642][ T7122] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 170.392039][ T7122] ocfs2_lock_allocators+0x2f7/0x5b0 [ 170.397356][ T7122] ? _ocfs2_clear_bit+0x40/0x40 [ 170.402227][ T7122] ? ocfs2_read_inode_block+0x11a/0x180 [ 170.407788][ T7122] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 170.413781][ T7122] ? stack_depot_save+0x404/0x440 [ 170.418850][ T7122] ocfs2_extend_allocation+0x397/0x1760 [ 170.424416][ T7122] ? __lock_acquire+0x13ad/0x7c60 [ 170.429456][ T7122] ? ocfs2_setattr+0xc93/0x1a10 [ 170.434480][ T7122] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.440567][ T7122] ? ocfs2_extend_no_holes+0x490/0x490 [ 170.446047][ T7122] ? mark_lock+0x94/0x320 [ 170.450387][ T7122] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 170.456385][ T7122] ? ocfs2_allocate_extend_trans+0x5b0/0x5b0 [ 170.462444][ T7122] ? ocfs2_qinfo_unlock+0xa4/0x140 [ 170.467599][ T7122] ocfs2_extend_no_holes+0x20b/0x490 [ 170.472896][ T7122] ? ocfs2_zero_extend+0x26c0/0x26c0 [ 170.478184][ T7122] ? do_raw_spin_unlock+0x11d/0x230 [ 170.483380][ T7122] ? _raw_spin_unlock+0x24/0x40 [ 170.488229][ T7122] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 170.493426][ T7122] ocfs2_acquire_dquot+0x5fe/0xaf0 [ 170.498545][ T7122] ? ocfs2_destroy_dquot+0x40/0x40 [ 170.503666][ T7122] ? percpu_counter_add_batch+0x13b/0x160 [ 170.509480][ T7122] dqget+0x778/0xeb0 [ 170.513385][ T7122] ocfs2_setattr+0xc93/0x1a10 [ 170.518070][ T7122] ? ocfs2_extend_allocation+0x1760/0x1760 [ 170.523903][ T7122] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 170.529719][ T7122] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 170.535975][ T7122] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 170.541880][ T7122] ? from_kgid+0x159/0x680 [ 170.546302][ T7122] ? make_kgid+0x640/0x640 [ 170.550724][ T7122] ? common_perm+0x1b0/0x1b0 [ 170.555315][ T7122] ? bpf_lsm_inode_setattr+0x5/0x10 [ 170.560514][ T7122] ? try_break_deleg+0x79/0x120 [ 170.565376][ T7122] ? ocfs2_extend_allocation+0x1760/0x1760 [ 170.571191][ T7122] notify_change+0xbcd/0xee0 [ 170.575791][ T7122] chown_common+0x483/0x610 [ 170.580304][ T7122] ? __ia32_sys_chmod+0x70/0x70 [ 170.585161][ T7122] ? rcu_read_lock_any_held+0xb0/0x120 [ 170.590620][ T7122] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 170.595911][ T7122] ? __mnt_want_write+0x1e2/0x260 [ 170.600960][ T7122] ? mnt_want_write_file+0x174/0x200 [ 170.606263][ T7122] ksys_fchown+0xe2/0x150 [ 170.610610][ T7122] __x64_sys_fchown+0x76/0x80 [ 170.615303][ T7122] do_syscall_64+0x4c/0xa0 [ 170.619735][ T7122] ? clear_bhb_loop+0x30/0x80 [ 170.624418][ T7122] ? clear_bhb_loop+0x30/0x80 [ 170.629102][ T7122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.635094][ T7122] RIP: 0033:0x7f00b44f66c9 [ 170.639550][ T7122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.659161][ T7122] RSP: 002b:00007f00b275d038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 170.667585][ T7122] RAX: ffffffffffffffda RBX: 00007f00b474cfa0 RCX: 00007f00b44f66c9 [ 170.675676][ T7122] RDX: 000000000000000a RSI: 000000003a736e6f RDI: 0000000000000004 [ 170.683754][ T7122] RBP: 00007f00b4578f91 R08: 0000000000000000 R09: 0000000000000000 [ 170.691753][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.699725][ T7122] R13: 00007f00b474d038 R14: 00007f00b474cfa0 R15: 00007ffdc4fc0338 [ 170.707704][ T7122] [ 170.782082][ T7154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 170.800749][ T7154] System zones: 0-1, 3-36 [ 170.823115][ T7154] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 170.850841][ T4183] ocfs2: Unmounting device (7,0) on (node local)