last executing test programs: 1m55.365775172s ago: executing program 0 (id=418): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03084003158cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m54.863178909s ago: executing program 0 (id=421): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r0}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r1}) 1m54.612546021s ago: executing program 0 (id=425): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {0x0, r2}}, 0x18) 1m54.428227093s ago: executing program 0 (id=427): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f0000000080), 0x3, 0x45c, &(0x7f00000002c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m53.80742416s ago: executing program 0 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) 1m53.191269487s ago: executing program 0 (id=436): lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000100)=@v1={0x1000000, [{0x4, 0x3}]}, 0xc, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="643c87cf", 0x3c64}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x0) 1m52.788230782s ago: executing program 32 (id=436): lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000100)=@v1={0x1000000, [{0x4, 0x3}]}, 0xc, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="643c87cf", 0x3c64}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x0) 4.303980261s ago: executing program 1 (id=1194): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x908, @mcast1, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @remote}, 0x40}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x106}, 0x1c) 4.232440122s ago: executing program 2 (id=1196): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0xf0cb2f4a0c2cfc5d, 0x0) 4.072482853s ago: executing program 1 (id=1197): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0xed, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfbe2}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000700)={r1}, &(0x7f0000000180)=0x8) 3.997145505s ago: executing program 2 (id=1199): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r1}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x3, r1, 0xffffffff}, 0xc) 3.921282055s ago: executing program 1 (id=1200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x4c}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x41}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x20044050) 3.766746727s ago: executing program 2 (id=1202): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 3.729679917s ago: executing program 1 (id=1204): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000280)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x0, 0x0, 0x269f800, 0xb, 0x1}) 3.427674011s ago: executing program 2 (id=1205): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$eJzs3c9PHG0dAPDvDGihvm+F1/dQExM3sYlGDYGeVJpIKS2FFmuqNsbLdoFtiy5sA4vx0EN7a+LJxIPx0GjijVPDwaP1T/DisZ6b6MGLiUkjZndngRl2AxIWpPl8Epid5zf73Xl45jD7pJnGk5WN0spGqbJWqi892rha+nm9trlajfSUnHX/5Fzo9cb3I05if3bu3bj1gwdXI/68/Nd3Ozs7O9E0GF1N7Hv9r38+W9p/7EgLdZrtdm/tpPwkIj49MK6mgYj48R8jkoi4nqVNZ8fhiLgU7bwHz375sHRCo3n9tnqt/H7h5fbklfmtV9u9//Yk4re1L37z8erfvzIw+bevn1D3AAAAAAAAAAAAAAAAAACcc7P37/3o++MT8SaJwa3k4PO6s9mx1/OxOyfmy/3/YwEAAAAAAAAAAAAAAAAAAOD/1N7z/6Xkky7P/89kx6ke9Xe+2/8x0j9z37s3c3N8Itv/PTmQ/60s6R/XB2K0sO/7iy77v18v1O++//vBfo6rM75OvyORpGO58zQdG4v4fbbx++XkYlqrbzS+8ai+ubZ8YsM4t/Lxb+/en4tOtqF/t/hHl/hPF9rv//7/XzjwaWqePzzsI/aZPg7pHMnHf6BnuT+8SI4U/xuFeqcRf44vH//BVtrw/gJT7QmgGf9fDR4e/5lC+/2K/6WIKCXNsZZyM0BzDdNM77VeIS8f//akmJs6szey1/X/70L8bxbaP6v5/3nxHxFd5eP/2VbaUK7E3vU/mh5+/d8qtH8W8W+O//nJLTE/aPn4X2gnDuaKtN7Jo87/s4X2+xD/zhfGtcd5Kcl9AraS9vh7fV8defn4Dx3I37v/S4+0/rtdqH9a93+dfjv3f53p/2tJ+/6P7vLxH+5Z7qjX/1yhXr/n/6nW+o/jysf/Yistv3Yeaf0+avznC+33K/6tVclQJ/6tSaB5SxD/udBO/53135Hk4/+5dmK6v8Tz1u/W+i85fP1/p9D+ma3/0/72+qHIx/+jnuWa8f/LEf7/3y3U63/8I8at9Y8tH/+Pe5ZrXf9Dh8d/Ye/ln+IU4v/VfjYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcA5MZ8eRSNKx3Hmajo1F3MjOL8fFZLGyXF6s1Zd+thExk6WX4pPkca2+WKmVV9bqy9VypVarL0XczPI/jaFko1ZvlFcrT2/ttjWcPKlW1huL1UojImaz9C/Fx522Flcaq5WnEXF7N+/zaX396ZPKWnl5Zf074+Pj4zG3O4bRpPqLRnWt0e69nRsxv1t3JNk3uFb2nd2xfJT8tL65vlap5dKbdWr1pUptX52FLO/XMZo01jfXliqNarlWf9zp7yxNZceZufs/vH934kD+w6R9nD7dYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3oz+e3fRMRg+yyNiFKSvUiyn5zXb6vXyu8XXm5PXpnferX9rlsZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYpX+UBoIoDsBvxkJLj2G17Ha2K4po4YrgCfQYHkaP4iW8g0WKtClCIJmFsH9gm6T6vubB/Jh5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMs9vnXvr3UTkeJqexnx+/n3f5w/l/p9N33/4gwzcjpPL939Q92Uf0+j/LYcrdq8Tzfrr4+YqL2fwZ4M9+lg3Gdobt/m5uv7XkfKVUS0Jb9JOVfVsrcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYsQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUXfBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKwAA//9k4ChH") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYBLOB="8850149abca67ae364ab188d27548bcf8b821bf18372bdb08b7dc9d997c81086ef5ea01c52d77a6745176910404d"], 0x3, 0x232, &(0x7f0000000500)="$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") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 2.69841094s ago: executing program 3 (id=1208): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0) 2.391058473s ago: executing program 3 (id=1209): syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) setresuid(0xee01, 0xee01, 0x0) fchown(r0, 0x0, 0x0) 2.374280033s ago: executing program 4 (id=1210): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 2.142954146s ago: executing program 2 (id=1211): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 1.847554309s ago: executing program 4 (id=1212): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./file1\x00', r0, 0x0) 1.660453701s ago: executing program 1 (id=1213): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.651235501s ago: executing program 3 (id=1214): socket$packet(0x11, 0x2, 0x300) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x1, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 1.439870254s ago: executing program 2 (id=1215): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x10fd, &(0x7f0000006200)="$eJzs2LFqFFEUBuD/zmyEVCs3/RDQQkGCYX2BFArbWFgLFouVnVsp+zg+jqSyD3mAFAF7ZWYcs4UgYZcEwvfBMJyfuffMLc8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9GbJoyRHTVKnrElSkq47X14m6ab88fe2Scm7j8v168+LN+vxs/RZk9KvGup6+qTURV3U0/rq6OxpXX/5+qndalnS5eJ6szp8e7XXo/S9273uCAAAAA/Dr53Nbzb7cB/9AQAAgP/Z62UCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwA4OktSpaJKUpOvOl5dJuvv9NQAAAGBHJU3ez/+Vj9cAN17kx7wM+eTnULzMt3H989t3P7j9EgAAAHigytY8/iyzv3N5nx1nlpOTsf7zytVZ0g6TeXK4tc/F9WY1PMebVbnrQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBvduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAwFABAAD//9Of0YA=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 1.271300676s ago: executing program 4 (id=1216): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0185134372446b63f4a9f1dabf6a0bdcbcd5235f8e78eac207f174028bf01aad", "7c269401476e3e012fa8e66e904dcd37f99b4f81b10e92d3f9f5e798de88bd23ca8e3f2155654fdcc87453025baa6840", "af941fbfeed0bd78a40c117998f3f054c46704735d948e7ea72a8936", {"1a8a905ce8ee8798dfdbf2bae3764e97", "4fc3ca5e160ed750474da90e2a078b59"}}}}}}}}, 0x0) 1.243743386s ago: executing program 3 (id=1217): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x2000, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x10, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000900)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a35f2", 0x14, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {{0x2f00, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0xffff}}}}}}}, 0x0) 1.046459188s ago: executing program 1 (id=1218): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000600)={0x0, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 957.897659ms ago: executing program 3 (id=1219): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 917.665989ms ago: executing program 4 (id=1220): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r0, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000001c00000004000000", @ANYRES32=r0, @ANYBLOB="55fb"], 0x20) 518.925774ms ago: executing program 4 (id=1221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 123.415109ms ago: executing program 3 (id=1222): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=cp850,fmask=00000000000000000000236,errors=remount-ro,iocharset=iso8859-7,fmask=00000000000000000000005,dmask=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000001,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c686173682c6f626a5f726f6c653d2c7375626a5f726f6c653d69736f393835392d372c6f626a5f747970653d39369b2c6673636f6e746578743d73797374656d5f752c00"], 0x1, 0x152f, &(0x7f00000037c0)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0xfffffffffffffe8c}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 0s ago: executing program 4 (id=1223): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_mptcp_buf(r0, 0x6, 0x3, 0xfffffffffffffffd, &(0x7f0000000040)=0x1) kernel console output (not intermixed with test programs): _ratelimit: 2 callbacks suppressed [ 139.214284][ T7033] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 139.263543][ T6985] BTRFS info (device loop2): disabling free space tree [ 139.309439][ T6985] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 139.349752][ T6985] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 139.676926][ T6996] chnl_net:caif_netlink_parms(): no params data found [ 139.900084][ T5776] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 139.921150][ T5907] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.076076][ T5789] Bluetooth: hci0: command tx timeout [ 140.129557][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 140.184728][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 140.249629][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.294955][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.345286][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 140.369467][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 140.395580][ T5907] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 140.407782][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.451475][ T5907] usb 4-1: config 0 descriptor?? [ 140.458314][ T7049] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.735545][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.743467][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.767997][ T6996] bridge_slave_0: entered allmulticast mode [ 140.788177][ T6996] bridge_slave_0: entered promiscuous mode [ 140.808566][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.818445][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.837893][ T6996] bridge_slave_1: entered allmulticast mode [ 140.851788][ T6996] bridge_slave_1: entered promiscuous mode [ 140.902577][ T5783] usb 4-1: USB disconnect, device number 10 [ 140.904509][ T5789] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 140.918818][ T7071] loop2: detected capacity change from 0 to 1024 [ 140.931247][ T7071] EXT4-fs: Ignoring removed bh option [ 140.993692][ T12] hsr_slave_0: left promiscuous mode [ 141.019818][ T7071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.039044][ T12] hsr_slave_1: left promiscuous mode [ 141.103156][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.129058][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.148351][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.165413][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.175072][ T12] bridge_slave_1: left allmulticast mode [ 141.193294][ T12] bridge_slave_1: left promiscuous mode [ 141.221103][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.236962][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.265468][ T12] bridge_slave_0: left allmulticast mode [ 141.286114][ T12] bridge_slave_0: left promiscuous mode [ 141.293411][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.378915][ T12] veth1_macvtap: left promiscuous mode [ 141.385308][ T12] veth0_macvtap: left promiscuous mode [ 141.394911][ T12] veth1_vlan: left promiscuous mode [ 141.400889][ T12] veth0_vlan: left promiscuous mode [ 141.931388][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.990351][ T7083] loop2: detected capacity change from 0 to 40427 [ 142.007132][ T7083] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 142.016026][ T7083] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 142.049571][ T7083] F2FS-fs (loop2): invalid crc value [ 142.065717][ T7083] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.124036][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 142.152907][ T5789] Bluetooth: hci0: command tx timeout [ 142.170080][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 142.199324][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 142.218716][ T9] usb 4-1: config 220 has no interface number 2 [ 142.227112][ T7083] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 142.236307][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 142.250767][ T7083] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.279646][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 142.286691][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 142.304720][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 142.319810][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 142.329199][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.350983][ T9] usb 4-1: Product: syz [ 142.355230][ T9] usb 4-1: Manufacturer: syz [ 142.375025][ T9] usb 4-1: SerialNumber: syz [ 142.675344][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 142.683452][ T9] usb 4-1: No valid video chain found. [ 142.689013][ T9] usb 4-1: selecting invalid altsetting 0 [ 142.742184][ T9] usb 4-1: selecting invalid altsetting 0 [ 142.766902][ T9] usbtest: probe of 4-1:220.1 failed with error -22 [ 142.778377][ T9] usb 4-1: USB disconnect, device number 11 [ 143.002895][ T12] team0 (unregistering): Port device team_slave_1 removed [ 143.078883][ T12] team0 (unregistering): Port device team_slave_0 removed [ 143.166098][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.267268][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.834795][ T12] bond0 (unregistering): Released all slaves [ 144.077943][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.126245][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.147312][ T7106] loop1: detected capacity change from 0 to 256 [ 144.229632][ T5789] Bluetooth: hci0: command tx timeout [ 144.338400][ T7111] loop2: detected capacity change from 0 to 64 [ 144.355909][ T6996] team0: Port device team_slave_0 added [ 144.361115][ T7106] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 144.412556][ T7114] loop3: detected capacity change from 0 to 128 [ 144.423461][ T6996] team0: Port device team_slave_1 added [ 144.424234][ T7115] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.512153][ T7111] hfs: walked past end of dir [ 144.569298][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.576338][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.625318][ T7115] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 144.649583][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.650954][ T7114] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.664082][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.681020][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.710498][ T7115] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 144.710997][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.774590][ T7114] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.870195][ T5775] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 144.905726][ T6996] hsr_slave_0: entered promiscuous mode [ 144.929756][ T28] audit: type=1800 audit(1778297419.000:7): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.470" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 144.980572][ T6996] hsr_slave_1: entered promiscuous mode [ 145.000758][ T28] audit: type=1804 audit(1778297419.030:8): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.470" name="/newroot/95/file0/bus" dev="loop3" ino=12 res=1 errno=0 [ 145.009394][ T6996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.052327][ T5781] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.063915][ T6996] Cannot create hsr debugfs directory [ 145.347881][ T7133] loop1: detected capacity change from 0 to 128 [ 145.389737][ T7135] program syz.2.474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.427471][ T7133] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 145.518639][ T7133] sysv_free_block: trying to free block not in datazone [ 145.643967][ T5775] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 145.772786][ T6996] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.830179][ T6996] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.861741][ T6996] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.937537][ T6996] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.941101][ T7149] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 145.968105][ T7149] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 145.986614][ T7149] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 146.016448][ T7149] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 146.043820][ T7149] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 146.061425][ T7145] loop1: detected capacity change from 0 to 4096 [ 146.070670][ T7149] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 146.077354][ T7149] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 146.119642][ T7149] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 146.137001][ T7149] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 146.170774][ T7149] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 146.195990][ T7149] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 146.231730][ T7149] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 146.236350][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.253065][ T7149] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 146.273638][ T7149] comedi comedi3: 8255: I/O port conflict (0x10000002,4) [ 146.310205][ T5789] Bluetooth: hci0: command tx timeout [ 146.321186][ T6996] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.327989][ T7149] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 146.444789][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.452020][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.483110][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.490386][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.536784][ T7161] loop2: detected capacity change from 0 to 512 [ 146.701979][ T7161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.839487][ T7156] syz.3.481 (7156) used greatest stack depth: 17896 bytes left [ 146.970814][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.982312][ T7155] syz.3.481 (7155) used greatest stack depth: 17000 bytes left [ 147.149485][ T7176] program syz.3.485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.359521][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.397315][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 148.129984][ T7212] program syz.1.495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.372646][ T6996] veth0_vlan: entered promiscuous mode [ 148.395850][ T6996] veth1_vlan: entered promiscuous mode [ 148.474806][ T6996] veth0_macvtap: entered promiscuous mode [ 148.491761][ T6996] veth1_macvtap: entered promiscuous mode [ 148.539695][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.565354][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.576555][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.592741][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.613330][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.626787][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.649367][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.680488][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.712342][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.735903][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.764843][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.792455][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.813582][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.837693][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.871461][ T6996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.898179][ T6996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.923592][ T6996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.989306][ T6996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.346958][ T7227] loop2: detected capacity change from 0 to 4096 [ 149.381856][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.393485][ T7233] loop3: detected capacity change from 0 to 1024 [ 149.412674][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.415306][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 149.483264][ T7233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 149.518419][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.619615][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.627425][ T7233] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.897434][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 150.081265][ T5938] IPVS: starting estimator thread 0... [ 150.189673][ T7243] IPVS: using max 16 ests per chain, 38400 per kthread [ 150.532307][ T7257] loop2: detected capacity change from 0 to 128 [ 150.585048][ T7257] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 150.641745][ T7257] sysv_free_block: trying to free block not in datazone [ 150.790072][ T5776] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 150.892169][ T7267] loop4: detected capacity change from 0 to 1024 [ 150.995130][ T7267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 151.072362][ T7267] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.103035][ T7273] process 'syz.2.509' launched './file0' with NULL argv: empty string added [ 151.369928][ T6996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 151.485965][ T9] IPVS: starting estimator thread 0... [ 151.593464][ T7285] IPVS: using max 16 ests per chain, 38400 per kthread [ 152.424879][ T7304] loop2: detected capacity change from 0 to 512 [ 152.787539][ T7293] loop3: detected capacity change from 0 to 32768 [ 152.822834][ T7293] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.514 (7293) [ 152.908922][ T7288] loop4: detected capacity change from 0 to 40427 [ 152.919219][ T7293] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.940036][ T7293] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 152.948830][ T7293] BTRFS info (device loop3): turning on sync discard [ 152.981459][ T7288] F2FS-fs (loop4): build fault injection attr: rate: 684, type: 0x7ffff [ 153.007480][ T7288] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 153.016159][ T7293] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 153.033960][ T7288] F2FS-fs (loop4): Image doesn't support compression [ 153.048445][ T7293] BTRFS info (device loop3): use zstd compression, level 3 [ 153.065861][ T7288] F2FS-fs (loop4): invalid crc value [ 153.072318][ T7293] BTRFS info (device loop3): turning on async discard [ 153.089464][ T7293] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 153.106014][ T7288] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.140886][ T7293] BTRFS info (device loop3): trying to use backup root at mount time [ 153.149060][ T7293] BTRFS info (device loop3): enabling auto defrag [ 153.179320][ T7293] BTRFS info (device loop3): using free space tree [ 153.258138][ T7288] F2FS-fs (loop4): Start checkpoint disabled! [ 153.295783][ T1086] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 153.299283][ T7288] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 153.317472][ T7293] BTRFS error (device loop3): failed to load root extent [ 153.326006][ T7293] BTRFS warning (device loop3): try to load backup roots slot 1 [ 153.345167][ T1086] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 153.403142][ T7293] BTRFS warning (device loop3): couldn't read tree root [ 153.438781][ T7293] BTRFS warning (device loop3): try to load backup roots slot 2 [ 153.471712][ T4380] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 153.499617][ T7293] BTRFS warning (device loop3): couldn't read tree root [ 153.506673][ T7293] BTRFS warning (device loop3): try to load backup roots slot 3 [ 153.600305][ T7293] BTRFS info (device loop3): enabling ssd optimizations [ 153.624456][ T7333] netlink: 'syz.1.519': attribute type 3 has an invalid length. [ 153.639455][ T7293] BTRFS info (device loop3): rebuilding free space tree [ 153.642358][ T7335] loop2: detected capacity change from 0 to 128 [ 153.746820][ T7293] BTRFS info (device loop3): checking UUID tree [ 153.810145][ T1086] kworker/u4:7: attempt to access beyond end of device [ 153.810145][ T1086] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 153.880329][ T1086] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 153.888208][ T1086] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 153.948795][ T1086] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 154.329691][ T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.461825][ T7353] bridge1: entered promiscuous mode [ 154.476668][ T5781] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.539295][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 154.573547][ T786] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 154.596851][ T786] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 154.636824][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.657279][ T786] usb 3-1: Product: syz [ 154.673167][ T786] usb 3-1: Manufacturer: syz [ 154.677855][ T786] usb 3-1: SerialNumber: syz [ 154.752199][ T786] r8152-cfgselector 3-1: config 0 descriptor?? [ 154.885064][ T7363] loop4: detected capacity change from 0 to 128 [ 155.017299][ T7363] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 155.042221][ T786] r8152-cfgselector 3-1: Needed 2 retries to read version [ 155.119078][ T7363] sysv_free_block: trying to free block not in datazone [ 155.263117][ T786] r8152-cfgselector 3-1: Unknown version 0x0000 [ 155.279608][ T786] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 155.295324][ T7372] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 155.312044][ T6996] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 156.569533][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.769126][ C1] sched: RT throttling activated [ 156.799374][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 156.812580][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.866802][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.930372][ T786] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 156.975712][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.031341][ T786] usb 3-1: config 0 descriptor?? [ 157.581178][ T786] apple 0003:05AC:024B.0005: fixing up MacBook JIS keyboard report descriptor [ 157.637887][ T786] apple 0003:05AC:024B.0005: unknown global tag 0xe [ 157.696931][ T786] apple 0003:05AC:024B.0005: item 0 1 1 14 parsing failed [ 157.742805][ T786] apple 0003:05AC:024B.0005: parse failed [ 157.752217][ T7377] loop4: detected capacity change from 0 to 40427 [ 157.760038][ T786] apple: probe of 0003:05AC:024B.0005 failed with error -22 [ 157.863326][ T786] usb 3-1: USB disconnect, device number 4 [ 157.875888][ T7377] F2FS-fs (loop4): invalid crc value [ 157.911703][ T7377] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.988069][ T7377] F2FS-fs (loop4): Start checkpoint disabled! [ 158.025496][ T7377] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 158.102341][ T7387] loop3: detected capacity change from 0 to 32768 [ 158.341296][ T1086] kworker/u4:7: attempt to access beyond end of device [ 158.341296][ T1086] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 158.364426][ T59] kworker/u4:4: attempt to access beyond end of device [ 158.364426][ T59] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 158.385119][ T59] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 158.395952][ T59] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 158.411911][ T59] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 159.248259][ T7431] loop4: detected capacity change from 0 to 128 [ 159.392945][ T7437] program syz.2.548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.112731][ T7461] loop3: detected capacity change from 0 to 128 [ 160.243388][ T7464] program syz.4.561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.609525][ T7474] netlink: 'syz.3.566': attribute type 1 has an invalid length. [ 160.844127][ T7454] loop1: detected capacity change from 0 to 32768 [ 160.959731][ T7454] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.133952][ T7454] XFS (loop1): Ending clean mount [ 161.180055][ T7454] XFS (loop1): Quotacheck needed: Please wait. [ 161.375682][ T7454] XFS (loop1): Quotacheck: Done. [ 161.662996][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.385195][ T7503] loop2: detected capacity change from 0 to 32768 [ 162.484088][ T7505] loop3: detected capacity change from 0 to 32768 [ 162.606492][ T7505] find_entry called with index = 0 [ 162.636805][ T7505] read_mapping_page failed! [ 162.675720][ T7505] ERROR: (device loop3): txCommit: [ 162.675720][ T7505] [ 162.800942][ T7505] jfs_mkdir: dtSearch returned -17 [ 163.271670][ T7536] loop2: detected capacity change from 0 to 1024 [ 163.390001][ T7534] loop3: detected capacity change from 0 to 4096 [ 163.432206][ T28] audit: type=1800 audit(1778297437.510:9): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.585" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 163.459983][ T7536] syz.2.585: attempt to access beyond end of device [ 163.459983][ T7536] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 163.573680][ T7540] netlink: 220 bytes leftover after parsing attributes in process `syz.4.587'. [ 164.209250][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 164.441187][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 164.470366][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.506241][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.539916][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.560752][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 164.579489][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 164.594699][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.605080][ T7569] ipvlan2: entered allmulticast mode [ 164.609225][ T9] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 164.631821][ T7569] syz_tun: entered allmulticast mode [ 164.651641][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.685521][ T9] usb 2-1: config 0 descriptor?? [ 165.141245][ T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 165.183240][ T7589] lo: entered promiscuous mode [ 165.188363][ T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 165.217278][ T7588] lo: left promiscuous mode [ 165.222702][ T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 165.249458][ T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 165.270004][ T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 165.331343][ T9] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 165.379511][ T9] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 165.414154][ C0] hid-thrustmaster 0003:044F:B65D.0006: Unknown packet type 0x0, unable to proceed further with wheel init [ 165.761613][ T7603] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 165.832027][ T9] usb 2-1: USB disconnect, device number 7 [ 166.237597][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 166.256271][ T7618] ipvlan2: entered allmulticast mode [ 166.263877][ T7618] syz_tun: entered allmulticast mode [ 166.522011][ T7626] lo: entered promiscuous mode [ 166.528778][ T7625] lo: left promiscuous mode [ 166.536477][ T7624] loop4: detected capacity change from 0 to 1024 [ 166.725174][ T7631] loop1: detected capacity change from 0 to 256 [ 166.754485][ T7633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.615'. [ 166.776440][ T7633] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 166.802256][ T7633] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 166.803727][ T7631] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x726cdf83, utbl_chksum : 0xe619d30d) [ 166.863520][ T28] audit: type=1800 audit(1778297440.940:10): pid=7631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.614" name="file1" dev="loop1" ino=1048622 res=0 errno=0 [ 166.942869][ T7631] exFAT-fs (loop1): invalid start cluster (17) [ 167.009079][ T5789] Bluetooth: hci0: hcon ffff88807b7ee000 sent 0 < count 137 [ 167.021018][ T7636] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 167.337518][ T7646] tap0: tun_chr_ioctl cmd 1074025677 [ 167.346805][ T7646] tap0: linktype set to 778 [ 167.439324][ T5819] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.639539][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 167.654045][ T5819] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 167.670645][ T5784] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 167.678825][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.707136][ T5819] pvrusb2: Hardware description: Terratec Grabster AV400 [ 167.725266][ T5819] pvrusb2: ********** [ 167.730055][ T5819] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 167.750107][ T5819] pvrusb2: Important functionality might not be entirely working. [ 167.764719][ T5819] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 167.777215][ T5819] pvrusb2: ********** [ 167.879375][ T5784] usb 4-1: Using ep0 maxpacket: 32 [ 167.889062][ T5784] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.909485][ T5784] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.928079][ T2321] pvrusb2: Invalid write control endpoint [ 167.942501][ T5784] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 167.952016][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.960910][ T5784] usb 4-1: Product: syz [ 167.965715][ T5784] usb 4-1: Manufacturer: syz [ 167.971436][ T5784] usb 4-1: SerialNumber: syz [ 168.012015][ T5784] usb 4-1: config 0 descriptor?? [ 168.065358][ T2321] pvrusb2: Invalid write control endpoint [ 168.072658][ T7665] loop4: detected capacity change from 0 to 4096 [ 168.085056][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 168.097214][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 168.112342][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 168.128172][ T2321] pvrusb2: Device being rendered inoperable [ 168.137988][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 168.142543][ T7642] pvrusb2: Attempted to execute control transfer when device not ok [ 168.163555][ T9] usb 3-1: USB disconnect, device number 5 [ 168.183632][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 168.212096][ T2321] pvrusb2: Attached sub-driver cx25840 [ 168.242419][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 168.242824][ T5938] usb 4-1: USB disconnect, device number 12 [ 168.269876][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 168.505025][ T7670] loop4: detected capacity change from 0 to 1024 [ 168.552550][ T28] audit: type=1800 audit(1778297442.630:11): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.632" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 168.595512][ T7670] syz.4.632: attempt to access beyond end of device [ 168.595512][ T7670] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 168.923625][ T7680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.634'. [ 169.006836][ T7683] loop2: detected capacity change from 0 to 1024 [ 169.149709][ T7683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.571551][ T7707] loop1: detected capacity change from 0 to 1024 [ 169.611899][ T7707] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 169.682258][ T7707] gfs2: path_lookup on c::: returned error -2 [ 169.739058][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.939930][ T7715] capability: warning: `syz.4.647' uses deprecated v2 capabilities in a way that may be insecure [ 171.079438][ T5783] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.287670][ T5783] usb 2-1: Using ep0 maxpacket: 32 [ 171.302065][ T5783] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 171.310216][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 171.339303][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.373321][ T5783] usb 2-1: config 0 descriptor?? [ 171.420219][ T5783] as10x_usb: device has been detected [ 171.450548][ T5783] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 171.553805][ T7772] loop4: detected capacity change from 0 to 128 [ 171.560659][ T5783] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 171.677516][ T5783] as10x_usb: error during firmware upload part1 [ 171.717819][ T5783] Registered device nBox DVB-T Dongle [ 171.741921][ T5783] usb 2-1: USB disconnect, device number 8 [ 171.790100][ T7775] syz.4.664: attempt to access beyond end of device [ 171.790100][ T7775] loop4: rw=2049, sector=145, nr_sectors = 272 limit=128 [ 171.827246][ T5783] Unregistered device nBox DVB-T Dongle [ 171.860464][ T5783] as10x_usb: device has been disconnected [ 172.127345][ T4380] kworker/u4:10: attempt to access beyond end of device [ 172.127345][ T4380] loop4: rw=1, sector=417, nr_sectors = 624 limit=128 [ 172.275844][ T7764] loop3: detected capacity change from 0 to 32768 [ 172.326838][ T7764] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 172.393670][ T7764] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 172.622909][ T5819] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 172.726516][ T5781] ocfs2: Unmounting device (7,3) on (node local) [ 172.839489][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 172.872321][ T5819] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 172.903564][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.924073][ T5819] usb 5-1: Product: syz [ 172.934410][ T5819] usb 5-1: Manufacturer: syz [ 172.946696][ T5819] usb 5-1: SerialNumber: syz [ 173.004018][ T7798] loop1: detected capacity change from 0 to 2048 [ 173.071914][ T7798] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.212817][ T5819] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 173.261842][ T5819] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 173.309858][ T5819] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 173.318529][ T5819] usb 5-1: media controller created [ 173.424831][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.511058][ T5784] hid-generic 0005:15C2:0003.0007: item fetching failed at offset 1/2 [ 173.527847][ T5784] hid-generic: probe of 0005:15C2:0003.0007 failed with error -22 [ 173.613795][ T5819] zl10353_read_register: readreg error (reg=127, ret==-71) [ 173.739022][ T5819] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 173.776163][ T5819] usb 5-1: USB disconnect, device number 2 [ 175.019453][ T7833] loop3: detected capacity change from 0 to 32768 [ 175.094599][ T7833] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 175.304869][ T7833] XFS (loop3): Ending clean mount [ 175.358626][ T7833] XFS (loop3): Quotacheck needed: Please wait. [ 175.529459][ T7833] XFS (loop3): Quotacheck: Done. [ 175.555008][ T7871] loop4: detected capacity change from 0 to 2048 [ 175.642928][ T7871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.731612][ T5781] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.188232][ T7887] loop4: detected capacity change from 0 to 512 [ 176.268287][ T7887] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.691: inode has both inline data and extents flags [ 176.300569][ T7887] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.691: couldn't read orphan inode 15 (err -117) [ 176.401056][ T7887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.771388][ T6996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.447307][ T7897] loop3: detected capacity change from 0 to 32768 [ 177.536429][ T7897] JBD2: Ignoring recovery information on journal [ 177.683207][ T7900] loop1: detected capacity change from 0 to 32768 [ 177.715279][ T7897] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 177.759558][ T7900] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 177.814826][ T7900] JBD2: Ignoring recovery information on journal [ 178.043611][ T7900] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 178.210117][ T7920] loop2: detected capacity change from 0 to 40427 [ 178.243693][ T7920] F2FS-fs (loop2): invalid crc value [ 178.251575][ T5781] ocfs2: Unmounting device (7,3) on (node local) [ 178.312691][ T7920] F2FS-fs (loop2): Found nat_bits in checkpoint [ 178.323471][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 178.527518][ T7920] F2FS-fs (loop2): Start checkpoint disabled! [ 178.571924][ T7920] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 178.945911][ T7922] loop4: detected capacity change from 0 to 32768 [ 179.013745][ T7922] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 179.133460][ T12] kworker/u4:1: attempt to access beyond end of device [ 179.133460][ T12] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 179.165688][ T7922] XFS (loop4): Ending clean mount [ 179.171308][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 179.178469][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 179.190235][ T7922] XFS (loop4): Quotacheck needed: Please wait. [ 179.199369][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 179.229309][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 179.333083][ T7922] XFS (loop4): Quotacheck: Done. [ 179.402675][ T28] audit: type=1800 audit(1778297453.480:12): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.701" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 179.478736][ T27] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.517629][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.554049][ T6996] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 179.564079][ T27] usb 2-1: config 0 descriptor?? [ 179.602043][ T27] cp210x 2-1:0.0: cp210x converter detected [ 180.049341][ T27] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 180.118713][ T27] usb 2-1: cp210x converter now attached to ttyUSB0 [ 180.175480][ T7949] loop3: detected capacity change from 0 to 32768 [ 180.378528][ T5793] udevd[5793]: incorrect btrfs checksum on /dev/loop3 [ 180.391035][ T9] usb 2-1: USB disconnect, device number 9 [ 180.425226][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 180.502097][ T9] cp210x 2-1:0.0: device disconnected [ 181.226087][ T7991] batadv_slave_1: entered allmulticast mode [ 181.251980][ T7991] batadv_slave_1: left allmulticast mode [ 181.286551][ T7965] loop2: detected capacity change from 0 to 32768 [ 181.331546][ T7965] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.704 (7965) [ 181.416033][ T7965] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 181.453563][ T7965] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 181.484771][ T7965] BTRFS info (device loop2): force zlib compression, level 3 [ 181.511480][ T7965] BTRFS info (device loop2): force clearing of disk cache [ 181.518704][ T7965] BTRFS info (device loop2): use zlib compression, level 3 [ 181.569254][ T7965] BTRFS info (device loop2): allowing degraded mounts [ 181.576144][ T7965] BTRFS info (device loop2): turning on sync discard [ 181.629172][ T7965] BTRFS info (device loop2): using free space tree [ 181.724923][ T7976] loop3: detected capacity change from 0 to 32768 [ 181.849685][ T7965] BTRFS info (device loop2): enabling ssd optimizations [ 181.894322][ T7965] BTRFS info (device loop2): rebuilding free space tree [ 182.160561][ T5776] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 182.344428][ T8022] loop3: detected capacity change from 0 to 256 [ 182.377503][ T8022] exfat: Deprecated parameter 'utf8' [ 182.390247][ T8022] exfat: Deprecated parameter 'utf8' [ 182.423946][ T8022] exfat: Deprecated parameter 'namecase' [ 182.571690][ T8022] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 182.854670][ T7995] loop4: detected capacity change from 0 to 32768 [ 182.941639][ T7995] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.711 (7995) [ 183.004646][ T7995] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 183.076236][ T7995] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 183.148387][ T7995] BTRFS info (device loop4): using free space tree [ 183.448830][ T7995] BTRFS info (device loop4): enabling ssd optimizations [ 183.487309][ T7995] BTRFS info (device loop4): auto enabling async discard [ 184.003598][ T8064] loop1: detected capacity change from 0 to 8192 [ 184.025876][ T8070] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 184.063631][ T8064] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.169374][ T8064] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 184.178778][ T8064] REISERFS (device loop1): using ordered data mode [ 184.181173][ T8075] support for cryptoloop has been removed. Use dm-crypt instead. [ 184.239703][ T8064] reiserfs: using flush barriers [ 184.264674][ T8064] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.282142][ T6996] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 184.319928][ T8064] REISERFS (device loop1): checking transaction log (loop1) [ 184.371013][ T8064] REISERFS (device loop1): Using r5 hash to sort names [ 184.409679][ T8064] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 185.403679][ T8095] netlink: 212 bytes leftover after parsing attributes in process `syz.1.740'. [ 185.494688][ T8097] tap0: tun_chr_ioctl cmd 1074025681 [ 185.780175][ T8106] netlink: 'syz.4.745': attribute type 9 has an invalid length. [ 185.888699][ T8108] loop3: detected capacity change from 0 to 512 [ 186.054254][ T8115] loop4: detected capacity change from 0 to 1024 [ 186.081300][ T8116] syz_tun: entered allmulticast mode [ 186.099410][ T8108] EXT4-fs (loop3): 1 orphan inode deleted [ 186.106649][ T8108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.107761][ T59] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 186.120528][ T8115] EXT4-fs: Ignoring removed bh option [ 186.131369][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 1 [ 186.160888][ T8114] syz_tun: left allmulticast mode [ 186.184799][ T8108] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.247173][ T8115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 186.280661][ T8108] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.746: iget: bad i_size value: 360287970189639690 [ 186.446760][ T8115] EXT4-fs (loop4): shut down requested (2) [ 186.497095][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.580209][ T6996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 186.744132][ T8127] loop3: detected capacity change from 0 to 64 [ 186.866676][ T8129] loop4: detected capacity change from 0 to 512 [ 187.306616][ T8139] loop3: detected capacity change from 0 to 256 [ 187.605313][ T8146] program syz.4.762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.645768][ T8125] loop1: detected capacity change from 0 to 32768 [ 187.681538][ T8125] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.752 (8125) [ 187.718226][ T8125] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.745823][ T8125] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 187.777819][ T8125] BTRFS info (device loop1): setting nodatasum [ 187.819216][ T8125] BTRFS info (device loop1): force zlib compression, level 3 [ 187.843728][ T8125] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 187.870711][ T8151] loop3: detected capacity change from 0 to 1024 [ 187.870888][ T8125] BTRFS info (device loop1): use lzo compression, level 0 [ 187.916237][ T8125] BTRFS info (device loop1): turning on flush-on-commit [ 187.934481][ T8125] BTRFS info (device loop1): enabling auto defrag [ 187.943364][ T8151] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.965683][ T8125] BTRFS info (device loop1): max_inline at 4096 [ 187.979568][ T8125] BTRFS info (device loop1): using free space tree [ 188.054732][ T8151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.078497][ T8151] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.179320][ T8151] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.764: bg 0: block 112: padding at end of block bitmap is not set [ 188.196973][ T8166] loop4: detected capacity change from 0 to 4096 [ 188.210148][ T8166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.226871][ T8125] BTRFS info (device loop1): enabling ssd optimizations [ 188.235943][ T8166] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 188.298546][ T8166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.373253][ T28] audit: type=1800 audit(1778297462.450:13): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.766" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 188.504908][ T6996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.567658][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 188.866619][ T5775] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.913248][ T8180] loop3: detected capacity change from 0 to 256 [ 189.008854][ T8180] exFAT-fs (loop3): invalid boot record signature [ 189.055512][ T8180] exFAT-fs (loop3): failed to read boot sector [ 189.065644][ T8180] exFAT-fs (loop3): failed to recognize exfat type [ 189.181610][ T5793] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.795819][ T8197] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 189.999266][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 190.209649][ T27] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 190.240927][ T27] usb 4-1: config index 0 descriptor too short (expected 65505, got 72) [ 190.261707][ T27] usb 4-1: config index 1 descriptor too short (expected 65505, got 72) [ 190.280783][ T27] usb 4-1: config index 2 descriptor too short (expected 65505, got 72) [ 190.295503][ T27] usb 4-1: config index 3 descriptor too short (expected 65505, got 72) [ 190.306902][ T27] usb 4-1: config index 4 descriptor too short (expected 65505, got 72) [ 190.318353][ T27] usb 4-1: config index 5 descriptor too short (expected 65505, got 72) [ 190.330068][ T27] usb 4-1: config index 6 descriptor too short (expected 65505, got 72) [ 190.340783][ T27] usb 4-1: config index 7 descriptor too short (expected 65505, got 72) [ 190.353458][ T27] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 190.369256][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.389247][ T27] usb 4-1: Product: syz [ 190.393753][ T27] usb 4-1: Manufacturer: syz [ 190.417647][ T27] usb 4-1: SerialNumber: syz [ 190.457757][ T27] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 190.516818][ T5819] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 190.763785][ T8208] loop1: detected capacity change from 0 to 32768 [ 190.831874][ T8208] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 191.004144][ T8208] (syz.1.780,8208,0):ocfs2_double_lock:1190 ERROR: status = -2 [ 191.023128][ T8208] (syz.1.780,8208,0):ocfs2_rename:1299 ERROR: status = -2 [ 191.032298][ T8208] (syz.1.780,8208,0):ocfs2_rename:1690 ERROR: status = -2 [ 191.090628][ T27] usb 4-1: USB disconnect, device number 13 [ 191.144567][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 191.177180][ T8212] loop4: detected capacity change from 0 to 32768 [ 191.294937][ T5777] udevd[5777]: incorrect btrfs checksum on /dev/loop4 [ 191.599496][ T5819] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 191.640688][ T5819] ath9k_htc: Failed to initialize the device [ 191.689233][ T27] usb 4-1: ath9k_htc: USB layer deinitialized [ 192.629334][ T51] Bluetooth: hci0: command tx timeout [ 192.712426][ T8227] loop2: detected capacity change from 0 to 40427 [ 192.768851][ T8227] F2FS-fs (loop2): Found nat_bits in checkpoint [ 192.951856][ T8227] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 193.185137][ T5776] syz-executor: attempt to access beyond end of device [ 193.185137][ T5776] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.185243][ T5776] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 193.236375][ T8262] loop4: detected capacity change from 0 to 256 [ 193.237682][ T8262] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.280423][ T8262] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.794362][ T8270] program syz.1.803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.181079][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.808'. [ 194.634200][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.640701][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.680860][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.817'. [ 194.972945][ T8313] loop4: detected capacity change from 0 to 512 [ 195.121618][ T8313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.199347][ T8313] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.380009][ T8313] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #12: comm syz.4.822: Directory hole found for htree leaf block 0 [ 195.516055][ T6996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.759531][ T5784] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 195.942073][ T5784] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.984429][ T5784] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.024540][ T5784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 196.056629][ T5784] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 196.078014][ T8325] loop1: detected capacity change from 0 to 32768 [ 196.087379][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.105304][ T8325] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.826 (8325) [ 196.120857][ T5784] usb 3-1: config 0 descriptor?? [ 196.184619][ T8325] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 196.200886][ T8325] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 196.217623][ T8325] BTRFS info (device loop1): using free space tree [ 196.357763][ T8325] BTRFS info (device loop1): enabling ssd optimizations [ 196.369304][ T8325] BTRFS info (device loop1): auto enabling async discard [ 196.386051][ T8355] loop3: detected capacity change from 0 to 512 [ 196.405068][ T8355] EXT4-fs: Ignoring removed bh option [ 196.414211][ T8355] EXT4-fs (loop3): Test dummy encryption mode enabled [ 196.441880][ T8355] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 196.505829][ T8355] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 196.525877][ T8355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.614763][ T8355] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 196.671890][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.750509][ T5784] usb 3-1: USB disconnect, device number 6 [ 196.825362][ T5775] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 197.258646][ T8369] GUP no longer grows the stack in syz.1.834 (8369): 200000004000-200000b36000 (200000000000) [ 197.293252][ T8369] CPU: 0 PID: 8369 Comm: syz.1.834 Not tainted syzkaller #0 [ 197.300725][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.310848][ T8369] Call Trace: [ 197.314261][ T8369] [ 197.317230][ T8369] dump_stack_lvl+0x18c/0x250 [ 197.321985][ T8369] ? show_regs_print_info+0x20/0x20 [ 197.327249][ T8369] ? load_image+0x420/0x420 [ 197.331980][ T8369] ? find_vma+0x134/0x1b0 [ 197.336389][ T8369] __get_user_pages+0xf0e/0x1380 [ 197.341405][ T8369] ? populate_vma_page_range+0x380/0x380 [ 197.347183][ T8369] ? __gup_longterm_locked+0x20f6/0x2b80 [ 197.352892][ T8369] ? down_read_killable+0x1d0/0x340 [ 197.358236][ T8369] __gup_longterm_locked+0x2251/0x2b80 [ 197.363812][ T8369] ? pin_user_pages_remote+0x220/0x220 [ 197.369329][ T8369] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 197.375365][ T8369] ? lock_chain_count+0x20/0x20 [ 197.380278][ T8369] ? internal_get_user_pages_fast+0x1fc6/0x2760 [ 197.386656][ T8369] internal_get_user_pages_fast+0x21bf/0x2760 [ 197.392813][ T8369] ? asan.module_dtor+0x20/0x20 [ 197.397908][ T8369] ? get_user_pages_fast_only+0xa0/0xa0 [ 197.403682][ T8369] ? plist_add+0x3d8/0x490 [ 197.408248][ T8369] get_futex_key+0x1aa/0x1010 [ 197.413000][ T8369] ? futex_unqueue+0xcb/0xf0 [ 197.417728][ T8369] ? futex_wait+0x4cc/0x5e0 [ 197.422284][ T8369] ? futex_setup_timer+0xc0/0xc0 [ 197.427273][ T8369] ? userfaultfd_unmap_complete+0x29f/0x320 [ 197.433321][ T8369] futex_wake+0x127/0x4f0 [ 197.437721][ T8369] ? mremap_to+0x535/0x5e0 [ 197.442213][ T8369] ? futex_wake_mark+0x150/0x150 [ 197.447294][ T8369] ? __se_sys_mremap+0x898/0x11f0 [ 197.452379][ T8369] do_futex+0x35d/0x3e0 [ 197.456580][ T8369] ? __ia32_sys_get_robust_list+0x110/0x110 [ 197.462990][ T8369] __se_sys_futex+0x3a9/0x440 [ 197.467744][ T8369] ? __x64_sys_futex+0xf0/0xf0 [ 197.472851][ T8369] ? __x64_sys_futex+0x21/0xf0 [ 197.477670][ T8369] do_syscall_64+0x55/0xa0 [ 197.482145][ T8369] ? clear_bhb_loop+0x40/0x90 [ 197.486963][ T8369] ? clear_bhb_loop+0x40/0x90 [ 197.491755][ T8369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.497780][ T8369] RIP: 0033:0x7f269d59cdd9 [ 197.502247][ T8369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.522262][ T8369] RSP: 002b:00007f269e3cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 197.530844][ T8369] RAX: ffffffffffffffda RBX: 00007f269d815fa0 RCX: 00007f269d59cdd9 [ 197.539038][ T8369] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000200000000240 [ 197.547140][ T8369] RBP: 00007f269d632d69 R08: 0000000000000000 R09: 0000000000000002 [ 197.555153][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.563257][ T8369] R13: 00007f269d816038 R14: 00007f269d815fa0 R15: 00007ffe1c2ee848 [ 197.571810][ T8369] [ 197.811040][ T8376] loop1: detected capacity change from 0 to 256 [ 197.845807][ T8376] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.898553][ T8376] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.330073][ T8389] loop3: detected capacity change from 0 to 32768 [ 199.340595][ T8399] loop2: detected capacity change from 0 to 764 [ 199.360396][ T8389] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.843 (8389) [ 199.418323][ T8389] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 199.459927][ T8389] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 199.478491][ T8399] Symlink component flag not implemented [ 199.496464][ T8389] BTRFS info (device loop3): using free space tree [ 199.505622][ T8399] Symlink component flag not implemented (116) [ 199.675928][ T8389] BTRFS info (device loop3): enabling ssd optimizations [ 199.701308][ T8389] BTRFS info (device loop3): auto enabling async discard [ 199.945374][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.851'. [ 200.050067][ T5781] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 200.266005][ T5934] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 11 /dev/loop3 scanned by udevd (5934) [ 201.035090][ T5819] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 201.242803][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 201.253354][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 201.272925][ T5819] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 201.283177][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.308345][ T5819] usb 3-1: Product: syz [ 201.319292][ T5819] usb 3-1: Manufacturer: syz [ 201.334170][ T5819] usb 3-1: SerialNumber: syz [ 201.360923][ T5819] usb 3-1: config 0 descriptor?? [ 201.368866][ T5819] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 201.408375][ T5819] usb 3-1: Detected FT232R [ 201.519692][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 201.587690][ T5819] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 201.819573][ T5819] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 201.829440][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 201.829524][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 201.835681][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 202.059430][ T5819] usb 3-1: USB disconnect, device number 7 [ 202.111495][ T5819] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 202.134036][ T5819] ftdi_sio 3-1:0.0: device disconnected [ 202.279384][ T5784] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 202.459466][ T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 202.481059][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.499207][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.509691][ T5784] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 202.518787][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.530744][ T5784] usb 5-1: config 0 descriptor?? [ 202.669604][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 202.721315][ T27] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 202.749554][ T27] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 202.763318][ T27] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 202.774853][ T27] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 202.788780][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.801589][ T27] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 202.811295][ T27] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 202.820831][ T27] usb 2-1: Product: syz [ 202.825187][ T27] usb 2-1: Manufacturer: syz [ 202.830562][ T27] usb 2-1: SerialNumber: syz [ 202.845098][ T27] usb 2-1: config 0 descriptor?? [ 202.855335][ T27] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 202.870086][ T27] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 202.965392][ T5784] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 202.978701][ T5784] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 202.986707][ T5784] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 202.994671][ T5784] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 203.002675][ T5784] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 203.011337][ T5784] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 203.018872][ T5784] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 203.039519][ T5784] playstation 0003:054C:0BA0.0009: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 203.173728][ T5784] playstation 0003:054C:0BA0.0009: Invalid reportID received, expected 18 got 179 [ 203.203765][ T8474] ldusb 2-1:0.0: Write buffer overflow, 64885 bytes dropped [ 203.219595][ T5784] playstation 0003:054C:0BA0.0009: Failed to retrieve DualShock4 pairing info: -22 [ 203.239651][ T5784] playstation 0003:054C:0BA0.0009: Failed to get MAC address from DualShock4 [ 203.248894][ T5784] playstation 0003:054C:0BA0.0009: Failed to create dualshock4. [ 203.263117][ T5783] usb 2-1: USB disconnect, device number 10 [ 203.269230][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 203.282421][ T5783] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 203.296923][ T5784] playstation: probe of 0003:054C:0BA0.0009 failed with error -22 [ 203.406505][ T5784] usb 5-1: USB disconnect, device number 3 [ 203.810772][ T8495] loop3: detected capacity change from 0 to 32768 [ 203.822902][ T8495] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.886 (8495) [ 203.846964][ T8495] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 203.860354][ T8495] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 203.870679][ T8495] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 203.880755][ T8495] BTRFS info (device loop3): use zstd compression, level 3 [ 203.888131][ T8495] BTRFS info (device loop3): using free space tree [ 203.933180][ T8495] BTRFS info (device loop3): enabling ssd optimizations [ 203.940537][ T8495] BTRFS info (device loop3): auto enabling async discard [ 204.005694][ T28] audit: type=1800 audit(1778297478.080:14): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.886" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 204.149648][ T8514] loop4: detected capacity change from 0 to 256 [ 204.157226][ T8514] exfat: Deprecated parameter 'namecase' [ 204.219639][ T8514] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 204.313430][ T5781] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 204.702122][ T8527] loop1: detected capacity change from 0 to 256 [ 204.747905][ T8527] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 205.127277][ T8536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.583672][ T8550] loop1: detected capacity change from 0 to 1024 [ 206.831541][ T8562] loop4: detected capacity change from 0 to 128 [ 206.850460][ T8552] loop3: detected capacity change from 0 to 131072 [ 206.935223][ T8552] F2FS-fs (loop3): Found nat_bits in checkpoint [ 206.994612][ T28] audit: type=1800 audit(1778297481.070:15): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.909" name="file1" dev="loop4" ino=1048634 res=0 errno=0 [ 207.015688][ T8552] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 207.164697][ T8552] F2FS-fs (loop3): lookup inode (7) has corrupted xattr [ 207.860557][ T8579] loop1: detected capacity change from 0 to 128 [ 208.346405][ T8571] loop2: detected capacity change from 0 to 32768 [ 208.367304][ T8571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.910 (8571) [ 208.444149][ T8571] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.488766][ T8571] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 208.509281][ T8571] BTRFS info (device loop2): setting nodatasum [ 208.515532][ T8571] BTRFS info (device loop2): force zlib compression, level 3 [ 208.544651][ T8571] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 208.579468][ T8571] BTRFS info (device loop2): use lzo compression, level 0 [ 208.586688][ T8571] BTRFS info (device loop2): turning on flush-on-commit [ 208.619248][ T8571] BTRFS info (device loop2): enabling auto defrag [ 208.625989][ T8571] BTRFS info (device loop2): max_inline at 4096 [ 208.667602][ T8571] BTRFS info (device loop2): using free space tree [ 208.766753][ T8598] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 208.792866][ T8571] BTRFS info (device loop2): enabling ssd optimizations [ 208.799324][ T8598] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 209.068608][ T8583] loop4: detected capacity change from 0 to 32768 [ 209.134441][ T8583] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.917 (8583) [ 209.232860][ T8583] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 209.282956][ T8583] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 209.309840][ T8583] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 209.321903][ T8583] BTRFS info (device loop4): use zstd compression, level 3 [ 209.348651][ T8583] BTRFS info (device loop4): using free space tree [ 209.360763][ T5776] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.631756][ T8629] loop1: detected capacity change from 0 to 128 [ 209.698115][ T8629] EXT4-fs: inline encryption not supported [ 209.715769][ T8583] BTRFS info (device loop4): enabling ssd optimizations [ 209.759317][ T8583] BTRFS info (device loop4): auto enabling async discard [ 209.820145][ T8629] EXT4-fs (loop1): Test dummy encryption mode enabled [ 209.881091][ T8629] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.933083][ T8629] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.975071][ T28] audit: type=1800 audit(1778297484.030:16): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.917" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 210.140281][ T6996] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 210.763544][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.409818][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 211.599305][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 211.614713][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.647537][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.689805][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.719731][ T8669] batman_adv: batadv0: Adding interface: gretap1 [ 211.726331][ T8669] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.744139][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.790218][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.812970][ T8669] batman_adv: batadv0: Interface activated: gretap1 [ 211.816383][ T27] usb 2-1: config 0 descriptor?? [ 211.826324][ T8648] loop3: detected capacity change from 0 to 32768 [ 211.914642][ T28] audit: type=1800 audit(1778297485.990:17): pid=8648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.930" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 212.055900][ T111] ERROR: (device loop3): diFree: numfree > numinos [ 212.055900][ T111] [ 212.075565][ T111] ERROR: (device loop3): remounting filesystem as read-only [ 212.244662][ T27] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 212.264885][ T27] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 212.275324][ T27] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 212.293132][ T27] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 212.331834][ T27] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 212.354243][ T27] microsoft 0003:045E:07DA.000A: no inputs found [ 212.368296][ T27] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 212.397880][ T8667] loop2: detected capacity change from 0 to 32768 [ 212.465624][ T5783] usb 2-1: USB disconnect, device number 11 [ 212.474027][ T8667] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.704220][ T8667] XFS (loop2): Ending clean mount [ 212.858304][ T5776] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.114913][ T8691] loop1: detected capacity change from 0 to 32768 [ 214.147336][ T8691] XFS: noikeep mount option is deprecated. [ 214.258541][ T8691] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 214.305984][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 214.316277][ T8727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.956'. [ 214.383113][ T8691] XFS (loop1): Ending clean mount [ 214.408592][ T8732] program syz.4.958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.451260][ T8691] XFS (loop1): Quotacheck needed: Please wait. [ 214.576074][ T8691] XFS (loop1): Quotacheck: Done. [ 214.820742][ T5775] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 215.127352][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 215.167978][ T8743] loop3: detected capacity change from 0 to 8192 [ 215.257357][ T8743] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 215.283013][ T8743] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 215.320277][ T8743] REISERFS (device loop3): using ordered data mode [ 215.327293][ T8743] reiserfs: using flush barriers [ 215.403391][ T8743] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.499991][ T8743] REISERFS (device loop3): checking transaction log (loop3) [ 215.817399][ T8743] REISERFS (device loop3): Using r5 hash to sort names [ 215.829996][ T8743] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 215.870717][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 215.909385][ T8761] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.256137][ T8765] loop3: detected capacity change from 0 to 128 [ 216.263226][ T8749] loop2: detected capacity change from 0 to 40427 [ 216.290769][ T8765] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.311709][ T8765] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.342107][ T8749] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 216.410040][ T8749] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 216.437116][ T5781] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.456589][ T8769] tipc: Started in network mode [ 216.462441][ T8769] tipc: Node identity ac14140f, cluster identity 4711 [ 216.468589][ T8749] F2FS-fs (loop2): invalid crc value [ 216.470664][ T8769] tipc: New replicast peer: 255.255.255.255 [ 216.472055][ T8769] tipc: Enabled bearer , priority 10 [ 216.495231][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 216.509894][ T8769] tipc: Disabling bearer [ 216.533488][ T8749] F2FS-fs (loop2): Found nat_bits in checkpoint [ 216.737758][ T8749] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 216.776698][ T8749] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 216.823730][ T8775] loop4: detected capacity change from 0 to 4096 [ 216.850962][ T8775] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 217.096708][ T5776] syz-executor: attempt to access beyond end of device [ 217.096708][ T5776] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 217.132560][ T5776] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 217.472491][ T8790] loop3: detected capacity change from 0 to 128 [ 217.679305][ T5938] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 217.881645][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 217.890465][ T5938] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 217.898728][ T5938] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 217.929191][ T5938] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 217.949942][ T5938] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 217.965425][ T5938] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.976285][ T5938] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 218.019243][ T5938] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 218.027756][ T5938] usb 5-1: Product: syz [ 218.053766][ T8798] loop3: detected capacity change from 0 to 64 [ 218.063127][ T5938] usb 5-1: Manufacturer: syz [ 218.067783][ T5938] usb 5-1: SerialNumber: syz [ 218.137444][ T5938] usb 5-1: config 0 descriptor?? [ 218.147020][ T8798] MINIX-fs: mounting file system with errors, running fsck is recommended [ 218.183795][ T5938] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 218.227713][ T5938] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 218.520096][ T8788] ldusb 5-1:0.0: Write buffer overflow, 64885 bytes dropped [ 218.541114][ T5783] usb 5-1: USB disconnect, device number 4 [ 218.541181][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 218.559220][ T5783] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 219.162212][ T8818] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.172250][ T8818] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.181400][ T8818] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.191093][ T8818] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.602069][ T8829] loop3: detected capacity change from 0 to 24 [ 219.907743][ T8836] loop1: detected capacity change from 0 to 8 [ 220.551962][ T8850] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 221.009293][ T5783] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 221.204093][ T5783] usb 3-1: Using ep0 maxpacket: 16 [ 221.235782][ T5783] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.251822][ T8852] loop3: detected capacity change from 0 to 32768 [ 221.258428][ T5783] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.279327][ T5783] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 221.288646][ T8852] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1009 (8852) [ 221.301251][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.318923][ T5783] usb 3-1: config 0 descriptor?? [ 221.341574][ T8852] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 221.363424][ T8852] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 221.373620][ T8852] BTRFS info (device loop3): setting nodatacow, compression disabled [ 221.382632][ T8852] BTRFS info (device loop3): force clearing of disk cache [ 221.390473][ T8852] BTRFS info (device loop3): turning off barriers [ 221.397261][ T8852] BTRFS info (device loop3): use no compression [ 221.405011][ T8852] BTRFS info (device loop3): disabling free space tree [ 221.412622][ T8852] BTRFS info (device loop3): enabling ssd optimizations [ 221.420478][ T8852] BTRFS info (device loop3): using spread ssd allocation scheme [ 221.428255][ T8852] BTRFS info (device loop3): not using ssd optimizations [ 221.438126][ T8852] BTRFS info (device loop3): not using spread ssd allocation scheme [ 221.546420][ T8852] BTRFS info (device loop3): rebuilding free space tree [ 221.571559][ T8860] loop4: detected capacity change from 0 to 32768 [ 221.589995][ T8852] BTRFS info (device loop3): disabling free space tree [ 221.597434][ T8852] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 221.607837][ T8852] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 221.621658][ T8860] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1013 (8860) [ 221.658248][ T8860] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 221.684452][ T8852] BTRFS info (device loop3): checking UUID tree [ 221.689275][ T8860] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 221.737997][ T8860] BTRFS info (device loop4): using free space tree [ 221.800607][ T5783] mcp2221 0003:04D8:00DD.000B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 221.898725][ T8860] BTRFS info (device loop4): enabling ssd optimizations [ 221.933888][ T8860] BTRFS info (device loop4): auto enabling async discard [ 222.057264][ T5781] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 222.251183][ T5938] usb 3-1: USB disconnect, device number 8 [ 222.653484][ T6996] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 222.752088][ T8910] loop1: detected capacity change from 0 to 64 [ 222.845875][ T8910] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 224.214735][ T8923] loop1: detected capacity change from 0 to 32768 [ 224.278231][ T8923] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.394739][ T8931] loop4: detected capacity change from 0 to 40427 [ 224.417990][ T8931] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 224.425539][ T8931] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 224.469759][ T8931] F2FS-fs (loop4): invalid crc value [ 224.482426][ T8923] XFS (loop1): Ending clean mount [ 224.674747][ T8931] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 224.696529][ T8931] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 224.959414][ T6996] syz-executor: attempt to access beyond end of device [ 224.959414][ T6996] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 224.980184][ T5775] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.014068][ T6996] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 225.032925][ T6996] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 225.053214][ T6996] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 225.089693][ T6996] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 225.473945][ T8958] loop2: detected capacity change from 0 to 2048 [ 225.548878][ T8958] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 225.578533][ T8958] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 225.601678][ T8958] UDF-fs: Scanning with blocksize 512 failed [ 225.625850][ T8958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.763076][ T8964] loop1: detected capacity change from 0 to 1024 [ 225.819277][ T786] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 226.029510][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 226.044718][ T786] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 226.077096][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.107773][ T786] usb 4-1: config 0 descriptor?? [ 226.231127][ T8973] loop2: detected capacity change from 0 to 64 [ 226.389421][ T786] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 226.417574][ T786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.460565][ T786] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 226.467957][ T786] usb 4-1: media controller created [ 226.507974][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.533536][ T8979] loop2: detected capacity change from 0 to 256 [ 226.549209][ T5938] kernel write not supported for file /vcs (pid: 5938 comm: kworker/0:5) [ 226.582104][ T8962] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 226.620543][ T786] az6027: usb out operation failed. (-71) [ 226.646601][ T786] az6027: usb out operation failed. (-71) [ 226.661214][ T786] stb0899_attach: Driver disabled by Kconfig [ 226.679164][ T786] az6027: no front-end attached [ 226.679164][ T786] [ 226.707413][ T786] az6027: usb out operation failed. (-71) [ 226.724830][ T786] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 226.767997][ T786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 226.812285][ T786] dvb-usb: schedule remote query interval to 400 msecs. [ 226.839664][ T786] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 226.865316][ T8982] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 226.876759][ T786] usb 4-1: USB disconnect, device number 14 [ 227.045371][ T786] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 227.182943][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.235118][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.314682][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 227.526957][ T8995] loop4: detected capacity change from 0 to 2048 [ 227.570260][ T8995] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.748867][ T28] audit: type=1800 audit(1778297501.820:18): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1052" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 227.820935][ T8999] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1054'. [ 228.066210][ T9005] loop3: detected capacity change from 0 to 8 [ 228.386862][ T8991] loop1: detected capacity change from 0 to 40427 [ 228.424438][ T8991] F2FS-fs (loop1): invalid crc value [ 228.470663][ T9013] loop3: detected capacity change from 0 to 128 [ 228.481825][ T8991] F2FS-fs (loop1): Found nat_bits in checkpoint [ 228.654548][ T8991] F2FS-fs (loop1): Start checkpoint disabled! [ 228.688937][ T8991] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 228.911975][ T9021] loop3: detected capacity change from 0 to 512 [ 228.979888][ T49] kworker/u4:3: attempt to access beyond end of device [ 228.979888][ T49] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 229.004630][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 229.015658][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 229.046095][ T9021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.068674][ T9029] loop4: detected capacity change from 0 to 256 [ 229.077796][ T9021] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.199056][ T9029] FAT-fs (loop4): Directory bread(block 64) failed [ 229.221538][ T9029] FAT-fs (loop4): Directory bread(block 65) failed [ 229.275607][ T9029] FAT-fs (loop4): Directory bread(block 66) failed [ 229.276331][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.291676][ T9029] FAT-fs (loop4): Directory bread(block 67) failed [ 229.291834][ T9029] FAT-fs (loop4): Directory bread(block 68) failed [ 229.313760][ T9029] FAT-fs (loop4): Directory bread(block 69) failed [ 229.322008][ T9029] FAT-fs (loop4): Directory bread(block 70) failed [ 229.386816][ T9029] FAT-fs (loop4): Directory bread(block 71) failed [ 229.399497][ T9029] FAT-fs (loop4): Directory bread(block 72) failed [ 229.406376][ T9029] FAT-fs (loop4): Directory bread(block 73) failed [ 229.549287][ T28] audit: type=1800 audit(1778297503.620:19): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1067" name="file1" dev="loop4" ino=1048635 res=0 errno=0 [ 229.553029][ T9029] syz.4.1067: attempt to access beyond end of device [ 229.553029][ T9029] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 229.648319][ T9036] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.684364][ T9037] syz.4.1067: attempt to access beyond end of device [ 229.684364][ T9037] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 229.915508][ T9036] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 229.942515][ T9036] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 229.999980][ T9036] Remounting filesystem read-only [ 230.005246][ T12] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 230.026821][ T12] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 230.047450][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.089207][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.098283][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.149470][ T12] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 230.169250][ T12] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 230.183113][ T12] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 230.219481][ T12] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 230.226890][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.263738][ T12] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 230.278844][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.299305][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.308442][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 230.329662][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.338941][ T12] NILFS (loop2): discard dirty page: offset=98304, ino=3 [ 230.359202][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.368144][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.399226][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 230.406626][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.429153][ T12] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 230.439529][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.449379][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.458475][ T12] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 230.489167][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.498196][ T12] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 230.519199][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 230.550471][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.574794][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.599447][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.608555][ T12] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 230.639199][ T12] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 230.647014][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.669518][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.678647][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.709220][ T12] NILFS (loop2): discard dirty page: offset=0, ino=19 [ 230.714324][ T9045] set_capacity_and_notify: 1 callbacks suppressed [ 230.714338][ T9045] loop3: detected capacity change from 0 to 32768 [ 230.716049][ T12] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 230.745691][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.758268][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.767721][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.784045][ T9045] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 230.809187][ T12] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 230.810674][ T9043] loop1: detected capacity change from 0 to 32768 [ 230.816028][ T12] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 230.816053][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.816070][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.816088][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.816144][ T12] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 230.866831][ T9043] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1065 (9043) [ 230.877786][ T12] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 230.886694][ T5783] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 230.896495][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.927280][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.950022][ T12] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.959429][ T9043] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 230.970878][ T9045] XFS (loop3): Ending clean mount [ 230.981692][ T5776] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 230.994635][ T9045] XFS (loop3): Quotacheck needed: Please wait. [ 231.011507][ T9043] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 231.014657][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 231.021589][ T9043] BTRFS info (device loop1): setting nodatacow, compression disabled [ 231.040794][ T5776] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 231.065897][ T9043] BTRFS info (device loop1): force clearing of disk cache [ 231.072968][ T5776] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 231.100012][ T9043] BTRFS info (device loop1): turning off barriers [ 231.101213][ T5783] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 231.106729][ T9043] BTRFS info (device loop1): use no compression [ 231.115220][ T5776] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 231.130651][ T5776] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 231.139870][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.142980][ T9045] XFS (loop3): Quotacheck: Done. [ 231.150373][ T5783] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 231.165870][ T9043] BTRFS info (device loop1): disabling free space tree [ 231.174160][ T9043] BTRFS info (device loop1): enabling ssd optimizations [ 231.181412][ T9043] BTRFS info (device loop1): using spread ssd allocation scheme [ 231.189550][ T9043] BTRFS info (device loop1): not using ssd optimizations [ 231.196733][ T9043] BTRFS info (device loop1): not using spread ssd allocation scheme [ 231.250735][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.271562][ T5783] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 231.291443][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.309202][ T5783] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 231.340398][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.384440][ T5783] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 231.410605][ T9043] BTRFS info (device loop1): rebuilding free space tree [ 231.426774][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.457728][ T9043] BTRFS info (device loop1): disabling free space tree [ 231.466149][ T9043] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 231.476121][ T5783] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 231.485810][ T9043] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 231.514880][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.536639][ T9043] BTRFS info (device loop1): checking UUID tree [ 231.547448][ T5783] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 231.562613][ T5781] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 231.600333][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.613022][ T5783] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 231.648640][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.688070][ T5783] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 231.748250][ T5783] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 231.771016][ T5783] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 231.814752][ T5783] usb 5-1: Product: syz [ 231.829351][ T5783] usb 5-1: Manufacturer: syz [ 231.834385][ T5783] usb 5-1: SerialNumber: syz [ 231.843140][ T5775] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 231.862146][ T5783] usb 5-1: config 0 descriptor?? [ 232.132378][ T5934] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop1 scanned by udevd (5934) [ 232.303945][ T9089] tap0: tun_chr_ioctl cmd 1074025677 [ 232.339557][ T9089] tap0: linktype set to 6 [ 232.357925][ T5938] usb 5-1: USB disconnect, device number 5 [ 232.667269][ T9097] loop2: detected capacity change from 0 to 8 [ 232.809376][ T9101] loop1: detected capacity change from 0 to 256 [ 232.827047][ T9102] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1084'. [ 232.835456][ T9101] exfat: Deprecated parameter 'utf8' [ 232.934184][ T9101] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 233.512314][ T9118] loop2: detected capacity change from 0 to 512 [ 233.684929][ T9118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.699743][ T9118] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.733520][ T9127] loop1: detected capacity change from 0 to 256 [ 233.817018][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.843108][ T9127] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 234.839927][ T9137] loop1: detected capacity change from 0 to 40427 [ 234.889247][ T9137] F2FS-fs (loop1): Found nat_bits in checkpoint [ 235.017922][ T9151] loop2: detected capacity change from 0 to 2048 [ 235.067997][ T9152] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.093176][ T9137] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 235.171957][ T28] audit: type=1800 audit(1778297509.240:20): pid=9151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1104" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 235.236327][ T9152] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 235.269576][ T9152] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 235.303473][ T9152] Remounting filesystem read-only [ 235.360476][ T5775] syz-executor: attempt to access beyond end of device [ 235.360476][ T5775] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.399354][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 235.460380][ T5776] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 235.489279][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=15 [ 235.496186][ T5776] NILFS (loop2): discard dirty block: blocknr=22, size=1024 [ 235.551906][ T5776] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 235.579288][ T5776] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 235.586671][ T5776] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 235.616251][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 235.631698][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.640967][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.650084][ T5776] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 235.657586][ T5776] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 235.668141][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 235.675478][ T5776] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 235.683095][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.692985][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.702195][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.711838][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 235.718951][ T5776] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 235.726481][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.736527][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.746272][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.769882][ T5776] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 235.776660][ T5776] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 235.794384][ T5776] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 235.809720][ T5776] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 235.817071][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.849199][ T5776] NILFS (loop2): discard dirty page: offset=229376, ino=3 [ 235.856909][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.866195][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.875319][ T5776] NILFS (loop2): discard dirty block: blocknr=50, size=1024 [ 235.883158][ T5783] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 235.891713][ T5776] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.901697][ T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 236.025005][ T9164] netlink: 'syz.2.1108': attribute type 10 has an invalid length. [ 236.044415][ T9164] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1108'. [ 236.089262][ T5783] usb 4-1: Using ep0 maxpacket: 8 [ 236.094544][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 236.102419][ T5783] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 236.119440][ T5783] usb 4-1: config 179 has no interface number 0 [ 236.139274][ T27] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 236.155651][ T5783] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 236.167164][ T27] usb 5-1: config 1 has no interface number 0 [ 236.181218][ T9168] netlink: 'syz.1.1111': attribute type 29 has an invalid length. [ 236.189262][ T27] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 236.199690][ T5783] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 236.205538][ T9168] netlink: 'syz.1.1111': attribute type 29 has an invalid length. [ 236.211151][ T27] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 236.211186][ T27] usb 5-1: config 1 interface 105 has no altsetting 0 [ 236.211339][ T5783] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 236.256420][ T5783] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 236.259348][ T9171] netlink: 'syz.1.1111': attribute type 29 has an invalid length. [ 236.268762][ T5783] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 236.295459][ T27] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 236.304891][ T27] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 236.335796][ T27] usb 5-1: Product: syz [ 236.346260][ T27] usb 5-1: Manufacturer: syz [ 236.349475][ T9168] netlink: 'syz.1.1111': attribute type 29 has an invalid length. [ 236.351065][ T27] usb 5-1: SerialNumber: syz [ 236.364257][ T5783] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 236.376947][ T9160] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 236.384659][ T9160] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 236.408587][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.430078][ T9162] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 236.689852][ T9179] overlayfs: regular lower layers cannot follow data lower layers [ 236.860498][ T9160] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 236.867953][ T9160] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 236.960952][ T5784] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9 [ 237.106025][ T27] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 237.134036][ T27] aqc111: probe of 5-1:1.105 failed with error -71 [ 237.214489][ T27] usb 5-1: USB disconnect, device number 6 [ 237.287265][ T786] usb 4-1: USB disconnect, device number 15 [ 237.287345][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 237.302373][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 237.320786][ T786] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 237.330082][ T9189] loop2: detected capacity change from 0 to 512 [ 237.367305][ T9187] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1120'. [ 237.385953][ T9189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.387026][ T9187] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 237.399738][ T9189] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.480683][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.588707][ T9193] netlink: 552 bytes leftover after parsing attributes in process `syz.2.1122'. [ 237.906318][ T9203] loop4: detected capacity change from 0 to 512 [ 237.994146][ T5934] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.047279][ T9203] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1126'. [ 238.087244][ T9203] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1126'. [ 238.125191][ T9203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1126'. [ 238.299138][ T9214] loop2: detected capacity change from 0 to 2048 [ 238.321746][ T9214] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.341382][ T27] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 238.361591][ T9214] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 238.550587][ T27] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 238.569693][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.596979][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 238.616773][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.635852][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 238.648250][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.670027][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 238.699908][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.710985][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 238.725710][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.728030][ T9224] loop4: detected capacity change from 0 to 7 [ 238.736226][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 238.753058][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.762666][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 238.766421][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.786301][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 238.789141][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.804770][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 238.814060][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.819703][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.831483][ T9227] program syz.2.1138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.833783][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 238.843663][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 238.864000][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.864197][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.873251][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 238.878013][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.890306][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 238.891450][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 238.904115][ T27] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 238.917836][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.917869][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 238.918056][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.928232][ T27] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 238.936317][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 238.936374][ T9224] ldm_validate_partition_table(): Disk read failed. [ 238.944665][ T27] usb 4-1: Product: syz [ 238.944687][ T27] usb 4-1: Manufacturer: syz [ 238.944703][ T27] usb 4-1: SerialNumber: syz [ 238.956161][ T27] usb 4-1: config 0 descriptor?? [ 239.008021][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.017369][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 239.025996][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.035217][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 239.069139][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 239.077470][ T9224] Dev loop4: unable to read RDB block 0 [ 239.089108][ T9224] loop4: unable to read partition table [ 239.095047][ T9224] loop4: partition table beyond EOD, truncated [ 239.124593][ T9224] loop_reread_partitions: partition scan of loop4 (Cj̖P= ) failed (rc=-5) [ 239.334141][ T9233] loop2: detected capacity change from 0 to 512 [ 239.428816][ T9236] loop4: detected capacity change from 0 to 256 [ 239.438195][ T9233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.448659][ T9] usb 4-1: USB disconnect, device number 16 [ 239.459824][ T9233] ext4 filesystem being mounted at /312/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 239.515295][ T9233] EXT4-fs error (device loop2): ext4_group_add:1745: inode #7: comm syz.2.1141: iget: checksum invalid [ 239.533020][ T9236] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d) [ 239.545478][ T9233] EXT4-fs warning (device loop2): ext4_group_add:1747: Error opening resize inode [ 239.665708][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.157967][ T9229] loop1: detected capacity change from 0 to 32768 [ 240.257548][ T9229] JBD2: Ignoring recovery information on journal [ 240.405361][ T9229] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 240.618995][ T9229] (syz.1.1139,9229,1):ocfs2_rename:1284 ERROR: status = -2 [ 240.659426][ T9229] (syz.1.1139,9229,1):ocfs2_rename:1690 ERROR: status = -2 [ 240.802655][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 241.194836][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.227115][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.260049][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.278028][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.293209][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.316858][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.327563][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.392793][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.415665][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.427708][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.455416][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.463334][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.471194][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.484528][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.492802][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.506430][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.506559][ T9276] loop1: detected capacity change from 0 to 8192 [ 241.514711][ T9] hid-generic 0000:0000:000E.000C: unknown main item tag 0x0 [ 241.556058][ T9276] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 241.579390][ T9276] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 241.600769][ T9278] loop3: detected capacity change from 0 to 4096 [ 241.607686][ T9276] REISERFS (device loop1): using ordered data mode [ 241.610976][ T9] hid-generic 0000:0000:000E.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 241.615624][ T9276] reiserfs: using flush barriers [ 241.644525][ T9276] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 241.671240][ T9276] REISERFS (device loop1): checking transaction log (loop1) [ 241.883052][ T9278] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 241.948987][ T9282] fido_id[9282]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 242.024955][ T9276] REISERFS (device loop1): Using tea hash to sort names [ 242.052258][ T9276] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 242.077884][ T9288] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 242.094746][ T9276] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 242.833583][ T9301] loop1: detected capacity change from 0 to 128 [ 242.860485][ T9301] EXT4-fs: Ignoring removed i_version option [ 242.929376][ T9301] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.004786][ T9301] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.125148][ T9305] loop2: detected capacity change from 0 to 2048 [ 243.180374][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.211885][ T9305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.415937][ T9311] loop1: detected capacity change from 0 to 1024 [ 243.478980][ T9311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 243.499153][ T28] audit: type=1800 audit(1778297517.570:21): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1170" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 243.523796][ T9299] loop3: detected capacity change from 0 to 32768 [ 243.547978][ T9311] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.634999][ T9299] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 243.634999][ T9299] [ 243.675213][ T9299] ERROR: (device loop3): remounting filesystem as read-only [ 243.685266][ T9311] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1172: bg 0: block 112: padding at end of block bitmap is not set [ 243.704569][ T9299] xtLookup: xtSearch returned -5 [ 243.721395][ T9299] free_index: error reading directory table [ 243.745416][ T9311] EXT4-fs (loop1): Remounting filesystem read-only [ 243.757913][ T9299] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 243.757913][ T9299] [ 243.775734][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.801006][ T9299] xtLookup: xtSearch returned -5 [ 243.806602][ T9299] free_index: error reading directory table [ 243.831411][ T9299] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 243.831411][ T9299] [ 243.880341][ T9299] xtLookup: xtSearch returned -5 [ 243.885443][ T9299] free_index: error reading directory table [ 243.905696][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 243.939183][ T9299] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 243.939183][ T9299] [ 243.977127][ T9299] xtLookup: xtSearch returned -5 [ 243.995061][ T9299] free_index: error reading directory table [ 244.020950][ T9299] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 244.020950][ T9299] [ 244.052272][ T9299] xtLookup: xtSearch returned -5 [ 244.059691][ T9299] free_index: error reading directory table [ 244.089227][ T9299] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 244.089227][ T9299] [ 244.111827][ T9299] xtLookup: xtSearch returned -5 [ 244.138176][ T9299] add_index: get/read_metapage failed! [ 244.152967][ T9299] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 244.152967][ T9299] [ 244.209311][ T9299] xtLookup: xtSearch returned -5 [ 244.214470][ T9299] free_index: error reading directory table [ 244.240416][ T9299] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 244.240416][ T9299] [ 244.289835][ T9299] xtLookup: xtSearch returned -5 [ 244.307879][ T9299] free_index: error reading directory table [ 244.337285][ T9299] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 244.337285][ T9299] [ 244.360492][ T9299] xtLookup: xtSearch returned -5 [ 244.375701][ T9299] free_index: error reading directory table [ 244.386440][ T9299] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 244.386440][ T9299] [ 244.424108][ T9299] xtLookup: xtSearch returned -5 [ 244.434237][ T9299] free_index: error reading directory table [ 244.444385][ T9299] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 244.444385][ T9299] [ 244.467393][ T9299] xtLookup: xtSearch returned -5 [ 244.497321][ T9299] free_index: error reading directory table [ 244.579937][ T9335] input: syz0 as /devices/virtual/input/input10 [ 244.582950][ T9299] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 244.582950][ T9299] [ 244.637160][ T9299] xtLookup: xtSearch returned -5 [ 244.658074][ T9299] add_index: get/read_metapage failed! [ 244.951622][ T9348] netlink: 'syz.4.1188': attribute type 21 has an invalid length. [ 244.969725][ T9348] netlink: 'syz.4.1188': attribute type 1 has an invalid length. [ 244.979258][ T9348] netlink: 16090 bytes leftover after parsing attributes in process `syz.4.1188'. [ 245.703766][ T9373] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 245.718968][ T9373] pim6reg: entered allmulticast mode [ 245.905790][ T9377] loop3: detected capacity change from 0 to 164 [ 245.955606][ T9381] loop4: detected capacity change from 0 to 16 [ 245.997398][ T9381] erofs: (device loop4): mounted with root inode @ nid 36. [ 246.715939][ T9392] loop4: detected capacity change from 0 to 512 [ 246.756354][ T9392] EXT4-fs: Ignoring removed nobh option [ 246.831057][ T9392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.831176][ T9383] loop1: detected capacity change from 0 to 32768 [ 246.869394][ T9392] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.980188][ T9383] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1204 (9383) [ 247.026861][ T9392] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.1207: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 247.064082][ T9383] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 247.081372][ T9383] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 247.128788][ T9383] BTRFS info (device loop1): using free space tree [ 247.204182][ T9386] loop2: detected capacity change from 0 to 32768 [ 247.235570][ T6996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.306897][ T9386] JBD2: Ignoring recovery information on journal [ 247.335179][ T9386] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 247.373562][ T9386] JBD2: bad block at offset 32 [ 247.384003][ T9386] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 247.414675][ T9383] BTRFS info (device loop1): enabling ssd optimizations [ 247.461742][ T9383] BTRFS info (device loop1): auto enabling async discard [ 247.528373][ T9414] loop3: detected capacity change from 0 to 2048 [ 247.640861][ T9414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.685367][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 247.898105][ T9422] loop4: detected capacity change from 0 to 512 [ 247.954250][ T5775] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 247.997273][ T9422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.370856][ T6996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.626106][ T9432] loop2: detected capacity change from 0 to 8192 [ 248.722270][ T9432] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 248.779163][ T9445] loop3: detected capacity change from 0 to 1024 [ 248.779235][ T9432] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 248.857594][ T9432] REISERFS (device loop2): using ordered data mode [ 248.877830][ T9432] reiserfs: using flush barriers [ 248.904273][ T9432] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 248.931032][ T9445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 248.949872][ T5819] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 248.999403][ T9445] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.010970][ T9432] REISERFS (device loop2): checking transaction log (loop2) [ 249.123139][ T9445] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.1219: lblock 3 mapped to illegal pblock 3 (length 3) [ 249.167406][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.189827][ T9445] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 249.195391][ T5819] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 249.257335][ T9445] EXT4-fs (loop3): This should not happen!! Data will be lost [ 249.257335][ T9445] [ 249.261745][ T5819] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 249.295226][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.299400][ T9451] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm syz.3.1219: lblock 8 mapped to illegal pblock 8 (length 8) [ 249.316097][ T5819] usb 2-1: Product: syz [ 249.331742][ T5819] usb 2-1: Manufacturer: syz [ 249.348847][ T5819] usb 2-1: SerialNumber: syz [ 249.355861][ T9451] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 249.385586][ T9432] REISERFS (device loop2): Using tea hash to sort names [ 249.387437][ T9451] EXT4-fs (loop3): This should not happen!! Data will be lost [ 249.387437][ T9451] [ 249.412048][ T9432] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 249.442293][ T9432] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 249.488018][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 249.612549][ T5819] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 249.760306][ T9458] loop3: detected capacity change from 0 to 256 [ 249.794080][ T9459] [ 249.796502][ T9459] ====================================================== [ 249.803550][ T9459] WARNING: possible circular locking dependency detected [ 249.810600][ T9459] syzkaller #0 Not tainted [ 249.815029][ T9459] ------------------------------------------------------ [ 249.822179][ T9459] syz.2.1215/9459 is trying to acquire lock: [ 249.828267][ T9459] ffff888078b86cf0 (&type->i_mutex_dir_key#19/3){+.+.}-{3:3}, at: open_xa_dir+0x146/0x700 [ 249.838319][ T9459] [ 249.838319][ T9459] but task is already holding lock: [ 249.845695][ T9459] ffff88807f5f7090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x60/0xd0 [ 249.855319][ T9459] [ 249.855319][ T9459] which lock already depends on the new lock. [ 249.855319][ T9459] [ 249.865822][ T9459] [ 249.865822][ T9459] the existing dependency chain (in reverse order) is: [ 249.874933][ T9459] [ 249.874933][ T9459] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 249.882355][ T9459] __mutex_lock+0x136/0xcc0 [ 249.887423][ T9459] reiserfs_write_lock+0x79/0xd0 [ 249.893180][ T9459] reiserfs_mkdir+0x30c/0x920 [ 249.898504][ T9459] open_xa_dir+0x327/0x700 [ 249.903470][ T9459] xattr_lookup+0x22/0x2a0 [ 249.908601][ T9459] reiserfs_xattr_set_handle+0x106/0xd70 [ 249.914781][ T9459] reiserfs_xattr_set+0x46b/0x590 [ 249.920536][ T9459] __vfs_setxattr+0x431/0x470 [ 249.926292][ T9459] __vfs_setxattr_noperm+0x12d/0x5e0 [ 249.932136][ T9459] vfs_setxattr+0x16b/0x2f0 [ 249.937194][ T9459] path_setxattr+0x3f3/0x5d0 [ 249.942410][ T9459] __x64_sys_lsetxattr+0xb8/0xd0 [ 249.947909][ T9459] do_syscall_64+0x55/0xa0 [ 249.952918][ T9459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.959455][ T9459] [ 249.959455][ T9459] -> #0 (&type->i_mutex_dir_key#19/3){+.+.}-{3:3}: [ 249.968185][ T9459] __lock_acquire+0x2df1/0x7d40 [ 249.973571][ T9459] lock_acquire+0x19e/0x420 [ 249.978615][ T9459] down_write_nested+0x9e/0x200 [ 249.984007][ T9459] open_xa_dir+0x146/0x700 [ 249.988959][ T9459] reiserfs_for_each_xattr+0x1bd/0x9f0 [ 249.995134][ T9459] reiserfs_delete_xattrs+0x20/0x90 [ 250.000870][ T9459] reiserfs_evict_inode+0x24f/0x4c0 [ 250.006691][ T9459] evict+0x4ca/0x8d0 [ 250.011207][ T9459] reiserfs_mkdir+0x7e9/0x920 [ 250.016507][ T9459] vfs_mkdir+0x296/0x440 [ 250.021452][ T9459] do_mkdirat+0x1dc/0x450 [ 250.026379][ T9459] __x64_sys_mkdirat+0x89/0xa0 [ 250.031674][ T9459] do_syscall_64+0x55/0xa0 [ 250.036619][ T9459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.043135][ T9459] [ 250.043135][ T9459] other info that might help us debug this: [ 250.043135][ T9459] [ 250.053388][ T9459] Possible unsafe locking scenario: [ 250.053388][ T9459] [ 250.060856][ T9459] CPU0 CPU1 [ 250.066234][ T9459] ---- ---- [ 250.071603][ T9459] lock(&sbi->lock); [ 250.075859][ T9459] lock(&type->i_mutex_dir_key#19/3); [ 250.083858][ T9459] lock(&sbi->lock); [ 250.090372][ T9459] lock(&type->i_mutex_dir_key#19/3); [ 250.096294][ T9459] [ 250.096294][ T9459] *** DEADLOCK *** [ 250.096294][ T9459] [ 250.104454][ T9459] 3 locks held by syz.2.1215/9459: [ 250.109774][ T9459] #0: ffff888077e42418 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 250.119037][ T9459] #1: ffff888078b86650 (&type->i_mutex_dir_key#19/1){+.+.}-{3:3}, at: filename_create+0x20c/0x480 [ 250.129784][ T9459] #2: ffff88807f5f7090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x60/0xd0 [ 250.139814][ T9459] [ 250.139814][ T9459] stack backtrace: [ 250.145722][ T9459] CPU: 0 PID: 9459 Comm: syz.2.1215 Not tainted syzkaller #0 [ 250.153185][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.163450][ T9459] Call Trace: [ 250.166745][ T9459] [ 250.169687][ T9459] dump_stack_lvl+0x18c/0x250 [ 250.174391][ T9459] ? load_image+0x420/0x420 [ 250.178933][ T9459] ? show_regs_print_info+0x20/0x20 [ 250.184158][ T9459] ? print_circular_bug+0x12b/0x1a0 [ 250.189916][ T9459] check_noncircular+0x2fc/0x400 [ 250.194876][ T9459] ? look_up_lock_class+0x75/0x140 [ 250.200096][ T9459] ? print_deadlock_bug+0x5d0/0x5d0 [ 250.205310][ T9459] ? lockdep_lock+0xf5/0x230 [ 250.209932][ T9459] ? _find_first_zero_bit+0xd3/0x100 [ 250.215230][ T9459] __lock_acquire+0x2df1/0x7d40 [ 250.220103][ T9459] ? __lock_acquire+0x7d40/0x7d40 [ 250.225146][ T9459] ? verify_lock_unused+0x140/0x140 [ 250.230369][ T9459] ? is_bpf_text_address+0x28f/0x2a0 [ 250.235668][ T9459] ? is_bpf_text_address+0x26/0x2a0 [ 250.240876][ T9459] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.246973][ T9459] lock_acquire+0x19e/0x420 [ 250.251494][ T9459] ? open_xa_dir+0x146/0x700 [ 250.256222][ T9459] ? __might_sleep+0xe0/0xe0 [ 250.260832][ T9459] ? read_lock_is_recursive+0x20/0x20 [ 250.266481][ T9459] ? mark_lock+0x94/0x320 [ 250.270837][ T9459] ? __lock_acquire+0x1347/0x7d40 [ 250.275937][ T9459] down_write_nested+0x9e/0x200 [ 250.280804][ T9459] ? open_xa_dir+0x146/0x700 [ 250.285509][ T9459] ? down_read_non_owner+0x310/0x310 [ 250.290811][ T9459] open_xa_dir+0x146/0x700 [ 250.295328][ T9459] ? listxattr_filler+0x520/0x520 [ 250.300426][ T9459] ? truncate_inode_pages_range+0x40a/0xfb0 [ 250.306418][ T9459] ? reiserfs_for_each_xattr+0xd0/0x9f0 [ 250.311978][ T9459] reiserfs_for_each_xattr+0x1bd/0x9f0 [ 250.317454][ T9459] ? mapping_evict_folio+0x510/0x510 [ 250.322757][ T9459] ? reiserfs_for_each_xattr+0x9f0/0x9f0 [ 250.328406][ T9459] ? reiserfs_delete_xattrs+0x90/0x90 [ 250.333801][ T9459] ? reiserfs_xattr_init+0x6a0/0x6a0 [ 250.339114][ T9459] ? inode_wait_for_writeback+0x1e3/0x230 [ 250.344852][ T9459] ? do_raw_spin_lock+0x11f/0x2c0 [ 250.349896][ T9459] ? dquot_initialize+0x20/0x20 [ 250.354854][ T9459] ? __rwlock_init+0x150/0x150 [ 250.359721][ T9459] reiserfs_delete_xattrs+0x20/0x90 [ 250.365024][ T9459] reiserfs_evict_inode+0x24f/0x4c0 [ 250.370238][ T9459] ? entry_points_to_object+0x260/0x260 [ 250.375803][ T9459] ? do_raw_spin_lock+0x11f/0x2c0 [ 250.380858][ T9459] ? do_raw_spin_unlock+0x121/0x230 [ 250.386089][ T9459] ? entry_points_to_object+0x260/0x260 [ 250.391648][ T9459] evict+0x4ca/0x8d0 [ 250.395647][ T9459] ? proc_nr_inodes+0x230/0x230 [ 250.400511][ T9459] ? do_raw_spin_unlock+0x121/0x230 [ 250.405738][ T9459] ? _raw_spin_unlock+0x28/0x40 [ 250.410705][ T9459] ? iput+0x706/0x920 [ 250.414707][ T9459] reiserfs_mkdir+0x7e9/0x920 [ 250.419401][ T9459] ? reiserfs_symlink+0x7e0/0x7e0 [ 250.424525][ T9459] ? from_kgid+0x16d/0x690 [ 250.429079][ T9459] ? generic_permission+0x1f3/0x590 [ 250.434391][ T9459] ? inode_permission+0xf3/0x480 [ 250.439430][ T9459] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 250.444472][ T9459] ? security_inode_mkdir+0xb7/0x100 [ 250.449866][ T9459] vfs_mkdir+0x296/0x440 [ 250.454129][ T9459] do_mkdirat+0x1dc/0x450 [ 250.458483][ T9459] ? vfs_mkdir+0x440/0x440 [ 250.463061][ T9459] __x64_sys_mkdirat+0x89/0xa0 [ 250.467968][ T9459] do_syscall_64+0x55/0xa0 [ 250.472463][ T9459] ? clear_bhb_loop+0x40/0x90 [ 250.477175][ T9459] ? clear_bhb_loop+0x40/0x90 [ 250.481869][ T9459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.487783][ T9459] RIP: 0033:0x7f672899cdd9 [ 250.492309][ T9459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.512108][ T9459] RSP: 002b:00007f6726bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 250.520549][ T9459] RAX: ffffffffffffffda RBX: 00007f6728c16090 RCX: 00007f672899cdd9 [ 250.529314][ T9459] RDX: 0000000000000000 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 250.537384][ T9459] RBP: 00007f6728a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 250.545369][ T9459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.553395][ T9459] R13: 00007f6728c16128 R14: 00007f6728c16090 R15: 00007ffd48d6bf38 [ 250.561503][ T9459] [ 250.581245][ T5819] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 250.588668][ T9458] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 250.603772][ T5819] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 250.983291][ T5819] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 251.002645][ T5819] usb 2-1: USB disconnect, device number 12 [ 251.026416][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.072321][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.078885][ T1292] ieee802154 phy1 wpan1: encryption failed: -22