last executing test programs: 3.887936586s ago: executing program 1 (id=341): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e21, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x88}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.620000592s ago: executing program 1 (id=346): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r1, 0xffff}, &(0x7f0000000180)=0x8) 3.400120366s ago: executing program 1 (id=350): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d000000000000ff00000000000000000000000d00000000002e305f2e"], 0x0, 0x44, 0x0, 0x0, 0x40}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 3.007989745s ago: executing program 2 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.831913859s ago: executing program 2 (id=357): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0xc}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x36}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100005800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 2.831769589s ago: executing program 1 (id=358): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) 2.666448673s ago: executing program 2 (id=359): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r1 = dup(r0) read(r1, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) poll(&(0x7f0000000180)=[{r0, 0x2003}], 0x1, 0x9) 2.383922619s ago: executing program 2 (id=361): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x90, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x1, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7ffe, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xa, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x80008004, 0x5, 0xfffffffe, 0x100, 0x8d4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000108, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xc55, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x48, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4401000010000100fefff7ff00010000e0000001000000000000000000000000e00000f3728c38333996650000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e0001000000000000000092010000000000003affffffffffffff00000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff02000000fcffffffff0f00002abd700004350000020001000000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 2.383785129s ago: executing program 3 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x22004d0, &(0x7f0000000100)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d372c696f636861727365743d63703935302c00ba266516f6fa4924d9fba264348e497675bf335802186301933c289a656051fe8b3ae727ac44171791dc80"], 0x4, 0x33a, &(0x7f0000000200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 2.359735329s ago: executing program 1 (id=363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) 2.115215485s ago: executing program 3 (id=365): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000007c0)='./file0\x00', 0x8401, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6e6f636f6d70726573732c696f636861727365743d6b6f69382d72752c73686f776173736f632c6d61703d6e6f726d616c2c6e6f6a6f6c6965742c6d61703d6f66662c646d6f64653d3078303030303030303030303030303030322c63727566742c686964652c6d6f64653d3078303030303030303030303030303030332c00db67ae35d5c0be79e94f11caf27fba4efda396f45ffb12630640b3919043893fd373ff039a20fd8e00bd334d2f31fb2359532a89f7f3b5647944f40a7fe9f00144063a697058662288a7fe5ef8b718c95b33198f0b0c5f7ab5c531bb655b2117ea8d7235"], 0x0, 0x688, &(0x7f0000000100)="$eJzs3V1vFOf1APCzBAvLfwn91VYIIUIm0EogEbO7DkZWbrpdj+1J1jurmXUEVykKdoQwSQupVLgKN2krtR8it/0Q7SeKets7qp3dhQW/rEOCl6DfbwXz7MzZec4Myxw99rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC19mq93qhFJ+tu3UwO1l4t8s1Dlo/X9+8XJof0G1Eb/In5+Tg7nHX2V88Xnxn8dTHOD9+dj/nBZD4e/9+Z///olydPjD9/SELH4uGjx/du7+5uP5h1IjOynnazMs82W+tpkpV5srK8XL+2sVYma1knLW+V/XQzaRdpq58XyeX2laSxsrKUpIu38q3u+mqrk45n3vigWa8vJx8v9tJWUebdax8vlu2NrNPJuutVzGDxIObG4Iv4SdZP+mlrM0l27u5uL01LchDUOEpQc1pQs95sNhrNZmP5+sr1G/X6yT0z6i+JPRGz/9IyWz/xERxe3YlR/Y9OZNGNrbgZyb6vdqxGEXlsHrB8ZFz/f3MtHba+2b/fyfo/rvJnny8+F1X9vzB8d+Gg+n9ALsf3ehiP4nHci9uxG7uxHQ9mntHxvtYjjW5kUUYeWWxGq5qTjOYksRLLsRz1+Cw2Yi3KSGItsuhEGmXcijL6kVbfqHYUkUYr+pFHEUlcjnZciSQasRIrsRRJpLEYtyKPrejGeqxGq1rLTtyt9vvSITk+C2ocJah5SJD6zw81v2fO6zmQwyt4Oq7/AAAAwFurVv30fTD+n4t3q9Za1knrs04LAAAA+AlVv/k/P5jMDVrvRs34HwAAAN42teoau1pELMR7w9b4SqjxDwHmZpwiAAAA8CNVv/+/MJgsDFrvRW3P+B8AAAD4mfvr1Hvsz/dO1f71nyiKudqT3s1f1+63BnGt++8MP1dN/vt0aNDur52rnR6tpJosnxy9a6fna6O7Xz67Cebo5ILvd6blUTs0gUkHJxB/j/eHMe/fGU7vjJcMe1lYyzrpYjvvfNSIVuv0iX56s/+nL+/+OarN/1t383Qtdu7ubi9+/tXunSqXJ4O1PLk/uoHinvso7pPLeNHX1f0Wqmsu9t3iuepCjFG/C8N+65Pbf2L48RM/YPu/jYvDmIsL8fRURCy8uP3zgz4biwdt/SiLRpXF/AudHmXLn2dxaRhz6fKl4WSfLJrTsmhO7v9X2hdHyGJpWhZLPzILgFnZmVKFansL/ysc5Y6nun8bl4cxl89VB9aT5/Y5otenHdHrr1jXx339M64MY66Mgw+qsYN+//FSVf1u8IHvDuy37DRrg134ztf3/xBnHj56/MHd+7e/2P5i+8tmc2m5/mG9fr0Zc9VmjCZqDwD7mP6MnakRtQ+njKp/8eyUgsX4PL6K3bgTV6urDaozDvZd60Ls/DZGpyFcnRi1Vl4atS5MPOHl6pRR3cLEg16OHrt0DP8SAHB8Lk6pw0ep/1enjLsXJk4pvDpldDxZywGA1yMtvq8t9P9SK4qs91ljZaXR6m+kSZG3P0mKbHU9TbJuPy3aG63uepr0iryft/POoPFptpqWSbnV6+VFP1nLi6SXl9nN6snvyejR72W62er2s3bZ66StMk3aebffaveT1axsJ72t33WyciMtqg+XvbSdrWXtVj/Lu0mZbxXtdDFJyjSdCMxW024/W8sGzW7SK7LNVnEr+TTvbG2myWpatous18+HKxz3lXXX8mKzWu3irHc2ALwhHj56fO/27u72g9fYiFOz3koAYNJElQYAAAAAAAAAAAAAAN5Qx3H931vY+OPPededejPS0JhJ45vfD//nTwue9ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb6XwAAAP//2kFZhw==") chdir(&(0x7f00000004c0)='./file0\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.115026565s ago: executing program 2 (id=366): syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000080), 0xfe, 0x1141, &(0x7f0000002380)="$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") r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) 1.983675587s ago: executing program 1 (id=368): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1.615126785s ago: executing program 3 (id=371): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) 1.350817511s ago: executing program 3 (id=373): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x80000001, "ab3cfa07558439ede6dc06270ee042000000000200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, 0x0) 1.243824623s ago: executing program 0 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x88010}, 0x40000) 1.059837767s ago: executing program 3 (id=375): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 1.059677067s ago: executing program 2 (id=376): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077079600000001090212000100001e000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e00)={0x1c, &(0x7f0000000240)={0x40, 0x1, 0x6, "a56fd18a80a2"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$uac1(r0, 0x0, 0x0) 979.585999ms ago: executing program 0 (id=377): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x1, 0xc}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 844.625182ms ago: executing program 3 (id=378): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) 699.913985ms ago: executing program 0 (id=379): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000300)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x101, 0x11, 0x5, 0x0, 0x0) 480.9226ms ago: executing program 0 (id=380): prlimit64(0x0, 0x2, &(0x7f0000000140)={0x7fff, 0x200000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r1, 0x1, 0x170bd29, 0x0, {0x1, 0x0, 0x6000}}, 0x14}, 0x1, 0xff07, 0x0, 0x10044840}, 0x2000000) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r0) 221.007895ms ago: executing program 0 (id=381): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000100)=0x3, 0x4) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=382): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 76.199951][ T5761] cgroup: Unknown subsys name 'net' [ 76.301538][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.092992][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.679009][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.685860][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.687611][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.700582][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.701574][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.708850][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.716088][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.722844][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.729506][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.736551][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.743719][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.750520][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.779977][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.794046][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.798320][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.810281][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.812874][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.818346][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.833647][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.842894][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.850558][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.860033][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.869253][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.882621][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.331136][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 80.405245][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 80.453019][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 80.512209][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 80.588646][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.596114][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.603423][ T5773] bridge_slave_0: entered allmulticast mode [ 80.610576][ T5773] bridge_slave_0: entered promiscuous mode [ 80.656220][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.663381][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.670814][ T5773] bridge_slave_1: entered allmulticast mode [ 80.677753][ T5773] bridge_slave_1: entered promiscuous mode [ 80.726361][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.733710][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.743763][ T5780] bridge_slave_0: entered allmulticast mode [ 80.750910][ T5780] bridge_slave_0: entered promiscuous mode [ 80.759047][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.766353][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.774091][ T5774] bridge_slave_0: entered allmulticast mode [ 80.781387][ T5774] bridge_slave_0: entered promiscuous mode [ 80.789220][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.796568][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.803723][ T5774] bridge_slave_1: entered allmulticast mode [ 80.810774][ T5774] bridge_slave_1: entered promiscuous mode [ 80.842881][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.850355][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.857748][ T5780] bridge_slave_1: entered allmulticast mode [ 80.865106][ T5780] bridge_slave_1: entered promiscuous mode [ 80.882495][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.913122][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.920416][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.927699][ T5772] bridge_slave_0: entered allmulticast mode [ 80.935452][ T5772] bridge_slave_0: entered promiscuous mode [ 80.953262][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.984100][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.992555][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.000083][ T5772] bridge_slave_1: entered allmulticast mode [ 81.007748][ T5772] bridge_slave_1: entered promiscuous mode [ 81.027558][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.040951][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.073844][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.086392][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.107238][ T5773] team0: Port device team_slave_0 added [ 81.117375][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.158353][ T5773] team0: Port device team_slave_1 added [ 81.180023][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.192875][ T5774] team0: Port device team_slave_0 added [ 81.202402][ T5774] team0: Port device team_slave_1 added [ 81.211209][ T5780] team0: Port device team_slave_0 added [ 81.249362][ T5780] team0: Port device team_slave_1 added [ 81.256526][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.263495][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.289937][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.322997][ T5772] team0: Port device team_slave_0 added [ 81.355709][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.362711][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.389649][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.401485][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.408694][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.435417][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.449761][ T5772] team0: Port device team_slave_1 added [ 81.458803][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.465846][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.492101][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.519294][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.526362][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.552408][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.582721][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.592129][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.618690][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.651896][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.658985][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.684990][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.700244][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.707249][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.733458][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.790335][ T5774] hsr_slave_0: entered promiscuous mode [ 81.796964][ T5774] hsr_slave_1: entered promiscuous mode [ 81.815592][ T5084] Bluetooth: hci1: command tx timeout [ 81.821159][ T5084] Bluetooth: hci0: command tx timeout [ 81.835080][ T5773] hsr_slave_0: entered promiscuous mode [ 81.842226][ T5773] hsr_slave_1: entered promiscuous mode [ 81.848703][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.856596][ T5773] Cannot create hsr debugfs directory [ 81.894296][ T5084] Bluetooth: hci2: command tx timeout [ 81.912971][ T5772] hsr_slave_0: entered promiscuous mode [ 81.922026][ T5772] hsr_slave_1: entered promiscuous mode [ 81.928869][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.936868][ T5772] Cannot create hsr debugfs directory [ 81.946877][ T5780] hsr_slave_0: entered promiscuous mode [ 81.953307][ T5780] hsr_slave_1: entered promiscuous mode [ 81.959959][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.967593][ T5780] Cannot create hsr debugfs directory [ 81.974532][ T5084] Bluetooth: hci3: command tx timeout [ 82.407298][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.430340][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.441040][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.453632][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.529118][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.556334][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.568443][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.593613][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.667244][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.703326][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.731543][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.772085][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.781870][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.814806][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.825139][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.843699][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.867144][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.922890][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.956853][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.980976][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.988344][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.006658][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.013843][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.092847][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.130573][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.137719][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.162593][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.169823][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.242524][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.310328][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.366112][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.390374][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.405452][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.412630][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.471172][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.478459][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.495727][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.502928][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.548997][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.556268][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.607231][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.793861][ T5774] veth0_vlan: entered promiscuous mode [ 83.823741][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.850024][ T5774] veth1_vlan: entered promiscuous mode [ 83.914708][ T5084] Bluetooth: hci0: command tx timeout [ 83.920191][ T5084] Bluetooth: hci1: command tx timeout [ 83.975527][ T51] Bluetooth: hci2: command tx timeout [ 83.994020][ T5780] veth0_vlan: entered promiscuous mode [ 84.038144][ T5774] veth0_macvtap: entered promiscuous mode [ 84.064679][ T51] Bluetooth: hci3: command tx timeout [ 84.075734][ T5780] veth1_vlan: entered promiscuous mode [ 84.102567][ T5774] veth1_macvtap: entered promiscuous mode [ 84.143901][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.176531][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.203944][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.227664][ T5780] veth0_macvtap: entered promiscuous mode [ 84.238104][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.248435][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.260321][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.269175][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.287327][ T5780] veth1_macvtap: entered promiscuous mode [ 84.321953][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.340411][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.353206][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.380476][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.391963][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.404099][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.428342][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.445293][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.454064][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.464517][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.473254][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.612978][ T5772] veth0_vlan: entered promiscuous mode [ 84.635166][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.643207][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.681872][ T5772] veth1_vlan: entered promiscuous mode [ 84.733014][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.736115][ T5773] veth0_vlan: entered promiscuous mode [ 84.746819][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.816848][ T5773] veth1_vlan: entered promiscuous mode [ 84.832284][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.846350][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.866827][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.879897][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.881287][ T5773] veth0_macvtap: entered promiscuous mode [ 84.922014][ T5773] veth1_macvtap: entered promiscuous mode [ 84.940922][ T5772] veth0_macvtap: entered promiscuous mode [ 84.964003][ T5772] veth1_macvtap: entered promiscuous mode [ 85.032795][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.046727][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.057065][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.070660][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.083688][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.107891][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.136596][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.154655][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.184296][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.204584][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.224363][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.247174][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.290618][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.324224][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.339651][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.350493][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.368982][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.383076][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.400135][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.411052][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.437875][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.448318][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.467438][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.486140][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.515391][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.529561][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.538943][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.547945][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.557232][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.573234][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.584659][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.604344][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.613128][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.744815][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 85.762039][ T5812] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 85.772488][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.790382][ T5812] usb 4-1: config 0 has no interface number 0 [ 85.809564][ T5812] usb 4-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.824099][ T5812] usb 4-1: config 0 interface 184 has no altsetting 0 [ 85.845324][ T5812] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 85.875235][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.883298][ T5812] usb 4-1: Product: syz [ 85.909727][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.918419][ T5812] usb 4-1: Manufacturer: syz [ 85.923094][ T5812] usb 4-1: SerialNumber: syz [ 85.927856][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.956329][ T5812] usb 4-1: config 0 descriptor?? [ 85.974878][ T51] Bluetooth: hci1: command tx timeout [ 85.975075][ T5084] Bluetooth: hci0: command tx timeout [ 86.010883][ T5812] smsc75xx v1.0.0 [ 86.016529][ T5812] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 86.039420][ T5812] smsc75xx: probe of 4-1:0.184 failed with error -22 [ 86.056936][ T5084] Bluetooth: hci2: command tx timeout [ 86.063085][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.072468][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.134543][ T5084] Bluetooth: hci3: command tx timeout [ 86.135259][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.156924][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.190224][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.224734][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.515091][ T5812] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.704739][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 86.713381][ T5812] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 86.725793][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 86.739237][ T5812] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 86.748661][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.762302][ T5812] usb 2-1: config 0 descriptor?? [ 86.775825][ T5811] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 86.981322][ T5811] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 86.985034][ T5833] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.993501][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.008188][ T5811] usb 3-1: Product: syz [ 87.012446][ T5811] usb 3-1: Manufacturer: syz [ 87.022677][ T5811] usb 3-1: SerialNumber: syz [ 87.034930][ T5811] usb 3-1: config 0 descriptor?? [ 87.044089][ T5811] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 87.175172][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 87.196328][ T5833] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.214027][ T5833] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.239057][ T5812] waltop 0003:172F:0034.0001: unknown main item tag 0x1 [ 87.246977][ T5833] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 87.264901][ T5812] waltop 0003:172F:0034.0001: unknown main item tag 0x5 [ 87.272003][ T5812] waltop 0003:172F:0034.0001: unbalanced collection at end of report description [ 87.284926][ T5833] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.291616][ T5833] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 87.311870][ T5812] waltop: probe of 0003:172F:0034.0001 failed with error -22 [ 87.319422][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.362220][ T5833] usb 1-1: config 0 descriptor?? [ 87.483130][ T5812] usb 2-1: USB disconnect, device number 2 [ 87.615747][ T5860] syz.0.9[5860]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.870857][ T5833] hid (null): report_id 35833 is invalid [ 87.882279][ T5833] hid (null): unknown global tag 0xe [ 87.888453][ T5833] hid (null): unknown global tag 0xc [ 87.894003][ T5833] hid (null): report_id 1516233401 is invalid [ 87.912625][ T5833] hid (null): unknown global tag 0xe [ 87.920624][ T5833] hid (null): unknown global tag 0x6b [ 87.928309][ T5833] hid (null): unknown global tag 0xe [ 88.054333][ T5084] Bluetooth: hci1: command tx timeout [ 88.064428][ T5084] Bluetooth: hci0: command tx timeout [ 88.107062][ T5811] gspca_stk1135: reg_w 0x7 err -71 [ 88.134004][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 88.140770][ T5084] Bluetooth: hci2: command tx timeout [ 88.154669][ T5811] gspca_stk1135: Sensor write failed [ 88.160226][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 88.167144][ T5811] gspca_stk1135: Sensor write failed [ 88.172704][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 88.179918][ T5811] gspca_stk1135: Sensor read failed [ 88.185681][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 88.189346][ T5833] usb 1-1: USB disconnect, device number 2 [ 88.192170][ T5811] gspca_stk1135: Sensor read failed [ 88.203968][ T5811] gspca_stk1135: Detected sensor type unknown (0x0) [ 88.211287][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 88.218889][ T5084] Bluetooth: hci3: command tx timeout [ 88.237975][ T5811] gspca_stk1135: Sensor read failed [ 88.244422][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 88.250970][ T5811] gspca_stk1135: Sensor read failed [ 88.258384][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 88.265899][ T5811] gspca_stk1135: Sensor write failed [ 88.271395][ T5811] gspca_stk1135: serial bus timeout: status=0x00 [ 88.278517][ T5811] gspca_stk1135: Sensor write failed [ 88.284066][ T5811] stk1135: probe of 3-1:0.0 failed with error -71 [ 88.297559][ T5811] usb 3-1: USB disconnect, device number 2 [ 88.312671][ T8] usb 4-1: USB disconnect, device number 2 [ 88.444689][ T5867] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.699799][ T5874] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 88.712460][ T5874] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 88.991887][ T5882] loop0: detected capacity change from 0 to 2048 [ 89.001181][ T5882] ======================================================= [ 89.001181][ T5882] WARNING: The mand mount option has been deprecated and [ 89.001181][ T5882] and is ignored by this kernel. Remove the mand [ 89.001181][ T5882] option from the mount to silence this warning. [ 89.001181][ T5882] ======================================================= [ 89.098794][ T5882] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 89.133844][ T5882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.234574][ T5741] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.242317][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.288736][ T5889] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET) [ 89.296757][ T5889] syzkaller1: entered promiscuous mode [ 89.302279][ T5889] syzkaller1: entered allmulticast mode [ 89.434370][ T5741] usb 3-1: Using ep0 maxpacket: 16 [ 89.439750][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 89.457611][ T5741] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 89.473188][ T28] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 89.486308][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.502277][ T28] usb 2-1: config 0 has no interface number 0 [ 89.510345][ T28] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.525194][ T5741] usb 3-1: config 0 descriptor?? [ 89.550946][ T5741] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 89.558803][ T28] usb 2-1: config 0 interface 85 has no altsetting 0 [ 89.566225][ T5893] loop3: detected capacity change from 0 to 256 [ 89.590919][ T28] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 89.602330][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.616125][ T28] usb 2-1: Product: syz [ 89.627449][ T28] usb 2-1: Manufacturer: syz [ 89.632192][ T28] usb 2-1: SerialNumber: syz [ 89.665857][ T28] usb 2-1: config 0 descriptor?? [ 89.919906][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.933395][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.360963][ T28] appletouch 2-1:0.85: Geyser mode initialized. [ 90.389519][ T28] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5 [ 90.619124][ T28] usb 3-1: USB disconnect, device number 3 [ 90.680936][ T8] usb 2-1: USB disconnect, device number 3 [ 90.715673][ T8] appletouch 2-1:0.85: input: appletouch disconnected [ 90.966484][ T5910] vivid-000: disconnect [ 90.972672][ T5909] vivid-000: reconnect [ 91.100034][ T5914] Zero length message leads to an empty skb [ 91.608512][ T5931] autofs4:pid:5931:autofs_fill_super: called with bogus options [ 91.932407][ T5942] netlink: 84 bytes leftover after parsing attributes in process `syz.0.45'. [ 92.156786][ T5949] Bluetooth: MGMT ver 1.22 [ 92.217760][ T970] cfg80211: failed to load regulatory.db [ 92.699695][ T5963] loop0: detected capacity change from 0 to 512 [ 92.725406][ T5963] EXT4-fs: Ignoring removed i_version option [ 92.823945][ T5963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.878339][ T5963] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.967591][ T5970] loop1: detected capacity change from 0 to 8192 [ 93.028165][ T5970] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 93.056041][ T5970] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 93.066008][ T5970] REISERFS (device loop1): using ordered data mode [ 93.073346][ T5970] reiserfs: using flush barriers [ 93.113351][ T5970] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.132118][ T5970] REISERFS (device loop1): checking transaction log (loop1) [ 93.184434][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.421335][ T5970] REISERFS (device loop1): Using tea hash to sort names [ 93.441765][ T5970] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 93.595098][ T27] audit: type=1804 audit(1784553997.209:2): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.56" name="/newroot/11/file6/file1" dev="loop1" ino=4 res=1 errno=0 [ 93.664256][ T56] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 93.751162][ T5989] loop2: detected capacity change from 0 to 128 [ 93.761633][ T5989] EXT4-fs: inline encryption not supported [ 93.858139][ T5989] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.885812][ T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.902584][ T56] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.935964][ T5989] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.953035][ T56] usb 1-1: config 1 has no interface number 0 [ 93.963779][ T56] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 93.985525][ T5993] process 'syz.1.64' launched './file2' with NULL argv: empty string added [ 94.003079][ T5989] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.013635][ T56] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 94.026328][ T5981] loop3: detected capacity change from 0 to 40427 [ 94.038482][ T5981] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 94.046312][ T5981] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 94.059036][ T5981] F2FS-fs (loop3): Image doesn't support compression [ 94.074446][ T5981] F2FS-fs (loop3): Image doesn't support compression [ 94.074576][ T56] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 94.103094][ T5981] F2FS-fs (loop3): invalid crc value [ 94.124819][ T56] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.181458][ T56] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.233173][ T56] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.263021][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.294376][ T56] usb 1-1: Product: syz [ 94.299413][ T56] usb 1-1: Manufacturer: syz [ 94.304065][ T56] usb 1-1: SerialNumber: syz [ 94.341844][ T5985] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.369259][ T5981] F2FS-fs (loop3): Start checkpoint disabled! [ 94.409369][ T5981] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 94.425199][ T5981] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 94.682339][ T5989] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 94.756256][ T5981] syz.3.60: attempt to access beyond end of device [ 94.756256][ T5981] loop3: rw=2049, sector=53248, nr_sectors = 992 limit=40427 [ 94.805519][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.814787][ T5985] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.833026][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.841951][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.849310][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.857006][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.863949][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.871457][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.878913][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.886562][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.893496][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.900988][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.918278][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 94.943139][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.989618][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.029114][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.048140][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.064320][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.075469][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.082516][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.101114][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.111403][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.134392][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.154508][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.189496][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.211498][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.229562][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.239779][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.247273][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.255439][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.262726][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.270419][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.278377][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.286003][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.293904][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.301379][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.309014][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.320568][ T56] cdc_ncm 1-1:1.1: bind() failure [ 95.332388][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.340773][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.373796][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.387472][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.403839][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.474718][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.482105][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.489369][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.496724][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.510924][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.544253][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.567478][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.574932][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.581917][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.589087][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.596132][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.603429][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.621299][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.630900][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.644023][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.653649][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.664708][ T5833] usb 1-1: USB disconnect, device number 3 [ 95.670194][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.677869][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.685839][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.693074][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.700156][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.707237][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.714530][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.721800][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.729082][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.737405][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.744694][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.751691][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.758764][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.765839][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.776027][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.794326][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.801286][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.814440][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.825388][ T6017] loop2: detected capacity change from 0 to 2048 [ 95.831981][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.840344][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.850082][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.857644][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.865106][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.872759][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.880310][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.889462][ T6017] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 95.903873][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.911229][ T6017] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 95.922073][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.929894][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.939167][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.946204][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.953976][ T6017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.971748][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.980150][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.987591][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.994802][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.001818][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.009158][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.016282][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.023335][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.035811][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.043664][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.051836][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.074286][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.081350][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.095913][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.103119][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.112573][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.121241][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.128818][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.142169][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.149795][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.157428][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.164873][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.172108][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.179614][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.187948][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.217051][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.253891][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.294980][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.309515][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.326560][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.344408][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.352607][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.374390][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.381731][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.389947][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.397228][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.409100][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.417864][ T5981] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.526431][ T6023] loop0: detected capacity change from 0 to 512 [ 96.593375][ T6023] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 98.015321][ T5832] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.204286][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 98.217392][ T5832] usb 1-1: config 0 has no interfaces? [ 98.232141][ T5832] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 98.244296][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 98.252351][ T5832] usb 1-1: Product: syz [ 98.274384][ T5832] usb 1-1: SerialNumber: syz [ 98.286626][ T5832] usb 1-1: config 0 descriptor?? [ 98.536602][ T970] usb 1-1: USB disconnect, device number 4 [ 98.550232][ T6069] loop2: detected capacity change from 0 to 512 [ 98.578800][ T6069] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.628760][ T6069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.685044][ T6069] EXT4-fs (loop2): 1 truncate cleaned up [ 98.692187][ T6069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.718492][ T6073] loop3: detected capacity change from 0 to 1024 [ 98.916102][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.036638][ T1146] hfsplus: b-tree write err: -5, ino 25 [ 99.104794][ T1146] hfsplus: b-tree write err: -5, ino 4 [ 99.112400][ T1146] hfsplus: b-tree write err: -5, ino 2 [ 99.356078][ T6079] loop0: detected capacity change from 0 to 512 [ 99.455565][ T6079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.505105][ T6079] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.714060][ T6088] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 99.885515][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.238276][ T6097] loop1: detected capacity change from 0 to 512 [ 100.298709][ T6097] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 100.366099][ T6097] EXT4-fs (loop1): invalid journal inode [ 100.372022][ T6097] EXT4-fs (loop1): can't get journal size [ 100.459837][ T6097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 100.476198][ T6105] loop3: detected capacity change from 0 to 256 [ 100.484089][ T6097] System zones: 1-12, 13-13 [ 100.568609][ T6105] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.585767][ T6097] EXT4-fs (loop1): 1 truncate cleaned up [ 100.606300][ T6097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.012869][ T27] audit: type=1800 audit(1784554004.629:3): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.102" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 101.087587][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.184940][ T5811] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.336903][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 101.404289][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 101.425059][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 101.446623][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.467151][ T5811] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.484956][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 101.510659][ T5811] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 101.549624][ T5811] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 101.574169][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.595333][ T5811] usb 3-1: config 0 descriptor?? [ 101.603437][ T6113] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.994038][ T51] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 102.002345][ T51] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 102.042335][ T6130] loop3: detected capacity change from 0 to 512 [ 102.195896][ T5084] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 102.204952][ T5811] usb 3-1: USB disconnect, device number 4 [ 102.521383][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 102.551997][ T6136] netlink: 104 bytes leftover after parsing attributes in process `syz.1.120'. [ 102.695361][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 102.924923][ T6148] loop2: detected capacity change from 0 to 2048 [ 102.958295][ T6148] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.633910][ T6164] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 103.657942][ T6165] loop2: detected capacity change from 0 to 512 [ 103.732329][ T6165] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 103.749496][ T6165] System zones: 0-2, 18-18, 34-35 [ 103.768141][ T6165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.782538][ T6165] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.856128][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.010619][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 104.565947][ T6187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.962492][ T6185] loop2: detected capacity change from 0 to 32768 [ 105.032880][ T6202] loop1: detected capacity change from 0 to 1024 [ 105.080033][ T6185] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 105.093545][ T6202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.217889][ T6175] loop3: detected capacity change from 0 to 32768 [ 105.258143][ T6175] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 105.281003][ T6185] XFS (loop2): Ending clean mount [ 105.313095][ T6202] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 105.370068][ T6175] XFS (loop3): Ending clean mount [ 105.395205][ T6202] EXT4-fs error (device loop1) in ext4_setattr:5682: error 28 [ 105.491056][ T27] audit: type=1800 audit(1784554009.099:4): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.141" name="file1" dev="loop2" ino=4427 res=0 errno=0 [ 105.562906][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.593985][ T27] audit: type=1804 audit(1784554009.179:5): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.136" name="/newroot/39/file0/file1" dev="loop3" ino=4422 res=1 errno=0 [ 105.648188][ T5773] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 105.743837][ T5774] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 106.059741][ T6230] loop0: detected capacity change from 0 to 128 [ 106.138423][ T6230] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.215497][ T6230] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.142370][ T6238] loop3: detected capacity change from 0 to 32768 [ 107.205833][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.406082][ T5811] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.644285][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 107.687292][ T5811] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 107.707043][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.716870][ T5811] usb 3-1: Product: syz [ 107.721103][ T5811] usb 3-1: Manufacturer: syz [ 107.727582][ T5811] usb 3-1: SerialNumber: syz [ 107.742158][ T5811] usb 3-1: config 0 descriptor?? [ 107.764934][ T5811] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 108.709995][ T56] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.753806][ T5833] IPVS: starting estimator thread 0... [ 108.788774][ T5811] gspca_sonixj: reg_w1 err -71 [ 108.855569][ T6284] IPVS: using max 18 ests per chain, 43200 per kthread [ 108.864869][ T6267] loop3: detected capacity change from 0 to 40427 [ 108.877963][ T6267] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 108.885350][ T6267] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 108.897370][ T6267] F2FS-fs (loop3): invalid crc_offset: 1 [ 108.904403][ T5811] sonixj: probe of 3-1:0.0 failed with error -71 [ 108.910344][ T56] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.916904][ T5811] usb 3-1: USB disconnect, device number 5 [ 108.946825][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.975644][ T56] usb 2-1: Product: syz [ 108.984853][ T56] usb 2-1: Manufacturer: syz [ 108.994913][ T56] usb 2-1: SerialNumber: syz [ 109.058374][ T6267] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 109.066881][ T6267] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 109.129425][ T6267] syz.3.168: attempt to access beyond end of device [ 109.129425][ T6267] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 109.190822][ T5774] syz-executor: attempt to access beyond end of device [ 109.190822][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.209168][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 109.603712][ T6298] warning: `syz.2.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.908743][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.183'. [ 109.940765][ T6305] veth0_macvtap: left promiscuous mode [ 109.952626][ T6307] loop2: detected capacity change from 0 to 2048 [ 109.962685][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.183'. [ 110.028808][ T56] cdc_ncm 2-1:1.0: failed to get mac address [ 110.046754][ T6307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.067660][ T56] cdc_ncm 2-1:1.0: bind() failure [ 110.104411][ T56] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 110.111667][ T56] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 110.148155][ T56] usbtest: probe of 2-1:1.1 failed with error -71 [ 110.194012][ T56] usb 2-1: USB disconnect, device number 4 [ 110.209305][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.026096][ T6326] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 111.092566][ T6312] loop0: detected capacity change from 0 to 40427 [ 111.141941][ T6312] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 111.155864][ T6312] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 111.181913][ T6312] F2FS-fs (loop0): heap/no_heap options were deprecated [ 111.195623][ T6328] syz.1.192 (6328) used greatest stack depth: 20008 bytes left [ 111.216098][ T6312] F2FS-fs (loop0): invalid crc value [ 111.267197][ T6312] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.443103][ T6312] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 111.457491][ T6312] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.486735][ T6312] syz.0.185: attempt to access beyond end of device [ 111.486735][ T6312] loop0: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 111.525855][ T6312] syz.0.185: attempt to access beyond end of device [ 111.525855][ T6312] loop0: rw=2049, sector=77856, nr_sectors = 24 limit=40427 [ 111.596412][ T6312] syz.0.185: attempt to access beyond end of device [ 111.596412][ T6312] loop0: rw=2049, sector=77888, nr_sectors = 24 limit=40427 [ 111.677440][ T6342] syz.0.185: attempt to access beyond end of device [ 111.677440][ T6342] loop0: rw=2049, sector=77936, nr_sectors = 8 limit=40427 [ 111.720326][ T6312] syz.0.185: attempt to access beyond end of device [ 111.720326][ T6312] loop0: rw=2049, sector=77944, nr_sectors = 8 limit=40427 [ 111.762228][ T6312] syz.0.185: attempt to access beyond end of device [ 111.762228][ T6312] loop0: rw=2049, sector=77976, nr_sectors = 24 limit=40427 [ 111.788485][ T6312] syz.0.185: attempt to access beyond end of device [ 111.788485][ T6312] loop0: rw=2049, sector=78016, nr_sectors = 24 limit=40427 [ 111.823816][ T6312] syz.0.185: attempt to access beyond end of device [ 111.823816][ T6312] loop0: rw=2049, sector=78048, nr_sectors = 16 limit=40427 [ 112.007048][ T5772] F2FS-fs (loop0): Remounting filesystem read-only [ 112.068803][ T6352] loop3: detected capacity change from 0 to 1024 [ 112.109346][ T6352] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 112.555667][ T6338] loop1: detected capacity change from 0 to 40427 [ 112.645930][ T6338] F2FS-fs (loop1): invalid crc value [ 112.686238][ T6338] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.920316][ T6338] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.934706][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 112.943974][ T5084] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 113.047039][ T6371] Invalid argument reading file caps for ./file0 [ 113.072948][ T6358] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 113.919088][ T6372] loop3: detected capacity change from 0 to 32768 [ 114.099592][ T6372] JBD2: Ignoring recovery information on journal [ 114.290925][ T6372] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 114.593253][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 114.597886][ T6385] loop0: detected capacity change from 0 to 32768 [ 114.628516][ T6380] loop2: detected capacity change from 0 to 32768 [ 114.644898][ T6385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.214 (6385) [ 114.709144][ T6395] loop1: detected capacity change from 0 to 2048 [ 114.745262][ T6380] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 114.788589][ T6385] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.803778][ T6385] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 114.854625][ T6385] BTRFS info (device loop0): using free space tree [ 114.961231][ T6407] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.033790][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 115.112731][ T6385] BTRFS info (device loop0): enabling ssd optimizations [ 115.174922][ T6385] BTRFS info (device loop0): auto enabling async discard [ 115.691400][ T5772] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.727641][ T6423] loop1: detected capacity change from 0 to 512 [ 115.758449][ T6423] EXT4-fs: Ignoring removed oldalloc option [ 115.784386][ T6423] EXT4-fs (loop1): Test dummy encryption mode enabled [ 115.860244][ T6423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.987852][ T6423] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 116.096756][ T6423] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 116.240387][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.475688][ T6419] loop3: detected capacity change from 0 to 40427 [ 116.514500][ T6419] F2FS-fs (loop3): invalid crc value [ 116.550969][ T6419] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.666839][ T6417] loop2: detected capacity change from 0 to 32768 [ 116.780114][ T6419] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 116.849556][ T6417] read_mapping_page failed! [ 116.864960][ T6417] ERROR: (device loop2): txCommit: [ 116.864960][ T6417] [ 116.941535][ T6417] ERROR: (device loop2): diAllocBit: iag inconsistent [ 116.941535][ T6417] [ 116.956960][ T6417] ialloc: diAlloc returned -5! [ 117.019414][ T5774] bio_check_eod: 4 callbacks suppressed [ 117.019433][ T5774] syz-executor: attempt to access beyond end of device [ 117.019433][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 117.066352][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 117.074750][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 117.311690][ T6431] loop0: detected capacity change from 0 to 32768 [ 117.334777][ T6431] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.221 (6431) [ 117.400408][ T6431] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 117.423043][ T6431] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 117.464675][ T6431] BTRFS info (device loop0): using free space tree [ 117.642190][ T6431] BTRFS info (device loop0): enabling ssd optimizations [ 117.650897][ T6431] BTRFS info (device loop0): auto enabling async discard [ 117.964916][ T5772] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 118.161328][ T6471] loop1: detected capacity change from 0 to 2048 [ 118.312099][ T6471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.360502][ T27] audit: type=1800 audit(1784554021.979:6): pid=6471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.230" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 118.394049][ T6479] bridge0: port 3(vlan2) entered blocking state [ 118.464803][ T6479] bridge0: port 3(vlan2) entered disabled state [ 118.471585][ T6479] vlan2: entered allmulticast mode [ 118.494956][ T6479] geneve0: entered allmulticast mode [ 118.532742][ T6479] vlan2: entered promiscuous mode [ 118.541727][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.548978][ T6479] geneve0: entered promiscuous mode [ 118.722265][ T6482] loop0: detected capacity change from 0 to 8192 [ 118.820995][ T6482] loop0: AHDI p3 p4 [ 118.832200][ T6482] loop0: p3 start 525312 is beyond EOD, truncated [ 119.342919][ T6497] loop0: detected capacity change from 0 to 512 [ 119.407629][ T6497] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.237: missing EA_INODE flag [ 119.495180][ T6497] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.237: error while reading EA inode 12 err=-117 [ 119.557876][ T6497] EXT4-fs (loop0): 1 orphan inode deleted [ 119.577164][ T6503] Illegal XDP return value 1544028203 on prog (id 16) dev N/A, expect packet loss! [ 119.605931][ T6497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.695544][ T6497] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.237: directory missing '.' [ 119.825184][ T6506] loop2: detected capacity change from 0 to 4096 [ 119.847415][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.105973][ T6506] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 120.168056][ T6506] ntfs3: loop2: Failed to load $Extend (-22). [ 120.192135][ T6506] ntfs3: loop2: Failed to initialize $Extend. [ 120.449531][ T5773] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 120.904569][ T970] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.991180][ T6529] loop3: detected capacity change from 0 to 512 [ 121.029995][ T6529] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.072632][ T6529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.114466][ T6529] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.125134][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 121.135727][ T970] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 121.145085][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.153124][ T970] usb 3-1: Product: syz [ 121.157589][ T970] usb 3-1: Manufacturer: syz [ 121.162227][ T970] usb 3-1: SerialNumber: syz [ 121.200219][ T6529] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 121.229103][ T970] usb 3-1: config 0 descriptor?? [ 121.245582][ T6529] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 121.346873][ T6525] loop1: detected capacity change from 0 to 32768 [ 121.371932][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.414408][ T6525] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.483046][ T6525] XFS (loop1): Ending clean mount [ 121.489778][ T6523] loop0: detected capacity change from 0 to 32768 [ 121.620143][ T6523] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.707251][ T970] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 121.728269][ T970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.743484][ T970] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 121.758562][ T970] usb 3-1: media controller created [ 121.767029][ T6523] XFS (loop0): Ending clean mount [ 121.792111][ T970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.818860][ T5780] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 121.901205][ T5772] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.412312][ T970] zl10353_read_register: readreg error (reg=127, ret==0) [ 122.412359][ T6527] dtv5100: wlen = 0, aborting. [ 122.430371][ T970] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 122.439624][ T970] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 122.509250][ T56] usb 3-1: USB disconnect, device number 6 [ 122.533744][ T6556] loop1: detected capacity change from 0 to 512 [ 122.555993][ T6556] EXT4-fs: Ignoring removed i_version option [ 122.574500][ T6556] EXT4-fs: Ignoring removed bh option [ 122.638382][ T6556] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.257: inode #13: comm syz.1.257: iget: illegal inode # [ 122.658009][ T56] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 122.669716][ T6556] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.257: couldn't read orphan inode 13 (err -117) [ 122.691581][ T6556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.775604][ T6556] EXT4-fs (loop1): shut down requested (1) [ 122.880094][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.984229][ T5832] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.179697][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 123.205992][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.234298][ T5832] usb 1-1: config 0 has no interfaces? [ 123.260746][ T5832] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 123.270229][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.274258][ T970] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.292275][ T5832] usb 1-1: Product: syz [ 123.304328][ T5832] usb 1-1: Manufacturer: syz [ 123.309003][ T5832] usb 1-1: SerialNumber: syz [ 123.326908][ T5832] usb 1-1: config 0 descriptor?? [ 123.486653][ T970] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.513297][ T970] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.534544][ T970] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.574634][ T970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 123.592148][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 123.605576][ T970] usb 2-1: Product: syz [ 123.609983][ T970] usb 2-1: Manufacturer: syz [ 123.624970][ T970] usb 2-1: SerialNumber: syz [ 123.876442][ T970] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 124.082338][ T5832] usb 2-1: USB disconnect, device number 5 [ 124.100605][ T5832] usblp0: removed [ 124.202047][ T6588] loop2: detected capacity change from 0 to 4096 [ 124.224309][ T5833] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.266073][ T6588] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 124.441323][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.471927][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.494546][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.531988][ T5833] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.563764][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.581959][ T5833] usb 4-1: config 0 descriptor?? [ 124.830481][ T6597] 9pnet: p9_errstr2errno: server reported unknown error Dfß ¥®r [ 124.830481][ T6597] °’°µÔ† [ 125.016064][ T5833] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 125.069310][ T5833] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 125.319475][ T5833] usb 4-1: USB disconnect, device number 3 [ 125.583117][ T6602] loop2: detected capacity change from 0 to 40427 [ 125.598508][ T6602] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 125.610857][ T6602] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 125.621786][ T6602] F2FS-fs (loop2): invalid crc_offset: 1 [ 125.714709][ T5741] usb 1-1: USB disconnect, device number 5 [ 125.793531][ T6616] loop1: detected capacity change from 0 to 2048 [ 125.851219][ T6602] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 125.868812][ T6602] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 125.884292][ T6616] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 125.934760][ T6616] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 125.968938][ T6616] UDF-fs: Scanning with blocksize 512 failed [ 126.067232][ T6616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.121559][ T5773] syz-executor: attempt to access beyond end of device [ 126.121559][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 126.155688][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 127.405946][ T6640] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 127.674123][ C0] sched: RT throttling activated [ 128.030468][ T6632] loop1: detected capacity change from 0 to 131072 [ 128.043930][ T6632] F2FS-fs (loop1): invalid crc value [ 128.077056][ T6632] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.138185][ T6632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 128.243453][ T6654] loop3: detected capacity change from 0 to 512 [ 128.304321][ T8] IPVS: starting estimator thread 0... [ 128.350142][ T6654] EXT4-fs: inline encryption not supported [ 128.397364][ T6659] IPVS: using max 16 ests per chain, 38400 per kthread [ 128.495313][ T6654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.521835][ T6663] loop0: detected capacity change from 0 to 256 [ 128.564434][ T6654] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.596629][ T6663] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 128.619075][ T6654] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 128.727508][ T6654] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 128.829981][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.447531][ T6685] loop0: detected capacity change from 0 to 512 [ 129.471418][ T6685] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.509312][ T6685] EXT4-fs (loop0): 1 truncate cleaned up [ 129.516750][ T6685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.544503][ T5832] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.686962][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.777136][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.795495][ T5832] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 129.815530][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.833575][ T5832] usb 3-1: config 0 descriptor?? [ 130.060467][ T5832] usbhid 3-1:0.0: can't add hid device: -71 [ 130.077927][ T5832] usbhid: probe of 3-1:0.0 failed with error -71 [ 130.099161][ T5832] usb 3-1: USB disconnect, device number 7 [ 130.334276][ T970] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.534536][ T970] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 130.555802][ T970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.582021][ T970] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.591788][ T970] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.601491][ T970] usb 2-1: Product: syz [ 130.611344][ T970] usb 2-1: Manufacturer: syz [ 130.618160][ T970] usb 2-1: SerialNumber: syz [ 130.627767][ T970] usb 2-1: config 0 descriptor?? [ 130.633660][ T6699] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 130.650108][ T6712] loop3: detected capacity change from 0 to 2048 [ 130.664352][ T5832] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.667302][ T970] usb 2-1: selecting invalid altsetting 0 [ 130.704050][ T6712] Alternate GPT is invalid, using primary GPT. [ 130.714439][ T6712] loop3: p1 p2 p3 [ 130.824358][ T6715] loop0: detected capacity change from 0 to 512 [ 130.832025][ T6715] ext2: Bad value for 'barrier' [ 130.844510][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 130.898826][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.913197][ T6699] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.944613][ T5832] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 130.953754][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.002717][ T970] usb 2-1: USB disconnect, device number 6 [ 131.093448][ T5832] usb 3-1: config 0 descriptor?? [ 131.128350][ T5832] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 131.172235][ T5832] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 131.363255][ T5833] usb 3-1: USB disconnect, device number 8 [ 131.386417][ T5833] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 131.762020][ T6712] loop3: detected capacity change from 0 to 40427 [ 131.860191][ T6729] loop1: detected capacity change from 0 to 512 [ 131.978934][ T6729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.032012][ T6729] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.079108][ T6729] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 132.098698][ T6729] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 1 with max blocks 32 with error 28 [ 132.113710][ T6729] EXT4-fs (loop1): This should not happen!! Data will be lost [ 132.113710][ T6729] [ 132.123694][ T6729] EXT4-fs (loop1): Total free blocks count 0 [ 132.130345][ T6729] EXT4-fs (loop1): Free/Dirty block details [ 132.136542][ T6729] EXT4-fs (loop1): free_blocks=65280 [ 132.141946][ T6729] EXT4-fs (loop1): dirty_blocks=32 [ 132.147386][ T6729] EXT4-fs (loop1): Block reservation details [ 132.153595][ T6729] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 132.283433][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.985979][ T6757] netlink: 72 bytes leftover after parsing attributes in process `syz.2.339'. [ 133.184990][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.194266][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.205873][ T6762] netlink: 64 bytes leftover after parsing attributes in process `syz.1.341'. [ 133.668956][ T6781] loop1: detected capacity change from 0 to 256 [ 133.699696][ T6781] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.759571][ T6781] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.199818][ T6794] loop0: detected capacity change from 0 to 2048 [ 134.238557][ T6798] loop1: detected capacity change from 0 to 2048 [ 134.290969][ T6794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 134.351637][ T6798] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.495922][ T6794] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #12: comm syz.0.356: corrupted in-inode xattr: invalid size in ea xattr [ 134.671580][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 134.675076][ T6811] loop3: detected capacity change from 0 to 64 [ 134.744676][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 135.050540][ T6823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.367'. [ 135.070583][ T6824] loop3: detected capacity change from 0 to 764 [ 135.087711][ T6823] netem: unknown loss type 13 [ 135.097769][ T6823] netem: change failed [ 135.128216][ T6824] rock: directory entry would overflow storage [ 135.168065][ T6824] rock: sig=0x5245, size=8, remaining=5 [ 135.242531][ T6818] loop2: detected capacity change from 0 to 8192 [ 135.284029][ T6818] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.304625][ T6818] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 135.314352][ T5741] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.351102][ T6818] REISERFS (device loop2): using ordered data mode [ 135.358183][ T6818] reiserfs: using flush barriers [ 135.371143][ T6818] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.380040][ T6830] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 135.453930][ T6818] REISERFS (device loop2): checking transaction log (loop2) [ 135.521166][ T6818] REISERFS (device loop2): Using rupasov hash to sort names [ 135.534966][ T5741] usb 2-1: Using ep0 maxpacket: 16 [ 135.558401][ T6818] REISERFS (device loop2): using 3.5.x disk format [ 135.590550][ T5741] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 135.605209][ T6818] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 135.626460][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.643488][ T5741] usb 2-1: Product: syz [ 135.654532][ T5741] usb 2-1: Manufacturer: syz [ 135.669438][ T5741] usb 2-1: SerialNumber: syz [ 135.692281][ T6818] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 135.717739][ T6818] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 135.733484][ T6818] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 135.755669][ T6818] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 136.269525][ T6850] loop0: detected capacity change from 0 to 128 [ 136.282475][ T6850] EXT4-fs: Ignoring removed nobh option [ 136.332735][ T6850] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.351431][ T6850] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.414448][ T970] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.483233][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.636813][ T970] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.07 [ 136.648241][ T6855] mmap: syz.0.380 (6855): VmData 37597184 exceed data ulimit 32767. Update limits or use boot option ignore_rlimit_data. [ 136.654210][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.700680][ T970] usb 3-1: config 0 descriptor?? [ 136.741489][ T6848] loop3: detected capacity change from 0 to 32768 [ 136.753510][ T5741] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 136.772023][ T5741] usb 2-1: USB disconnect, device number 7 [ 136.853566][ T6848] JBD2: Ignoring recovery information on journal [ 137.007293][ T6848] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 137.109796][ T6848] [ 137.112210][ T6848] ====================================================== [ 137.119271][ T6848] WARNING: possible circular locking dependency detected [ 137.126317][ T6848] syzkaller #0 Not tainted [ 137.130785][ T6848] ------------------------------------------------------ [ 137.137902][ T6848] syz.3.378/6848 is trying to acquire lock: [ 137.143811][ T6848] ffff88805c532658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 137.157093][ T6848] [ 137.157093][ T6848] but task is already holding lock: [ 137.164777][ T6848] ffff88805fd8bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 137.174318][ T6848] [ 137.174318][ T6848] which lock already depends on the new lock. [ 137.174318][ T6848] [ 137.184829][ T6848] [ 137.184829][ T6848] the existing dependency chain (in reverse order) is: [ 137.193877][ T6848] [ 137.193877][ T6848] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 137.201934][ T6848] down_read+0x46/0x2e0 [ 137.206662][ T6848] ocfs2_init_acl+0x30a/0x770 [ 137.211999][ T6848] ocfs2_mknod+0x1427/0x2310 [ 137.218034][ T6848] ocfs2_mkdir+0x196/0x430 [ 137.225180][ T6848] vfs_mkdir+0x2a5/0x470 [ 137.230822][ T6848] do_mkdirat+0x1dc/0x450 [ 137.236330][ T6848] __x64_sys_mkdirat+0x89/0xa0 [ 137.242059][ T6848] do_syscall_64+0x55/0xb0 [ 137.248800][ T6848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.255584][ T6848] [ 137.255584][ T6848] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 137.264656][ T6848] down_read+0x46/0x2e0 [ 137.269442][ T6848] ocfs2_start_trans+0x3a8/0x6f0 [ 137.275013][ T6848] ocfs2_mknod+0xf33/0x2310 [ 137.280164][ T6848] ocfs2_mkdir+0x196/0x430 [ 137.286427][ T6848] vfs_mkdir+0x2a5/0x470 [ 137.292147][ T6848] do_mkdirat+0x1dc/0x450 [ 137.297312][ T6848] __x64_sys_mkdirat+0x89/0xa0 [ 137.305506][ T6848] do_syscall_64+0x55/0xb0 [ 137.310944][ T6848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.317609][ T6848] [ 137.317609][ T6848] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 137.325321][ T6848] ocfs2_start_trans+0x2a9/0x6f0 [ 137.331094][ T6848] ocfs2_mknod+0xf33/0x2310 [ 137.336199][ T6848] ocfs2_mkdir+0x196/0x430 [ 137.341611][ T6848] vfs_mkdir+0x2a5/0x470 [ 137.346681][ T6848] do_mkdirat+0x1dc/0x450 [ 137.352343][ T6848] __x64_sys_mkdirat+0x89/0xa0 [ 137.357771][ T6848] do_syscall_64+0x55/0xb0 [ 137.362746][ T6848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.369538][ T6848] [ 137.369538][ T6848] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 137.380290][ T6848] down_write+0x97/0x200 [ 137.385179][ T6848] ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 137.391969][ T6848] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 137.398850][ T6848] ocfs2_mknod+0xed1/0x2310 [ 137.403891][ T6848] ocfs2_mkdir+0x196/0x430 [ 137.408871][ T6848] vfs_mkdir+0x2a5/0x470 [ 137.413651][ T6848] do_mkdirat+0x1dc/0x450 [ 137.418604][ T6848] __x64_sys_mkdirat+0x89/0xa0 [ 137.423932][ T6848] do_syscall_64+0x55/0xb0 [ 137.428899][ T6848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.435319][ T6848] [ 137.435319][ T6848] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 137.445884][ T6848] __lock_acquire+0x37ef/0x7d80 [ 137.451284][ T6848] lock_acquire+0x19e/0x420 [ 137.456342][ T6848] down_write+0x97/0x200 [ 137.461136][ T6848] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 137.467703][ T6848] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 137.475093][ T6848] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 137.481346][ T6848] ocfs2_xattr_set+0xc75/0x13a0 [ 137.486740][ T6848] __vfs_setxattr+0x437/0x470 [ 137.491970][ T6848] __vfs_setxattr_noperm+0x12a/0x5e0 [ 137.497787][ T6848] vfs_setxattr+0x16b/0x2f0 [ 137.502847][ T6848] path_setxattr+0x33a/0x590 [ 137.508011][ T6848] __x64_sys_setxattr+0xbb/0xd0 [ 137.513428][ T6848] do_syscall_64+0x55/0xb0 [ 137.518404][ T6848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.524850][ T6848] [ 137.524850][ T6848] other info that might help us debug this: [ 137.524850][ T6848] [ 137.529834][ T970] usb 3-1: Cannot set autoneg [ 137.535069][ T6848] Chain exists of: [ 137.535069][ T6848] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 137.535069][ T6848] [ 137.535118][ T6848] Possible unsafe locking scenario: [ 137.535118][ T6848] [ 137.535122][ T6848] CPU0 CPU1 [ 137.535127][ T6848] ---- ---- [ 137.535132][ T6848] lock( [ 137.545619][ T970] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 137.557205][ T6848] &oi->ip_xattr_sem); [ 137.557225][ T6848] lock(&journal->j_trans_barrier); [ 137.557248][ T6848] lock(&oi->ip_xattr_sem); [ 137.557262][ T6848] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 137.557283][ T6848] [ 137.557283][ T6848] *** DEADLOCK *** [ 137.557283][ T6848] [ 137.557288][ T6848] 3 locks held by syz.3.378/6848: [ 137.557300][ T6848] #0: ffff888026c08418 (sb_writers [ 137.580168][ T970] usb 3-1: USB disconnect, device number 9 [ 137.587245][ T6848] #23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 137.587302][ T6848] #1: ffff88805fd8c2d8 (&sb->s_type->i_mutex_key#29){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 137.655070][ T6848] #2: ffff88805fd8bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 137.665086][ T6848] [ 137.665086][ T6848] stack backtrace: [ 137.670968][ T6848] CPU: 0 PID: 6848 Comm: syz.3.378 Not tainted syzkaller #0 [ 137.678247][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 137.688312][ T6848] Call Trace: [ 137.691624][ T6848] [ 137.695218][ T6848] dump_stack_lvl+0x18c/0x250 [ 137.699952][ T6848] ? load_image+0x420/0x420 [ 137.704517][ T6848] ? show_regs_print_info+0x20/0x20 [ 137.709747][ T6848] ? print_circular_bug+0x12b/0x1a0 [ 137.714965][ T6848] check_noncircular+0x2fc/0x400 [ 137.719945][ T6848] ? print_deadlock_bug+0x5d0/0x5d0 [ 137.725150][ T6848] ? lockdep_lock+0xf5/0x230 [ 137.729738][ T6848] ? _find_first_zero_bit+0xd6/0x100 [ 137.735024][ T6848] __lock_acquire+0x37ef/0x7d80 [ 137.739869][ T6848] ? verify_lock_unused+0x140/0x140 [ 137.745069][ T6848] ? __lock_acquire+0x7d80/0x7d80 [ 137.750086][ T6848] ? verify_lock_unused+0x140/0x140 [ 137.755378][ T6848] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 137.761038][ T6848] ? do_raw_spin_lock+0x11f/0x2b0 [ 137.766134][ T6848] ? mutex_unlock+0x10/0x10 [ 137.770679][ T6848] lock_acquire+0x19e/0x420 [ 137.775191][ T6848] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 137.781528][ T6848] ? ocfs2_get_system_file_inode+0x1f1/0x820 [ 137.787704][ T6848] ? __might_sleep+0xe0/0xe0 [ 137.792317][ T6848] ? read_lock_is_recursive+0x20/0x20 [ 137.797694][ T6848] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 137.803945][ T6848] ? verify_lock_unused+0x140/0x140 [ 137.809143][ T6848] ? check_noncircular+0x18a/0x400 [ 137.814391][ T6848] down_write+0x97/0x200 [ 137.818746][ T6848] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 137.824864][ T6848] ? down_read_killable+0x340/0x340 [ 137.830084][ T6848] ? deref_stack_reg+0x1ab/0x230 [ 137.835037][ T6848] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 137.841204][ T6848] ? mark_lock+0x94/0x320 [ 137.845553][ T6848] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 137.851545][ T6848] ? __lock_acquire+0x7d80/0x7d80 [ 137.856805][ T6848] ? lock_chain_count+0x20/0x20 [ 137.861662][ T6848] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 137.867558][ T6848] ? lockdep_hardirqs_on+0x98/0x150 [ 137.872777][ T6848] ? ocfs2_block_group_search+0x470/0x470 [ 137.878496][ T6848] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 137.884403][ T6848] ? _raw_spin_unlock+0x40/0x40 [ 137.889384][ T6848] ? stack_trace_save+0xaa/0x100 [ 137.894350][ T6848] ? stack_trace_snprint+0xf0/0xf0 [ 137.899572][ T6848] ? __stack_depot_save+0x575/0x660 [ 137.904886][ T6848] ? kasan_set_track+0x5f/0x70 [ 137.909869][ T6848] ? kasan_set_track+0x4e/0x70 [ 137.914999][ T6848] ? __kasan_kmalloc+0x8f/0xa0 [ 137.920063][ T6848] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 137.927996][ T6848] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 137.933813][ T6848] ? ocfs2_xattr_set+0xc75/0x13a0 [ 137.938931][ T6848] ? __vfs_setxattr+0x437/0x470 [ 137.944059][ T6848] ? __vfs_setxattr_noperm+0x12a/0x5e0 [ 137.950718][ T6848] ? vfs_setxattr+0x16b/0x2f0 [ 137.955436][ T6848] ? path_setxattr+0x33a/0x590 [ 137.960254][ T6848] ? __x64_sys_setxattr+0xbb/0xd0 [ 137.965321][ T6848] ? do_syscall_64+0x55/0xb0 [ 137.969991][ T6848] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.976102][ T6848] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 137.982534][ T6848] ? ocfs2_init_steal_slots+0x160/0x160 [ 137.988084][ T6848] ? ocfs2_xattr_block_set+0x2dc0/0x2dc0 [ 137.993727][ T6848] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 137.999363][ T6848] ? _raw_spin_unlock+0x28/0x40 [ 138.004214][ T6848] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 138.010541][ T6848] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 138.016781][ T6848] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 138.022680][ T6848] ? down_write+0x16e/0x200 [ 138.027183][ T6848] ? down_read_killable+0x340/0x340 [ 138.032384][ T6848] ? up_write+0x1be/0x410 [ 138.036808][ T6848] ocfs2_xattr_set+0xc75/0x13a0 [ 138.041878][ T6848] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 138.048007][ T6848] ? __lock_acquire+0x1336/0x7d80 [ 138.053079][ T6848] ? verify_lock_unused+0x140/0x140 [ 138.058470][ T6848] ? ____kasan_slab_free+0x126/0x1f0 [ 138.063903][ T6848] ? aa_get_newest_label+0xfd/0x5c0 [ 138.069152][ T6848] ? end_current_label_crit_section+0x170/0x170 [ 138.075448][ T6848] ? posix_xattr_acl+0x93/0xb0 [ 138.080261][ T6848] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 138.085768][ T6848] __vfs_setxattr+0x437/0x470 [ 138.090591][ T6848] __vfs_setxattr_noperm+0x12a/0x5e0 [ 138.096238][ T6848] vfs_setxattr+0x16b/0x2f0 [ 138.100968][ T6848] ? xattr_permission+0x460/0x460 [ 138.106040][ T6848] ? __mnt_want_write+0x223/0x2a0 [ 138.111192][ T6848] ? path_setxattr+0x2ec/0x590 [ 138.116003][ T6848] path_setxattr+0x33a/0x590 [ 138.120645][ T6848] ? simple_xattrs_free+0x150/0x150 [ 138.125906][ T6848] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 138.131106][ T6866] input: syz0 as /devices/virtual/input/input7 [ 138.132111][ T6848] ? lock_chain_count+0x20/0x20 [ 138.143344][ T6848] __x64_sys_setxattr+0xbb/0xd0 [ 138.148260][ T6848] do_syscall_64+0x55/0xb0 [ 138.152726][ T6848] ? clear_bhb_loop+0x40/0x90 [ 138.157438][ T6848] ? clear_bhb_loop+0x40/0x90 [ 138.162175][ T6848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.168991][ T6848] RIP: 0033:0x7f20e639de99 [ 138.173453][ T6848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.193105][ T6848] RSP: 002b:00007f20e7240028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 138.201652][ T6848] RAX: ffffffffffffffda RBX: 00007f20e6625fa0 RCX: 00007f20e639de99 [ 138.209668][ T6848] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000000 [ 138.217677][ T6848] RBP: 00007f20e6433eaf R08: 0000000000000001 R09: 0000000000000000 [ 138.225658][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.233631][ T6848] R13: 00007f20e6626038 R14: 00007f20e6625fa0 R15: 00007ffccc750f58 [ 138.241611][ T6848] [ 138.327502][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 138.404311][ T5832] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.596733][ T5832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.606892][ T5832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.617538][ T5832] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.626629][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.634812][ T5832] usb 1-1: SerialNumber: syz [ 138.846317][ T5832] usb 1-1: 0:2 : does not exist [ 138.860274][ T5832] usb 1-1: USB disconnect, device number 6 [ 138.877533][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory