last executing test programs: 4.286009488s ago: executing program 3 (id=2310): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 4.122238361s ago: executing program 3 (id=2312): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0x8b, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x4, 0xc0, 0xa, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x4, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x4a, 0x2, 0x1002, 0xc3, 0x10001, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x1, 0x6, {0x8, 0x25, 0x1, 0x82, 0x3, 0x8, 0x6a7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0xc, 0xff, {0x8, 0x25, 0x1, 0x1, 0x30, 0x40, 0x9}}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x38, &(0x7f0000000480)=@string={0x38, 0x3, "5d421e54d18251dbd5eb63b032f18b7506b7f93fe154195d3f8a20604b56099ec2c3b54eecec635fa8a30225522b0ea549efaca2bd3b"}}, {0x0, 0x0}]}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.957665197s ago: executing program 1 (id=2325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r1, 0x1}, 0x20) 2.932462617s ago: executing program 1 (id=2326): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x100, &(0x7f0000000380)=@qipcrtr={0x2a, 0x0, 0x3ffe}, 0x80) 2.890969918s ago: executing program 1 (id=2328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a310000000044030000090a030000000000000009000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8e8020980a00002"], 0x38c}}, 0x0) 2.76561573s ago: executing program 1 (id=2329): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4434, &(0x7f0000008940)="$eJzs3c9rG1ceAPA3Y+/GziZZO5tDFhZWsIFddoORc9pdB9ZxnDh24s2SbULpRZFtJXErW8GWSw85uLdAT4UeSg+hhdxMD8GHXtM/oZce03OgPfRSKIS6SBrZnpGMVWPZjfl8IBrP+y19NU9vDpMXJ6oP5pdz88u54mKuMntv+ULu3Up5ZaEU4gNy2P3TmW7ESewPz83LV/9/50IIX859/XJjY2Mj1PSGtoa3/f3D949mtx+b4kydWrvtW9svb4UQzrSMq6YnhPDmFyFEIYRLSdpYcuwPIZwKjbw7jz64m9un0Tx7UbpYeDX9eH3k3NTak/Wd33sUwiflP56/v/DtX3pGvvn7PnUPAAAAAAAAAAAAAAAAAMBrbuLWzdv/yw+H51HoXYtan9edSI47PR+7sW/+3P03CwAAAAAAAAAAAAAAAAAAAL9SW8//56LTbZ7/H0+Oo7WXz1vrb/znYMZJd0z+9+b4lfxwsv971JL/zyTpu0s9YbDNvu/Z/d8vZeq33/+9tZ+9ao6v2e9AiOKh1HkcDw2F8Fmy8fvZ6HhcrixX/3GvsrI4t2/DeG2l49/YvT8VnWRD/07jP5Zpv/v7//+h5dtUO7+7f1+xIy0d/54dyz19P+oo/pcz9Q4i/uxdOv699bT+7QVGGxNALf4f9u4e//FM+92K/6kQQi6qjTWXmgFqa5ha+mg3Oj2C0vH/TT0tNXUmH+RO1/+PmfhfybR/WPP/avaHiLbS8f9tPa0vVWLr+h+Md7/+r2baP4z418a/6ve/I+n4H2sk9qaK1D/JTuf/iUz73Yr/7TgZ56ko9Q1Yixrpzf+vrq8bnR8h6fi3flpb939xR+u/a5n6B3X/1+y3ef/XnP7/FjXu/2gvHf/+Hct1ev1PZup1e/4fra//2Kt0/I/X09Jr54H6a6fxn8q0v0/x780m1Fclfc34b80nPx1rpH9q/deRdPx/10iMt5dYrb/W13/R7uv/65n2D2P9Vxv/atzdXo+KdPxP7Fju6fl8+KqD3/8bmXrdj38IeWv9PUvH/+SO5erXf9/u8Z/O1Ot2/P/azcYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXgNjyXEgRPFQ6jyOh4ZCuJycnw3Ho5niXGGmXJl9ZzmE8SQ9F05H98uVmWK5ML9YmSsViuVyZTaEK0n+mdAXLZcr1cJC8eHVzbb6owel4lJ1plSshhAmkvQ/hZPNtmbmqwvFhyGEa5t5v48rSw8fFBcLc/NL/87n8/kwuTmGwaj0XrW0WG303sgNYWqz7kC0bXD17OubYzkRvV1ZWVosluvpN7bVKVdmi+VtdaaTvI/CYFRdWlmcLVZLhXLlfrO/wzSaHMcnb71x68ZwS/7dqHEcO9hhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPALPR/518chhN7GWRxCyEXJH1HyL+XZi9LFwqvpx+sj56bWnqy/bFcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICf2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIu/aM0EERxAH4zFlp6DKtlt7NdUUQLVwRPoMfwMHoUL+EdLFKkTRECySyE/QPbJNX3NQ/mx8x7MA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLnHt+79tW4iUlxtLyN+P//+j/PnUr/vpu9fnGFGTufppbt/qJvy72mU35ajVZv36Wb99RETtfcz2JPhPh2M+wzN7dvcfH3f60i5ioi25Dcp56pa9hYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCOHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rKPo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+BQAA//8GUB/l") openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x108) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 2.712282612s ago: executing program 4 (id=2330): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.502227186s ago: executing program 4 (id=2331): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xc3, 0x90407, 0x1, 0xd, 0x0, 0x1, 0x80000000, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000500)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 2.391556769s ago: executing program 4 (id=2332): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@getchain={0x44, 0x66, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0x1d, 0xb}, {0xb, 0xa}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xffff}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xf43}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.32742395s ago: executing program 4 (id=2333): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) rmdir(&(0x7f0000000500)='./file0\x00') 2.063978336s ago: executing program 4 (id=2334): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x8044) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2.033564586s ago: executing program 1 (id=2335): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000002, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd(0x80000000) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000240)='Ao', 0x2, 0x9, 0x0, 0x1, r2}]) 1.898170459s ago: executing program 4 (id=2336): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="001503000000c39242"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0xb, 0x3, "e9b980"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.89776322s ago: executing program 3 (id=2337): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.85004182s ago: executing program 3 (id=2338): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/895, @ANYRES8, @ANYBLOB="3314f54e5fd2edf68f060b6dc46e6726b43f6ee9ddde462c40e60f24007b2bab9e62e0cb8f8765d8cbe7f5463bcb92c74efb73ef0f526fe4056777ed73b012c79f7de0f43b0840ffd77dc59c2f080b4e37bbf7b0a7c58486ec28cc997fb50b582ce980b04cde0666cb1514340a36a20c20bc6ec73af2f34d53b12df083d642b8e66055ff69d88264abb6d6922fb288698e8bb5728002858a45c8"], 0x1, 0x2b1, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/59, 0x1c) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.633565405s ago: executing program 3 (id=2340): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file6\x00', 0x201080b, &(0x7f0000000bc0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8, @ANYBLOB="f9a192156bf01ca65961aa6bd8ded2e99e6d0172a290a4fb5b1c9e8d9a9f58a7c3868f3eb59150ec071f4e3228ed5671cc052363c2bc5a05b0140cd7da2c3b26425ae32d743c4d16e3c55cf800e12e64a3640a40b4f2f180a48dd8a25cf189be2fd909aa7590af8279dcc0a61037dc8c3700a8c29ca46a4843d9fefb37f83f64ea9df56d8d0de49b763efff6f4760bea6106b97d031bae46be2b0fd7048ba60a097ee8310a55b529828699f7acce", @ANYRES8, @ANYRESHEX], 0x21, 0x1cc, &(0x7f0000000280)="$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") r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) 1.501618108s ago: executing program 1 (id=2342): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x4ab42, 0x1c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r0, @ANYRESOCT=r0], 0x0) 1.334220191s ago: executing program 3 (id=2343): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) syz_usb_connect(0x2, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c022000060603090507"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) 877.271911ms ago: executing program 2 (id=2348): syz_clone(0x4000011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000600)="878b"}) 597.066248ms ago: executing program 0 (id=2351): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xb, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 538.146169ms ago: executing program 2 (id=2352): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_AUTORATE={0xfffffffffffffeb0, 0x9, 0x8}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x54}}, 0x0) 493.87773ms ago: executing program 0 (id=2353): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80e00, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000000000002900000032000000fe880000000000000000000000000001", @ANYRES32=r2], 0x28}, 0x40440e0) 487.8128ms ago: executing program 2 (id=2354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000060000000400000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 456.038661ms ago: executing program 2 (id=2355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @random="3a5cb15252a0", {}, @value=@ver_80211n={0x0, 0x2d04, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, @vht_group_id={0x15, 0x1, {0x6, "a347971bee4cf97704969538f5ebf216"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x7, 0xcd, [0x2, 0x3]}]}, 0x60}}, 0x0) 381.207882ms ago: executing program 0 (id=2356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x100000}) 250.193445ms ago: executing program 2 (id=2357): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@nodiscard}]}, 0x1, 0x437, &(0x7f0000000900)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x275a, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') 165.620187ms ago: executing program 0 (id=2358): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x20000400) r1 = io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0xdbb1, 0x800, 0x1, 0x1d0}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x3, 0x2, 0x10000}) 33.5466ms ago: executing program 2 (id=2359): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x7}}, {@jqfmt_vfsold}]}, 0xff, 0x4f8, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 32.86072ms ago: executing program 0 (id=2369): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x7}, {0x9b600000, 0x80000000, 0x3, 0x0, 0x9, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) 0s ago: executing program 0 (id=2360): r0 = io_uring_setup(0x45ae, &(0x7f0000000000)={0x0, 0xb1b8, 0x18, 0x2, 0x2d0}) r1 = fanotify_init(0x1, 0x101000) readv(r1, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) close(r0) kernel console output (not intermixed with test programs): ion, please check. [ 169.464879][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1214'. [ 169.693154][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'. [ 169.721899][ T7239] netlink: del zone limit has 4 unknown bytes [ 170.049603][ T7252] loop0: detected capacity change from 0 to 4096 [ 170.142526][ T7262] loop2: detected capacity change from 0 to 64 [ 170.153396][ T7252] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 170.176677][ T7252] NILFS (loop0): mounting unchecked fs [ 170.182933][ T7252] NILFS (loop0): recovery required for readonly filesystem [ 170.217145][ T7252] NILFS (loop0): write access will be enabled during recovery [ 170.236696][ T6872] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 170.303147][ T4265] udevd[4265]: incorrect nilfs2 checksum on /dev/loop0 [ 170.311245][ T7252] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 170.357459][ T7262] Trying to free block not in datazone [ 170.392298][ T7262] minix_free_block (loop2:11): bit already cleared [ 170.469648][ T4265] udevd[4265]: incorrect nilfs2 checksum on /dev/loop0 [ 170.476900][ T6872] usb 2-1: Using ep0 maxpacket: 32 [ 170.601950][ T6872] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 170.616878][ T6872] usb 2-1: config 0 has no interface number 0 [ 170.786303][ T6872] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 170.804656][ T6872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.864053][ T6872] usb 2-1: Product: syz [ 170.868290][ T6872] usb 2-1: Manufacturer: syz [ 170.879999][ T7264] loop4: detected capacity change from 0 to 32768 [ 170.891624][ T6872] usb 2-1: SerialNumber: syz [ 170.911973][ T6872] usb 2-1: config 0 descriptor?? [ 170.972036][ T6872] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 171.186028][ T6872] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 171.231026][ T6872] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 171.416387][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 171.605111][ T4774] usb 2-1: USB disconnect, device number 9 [ 171.611001][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 171.672394][ T4774] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 171.725515][ T4774] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 171.776640][ T4774] quatech2 2-1:0.51: device disconnected [ 171.794006][ T7283] loop2: detected capacity change from 0 to 32768 [ 171.898996][ T7283] XFS (loop2): Mounting V5 Filesystem [ 171.917851][ T7285] loop3: detected capacity change from 0 to 32768 [ 172.001416][ T7283] XFS (loop2): Ending clean mount [ 172.043251][ T7285] XFS (loop3): Mounting V5 Filesystem [ 172.167203][ T4190] XFS (loop2): Unmounting Filesystem [ 172.282166][ T7285] XFS (loop3): Ending clean mount [ 172.313413][ T7285] XFS (loop3): Quotacheck needed: Please wait. [ 172.385008][ T7295] JBD2: Ignoring recovery information on journal [ 172.565345][ T7285] XFS (loop3): Quotacheck: Done. [ 172.591839][ T7297] set_capacity_and_notify: 1 callbacks suppressed [ 172.591856][ T7297] loop0: detected capacity change from 0 to 32768 [ 172.631527][ T7295] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 172.808668][ T7297] read_mapping_page failed! [ 172.813350][ T7297] ERROR: (device loop0): txCommit: [ 172.813350][ T7297] [ 172.821365][ T4194] XFS (loop3): Unmounting Filesystem [ 172.838465][ T4202] ocfs2: Unmounting device (7,4) on (node local) [ 172.951776][ T7332] loop2: detected capacity change from 0 to 256 [ 172.960445][ T7330] read_mapping_page failed! [ 172.999556][ T7330] ERROR: (device loop0): txCommit: [ 172.999556][ T7330] [ 174.457080][ T7381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1277'. [ 174.494177][ T7364] loop4: detected capacity change from 0 to 32768 [ 174.557598][ T7385] loop3: detected capacity change from 0 to 512 [ 174.574865][ T7383] loop1: detected capacity change from 0 to 128 [ 174.596247][ T7365] loop0: detected capacity change from 0 to 32768 [ 174.641634][ T7364] [ 174.641634][ T7364] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.641634][ T7364] [ 174.661874][ T7383] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 174.703405][ T7383] attempt to access beyond end of device [ 174.703405][ T7383] loop1: rw=0, want=8767745, limit=128 [ 174.730944][ T7385] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 174.764345][ T7364] ERROR: (device loop4): diWrite: ixpxd invalid [ 174.764345][ T7364] [ 174.765178][ T7383] Buffer I/O error on dev loop1, logical block 8767744, async page read [ 174.785279][ T7385] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.788601][ T7383] attempt to access beyond end of device [ 174.788601][ T7383] loop1: rw=0, want=13269810, limit=128 [ 174.817066][ T7364] ERROR: (device loop4): remounting filesystem as read-only [ 174.841673][ T7365] XFS (loop0): Mounting V5 Filesystem [ 174.849819][ T7364] ERROR: (device loop4): txCommit: [ 174.849819][ T7364] [ 174.859504][ T7383] Buffer I/O error on dev loop1, logical block 13269809, async page read [ 174.897221][ T7383] attempt to access beyond end of device [ 174.897221][ T7383] loop1: rw=0, want=1158, limit=128 [ 174.941355][ T7383] Buffer I/O error on dev loop1, logical block 1157, async page read [ 174.949681][ T7383] attempt to access beyond end of device [ 174.949681][ T7383] loop1: rw=0, want=3211265, limit=128 [ 174.960946][ T7383] Buffer I/O error on dev loop1, logical block 3211264, async page read [ 174.970117][ T7383] attempt to access beyond end of device [ 174.970117][ T7383] loop1: rw=0, want=8768636, limit=128 [ 174.981198][ T7383] Buffer I/O error on dev loop1, logical block 8768635, async page read [ 174.991078][ T7383] attempt to access beyond end of device [ 174.991078][ T7383] loop1: rw=0, want=13466418, limit=128 [ 175.002239][ T7383] Buffer I/O error on dev loop1, logical block 13466417, async page read [ 175.010942][ T7383] attempt to access beyond end of device [ 175.010942][ T7383] loop1: rw=0, want=209286, limit=128 [ 175.022024][ T7383] Buffer I/O error on dev loop1, logical block 209285, async page read [ 175.035700][ T7383] attempt to access beyond end of device [ 175.035700][ T7383] loop1: rw=0, want=8767745, limit=128 [ 175.057475][ T7383] Buffer I/O error on dev loop1, logical block 8767744, async page read [ 175.088326][ T7383] attempt to access beyond end of device [ 175.088326][ T7383] loop1: rw=0, want=13269810, limit=128 [ 175.194663][ T7383] Buffer I/O error on dev loop1, logical block 13269809, async page read [ 175.211631][ T7365] XFS (loop0): Ending clean mount [ 175.227001][ T7398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1280'. [ 175.241064][ T7383] attempt to access beyond end of device [ 175.241064][ T7383] loop1: rw=0, want=1158, limit=128 [ 175.254635][ T7377] loop2: detected capacity change from 0 to 32768 [ 175.322556][ T7383] Buffer I/O error on dev loop1, logical block 1157, async page read [ 175.400455][ T26] audit: type=1800 audit(1783115612.086:22): pid=7383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1279" name="/" dev="loop1" ino=2 res=0 errno=0 [ 175.436412][ T4191] XFS (loop0): Unmounting Filesystem [ 175.536878][ T4189] sysv_free_block: trying to free block not in datazone [ 175.600757][ T4189] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 175.830659][ T7412] loop1: detected capacity change from 0 to 16 [ 175.924180][ T7412] erofs: (device loop1): mounted with root inode @ nid 36. [ 175.966752][ T7412] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 176.082803][ T7412] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851] [ 176.144018][ T7412] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 176.792235][ T7446] loop0: detected capacity change from 0 to 4096 [ 176.827451][ T7446] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 176.903128][ T1109] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.136602][ T7448] loop3: detected capacity change from 0 to 32768 [ 177.139937][ T7453] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 177.171597][ T1109] usb 2-1: Using ep0 maxpacket: 32 [ 177.191652][ T7448] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 177.200051][ T7448] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 177.273196][ T7448] gfs2: fsid=syz:syz.0: journal 0 mapped with 15 extents in 0ms [ 177.286085][ T6871] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 177.294448][ T6871] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 177.299881][ T1109] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 177.347399][ T6871] gfs2: fsid=syz:syz.0: jid=0: Failed [ 177.356839][ T7448] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 177.515047][ T1109] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 177.524150][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.581575][ T1109] usb 2-1: Product: syz [ 177.587809][ T1109] usb 2-1: Manufacturer: syz [ 177.592551][ T1109] usb 2-1: SerialNumber: syz [ 177.602065][ T1109] usb 2-1: config 0 descriptor?? [ 177.660229][ T7438] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.971258][ T6871] usb 2-1: USB disconnect, device number 10 [ 178.362205][ T7491] loop3: detected capacity change from 0 to 2048 [ 178.451129][ T4265] Alternate GPT is invalid, using primary GPT. [ 178.466262][ T4265] loop3: p2 p3 p7 [ 178.605643][ T7469] loop2: detected capacity change from 0 to 32768 [ 178.652702][ T7491] Alternate GPT is invalid, using primary GPT. [ 178.686727][ T7491] loop3: p2 p3 p7 [ 178.770663][ T7469] XFS (loop2): Mounting V5 Filesystem [ 178.854315][ T7493] loop0: detected capacity change from 0 to 32768 [ 178.880875][ T7469] XFS (loop2): Ending clean mount [ 178.899138][ T7469] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 178.913374][ T7469] XFS (loop2): Unmount and run xfs_repair [ 178.919886][ T7469] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 178.928395][ T7469] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 178.958367][ T7508] tipc: Started in network mode [ 178.967532][ T7469] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 178.987428][ T7493] ERROR: (device loop0): diWrite: ixpxd invalid [ 178.987428][ T7493] [ 179.020226][ T7508] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 179.049641][ T7493] ERROR: (device loop0): remounting filesystem as read-only [ 179.063149][ T7508] tipc: Enabled bearer , priority 4 [ 179.083317][ T7469] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 179.093396][ T7493] ERROR: (device loop0): txCommit: [ 179.093396][ T7493] [ 179.124147][ T7469] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 179.133074][ T7469] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 179.170092][ T7469] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 179.190829][ T7469] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 179.248261][ T7469] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 179.259592][ T4774] kernel write not supported for file /input/event0 (pid: 4774 comm: kworker/1:16) [ 179.295957][ T7516] loop3: detected capacity change from 0 to 2048 [ 179.316452][ T7469] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 179.364143][ T7469] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 179.396380][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 179.398432][ T7469] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 179.465809][ T7523] loop0: detected capacity change from 0 to 128 [ 179.547956][ T4190] XFS (loop2): Unmounting Filesystem [ 179.554622][ T7516] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 179.687882][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 179.700967][ T4267] udevd[4267]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 179.721027][ T4395] udevd[4395]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 179.731408][ T7516] EXT4-fs error (device loop3): ext4_ext_precache:626: inode #2: comm syz.3.1330: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 179.769770][ T7523] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.826944][ T7523] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.859001][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.910831][ T7534] loop4: detected capacity change from 0 to 4096 [ 179.938765][ T7534] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 180.168883][ T6873] tipc: Node number set to 8432298 [ 180.520202][ T7550] loop4: detected capacity change from 0 to 4096 [ 180.619520][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 180.648943][ T7550] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 180.758031][ T7550] ntfs3: loop4: Failed to load $Extend. [ 180.981848][ T7574] loop3: detected capacity change from 0 to 512 [ 181.113624][ T7574] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 181.127964][ T7574] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.163879][ T7547] loop0: detected capacity change from 0 to 32768 [ 181.244027][ T26] audit: type=1800 audit(1783115618.038:23): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1343" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 181.281695][ T7574] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 181.326524][ T7583] loop2: detected capacity change from 0 to 16 [ 181.372861][ T7583] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 181.428624][ T7583] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 181.485085][ T7583] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 182.669793][ T7610] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1368 (7610) [ 182.682695][ T7594] [ 182.682695][ T7594] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.682695][ T7594] [ 182.722344][ T7598] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 182.738256][ T7598] REISERFS (device loop4): using ordered data mode [ 182.745447][ T7598] reiserfs: using flush barriers [ 182.751738][ T7598] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 182.780844][ T7598] REISERFS (device loop4): checking transaction log (loop4) [ 182.833210][ T7598] REISERFS (device loop4): Using rupasov hash to sort names [ 182.855745][ T7610] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 182.891370][ T7594] jfs_create: dtInsert returned -EIO [ 182.905088][ T7598] REISERFS (device loop4): using 3.5.x disk format [ 182.924286][ T7610] BTRFS info (device loop2): enabling auto defrag [ 182.932051][ T7610] BTRFS info (device loop2): max_inline at 4096 [ 182.942481][ T7594] ERROR: (device loop0): jfs_create: [ 182.942481][ T7594] [ 182.955438][ T7598] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 182.983398][ T7610] BTRFS info (device loop2): using free space tree [ 182.990304][ T7610] BTRFS info (device loop2): has skinny extents [ 183.021336][ T7598] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 183.055604][ T7598] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 183.076191][ T7598] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 183.130398][ T4191] [ 183.130398][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.130398][ T4191] [ 183.180873][ T4191] [ 183.180873][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.180873][ T4191] [ 183.618644][ T7610] BTRFS info (device loop2): enabling ssd optimizations [ 183.667751][ T7654] set_capacity_and_notify: 4 callbacks suppressed [ 183.667768][ T7654] loop4: detected capacity change from 0 to 16 [ 183.727412][ T7654] erofs: Unexpected value for 'user_xattr' [ 184.205725][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1389'. [ 184.659950][ T7626] loop1: detected capacity change from 0 to 40427 [ 184.716924][ T7626] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 184.771248][ T7681] loop2: detected capacity change from 0 to 512 [ 184.794946][ T7626] F2FS-fs (loop1): invalid crc value [ 184.829938][ T7626] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.916395][ T7681] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.2.1394: corrupted xattr block 95 [ 184.955505][ T7660] loop3: detected capacity change from 0 to 32768 [ 184.986696][ T7626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 185.009844][ T7681] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1394: bg 0: block 7: invalid block bitmap [ 185.067724][ T7626] handle_bad_sector: 6 callbacks suppressed [ 185.067743][ T7626] attempt to access beyond end of device [ 185.067743][ T7626] loop1: rw=0, want=45072, limit=40427 [ 185.139407][ T7681] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 185.167650][ T7681] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #11: comm syz.2.1394: corrupted xattr block 95 [ 185.213605][ T7667] loop4: detected capacity change from 0 to 32768 [ 185.252268][ T7681] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 185.335911][ T7681] EXT4-fs (loop2): 1 orphan inode deleted [ 185.342359][ T7681] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.366160][ T7667] XFS (loop4): Mounting V5 Filesystem [ 185.566682][ T7667] XFS (loop4): Ending clean mount [ 185.586748][ T7667] XFS (loop4): Quotacheck needed: Please wait. [ 185.719497][ T7667] XFS (loop4): Quotacheck: Done. [ 185.776227][ T4772] Bluetooth: hci2: command 0x0406 tx timeout [ 185.782426][ T4772] Bluetooth: hci0: command 0x0406 tx timeout [ 185.799369][ T7704] loop3: detected capacity change from 0 to 4096 [ 185.815343][ T4772] Bluetooth: hci3: command 0x0406 tx timeout [ 185.836731][ T4772] Bluetooth: hci1: command 0x0406 tx timeout [ 185.904377][ T7704] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 185.937202][ T4202] XFS (loop4): Unmounting Filesystem [ 185.964381][ T7704] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 185.998450][ T7715] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1406'. [ 186.260322][ T6204] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.509455][ T7735] loop0: detected capacity change from 0 to 128 [ 186.583737][ T7735] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 186.611393][ T7735] hpfs: filesystem error: improperly stopped [ 186.624106][ T7735] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 186.632383][ T7735] hpfs: You really don't want any checks? You are crazy... [ 186.660318][ T7735] hpfs: hpfs_map_sector(): read error [ 186.679197][ T7735] hpfs: code page support is disabled [ 186.688778][ T7735] hpfs: hpfs_map_4sectors(): unaligned read [ 186.700982][ T7735] hpfs: hpfs_map_4sectors(): unaligned read [ 186.741261][ T7735] hpfs: filesystem error: unable to find root dir [ 186.779015][ T6204] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 186.813416][ T6204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.836795][ T6204] usb 2-1: Product: syz [ 186.841060][ T6204] usb 2-1: Manufacturer: syz [ 186.862610][ T6204] usb 2-1: SerialNumber: syz [ 186.895924][ T6204] usb 2-1: config 0 descriptor?? [ 187.260545][ T6204] usb 2-1: USB disconnect, device number 11 [ 187.446185][ T7766] loop0: detected capacity change from 0 to 256 [ 187.509353][ T7766] FAT-fs (loop0): Directory bread(block 64) failed [ 187.551714][ T7766] FAT-fs (loop0): Directory bread(block 65) failed [ 187.579887][ T7766] FAT-fs (loop0): Directory bread(block 66) failed [ 187.595604][ T7766] FAT-fs (loop0): Directory bread(block 67) failed [ 187.602445][ T7766] FAT-fs (loop0): Directory bread(block 68) failed [ 187.635227][ T7766] FAT-fs (loop0): Directory bread(block 69) failed [ 187.641904][ T7766] FAT-fs (loop0): Directory bread(block 70) failed [ 187.696999][ T7766] FAT-fs (loop0): Directory bread(block 71) failed [ 187.703679][ T7766] FAT-fs (loop0): Directory bread(block 72) failed [ 187.712747][ T7766] FAT-fs (loop0): Directory bread(block 73) failed [ 188.297143][ T7792] loop0: detected capacity change from 0 to 1024 [ 188.468034][ T7792] hfsplus: invalid length 1280 has been corrected to 255 [ 188.527271][ T7792] hfsplus: invalid length 1280 has been corrected to 255 [ 188.529568][ T7745] loop3: detected capacity change from 0 to 32768 [ 188.673658][ T26] audit: type=1800 audit(1783115625.562:24): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1440" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 188.720532][ T7813] loop4: detected capacity change from 0 to 128 [ 188.812666][ T7813] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 188.832699][ T7813] attempt to access beyond end of device [ 188.832699][ T7813] loop4: rw=0, want=8767745, limit=128 [ 188.865174][ T7813] sysv_free_block: trying to free block not in datazone [ 188.880682][ T4248] hfsplus: invalid length 1280 has been corrected to 255 [ 188.939166][ T7745] XFS (loop3): Mounting V5 Filesystem [ 189.081430][ T4202] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 189.329511][ T7745] XFS (loop3): Ending clean mount [ 189.333026][ T7837] loop1: detected capacity change from 0 to 2048 [ 189.393886][ T7745] XFS (loop3): Quotacheck needed: Please wait. [ 189.402618][ T7839] loop4: detected capacity change from 0 to 2048 [ 189.525561][ T7837] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,noinit_itable,dioread_nolock,init_itable,,errors=continue. Quota mode: writeback. [ 189.555061][ T7839] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.612687][ T7837] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.685245][ T7745] XFS (loop3): Quotacheck: Done. [ 189.728187][ T7851] loop2: detected capacity change from 0 to 1024 [ 189.928632][ T7855] loop4: detected capacity change from 0 to 1024 [ 189.997060][ T4194] XFS (loop3): Unmounting Filesystem [ 190.032255][ T7855] EXT4-fs (loop4): Ignoring removed bh option [ 190.038424][ T7855] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.063389][ T6872] kernel write not supported for file /sg0 (pid: 6872 comm: kworker/0:17) [ 190.189752][ T7855] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x000000000000007e,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 190.250370][ T7865] loop2: detected capacity change from 0 to 1024 [ 190.461046][ T7874] sp0: Synchronizing with TNC [ 190.691316][ T7883] loop1: detected capacity change from 0 to 128 [ 190.798068][ T7883] FAT-fs (loop1): Directory bread(block 32) failed [ 190.860961][ T7883] FAT-fs (loop1): Directory bread(block 33) failed [ 190.865159][ T7887] loop4: detected capacity change from 0 to 128 [ 190.916155][ T7883] FAT-fs (loop1): Directory bread(block 34) failed [ 190.922893][ T7883] FAT-fs (loop1): Directory bread(block 35) failed [ 190.942921][ T7887] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 190.989833][ T7887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.000212][ T7883] FAT-fs (loop1): Directory bread(block 36) failed [ 191.019444][ T7883] FAT-fs (loop1): Directory bread(block 37) failed [ 191.039790][ T7883] FAT-fs (loop1): Directory bread(block 38) failed [ 191.058807][ T7883] FAT-fs (loop1): Directory bread(block 39) failed [ 191.109958][ T7883] FAT-fs (loop1): Directory bread(block 40) failed [ 191.162676][ T7883] FAT-fs (loop1): Directory bread(block 41) failed [ 191.211604][ T7893] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1481'. [ 191.409182][ T7899] loop4: detected capacity change from 0 to 256 [ 191.487422][ T7883] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 191.529929][ T7883] FAT-fs (loop1): Filesystem has been set read-only [ 191.720148][ T7905] loop4: detected capacity change from 0 to 64 [ 192.064724][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'. [ 192.099211][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'. [ 192.154403][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'. [ 192.194078][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'. [ 192.232465][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'. [ 192.289276][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'. [ 192.289365][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'. [ 192.289452][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'. [ 192.289518][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'. [ 192.627704][ T7923] EXT4-fs (loop2): inline encryption not supported [ 192.640771][ T7923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.689119][ T7897] XFS (loop0): Mounting V5 Filesystem [ 192.712980][ T7923] EXT4-fs (loop2): 1 truncate cleaned up [ 192.730030][ T7923] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 192.804709][ T7934] Attempt to read inode for relocated directory [ 192.890742][ T7897] XFS (loop0): Ending clean mount [ 192.918335][ T7897] XFS (loop0): Quotacheck needed: Please wait. [ 193.063892][ T7897] XFS (loop0): Quotacheck: Done. [ 193.080359][ T7942] tipc: Enabling of bearer rejected, failed to enable media [ 193.272484][ T4191] XFS (loop0): Unmounting Filesystem [ 193.699487][ T7973] set_capacity_and_notify: 5 callbacks suppressed [ 193.699506][ T7973] loop1: detected capacity change from 0 to 128 [ 193.857751][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.864172][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.906395][ T7967] ntfs3: loop2: ino=1f, "file3" failed to undo rename [ 193.949575][ T7975] loop3: detected capacity change from 0 to 256 [ 194.024825][ T7975] exfat: Deprecated parameter 'utf8' [ 194.030282][ T7975] exfat: Deprecated parameter 'utf8' [ 194.073498][ T7979] loop1: detected capacity change from 0 to 128 [ 194.086549][ T7975] exfat: Deprecated parameter 'namecase' [ 194.120005][ T7975] exfat: Deprecated parameter 'namecase' [ 194.217909][ T7975] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 194.487905][ T4774] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 194.920745][ T8000] loop3: detected capacity change from 0 to 4096 [ 194.927696][ T8002] Set syz1 is full, maxelem 7 reached [ 195.083856][ T4774] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 195.112872][ T4774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.117346][ T8000] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 195.163916][ T4774] usb 3-1: Product: syz [ 195.168167][ T4774] usb 3-1: Manufacturer: syz [ 195.184687][ T4774] usb 3-1: SerialNumber: syz [ 195.200586][ T4774] usb 3-1: config 0 descriptor?? [ 195.274549][ T4774] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 195.309124][ T8000] ntfs: volume version 3.1. [ 195.345236][ T4774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.380400][ T8020] loop4: detected capacity change from 0 to 256 [ 195.401955][ T4774] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 195.424964][ T4774] usb 3-1: media controller created [ 195.465630][ T8019] loop1: detected capacity change from 0 to 1764 [ 195.478087][ T7983] dvb-usb: bulk message failed: -22 (7/0) [ 195.518054][ T4774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.604364][ T8019] attempt to access beyond end of device [ 195.604364][ T8019] loop1: rw=0, want=7180648576, limit=1764 [ 195.691005][ T8019] buffer_io_error: 4 callbacks suppressed [ 195.691023][ T8019] Buffer I/O error on dev loop1, logical block 1795162143, async page read [ 195.749613][ T4774] DVB: Unable to find symbol mt352_attach() [ 195.759719][ T8019] attempt to access beyond end of device [ 195.759719][ T8019] loop1: rw=0, want=7180648576, limit=1764 [ 195.808791][ T8019] Buffer I/O error on dev loop1, logical block 1795162143, async page read [ 195.846573][ T26] audit: type=1800 audit(1783115632.787:25): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1535" name="file0" dev="loop1" ino=1923 res=0 errno=0 [ 195.922322][ T4774] DVB: Unable to find symbol nxt6000_attach() [ 195.935651][ T4774] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 195.950410][ T8032] comedi: valid board names for 8255 driver are: [ 195.982615][ T8032] 8255 [ 195.985452][ T8032] comedi: valid board names for vmk80xx driver are: [ 196.014692][ T8032] vmk80xx [ 196.023939][ T8032] comedi: valid board names for usbduxsigma driver are: [ 196.032240][ T8032] usbduxsigma [ 196.044369][ T4774] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 196.062441][ T8032] comedi: valid board names for usbduxfast driver are: [ 196.103159][ T4774] dvb-usb: schedule remote query interval to 1000 msecs. [ 196.125121][ T8039] loop1: detected capacity change from 0 to 128 [ 196.155097][ T4774] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 196.175000][ T8032] usbduxfast [ 196.185097][ T8032] comedi: valid board names for usbdux driver are: [ 196.203965][ T4774] dvb-usb: bulk message failed: -22 (7/0) [ 196.213337][ T8032] usbdux [ 196.216422][ T8032] comedi: valid board names for ni6501 driver are: [ 196.226602][ T4774] dvb-usb: bulk message failed: -22 (7/0) [ 196.232953][ T8032] ni6501 [ 196.235936][ T8032] comedi: valid board names for dt9812 driver are: [ 196.256608][ T8039] EXT4-fs (loop1): Test dummy encryption mode enabled [ 196.263505][ T8039] EXT4-fs (loop1): inline encryption not supported [ 196.286276][ T8032] dt9812 [ 196.289553][ T8032] comedi: valid board names for ni_labpc_cs driver are: [ 196.316177][ T4774] usb 3-1: USB disconnect, device number 9 [ 196.346488][ T8032] ni_labpc_cs [ 196.369976][ T8032] comedi: valid board names for ni_daq_700 driver are: [ 196.400594][ T8039] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none. [ 196.409703][ T8032] ni_daq_700 [ 196.421272][ T8032] comedi: valid board names for labpc_pci driver are: [ 196.428163][ T8032] labpc_pci [ 196.431561][ T8032] comedi: valid board names for adl_pci9118 driver are: [ 196.438697][ T8032] pci9118dg [ 196.442099][ T8032] pci9118hg [ 196.445419][ T8032] pci9118hr [ 196.448646][ T8032] comedi: valid board names for 8255_pci driver are: [ 196.455569][ T8032] 8255_pci [ 196.458896][ T8032] comedi: valid board names for s526 driver are: [ 196.467395][ T8032] s526 [ 196.470201][ T8032] comedi: valid board names for multiq3 driver are: [ 196.477236][ T8032] multiq3 [ 196.480476][ T8032] comedi: valid board names for pcmuio driver are: [ 196.489075][ T8032] pcmuio48 [ 196.492424][ T8032] pcmuio96 [ 196.495637][ T8032] comedi: valid board names for pcmmio driver are: [ 196.503783][ T8032] pcmmio [ 196.506898][ T8032] comedi: valid board names for pcmda12 driver are: [ 196.513676][ T8032] pcmda12 [ 196.517472][ T8032] comedi: valid board names for pcmad driver are: [ 196.534860][ T8039] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.553671][ T8032] pcmad12 [ 196.562122][ T4774] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 196.565163][ T8032] pcmad16 [ 196.585835][ T8039] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.1542: checksumming directory block 0 [ 196.600224][ T8032] comedi: valid board names for ni_labpc driver are: [ 196.611696][ T8032] lab-pc-1200 [ 196.615238][ T8032] lab-pc-1200ai [ 196.651839][ T8032] lab-pc+ [ 196.655009][ T8032] comedi: valid board names for atmio16 driver are: [ 196.661715][ T8032] atmio16 [ 196.719467][ T8032] atmio16d [ 196.722653][ T8032] comedi: valid board names for ni_at_ao driver are: [ 196.757270][ T8032] at-ao-6 [ 196.760700][ T8032] at-ao-10 [ 196.803205][ T8057] loop2: detected capacity change from 0 to 16 [ 196.823163][ T8032] comedi: valid board names for ni_at_a2150 driver are: [ 196.847864][ T8032] ni_at_a2150 [ 196.853020][ T8057] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 196.861639][ T8032] comedi: valid board names for adq12b driver are: [ 196.868416][ T8032] adq12b [ 196.871426][ T8032] comedi: valid board names for mpc624 driver are: [ 196.921557][ T8032] mpc624 [ 196.932415][ T8032] comedi: valid board names for c6xdigio driver are: [ 196.997956][ T8032] c6xdigio [ 197.001250][ T8032] comedi: valid board names for aio_iiro_16 driver are: [ 197.081669][ T8032] aio_iiro_16 [ 197.085128][ T8032] comedi: valid board names for aio_aio12_8 driver are: [ 197.133942][ T8069] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 197.158717][ T8032] aio_aio12_8 [ 197.164930][ T8032] aio_ai12_8 [ 197.168288][ T8032] aio_ao12_4 [ 197.187845][ T8032] comedi: valid board names for fl512 driver are: [ 197.213528][ T8069] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 197.230956][ T8032] fl512 [ 197.233980][ T8032] comedi: valid board names for dmm32at driver are: [ 197.250665][ T8032] dmm32at [ 197.266523][ T8032] comedi: valid board names for dt282x driver are: [ 197.308094][ T8032] dt2821 [ 197.319759][ T8032] dt2821-f [ 197.332369][ T8032] dt2821-g [ 197.335544][ T8032] dt2823 [ 197.348743][ T8032] dt2824-pgh [ 197.358853][ T8032] dt2824-pgl [ 197.391914][ T8032] dt2825 [ 197.403307][ T8032] dt2827 [ 197.419683][ T8032] dt2828 [ 197.422702][ T8032] dt2829 [ 197.425679][ T8032] dt21-ez [ 197.459918][ T8079] __nla_validate_parse: 11 callbacks suppressed [ 197.459938][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 197.469613][ T8032] dt23-ez [ 197.478327][ T8032] dt24-ez [ 197.514805][ T8032] dt24-ez-pgl [ 197.518822][ T8032] comedi: valid board names for dt2817 driver are: [ 197.554603][ T8032] dt2817 [ 197.557631][ T8032] comedi: valid board names for dt2815 driver are: [ 197.597283][ T8032] dt2815 [ 197.618882][ T8032] comedi: valid board names for dt2814 driver are: [ 197.625551][ T8032] dt2814 [ 197.647852][ T8081] loop0: detected capacity change from 0 to 8192 [ 197.648716][ T8032] comedi: valid board names for dt2811 driver are: [ 197.668446][ T8032] dt2811-pgh [ 197.671781][ T8032] dt2811-pgl [ 197.675088][ T8032] comedi: valid board names for dt2801 driver are: [ 197.726708][ T8032] dt2801 [ 197.734619][ T8032] comedi: valid board names for das6402 driver are: [ 197.748939][ T8032] das6402-12 [ 197.752456][ T8032] das6402-16 [ 197.755775][ T8032] comedi: valid board names for das1800 driver are: [ 197.784439][ T8061] loop1: detected capacity change from 0 to 32768 [ 197.793045][ T8081] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 197.795194][ T8032] das-1701st [ 197.805862][ T8032] das-1701st-da [ 197.809560][ T8032] das-1702st [ 197.812881][ T8032] das-1702st-da [ 197.816658][ T8032] das-1702hr [ 197.822566][ T8032] das-1702hr-da [ 197.826166][ T8032] das-1701ao [ 197.857535][ T8032] das-1702ao [ 197.860893][ T8032] das-1801st [ 197.864207][ T8032] das-1801st-da [ 197.871495][ T8081] REISERFS (device loop0): using ordered data mode [ 197.928703][ T8081] reiserfs: using flush barriers [ 197.944464][ T8032] das-1802st [ 197.957652][ T8081] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 197.964489][ T8032] das-1802st-da [ 198.041874][ T8032] das-1802hr [ 198.053512][ T8032] das-1802hr-da [ 198.079766][ T8081] REISERFS (device loop0): checking transaction log (loop0) [ 198.088823][ T8032] das-1801hc [ 198.092172][ T8032] das-1802hc [ 198.095578][ T8032] das-1801ao [ 198.114555][ T8032] das-1802ao [ 198.121192][ T8081] REISERFS (device loop0): Using r5 hash to sort names [ 198.129845][ T8032] comedi: valid board names for das800 driver are: [ 198.136819][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 198.155081][ T8081] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 198.174895][ T8032] das-800 [ 198.195117][ T8032] cio-das800 [ 198.204529][ T8032] das-801 [ 198.265084][ T8032] cio-das801 [ 198.269027][ T8032] das-802 [ 198.272089][ T8032] cio-das802 [ 198.310698][ T8032] cio-das802/16 [ 198.314330][ T8032] comedi: valid board names for isa-das08 driver are: [ 198.344763][ T8032] isa-das08 [ 198.348081][ T8032] das08-pgm [ 198.351351][ T8032] das08-pgh [ 198.374310][ T8032] das08-pgl [ 198.394753][ T8032] das08-aoh [ 198.398031][ T8032] das08-aol [ 198.401960][ T8032] das08-aom [ 198.440081][ T8032] das08/jr-ao [ 198.443534][ T8032] das08jr-16-ao [ 198.469358][ T8032] pc104-das08 [ 198.472893][ T8032] das08jr/16 [ 198.482349][ T8100] EXT4-fs (loop1): Ignoring removed oldalloc option [ 198.502778][ T8032] comedi: valid board names for das16m1 driver are: [ 198.510226][ T8032] das16m1 [ 198.513515][ T8032] comedi: valid board names for dac02 driver are: [ 198.520456][ T8032] dac02 [ 198.522254][ T8100] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.525430][ T8032] comedi: valid board names for rti802 driver are: [ 198.541577][ T8032] rti802 [ 198.545446][ T8032] comedi: valid board names for rti800 driver are: [ 198.552213][ T8032] rti800 [ 198.555361][ T8032] rti815 [ 198.558332][ T8032] comedi: valid board names for pcm3724 driver are: [ 198.565218][ T8032] pcm3724 [ 198.568284][ T8032] comedi: valid board names for pcl818 driver are: [ 198.575039][ T8032] pcl818l [ 198.578369][ T8032] pcl818h [ 198.581533][ T8032] pcl818hd [ 198.591763][ T8032] pcl818hg [ 198.595849][ T8032] pcl818 [ 198.598831][ T8032] pcl718 [ 198.603461][ T8032] pcm3718 [ 198.606538][ T8032] comedi: valid board names for pcl816 driver are: [ 198.652349][ T8032] pcl816 [ 198.664673][ T8032] pcl814b [ 198.667768][ T8032] comedi: valid board names for pcl812 driver are: [ 198.683725][ T8032] pcl812 [ 198.687024][ T8032] pcl812pg [ 198.690173][ T8032] acl8112pg [ 198.695326][ T8032] acl8112dg [ 198.698784][ T8032] acl8112hg [ 198.702073][ T8032] a821pgl [ 198.706049][ T8032] a821pglnda [ 198.709596][ T8032] a821pgh [ 198.712645][ T8032] a822pgl [ 198.715874][ T8032] a822pgh [ 198.718934][ T8032] a823pgl [ 198.722224][ T8032] a823pgh [ 198.727925][ T8032] pcl813 [ 198.730917][ T8032] pcl813b [ 198.735261][ T8100] EXT4-fs (loop1): 1 truncate cleaned up [ 198.741609][ T8100] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none. [ 198.765277][ T8032] acl8113 [ 198.768341][ T8032] iso813 [ 198.771355][ T8032] acl8216 [ 198.774613][ T8032] a826pg [ 198.786862][ T8032] comedi: valid board names for pcl730 driver are: [ 198.793642][ T8032] pcl730 [ 198.796714][ T8032] iso730 [ 198.799679][ T8032] acl7130 [ 198.805114][ T8032] pcm3730 [ 198.809052][ T8077] XFS (loop2): Mounting V5 Filesystem [ 198.815349][ T8032] pcl725 [ 198.834469][ T8032] p8r8dio [ 198.837768][ T8032] acl7225b [ 198.843638][ T8032] p16r16dio [ 198.846893][ T8032] pcl733 [ 198.872455][ T8032] pcl734 [ 198.875663][ T8032] opmm-1616-xt [ 198.912537][ T8032] pearl-mm-p [ 198.924477][ T8032] ir104-pbf [ 198.951152][ T8032] comedi: valid board names for pcl726 driver are: [ 198.991640][ T8077] XFS (loop2): Ending clean mount [ 199.012652][ T8077] XFS (loop2): Quotacheck needed: Please wait. [ 199.031770][ T8032] pcl726 [ 199.035618][ T8032] pcl727 [ 199.038801][ T8032] pcl728 [ 199.051424][ T8032] acl6126 [ 199.054834][ T8032] acl6128 [ 199.069073][ T8032] comedi: valid board names for pcl724 driver are: [ 199.076325][ T8032] pcl724 [ 199.079391][ T8032] pcl722 [ 199.083202][ T8032] pcl731 [ 199.086319][ T8032] acl7122 [ 199.089380][ T8032] acl7124 [ 199.092518][ T8032] pet48dio [ 199.095750][ T8032] pcmio48 [ 199.098944][ T8032] onyx-mm-dio [ 199.102499][ T8032] comedi: valid board names for pcl711 driver are: [ 199.122652][ T8032] pcl711 [ 199.125752][ T8032] pcl711b [ 199.152276][ T8032] acl8112hg [ 199.173409][ T8032] acl8112dg [ 199.208409][ T8032] comedi: valid board names for amplc_pc263 driver are: [ 199.219390][ T8032] pc263 [ 199.222618][ T8032] comedi: valid board names for amplc_pc236 driver are: [ 199.229867][ T8032] pc36at [ 199.233602][ T8032] comedi: valid board names for amplc_dio200 driver are: [ 199.241870][ T8032] pc212e [ 199.244852][ T8032] pc214e [ 199.248334][ T8032] pc215e [ 199.251504][ T8077] XFS (loop2): Quotacheck: Done. [ 199.252761][ T8032] pc218e [ 199.259711][ T8032] pc272e [ 199.263465][ T8032] comedi: valid board names for comedi_parport driver are: [ 199.273921][ T8032] comedi_parport [ 199.283940][ T8032] comedi: valid board names for comedi_test driver are: [ 199.319919][ T8032] comedi_test [ 199.330803][ T8032] comedi: valid board names for comedi_bond driver are: [ 199.337810][ T8032] comedi_bond [ 199.405345][ T4190] XFS (loop2): Unmounting Filesystem [ 199.671040][ T8132] set_capacity_and_notify: 3 callbacks suppressed [ 199.671057][ T8132] loop4: detected capacity change from 0 to 1024 [ 199.788918][ T8132] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 200.027488][ T8117] loop3: detected capacity change from 0 to 32768 [ 200.166675][ T8117] XFS (loop3): Mounting V5 Filesystem [ 200.388990][ T8117] XFS (loop3): Ending clean mount [ 200.400605][ T8117] XFS (loop3): Quotacheck needed: Please wait. [ 200.473237][ T8140] loop1: detected capacity change from 0 to 32768 [ 200.512342][ T8117] XFS (loop3): Quotacheck: Done. [ 200.627172][ T8140] XFS (loop1): Mounting V5 Filesystem [ 200.705763][ T8161] loop4: detected capacity change from 0 to 8192 [ 200.722648][ T4194] XFS (loop3): Unmounting Filesystem [ 200.745840][ T8161] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 200.795156][ T8150] loop2: detected capacity change from 0 to 32768 [ 200.868879][ T8161] REISERFS (device loop4): using ordered data mode [ 200.875800][ T8161] reiserfs: using flush barriers [ 200.883833][ T8161] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.901701][ T8161] REISERFS (device loop4): checking transaction log (loop4) [ 200.945089][ T8140] XFS (loop1): Ending clean mount [ 200.999600][ T8161] REISERFS (device loop4): Using r5 hash to sort names [ 201.015128][ T8161] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 201.052780][ T8140] XFS (loop1): Quotacheck needed: Please wait. [ 201.216339][ T8140] XFS (loop1): Quotacheck: Done. [ 201.530942][ T4189] XFS (loop1): Unmounting Filesystem [ 201.606860][ T8173] loop4: detected capacity change from 0 to 1024 [ 201.886477][ T8178] loop0: detected capacity change from 0 to 512 [ 201.988893][ T8181] loop4: detected capacity change from 0 to 64 [ 202.053211][ T8178] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.075407][ T8181] MINIX-fs: mounting file system with errors, running fsck is recommended [ 202.145892][ T8181] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 202.160883][ T8178] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.1595: Allocating blocks 41-42 which overlap fs metadata [ 202.227098][ T8183] loop3: detected capacity change from 0 to 4096 [ 202.262162][ T8178] Quota error (device loop0): write_blk: dquota write failed [ 202.347032][ T8178] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 202.384864][ T8178] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 202.496267][ T8178] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1595: Failed to acquire dquot type 1 [ 202.540592][ T8178] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 202.605902][ T8178] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1595: corrupted inode contents [ 202.672334][ T8178] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #12: comm syz.0.1595: mark_inode_dirty error [ 202.739961][ T8178] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1595: corrupted inode contents [ 202.778589][ T8178] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.1595: mark_inode_dirty error [ 202.810399][ T8178] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1595: corrupted inode contents [ 202.921392][ T8178] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 202.938689][ T8178] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.1595: corrupted inode contents [ 202.997947][ T8178] EXT4-fs error (device loop0): ext4_truncate:4286: inode #12: comm syz.0.1595: mark_inode_dirty error [ 203.071230][ T8178] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 203.084164][ T8178] EXT4-fs (loop0): 1 truncate cleaned up [ 203.089907][ T8178] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002. Quota mode: writeback. [ 203.285662][ T8223] netlink: 'syz.1.1611': attribute type 49 has an invalid length. [ 203.295470][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'. [ 203.481770][ T8229] loop3: detected capacity change from 0 to 1024 [ 203.574174][ T8234] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 203.830810][ T6872] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 204.089857][ T6872] usb 2-1: Using ep0 maxpacket: 32 [ 204.364556][ T8230] (syz.2.1616,8230,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 204.380031][ T6872] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 204.391219][ T6872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.401713][ T8230] (syz.2.1616,8230,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 204.435649][ T6872] usb 2-1: Product: syz [ 204.459069][ T6872] usb 2-1: Manufacturer: syz [ 204.472350][ T6872] usb 2-1: SerialNumber: syz [ 204.502537][ T8230] JBD2: Ignoring recovery information on journal [ 204.535453][ T6872] usb 2-1: config 0 descriptor?? [ 204.635274][ T8230] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 204.989741][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 205.026646][ T6872] airspy 2-1:0.0: Board ID: 00 [ 205.031496][ T6872] airspy 2-1:0.0: Firmware version: [ 205.246143][ T6872] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 205.286848][ T6872] airspy 2-1:0.0: Registered as swradio24 [ 205.313239][ T6872] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 205.375107][ T6872] usb 2-1: USB disconnect, device number 12 [ 205.498023][ T8255] set_capacity_and_notify: 2 callbacks suppressed [ 205.498040][ T8255] loop3: detected capacity change from 0 to 32768 [ 205.564997][ T8286] loop2: detected capacity change from 0 to 1024 [ 205.654287][ T8286] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 205.781590][ T8290] loop4: detected capacity change from 0 to 764 [ 206.055064][ T8302] netlink: 436 bytes leftover after parsing attributes in process `syz.0.1642'. [ 206.152911][ T8302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1642'. [ 206.188266][ T8299] loop2: detected capacity change from 0 to 4096 [ 206.287270][ T8299] ntfs3: Invalid value for gid. [ 206.421131][ T8321] loop0: detected capacity change from 0 to 256 [ 206.462018][ T8324] loop4: detected capacity change from 0 to 1024 [ 206.513042][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 206.538760][ T8321] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbab21acc, utbl_chksum : 0xe619d30d) [ 206.907385][ T8335] loop3: detected capacity change from 0 to 2048 [ 206.986979][ T8335] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.137996][ T8349] loop2: detected capacity change from 0 to 64 [ 207.138808][ T8348] loop0: detected capacity change from 0 to 64 [ 207.331222][ T8357] loop3: detected capacity change from 0 to 64 [ 207.785472][ T8371] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 207.885067][ T8375] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 207.932029][ T8375] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 207.953621][ T8371] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 208.018790][ T8375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.123813][ T4189] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 208.178014][ T4189] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 208.731508][ T8419] hugetlbfs: Bad value for 'size' [ 208.976193][ T8434] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 209.021308][ T8440] device sit1 entered promiscuous mode [ 209.071356][ T8434] cramfs: empty filesystem [ 209.084878][ T8440] team0: Device sit1 is of different type [ 209.289979][ T8445] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1691'. [ 209.852076][ T8463] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 210.161833][ T8437] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 210.161833][ T8437] [ 210.212147][ T8437] ERROR: (device loop2): remounting filesystem as read-only [ 210.667353][ T8452] set_capacity_and_notify: 5 callbacks suppressed [ 210.667371][ T8452] loop3: detected capacity change from 0 to 32768 [ 210.748230][ T8477] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1699'. [ 210.798387][ T8477] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1699'. [ 210.801031][ T8452] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 210.801031][ T8452] [ 211.237594][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1705'. [ 211.531134][ T8501] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 212.006535][ T8513] loop2: detected capacity change from 0 to 2048 [ 212.095990][ T8513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.815648][ T8551] loop3: detected capacity change from 0 to 512 [ 212.866976][ T8551] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 212.915825][ T8551] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.090419][ T8551] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 213.105590][ T8551] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.171793][ T8533] loop0: detected capacity change from 0 to 32768 [ 213.234709][ T8533] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 213.234709][ T8533] [ 213.288722][ T8533] ERROR: (device loop0): remounting filesystem as read-only [ 213.330917][ T8533] ERROR: (device loop0): jfs_unlink: [ 213.330917][ T8533] [ 213.455411][ T4191] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 213.455411][ T4191] [ 213.624623][ T8565] loop2: detected capacity change from 0 to 64 [ 213.839457][ T8545] loop1: detected capacity change from 0 to 32768 [ 213.945103][ T8545] [ 213.945103][ T8545] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 213.945103][ T8545] [ 213.985871][ T8547] loop4: detected capacity change from 0 to 32768 [ 214.026428][ T8571] loop2: detected capacity change from 0 to 1024 [ 214.036395][ T8545] ERROR: (device loop1): dbReAlloc: the block is outside the filesystem [ 214.036395][ T8545] [ 214.067232][ T8571] EXT4-fs (loop2): inline encryption not supported [ 214.085251][ T8571] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.163403][ T8545] ERROR: (device loop1): remounting filesystem as read-only [ 214.183695][ T8545] jfs_mkdir: dtInsert returned -EIO [ 214.203530][ T8545] ERROR: (device loop1): jfs_mkdir: [ 214.203530][ T8545] [ 214.223359][ T8571] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 1: comm syz.2.1741: lblock 1 mapped to illegal pblock 1 (length 1) [ 214.247757][ T8571] EXT4-fs (loop2): Remounting filesystem read-only [ 214.281125][ T8571] Quota error (device loop2): write_blk: dquota write failed [ 214.301735][ T8571] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 214.373609][ T8571] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1741: Failed to acquire dquot type 0 [ 214.448773][ T8571] EXT4-fs (loop2): Remounting filesystem read-only [ 214.513048][ T8571] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.1741: Freeing blocks not in datazone - block = 0, count = 4096 [ 214.578580][ T8585] loop3: detected capacity change from 0 to 512 [ 214.606389][ T8571] EXT4-fs (loop2): Remounting filesystem read-only [ 214.623842][ T8571] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1741: Invalid inode bitmap blk 0 in block_group 0 [ 214.654773][ T144] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 214.703500][ T8571] EXT4-fs (loop2): Remounting filesystem read-only [ 214.721116][ T144] EXT4-fs (loop2): Remounting filesystem read-only [ 214.730759][ T8571] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 214.746809][ T8585] EXT4-fs (loop3): Ignoring removed oldalloc option [ 214.776035][ T144] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 214.810667][ T8585] EXT4-fs (loop3): 1 truncate cleaned up [ 214.879716][ T8592] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 214.891237][ T8571] EXT4-fs (loop2): Remounting filesystem read-only [ 214.901962][ T8585] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,jqfmt=vfsv1,errors=remount-ro,init_itable,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 214.930271][ T144] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 214.961924][ T8571] EXT4-fs (loop2): 1 orphan inode deleted [ 214.967726][ T8571] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; dioread_nolock,min_batch_time=0x0000000000000008,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 215.027912][ T144] EXT4-fs (loop2): Remounting filesystem read-only [ 215.137024][ T8596] loop4: detected capacity change from 0 to 512 [ 215.237494][ T8596] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 215.267050][ T8596] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.282130][ T8596] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 215.396970][ T8596] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 215.443221][ T8599] EXT4-fs (loop3): Ignoring removed orlov option [ 215.455431][ T8596] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #16: comm syz.4.1752: corrupted xattr block 31 [ 215.546535][ T8596] EXT4-fs (loop4): Remounting filesystem read-only [ 215.555526][ T8599] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 215.609130][ T8596] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117) [ 215.700994][ T8596] EXT4-fs (loop4): 1 orphan inode deleted [ 215.727172][ T8596] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 216.053142][ T8589] set_capacity_and_notify: 1 callbacks suppressed [ 216.053161][ T8589] loop0: detected capacity change from 0 to 40427 [ 216.173882][ T8589] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 216.190433][ T8589] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 216.213489][ T8589] F2FS-fs (loop0): invalid crc value [ 216.311438][ T8589] F2FS-fs (loop0): Found nat_bits in checkpoint [ 216.334943][ T8594] loop1: detected capacity change from 0 to 40427 [ 216.354321][ T8620] loop2: detected capacity change from 0 to 512 [ 216.393144][ T8620] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 216.434987][ T8594] F2FS-fs (loop1): invalid crc value [ 216.489341][ T4774] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 216.504732][ T8594] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.545213][ T8620] Quota error (device loop2): find_tree_dqentry: Getting block too big (196613 >= 6) [ 216.579744][ T8589] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 216.586862][ T8589] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 216.632233][ T8620] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 216.649466][ T8620] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1760: Failed to acquire dquot type 1 [ 216.739108][ T4774] usb 5-1: Using ep0 maxpacket: 16 [ 216.743935][ T8594] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 216.775474][ T8620] EXT4-fs (loop2): 1 truncate cleaned up [ 216.795520][ T8620] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,discard,nodelalloc,minixdf,min_batch_time=0x0000000000000002,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 216.836081][ T8594] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 216.888992][ T4774] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 217.008802][ T8620] EXT4-fs (loop2): Cannot change journaled quota options when quota turned on [ 217.046543][ T8636] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1766'. [ 217.101734][ T4189] attempt to access beyond end of device [ 217.101734][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 217.118583][ T4774] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 217.158725][ T4774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.177841][ T4774] usb 5-1: Product: syz [ 217.198102][ T4774] usb 5-1: Manufacturer: syz [ 217.202867][ T4774] usb 5-1: SerialNumber: syz [ 217.247089][ T4774] r8152-cfgselector 5-1: config 0 descriptor?? [ 217.489578][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 217.527840][ T4774] r8152-cfgselector 5-1: Unknown version 0x0000 [ 217.535354][ T8649] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1772'. [ 217.787329][ T4774] r8152-cfgselector 5-1: Unknown version 0x0000 [ 217.804551][ T4774] r8152-cfgselector 5-1: USB disconnect, device number 11 [ 217.843822][ T8658] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 218.382401][ T8687] loop3: detected capacity change from 0 to 1024 [ 218.440868][ T8682] loop1: detected capacity change from 0 to 4096 [ 218.515266][ T8688] team0: Device wg0 is of different type [ 218.607088][ T8688] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 218.623718][ T8693] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.635070][ T8682] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 218.677926][ T8682] NILFS (loop1): mounting fs with errors [ 218.953812][ T8707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1797'. [ 219.055577][ T8711] loop4: detected capacity change from 0 to 512 [ 219.108521][ T8711] EXT4-fs (loop4): Ignoring removed oldalloc option [ 219.174262][ T8711] EXT4-fs (loop4): 1 truncate cleaned up [ 219.182605][ T8711] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,jqfmt=vfsv1,errors=remount-ro,init_itable,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 219.326799][ T8719] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.059842][ T6871] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 220.186463][ T4772] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 220.314237][ T6871] usb 3-1: Using ep0 maxpacket: 32 [ 220.433823][ T6871] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 220.453706][ T4772] usb 4-1: Using ep0 maxpacket: 8 [ 220.462667][ T6871] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 2 [ 220.540800][ T8751] loop1: detected capacity change from 0 to 32768 [ 220.588736][ T4772] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 220.603677][ T4772] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 220.622104][ T4772] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.630611][ T4772] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 220.651571][ T8751] (syz.1.1817,8751,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 220.664357][ T6871] usb 3-1: New USB device found, idVendor=1bbb, idProduct=0003, bcdDevice=68.04 [ 220.690986][ T6871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.693885][ T4772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.715795][ T8751] (syz.1.1817,8751,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 220.729509][ T6871] usb 3-1: Product: syz [ 220.752322][ T4772] usb 4-1: config 0 descriptor?? [ 220.771746][ T6871] usb 3-1: Manufacturer: syz [ 220.785172][ T6871] usb 3-1: SerialNumber: syz [ 220.833485][ T8751] JBD2: Ignoring recovery information on journal [ 220.867866][ T8768] loop4: detected capacity change from 0 to 512 [ 220.924165][ T8751] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 220.948865][ T8768] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.086413][ T6871] usb 3-1: USB disconnect, device number 10 [ 221.148477][ T8768] EXT4-fs warning (device loop4): ext4_resize_fs:1981: can't read last block, resize aborted [ 221.186024][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 221.245632][ T4772] maltron 0003:058F:9410.0015: unknown main item tag 0x0 [ 221.266876][ T4772] maltron 0003:058F:9410.0015: unknown main item tag 0x0 [ 221.319273][ T4772] maltron 0003:058F:9410.0015: unknown main item tag 0x0 [ 221.343793][ T4772] maltron 0003:058F:9410.0015: unknown main item tag 0x0 [ 221.358348][ T4772] maltron 0003:058F:9410.0015: unknown main item tag 0x0 [ 221.358882][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.372330][ T4772] maltron 0003:058F:9410.0015: unknown main item tag 0x0 [ 221.395082][ T4772] maltron 0003:058F:9410.0015: unknown main item tag 0x0 [ 221.418415][ T8778] loop1: detected capacity change from 0 to 64 [ 221.466143][ T4772] maltron 0003:058F:9410.0015: unknown main item tag 0x0 [ 221.524527][ T4772] maltron 0003:058F:9410.0015: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.3-1/input0 [ 221.541803][ T8783] loop4: detected capacity change from 0 to 2048 [ 221.600176][ T4772] usb 4-1: USB disconnect, device number 10 [ 221.703472][ T8783] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 221.726725][ T8783] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 221.782689][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1830'. [ 221.801552][ T8783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.090133][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 222.170677][ T8798] fido_id[8798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 222.197940][ T8809] device veth1_to_hsr entered promiscuous mode [ 222.205122][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1837'. [ 222.226924][ T8809] device macvtap1 entered promiscuous mode [ 222.716493][ T8835] loop2: detected capacity change from 0 to 512 [ 222.814220][ T8835] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 222.854545][ T8835] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1845: inode #15: comm syz.2.1845: iget: illegal inode # [ 222.946620][ T8835] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1845: couldn't read orphan inode 15 (err -117) [ 223.008899][ T8835] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000008000,errors=continue,,errors=continue. Quota mode: writeback. [ 223.095187][ T8800] loop1: detected capacity change from 0 to 32768 [ 223.110687][ T8822] loop4: detected capacity change from 0 to 32768 [ 223.154987][ T8822] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1840 (8822) [ 223.227205][ T8822] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 223.280569][ T8822] BTRFS info (device loop4): using free space tree [ 223.320451][ T8822] BTRFS info (device loop4): has skinny extents [ 223.369074][ T8816] loop0: detected capacity change from 0 to 32768 [ 223.437512][ T8816] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1838 (8816) [ 223.495760][ T8816] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 223.529638][ T8816] BTRFS info (device loop0): using free space tree [ 223.536861][ T8816] BTRFS info (device loop0): has skinny extents [ 223.713330][ T8822] BTRFS info (device loop4): enabling ssd optimizations [ 224.099393][ T8816] BTRFS info (device loop0): enabling ssd optimizations [ 224.571683][ T8895] loop1: detected capacity change from 0 to 32768 [ 224.698540][ T8895] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 224.726900][ T13] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 224.852612][ T8895] JBD2: Ignoring recovery information on journal [ 225.004031][ T8895] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 225.108862][ T13] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 225.127606][ T13] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 225.148849][ T8926] loop2: detected capacity change from 0 to 1024 [ 225.164179][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.189990][ T8895] (syz.1.1853,8895,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 225.238498][ T13] usb 4-1: config 0 has no interface number 0 [ 225.255049][ T13] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 225.266796][ T8895] (syz.1.1853,8895,0):ocfs2_group_add:499 ERROR: Can't read the group descriptor # 2097152 from the device. [ 225.327884][ T13] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 225.357283][ T8926] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 225.378398][ T8926] EXT4-fs (loop2): Ignoring removed bh option [ 225.384639][ T8926] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 225.418587][ T8926] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 225.426132][ T8926] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.438753][ T13] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 225.447896][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.489427][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 225.498729][ T13] usb 4-1: config 0 descriptor?? [ 225.529128][ T8926] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,nomblk_io_submit,bh,nomblk_io_submit,resgid=0x0000000000000000,grpquota,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 225.591142][ T8926] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.630016][ T13] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 225.653521][ T8944] loop0: detected capacity change from 0 to 4096 [ 225.730120][ T8949] loop1: detected capacity change from 0 to 2048 [ 225.730591][ T8944] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 225.788126][ T9] usb 4-1: Failed to submit usb control message: -71 [ 225.793746][ T6871] usb 4-1: USB disconnect, device number 11 [ 225.806350][ T9] usb 4-1: unable to send the bmi data to the device: -71 [ 225.814562][ T9] usb 4-1: unable to get target info from device [ 225.828378][ T8949] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 225.880832][ T9] usb 4-1: could not get target info (-71) [ 225.887372][ T9] usb 4-1: could not probe fw (-71) [ 225.901204][ T8950] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.933605][ T8944] ntfs: volume version 3.1. [ 226.072913][ T8918] F2FS-fs (loop4): invalid crc value [ 226.144618][ T8918] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 226.339637][ T154] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 226.385539][ T8961] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1869'. [ 226.427747][ T8918] F2FS-fs (loop4): Start checkpoint disabled! [ 226.442273][ T8961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1869'. [ 226.514953][ T8965] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1872'. [ 226.526490][ T8918] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 226.866232][ T8982] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1880'. [ 226.886339][ T8982] nbd: must specify at least one socket [ 226.913077][ T8936] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 227.207236][ T8936] usb 2-1: Using ep0 maxpacket: 32 [ 227.283798][ T8988] set_capacity_and_notify: 1 callbacks suppressed [ 227.283815][ T8988] loop0: detected capacity change from 0 to 4096 [ 227.385273][ T8998] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 227.484993][ T8988] ntfs3: loop0: failed to convert "0080" to cp852 [ 227.497014][ T8936] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 227.514865][ T8936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.523724][ T8937] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 227.538557][ T8936] usb 2-1: Product: syz [ 227.539196][ T8988] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 227.542871][ T8936] usb 2-1: Manufacturer: syz [ 227.560975][ T8936] usb 2-1: SerialNumber: syz [ 227.571538][ T8936] usb 2-1: config 0 descriptor?? [ 227.588653][ T8988] ntfs3: loop0: failed to convert name for inode 1e. [ 227.618717][ T8936] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 227.636602][ T8936] dvb-usb: bulk message failed: -22 (2/0) [ 227.653817][ T8936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.694356][ T9004] loop4: detected capacity change from 0 to 64 [ 227.708375][ T8936] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 227.723344][ T8936] usb 2-1: media controller created [ 227.763027][ T8936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.816904][ T8936] usb 2-1: selecting invalid altsetting 7 [ 227.832159][ T8970] cxusb: i2c wr: len=127 is too big! [ 227.832159][ T8970] [ 227.848550][ T8992] loop2: detected capacity change from 0 to 32768 [ 227.855152][ T8936] cxusb: set interface failed [ 227.864857][ T8936] dvb-usb: bulk message failed: -22 (1/0) [ 227.909967][ T8936] DVB: Unable to find symbol lgdt330x_attach() [ 227.916794][ T8936] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 227.975800][ T8992] ialloc: diAlloc returned -5! [ 228.063788][ T278] ERROR: (device loop2): diUpdatePMap: the iag is outside the map [ 228.063788][ T278] [ 228.101271][ T278] ERROR: (device loop2): remounting filesystem as read-only [ 228.126407][ T8937] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 228.139947][ T8937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.148417][ T8936] rc_core: IR keymap rc-dvico-portable not found [ 228.154819][ T8936] Registered IR keymap rc-empty [ 228.172635][ T8936] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 228.182678][ T8937] usb 4-1: Product: syz [ 228.205368][ T8937] usb 4-1: Manufacturer: syz [ 228.213089][ T8937] usb 4-1: SerialNumber: syz [ 228.219321][ T8936] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input21 [ 228.250945][ T8937] usb 4-1: config 0 descriptor?? [ 228.262563][ T8936] dvb-usb: schedule remote query interval to 100 msecs. [ 228.280074][ T8936] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 228.305168][ T8936] usb 2-1: USB disconnect, device number 13 [ 228.434599][ T8936] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 228.519292][ T8937] mos7840 4-1:0.0: required endpoints missing [ 228.641805][ T9037] loop1: detected capacity change from 0 to 512 [ 228.694284][ T9037] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 228.743403][ T8937] usb 4-1: USB disconnect, device number 12 [ 228.765720][ T4765] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 228.771501][ T9037] EXT4-fs (loop1): 1 truncate cleaned up [ 228.789550][ T9037] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.084854][ T9051] loop2: detected capacity change from 0 to 2048 [ 229.168753][ T9051] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.176230][ T4765] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 253, using maximum allowed: 30 [ 229.199485][ T4765] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 229.242291][ T4765] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 229.319471][ T4765] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.347211][ T4765] usb 5-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 229.386534][ T4765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.422929][ T4765] usb 5-1: config 0 descriptor?? [ 229.445589][ T9027] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 229.533465][ T9047] loop0: detected capacity change from 0 to 32768 [ 229.602850][ T9047] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 229.675071][ T6871] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 229.720385][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 229.734770][ T9070] netlink: 'syz.1.1918': attribute type 3 has an invalid length. [ 229.924870][ T6871] usb 3-1: Using ep0 maxpacket: 32 [ 229.933850][ T4765] uclogic 0003:2179:0077.0016: unknown main item tag 0x1 [ 229.971184][ T4765] uclogic 0003:2179:0077.0016: item fetching failed at offset 5/40 [ 230.010507][ T4765] uclogic 0003:2179:0077.0016: parse failed [ 230.038797][ T4765] uclogic: probe of 0003:2179:0077.0016 failed with error -22 [ 230.139894][ T4765] usb 5-1: USB disconnect, device number 12 [ 230.204835][ T6871] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 230.225212][ T6871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.261875][ T6871] usb 3-1: Product: syz [ 230.270197][ T6871] usb 3-1: Manufacturer: syz [ 230.275188][ T6871] usb 3-1: SerialNumber: syz [ 230.300513][ T6871] usb 3-1: config 0 descriptor?? [ 230.346664][ T6871] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 230.363076][ T9094] loop3: detected capacity change from 0 to 4096 [ 230.370066][ T6871] dvb-usb: bulk message failed: -22 (2/0) [ 230.386034][ T6871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.438102][ T6871] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 230.450709][ T9094] NILFS (loop3): invalid segment: Checksum error in segment payload [ 230.463909][ T6871] usb 3-1: media controller created [ 230.474564][ T9094] NILFS (loop3): trying rollback from an earlier position [ 230.508311][ T6871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.530837][ T9094] NILFS (loop3): recovery complete [ 230.553309][ T9059] cxusb: i2c wr: len=127 is too big! [ 230.553309][ T9059] [ 230.573859][ T6871] usb 3-1: selecting invalid altsetting 7 [ 230.587575][ T9096] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.595426][ T6871] cxusb: set interface failed [ 230.624504][ T6871] dvb-usb: bulk message failed: -22 (1/0) [ 230.710475][ T6871] DVB: Unable to find symbol lgdt330x_attach() [ 230.722085][ T6871] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 230.882493][ T9080] loop1: detected capacity change from 0 to 40427 [ 230.954227][ T6871] rc_core: IR keymap rc-dvico-portable not found [ 230.967397][ T6871] Registered IR keymap rc-empty [ 230.981078][ T9080] F2FS-fs (loop1): invalid crc value [ 231.000457][ T6871] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 231.028871][ T9105] loop3: detected capacity change from 0 to 4096 [ 231.042470][ T6871] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input22 [ 231.050179][ T9080] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 231.124340][ T6871] dvb-usb: schedule remote query interval to 100 msecs. [ 231.187063][ T6871] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 231.227832][ T9115] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.272514][ T6871] usb 3-1: USB disconnect, device number 11 [ 231.307933][ T9080] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 231.417471][ T6871] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 231.502181][ T4189] attempt to access beyond end of device [ 231.502181][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 231.931285][ T9135] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 232.136333][ T9142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1950'. [ 232.190647][ T9142] nbd: socks must be embedded in a SOCK_ITEM attr [ 232.331909][ T9148] loop1: detected capacity change from 0 to 256 [ 232.762353][ T9133] loop4: detected capacity change from 0 to 32768 [ 232.853753][ T9140] loop2: detected capacity change from 0 to 40427 [ 232.899078][ T9140] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 232.939394][ T9140] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 232.990981][ T9140] F2FS-fs (loop2): invalid crc value [ 233.085024][ T9140] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 233.301610][ T9140] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 233.322558][ T9140] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 233.454330][ T9167] loop4: detected capacity change from 0 to 4096 [ 233.518349][ T9167] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 233.552376][ T9167] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 233.613406][ T9156] loop1: detected capacity change from 0 to 32768 [ 233.617272][ T9167] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 233.623983][ T9158] loop3: detected capacity change from 0 to 32768 [ 233.663744][ T4190] attempt to access beyond end of device [ 233.663744][ T4190] loop2: rw=2049, want=45104, limit=40427 [ 233.750646][ T9167] ntfs: volume version 3.1. [ 233.756257][ T9156] XFS (loop1): Mounting V5 Filesystem [ 233.781855][ T9158] XFS (loop3): Mounting V5 Filesystem [ 233.853215][ T9156] XFS (loop1): Ending clean mount [ 233.913776][ T9158] XFS (loop3): Ending clean mount [ 234.070828][ T4189] XFS (loop1): Unmounting Filesystem [ 234.185356][ T4194] XFS (loop3): Unmounting Filesystem [ 234.320687][ T4202] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 234.471319][ T9173] loop0: detected capacity change from 0 to 40427 [ 234.605419][ T9173] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 234.627443][ T9173] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 234.697925][ T9173] F2FS-fs (loop0): invalid crc value [ 234.761685][ T9173] F2FS-fs (loop0): Found nat_bits in checkpoint [ 234.927757][ T9173] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 234.957363][ T9173] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 235.171098][ T4191] attempt to access beyond end of device [ 235.171098][ T4191] loop0: rw=2049, want=40968, limit=40427 [ 235.343553][ T9193] loop2: detected capacity change from 0 to 40427 [ 235.371178][ T9193] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 235.409658][ T9193] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 235.440135][ T9193] F2FS-fs (loop2): invalid crc value [ 235.538244][ T9193] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 235.552795][ T9213] loop3: detected capacity change from 0 to 256 [ 235.604337][ T9195] loop4: detected capacity change from 0 to 40427 [ 235.650973][ T9195] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 235.721679][ T9195] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 235.767774][ T9195] F2FS-fs (loop4): invalid crc value [ 235.821161][ T9195] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 235.828349][ T9193] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 235.891503][ T9193] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 235.935068][ T9221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1972'. [ 236.044953][ T9195] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 236.081540][ T9195] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 236.271124][ T9225] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 236.375289][ T9229] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.166126][ T9226] XFS (loop0): Mounting V5 Filesystem [ 237.293909][ T9226] XFS (loop0): Ending clean mount [ 237.314397][ T9226] XFS (loop0): Quotacheck needed: Please wait. [ 237.340815][ T6871] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 237.438051][ T9226] XFS (loop0): Quotacheck: Done. [ 237.604289][ T9239] set_capacity_and_notify: 3 callbacks suppressed [ 237.604305][ T9239] loop3: detected capacity change from 0 to 40427 [ 237.638671][ T4191] XFS (loop0): Unmounting Filesystem [ 237.655299][ T9259] program syz.1.1985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.701086][ T6871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.719925][ T6871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.768417][ T9239] F2FS-fs (loop3): invalid crc value [ 237.778203][ T6871] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 237.828685][ T6871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.861293][ T9239] F2FS-fs (loop3): Found nat_bits in checkpoint [ 237.889080][ T6871] usb 3-1: config 0 descriptor?? [ 238.055630][ T9239] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 238.107266][ T9239] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 238.275962][ T4194] attempt to access beyond end of device [ 238.275962][ T4194] loop3: rw=2049, want=40992, limit=40427 [ 238.420779][ T6871] hid-steam 0003:28DE:1142.0017: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 238.616415][ T6871] usb 3-1: USB disconnect, device number 12 [ 238.646523][ T9290] fido_id[9290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 238.992011][ T9302] loop4: detected capacity change from 0 to 256 [ 239.058217][ T9281] loop1: detected capacity change from 0 to 32768 [ 239.098512][ T9302] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 239.163598][ T26] audit: type=1800 audit(1783115676.206:26): pid=9302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2000" name="file1" dev="loop4" ino=1048740 res=0 errno=0 [ 239.188181][ T9281] JBD2: Ignoring recovery information on journal [ 239.401768][ T9313] loop2: detected capacity change from 0 to 8 [ 239.425268][ T9281] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 239.465670][ T9313] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 239.491559][ T9296] loop0: detected capacity change from 0 to 40427 [ 239.558536][ T9296] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 239.612722][ T9296] F2FS-fs (loop0): invalid crc value [ 239.634895][ T9296] F2FS-fs (loop0): Found nat_bits in checkpoint [ 239.645322][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 239.751769][ T9325] loop4: detected capacity change from 0 to 64 [ 239.782756][ T9296] F2FS-fs (loop0): recover fsync data on readonly fs [ 239.808300][ T9296] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 239.863122][ T9296] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 239.936869][ T9296] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 240.351099][ T9341] comedi comedi0: Minor 2147483647 is invalid! [ 240.365066][ T26] audit: type=1326 audit(1783115677.397:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.3.2005" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f5359e59 code=0x7fc00000 [ 240.469929][ T26] audit: type=1326 audit(1783115677.397:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.3.2005" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6f5359e59 code=0x7fc00000 [ 240.585599][ T26] audit: type=1326 audit(1783115677.397:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.3.2005" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f5359e59 code=0x7fc00000 [ 240.608408][ T9296] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=38d380e8, run fsck to fix. [ 240.706171][ T26] audit: type=1326 audit(1783115677.397:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.3.2005" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f5359e59 code=0x7fc00000 [ 240.733785][ T26] audit: type=1326 audit(1783115677.397:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.3.2005" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f5359e59 code=0x7fc00000 [ 240.783907][ T26] audit: type=1326 audit(1783115677.397:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.3.2005" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f5359e59 code=0x7fc00000 [ 240.842634][ T26] audit: type=1326 audit(1783115677.397:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.3.2005" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f5359e59 code=0x7fc00000 [ 240.867873][ T26] audit: type=1326 audit(1783115677.397:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.3.2005" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f5359e59 code=0x7fc00000 [ 240.921502][ T26] audit: type=1326 audit(1783115677.397:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.3.2005" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6f5359e59 code=0x7fc00000 [ 241.049595][ T4765] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 241.245611][ T9368] loop0: detected capacity change from 0 to 64 [ 241.306738][ T9368] gfs2: path_lookup on c::: returned error -2 [ 241.319376][ T4765] usb 2-1: Using ep0 maxpacket: 8 [ 241.387938][ T9370] loop4: detected capacity change from 0 to 1024 [ 241.426237][ T9354] loop3: detected capacity change from 0 to 40427 [ 241.470764][ T4765] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 241.508005][ T9370] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 241.519394][ T4765] usb 2-1: config 0 has no interface number 0 [ 241.519461][ T4765] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.519500][ T4765] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 241.519524][ T4765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.532082][ T4765] usb 2-1: config 0 descriptor?? [ 241.557066][ T9354] F2FS-fs (loop3): invalid crc value [ 241.628503][ T9354] F2FS-fs (loop3): Found nat_bits in checkpoint [ 241.708025][ T4765] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 241.789529][ T9370] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 241.822032][ T9354] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 241.849369][ T9354] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 242.005514][ T6873] usb 2-1: USB disconnect, device number 14 [ 242.038969][ T9391] loop4: detected capacity change from 0 to 64 [ 242.067472][ T4194] attempt to access beyond end of device [ 242.067472][ T4194] loop3: rw=2049, want=45104, limit=40427 [ 242.248028][ T4202] hfs: node 4:3 still has 1 user(s)! [ 242.840714][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2047'. [ 243.043781][ T9427] program syz.3.2052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.297313][ T9439] netlink: 316 bytes leftover after parsing attributes in process `syz.0.2058'. [ 243.426950][ T9442] set_capacity_and_notify: 1 callbacks suppressed [ 243.426969][ T9442] loop2: detected capacity change from 0 to 2048 [ 243.544793][ T9442] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.937088][ T9420] loop4: detected capacity change from 0 to 32768 [ 243.963942][ T9468] loop3: detected capacity change from 0 to 512 [ 244.004948][ T9473] input: syz1 as /devices/virtual/input/input23 [ 244.088886][ T9468] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 244.128738][ T9468] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.258667][ T8937] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 244.326966][ T9468] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #12: comm syz.3.2070: Directory hole found for htree leaf block 0 [ 244.519242][ T9492] device gretap0 entered promiscuous mode [ 244.538617][ T8937] usb 3-1: Using ep0 maxpacket: 8 [ 244.714007][ T8937] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.741018][ T8937] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.766963][ T8937] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 244.787500][ T8937] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 244.813299][ T8937] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.870102][ T8937] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.892231][ T9511] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2087'. [ 244.918140][ T8937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.979731][ T8937] usbtmc: probe of 3-1:16.0 failed with error -22 [ 245.010102][ T9513] loop0: detected capacity change from 0 to 256 [ 245.061645][ T9513] exfat: Deprecated parameter 'namecase' [ 245.067553][ T9513] exfat: Deprecated parameter 'namecase' [ 245.092471][ T9513] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf24e9af, utbl_chksum : 0xe619d30d) [ 245.227058][ T6204] usb 3-1: USB disconnect, device number 13 [ 245.252015][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2092'. [ 245.587856][ T9540] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2100'. [ 245.627945][ T9544] loop0: detected capacity change from 0 to 512 [ 245.718422][ T9549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2105'. [ 245.762129][ T9544] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,noquota,quota,,errors=continue. Quota mode: writeback. [ 245.788340][ T9544] ext4 filesystem being mounted at /422/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.935665][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2111'. [ 245.935692][ T9558] loop4: detected capacity change from 0 to 512 [ 246.119776][ T9558] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 246.145809][ T9571] loop1: detected capacity change from 0 to 512 [ 246.153646][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 246.288396][ T9558] EXT4-fs error (device loop4): ext4_quota_enable:6440: comm syz.4.2109: Bad quota inum: 2, type: 1 [ 246.338303][ T9558] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 246.363630][ T9571] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2114: bg 0: block 5: invalid block bitmap [ 246.478258][ T9571] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 246.543764][ T9571] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2114: invalid indirect mapped block 3 (level 2) [ 246.558568][ T9589] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 246.568724][ T9571] EXT4-fs (loop1): 2 truncates cleaned up [ 246.578614][ T9571] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 246.635130][ T9589] EXT4-fs error (device loop4): ext4_quota_enable:6440: comm syz.4.2109: Bad quota inum: 2, type: 1 [ 246.691477][ T9589] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 246.713017][ T4765] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 246.780832][ T6873] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 246.789407][ T4765] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 247.070013][ T8937] Bluetooth: hci4: command 0x0406 tx timeout [ 247.178008][ T6873] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 247.195557][ T6873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.317992][ T6873] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 247.337568][ T6873] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 247.361128][ T6873] usb 4-1: Manufacturer: syz [ 247.382556][ T9619] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2132'. [ 247.397519][ T6873] usb 4-1: config 0 descriptor?? [ 247.449879][ T6873] igorplugusb 4-1:0.0: incorrect number of endpoints [ 247.670792][ T9631] loop4: detected capacity change from 0 to 1024 [ 247.680931][ T6204] usb 4-1: USB disconnect, device number 13 [ 247.741051][ T9633] loop2: detected capacity change from 0 to 256 [ 248.290994][ T9660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2152'. [ 248.356906][ T9660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2152'. [ 248.530869][ T9674] loop2: detected capacity change from 0 to 2048 [ 248.572404][ T9678] loop3: detected capacity change from 0 to 512 [ 248.597576][ T9674] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 248.641019][ T9680] loop1: detected capacity change from 0 to 512 [ 248.650008][ T9674] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.674865][ T9678] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.2159: inode #1: comm syz.3.2159: iget: illegal inode # [ 248.738358][ T9678] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.2159: error while reading EA inode 1 err=-117 [ 248.758828][ T9678] EXT4-fs (loop3): 1 orphan inode deleted [ 248.764801][ T9678] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 248.831245][ T9680] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.844286][ T9680] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.081709][ T6204] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 249.177151][ T9693] loop1: detected capacity change from 0 to 64 [ 249.467666][ T6204] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 249.475867][ T6204] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.522979][ T6204] usb 3-1: config 0 has no interface number 0 [ 249.542729][ T6204] usb 3-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 249.600999][ T9712] program syz.0.2175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.710183][ T9721] loop3: detected capacity change from 0 to 22 [ 249.747663][ T6204] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 249.756787][ T6204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.777278][ T6204] usb 3-1: Product: syz [ 249.781667][ T6204] usb 3-1: Manufacturer: syz [ 249.786291][ T6204] usb 3-1: SerialNumber: syz [ 249.791802][ T9721] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 249.821240][ T6204] usb 3-1: config 0 descriptor?? [ 249.858466][ T6204] cyberjack 3-1:0.69: required endpoints missing [ 249.906471][ T9721] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 250.042890][ T9726] loop3: detected capacity change from 0 to 64 [ 250.069059][ T8937] usb 3-1: USB disconnect, device number 14 [ 250.090265][ T9726] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 250.117337][ T8936] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 250.391930][ T9732] loop0: detected capacity change from 0 to 512 [ 250.398165][ T8936] usb 2-1: Using ep0 maxpacket: 16 [ 250.522566][ T9732] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 250.557458][ T8936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.597305][ T8936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.643811][ T9732] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000007,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 250.657263][ T8936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 250.673938][ T8936] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 250.687315][ T8936] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.719462][ T9732] ext4 filesystem being mounted at /436/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.797416][ T8936] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 250.806810][ T8936] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 250.815909][ T8936] usb 2-1: Manufacturer: syz [ 250.823247][ T8936] usb 2-1: config 0 descriptor?? [ 250.832012][ T9732] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.2184: Allocating blocks 64-65 which overlap fs metadata [ 250.899936][ T9732] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.2184: Allocating blocks 64-65 which overlap fs metadata [ 250.937152][ T6204] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 250.948490][ T9731] EXT4-fs (loop0): pa ffff88807420cb60: logic 1, phys. 44, len 84 [ 250.957294][ T9731] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4904: group 0, free 63, pa_free 64 [ 251.106727][ T9736] loop3: detected capacity change from 0 to 40427 [ 251.160600][ T9736] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 251.187629][ T9736] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 251.210153][ T9736] F2FS-fs (loop3): invalid crc value [ 251.217180][ T6204] usb 3-1: Using ep0 maxpacket: 8 [ 251.226299][ T9736] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 251.237924][ T8936] rc_core: IR keymap rc-hauppauge not found [ 251.243951][ T8936] Registered IR keymap rc-empty [ 251.250034][ T8936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.257528][ T8934] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 251.307080][ T8936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.337227][ T6204] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 251.338994][ T8936] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 251.345545][ T6204] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.377997][ T9736] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 251.380378][ T8936] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 251.385197][ T9736] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 251.428605][ T8936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.436071][ T6204] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.451044][ T6204] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.462620][ T6204] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.467844][ T8936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.486504][ T6204] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 251.495945][ T6204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.507283][ T8936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.537244][ T8936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.567823][ T8936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.607869][ T8936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.637492][ T8936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.680497][ T8934] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 251.689875][ T8936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.697284][ T8934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.710437][ T8934] usb 5-1: config 0 descriptor?? [ 251.736981][ T8936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.748524][ T8934] cp210x 5-1:0.0: cp210x converter detected [ 251.777141][ T6204] usb 3-1: GET_CAPABILITIES returned 0 [ 251.778035][ T8936] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 251.783412][ T6204] usbtmc 3-1:16.0: can't read capabilities [ 251.844363][ T8936] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 251.856379][ T9764] loop3: detected capacity change from 0 to 128 [ 251.868692][ T8936] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 251.888077][ T8936] usb 2-1: USB disconnect, device number 15 [ 251.950779][ T9764] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 251.981143][ T9764] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 252.046914][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 252.062593][ T154] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 252.065562][ T4178] usb 3-1: USB disconnect, device number 15 [ 252.202521][ T8934] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 252.251085][ T8934] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 252.266214][ T8934] usb 5-1: cp210x converter now attached to ttyUSB0 [ 252.296283][ T9770] input: syz1 as /devices/virtual/input/input25 [ 252.435201][ T9779] loop1: detected capacity change from 0 to 64 [ 252.454020][ T4178] usb 5-1: USB disconnect, device number 13 [ 252.473641][ T4178] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.483505][ T4178] cp210x 5-1:0.0: device disconnected [ 252.762734][ T9790] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 253.070283][ T9810] device erspan0 entered promiscuous mode [ 253.827824][ T9850] tipc: New replicast peer: 172.20.20.187 [ 253.845004][ T9850] tipc: Enabled bearer , priority 10 [ 253.920184][ T9852] loop3: detected capacity change from 0 to 256 [ 254.469201][ T9864] loop3: detected capacity change from 0 to 64 [ 254.673334][ T9874] loop0: detected capacity change from 0 to 256 [ 254.749725][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 254.749743][ T26] audit: type=1800 audit(1783115691.790:54): pid=9864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2241" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 254.829197][ T9874] FAT-fs (loop0): Directory bread(block 64) failed [ 254.835998][ T9874] FAT-fs (loop0): Directory bread(block 65) failed [ 254.874071][ T9874] FAT-fs (loop0): Directory bread(block 66) failed [ 254.904383][ T9874] FAT-fs (loop0): Directory bread(block 67) failed [ 254.936613][ T9874] FAT-fs (loop0): Directory bread(block 68) failed [ 254.962439][ T9874] FAT-fs (loop0): Directory bread(block 69) failed [ 254.972619][ T8936] tipc: Node number set to 167902973 [ 255.046669][ T9874] FAT-fs (loop0): Directory bread(block 70) failed [ 255.053434][ T9874] FAT-fs (loop0): Directory bread(block 71) failed [ 255.082955][ T9874] FAT-fs (loop0): Directory bread(block 72) failed [ 255.126746][ T9874] FAT-fs (loop0): Directory bread(block 73) failed [ 255.168340][ T9893] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2254'. [ 255.188044][ T9893] netem: invalid attributes len -24 [ 255.189247][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.193984][ T9893] netem: change failed [ 255.200351][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.209562][ T9892] program syz.2.2253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.444988][ T9899] loop2: detected capacity change from 0 to 128 [ 255.543046][ T9904] loop0: detected capacity change from 0 to 64 [ 255.596648][ T9899] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.636452][ T9899] ext4 filesystem being mounted at /472/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.696576][ T9908] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2260'. [ 256.145471][ T9887] loop3: detected capacity change from 0 to 40427 [ 256.185429][ T9887] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 256.195464][ T9887] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 256.216265][ T4178] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 256.266615][ T9887] F2FS-fs (loop3): invalid crc value [ 256.334478][ T9887] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 256.466476][ T4178] usb 2-1: Using ep0 maxpacket: 8 [ 256.473514][ T9887] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 256.488819][ T9887] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 256.555933][ T144] attempt to access beyond end of device [ 256.555933][ T144] loop3: rw=2049, want=45104, limit=40427 [ 256.666434][ T4178] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 256.675880][ T4178] usb 2-1: config 1 has no interface number 0 [ 256.796766][ T9934] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 256.805354][ T9934] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 256.825026][ T9916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.926658][ T4178] usb 2-1: string descriptor 0 read error: -22 [ 256.937037][ T4178] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 256.977708][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.993951][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2274'. [ 257.069339][ T4178] usb 2-1: MIDIStreaming interface descriptor not found [ 257.142942][ T9944] sctp: [Deprecated]: syz.2.2278 (pid 9944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.142942][ T9944] Use struct sctp_sack_info instead [ 257.271587][ T8934] usb 2-1: USB disconnect, device number 16 [ 257.362318][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2280'. [ 257.488020][ T9959] loop3: detected capacity change from 0 to 256 [ 257.578031][ T9959] FAT-fs (loop3): Directory bread(block 64) failed [ 257.607898][ T9959] FAT-fs (loop3): Directory bread(block 65) failed [ 257.661382][ T9959] FAT-fs (loop3): Directory bread(block 66) failed [ 257.679863][ T9959] FAT-fs (loop3): Directory bread(block 67) failed [ 257.699321][ T9959] FAT-fs (loop3): Directory bread(block 68) failed [ 257.730198][ T9959] FAT-fs (loop3): Directory bread(block 69) failed [ 257.745221][ T9959] FAT-fs (loop3): Directory bread(block 70) failed [ 257.761706][ T9959] FAT-fs (loop3): Directory bread(block 71) failed [ 257.771975][ T9959] FAT-fs (loop3): Directory bread(block 72) failed [ 257.779711][ T9959] FAT-fs (loop3): Directory bread(block 73) failed [ 258.056540][ T9984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2294'. [ 258.858756][T10005] loop0: detected capacity change from 0 to 256 [ 258.955999][ T4178] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 259.226391][T10011] team0: Device gtp0 is of different type [ 259.336060][ T4178] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.344733][ T4178] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.368391][ T4178] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.386625][ T4178] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 259.423331][ T4178] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 259.556084][ T4178] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.566492][ T4178] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.575141][ T4178] usb 5-1: Product: syz [ 259.579925][ T4178] usb 5-1: Manufacturer: syz [ 259.632281][T10027] loop1: detected capacity change from 0 to 512 [ 259.639562][ T4178] cdc_wdm 5-1:1.0: skipping garbage [ 259.652411][ T4178] cdc_wdm 5-1:1.0: skipping garbage [ 259.664168][ T4178] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 259.670759][ T4178] cdc_wdm 5-1:1.0: Unknown control protocol [ 259.720323][T10027] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 259.752277][T10027] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000007,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 259.758236][ T8934] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 259.776909][ T4765] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 259.793003][T10027] ext4 filesystem being mounted at /457/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.844169][T10027] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.2315: Allocating blocks 64-65 which overlap fs metadata [ 259.861627][T10027] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.2315: Allocating blocks 64-65 which overlap fs metadata [ 259.883011][T10026] EXT4-fs (loop1): pa ffff88807420cc40: logic 1, phys. 44, len 84 [ 259.891131][T10026] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4904: group 0, free 63, pa_free 64 [ 260.066988][ T8934] usb 4-1: Using ep0 maxpacket: 16 [ 260.072365][ T4765] usb 3-1: Using ep0 maxpacket: 16 [ 260.104137][ T4178] usb 5-1: USB disconnect, device number 14 [ 260.212580][T10040] delete_channel: no stack [ 260.248636][ T8934] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.259954][ T4765] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.274816][ T8934] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.285336][ T4765] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.295355][ T4765] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 260.309267][ T8934] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 260.322554][ T8934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.329708][ T4765] usb 3-1: config 0 interface 0 has no altsetting 0 [ 260.336507][ T8934] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 260.345586][ T8934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.353727][ T4765] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 260.362939][ T4765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.376323][ T8934] usb 4-1: config 0 descriptor?? [ 260.381588][ T4765] usb 3-1: config 0 descriptor?? [ 260.660904][T10057] loop4: detected capacity change from 0 to 512 [ 260.685975][T10057] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 260.716570][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2328'. [ 260.725678][T10059] netlink: 580 bytes leftover after parsing attributes in process `syz.1.2328'. [ 260.732759][T10057] EXT4-fs (loop4): 1 truncate cleaned up [ 260.761377][T10057] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.881094][ T8934] hid (null): unknown global tag 0xd [ 260.887449][ T4765] hid (null): bogus close delimiter [ 260.892871][ T4765] hid (null): bogus close delimiter [ 260.920465][ T4765] hid (null): global environment stack underflow [ 260.946336][ T4765] hid (null): report_id 0 is invalid [ 261.091828][ T6204] usb 4-1: USB disconnect, device number 14 [ 261.122274][ T4178] usb 3-1: USB disconnect, device number 16 [ 261.180876][T10063] loop1: detected capacity change from 0 to 32768 [ 261.254927][T10071] loop4: detected capacity change from 0 to 2048 [ 261.271063][T10063] JBD2: Ignoring recovery information on journal [ 261.339707][T10071] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.360823][T10063] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 261.549375][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 261.726700][T10082] loop3: detected capacity change from 0 to 128 [ 261.772509][T10083] loop2: detected capacity change from 0 to 2048 [ 261.834948][T10083] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.875724][ T8934] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 262.005155][T10087] loop3: detected capacity change from 0 to 8 [ 262.099997][T10087] SQUASHFS error: Unable to read inode 0x11f [ 262.135647][ T8934] usb 5-1: Using ep0 maxpacket: 32 [ 262.266068][ T8934] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 262.274346][ T8934] usb 5-1: config 0 has no interface number 0 [ 262.286722][ T8934] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 262.302872][ T8934] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 262.347658][T10089] loop2: detected capacity change from 0 to 32768 [ 262.396783][ T4178] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 262.495905][ T4765] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 262.503886][ T8934] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 262.513191][ T8934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.531661][ T8934] usb 5-1: Product: syz [ 262.541865][ T8934] usb 5-1: Manufacturer: syz [ 262.556037][ T8934] usb 5-1: SerialNumber: syz [ 262.595073][ T8934] usb 5-1: config 0 descriptor?? [ 262.732839][T10104] binder: 10103:10104 ioctl c0306201 0 returned -14 [ 262.765800][ T4178] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 262.779524][ T4178] usb 2-1: config 0 has no interface number 0 [ 262.811082][ T4178] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 262.832522][T10109] sctp: [Deprecated]: syz.0.2350 (pid 10109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.832522][T10109] Use struct sctp_sack_info instead [ 262.844979][ T4178] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 262.877079][ T4178] usb 2-1: config 0 interface 255 has no altsetting 0 [ 262.883938][ T4178] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 262.893285][ T4178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.905849][ T4765] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 262.915039][ T4178] usb 2-1: config 0 descriptor?? [ 262.924338][ T4765] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 262.945069][ T4765] usb 4-1: config 8 has no interface number 0 [ 262.954407][ T4765] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 262.971151][ T4765] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.018330][T10113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2352'. [ 263.116983][ T8934] radio-si470x 5-1:0.35: DeviceID=0xb980 ChipID=0x0000 [ 263.130980][ T8934] radio-si470x 5-1:0.35: This driver is known to work with firmware version 12, [ 263.149818][ T8934] radio-si470x 5-1:0.35: but the device has firmware version 0. [ 263.159059][ T4765] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 263.168595][ T4765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.182273][ T4765] usb 4-1: Product: syz [ 263.195806][ T4178] usb 2-1: string descriptor 0 read error: -71 [ 263.208013][ T4765] usb 4-1: Manufacturer: syz [ 263.213501][ T4765] usb 4-1: SerialNumber: syz [ 263.224324][ T4178] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 263.274046][T10126] loop2: detected capacity change from 0 to 512 [ 263.306625][ T4178] usb 2-1: USB disconnect, device number 17 [ 263.323385][T10126] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 263.333653][ T8934] radio-si470x 5-1:0.35: software version 185, hardware version 128 [ 263.347140][ T8934] radio-si470x 5-1:0.35: If you have some trouble using this driver, [ 263.378746][ T8934] radio-si470x 5-1:0.35: please report to V4L ML at linux-media@vger.kernel.org [ 263.395381][T10126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 263.414050][T10126] System zones: 1-12 [ 263.437887][T10126] EXT4-fs (loop2): 1 truncate cleaned up [ 263.443759][T10126] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,nodiscard,,errors=continue. Quota mode: none. [ 263.533940][ T4765] usb 4-1: USB disconnect, device number 15 [ 263.556978][ T8934] radio-si470x 5-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 263.579860][ T8934] radio-si470x 5-1:0.35: submitting int urb failed (-90) [ 263.625636][ T8934] radio-si470x 5-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 263.652930][T10135] loop2: detected capacity change from 0 to 512 [ 263.662789][ T8934] radio-si470x: probe of 5-1:0.35 failed with error -22 [ 263.677397][T10135] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 263.707999][T10135] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000007,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 263.728199][T10135] ext4 filesystem being mounted at /497/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.755645][ T8934] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 263.796526][T10135] [ 263.798926][T10135] ====================================================== [ 263.806363][T10135] WARNING: possible circular locking dependency detected [ 263.813440][T10135] syzkaller #0 Not tainted [ 263.817971][T10135] ------------------------------------------------------ [ 263.825012][T10135] syz.2.2359/10135 is trying to acquire lock: [ 263.831120][T10135] ffff88805e829768 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 263.840237][T10135] [ 263.840237][T10135] but task is already holding lock: [ 263.847810][T10135] ffff88805eb1b450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 263.857465][T10135] [ 263.857465][T10135] which lock already depends on the new lock. [ 263.857465][T10135] [ 263.867181][ T8934] usb 5-1: USB disconnect, device number 15 [ 263.868092][T10135] [ 263.868092][T10135] the existing dependency chain (in reverse order) is: [ 263.868101][T10135] [ 263.868101][T10135] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 263.890997][T10135] down_write+0x38/0x60 [ 263.895712][T10135] ext4_map_blocks+0x8c4/0x1a50 [ 263.901133][T10135] ext4_getblk+0x176/0x670 [ 263.906107][T10135] ext4_bread+0x26/0x180 [ 263.910909][T10135] ext4_quota_write+0x237/0x580 [ 263.916295][T10135] do_insert_tree+0x1193/0x19c0 [ 263.921696][T10135] do_insert_tree+0x5c4/0x19c0 [ 263.926985][T10135] do_insert_tree+0x5c4/0x19c0 [ 263.932275][T10135] do_insert_tree+0x5c4/0x19c0 [ 263.937571][T10135] qtree_write_dquot+0x354/0x4a0 [ 263.943048][T10135] v2_write_dquot+0x108/0x190 [ 263.948260][T10135] dquot_acquire+0x2d5/0x520 [ 263.953418][T10135] ext4_acquire_dquot+0x2e3/0x4a0 [ 263.959188][T10135] dqget+0x713/0xbb0 [ 263.963730][T10135] __dquot_initialize+0x3a9/0xd00 [ 263.969314][T10135] ext4_process_orphan+0x4c/0x2e0 [ 263.975007][T10135] ext4_orphan_cleanup+0xad8/0x1320 [ 263.980761][T10135] ext4_fill_super+0x8c65/0x93f0 [ 263.986343][T10135] mount_bdev+0x28a/0x3c0 [ 263.991228][T10135] legacy_get_tree+0xe6/0x180 [ 263.996673][T10135] vfs_get_tree+0x88/0x270 [ 264.002353][T10135] do_new_mount+0x247/0xa40 [ 264.007418][T10135] __se_sys_mount+0x2e3/0x3d0 [ 264.012700][T10135] do_syscall_64+0x4c/0xa0 [ 264.017687][T10135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.024147][T10135] [ 264.024147][T10135] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 264.032417][T10135] down_read+0x44/0x2e0 [ 264.037364][T10135] v2_read_dquot+0x4a/0x110 [ 264.042433][T10135] dquot_acquire+0x152/0x520 [ 264.047583][T10135] ext4_acquire_dquot+0x2e3/0x4a0 [ 264.053250][T10135] dqget+0x713/0xbb0 [ 264.057716][T10135] __dquot_initialize+0x3a9/0xd00 [ 264.063336][T10135] ext4_file_open+0x2e4/0x700 [ 264.068581][T10135] do_dentry_open+0x7f7/0xf90 [ 264.073821][T10135] path_openat+0x2718/0x2fb0 [ 264.079061][T10135] do_filp_open+0x1df/0x400 [ 264.084157][T10135] do_sys_openat2+0x14b/0x500 [ 264.089455][T10135] __x64_sys_open+0x11b/0x140 [ 264.095207][T10135] do_syscall_64+0x4c/0xa0 [ 264.100216][T10135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.107455][T10135] [ 264.107455][T10135] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 264.115231][T10135] __lock_acquire+0x2c66/0x7b50 [ 264.121024][T10135] lock_acquire+0x19e/0x400 [ 264.126181][T10135] __mutex_lock_common+0x1e5/0x2400 [ 264.131944][T10135] mutex_lock_nested+0x17/0x20 [ 264.137264][T10135] dquot_commit+0x5a/0x410 [ 264.142241][T10135] ext4_write_dquot+0x1f0/0x360 [ 264.147662][T10135] mark_all_dquot_dirty+0xf9/0x400 [ 264.153334][T10135] __dquot_alloc_space+0x5cb/0xe10 [ 264.159047][T10135] ext4_mb_new_blocks+0xf80/0x47c0 [ 264.164723][T10135] ext4_ext_map_blocks+0x17d1/0x63d0 [ 264.171017][T10135] ext4_map_blocks+0x97f/0x1a50 [ 264.176434][T10135] _ext4_get_block+0x1e7/0x540 [ 264.181765][T10135] ext4_block_write_begin+0x5ff/0x1200 [ 264.187978][T10135] ext4_write_begin+0x6c8/0x15d0 [ 264.193449][T10135] ext4_da_write_begin+0x442/0xb20 [ 264.199139][T10135] generic_perform_write+0x2b6/0x550 [ 264.205025][T10135] ext4_buffered_write_iter+0x24e/0x3a0 [ 264.211132][T10135] ext4_file_write_iter+0x73f/0x1720 [ 264.216986][T10135] do_iter_readv_writev+0x47d/0x5f0 [ 264.222825][T10135] do_iter_write+0x1f8/0x7a0 [ 264.227969][T10135] iter_file_splice_write+0x6be/0xcf0 [ 264.233985][T10135] direct_splice_actor+0xe1/0x130 [ 264.239567][T10135] splice_direct_to_actor+0x4e8/0xc00 [ 264.245688][T10135] do_splice_direct+0x1d4/0x2f0 [ 264.251232][T10135] do_sendfile+0x524/0xe30 [ 264.256325][T10135] __se_sys_sendfile64+0x141/0x1a0 [ 264.262518][T10135] do_syscall_64+0x4c/0xa0 [ 264.267508][T10135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.274099][T10135] [ 264.274099][T10135] other info that might help us debug this: [ 264.274099][T10135] [ 264.284445][T10135] Chain exists of: [ 264.284445][T10135] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 264.284445][T10135] [ 264.298554][T10135] Possible unsafe locking scenario: [ 264.298554][T10135] [ 264.306025][T10135] CPU0 CPU1 [ 264.311416][T10135] ---- ---- [ 264.316881][T10135] lock(&ei->i_data_sem/2); [ 264.321501][T10135] lock(&s->s_dquot.dqio_sem); [ 264.328969][T10135] lock(&ei->i_data_sem/2); [ 264.336102][T10135] lock(&dquot->dq_lock); [ 264.340531][T10135] [ 264.340531][T10135] *** DEADLOCK *** [ 264.340531][T10135] [ 264.348682][T10135] 4 locks held by syz.2.2359/10135: [ 264.353890][T10135] #0: ffff88807b808460 (sb_writers#5){.+.+}-{0:0}, at: do_sendfile+0x4ff/0xe30 [ 264.362967][T10135] #1: ffff88805eb1b5c8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_buffered_write_iter+0xa1/0x3a0 [ 264.374391][T10135] #2: ffff88805eb1b450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 264.384337][T10135] #3: ffffffff8c441798 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 264.393411][T10135] [ 264.393411][T10135] stack backtrace: [ 264.399310][T10135] CPU: 0 PID: 10135 Comm: syz.2.2359 Not tainted syzkaller #0 [ 264.406865][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 264.416941][T10135] Call Trace: [ 264.420269][T10135] [ 264.423213][T10135] dump_stack_lvl+0x188/0x250 [ 264.427910][T10135] ? load_image+0x410/0x410 [ 264.432429][T10135] ? show_regs_print_info+0x20/0x20 [ 264.437648][T10135] ? print_circular_bug+0x12b/0x1a0 [ 264.442880][T10135] check_noncircular+0x296/0x330 [ 264.447848][T10135] ? add_chain_block+0x9b0/0x9b0 [ 264.452800][T10135] ? lockdep_lock+0xf1/0x1f0 [ 264.457410][T10135] ? mark_lock+0x94/0x320 [ 264.461749][T10135] ? _find_first_zero_bit+0xd1/0xf0 [ 264.466960][T10135] __lock_acquire+0x2c66/0x7b50 [ 264.471834][T10135] ? check_path+0x21/0x40 [ 264.476207][T10135] ? verify_lock_unused+0x140/0x140 [ 264.481421][T10135] ? lockdep_lock+0xf1/0x1f0 [ 264.486034][T10135] ? lockdep_unlock+0x143/0x2e0 [ 264.490905][T10135] ? mark_lock+0x94/0x320 [ 264.495248][T10135] lock_acquire+0x19e/0x400 [ 264.499852][T10135] ? dquot_commit+0x5a/0x410 [ 264.504466][T10135] ? __might_sleep+0xf0/0xf0 [ 264.509158][T10135] ? read_lock_is_recursive+0x10/0x10 [ 264.514545][T10135] ? verify_lock_unused+0x140/0x140 [ 264.519773][T10135] __mutex_lock_common+0x1e5/0x2400 [ 264.524989][T10135] ? dquot_commit+0x5a/0x410 [ 264.529597][T10135] ? dquot_commit+0x5a/0x410 [ 264.534201][T10135] ? __might_sleep+0xf0/0xf0 [ 264.538804][T10135] ? mutex_lock_io_nested+0x60/0x60 [ 264.544172][T10135] mutex_lock_nested+0x17/0x20 [ 264.549216][T10135] dquot_commit+0x5a/0x410 [ 264.553841][T10135] ext4_write_dquot+0x1f0/0x360 [ 264.558773][T10135] mark_all_dquot_dirty+0xf9/0x400 [ 264.563995][T10135] __dquot_alloc_space+0x5cb/0xe10 [ 264.569132][T10135] ext4_mb_new_blocks+0xf80/0x47c0 [ 264.574395][T10135] ? memset+0x1e/0x40 [ 264.578391][T10135] ? ext4_mb_pa_callback+0xd0/0xd0 [ 264.583785][T10135] ? ext4_ext_find_goal+0xed/0x1d0 [ 264.589990][T10135] ext4_ext_map_blocks+0x17d1/0x63d0 [ 264.595295][T10135] ? lockdep_hardirqs_on+0x94/0x140 [ 264.601552][T10135] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 264.607812][T10135] ? lock_acquire+0x208/0x400 [ 264.612779][T10135] ? ext4_ext_release+0x10/0x10 [ 264.618173][T10135] ? rwsem_write_trylock+0x135/0x1c0 [ 264.623569][T10135] ? ext4_es_lookup_extent+0x5fd/0x9f0 [ 264.629153][T10135] ext4_map_blocks+0x97f/0x1a50 [ 264.634115][T10135] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.640234][T10135] ? ext4_issue_zeroout+0x250/0x250 [ 264.645649][T10135] _ext4_get_block+0x1e7/0x540 [ 264.650433][T10135] ? ext4_get_block+0x40/0x40 [ 264.655132][T10135] ext4_block_write_begin+0x5ff/0x1200 [ 264.660731][T10135] ? ext4_es_is_delayed+0x40/0x40 [ 264.666290][T10135] ? ext4_print_free_blocks+0x380/0x380 [ 264.672052][T10135] ? __ext4_journal_start_sb+0x1bd/0x360 [ 264.677699][T10135] ext4_write_begin+0x6c8/0x15d0 [ 264.682656][T10135] ? ext4_readahead+0x110/0x110 [ 264.687517][T10135] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 264.693767][T10135] ? lockdep_hardirqs_on+0x94/0x140 [ 264.698978][T10135] ext4_da_write_begin+0x442/0xb20 [ 264.704110][T10135] ? __vfs_getxattr+0x3b2/0x3e0 [ 264.708974][T10135] ? ext4_set_page_dirty+0x320/0x320 [ 264.714468][T10135] ? ktime_get_coarse_real_ts64+0x106/0x120 [ 264.720466][T10135] ? current_time+0x1d8/0x2c0 [ 264.725157][T10135] generic_perform_write+0x2b6/0x550 [ 264.730470][T10135] ? grab_cache_page_write_begin+0xa0/0xa0 [ 264.736289][T10135] ? rwsem_write_trylock+0x135/0x1c0 [ 264.741594][T10135] ? clear_nonspinnable+0x60/0x60 [ 264.746636][T10135] ? ext4_write_checks+0x246/0x2c0 [ 264.751773][T10135] ext4_buffered_write_iter+0x24e/0x3a0 [ 264.757339][T10135] ext4_file_write_iter+0x73f/0x1720 [ 264.762647][T10135] ? rcu_lock_release+0x5/0x20 [ 264.767444][T10135] ? __lock_acquire+0x7b50/0x7b50 [ 264.772511][T10135] ? ext4_file_read_iter+0x6f0/0x6f0 [ 264.777815][T10135] ? aa_file_perm+0x38b/0xe80 [ 264.782516][T10135] ? __kasan_kmalloc+0xaf/0xe0 [ 264.787298][T10135] ? splice_direct_to_actor+0x4e8/0xc00 [ 264.792864][T10135] do_iter_readv_writev+0x47d/0x5f0 [ 264.798199][T10135] ? aa_path_link+0x8a0/0x8a0 [ 264.802900][T10135] ? generic_file_rw_checks+0x280/0x280 [ 264.808503][T10135] ? common_file_perm+0x171/0x1c0 [ 264.813539][T10135] ? fsnotify_perm+0x5d/0x560 [ 264.818232][T10135] ? security_file_permission+0x75/0xa0 [ 264.823797][T10135] do_iter_write+0x1f8/0x7a0 [ 264.828433][T10135] ? memset+0x1e/0x40 [ 264.832880][T10135] ? iov_iter_bvec+0xb4/0x170 [ 264.837587][T10135] iter_file_splice_write+0x6be/0xcf0 [ 264.843173][T10135] ? splice_from_pipe+0x180/0x180 [ 264.848279][T10135] ? generic_file_splice_read+0x463/0x5f0 [ 264.854030][T10135] ? splice_shrink_spd+0xc0/0xc0 [ 264.859019][T10135] ? splice_from_pipe+0x180/0x180 [ 264.864066][T10135] direct_splice_actor+0xe1/0x130 [ 264.869108][T10135] splice_direct_to_actor+0x4e8/0xc00 [ 264.874586][T10135] ? direct_file_splice_eof+0xa0/0xa0 [ 264.880260][T10135] ? pipe_to_sendpage+0x320/0x320 [ 264.885297][T10135] ? common_file_perm+0x171/0x1c0 [ 264.890335][T10135] ? fsnotify_perm+0x5d/0x560 [ 264.895023][T10135] ? security_file_permission+0x75/0xa0 [ 264.900579][T10135] do_splice_direct+0x1d4/0x2f0 [ 264.905444][T10135] ? splice_direct_to_actor+0xc00/0xc00 [ 264.911005][T10135] ? rcu_read_lock_any_held+0xb0/0x130 [ 264.916480][T10135] ? do_splice_direct+0x2f0/0x2f0 [ 264.921621][T10135] ? common_file_perm+0x171/0x1c0 [ 264.926661][T10135] do_sendfile+0x524/0xe30 [ 264.931095][T10135] ? do_pwritev+0x3a0/0x3a0 [ 264.935611][T10135] ? __lock_acquire+0x7b50/0x7b50 [ 264.940652][T10135] __se_sys_sendfile64+0x141/0x1a0 [ 264.945954][T10135] ? lock_chain_count+0x20/0x20 [ 264.950822][T10135] ? __x64_sys_sendfile64+0xa0/0xa0 [ 264.956193][T10135] ? lockdep_hardirqs_on+0x94/0x140 [ 264.961511][T10135] do_syscall_64+0x4c/0xa0 [ 264.965966][T10135] ? clear_bhb_loop+0x30/0x80 [ 264.970671][T10135] ? clear_bhb_loop+0x30/0x80 [ 264.975372][T10135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 264.981285][T10135] RIP: 0033:0x7f04c69c8e59 [ 264.985715][T10135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.005538][T10135] RSP: 002b:00007f04c4c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 265.013974][T10135] RAX: ffffffffffffffda RBX: 00007f04c6c50fa0 RCX: 00007f04c69c8e59 [ 265.022063][T10135] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 265.030139][T10135] RBP: 00007f04c6a5ee6f R08: 0000000000000000 R09: 0000000000000000 [ 265.038995][T10135] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000 [ 265.047119][T10135] R13: 00007f04c6c51038 R14: 00007f04c6c50fa0 R15: 00007ffcdfb47e88 [ 265.055133][T10135] [ 265.083135][T10144] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.103308][T10135] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.2359: Allocating blocks 64-65 which overlap fs metadata [ 265.134421][T10135] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.2359: Allocating blocks 64-65 which overlap fs metadata [ 265.177986][T10134] EXT4-fs (loop2): pa ffff88801d11a2a0: logic 1, phys. 44, len 84 [ 265.186194][T10134] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 63, pa_free 64