last executing test programs: 2m28.165974566s ago: executing program 2 (id=487): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file1/file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 2m27.973557853s ago: executing program 2 (id=489): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0], 0x43, 0x242, &(0x7f0000000300)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10011}}, 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='`'], 0x60}, 0x1, 0x0, 0x0, 0x20004815}, 0x8014) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 2m27.853172336s ago: executing program 2 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x600080d4}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 2m27.689499632s ago: executing program 2 (id=494): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 2m27.641650373s ago: executing program 2 (id=495): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 2m27.285255395s ago: executing program 2 (id=502): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x30, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000002200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0) 2m26.944376236s ago: executing program 32 (id=502): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x30, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000002200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0) 2m24.673569909s ago: executing program 1 (id=523): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="09000000010001", 0x7) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 2m24.558129163s ago: executing program 1 (id=524): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB='@!/\x00\x00\x00/'], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2m22.385488674s ago: executing program 1 (id=535): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000540)={[{@file_umask={'file_umask', 0x3d, 0x4bd}}, {@codepage={'codepage', 0x3d, 'iso8859-15'}}, {@uid}, {@part={'part', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@umask={'umask', 0x3d, 0x2}}, {@type={'type', 0x3d, "66dc3f23"}}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x4, 0x338, &(0x7f0000000a00)="$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") openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 2m22.075565814s ago: executing program 1 (id=537): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@dioread_lock}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@init_itable_val}, {@nodioread_nolock}]}, 0x1, 0x5d4, &(0x7f00000015c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000006400)=""/4109, 0x100d) 2m21.28481867s ago: executing program 1 (id=542): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 2m18.925524627s ago: executing program 1 (id=559): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') 2m18.585182937s ago: executing program 33 (id=559): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') 47.828981436s ago: executing program 5 (id=1293): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 47.277465584s ago: executing program 5 (id=1302): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') 47.202005127s ago: executing program 5 (id=1303): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) 47.09013626s ago: executing program 5 (id=1306): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x4000, &(0x7f0000000400)={[{@errors_remount}, {@nodelalloc}]}, 0x1, 0x477, &(0x7f0000000980)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f0000000540)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) 46.665183034s ago: executing program 5 (id=1312): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 45.195918231s ago: executing program 5 (id=1328): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000840)={[{@noblock_validity}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x4a9, &(0x7f0000000d00)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 45.012883277s ago: executing program 34 (id=1328): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000840)={[{@noblock_validity}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x4a9, &(0x7f0000000d00)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 26.959865454s ago: executing program 3 (id=1443): r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r0, 0xb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 26.843509148s ago: executing program 3 (id=1444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x100}, 0x1c) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x500, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 26.76538154s ago: executing program 3 (id=1446): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x7) 26.701532772s ago: executing program 3 (id=1447): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@barrier}, {@barrier_val}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@noauto_da_alloc}, {@quota}, {@quota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) 26.364763333s ago: executing program 3 (id=1449): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f00008f4000/0x12000)=nil, &(0x7f000086e000/0x1000)=nil, 0x12000}) 25.021549137s ago: executing program 7 (id=1460): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'geneve0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 24.92905904s ago: executing program 7 (id=1462): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x48880) 24.797469804s ago: executing program 7 (id=1464): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x90) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) 24.783226095s ago: executing program 7 (id=1465): mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@discard}, {@grpjquota}, {@auto_da_alloc}, {@nodiscard}]}, 0x1, 0x476, &(0x7f0000000380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 24.555786032s ago: executing program 3 (id=1466): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 24.460121705s ago: executing program 35 (id=1466): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 24.395702497s ago: executing program 7 (id=1468): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f00000004c0)=[{0x6, 0xe000, 0x3, &(0x7f0000000200)="c7f472"}, {0x80, 0x22, 0x0, 0x0}], 0x2}) 23.656802111s ago: executing program 7 (id=1473): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000410, &(0x7f0000000180), 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) 23.298647663s ago: executing program 36 (id=1473): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000410, &(0x7f0000000180), 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x40009965, r0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) 3.740743298s ago: executing program 6 (id=1581): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001140)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b1, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 3.358228451s ago: executing program 6 (id=1583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000071, 0x0, 0x8ad}]}) 2.876757166s ago: executing program 6 (id=1584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6000}]}, 0x5c}}, 0x0) 2.817582698s ago: executing program 0 (id=1585): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x5760, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 2.688624142s ago: executing program 4 (id=1587): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) 2.625539105s ago: executing program 6 (id=1588): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_a, @initial, {0x7, 0xa}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb1}, @void, @val={0x72, 0x6}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.484586359s ago: executing program 6 (id=1590): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009640)='./file0\x00', 0x8004, &(0x7f0000000100)={[{@grpquota}, {@filestreams}]}, 0x1, 0x9761, &(0x7f0000033240)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x80000, 0x4) r1 = open(&(0x7f0000000340)='./bus\x00', 0x1ad941, 0x176) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 2.356289383s ago: executing program 4 (id=1591): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) 2.16554127s ago: executing program 4 (id=1592): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {0xbb, 0x0, 0x9, 0x8}, 0x4a, [0x6, 0x2, 0x8, 0x8, 0x0, 0x0, 0xb06, 0x9, 0x1, 0x1000, 0x3269, 0x7, 0x0, 0x8000, 0xb, 0x7ff, 0x62f3f704, 0xe, 0xb0, 0x5, 0xf, 0x1000, 0x40, 0x6, 0x3, 0xdf4c, 0x3, 0x7, 0x5, 0x5, 0x4, 0x6, 0x3, 0x5, 0xff, 0x3e, 0x2, 0x81, 0x40, 0x4, 0x6, 0x8, 0x6, 0x2, 0xfff, 0x2d86d706, 0x24cd93c, 0x8, 0x1, 0x0, 0x2, 0x8, 0x1, 0x469, 0xffff, 0xe, 0x3, 0x4, 0xffffff7f, 0x1, 0x800, 0x6, 0x10, 0xc], [0xfffffffa, 0xc330, 0x480000, 0x5, 0x0, 0x2, 0x3f00, 0xfffffff6, 0x80000001, 0x37f, 0x2f84, 0x1, 0x5, 0x332c, 0x1, 0x2, 0xffff, 0x5, 0xfffffe00, 0x4, 0x4, 0x4, 0x4, 0x4, 0x0, 0xa, 0x1, 0x6, 0x7, 0x7f, 0x8, 0x9, 0x2, 0x3, 0xffffffff, 0x6, 0x28, 0x0, 0x2, 0x6, 0x5, 0x2, 0x4f0e, 0xb79, 0x10, 0x6, 0x2, 0x1, 0x40, 0xe, 0x3, 0x2, 0x7, 0x1, 0x39, 0x58eb, 0x2, 0x2, 0xe, 0x6, 0x0, 0x3, 0x1, 0xd25e], [0x0, 0xffffa43c, 0x5, 0x8, 0x10001, 0x7, 0x162, 0x8, 0x55, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x0, 0x0, 0x2, 0x1000, 0x6, 0x9, 0x5, 0x80, 0x0, 0x1, 0xcb5, 0x4, 0x8000, 0x6046, 0x200, 0x3, 0x7, 0x2, 0x3, 0x2, 0x8, 0x4, 0x5, 0x3ff, 0xcf3, 0xffffff11, 0x3, 0x1, 0xba88, 0x200, 0x4, 0x5, 0x9, 0x9, 0x3, 0xd4a, 0x732, 0x2, 0x80000000, 0xd, 0x3, 0x7, 0x0, 0x1, 0xf2, 0x8, 0x81, 0x7, 0x3, 0x80], [0x8, 0x1, 0x3, 0xeae, 0x8, 0x7, 0xf7, 0x9, 0xfff, 0x4, 0x100, 0x8, 0x7, 0x1937a0, 0x6, 0x80, 0x1, 0x8, 0x2, 0xff, 0x6a, 0x1, 0x8000, 0x8, 0x1, 0xc, 0xc63, 0x1ff, 0x3, 0x2, 0x81, 0xffffff80, 0x0, 0x4, 0x9, 0xffffffc0, 0x7, 0xff, 0x7, 0x0, 0xa, 0x10000, 0x3, 0x5, 0xfffffffd, 0x3ff, 0x5, 0x7ff, 0xd25f, 0x7, 0x5000, 0x9, 0x20000, 0x100, 0x0, 0xd, 0x6a9, 0x80, 0x1, 0x4, 0x6, 0xe, 0x100, 0x4]}, 0x45c) 2.054410203s ago: executing program 4 (id=1593): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x2d2}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) 1.885503899s ago: executing program 0 (id=1595): sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="7e647d74fd12ed2712e407b17f318118e4a73e2cdcb921ed9f15a17c6b95a42398ee204b393fa67cd79da49519c5d295c3965ca57ee964432ab39373440bccefe2149722955603561d0a2027e9679d77ecc59a528a20352a3c0c885d72dcd7116298de53444d3ba2ac741eb6dd746c172522cc730de0f6e05562276569c1de342e7d66", 0x83, 0x14, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) 1.885240679s ago: executing program 4 (id=1596): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r1, 0x80047456, &(0x7f00000010c0)) 1.872210419s ago: executing program 8 (id=1597): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xe) 1.723164814s ago: executing program 8 (id=1598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @local, @empty, @local}}}}}, 0x2e) 1.54532363s ago: executing program 4 (id=1599): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) sendfile(r0, r0, 0x0, 0x3) 1.436515243s ago: executing program 0 (id=1600): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r0 = syz_open_dev$loop(&(0x7f0000001800), 0x8, 0x101000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 1.405066384s ago: executing program 8 (id=1601): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 1.23296644s ago: executing program 9 (id=1602): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x38, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 1.109402353s ago: executing program 8 (id=1603): socketpair(0xa, 0x1, 0x100, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x2200090, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64], 0x5, 0x2b2, &(0x7f0000000880)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.029425466s ago: executing program 0 (id=1604): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00') sendfile(r1, r2, 0x0, 0x811e) 1.018858756s ago: executing program 9 (id=1605): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$unix(r0, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT], 0x130, 0x4000000}, 0x8000) 757.496855ms ago: executing program 0 (id=1606): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x81, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@timestamping={{0x18, 0x1, 0x25, 0x6}}], 0x18}}], 0x2, 0x54876) 757.173996ms ago: executing program 9 (id=1607): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x210040, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x30005d9, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') lseek(r1, 0x6, 0x0) 668.448548ms ago: executing program 8 (id=1608): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x4, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x344d20e7, 0xf5b1, 0xfffffffd, 0xfffffff, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0xfffffffe, 0x3, 0x80, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x2], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x1, 0x101, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0x3, 0x0, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 599.28954ms ago: executing program 9 (id=1609): r0 = syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x1, 0x1c9, &(0x7f0000000780)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8SVBosGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWMAC0CHRbca2pw5sZ3gOH+dZU9AnaHRcgsFpoeB/GZAxCQ0NZRprmZbaLvhSpPFXwmu1sVMGg7s90zJYgLI0gMiVUJ4sWE9C8goPHU1No5TkhIZNEglJbgWGygxb93CuFmhgQIo2FQYGhu2MsLiFgGswxigYBaNgFIyCUTAKRsEoGAWjYBSMghEBAAEAAP//l32U1w==") fcntl$setlease(r0, 0x400, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) ioctl$UI_DEV_CREATE(r1, 0x5501) 537.720942ms ago: executing program 0 (id=1610): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1, 0x8}, 0x8) 350.529378ms ago: executing program 6 (id=1611): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0x489, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents64(r0, &(0x7f0000000080)=""/70, 0x46) 188.139603ms ago: executing program 9 (id=1612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @timestamp={0x8, 0xa, 0x4, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x1e, [0x1, 0xfffffffe, 0x3, 0x6, 0x1, 0x10001, 0x85]}]}}}}}}}}, 0x0) 1.24722ms ago: executing program 8 (id=1613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8, 0x42}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000040), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 0s ago: executing program 9 (id=1614): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) close(0x3) kernel console output (not intermixed with test programs): device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1130 (8128) [ 192.697136][ T8139] loop2: unable to read partition table [ 192.725740][ T8139] loop2: partition table beyond EOD, truncated [ 192.736006][ T8126] loop5: detected capacity change from 0 to 32768 [ 192.746664][ T8139] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.793996][ T8128] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 192.809735][ T8128] BTRFS info (device loop4): using free space tree [ 192.818807][ T8128] BTRFS info (device loop4): has skinny extents [ 192.863843][ T8128] BTRFS info (device loop4): enabling ssd optimizations [ 192.867865][ T4265] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 192.929182][ T8126] XFS (loop5): Mounting V5 Filesystem [ 192.954722][ T4265] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 192.990001][ T8126] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 193.013379][ T8126] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30 [ 193.022911][ T4265] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 193.060328][ T4265] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 193.133648][ T4265] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 193.200708][ T8171] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.237029][ T8126] XFS (loop5): Ending clean mount [ 193.248945][ T4265] playstation 0003:054C:0DF2.0015: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 193.538853][ T8182] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x2c9/0xd60, inode 0x1803 dinode [ 193.559768][ T8182] XFS (loop5): Unmount and run xfs_repair [ 193.566236][ T8182] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 193.573723][ T8182] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 193.588018][ T8182] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 193.597820][ T8182] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 193.607375][ T4265] playstation 0003:054C:0DF2.0015: Failed to retrieve feature with reportID 32: -71 [ 193.617166][ T8182] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 193.626503][ T4265] playstation 0003:054C:0DF2.0015: Failed to retrieve DualSense firmware info: -71 [ 193.636873][ T8182] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 193.647214][ T4265] playstation 0003:054C:0DF2.0015: Failed to get firmware info from DualSense [ 193.656604][ T8182] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 193.665942][ T4265] playstation 0003:054C:0DF2.0015: Failed to create dualsense. [ 193.673678][ T8182] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 193.695527][ T8182] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 193.705197][ T4265] playstation: probe of 0003:054C:0DF2.0015 failed with error -71 [ 193.730363][ T4265] usb 4-1: USB disconnect, device number 17 [ 193.792770][ T8184] fido_id[8184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 193.973051][ T5819] XFS (loop5): Unmounting Filesystem [ 194.238774][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.245325][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.525068][ T8203] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1154'. [ 194.585932][ T8203] device gretap0 entered promiscuous mode [ 194.605120][ T4265] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 194.623929][ T8207] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1154'. [ 194.635107][ T8206] vxcan1: tx address claim with different name [ 194.641517][ T8207] 0ªî{X¹¦: renamed from gretap0 [ 194.667488][ T8207] device 30ªî{X¹¦ left promiscuous mode [ 194.711875][ T8207] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 194.724588][ T8190] set_capacity_and_notify: 1 callbacks suppressed [ 194.724603][ T8190] loop0: detected capacity change from 0 to 32768 [ 194.814696][ T8190] (syz.0.1149,8190,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 194.895936][ T8190] (syz.0.1149,8190,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.000039][ T8190] JBD2: Ignoring recovery information on journal [ 195.051308][ T8190] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 195.145557][ T4265] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 195.154757][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 195.154784][ T4265] usb 4-1: Product: syz [ 195.192800][ T4265] usb 4-1: config 0 descriptor?? [ 195.193747][ T8198] loop4: detected capacity change from 0 to 32768 [ 195.259499][ T4179] loop4: p1 p2 p3 < p5 p6 p7 > [ 195.274328][ T4179] loop4: p2 size 16775168 extends beyond EOD, truncated [ 195.289347][ T4265] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 195.302134][ T4179] loop4: p5 start 4294970168 is beyond EOD, truncated [ 195.317550][ T4265] usb 4-1: Detected FT232H [ 195.321197][ T8226] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1161'. [ 195.346895][ T4191] ocfs2: Unmounting device (7,0) on (node local) [ 195.347006][ T8198] loop4: p1 p2 p3 < p5 p6 p7 > [ 195.365814][ T8198] loop4: p2 size 16775168 extends beyond EOD, truncated [ 195.386558][ T8198] loop4: p5 start 4294970168 is beyond EOD, truncated [ 195.515222][ T4265] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 195.640982][ T8235] vivid-000: disconnect [ 195.688717][ T8234] vivid-000: reconnect [ 195.766304][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 195.779310][ T4514] udevd[4514]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 195.792880][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 195.792977][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 195.823816][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 195.936120][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 195.949041][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 195.962506][ T4514] udevd[4514]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 195.975709][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 195.989277][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 195.990892][ T8246] loop5: detected capacity change from 0 to 4096 [ 196.033154][ T4265] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 196.124290][ T8246] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.239861][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'. [ 196.275082][ T23] usb 4-1: USB disconnect, device number 18 [ 196.297834][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 196.319225][ T23] ftdi_sio 4-1:0.0: device disconnected [ 196.551071][ T8240] loop4: detected capacity change from 0 to 32768 [ 196.558251][ T8262] loop5: detected capacity change from 0 to 1024 [ 196.717295][ T8240] XFS (loop4): Mounting V5 Filesystem [ 197.023777][ T8240] XFS (loop4): Ending clean mount [ 197.159445][ T8282] loop0: detected capacity change from 0 to 4096 [ 197.228836][ T8282] ntfs: (device loop0): parse_options(): The mft_zone_multiplier option requires an argument. [ 197.374067][ T4199] XFS (loop4): Unmounting Filesystem [ 197.583566][ T8280] loop5: detected capacity change from 0 to 131072 [ 197.795020][ T8280] F2FS-fs (loop5): Found nat_bits in checkpoint [ 197.834628][ T8280] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 198.000955][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 198.062442][ T8302] overlayfs: failed to set xattr on upper [ 198.103638][ T8302] overlayfs: ...falling back to index=off,metacopy=off. [ 198.125055][ T4359] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 198.404922][ T4359] usb 1-1: Using ep0 maxpacket: 32 [ 198.430064][ T8323] loop4: detected capacity change from 0 to 512 [ 198.525192][ T4359] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 198.543925][ T8323] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 198.554879][ T4359] usb 1-1: config 0 has no interface number 0 [ 198.578815][ T23] kernel read not supported for file /input/event2 (pid: 23 comm: kworker/1:1) [ 198.655926][ T8323] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 198.735214][ T4359] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 198.744398][ T4359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.754247][ T8319] loop6: detected capacity change from 0 to 32768 [ 198.775222][ T8323] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.807092][ T4359] usb 1-1: Product: syz [ 198.811309][ T4359] usb 1-1: Manufacturer: syz [ 198.830369][ T4359] usb 1-1: SerialNumber: syz [ 198.840408][ T26] audit: type=1800 audit(1780937840.205:447): pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1199" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 198.876253][ T4359] usb 1-1: config 0 descriptor?? [ 198.938662][ T4359] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 199.010758][ T8336] loop3: detected capacity change from 0 to 8192 [ 199.021366][ T8319] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 199.080914][ T8336] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 199.112236][ T6073] ocfs2: Unmounting device (7,6) on (node local) [ 199.126751][ T4359] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 199.175384][ T8336] REISERFS (device loop3): using ordered data mode [ 199.181990][ T8336] reiserfs: using flush barriers [ 199.188087][ T4359] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 199.269827][ T8336] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.332162][ T8296] udc-core: couldn't find an available UDC or it's busy [ 199.335236][ T8336] REISERFS (device loop3): checking transaction log (loop3) [ 199.350214][ T8296] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 199.433513][ T8336] REISERFS (device loop3): Using r5 hash to sort names [ 199.458695][ T8336] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 199.650064][ T4359] usb 1-1: USB disconnect, device number 19 [ 199.664862][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 199.684028][ T8336] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 199.717950][ T4359] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 199.754700][ T4359] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 199.793815][ T4359] quatech2 1-1:0.51: device disconnected [ 199.810555][ T8358] REISERFS error (device loop3): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 199.876873][ T8358] REISERFS (device loop3): Remounting filesystem read-only [ 199.885514][ T8358] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 200.092685][ T8347] set_capacity_and_notify: 1 callbacks suppressed [ 200.092702][ T8347] loop5: detected capacity change from 0 to 32768 [ 200.180550][ T8347] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 200.214532][ T8347] JBD2: Ignoring recovery information on journal [ 200.276692][ T8377] loop0: detected capacity change from 0 to 1024 [ 200.386997][ T8347] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 200.544601][ T8347] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01 [ 200.575347][ T8347] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 200.595245][ T8347] OCFS2: File system is now read-only. [ 200.601592][ T8347] (syz.5.1208,8347,0):ocfs2_search_one_group:1684 ERROR: status = -30 [ 200.604431][ T4905] hfsplus: b-tree write err: -5, ino 3 [ 200.612952][ T8347] (syz.5.1208,8347,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 200.625426][ T8347] (syz.5.1208,8347,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 200.633974][ T8347] (syz.5.1208,8347,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 200.643713][ T4772] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 200.667623][ T8347] (syz.5.1208,8347,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 200.685819][ T8347] (syz.5.1208,8347,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 200.696201][ T8347] (syz.5.1208,8347,0):ocfs2_symlink:1941 ERROR: status = -30 [ 200.705306][ T8347] (syz.5.1208,8347,0):ocfs2_symlink:2065 ERROR: status = -30 [ 200.796706][ T8390] loop0: detected capacity change from 0 to 256 [ 200.843050][ T5819] ocfs2: Unmounting device (7,5) on (node local) [ 200.910181][ T8390] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.962720][ T8390] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2048) [ 201.000052][ T8390] FAT-fs (loop0): Filesystem has been set read-only [ 201.022857][ T8390] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2048) [ 201.055646][ T4772] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 201.078770][ T4772] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 201.124214][ T4772] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 201.142128][ T4772] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 201.186302][ T8395] loop5: detected capacity change from 0 to 2048 [ 201.296735][ T8395] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 201.311752][ T8395] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.357932][ T4772] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.379376][ T4772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.388809][ T4772] usb 4-1: Product: syz [ 201.393173][ T4772] usb 4-1: Manufacturer: syz [ 201.398521][ T4772] usb 4-1: SerialNumber: syz [ 201.435213][ T8380] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.476091][ T4772] cdc_mbim 4-1:1.0: skipping garbage [ 201.562129][ T8406] loop5: detected capacity change from 0 to 256 [ 201.571373][ T8393] loop6: detected capacity change from 0 to 32768 [ 201.639226][ T8406] exfat: Bad value for 'uid' [ 201.680231][ T8380] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.703397][ T8393] XFS (loop6): Mounting V5 Filesystem [ 201.717537][ T8380] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.784491][ T8406] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1228'. [ 201.804131][ T8393] XFS (loop6): Ending clean mount [ 202.104054][ T8421] Illegal XDP return value 4294967274, expect packet loss! [ 202.159446][ T8416] loop4: detected capacity change from 0 to 32768 [ 202.249987][ T8416] XFS (loop4): Mounting V5 Filesystem [ 202.283830][ T6073] XFS (loop6): Unmounting Filesystem [ 202.372176][ T8416] XFS (loop4): Ending clean mount [ 202.398293][ T8416] XFS (loop4): Quotacheck needed: Please wait. [ 202.465958][ T8380] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 202.473088][ T8380] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 202.474952][ T4769] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 202.535231][ T4772] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 202.547248][ T4772] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 202.625099][ T8416] XFS (loop4): Quotacheck: Done. [ 202.650406][ T4772] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 6e:9d:ee:3d:71:e0 [ 202.671460][ T4359] XFS (loop4): Metadata CRC error detected at xfs_refcountbt_read_verify+0x3a/0xd0, xfs_refcountbt block 0x28 [ 202.709143][ T8433] loop5: detected capacity change from 0 to 32768 [ 202.739964][ T4359] XFS (loop4): Unmount and run xfs_repair [ 202.745895][ T4359] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 202.754871][ T4769] usb 1-1: Using ep0 maxpacket: 16 [ 202.788265][ T4359] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 202.814980][ T8433] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1233 (8433) [ 202.848522][ T4772] usb 4-1: USB disconnect, device number 19 [ 202.858944][ T4772] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 202.871126][ T4359] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 202.900457][ T4359] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 202.931722][ T4359] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 202.947055][ T4359] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.960304][ T4359] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.971636][ T4359] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 202.983808][ T4359] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 203.002119][ T8416] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x28 len 8 error 74 [ 203.036448][ T8416] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x156f/0x1b80 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 203.052574][ T8416] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 203.076497][ T8433] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 203.096543][ T8433] BTRFS info (device loop5): setting nodatacow, compression disabled [ 203.106767][ T8433] BTRFS info (device loop5): turning on flush-on-commit [ 203.113771][ T8433] BTRFS info (device loop5): trying to use backup root at mount time [ 203.115373][ T8441] loop6: detected capacity change from 0 to 512 [ 203.133298][ T4769] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 203.142621][ T4769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.151526][ T4199] XFS (loop4): Unmounting Filesystem [ 203.186620][ T4769] usb 1-1: Product: syz [ 203.190821][ T4769] usb 1-1: Manufacturer: syz [ 203.196138][ T8433] BTRFS info (device loop5): max_inline at 0 [ 203.201243][ T4769] usb 1-1: SerialNumber: syz [ 203.212370][ T8433] BTRFS info (device loop5): using free space tree [ 203.236366][ T8441] EXT4-fs (loop6): Ignoring removed bh option [ 203.251915][ T4769] usb 1-1: config 0 descriptor?? [ 203.260734][ T8433] BTRFS info (device loop5): has skinny extents [ 203.307892][ T8441] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 203.384590][ T8441] EXT4-fs (loop6): 1 truncate cleaned up [ 203.425637][ T8441] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 203.666298][ T1219] BTRFS warning (device loop5): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 203.735063][ T4769] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 203.756047][ T8433] BTRFS warning (device loop5): failed to read root (objectid=2): -5 [ 203.769498][ T8441] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1234: invalid indirect mapped block 4294901760 (level 0) [ 203.805952][ T4769] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.838145][ T1219] BTRFS warning (device loop5): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 203.860644][ T8441] EXT4-fs (loop6): Remounting filesystem read-only [ 203.875552][ T4769] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 203.916495][ T4769] usb 1-1: media controller created [ 203.936527][ T8423] dtv5100: wlen = 3, aborting. [ 203.954684][ T8433] BTRFS warning (device loop5): couldn't read tree root [ 203.966016][ T8433] BTRFS error (device loop5): parent transid verify failed on 5255168 wanted 5 found 7 [ 204.003797][ T4769] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.017438][ T8433] BTRFS warning (device loop5): couldn't read tree root [ 204.064724][ T8433] BTRFS info (device loop5): enabling ssd optimizations [ 204.110446][ T8433] BTRFS info (device loop5): clearing free space tree [ 204.122701][ T8473] loop3: detected capacity change from 0 to 32768 [ 204.130522][ T8433] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 204.141427][ T4769] zl10353_read_register: readreg error (reg=127, ret==0) [ 204.153390][ T4769] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 204.171751][ T8433] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 204.182524][ T4769] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 204.223207][ T4769] usb 1-1: USB disconnect, device number 20 [ 204.244100][ T8433] BTRFS info (device loop5): creating free space tree [ 204.265097][ T8473] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1238 (8473) [ 204.322661][ T8433] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 204.371487][ T4769] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 204.420631][ T8433] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 204.459434][ T8473] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 204.530061][ T8473] BTRFS info (device loop3): turning on async discard [ 204.566411][ T8473] BTRFS info (device loop3): using free space tree [ 204.573227][ T8473] BTRFS info (device loop3): has skinny extents [ 204.760767][ T8473] BTRFS info (device loop3): enabling ssd optimizations [ 205.287034][ T8530] loop6: detected capacity change from 0 to 32768 [ 205.533292][ T8535] loop4: detected capacity change from 0 to 256 [ 206.157371][ T8559] syz.3.1246 sent an empty control message without MSG_MORE. [ 206.193474][ T8548] loop6: detected capacity change from 0 to 32768 [ 206.344086][ T8548] XFS (loop6): Mounting V5 Filesystem [ 206.409414][ T8548] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 206.456969][ T8548] XFS (loop6): Tail block (0x29) overwrite detected. Updated to 0x30 [ 206.551747][ T8548] XFS (loop6): Ending clean mount [ 206.574941][ T4351] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 206.698430][ T8587] loop0: detected capacity change from 0 to 2048 [ 206.723694][ T8548] XFS (loop6): Metadata corruption detected at xfs_dinode_verify+0x2c9/0xd60, inode 0x1803 dinode [ 206.765018][ T8548] XFS (loop6): Unmount and run xfs_repair [ 206.785367][ T8587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.806184][ T8548] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 206.825167][ T8548] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 206.879256][ T8548] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 206.893795][ T26] audit: type=1800 audit(1780937848.255:448): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1270" name="file2" dev="loop0" ino=1416 res=0 errno=0 [ 206.904953][ T8548] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 206.935119][ T4351] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 206.943273][ T4351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.014450][ T4351] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.049575][ T8548] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 207.064966][ T4351] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.088507][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.104569][ T8548] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 207.126635][ T4351] usb 4-1: config 0 descriptor?? [ 207.190270][ T8548] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 207.220822][ T8548] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 207.229996][ T8548] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 207.267783][ T6073] XFS (loop6): Unmounting Filesystem [ 207.607722][ T4351] plantronics 0003:047F:FFFF.0016: unbalanced delimiter at end of report description [ 207.639164][ T4351] plantronics 0003:047F:FFFF.0016: parse failed [ 207.656121][ T4351] plantronics: probe of 0003:047F:FFFF.0016 failed with error -22 [ 207.836416][ T8609] tipc: Started in network mode [ 207.842316][ T8609] tipc: Node identity ac1414aa, cluster identity 4711 [ 207.856246][ T8609] tipc: Enabled bearer , priority 10 [ 207.891017][ T8607] loop5: detected capacity change from 0 to 32768 [ 208.031831][ T8607] XFS (loop5): Mounting V5 Filesystem [ 208.088826][ T8607] XFS (loop5): Ending clean mount [ 208.123984][ T8611] loop6: detected capacity change from 0 to 8192 [ 208.248195][ T8611] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 208.276308][ T8611] REISERFS (device loop6): using ordered data mode [ 208.283616][ T8611] reiserfs: using flush barriers [ 208.342272][ T8611] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 208.346573][ T5819] XFS (loop5): Unmounting Filesystem [ 208.369844][ T4359] usb 4-1: USB disconnect, device number 20 [ 208.379058][ T8611] REISERFS (device loop6): checking transaction log (loop6) [ 208.545019][ T4777] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 208.638690][ T8611] REISERFS (device loop6): Using tea hash to sort names [ 208.698391][ T8611] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 208.750160][ T8633] loop4: detected capacity change from 0 to 512 [ 208.875341][ T8556] tipc: Node number set to 2886997162 [ 208.926221][ T8633] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.1275: EA inode hash validation failed [ 208.952842][ T8633] EXT4-fs (loop4): 1 orphan inode deleted [ 208.975149][ T4777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 208.989944][ T8633] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000040000fe,debug_want_extra_isize=0x000000000000005c,nouid32,sb=0x0000000000000001,acl,nodiscard,,errors=continue. Quota mode: none. [ 209.034908][ T4777] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 209.073562][ T4777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 209.135102][ T4777] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 209.405147][ T4777] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 209.433525][ T4777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.452249][ T4777] usb 1-1: Product: syz [ 209.462349][ T4777] usb 1-1: Manufacturer: syz [ 209.472479][ T4777] usb 1-1: SerialNumber: syz [ 209.501414][ T4777] usb 1-1: config 0 descriptor?? [ 209.568723][ T8656] loop3: detected capacity change from 0 to 512 [ 209.571004][ T4777] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 209.597551][ T8556] kernel read not supported for file /sequencer (pid: 8556 comm: kworker/0:30) [ 209.823837][ T4777] scsi host1: usb-storage 1-1:0.0 [ 209.876145][ T4777] usb 1-1: USB disconnect, device number 21 [ 209.890388][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1289'. [ 210.031783][ T8674] loop4: detected capacity change from 0 to 256 [ 210.393511][ T8688] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 210.455084][ T4359] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 210.493694][ T8690] loop6: detected capacity change from 0 to 8 [ 210.549652][ T8690] SQUASHFS error: Unable to read inode 0x127 [ 210.699909][ T8694] loop6: detected capacity change from 0 to 512 [ 210.706582][ T4359] usb 4-1: Using ep0 maxpacket: 16 [ 210.733568][ T8694] EXT4-fs (loop6): Test dummy encryption mode enabled [ 210.784722][ T8694] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.1301: inode #1: comm syz.6.1301: iget: illegal inode # [ 210.818603][ T8694] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1301: error while reading EA inode 1 err=-117 [ 210.842281][ T8694] EXT4-fs (loop6): 1 orphan inode deleted [ 210.848791][ T8694] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,nodiscard,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,test_dummy_encryption=v1,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 210.894195][ T8694] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #13: comm syz.6.1301: corrupted inode contents [ 210.918697][ T8705] loop5: detected capacity change from 0 to 512 [ 210.949625][ T8694] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #13: comm syz.6.1301: mark_inode_dirty error [ 210.969077][ T8705] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 210.976769][ T8707] device syzkaller1 entered promiscuous mode [ 211.014194][ T8705] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1306: inode has both inline data and extents flags [ 211.015196][ T8694] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1301: invalid indirect mapped block 234881024 (level 0) [ 211.028539][ T4359] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 211.049599][ T8705] EXT4-fs (loop5): Remounting filesystem read-only [ 211.051875][ T4359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.063855][ T8705] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1306: couldn't read orphan inode 15 (err -117) [ 211.065545][ T4359] usb 4-1: Product: syz [ 211.065562][ T4359] usb 4-1: Manufacturer: syz [ 211.086807][ T4359] usb 4-1: SerialNumber: syz [ 211.093196][ T4359] usb 4-1: config 0 descriptor?? [ 211.131397][ T8705] EXT4-fs (loop5): Remounting filesystem read-only [ 211.141626][ T4359] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 211.165878][ T8705] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,. Quota mode: none. [ 211.217050][ T8705] overlayfs: failed to create directory ./bus/work (errno: 117); mounting read-only [ 211.244639][ T8694] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #13: comm syz.6.1301: corrupted inode contents [ 211.289973][ T5819] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /154/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 211.323028][ T8694] EXT4-fs error (device loop6): ext4_truncate:4286: inode #13: comm syz.6.1301: mark_inode_dirty error [ 211.339295][ T8694] EXT4-fs error (device loop6) in ext4_setattr:5645: Corrupt filesystem [ 211.354044][ T5819] EXT4-fs (loop5): Remounting filesystem read-only [ 211.364275][ T8708] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #13: comm syz.6.1301: corrupted inode contents [ 211.377453][ T5819] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /154/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 211.406205][ T8708] EXT4-fs error (device loop6): ext4_setattr:5490: inode #13: comm syz.6.1301: mark_inode_dirty error [ 211.423616][ T5819] EXT4-fs (loop5): Remounting filesystem read-only [ 211.432996][ T8709] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #13: comm syz.6.1301: corrupted inode contents [ 211.445228][ T5819] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 16: comm syz-executor: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=13056, size=1024 fake=0 [ 211.455622][ T8709] EXT4-fs error (device loop6): ext4_rename:4073: inode #13: comm syz.6.1301: mark_inode_dirty error [ 211.472252][ T5819] EXT4-fs (loop5): Remounting filesystem read-only [ 211.491037][ T5819] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /154/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 211.539060][ T6073] EXT4-fs warning (device loop6): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 211.552090][ T5819] EXT4-fs (loop5): Remounting filesystem read-only [ 211.575159][ T5819] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /154/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 211.605447][ T5819] EXT4-fs (loop5): Remounting filesystem read-only [ 211.612465][ T5819] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 16: comm syz-executor: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=13056, size=1024 fake=0 [ 211.632759][ T5819] EXT4-fs (loop5): Remounting filesystem read-only [ 211.639814][ T5819] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /154/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 211.668268][ T5819] EXT4-fs (loop5): Remounting filesystem read-only [ 211.679525][ T5819] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /154/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 211.708064][ T5819] EXT4-fs (loop5): Remounting filesystem read-only [ 211.730289][ T5819] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 16: comm syz-executor: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=13056, size=1024 fake=0 [ 211.744608][ T8726] loop6: detected capacity change from 0 to 1024 [ 211.791908][ T5819] EXT4-fs (loop5): Remounting filesystem read-only [ 211.805471][ T5819] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /154/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 211.812358][ T8726] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: writeback. [ 211.843025][ T5819] EXT4-fs (loop5): Remounting filesystem read-only [ 212.005072][ T4359] ssu100: probe of 4-1:0.0 failed with error -71 [ 212.016126][ T4359] usb 4-1: USB disconnect, device number 21 [ 212.508641][ T8751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.517166][ T8749] vivid-000: disconnect [ 212.537276][ T8748] vivid-000: reconnect [ 212.541896][ T8751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.558591][ T8751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.583143][ T8752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.593252][ T8752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.655876][ T1252] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.670501][ T8754] loop3: detected capacity change from 0 to 4096 [ 212.675247][ T1252] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.806095][ T1252] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.856152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.894869][ T1252] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.023785][ T1252] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.062253][ T1252] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.142457][ T1252] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.178032][ T1252] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.355158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.375554][ T8768] lo speed is unknown, defaulting to 1000 [ 213.472186][ T8771] tipc: Started in network mode [ 213.487450][ T8771] tipc: Node identity ac1414aa, cluster identity 4711 [ 213.530171][ T8771] tipc: Enabled bearer , priority 10 [ 213.837509][ T8783] loop4: detected capacity change from 0 to 164 [ 213.894273][ T8783] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 213.953412][ T8783] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 213.986410][ T8784] loop3: detected capacity change from 0 to 8192 [ 213.993903][ T8783] rock: directory entry would overflow storage [ 214.037478][ T8768] chnl_net:caif_netlink_parms(): no params data found [ 214.044728][ T8764] loop0: detected capacity change from 0 to 32768 [ 214.057803][ T8783] rock: sig=0x4f50, size=4, remaining=3 [ 214.067235][ T8783] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 214.153720][ T8764] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1331 (8764) [ 214.161310][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.196627][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.204752][ T8768] device bridge_slave_0 entered promiscuous mode [ 214.214243][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.221596][ T8784] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 214.221683][ T8784] REISERFS (device loop3): using ordered data mode [ 214.221694][ T8784] reiserfs: using flush barriers [ 214.222692][ T8784] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 214.231951][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.269525][ T8768] device bridge_slave_1 entered promiscuous mode [ 214.282992][ T8784] REISERFS (device loop3): checking transaction log (loop3) [ 214.293925][ T8768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.311383][ T8768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.363977][ T8764] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 214.395073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.426897][ T8764] BTRFS info (device loop0): using free space tree [ 214.433554][ T8764] BTRFS info (device loop0): has skinny extents [ 214.442935][ T8768] team0: Port device team_slave_0 added [ 214.479394][ T8768] team0: Port device team_slave_1 added [ 214.504921][ T4777] tipc: Node number set to 2886997162 [ 214.551315][ T8784] REISERFS (device loop3): Using tea hash to sort names [ 214.564496][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.607244][ T8784] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 214.618387][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.694842][ T8768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.718028][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.784834][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.915623][ T8768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.917096][ T8764] BTRFS info (device loop0): enabling ssd optimizations [ 215.029634][ T8768] device hsr_slave_0 entered promiscuous mode [ 215.061230][ T8768] device hsr_slave_1 entered promiscuous mode [ 215.275213][ T4234] Bluetooth: hci3: command 0x0409 tx timeout [ 215.408372][ T8821] loop4: detected capacity change from 0 to 128 [ 215.506845][ T8821] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.609462][ T8824] loop6: detected capacity change from 0 to 4096 [ 215.940634][ T26] audit: type=1800 audit(1780937857.305:449): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1344" name="bus" dev="loop6" ino=33 res=0 errno=0 [ 216.337769][ T8768] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 216.395151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.415365][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'. [ 216.415721][ T8768] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 216.513930][ T8768] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 216.620078][ T8768] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 217.020861][ T8877] loop6: detected capacity change from 0 to 512 [ 217.073459][ T8877] EXT4-fs (loop6): Ignoring removed bh option [ 217.163683][ T8877] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.1355: iget: bad extra_isize 957 (inode size 256) [ 217.245067][ T8877] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.1355: couldn't read orphan inode 15 (err -117) [ 217.272890][ T8877] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=abort,grpid,bh,grpquota,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000001,init_itable,mb_optimize_scan=0x0000000000000001,nolazytime,norecovery,,errors=continue. Quota mode: writeback. [ 217.276492][ T8768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.339780][ T8877] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #2: block 9: comm syz.6.1355: lblock 1 mapped to illegal pblock 9 (length 1) [ 217.355183][ T4351] Bluetooth: hci3: command 0x041b tx timeout [ 217.491789][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.523932][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.553146][ T8768] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.633997][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.646653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.666302][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.674040][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.715262][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.744722][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.754917][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.763538][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.770653][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.786228][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.813804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.822003][ T8561] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 217.855947][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.879800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.934388][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.955820][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.972386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.981791][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.015379][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.023861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.047678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.067243][ T8768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.075295][ T8560] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 218.094902][ T8561] usb 5-1: Using ep0 maxpacket: 16 [ 218.310093][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.328324][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.345746][ T8768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.366448][ T1252] device hsr_slave_0 left promiscuous mode [ 218.380416][ T1252] device hsr_slave_1 left promiscuous mode [ 218.388598][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.402246][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.414618][ T1252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.426523][ T8561] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 218.429997][ T1252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.448932][ T8561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.458453][ T1252] device bridge_slave_1 left promiscuous mode [ 218.475209][ T8561] usb 5-1: Product: syz [ 218.479436][ T8561] usb 5-1: Manufacturer: syz [ 218.484041][ T8561] usb 5-1: SerialNumber: syz [ 218.489146][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.496607][ T8560] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.514928][ T8560] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.532971][ T1252] device bridge_slave_0 left promiscuous mode [ 218.543728][ T8560] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.553801][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.567037][ T8561] usb 5-1: config 0 descriptor?? [ 218.573341][ T1252] rdma_rxe: ignoring netdev event = 10 for lo [ 218.593247][ T1252] device veth1_macvtap left promiscuous mode [ 218.604283][ T8560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.608957][ T1252] device veth0_macvtap left promiscuous mode [ 218.618905][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.763491][ T1252] infiniband sz1: set down [ 218.881482][ T1252] team0 (unregistering): Port device team_slave_1 removed [ 218.913058][ T8560] usb 4-1: GET_CAPABILITIES returned 0 [ 218.919002][ T8560] usbtmc 4-1:16.0: can't read capabilities [ 218.934392][ T1252] team0 (unregistering): Port device team_slave_0 removed [ 218.979746][ T1252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.998552][ T1252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.093454][ T8561] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 219.107413][ T8561] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.126648][ T1252] bond0 (unregistering): Released all slaves [ 219.141135][ T8560] usb 4-1: USB disconnect, device number 22 [ 219.155193][ T8561] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 219.171537][ T8561] usb 5-1: media controller created [ 219.196928][ T8561] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.207361][ T8925] loop0: detected capacity change from 0 to 64 [ 219.237434][ T8555] lo speed is unknown, defaulting to 1000 [ 219.241914][ T4466] smc: removing ib device sz1 [ 219.311685][ T8925] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 219.436907][ T4359] Bluetooth: hci3: command 0x040f tx timeout [ 219.693397][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.708110][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.788042][ T8890] dtv5100: wlen = 0, aborting. [ 219.788077][ T8561] zl10353_read_register: readreg error (reg=127, ret==0) [ 219.800778][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.819969][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.834714][ T8561] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 219.862920][ T8768] device veth0_vlan entered promiscuous mode [ 219.877164][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.884764][ T8561] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 219.894647][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.919387][ T8561] usb 5-1: USB disconnect, device number 20 [ 219.934330][ T8768] device veth1_vlan entered promiscuous mode [ 220.075841][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.098318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.126426][ T8561] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 220.137294][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.159977][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.204326][ T8768] device veth0_macvtap entered promiscuous mode [ 220.238551][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.278093][ T8768] device veth1_macvtap entered promiscuous mode [ 220.315185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.322849][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.352773][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.372027][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.383188][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.403709][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.424842][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.438037][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.457523][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.479571][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.507748][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.533467][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.598777][ T8940] loop0: detected capacity change from 0 to 32768 [ 220.619577][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.655180][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.682780][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.703928][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.723959][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.740375][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.750790][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.764663][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.778284][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.808676][ T8827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.817712][ T8827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.831452][ T8768] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.854930][ T8768] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.883499][ T8940] XFS (loop0): Mounting V5 Filesystem [ 220.884406][ T8768] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.908061][ T8768] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.965877][ T4195] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 221.069486][ T8940] XFS (loop0): Ending clean mount [ 221.132261][ T4191] XFS (loop0): Unmounting Filesystem [ 221.300661][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.312830][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.332169][ T8827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.409947][ T1219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.425284][ T4195] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 221.425857][ T1219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.448697][ T4195] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.449280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.517375][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 221.696755][ T8990] loop3: detected capacity change from 0 to 8 [ 221.705192][ T4195] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 221.730866][ T4195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.770969][ T4195] usb 5-1: Product: syz [ 221.782825][ T4195] usb 5-1: Manufacturer: syz [ 221.788603][ T26] audit: type=1800 audit(1780937863.155:450): pid=8990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1377" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 221.807684][ T4195] usb 5-1: SerialNumber: syz [ 221.818986][ T4195] usb 5-1: config 0 descriptor?? [ 221.846687][ T8955] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 221.867101][ T8990] SQUASHFS error: Failed to read block 0x6e6: -5 [ 221.879019][ T4195] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 221.893920][ T4195] mcba_usb 5-1:0.0 can0: couldn't start device: -90 [ 221.893924][ T8990] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 221.895487][ T26] audit: type=1800 audit(1780937863.175:451): pid=8990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1377" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 221.924374][ T8990] SQUASHFS error: read_indexes: reading block [6e4:0] [ 221.964090][ T8990] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 222.017566][ T4195] mcba_usb: probe of 5-1:0.0 failed with error -90 [ 222.019227][ T8990] SQUASHFS error: read_indexes: reading block [6e4:0] [ 222.094983][ T8990] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 222.126828][ T4265] usb 5-1: USB disconnect, device number 21 [ 222.140466][ T8990] SQUASHFS error: read_indexes: reading block [6e4:0] [ 222.174133][ T8990] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 222.217416][ T8990] SQUASHFS error: read_indexes: reading block [6e4:0] [ 222.421552][ T9013] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 222.715444][ T4359] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 222.862189][ T9025] loop0: detected capacity change from 0 to 4096 [ 222.959223][ T4359] usb 4-1: Using ep0 maxpacket: 16 [ 223.074041][ T9025] ntfs3: loop0: ino=22, "bus" mmap(write) compressed not supported [ 223.115369][ T4265] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 223.156586][ T4191] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 223.163069][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 223.258387][ T4359] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 223.279410][ T4359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.300841][ T4359] usb 4-1: Product: syz [ 223.317975][ T4359] usb 4-1: Manufacturer: syz [ 223.329932][ T4359] usb 4-1: SerialNumber: syz [ 223.376794][ T4359] usb 4-1: config 0 descriptor?? [ 223.437132][ T4359] gspca_main: spca508-2.14.0 probing 041e:4018 [ 223.529270][ T4265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.550578][ T4265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.569811][ T4265] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 223.616818][ T4265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.645174][ T4359] gspca_spca508: reg_read err -32 [ 223.649832][ T4265] usb 5-1: config 0 descriptor?? [ 223.685008][ T4359] gspca_spca508: reg_read err -32 [ 223.725000][ T4359] gspca_spca508: reg_read err -32 [ 223.775189][ T9047] loop7: detected capacity change from 0 to 8192 [ 223.806899][ T9047] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.985282][ T4359] gspca_spca508: reg_read err -71 [ 224.005449][ T4359] gspca_spca508: reg write: error -71 [ 224.018977][ T4359] spca508: probe of 4-1:0.0 failed with error -71 [ 224.065924][ T4359] usb 4-1: USB disconnect, device number 23 [ 224.177825][ T4265] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 224.201337][ T4265] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 224.221579][ T4265] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 224.243080][ T4265] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 224.268230][ T4265] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 224.331691][ T4265] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 224.596208][ T9069] loop3: detected capacity change from 0 to 8 [ 224.638588][ T9069] SQUASHFS error: zlib decompression failed, data probably corrupt [ 224.668052][ T9069] SQUASHFS error: Failed to read block 0x9b: -5 [ 224.688339][ T9069] SQUASHFS error: Unable to read metadata cache entry [99] [ 224.692712][ T9047] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 224.698464][ T9069] SQUASHFS error: Unable to read inode 0x127 [ 224.745082][ T4265] playstation 0003:054C:0DF2.0017: Failed to retrieve feature with reportID 32: -71 [ 224.753764][ T9047] FAT-fs (loop7): Filesystem has been set read-only [ 224.761907][ T4265] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense firmware info: -71 [ 224.772974][ T9047] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 224.799035][ T4265] playstation 0003:054C:0DF2.0017: Failed to get firmware info from DualSense [ 224.835027][ T9047] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 224.871425][ T4265] playstation 0003:054C:0DF2.0017: Failed to create dualsense. [ 224.927166][ T4265] playstation: probe of 0003:054C:0DF2.0017 failed with error -71 [ 224.956087][ T9078] loop9: detected capacity change from 0 to 524287936 [ 224.980191][ T4265] usb 5-1: USB disconnect, device number 22 [ 225.099807][ T9079] fido_id[9079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 225.604930][ T4265] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 225.791337][ T9103] loop0: detected capacity change from 0 to 8 [ 225.874310][ T26] audit: type=1800 audit(1780937867.235:452): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1399" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 225.912922][ T9103] SQUASHFS error: Failed to read block 0x6e6: -5 [ 225.913176][ T26] audit: type=1800 audit(1780937867.265:453): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1399" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 225.938870][ T9103] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 225.954442][ T9103] SQUASHFS error: read_indexes: reading block [6e4:0] [ 225.981109][ T9103] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 226.005028][ T9103] SQUASHFS error: read_indexes: reading block [6e4:0] [ 226.011897][ T9103] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 226.036141][ T9103] SQUASHFS error: read_indexes: reading block [6e4:0] [ 226.050845][ T4265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.053576][ T9103] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 226.069474][ T4265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.073886][ T9091] loop7: detected capacity change from 0 to 32768 [ 226.093950][ T9103] SQUASHFS error: read_indexes: reading block [6e4:0] [ 226.100060][ T4265] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.130603][ T4265] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.145258][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.160997][ T9091] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1391 (9091) [ 226.171253][ T4265] usb 4-1: config 0 descriptor?? [ 226.229724][ T9091] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 226.240546][ T9091] BTRFS info (device loop7): setting nodatacow, compression disabled [ 226.249572][ T9091] BTRFS info (device loop7): turning on flush-on-commit [ 226.258095][ T9091] BTRFS info (device loop7): trying to use backup root at mount time [ 226.266654][ T9091] BTRFS info (device loop7): max_inline at 0 [ 226.287031][ T9091] BTRFS info (device loop7): using free space tree [ 226.293626][ T9091] BTRFS info (device loop7): has skinny extents [ 226.304935][ T4234] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 226.420429][ T1252] BTRFS warning (device loop7): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 226.445026][ T9091] BTRFS warning (device loop7): failed to read root (objectid=2): -5 [ 226.453530][ T4466] BTRFS warning (device loop7): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 226.465657][ T9091] BTRFS warning (device loop7): couldn't read tree root [ 226.479643][ T9091] BTRFS error (device loop7): parent transid verify failed on 5255168 wanted 5 found 7 [ 226.491433][ T9091] BTRFS warning (device loop7): couldn't read tree root [ 226.507940][ T9091] BTRFS info (device loop7): enabling ssd optimizations [ 226.515964][ T9091] BTRFS info (device loop7): clearing free space tree [ 226.522841][ T9091] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 226.533077][ T9091] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.549136][ T9091] BTRFS info (device loop7): creating free space tree [ 226.569758][ T9091] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 226.585146][ T9091] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.675019][ T4265] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 226.675184][ T4234] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.700631][ T4234] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.706513][ T4265] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 226.717563][ T4234] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.735951][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.964670][ T4356] usb 4-1: USB disconnect, device number 24 [ 227.044970][ T4234] usb 5-1: GET_CAPABILITIES returned 0 [ 227.050571][ T4234] usbtmc 5-1:16.0: can't read capabilities [ 227.231238][ T9141] loop6: detected capacity change from 0 to 8192 [ 227.313010][ T4265] usb 5-1: USB disconnect, device number 23 [ 227.320814][ T9141] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.531966][ T9139] loop0: detected capacity change from 0 to 32768 [ 227.575227][ T9139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1413 (9139) [ 227.605148][ T4356] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 227.652074][ T9139] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 227.662273][ T9139] BTRFS info (device loop0): setting nodatacow, compression disabled [ 227.677468][ T9139] BTRFS info (device loop0): turning on flush-on-commit [ 227.684484][ T9139] BTRFS info (device loop0): trying to use backup root at mount time [ 227.693699][ T9139] BTRFS info (device loop0): max_inline at 0 [ 227.700656][ T9139] BTRFS info (device loop0): using free space tree [ 227.741521][ T9139] BTRFS info (device loop0): has skinny extents [ 228.000668][ T9141] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 228.016391][ T4356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.024909][ T9141] FAT-fs (loop6): Filesystem has been set read-only [ 228.045445][ T4356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.046012][ T8827] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 228.065220][ T9141] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 228.081133][ T4356] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 228.090390][ T9139] BTRFS warning (device loop0): failed to read root (objectid=2): -5 [ 228.108886][ T1252] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 228.126313][ T9141] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 228.135263][ T4356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.155086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.165134][ T9139] BTRFS warning (device loop0): couldn't read tree root [ 228.172402][ T4778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.181915][ T4356] usb 8-1: config 0 descriptor?? [ 228.200634][ T9139] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 228.246771][ T9139] BTRFS warning (device loop0): couldn't read tree root [ 228.282015][ T9139] BTRFS info (device loop0): enabling ssd optimizations [ 228.313179][ T9179] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1412'. [ 228.331894][ T9139] BTRFS info (device loop0): clearing free space tree [ 228.335454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.341409][ T9139] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 228.364622][ T9179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.404961][ T9139] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 228.406567][ T6073] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 228.446961][ T9139] BTRFS info (device loop0): creating free space tree [ 228.461494][ T9139] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 228.471970][ T9139] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 228.586014][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 228.669915][ T4356] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 228.694060][ T4356] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 228.710842][ T4356] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 228.727602][ T4356] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 228.749186][ T4356] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 228.776452][ T4356] playstation 0003:054C:0DF2.0019: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.7-1/input0 [ 228.850339][ T9194] loop3: detected capacity change from 0 to 128 [ 229.117454][ T4356] playstation 0003:054C:0DF2.0019: Failed to retrieve feature with reportID 32: -71 [ 229.127143][ T4356] playstation 0003:054C:0DF2.0019: Failed to retrieve DualSense firmware info: -71 [ 229.149320][ T4356] playstation 0003:054C:0DF2.0019: Failed to get firmware info from DualSense [ 229.159461][ T4356] playstation 0003:054C:0DF2.0019: Failed to create dualsense. [ 229.198114][ T4356] playstation: probe of 0003:054C:0DF2.0019 failed with error -71 [ 229.217527][ T4356] usb 8-1: USB disconnect, device number 2 [ 229.282842][ T9199] fido_id[9199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 229.588976][ T9198] loop4: detected capacity change from 0 to 32768 [ 229.652284][ T9210] loop3: detected capacity change from 0 to 8192 [ 229.726218][ T9210] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.783532][ T9217] loop7: detected capacity change from 0 to 256 [ 229.925262][ T9219] loop4: detected capacity change from 0 to 1024 [ 229.974975][ T9219] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 230.042618][ T9226] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1430'. [ 230.276551][ T9233] loop0: detected capacity change from 0 to 128 [ 230.347566][ T9233] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 230.375148][ T4778] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 230.403246][ T9233] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 230.419466][ T9233] FAT-fs (loop0): Filesystem has been set read-only [ 230.441552][ T9233] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 230.500153][ T9210] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 230.563323][ T9210] FAT-fs (loop3): Filesystem has been set read-only [ 230.599039][ T9210] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 230.624624][ T9210] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 230.635108][ T4778] usb 8-1: Using ep0 maxpacket: 8 [ 230.814578][ T9246] bridge0: port 4(vlan2) entered blocking state [ 230.827147][ T9246] bridge0: port 4(vlan2) entered disabled state [ 230.835731][ T4190] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 230.839735][ T9246] device vlan2 entered promiscuous mode [ 230.853018][ T9246] device geneve0 entered promiscuous mode [ 230.915091][ T4777] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 230.928172][ T9248] loop4: detected capacity change from 0 to 256 [ 230.955492][ T4778] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 230.965518][ T4778] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.967293][ T9248] exfat: Deprecated parameter 'utf8' [ 230.973637][ T4778] usb 8-1: Product: syz [ 230.973655][ T4778] usb 8-1: Manufacturer: syz [ 230.973668][ T4778] usb 8-1: SerialNumber: syz [ 230.979565][ T4778] usb 8-1: config 0 descriptor?? [ 230.995973][ T9248] exfat: Deprecated parameter 'namecase' [ 231.016922][ T9248] exfat: Deprecated parameter 'namecase' [ 231.022984][ T9248] exfat: Deprecated parameter 'utf8' [ 231.051748][ T4778] gspca_main: se401-2.14.0 probing 047d:5003 [ 231.056613][ T9248] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 231.238735][ T9260] loop3: detected capacity change from 0 to 1024 [ 231.288991][ T9260] EXT4-fs (loop3): Ignoring removed bh option [ 231.334081][ T9260] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,barrier=0x0000000000000000,barrier=0x0000000000000004,noauto_da_alloc,quota,quota,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: writeback. [ 231.358043][ T4777] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.368873][ T4777] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.447989][ T9260] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.1447: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 231.470335][ T4777] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 231.479664][ T4777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 231.487644][ T9260] EXT4-fs (loop3): Remounting filesystem read-only [ 231.490193][ T4777] usb 1-1: SerialNumber: syz [ 231.505043][ T4778] gspca_se401: Too many frame sizes [ 231.541502][ T9270] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.1448: iget: bad i_size value: 38620345925642 [ 231.562272][ T9270] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1448: couldn't read orphan inode 15 (err -117) [ 231.575128][ T9270] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.591792][ T4190] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /308/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 231.630726][ T4190] EXT4-fs (loop3): Remounting filesystem read-only [ 231.638064][ T4190] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /308/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 231.661051][ T9272] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1448: bg 0: block 5: invalid block bitmap [ 231.665873][ T4190] EXT4-fs (loop3): Remounting filesystem read-only [ 231.683923][ T9272] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 231.685452][ T4190] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 231.703971][ T9272] EXT4-fs (loop4): This should not happen!! Data will be lost [ 231.703971][ T9272] [ 231.724415][ T4778] usb 8-1: USB disconnect, device number 3 [ 231.744580][ T4190] EXT4-fs (loop3): Remounting filesystem read-only [ 231.749609][ T9272] EXT4-fs (loop4): Total free blocks count 0 [ 231.756205][ T4190] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 231.757777][ T9272] EXT4-fs (loop4): Free/Dirty block details [ 231.777827][ T9272] EXT4-fs (loop4): free_blocks=0 [ 231.782883][ T9272] EXT4-fs (loop4): dirty_blocks=424 [ 231.786479][ T4190] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /308/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 231.789427][ T9272] EXT4-fs (loop4): Block reservation details [ 231.812803][ T4777] usb 1-1: 0:2 : does not exist [ 231.817106][ T9272] EXT4-fs (loop4): i_reserved_data_blocks=424 [ 231.826262][ T4190] EXT4-fs (loop3): Remounting filesystem read-only [ 231.833984][ T4190] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /308/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 231.861937][ T155] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 416 with error 28 [ 231.880769][ T4190] EXT4-fs (loop3): Remounting filesystem read-only [ 231.880858][ T155] EXT4-fs (loop4): This should not happen!! Data will be lost [ 231.880858][ T155] [ 231.894741][ T4777] usb 1-1: USB disconnect, device number 22 [ 231.913012][ T4190] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 232.003147][ T4190] EXT4-fs (loop3): Remounting filesystem read-only [ 232.020359][ T4190] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 232.037370][ T4190] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /308/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 232.092265][ T4190] EXT4-fs (loop3): Remounting filesystem read-only [ 232.099849][ T4190] EXT4-fs error (device loop3): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /308/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 232.127058][ T4190] EXT4-fs (loop3): Remounting filesystem read-only [ 232.133943][ T4190] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 232.164770][ T4190] EXT4-fs (loop3): Remounting filesystem read-only [ 232.172181][ T4190] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 232.219530][ T4190] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 232.247787][ T4190] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 232.264637][ T4190] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 232.281323][ T4190] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 232.298104][ T9281] set_capacity_and_notify: 1 callbacks suppressed [ 232.298119][ T9281] loop4: detected capacity change from 0 to 8192 [ 232.338399][ T4190] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 232.377345][ T4190] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 232.396957][ T9281] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.451742][ T4190] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 233.214599][ T9312] loop7: detected capacity change from 0 to 512 [ 233.236185][ T9281] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 233.278922][ T9281] FAT-fs (loop4): Filesystem has been set read-only [ 233.289605][ T9312] EXT4-fs (loop7): Test dummy encryption mode enabled [ 233.298995][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.307493][ T9312] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 233.309844][ T9281] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 233.355233][ T9281] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 233.373003][ T9293] loop0: detected capacity change from 0 to 32768 [ 233.376512][ T9312] EXT4-fs (loop7): 1 truncate cleaned up [ 233.396095][ T9312] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,test_dummy_encryption=v1,nomblk_io_submit,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,auto_da_alloc,nodiscard,,errors=continue. Quota mode: none. [ 233.434950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.459719][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.574448][ T8768] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 233.624587][ T8768] EXT4-fs error (device loop7): ext4_lookup:1858: inode #11: comm syz-executor: inode has both inline data and extents flags [ 233.640165][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.677877][ T8768] EXT4-fs error (device loop7): ext4_lookup:1858: inode #11: comm syz-executor: inode has both inline data and extents flags [ 233.824940][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.913419][ T4199] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 234.047418][ T9323] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1471'. [ 234.350343][ T9330] loop4: detected capacity change from 0 to 32768 [ 234.443381][ T9330] JBD2: Ignoring recovery information on journal [ 234.451303][ T9330] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 234.460007][ T9330] JBD2: bad block at offset 32 [ 234.483894][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.504635][ T9330] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 234.659822][ T4199] ocfs2: Unmounting device (7,4) on (node local) [ 234.754685][ T9349] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 234.798794][ T9318] chnl_net:caif_netlink_parms(): no params data found [ 235.453549][ T9318] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.470755][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.486829][ T9318] device bridge_slave_0 entered promiscuous mode [ 235.514895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.555177][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.562279][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.591000][ T9318] device bridge_slave_1 entered promiscuous mode [ 235.663206][ T155] device erspan0 left promiscuous mode [ 235.739710][ T9318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.742572][ T9362] loop0: detected capacity change from 0 to 131072 [ 235.781114][ T155] device gretap0 left promiscuous mode [ 235.806500][ T9318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.823158][ T9362] F2FS-fs (loop0): invalid crc value [ 235.845265][ T4777] Bluetooth: hci1: command 0x0409 tx timeout [ 235.873985][ T9362] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.923234][ T9362] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 235.925016][ T9318] team0: Port device team_slave_0 added [ 235.975961][ T9364] chnl_net:caif_netlink_parms(): no params data found [ 236.003722][ T9318] team0: Port device team_slave_1 added [ 236.138631][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.146335][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.173582][ T9318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.186785][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.194502][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.223427][ T9318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.340053][ T9318] device hsr_slave_0 entered promiscuous mode [ 236.366854][ T9318] device hsr_slave_1 entered promiscuous mode [ 236.375544][ T9318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.383122][ T9318] Cannot create hsr debugfs directory [ 236.415472][ T9364] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.438195][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.455335][ T9364] device bridge_slave_0 entered promiscuous mode [ 236.509439][ T9364] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.524906][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.533110][ T9364] device bridge_slave_1 entered promiscuous mode [ 236.617179][ T155] device hsr_slave_0 left promiscuous mode [ 236.631818][ T155] device hsr_slave_1 left promiscuous mode [ 236.656979][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.672230][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.692955][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.713025][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.733708][ T155] bridge0: port 3(bond0) entered disabled state [ 236.744615][ T155] device bridge_slave_1 left promiscuous mode [ 236.759202][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.772174][ T155] device bridge_slave_0 left promiscuous mode [ 236.783762][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.814046][ T155] device veth1_macvtap left promiscuous mode [ 236.830536][ T155] device veth0_macvtap left promiscuous mode [ 237.027378][ T155] team0 (unregistering): Port device team_slave_1 removed [ 237.046994][ T155] team0 (unregistering): Port device team_slave_0 removed [ 237.059349][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.068377][ T155] device bond_slave_1 left promiscuous mode [ 237.081563][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.092308][ T155] device bond_slave_0 left promiscuous mode [ 237.159848][ T155] bond0 (unregistering): Released all slaves [ 237.206794][ T9364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.232796][ T9364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.274250][ T9364] team0: Port device team_slave_0 added [ 237.285344][ T8557] Bluetooth: hci3: command 0x0409 tx timeout [ 237.306026][ T9364] team0: Port device team_slave_1 added [ 237.413633][ T9364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.421231][ T9364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.449638][ T9364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.471391][ T9364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.483450][ T9364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.515490][ T9364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.625781][ T9364] device hsr_slave_0 entered promiscuous mode [ 237.632602][ T9364] device hsr_slave_1 entered promiscuous mode [ 237.645956][ T9364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.653594][ T9364] Cannot create hsr debugfs directory [ 237.672988][ T9318] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 237.710871][ T9318] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 237.758319][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.788926][ T9318] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 237.826270][ T9318] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 237.925186][ T4778] Bluetooth: hci1: command 0x041b tx timeout [ 238.077510][ T9318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.109888][ T9364] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 238.151054][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.174657][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.188505][ T9318] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.203762][ T9364] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 238.216674][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.235667][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.255219][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.262315][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.285202][ T9364] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 238.309104][ T9364] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 238.330053][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.384167][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.400791][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.413652][ T4905] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.420807][ T4905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.437032][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.452212][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.464434][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.482627][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.520398][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.538580][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.557444][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.569853][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.579273][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.588070][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.597716][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.616444][ T9318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.755432][ T9364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.798631][ T9364] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.805487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.825709][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.834156][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.856807][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.875625][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.895633][ T4905] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.902756][ T4905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.932338][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.957186][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.972442][ T4905] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.979590][ T4905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.021298][ T9318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.032756][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.044297][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.067662][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.085834][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.130187][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.146643][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.154224][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.171811][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.193920][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.217270][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.235679][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.249507][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.265581][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.296911][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.316073][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.355624][ T4777] Bluetooth: hci3: command 0x041b tx timeout [ 239.474117][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.491582][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.509231][ T9318] device veth0_vlan entered promiscuous mode [ 239.527282][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.536997][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.561021][ T9318] device veth1_vlan entered promiscuous mode [ 239.585498][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.594134][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.616496][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.634197][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.676663][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.692545][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.707179][ T9318] device veth0_macvtap entered promiscuous mode [ 239.728535][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.745730][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.753356][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.772341][ T9364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.789206][ T9318] device veth1_macvtap entered promiscuous mode [ 239.838172][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.845063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.865362][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.886993][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.910161][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.921791][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.932528][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.945168][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.956944][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.968548][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.988038][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.996177][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 240.019440][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.046090][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.061443][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.083935][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.094575][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.107435][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.117608][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.129114][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.139459][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.153689][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.165821][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.184565][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.193607][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.216403][ T9318] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.235227][ T9318] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.244072][ T9318] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.275207][ T9318] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.349619][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.380635][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.457079][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.472147][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.502958][ T9364] device veth0_vlan entered promiscuous mode [ 240.513171][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.525606][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.551978][ T4466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.560607][ T4466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.574357][ T155] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.602633][ T9364] device veth1_vlan entered promiscuous mode [ 240.619665][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.632290][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.681707][ T155] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.712011][ T4466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.732118][ T4466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.768835][ T155] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.790558][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.802365][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.814113][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.824742][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.839340][ T9364] device veth0_macvtap entered promiscuous mode [ 240.863660][ T155] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.877696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.893130][ T9364] device veth1_macvtap entered promiscuous mode [ 240.938319][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.950244][ T9508] netlink: 'syz.4.1490': attribute type 11 has an invalid length. [ 240.992751][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.003770][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.014698][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.025393][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.038843][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.054907][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.072044][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.082543][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.099586][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.111479][ T9364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.140835][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.159312][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.183516][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.195118][ T23] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 241.204614][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.228426][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.250841][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.263262][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.285368][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.296980][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.307734][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.318888][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.329714][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.339911][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.352151][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.364636][ T9364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.382525][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.392815][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.407509][ T9364] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.424902][ T9364] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.434226][ T9364] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.445892][ T4771] Bluetooth: hci3: command 0x040f tx timeout [ 241.460726][ T9364] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.561024][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.620515][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.731553][ T4905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.758133][ T4905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.774387][ T9529] loop8: detected capacity change from 0 to 8192 [ 241.816435][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.825363][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.834859][ T4466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.844644][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.849255][ T4466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.860122][ T23] usb 1-1: Product: syz [ 241.860143][ T23] usb 1-1: Manufacturer: syz [ 241.860158][ T23] usb 1-1: SerialNumber: syz [ 241.908086][ T9529] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.918743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.997619][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.085171][ T4237] Bluetooth: hci1: command 0x0419 tx timeout [ 242.375795][ T23] usb 1-1: cannot find UAC_HEADER [ 242.421204][ T23] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 242.422012][ T9560] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1487'. [ 242.482218][ T4514] udevd[4514]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.579118][ T23] usb 1-1: USB disconnect, device number 23 [ 242.749274][ T9570] loop9: detected capacity change from 0 to 512 [ 242.783370][ T9529] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 242.822428][ T9529] FAT-fs (loop8): Filesystem has been set read-only [ 242.831643][ T9529] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 242.856981][ T9570] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 242.886378][ T9529] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 242.964894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.990094][ T9570] EXT4-fs (loop9): 1 truncate cleaned up [ 242.998315][ T9570] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.081560][ T155] device hsr_slave_0 left promiscuous mode [ 243.109514][ T155] device hsr_slave_1 left promiscuous mode [ 243.157196][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.157587][ T9583] sctp: [Deprecated]: syz.0.1497 (pid 9583) Use of int in max_burst socket option deprecated. [ 243.157587][ T9583] Use struct sctp_assoc_value instead [ 243.165588][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.190680][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.201374][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.212192][ T155] device bridge_slave_1 left promiscuous mode [ 243.282954][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.344391][ T155] device bridge_slave_0 left promiscuous mode [ 243.358572][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.419523][ T155] device veth1_macvtap left promiscuous mode [ 243.429516][ T155] device veth0_macvtap left promiscuous mode [ 243.460521][ T155] device veth1_vlan left promiscuous mode [ 243.488468][ T155] device veth0_vlan left promiscuous mode [ 243.515639][ T7300] Bluetooth: hci3: command 0x0419 tx timeout [ 243.917223][ T9590] loop8: detected capacity change from 0 to 32768 [ 243.931189][ T155] team0 (unregistering): Port device team_slave_1 removed [ 243.945012][ T4357] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 243.956180][ T155] team0 (unregistering): Port device team_slave_0 removed [ 243.997064][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.049013][ T9590] XFS (loop8): Mounting V5 Filesystem [ 244.055244][ T9609] loop0: detected capacity change from 0 to 8 [ 244.115681][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.150652][ T9609] SQUASHFS error: zstd decompression error: 2 [ 244.158389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.184990][ T4357] usb 10-1: Using ep0 maxpacket: 8 [ 244.215847][ T9609] SQUASHFS error: zstd decompression failed, data probably corrupt [ 244.234716][ T9590] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 244.257144][ T9609] SQUASHFS error: Failed to read block 0x62b: -5 [ 244.266684][ T9609] SQUASHFS error: Unable to read metadata cache entry [629] [ 244.266725][ T9613] SQUASHFS error: Unable to read metadata cache entry [629] [ 244.281995][ T9613] SQUASHFS error: Unable to read directory block [629:ff26] [ 244.308768][ T9609] SQUASHFS error: Unable to read directory block [629:ff26] [ 244.343341][ T9590] XFS (loop8): Starting recovery (logdev: internal) [ 244.374396][ T9590] XFS (loop8): Ending recovery (logdev: internal) [ 244.403085][ T155] bond0 (unregistering): Released all slaves [ 244.483268][ T9590] XFS (loop8): Metadata corruption detected at xfs_btree_lookup_get_block+0x444/0x660, xfs_bnobt block 0x8 [ 244.515157][ T9590] XFS (loop8): Unmount and run xfs_repair [ 244.646836][ T9620] loop0: detected capacity change from 0 to 128 [ 244.726295][ T9620] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 244.791880][ T9620] hpfs: filesystem error: improperly stopped [ 244.818326][ T9620] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 244.842139][ T9620] hpfs: You really don't want any checks? You are crazy... [ 244.861670][ T9620] hpfs: Code page index out of array [ 244.879366][ T9620] hpfs: code page support is disabled [ 244.901470][ T9620] hpfs: hpfs_map_4sectors(): unaligned read [ 244.907714][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e02c00: rx timeout, send abort [ 244.935777][ T9620] hpfs: hpfs_map_4sectors(): unaligned read [ 244.942988][ T9620] hpfs: filesystem error: unable to find root dir [ 245.194888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.400589][ T9318] XFS (loop8): Unmounting Filesystem [ 245.408599][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062bcb800: rx timeout, send abort [ 245.418329][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e02c00: abort rx timeout. Force session deactivation [ 245.711072][ T9651] loop0: detected capacity change from 0 to 1764 [ 245.917456][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062bcb800: abort rx timeout. Force session deactivation [ 246.234901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.715912][ T4357] usb 10-1: unable to get BOS descriptor or descriptor too short [ 246.777722][ T9688] loop9: detected capacity change from 0 to 1024 [ 246.795577][ T4357] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 246.803289][ T4357] usb 10-1: can't read configurations, error -71 [ 246.850290][ T9688] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 246.959821][ T9688] EXT4-fs (loop9): mounted filesystem without journal. Opts: mblk_io_submit,errors=continue,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,,errors=continue. Quota mode: none. [ 247.022015][ T9696] loop4: detected capacity change from 0 to 128 [ 247.098180][ T9688] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.140077][ T9686] loop0: detected capacity change from 0 to 32768 [ 247.201657][ T9688] EXT4-fs (loop9): shut down requested (2) [ 247.207779][ T9696] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci2-linux-5-15-kasan/syz-executor /root/ci2-linux-5-15-kasan/syz-executor /newroot/316/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 247.267242][ T9674] loop8: detected capacity change from 0 to 32768 [ 247.354696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.544168][ T9674] find_entry called with index = 0 [ 247.551774][ T9674] read_mapping_page failed! [ 247.572416][ T9674] ERROR: (device loop8): txCommit: [ 247.572416][ T9674] [ 247.646865][ T9686] XFS (loop0): Mounting V5 Filesystem [ 247.703067][ T9674] read_mapping_page failed! [ 247.729823][ T9674] ERROR: (device loop8): txCommit: [ 247.729823][ T9674] [ 247.811048][ T9723] loop9: detected capacity change from 0 to 4096 [ 247.844160][ T9686] XFS (loop0): Ending clean mount [ 247.875319][ T1252] read_mapping_page failed! [ 247.884466][ T1252] ERROR: (device loop8): txCommit: [ 247.884466][ T1252] [ 247.964974][ T1252] jfs_write_inode: jfs_commit_inode failed! [ 247.981441][ T9723] ntfs3: loop9: Failed to load $Extend. [ 248.367433][ T9723] ntfs3: loop9: ino=5, "/" directory corrupted [ 248.394901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.412786][ T4191] XFS (loop0): Unmounting Filesystem [ 248.413120][ T9723] ntfs3: loop9: ino=5, "/" directory corrupted [ 248.490150][ T9738] ntfs3: loop9: ino=5, "/" directory corrupted [ 248.843890][ T9750] loop9: detected capacity change from 0 to 128 [ 249.249344][ T9724] loop4: detected capacity change from 0 to 40427 [ 249.274455][ T9765] hub 1-0:1.0: USB hub found [ 249.312731][ T9765] hub 1-0:1.0: 1 port detected [ 249.316264][ T9724] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 249.326242][ T9768] loop0: detected capacity change from 0 to 128 [ 249.394511][ T9724] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 249.427242][ T9768] affs: No valid root block on device loop0 [ 249.434954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.493733][ T9724] F2FS-fs (loop4): invalid crc value [ 249.593155][ T9724] F2FS-fs (loop4): Found nat_bits in checkpoint [ 249.771615][ T9780] device syzkaller1 entered promiscuous mode [ 249.819782][ T9724] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 249.840405][ T9724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 249.861821][ T9755] loop8: detected capacity change from 0 to 32768 [ 250.006800][ T9755] ea_get: invalid extended attribute [ 250.083517][ T26] audit: type=1800 audit(1780937891.445:454): pid=9755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1539" name="file1" dev="loop8" ino=4 res=0 errno=0 [ 250.356172][ T9800] tipc: Started in network mode [ 250.418506][ T9800] tipc: Node identity ac1414aa, cluster identity 4711 [ 250.475126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.479390][ T9800] tipc: Enabled bearer , priority 10 [ 250.834964][ T4357] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 251.002430][ T9831] loop9: detected capacity change from 0 to 128 [ 251.064525][ T9831] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 251.085097][ T4357] usb 1-1: Using ep0 maxpacket: 32 [ 251.205113][ T4357] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 251.221404][ T4357] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 251.280369][ T4357] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 251.294991][ T4357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 251.334850][ T4357] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 251.364959][ T4357] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 251.412067][ T4357] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 251.455725][ T4357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.485058][ T4771] tipc: Node number set to 2886997162 [ 251.506819][ T4357] usb 1-1: config 0 descriptor?? [ 251.514928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.525187][ T9811] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 251.632640][ T9824] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 251.687649][ T9824] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 251.756692][ T4357] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 251.805936][ T9824] F2FS-fs (loop8): Found nat_bits in checkpoint [ 251.976232][ T4357] usb 1-1: USB disconnect, device number 24 [ 251.999177][ T4357] usblp0: removed [ 252.059392][ T9859] set_capacity_and_notify: 2 callbacks suppressed [ 252.059408][ T9859] loop4: detected capacity change from 0 to 512 [ 252.093731][ T9824] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 252.107192][ T9824] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 252.198327][ T9824] attempt to access beyond end of device [ 252.198327][ T9824] loop8: rw=2049, want=45104, limit=40427 [ 252.250600][ T9840] loop6: detected capacity change from 0 to 32768 [ 252.255858][ T9859] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 252.276066][ T9824] attempt to access beyond end of device [ 252.276066][ T9824] loop8: rw=0, want=45104, limit=40427 [ 252.320561][ T9859] ext4 filesystem being mounted at /322/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.431957][ T9840] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 252.546802][ T9859] EXT4-fs (loop4): shut down requested (2) [ 252.555103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.641343][ T4905] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 252.668339][ T9840] (syz.6.1560,9840,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 252.735623][ T4905] Quota error (device loop4): write_blk: dquota write failed [ 252.743140][ T4905] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 252.845769][ T4905] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 252.857138][ T26] audit: type=1326 audit(1780937894.225:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9880 comm="syz.0.1569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0dd196e59 code=0x0 [ 252.899188][ T4905] Quota error (device loop4): write_blk: dquota write failed [ 252.912608][ T6073] ocfs2: Unmounting device (7,6) on (node local) [ 252.925197][ T4905] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 253.002511][ T4905] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 253.015562][ T9856] loop9: detected capacity change from 0 to 32768 [ 253.093611][ T4905] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 253.176529][ T9856] XFS (loop9): Mounting V5 Filesystem [ 253.231664][ T9892] loop6: detected capacity change from 0 to 1024 [ 253.435135][ T9856] XFS (loop9): Ending clean mount [ 253.448428][ T9856] XFS (loop9): Quotacheck needed: Please wait. [ 253.558192][ T9900] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 253.595154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.625840][ T9856] XFS (loop9): Quotacheck: Done. [ 253.756387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.821204][ T9914] loop4: detected capacity change from 0 to 512 [ 253.900307][ T9364] XFS (loop9): Unmounting Filesystem [ 253.986156][ T9914] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 253.986156][ T9914] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 253.986156][ T9914] [ 254.131782][ T9914] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84e8018, mo2=0002] [ 254.140524][ T9914] System zones: 0-2, 18-18, 34-34 [ 254.227808][ T9914] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 254.245158][ T9914] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 254.292554][ T9931] loop6: detected capacity change from 0 to 256 [ 254.300508][ T9914] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1577: Failed to acquire dquot type 1 [ 254.406073][ T9914] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 254.461242][ T9914] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1577: Failed to acquire dquot type 1 [ 254.534044][ T9908] loop0: detected capacity change from 0 to 32768 [ 254.574382][ T9914] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1577: bg 0: block 248: padding at end of block bitmap is not set [ 254.636751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.660789][ T9908] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 254.660789][ T9908] [ 254.754050][ T9914] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 254.773991][ T9908] ERROR: (device loop0): remounting filesystem as read-only [ 254.795864][ T9908] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 254.795864][ T9908] [ 254.872537][ T9914] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1577: Failed to acquire dquot type 1 [ 254.930284][ T9908] xtLookup: xtSearch returned -5 [ 254.953725][ T9914] EXT4-fs (loop4): 1 orphan inode deleted [ 254.973713][ T9914] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouser_xattr,debug,quota,,errors=continue. Quota mode: writeback. [ 254.997345][ T9908] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 254.997345][ T9908] [ 255.042720][ T9914] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.162947][ T9914] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 255.678905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.688079][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.694407][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.936810][ T9979] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1585'. [ 255.970527][ T8557] kernel write not supported for file /input/event0 (pid: 8557 comm: kworker/0:31) [ 256.134467][ T9992] loop9: detected capacity change from 0 to 256 [ 256.171543][ T9984] loop0: detected capacity change from 0 to 2048 [ 256.298074][ T9984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.564449][T10002] loop8: detected capacity change from 0 to 7 [ 256.628031][T10002] Dev loop8: unable to read RDB block 7 [ 256.652897][T10002] loop8: unable to read partition table [ 256.685120][T10002] loop8: partition table beyond EOD, truncated [ 256.731309][T10002] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 256.780550][ T9964] XFS (loop6): Mounting V5 Filesystem [ 256.963257][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.976889][T10020] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.033163][T10020] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.138557][ T9964] XFS (loop6): Ending clean mount [ 257.154156][ T9964] XFS (loop6): Quotacheck needed: Please wait. [ 257.330701][ T1219] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.375208][ T9964] XFS (loop6): Quotacheck: Done. [ 257.394374][T10036] set_capacity_and_notify: 2 callbacks suppressed [ 257.394399][T10036] loop9: detected capacity change from 0 to 8 [ 257.450496][ T9999] loop4: detected capacity change from 0 to 32768 [ 257.491987][T10039] input: syz0 as /devices/virtual/input/input25 [ 257.530797][ T9999] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1599 (9999) [ 257.591506][T10036] SQUASHFS error: zlib decompression failed, data probably corrupt [ 257.608105][ T6073] XFS (loop6): Unmounting Filesystem [ 257.613694][T10036] SQUASHFS error: Failed to read block 0x9b: -5 [ 257.625270][T10036] SQUASHFS error: Unable to read metadata cache entry [99] [ 257.632523][T10036] SQUASHFS error: Unable to read inode 0x127 [ 257.647936][ T9999] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 257.688540][ T9999] BTRFS info (device loop4): using free space tree [ 257.737756][ T9999] BTRFS info (device loop4): has skinny extents [ 257.862636][T10050] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 257.873774][T10050] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 257.989479][ T4238] [ 257.991860][ T4238] ====================================================== [ 257.998962][ T4238] WARNING: possible circular locking dependency detected [ 258.006018][ T4238] syzkaller #0 Not tainted [ 258.010438][ T4238] ------------------------------------------------------ [ 258.017463][ T4238] kworker/1:6/4238 is trying to acquire lock: [ 258.023542][ T4238] ffff88807d8f5028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 258.034776][ T4238] [ 258.034776][ T4238] but task is already holding lock: [ 258.042152][ T4238] ffffffff8d6c73e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 258.044860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.051213][ T4238] [ 258.051213][ T4238] which lock already depends on the new lock. [ 258.051213][ T4238] [ 258.051220][ T4238] [ 258.051220][ T4238] the existing dependency chain (in reverse order) is: [ 258.051224][ T4238] [ 258.051224][ T4238] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 258.051263][ T4238] __mutex_lock_common+0x1e3/0x2400 [ 258.092477][ T4238] mutex_lock_nested+0x17/0x20 [ 258.097772][ T4238] rfkill_register+0x33/0x980 [ 258.102988][ T4238] hci_register_dev+0x452/0x970 [ 258.108394][ T4238] vhci_create_device+0x32c/0x5c0 [ 258.113953][ T4238] vhci_write+0x391/0x450 [ 258.119168][ T4238] vfs_write+0x745/0xd60 [ 258.123939][ T4238] ksys_write+0x152/0x260 [ 258.128870][ T4238] do_syscall_64+0x4c/0xa0 [ 258.133794][ T4238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.140201][ T4238] [ 258.140201][ T4238] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 258.148276][ T4238] __mutex_lock_common+0x1e3/0x2400 [ 258.154011][ T4238] mutex_lock_nested+0x17/0x20 [ 258.159305][ T4238] vhci_send_frame+0x88/0x100 [ 258.164593][ T4238] hci_send_frame+0x1a9/0x2e0 [ 258.169782][ T4238] hci_tx_work+0x9f9/0x1710 [ 258.174795][ T4238] process_one_work+0x85f/0x1010 [ 258.180244][ T4238] worker_thread+0xaa6/0x1290 [ 258.185450][ T4238] kthread+0x436/0x520 [ 258.190031][ T4238] ret_from_fork+0x1f/0x30 [ 258.194979][ T4238] [ 258.194979][ T4238] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 258.204204][ T4238] __flush_work+0x116/0x210 [ 258.209220][ T4238] hci_dev_do_close+0x1e7/0x1030 [ 258.214665][ T4238] hci_unregister_dev+0x2eb/0x590 [ 258.220297][ T4238] vhci_release+0x73/0xc0 [ 258.225145][ T4238] __fput+0x234/0x930 [ 258.229635][ T4238] task_work_run+0x125/0x1a0 [ 258.234764][ T4238] do_exit+0x626/0x20c0 [ 258.239441][ T4238] do_group_exit+0x12e/0x300 [ 258.244561][ T4238] __x64_sys_exit_group+0x3b/0x40 [ 258.250105][ T4238] do_syscall_64+0x4c/0xa0 [ 258.255139][ T4238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.261555][ T4238] [ 258.261555][ T4238] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 258.269622][ T4238] __mutex_lock_common+0x1e3/0x2400 [ 258.275438][ T4238] mutex_lock_nested+0x17/0x20 [ 258.280816][ T4238] bg_scan_update+0x44/0x3b0 [ 258.285966][ T4238] process_one_work+0x85f/0x1010 [ 258.291596][ T4238] worker_thread+0xaa6/0x1290 [ 258.296800][ T4238] kthread+0x436/0x520 [ 258.301393][ T4238] ret_from_fork+0x1f/0x30 [ 258.306449][ T4238] [ 258.306449][ T4238] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 258.316261][ T4238] __lock_acquire+0x2c42/0x7d10 [ 258.321644][ T4238] lock_acquire+0x19e/0x400 [ 258.326687][ T4238] __flush_work+0x116/0x210 [ 258.331718][ T4238] __cancel_work_timer+0x3f4/0x560 [ 258.337432][ T4238] hci_request_cancel_all+0xcc/0x300 [ 258.343231][ T4238] hci_dev_do_close+0x4e/0x1030 [ 258.348684][ T4238] hci_rfkill_set_block+0x10a/0x190 [ 258.354483][ T4238] rfkill_set_block+0x1c9/0x3d0 [ 258.359848][ T4238] rfkill_epo+0x75/0x170 [ 258.364597][ T4238] rfkill_op_handler+0x76/0x220 [ 258.369966][ T4238] process_one_work+0x85f/0x1010 [ 258.375695][ T4238] worker_thread+0xaa6/0x1290 [ 258.380906][ T4238] kthread+0x436/0x520 [ 258.385502][ T4238] ret_from_fork+0x1f/0x30 [ 258.390429][ T4238] [ 258.390429][ T4238] other info that might help us debug this: [ 258.390429][ T4238] [ 258.400638][ T4238] Chain exists of: [ 258.400638][ T4238] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 258.400638][ T4238] [ 258.416348][ T4238] Possible unsafe locking scenario: [ 258.416348][ T4238] [ 258.423870][ T4238] CPU0 CPU1 [ 258.429225][ T4238] ---- ---- [ 258.434575][ T4238] lock(rfkill_global_mutex); [ 258.439327][ T4238] lock(&data->open_mutex); [ 258.446421][ T4238] lock(rfkill_global_mutex); [ 258.453687][ T4238] lock((work_completion)(&hdev->bg_scan_update)); [ 258.460258][ T4238] [ 258.460258][ T4238] *** DEADLOCK *** [ 258.460258][ T4238] [ 258.468382][ T4238] 3 locks held by kworker/1:6/4238: [ 258.473559][ T4238] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 258.484167][ T4238] #1: ffffc9000364fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 258.494584][ T4238] #2: ffffffff8d6c73e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 258.504062][ T4238] [ 258.504062][ T4238] stack backtrace: [ 258.510043][ T4238] CPU: 1 PID: 4238 Comm: kworker/1:6 Not tainted syzkaller #0 [ 258.517492][ T4238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.527572][ T4238] Workqueue: events rfkill_op_handler [ 258.532971][ T4238] Call Trace: [ 258.536341][ T4238] [ 258.539265][ T4238] dump_stack_lvl+0x188/0x250 [ 258.543967][ T4238] ? load_image+0x400/0x400 [ 258.548919][ T4238] ? show_regs_print_info+0x20/0x20 [ 258.554106][ T4238] ? print_circular_bug+0x12b/0x1a0 [ 258.559298][ T4238] check_noncircular+0x296/0x330 [ 258.564313][ T4238] ? look_up_lock_class+0x71/0x110 [ 258.569423][ T4238] ? add_chain_block+0x940/0x940 [ 258.574698][ T4238] ? lockdep_lock+0xf1/0x1f0 [ 258.579409][ T4238] ? __lock_acquire+0x12e8/0x7d10 [ 258.584511][ T4238] ? mark_lock+0x94/0x320 [ 258.588830][ T4238] ? _find_first_zero_bit+0xce/0xf0 [ 258.594104][ T4238] __lock_acquire+0x2c42/0x7d10 [ 258.598951][ T4238] ? verify_lock_unused+0x140/0x140 [ 258.604138][ T4238] ? deref_stack_reg+0xd0/0x120 [ 258.608983][ T4238] lock_acquire+0x19e/0x400 [ 258.613488][ T4238] ? __flush_work+0xfa/0x210 [ 258.618065][ T4238] ? __lock_acquire+0x7d10/0x7d10 [ 258.623081][ T4238] ? read_lock_is_recursive+0x10/0x10 [ 258.628483][ T4238] ? start_flush_work+0x776/0x820 [ 258.633510][ T4238] __flush_work+0x116/0x210 [ 258.638000][ T4238] ? __flush_work+0xfa/0x210 [ 258.642671][ T4238] ? flush_work+0x20/0x20 [ 258.646986][ T4238] ? try_to_grab_pending+0xfa/0x7f0 [ 258.652176][ T4238] ? mark_lock+0x94/0x320 [ 258.656494][ T4238] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 258.662557][ T4238] ? lock_chain_count+0x20/0x20 [ 258.667406][ T4238] ? mark_lock+0x94/0x320 [ 258.671810][ T4238] ? __cancel_work_timer+0x36a/0x560 [ 258.677114][ T4238] __cancel_work_timer+0x3f4/0x560 [ 258.682305][ T4238] ? cancel_work_sync+0x20/0x20 [ 258.687227][ T4238] ? __cancel_work+0x1f9/0x2e0 [ 258.692065][ T4238] ? lockdep_hardirqs_on+0x94/0x140 [ 258.697260][ T4238] ? __cancel_work+0x27b/0x2e0 [ 258.702014][ T4238] ? cancel_work+0x20/0x20 [ 258.706415][ T4238] hci_request_cancel_all+0xcc/0x300 [ 258.711701][ T4238] hci_dev_do_close+0x4e/0x1030 [ 258.716536][ T4238] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 258.722423][ T4238] ? _raw_spin_unlock+0x40/0x40 [ 258.727262][ T4238] hci_rfkill_set_block+0x10a/0x190 [ 258.732453][ T4238] ? rcu_lock_release+0x20/0x20 [ 258.737307][ T4238] rfkill_set_block+0x1c9/0x3d0 [ 258.742243][ T4238] rfkill_epo+0x75/0x170 [ 258.746767][ T4238] rfkill_op_handler+0x76/0x220 [ 258.752431][ T4238] process_one_work+0x85f/0x1010 [ 258.757724][ T4238] ? worker_detach_from_pool+0x240/0x240 [ 258.763354][ T4238] ? lockdep_hardirqs_off+0x70/0x100 [ 258.768641][ T4238] ? _raw_spin_lock_irq+0xb7/0xf0 [ 258.773658][ T4238] ? _raw_spin_lock_irqsave+0x100/0x100 [ 258.779219][ T4238] ? wq_worker_running+0x97/0x170 [ 258.784250][ T4238] worker_thread+0xaa6/0x1290 [ 258.788973][ T4238] kthread+0x436/0x520 [ 258.793128][ T4238] ? rcu_lock_release+0x20/0x20 [ 258.797965][ T4238] ? kthread_blkcg+0xd0/0xd0 [ 258.802544][ T4238] ret_from_fork+0x1f/0x30 [ 258.806953][ T4238] [ 258.979228][ T9999] BTRFS info (device loop4): enabling ssd optimizations [ 259.028492][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 259.028505][ T26] audit: type=1800 audit(1780937900.395:456): pid=9999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1599" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 259.125113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.357165][T10086] loop6: detected capacity change from 0 to 128 [ 259.394586][T10086] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 259.447699][T10086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.165073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.195075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.234954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.557319][ T4266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.594919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog