last executing test programs: 3m27.681053728s ago: executing program 0 (id=278): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m27.23052704s ago: executing program 0 (id=282): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000001340)=""/4073, 0xfe9}], 0x1) 3m25.271504389s ago: executing program 0 (id=288): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000040c0)=[{&(0x7f00000030c0)=""/4096, 0x1000}], 0x1) close$binfmt(r0) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) 3m25.059258964s ago: executing program 0 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 3m24.859247249s ago: executing program 0 (id=292): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0x5, 0x6b5, &(0x7f0000001540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) 3m24.491419169s ago: executing program 0 (id=297): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000780)) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) 3m9.432338899s ago: executing program 32 (id=297): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000780)) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) 2m47.21316525s ago: executing program 2 (id=549): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0xcc040}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) 2m46.646893754s ago: executing program 2 (id=555): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4c}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x40}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x40844) 2m46.3929457s ago: executing program 2 (id=557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x40, r1, 0x211, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]]}, 0x40}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) 2m46.118488547s ago: executing program 2 (id=559): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000)={[{@showassoc}, {@nojoliet}, {@map_acorn}]}, 0x1, 0x566, &(0x7f0000000540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x8) getdents(r0, &(0x7f0000000880)=""/232, 0xe8) 2m45.597215831s ago: executing program 2 (id=562): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2) 2m44.597596836s ago: executing program 2 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x208411, 0x0) 2m44.01503882s ago: executing program 33 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x208411, 0x0) 28.474802741s ago: executing program 5 (id=1675): r0 = io_uring_setup(0x6e71, &(0x7f0000000040)={0x0, 0x800000, 0x2, 0x4, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1) 27.508475716s ago: executing program 5 (id=1687): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='|', 0x1) 27.247273983s ago: executing program 5 (id=1691): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000002ac0)='./file0\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='./file0\x00') rmdir(0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x44440, 0x0) 25.919942766s ago: executing program 5 (id=1702): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 24.900790132s ago: executing program 5 (id=1710): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141700) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 24.233628648s ago: executing program 5 (id=1714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 23.809077929s ago: executing program 34 (id=1714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 5.603919909s ago: executing program 7 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1d003300d0"], 0x44}}, 0x0) 5.331255366s ago: executing program 7 (id=1832): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = io_uring_setup(0x3bda, &(0x7f0000000300)={0x0, 0xbbc7, 0x80, 0x2, 0x200010}) close(r0) poll(0x0, 0x0, 0x72) 4.975040255s ago: executing program 7 (id=1836): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x7f) ppoll(&(0x7f0000000040)=[{r0, 0x1000}, {r0, 0xa000}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz1\x00', 0x0}) 3.911286212s ago: executing program 7 (id=1847): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.686414527s ago: executing program 3 (id=1850): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) 3.658989338s ago: executing program 1 (id=1851): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) bind$rds(r0, 0x0, 0x0) 3.394516715s ago: executing program 6 (id=1853): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0xfffffdfc) 3.266764838s ago: executing program 3 (id=1854): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x6, 0x3d, @private1, @loopback, 0x40, 0x7800, 0xfffffffc}}) 3.071723453s ago: executing program 6 (id=1856): r0 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x1df}) r1 = memfd_create(&(0x7f0000000000)='\x06\x00\x00 \x00\x00\x00\x00\x00\x04\x00\x00', 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x1, r0, 0x12, {0x0, 0x7ff}, 0x99}, 0x1) 2.682544733s ago: executing program 6 (id=1857): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYBLOB="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", @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000100)) 2.681195543s ago: executing program 3 (id=1858): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x1}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000940)="ece0", 0x2}], 0x1, 0x0, 0x0, 0x1}, 0x4800) 2.560670275s ago: executing program 4 (id=1859): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 2.226906135s ago: executing program 6 (id=1860): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 2.104307547s ago: executing program 1 (id=1861): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="de49f2", @ANYRESHEX], 0xd) 1.904740662s ago: executing program 4 (id=1862): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = dup(r0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @loopback, 0x18000000}, 0x1c) write$P9_RGETATTR(r1, &(0x7f0000000040)={0xa0, 0x19, 0x1, {0x1040, {0x1, 0x3, 0x4}, 0x80, 0x0, 0x0, 0xb, 0x8, 0x6, 0x2, 0x7ffffffffffffffd, 0x7, 0x8, 0x40000009, 0x7, 0x1, 0x1ff, 0x4, 0x98, 0x9f1, 0x7fffffffffffffff}}, 0xa0) 1.892861473s ago: executing program 6 (id=1863): syz_open_procfs(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000009b000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="00000000000000003aa3b4b4a208", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.839848524s ago: executing program 1 (id=1864): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.610426039s ago: executing program 1 (id=1865): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xb) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 1.534627812s ago: executing program 3 (id=1866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6, 0x0, 0x8, 0x0, 0xd7b, 0x8, 0x6, 0xb, 0x7, 0xe, 0x5, 0xa, 0x0, 0x101, 0x26, 0x0, 0x0, 0x0, 0x80, '\x00', 0xff, 0x9}) 1.529653502s ago: executing program 4 (id=1867): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x74, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl(r0, 0x7, 0x0) 1.066194054s ago: executing program 4 (id=1868): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x3000, 0x0, 0x9) 687.144623ms ago: executing program 6 (id=1869): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xd15}}, 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r0 = syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5513, &(0x7f0000005d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=r0]) 569.659336ms ago: executing program 7 (id=1870): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 565.101056ms ago: executing program 1 (id=1871): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_router\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdd1f}, {0xa, 0x4e22, 0x3, @private1, 0x9cc}, 0xffffffffffffffff, 0x2}}, 0x48) 563.773816ms ago: executing program 4 (id=1872): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2) 546.420287ms ago: executing program 3 (id=1873): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x5c4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x598, 0x2, [@TCA_BPF_ACT={0x594, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0xfffd, 0x6, 0x1}, {0x387b, 0x0, 0x7, 0xb5}, {0x81, 0x1, 0x4, 0x4}, {0x77e, 0xf, 0x7, 0x66}, {0x26, 0xff, 0x1f, 0x800}, {0x4, 0x1, 0x14, 0x200}, {0xfe3, 0x7, 0x9, 0x4}, {0x7, 0x2, 0xc2}]}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file0/file0\x00'}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xc, 0x10, 0x7, 0x6}]}]}, {0x99, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e102"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x434, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0xe, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x7, 0x6, 0x1000, 0x613, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x15, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x5, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x4, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x3, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x80000001, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0x0, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x2, 0x0, 0x423, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6175, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0xfff, 0x1000, 0x80000000, 0x2797, 0x4, 0x3, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x5c4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 280.594973ms ago: executing program 1 (id=1874): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c085) 101.433878ms ago: executing program 3 (id=1875): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3004000, &(0x7f0000000340), 0x2, 0x7ad, &(0x7f0000002080)="$eJzs3c9rHFUcAPDvbHaT9GdSUbCKGvDQgpgmseAPFFLwKCKoJy8NybaUbn/QRLAhQovYk8eC4EUEwYs3xYsgpSdFvPQi/Q+kUiQIrdJDZCaTzTbdTTfNbiZxPx+YzZt5s/ve7PKdNz9e5gXQs0bSl1LEwYi4lEQM5cuTiKhkqXLE5PJ6dxcXpv9ZXJhOYmnp3b+SbJ07iwvT0fCe1J78bYMRceN6Eo/1PVju7MX501O1WvVCPn9k7sz5I7MX5188dWbqZPVk9ezExMSrE0fHXx6b6Ni2fvLMr9/du/L2p5/vv3n1zxs/7E9iMvbmeY3b0SkjMVL/ThqVI+LNThdWkL58e0oNy5LympUGt7hStK3U8Bs+GUPRF6s/3lBc/77QygEAXbGUTgBAj0m0/wDQY1auA9xZXJhemYq9IgFsldvHlu/PpnF/N5+Wc8oxmf0dzPoB7P47icbbuslK34FNSj/j2w8qX6ZTdOk+PNDcpcvZjf8m7X+Sxf9w3nljbfz3ReT7h81Zuw8R/7B1NhP/73SgfPEPAAAAAAAAnXPtWES80uz+X6ne/yea3P8biIixDpT/8Pt/pVsdKAZo4vaxiNfzZ/vc3/+v/kSX4b58bl9EPBGV5MSpWnUs7mW9hw9HJd1NVMebf3y2y3j/yvhPrcpv7P+XTmn5K30B83rcKg/c/56ZqbmpzW43EHH7csRT5Wbxn9Tb/6RF/9/jbZbx48I3z7bKe3j8A92y9FXEoabt/+qT65L1n893JDseWH5tWsb88Tc+blV+W/G/+m9KQAel7f/u9eN/OGl8Xufsxsv47M7YF63yHvX4vz95L3uqaH++7KOpubkL4xH9yVsPLm/6CNGlgY1vCexsK/GwEi9p/B9+vvn5/3rH/5WION9mmV//XPm9Vd5IFqmO/6EIafzPbKj933ji39+ebrmraK/9P5q16YfzJa7/wfraDdCi6wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ1Uioi9kZRG6+lSaXQ0Yk9EPB67S7Vzs3MvnDj34dmZNC9iOCqlE6dq1bGIGFqeT9L58Sy9Oj+xZv6liDgQEVcHdmXzo9PnajNFbzwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5Pa0GP8/9cdAw4qTRdUQAOiKwaIrAABsOe0/APQe7T8A9J4Nt/+/7OtORQCALeP8HwB6j/YfAAAAAAAAAAAAAAAAAAAAAAAAALrqwHPXbiYRcem1XdmU6s/zKoXWDOi2UtEVAArTV3QFgMKU21kpSernBMD/h3N8IHlIfushQlxBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgdxw62O74/22NFArsIEbvg95l/H/oXY7qoXcZ/x/o1vj/ux6xPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsB3NXpw/PVWrVS9IdDpR3h7V2A6JgYjobhGDsT22tMBE+iXHWMc+sOg9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO8F/AQAA///IXxBG") chdir(&(0x7f00000003c0)='./file0\x00') syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0) 0s ago: executing program 4 (id=1876): socket$inet6(0xa, 0x80003, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) kernel console output (not intermixed with test programs): p3): unmounting filesystem. [ 164.668171][ T11] hfsplus: b-tree write err: -5, ino 25 [ 164.701768][ T11] hfsplus: b-tree write err: -5, ino 4 [ 164.746705][ T11] hfsplus: b-tree write err: -5, ino 2 [ 164.844931][ T6475] loop1: detected capacity change from 0 to 512 [ 164.929905][ T6475] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.995326][ T6475] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 165.084190][ T6475] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 165.180453][ T6475] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 165.234593][ T6475] System zones: 0-2, 18-18, 34-34 [ 165.270197][ T6475] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.746: bad orphan inode 15 [ 165.338886][ T6475] ext4_test_bit(bit=14, block=18) = 1 [ 165.407114][ T6475] is_bad_inode(inode)=0 [ 165.417245][ T6475] NEXT_ORPHAN(inode)=2264924160 [ 165.463920][ T6475] max_ino=32 [ 165.467169][ T6475] i_nlink=0 [ 165.517404][ T6475] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.746: corrupted inode contents [ 165.629690][ T6475] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #15: comm syz.1.746: mark_inode_dirty error [ 165.684330][ T6475] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.746: corrupted inode contents [ 165.753934][ T6475] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2950: inode #15: comm syz.1.746: mark_inode_dirty error [ 165.824135][ T6475] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2953: inode #15: comm syz.1.746: mark inode dirty (error -117) [ 165.894383][ T6475] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 165.954297][ T6475] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 166.434906][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 166.662103][ T6513] rnbd_client L125: Can't parse path ip:: -22 [ 166.929114][ T6523] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.034958][ T6526] loop6: detected capacity change from 0 to 512 [ 167.093465][ T6526] EXT4-fs: Ignoring removed nobh option [ 167.184816][ T6526] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 167.291060][ T6526] EXT4-fs (loop6): mount failed [ 167.529660][ T6546] loop3: detected capacity change from 0 to 2048 [ 167.720800][ T5373] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 167.754412][ T6546] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 167.824223][ T6558] team0: Cannot enslave team device to itself [ 167.855311][ T6546] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 167.923564][ T6557] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 167.941509][ T5373] usb 7-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 167.977517][ T5373] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.010596][ T5373] usb 7-1: Product: syz [ 168.022694][ T6557] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 168.048932][ T5373] usb 7-1: Manufacturer: syz [ 168.074339][ T5373] usb 7-1: SerialNumber: syz [ 168.320178][ T5373] usb 7-1: 1:1: All rates were zero [ 168.390415][ T5373] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 168.485156][ T6572] loop1: detected capacity change from 0 to 164 [ 168.532151][ T5373] usb 7-1: USB disconnect, device number 3 [ 169.047037][ T6584] loop5: detected capacity change from 0 to 512 [ 169.136777][ T6584] EXT4-fs (loop5): 1 truncate cleaned up [ 169.186265][ T6584] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 169.338454][ T27] audit: type=1800 audit(1791483630.330:18): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.779" name="file1" dev="loop5" ino=13 res=0 errno=0 [ 169.441113][ T6595] loop4: detected capacity change from 0 to 256 [ 169.547183][ T5427] EXT4-fs (loop5): unmounting filesystem. [ 169.797019][ T6595] FAT-fs (loop4): Directory bread(block 64) failed [ 169.947325][ T6595] FAT-fs (loop4): Directory bread(block 65) failed [ 170.036096][ T6595] FAT-fs (loop4): Directory bread(block 66) failed [ 170.049031][ T6605] loop5: detected capacity change from 0 to 512 [ 170.112021][ T6578] loop1: detected capacity change from 0 to 40427 [ 170.138909][ T6595] FAT-fs (loop4): Directory bread(block 67) failed [ 170.172911][ T6605] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 170.215896][ T6578] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 170.251378][ T6605] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.266433][ T6586] loop6: detected capacity change from 0 to 32768 [ 170.274087][ T6595] FAT-fs (loop4): Directory bread(block 68) failed [ 170.285550][ T6578] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 170.330667][ T6578] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff [ 170.365169][ T6595] FAT-fs (loop4): Directory bread(block 69) failed [ 170.398985][ T6586] XFS (loop6): Mounting V5 Filesystem [ 170.424106][ T6617] capability: warning: `syz.5.784' uses 32-bit capabilities (legacy support in use) [ 170.441332][ T6578] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 170.449196][ T6578] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 170.515005][ T6595] FAT-fs (loop4): Directory bread(block 70) failed [ 170.575646][ T6586] XFS (loop6): Ending clean mount [ 170.611711][ T6578] F2FS-fs (loop1): invalid crc value [ 170.637956][ T6595] FAT-fs (loop4): Directory bread(block 71) failed [ 170.648259][ T6586] XFS (loop6): Quotacheck needed: Please wait. [ 170.672714][ T6578] F2FS-fs (loop1): Found nat_bits in checkpoint [ 170.704927][ T5427] EXT4-fs (loop5): unmounting filesystem. [ 170.767752][ T6595] FAT-fs (loop4): Directory bread(block 72) failed [ 170.856662][ T6586] XFS (loop6): Quotacheck: Done. [ 170.908252][ T6595] FAT-fs (loop4): Directory bread(block 73) failed [ 170.958404][ T6578] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 171.023281][ T6578] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 171.169726][ T5967] XFS (loop6): Unmounting Filesystem [ 171.444934][ T4271] syz-executor: attempt to access beyond end of device [ 171.444934][ T4271] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.708265][ T6644] loop3: detected capacity change from 0 to 4096 [ 171.890570][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.981579][ T6649] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.136751][ T7] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 172.221001][ T7] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 172.287590][ T7] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 172.354636][ T7] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 172.404806][ T7] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 172.451285][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.524087][ T7] usb 6-1: Product: syz [ 172.549730][ T7] usb 6-1: Manufacturer: syz [ 172.579552][ T7] usb 6-1: SerialNumber: syz [ 172.632424][ T7] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 172.708461][ T7] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 172.754561][ T7] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 172.826413][ T6646] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 172.987469][ T4253] usb 6-1: USB disconnect, device number 2 [ 173.039976][ T6678] input: syz0 as /devices/virtual/input/input6 [ 173.050836][ T4253] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 173.127255][ T4253] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 173.192625][ T4253] ti_usb_3410_5052 6-1:2.0: device disconnected [ 173.504885][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 173.617539][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.801'. [ 174.262373][ T6718] tap0: tun_chr_ioctl cmd 1074025675 [ 174.288139][ T6718] tap0: persist disabled [ 174.400283][ T4253] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 174.494829][ T6727] loop6: detected capacity change from 0 to 16 [ 174.545630][ T6727] erofs: (device loop6): mounted with root inode @ nid 36. [ 174.626055][ T6727] syz.6.816: attempt to access beyond end of device [ 174.626055][ T6727] loop6: rw=0, sector=8, nr_sectors = 32 limit=16 [ 174.644985][ T4253] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.694201][ T4253] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 174.746346][ T6727] syz.6.816: attempt to access beyond end of device [ 174.746346][ T6727] loop6: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 174.763332][ T4253] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.811405][ T6736] loop1: detected capacity change from 0 to 4096 [ 174.829727][ T4253] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.844146][ T6727] syz.6.816: attempt to access beyond end of device [ 174.844146][ T6727] loop6: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 174.891894][ T4253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.924385][ T6736] NILFS (loop1): invalid segment: Checksum error in segment payload [ 174.964220][ T4253] usb 6-1: Product: syz [ 174.977389][ T6736] NILFS (loop1): trying rollback from an earlier position [ 174.995688][ T4253] usb 6-1: Manufacturer: syz [ 175.026050][ T4253] usb 6-1: SerialNumber: syz [ 175.086218][ T4253] usb 6-1: config 0 descriptor?? [ 175.098772][ T6736] NILFS (loop1): recovery complete [ 175.171769][ T6745] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.480924][ T4253] usb 6-1: USB disconnect, device number 3 [ 175.625890][ T4553] udevd[4553]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.759312][ T6755] loop1: detected capacity change from 0 to 512 [ 175.810016][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 175.861155][ T6755] EXT4-fs (loop1): 1 truncate cleaned up [ 175.866845][ T6755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.002208][ T6754] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.823: bg 0: block 465: padding at end of block bitmap is not set [ 176.031420][ T7] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 176.076355][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.272828][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 176.306304][ T6768] loop5: detected capacity change from 0 to 8 [ 176.496438][ T6768] SQUASHFS error: Unable to read directory block [629:fe] [ 176.576511][ T7] usb 7-1: Firmware: major: 242, minor: 233, hardware type: UNKNOWN (133) [ 176.781785][ T7] usb 7-1: failed to fetch extended address, random address set [ 176.830314][ T7] usb 7-1: atusb_probe: initialization failed, error = -524 [ 176.877729][ T7] atusb: probe of 7-1:1.0 failed with error -524 [ 176.929543][ T7] usb 7-1: USB disconnect, device number 4 [ 177.064463][ T6791] loop1: detected capacity change from 0 to 2048 [ 177.117615][ T6784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.145729][ T6791] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.187716][ T6793] loop5: detected capacity change from 0 to 4096 [ 177.243360][ T6784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.273582][ T6793] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 177.456883][ T6786] netlink: 'syz.3.833': attribute type 13 has an invalid length. [ 177.911297][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.043147][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.076237][ T6809] loop6: detected capacity change from 0 to 512 [ 178.163718][ T6786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.220033][ T6809] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 178.294237][ T6809] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.474424][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 178.584412][ T6820] syz.5.845 uses obsolete (PF_INET,SOCK_PACKET) [ 178.625815][ T6823] netlink: 'syz.1.847': attribute type 10 has an invalid length. [ 179.044182][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'. [ 180.033866][ T6874] loop4: detected capacity change from 0 to 512 [ 180.124972][ T6874] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.303413][ T6874] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.468712][ T6874] ext4 filesystem being mounted at /128/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.900158][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 181.273861][ T6923] loop4: detected capacity change from 0 to 64 [ 181.483830][ T6930] loop5: detected capacity change from 0 to 512 [ 181.554250][ T6930] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 181.594335][ T6933] loop1: detected capacity change from 0 to 736 [ 181.634166][ T6930] EXT4-fs error (device loop5): ext4_orphan_get:1435: comm syz.5.887: bad orphan inode 131083 [ 181.706993][ T6930] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 181.989185][ T5427] EXT4-fs (loop5): unmounting filesystem. [ 182.194912][ T6942] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 182.258787][ T6946] raw_sendmsg: syz.3.893 forgot to set AF_INET. Fix it! [ 182.771907][ T6969] loop1: detected capacity change from 0 to 256 [ 182.834646][ T6969] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 182.856738][ T6972] loop3: detected capacity change from 0 to 1024 [ 183.537099][ T6960] loop5: detected capacity change from 0 to 40427 [ 183.567108][ T6983] loop4: detected capacity change from 0 to 4096 [ 183.609940][ T6960] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 183.678042][ T6960] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 183.736726][ T6960] F2FS-fs (loop5): invalid crc value [ 183.803454][ T6983] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 183.860137][ T6960] F2FS-fs (loop5): Found nat_bits in checkpoint [ 184.077738][ T6983] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 184.120782][ T6960] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 184.181042][ T6960] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 184.372711][ T6983] ntfs: volume version 3.1. [ 184.767648][ T7009] loop1: detected capacity change from 0 to 1024 [ 184.901777][ T7009] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.055290][ T7009] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 185.468191][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 185.732723][ T7038] loop6: detected capacity change from 0 to 2048 [ 185.833967][ T7038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.948514][ T7046] loop5: detected capacity change from 0 to 512 [ 186.045493][ T7046] EXT4-fs: inline encryption not supported [ 186.124859][ T7046] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 186.204320][ T7046] EXT4-fs (loop5): 1 truncate cleaned up [ 186.285239][ T7046] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 186.395795][ T7046] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5972: inode #12: comm syz.5.923: bad extra_isize 62 (inode size 256) [ 186.512690][ T7046] EXT4-fs (loop5): Remounting filesystem read-only [ 186.563167][ T7046] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5972: inode #12: comm syz.5.923: bad extra_isize 62 (inode size 256) [ 186.647769][ T7046] EXT4-fs (loop5): Remounting filesystem read-only [ 186.712065][ T7065] loop1: detected capacity change from 0 to 512 [ 186.793082][ T7065] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 186.831546][ T5427] EXT4-fs (loop5): unmounting filesystem. [ 186.847594][ T7065] System zones: 0-2, 18-18, 34-35 [ 186.915689][ T7065] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 186.976765][ T7065] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.278423][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 187.677968][ T7105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.685706][ T7105] IPv6: NLM_F_CREATE should be set when creating new route [ 187.692989][ T7105] IPv6: NLM_F_CREATE should be set when creating new route [ 187.700239][ T7105] IPv6: NLM_F_CREATE should be set when creating new route [ 188.424837][ T7133] device batadv_slave_0 entered promiscuous mode [ 188.441152][ T7132] loop1: detected capacity change from 0 to 2048 [ 188.460799][ T7133] batman_adv: batadv0: Adding interface: macvtap1 [ 188.484520][ T7132] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 188.507302][ T7133] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.532768][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.583870][ T7136] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.731349][ T7133] batman_adv: batadv0: Interface activated: macvtap1 [ 188.971538][ T7149] loop3: detected capacity change from 0 to 256 [ 189.024017][ T7149] exfat: Deprecated parameter 'utf8' [ 189.040857][ T5373] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 189.091934][ T7149] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 189.239279][ T5373] usb 7-1: Using ep0 maxpacket: 32 [ 189.256793][ T5373] usb 7-1: config index 0 descriptor too short (expected 27632, got 27) [ 189.286489][ T5373] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 189.316886][ T5373] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 189.344727][ T5373] usb 7-1: config 1 has no interface number 0 [ 189.368361][ T5373] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.394790][ T7157] loop5: detected capacity change from 0 to 8192 [ 189.406343][ T5373] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 189.447947][ T7157] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 189.473006][ T5373] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 189.504633][ T5373] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.515884][ T7157] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 189.566215][ T7157] REISERFS (device loop5): using ordered data mode [ 189.590252][ T5373] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 189.617013][ T7157] reiserfs: using flush barriers [ 189.666816][ T7157] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.738289][ T7157] REISERFS (device loop5): checking transaction log (loop5) [ 189.767492][ T5373] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 190.043217][ T7157] REISERFS (device loop5): Using tea hash to sort names [ 190.074302][ T7157] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 190.266807][ T5373] usb 7-1: USB disconnect, device number 5 [ 190.286263][ T5373] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 190.433806][ T7164] loop4: detected capacity change from 0 to 8192 [ 190.505631][ T7164] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 190.643283][ T7164] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 190.691476][ T7160] loop3: detected capacity change from 0 to 32768 [ 190.718107][ T7164] REISERFS (device loop4): using ordered data mode [ 190.729139][ T7168] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 190.754380][ T7164] reiserfs: using flush barriers [ 190.772176][ T7160] XFS (loop3): Mounting V5 Filesystem [ 190.815616][ T7164] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.924706][ T7160] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 191.006894][ T7164] REISERFS (device loop4): checking transaction log (loop4) [ 191.057582][ T7160] XFS (loop3): Starting recovery (logdev: internal) [ 191.086476][ T7164] REISERFS (device loop4): Using r5 hash to sort names [ 191.150631][ T7164] REISERFS (device loop4): using 3.5.x disk format [ 191.180933][ T7160] XFS (loop3): Ending recovery (logdev: internal) [ 191.222367][ T7164] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 191.321159][ T7160] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x43b/0x660, xfs_bnobt block 0x8 [ 191.411844][ T7160] XFS (loop3): Unmount and run xfs_repair [ 191.549812][ T4273] XFS (loop3): Unmounting Filesystem [ 191.650239][ T1182] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 191.853442][ T1182] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 191.947643][ T1182] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.023646][ T1182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.060788][ T1182] usb 6-1: SerialNumber: syz [ 192.113273][ T1182] hub 6-1:1.0: bad descriptor, ignoring hub [ 192.153036][ T1182] hub: probe of 6-1:1.0 failed with error -5 [ 192.212625][ T7216] loop6: detected capacity change from 0 to 256 [ 192.346726][ T7216] exfat: Deprecated parameter 'utf8' [ 192.426154][ T7216] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 192.809717][ T1182] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 192.906680][ T7232] loop4: detected capacity change from 0 to 512 [ 193.022522][ T7232] EXT4-fs (loop4): orphan cleanup on readonly fs [ 193.081457][ T7] usb 6-1: USB disconnect, device number 4 [ 193.120417][ T7] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 193.140651][ T7232] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 193.224318][ T7243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.988'. [ 193.250038][ T7232] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 193.458303][ T7232] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.984: attempt to clear invalid blocks 2 len 1 [ 193.554493][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 193.642734][ T7250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.673912][ T7232] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.984: invalid indirect mapped block 1819239214 (level 0) [ 193.758292][ T7252] netlink: 'syz.1.989': attribute type 13 has an invalid length. [ 193.820739][ T7258] loop3: detected capacity change from 0 to 1024 [ 193.854761][ T7232] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.984: invalid indirect mapped block 1819239214 (level 1) [ 193.933354][ T7258] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.960378][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.012482][ T7241] loop6: detected capacity change from 0 to 32768 [ 194.027297][ T7261] loop5: detected capacity change from 0 to 4096 [ 194.042670][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.076979][ T7232] EXT4-fs (loop4): 1 truncate cleaned up [ 194.106428][ T7252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.132403][ T7241] XFS (loop6): Mounting V5 Filesystem [ 194.153885][ T7258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.172893][ T7232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.219556][ T7261] ntfs3: loop5: Failed to load $Extend. [ 194.237046][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.243436][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.361776][ T7241] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 194.449979][ T27] audit: type=1800 audit(1791483655.450:19): pid=7261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.993" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 194.535472][ T7241] XFS (loop6): Starting recovery (logdev: internal) [ 194.677520][ T7241] XFS (loop6): Ending recovery (logdev: internal) [ 194.754581][ T7232] EXT4-fs: Ignoring removed oldalloc option [ 194.816005][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 194.840265][ T7232] EXT4-fs: user quota file already specified [ 194.879414][ T7241] XFS (loop6): Metadata corruption detected at xfs_btree_lookup_get_block+0x43b/0x660, xfs_bnobt block 0x8 [ 195.037668][ T7241] XFS (loop6): Unmount and run xfs_repair [ 195.155283][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 195.164415][ T5967] XFS (loop6): Unmounting Filesystem [ 195.399620][ T7292] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1000'. [ 195.971248][ T7313] netlink: 'syz.5.1006': attribute type 10 has an invalid length. [ 196.036768][ T7313] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1006'. [ 196.310918][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 196.317028][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 196.595127][ T7334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 196.639575][ T5373] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 196.859532][ T5373] usb 6-1: Using ep0 maxpacket: 8 [ 196.886480][ T5373] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 196.914568][ T7340] sch_tbf: burst 2464 is lower than device lo mtu (65550) ! [ 196.969089][ T5373] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.015298][ T5373] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 197.075081][ T5373] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.091263][ T7343] program syz.3.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.106268][ T5373] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 197.137167][ T5373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.181587][ T5373] usb 6-1: config 0 descriptor?? [ 197.617551][ T5373] hid-alps 0003:044E:120C.0009: unknown main item tag 0x0 [ 197.657811][ T5373] hid-alps 0003:044E:120C.0009: unknown main item tag 0xe [ 197.665008][ T5373] hid-alps 0003:044E:120C.0009: unknown main item tag 0x0 [ 197.723369][ T7353] loop1: detected capacity change from 0 to 1024 [ 197.738372][ T7315] loop4: detected capacity change from 0 to 32768 [ 197.757772][ T5373] hid-alps 0003:044E:120C.0009: unknown main item tag 0x0 [ 197.764954][ T5373] hid-alps 0003:044E:120C.0009: unexpected long global item [ 197.836248][ T7353] hfsplus: b-tree write err: -5, ino 17 [ 197.880355][ T5373] hid-alps 0003:044E:120C.0009: parse failed [ 197.944826][ T5373] hid-alps: probe of 0003:044E:120C.0009 failed with error -22 [ 197.996732][ T7367] loop6: detected capacity change from 0 to 1024 [ 198.026768][ T5373] usb 6-1: USB disconnect, device number 5 [ 198.075963][ T7315] XFS (loop4): Mounting V5 Filesystem [ 198.095572][ T47] hfsplus: b-tree write err: -5, ino 4 [ 198.131638][ T7367] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 198.149633][ T47] hfsplus: b-tree write err: -5, ino 17 [ 198.351904][ T7315] XFS (loop4): Ending clean mount [ 198.587047][ T7384] loop1: detected capacity change from 0 to 256 [ 198.671497][ T7384] exfat: Deprecated parameter 'utf8' [ 198.736515][ T7384] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb956f73f, utbl_chksum : 0xe619d30d) [ 198.952566][ T4272] XFS (loop4): Unmounting Filesystem [ 199.185416][ T7400] loop9: detected capacity change from 0 to 524287871 [ 199.232241][ C0] I/O error, dev loop9, sector 524287616 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.277687][ C0] I/O error, dev loop9, sector 524287616 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.287813][ C0] Buffer I/O error on dev loop9, logical block 65535952, async page read [ 199.296296][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.305444][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 199.480092][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.489289][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 199.517449][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.526675][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 199.623992][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.633277][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 199.692524][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.701795][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 199.798812][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.808035][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 199.823718][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.832962][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 199.910823][ T7400] ldm_validate_partition_table(): Disk read failed. [ 199.939361][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.948569][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.077391][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 200.131498][ T7400] Dev loop9: unable to read RDB block 0 [ 200.162513][ T7400] loop9: unable to read partition table [ 200.196471][ T7400] loop_reread_partitions: partition scan of loop9 (žXHuJ[dw|i4F-ڣrwǘ3UȞJ?"e) failed (rc=-5) [ 200.485141][ T7428] loop3: detected capacity change from 0 to 512 [ 200.568815][ T7428] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 200.595830][ T7430] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1039'. [ 200.663274][ T7430] sch_fq: defrate 678942120 ignored. [ 200.730343][ T7428] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1038: bg 0: block 104: invalid block bitmap [ 200.897019][ T7437] loop5: detected capacity change from 0 to 4096 [ 200.921010][ T7428] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 201.024035][ T7428] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1038: invalid indirect mapped block 1 (level 1) [ 201.046297][ T7437] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 201.103697][ T1182] kernel write not supported for file /input/mice (pid: 1182 comm: kworker/0:2) [ 201.129030][ T7437] UDF-fs: Scanning with blocksize 512 failed [ 201.192022][ T7437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.228123][ T7428] EXT4-fs (loop3): 1 truncate cleaned up [ 201.245518][ T7445] loop6: detected capacity change from 0 to 512 [ 201.296079][ T7428] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 201.345164][ T7445] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 201.360923][ T7437] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 201.462979][ T7445] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.1043: invalid indirect mapped block 32768 (level 2) [ 201.480710][ T7437] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0 [ 201.540667][ T7428] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 201.593863][ T7445] EXT4-fs (loop6): 1 orphan inode deleted [ 201.636655][ T7445] EXT4-fs (loop6): 1 truncate cleaned up [ 201.686305][ T7445] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 201.804103][ T27] audit: type=1800 audit(1791483662.799:20): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1043" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 201.847152][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 201.883929][ T5427] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 201.951132][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 202.048837][ T5427] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0 [ 202.142985][ T5427] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 202.172562][ T7465] loop6: detected capacity change from 0 to 1024 [ 202.227052][ T5427] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1328) has too big (2088) entry at pos 0 [ 202.274775][ T7465] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.294089][ T7505] si4713 0-0006: IRQ not configured. Using timeouts. [ 203.336395][ T7505] si4713 0-0006: Error while sending command 0x01 [ 203.373608][ T7505] si4713 0-0006: Failed to probe device information. [ 203.413835][ T7505] si4713: probe of 0-0006 failed with error -5 [ 203.453345][ T7505] i2c i2c-0: new_device: Instantiated device si4713 at 0x06 [ 203.718969][ T7519] ip_tables: iptables: counters copy to user failed while replacing table [ 203.984801][ T7527] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 204.106333][ T7525] ipt_CLUSTERIP: Please specify destination IP [ 204.306790][ T7541] loop6: detected capacity change from 0 to 2048 [ 204.429320][ T7541] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 204.560156][ T27] audit: type=1800 audit(1791483665.559:21): pid=7541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1073" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 204.580488][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.733323][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 205.287551][ T7569] CUSE: unknown device info "" [ 205.344509][ T7569] CUSE: unknown device info "" [ 205.424554][ T7569] CUSE: unknown device info "w" [ 205.467249][ T7574] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 205.481020][ T7569] CUSE: unknown device info "" [ 205.510877][ T7577] CUSE: DEVNAME unspecified [ 205.557117][ T7569] CUSE: unknown device info "" [ 205.602788][ T7569] CUSE: unknown device info "" [ 205.689977][ T7569] CUSE: unknown device info "" [ 205.726186][ T7569] CUSE: unknown device info "" [ 205.820671][ T7569] CUSE: DEVNAME unspecified [ 205.930090][ T7588] tap0: tun_chr_ioctl cmd 1074025677 [ 205.970779][ T7588] tap0: linktype set to 1 [ 206.381647][ T7600] loop3: detected capacity change from 0 to 164 [ 207.068366][ T7620] loop6: detected capacity change from 0 to 512 [ 207.150909][ T7620] EXT4-fs: inline encryption not supported [ 207.211598][ T7620] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 207.300578][ T7626] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 207.340729][ T7620] EXT4-fs (loop6): 1 truncate cleaned up [ 207.370974][ T7620] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 207.601300][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 207.624344][ T7639] loop3: detected capacity change from 0 to 128 [ 207.856983][ T7639] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 207.960144][ T7639] hpfs: filesystem error: improperly stopped [ 208.017734][ T7639] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 208.085807][ T7639] hpfs: You really don't want any checks? You are crazy... [ 208.162304][ T7639] hpfs: hpfs_map_sector(): read error [ 208.213396][ T7639] hpfs: code page support is disabled [ 208.276167][ T7639] hpfs: hpfs_map_4sectors(): unaligned read [ 208.334723][ T7639] hpfs: hpfs_map_4sectors(): unaligned read [ 208.383842][ T7639] hpfs: filesystem error: unable to find root dir [ 208.521912][ T7639] hpfs: hpfs_map_4sectors(): unaligned read [ 208.574351][ T7639] hpfs: hpfs_map_sector(): read error [ 209.238399][ T7688] device erspan0 entered promiscuous mode [ 209.606177][ T7709] loop1: detected capacity change from 0 to 512 [ 209.651123][ T7702] ipt_CLUSTERIP: Please specify destination IP [ 209.673450][ T7709] EXT4-fs: inline encryption not supported [ 209.712016][ T7709] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 209.803076][ T7709] EXT4-fs (loop1): 1 truncate cleaned up [ 209.819100][ T7714] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.841107][ T7709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 210.014773][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 210.296353][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 210.417263][ T7727] netlink: 'syz.4.1131': attribute type 21 has an invalid length. [ 211.429701][ T7748] loop1: detected capacity change from 0 to 64 [ 211.592799][ T7726] loop3: detected capacity change from 0 to 32768 [ 213.692845][ T7805] loop1: detected capacity change from 0 to 4096 [ 213.831736][ T7809] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.212068][ T7819] loop3: detected capacity change from 0 to 256 [ 214.365548][ T7819] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.703345][ T7828] loop4: detected capacity change from 0 to 16 [ 214.850799][ T7828] erofs: (device loop4): mounted with root inode @ nid 36. [ 215.029081][ T7828] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 215.188575][ T7828] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 215.278259][ T7828] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 215.397087][ T7828] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 215.534052][ T7828] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 215.654877][ T7851] loop5: detected capacity change from 0 to 256 [ 215.663536][ T7828] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 215.736458][ T7851] exfat: Deprecated parameter 'utf8' [ 215.763086][ T7855] loop1: detected capacity change from 0 to 1024 [ 215.801288][ T27] audit: type=1800 audit(1791483676.799:22): pid=7828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1162" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 215.841886][ T7851] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 215.939109][ T7855] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 216.308998][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 216.321199][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1174'. [ 216.772482][ T7877] bond0: invalid ARP target specified [ 217.125139][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1184'. [ 217.578387][ T7912] loop6: detected capacity change from 0 to 256 [ 217.759396][ T7912] FAT-fs (loop6): Directory bread(block 64) failed [ 217.796380][ T7912] FAT-fs (loop6): Directory bread(block 65) failed [ 217.836769][ T7912] FAT-fs (loop6): Directory bread(block 66) failed [ 217.880954][ T7912] FAT-fs (loop6): Directory bread(block 67) failed [ 217.923530][ T7912] FAT-fs (loop6): Directory bread(block 68) failed [ 217.964258][ T7912] FAT-fs (loop6): Directory bread(block 69) failed [ 217.998224][ T7912] FAT-fs (loop6): Directory bread(block 70) failed [ 218.033437][ T7912] FAT-fs (loop6): Directory bread(block 71) failed [ 218.075518][ T7912] FAT-fs (loop6): Directory bread(block 72) failed [ 218.117895][ T7912] FAT-fs (loop6): Directory bread(block 73) failed [ 218.401712][ T7938] kAFS: bad VL server IP address [ 218.756860][ T27] audit: type=1326 audit(1791483679.759:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd661b9a88 code=0x7ffc0000 [ 218.780767][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.795977][ T1182] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 218.940327][ T27] audit: type=1326 audit(1791483679.819:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd661b9a88 code=0x7ffc0000 [ 218.964215][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.974175][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 219.011076][ T1182] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.062331][ T1182] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 219.105178][ T1182] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 219.139859][ T27] audit: type=1326 audit(1791483679.819:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43979e1d9 code=0x7ffc0000 [ 219.163728][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.181592][ T1182] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.195633][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 219.215838][ T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 219.259161][ T1182] usb 7-1: config 0 descriptor?? [ 219.294430][ T1182] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 219.303162][ T14] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 219.333257][ T7968] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.344561][ T1182] dvb-usb: bulk message failed: -22 (3/0) [ 219.367811][ T14] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 219.376882][ T27] audit: type=1326 audit(1791483679.819:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc43979df42 code=0x7ffc0000 [ 219.429189][ T14] usb 4-1: Product: syz [ 219.438788][ T1182] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 219.469922][ T7941] dvb-usb: bulk message failed: -22 (4/0) [ 219.485643][ T14] usb 4-1: Manufacturer: syz [ 219.508662][ T14] usb 4-1: SerialNumber: syz [ 219.513988][ T1182] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 219.554269][ T14] usb 4-1: config 0 descriptor?? [ 219.569500][ T1182] usb 7-1: media controller created [ 219.574871][ T27] audit: type=1326 audit(1791483679.819:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc43979dfd7 code=0x7ffc0000 [ 219.618807][ T7947] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 219.633783][ T1182] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.687376][ T14] hub 4-1:0.0: bad descriptor, ignoring hub [ 219.717203][ T14] hub: probe of 4-1:0.0 failed with error -5 [ 219.752259][ T1182] dvb-usb: bulk message failed: -22 (6/0) [ 219.770083][ T27] audit: type=1326 audit(1791483679.819:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc43975aed1 code=0x7ffc0000 [ 219.794018][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.813811][ T1182] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 219.883961][ T1182] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 219.988887][ T1182] dvb-usb: schedule remote query interval to 150 msecs. [ 220.005561][ T27] audit: type=1326 audit(1791483679.819:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc43979efc9 code=0x7ffc0000 [ 220.029452][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.063060][ T1182] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 220.126552][ T1182] usb 7-1: USB disconnect, device number 6 [ 220.235700][ T27] audit: type=1326 audit(1791483679.819:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc43975af3b code=0x7ffc0000 [ 220.259531][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.273655][ T7981] Bluetooth: MGMT ver 1.22 [ 220.300351][ T1182] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 220.386799][ T7] usb 4-1: USB disconnect, device number 4 [ 220.491424][ T27] audit: type=1326 audit(1791483679.819:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.1.1203" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43979e1d9 code=0x7ffc0000 [ 221.008827][ T8011] loop6: detected capacity change from 0 to 1024 [ 221.078363][ T8011] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 221.211492][ T8019] loop1: detected capacity change from 0 to 512 [ 221.397980][ T8019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 221.464472][ T8019] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.719440][ T8036] loop5: detected capacity change from 0 to 16 [ 221.789008][ T8036] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 221.808099][ T1182] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 221.855170][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 221.998012][ T1182] usb 7-1: Using ep0 maxpacket: 32 [ 222.019423][ T1182] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 222.068402][ T1182] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 222.125313][ T1182] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 222.158942][ T8039] loop1: detected capacity change from 0 to 4096 [ 222.192681][ T1182] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 222.233963][ T8039] NILFS (loop1): invalid segment: Checksum error in segment payload [ 222.277997][ T8039] NILFS (loop1): trying rollback from an earlier position [ 222.288175][ T1182] usb 7-1: config 0 interface 0 has no altsetting 0 [ 222.377323][ T1182] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 222.425133][ T8039] NILFS (loop1): recovery complete [ 222.457948][ T1182] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 222.485685][ T8050] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.535070][ T1182] usb 7-1: Product: syz [ 222.559601][ T1182] usb 7-1: Manufacturer: syz [ 222.603254][ T1182] usb 7-1: SerialNumber: syz [ 222.634115][ T1182] usb 7-1: config 0 descriptor?? [ 222.680828][ T1182] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 222.744147][ T1182] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 222.932324][ T8058] i2c i2c-0: new_device: Can't parse I2C address [ 222.945706][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 223.158894][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 223.194812][ T7] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 223.257779][ T4253] usb 7-1: USB disconnect, device number 7 [ 223.273298][ T7] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 223.298443][ T4253] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 223.318755][ T7] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 223.337833][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 223.372582][ T7] usb 6-1: Product: syz [ 223.388658][ T7] usb 6-1: Manufacturer: syz [ 223.402462][ T7] usb 6-1: SerialNumber: syz [ 223.433404][ T7] usb 6-1: config 0 descriptor?? [ 223.461681][ T8047] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 223.488808][ T7] hub 6-1:0.0: bad descriptor, ignoring hub [ 223.511054][ T8068] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input8 [ 223.533905][ T7] hub: probe of 6-1:0.0 failed with error -5 [ 223.888747][ T4253] usb 6-1: USB disconnect, device number 6 [ 223.960154][ T8087] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1244'. [ 224.023162][ T8090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1244'. [ 224.228749][ T8087] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1244'. [ 224.326626][ T8090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1244'. [ 224.751582][ T8087] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1244'. [ 224.976837][ T7] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 225.174383][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 225.174394][ T27] audit: type=1400 audit(1791483686.169:62): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8126 comm="syz.4.1254" name="unknown" offset=82 [ 225.203194][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 225.221701][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.279691][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.343342][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.402209][ T7] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 225.448513][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.509452][ T7] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 225.543452][ T7] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 225.577243][ T7] usb 6-1: Manufacturer: syz [ 225.607846][ T7] usb 6-1: config 0 descriptor?? [ 225.791182][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1269'. [ 225.920859][ T8148] loop3: detected capacity change from 0 to 1024 [ 226.037678][ T8148] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 226.084994][ T7] rc_core: IR keymap rc-hauppauge not found [ 226.112497][ T7] Registered IR keymap rc-empty [ 226.130198][ T8154] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1262'. [ 226.161276][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.234974][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.283161][ T8152] i2c i2c-0: new_device: Instantiated device isp1301 at 0x24 [ 226.315827][ T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 226.396787][ T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 226.552800][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.657911][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.724942][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.785057][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.855548][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.894931][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.968500][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.981209][ T8176] loop4: detected capacity change from 0 to 1024 [ 227.012737][ T8177] WARNING! power/level is deprecated; use power/control instead [ 227.030545][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 227.036817][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 227.074943][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 227.147678][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 227.215668][ T7] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 227.274443][ T7] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 227.380893][ T7] usb 6-1: USB disconnect, device number 7 [ 228.260519][ T8217] rnbd_client L125: Can't parse path i: -93 [ 228.298474][ T8180] loop6: detected capacity change from 0 to 40427 [ 228.386937][ T8180] F2FS-fs (loop6): invalid crc value [ 228.431054][ T8180] F2FS-fs (loop6): Found nat_bits in checkpoint [ 228.647559][ T8180] F2FS-fs (loop6): Start checkpoint disabled! [ 228.753426][ T8180] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 228.770189][ T8233] program syz.1.1290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.028001][ T8240] loop1: detected capacity change from 0 to 256 [ 229.072302][ T8242] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 229.139983][ T8240] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 229.183043][ T11] kworker/u4:1: attempt to access beyond end of device [ 229.183043][ T11] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 230.461071][ T8278] loop5: detected capacity change from 0 to 2048 [ 230.470253][ T8281] loop1: detected capacity change from 0 to 128 [ 230.490253][ T8282] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1305'. [ 230.521630][ T8281] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.616846][ T8284] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.689694][ T8281] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.865826][ T4298] wlan1: Trigger new scan to find an IBSS to join [ 230.946737][ T7] kernel write not supported for file [eventfd] (pid: 7 comm: kworker/0:0) [ 230.964702][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 231.303236][ T8300] loop1: detected capacity change from 0 to 512 [ 231.337597][ T4253] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 231.368289][ T8300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.433773][ T8300] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 231.527552][ T8300] EXT4-fs (loop1): orphan cleanup on readonly fs [ 231.571284][ T4253] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 231.585488][ T8300] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 231.617573][ T4253] usb 4-1: config 220 has an invalid descriptor of length 69, skipping remainder of the config [ 231.631926][ T8300] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 231.666247][ T8265] loop6: detected capacity change from 0 to 65536 [ 231.672885][ T4253] usb 4-1: config 220 has no interface number 2 [ 231.703456][ T4253] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 231.723384][ T8300] EXT4-fs (loop1): 1 truncate cleaned up [ 231.760188][ T8300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 231.797150][ T4253] usb 4-1: config 220 interface 0 has no altsetting 0 [ 231.841883][ T4253] usb 4-1: config 220 interface 76 has no altsetting 0 [ 231.886489][ T4253] usb 4-1: config 220 interface 1 has no altsetting 0 [ 231.913938][ T8300] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 231.942230][ T4253] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 231.999229][ T4253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.028076][ T4253] usb 4-1: Product: syz [ 232.032256][ T4253] usb 4-1: Manufacturer: syz [ 232.070992][ T4253] usb 4-1: SerialNumber: syz [ 232.109125][ T8265] XFS (loop6): Mounting V5 Filesystem [ 232.162858][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 232.192783][ T8265] XFS (loop6): Ending clean mount [ 232.292879][ T8265] XFS (loop6): Quotacheck needed: Please wait. [ 232.338417][ T4253] uvcvideo 4-1:220.1: Unknown video format 448b07f5-fe05-ffff-ffff-030000ffffff [ 232.372744][ T47] XFS (loop6): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x8002 [ 232.401078][ T9] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x6 [ 232.439124][ T4253] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 232.460979][ T47] XFS (loop6): Unmount and run xfs_repair [ 232.468140][ T4253] usb 4-1: No valid video chain found. [ 232.487308][ T9] XFS (loop6): Unmount and run xfs_repair [ 232.493074][ T9] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 232.503611][ T47] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 232.523509][ T4253] usb 4-1: selecting invalid altsetting 0 [ 232.542329][ T8286] loop4: detected capacity change from 0 to 32768 [ 232.557958][ T47] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 232.601285][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 232.619584][ T4253] usb 4-1: selecting invalid altsetting 0 [ 232.639361][ T47] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 232.668813][ T4253] usbtest: probe of 4-1:220.1 failed with error -22 [ 232.682151][ T9] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 232.703896][ T8286] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1306 (8286) [ 232.727759][ T47] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 232.752072][ T4253] usb 4-1: USB disconnect, device number 5 [ 232.771237][ T9] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 232.812536][ T47] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 232.849780][ T9] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 232.888997][ T47] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 232.925495][ T9] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 232.961598][ T8286] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 232.978780][ T47] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 233.009719][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 233.033668][ T8335] loop1: detected capacity change from 0 to 256 [ 233.053723][ T47] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 233.093434][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 233.127034][ T8335] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d) [ 233.147141][ T47] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 233.176078][ T8286] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 233.204290][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 233.254485][ T47] XFS (loop6): metadata I/O error in "xfs_read_agi+0x2a2/0x660" at daddr 0x8002 len 1 error 74 [ 233.296409][ T9] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x6 len 2 error 74 [ 233.362296][ T8286] BTRFS info (device loop4): using free space tree [ 233.402646][ T8265] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 233.639553][ T5967] XFS (loop6): Unmounting Filesystem [ 233.657103][ T8286] BTRFS info (device loop4): enabling ssd optimizations [ 233.737260][ T8366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 233.961311][ T8373] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 234.026931][ T4272] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 234.287314][ T8378] loop5: detected capacity change from 0 to 512 [ 234.363098][ T8381] loop3: detected capacity change from 0 to 512 [ 234.412363][ T8378] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 234.467096][ T8378] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.755083][ T5427] EXT4-fs (loop5): unmounting filesystem. [ 234.869547][ T4341] wlan1: Trigger new scan to find an IBSS to join [ 235.703273][ T5370] hid-generic 0005:046D:C082.000A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 235.784036][ T5369] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 235.812984][ T9] wlan1: Creating new IBSS network, BSSID 12:59:e2:28:a4:66 [ 235.996562][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1339'. [ 236.017706][ T8421] fido_id[8421]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 236.044137][ T5369] usb 6-1: Using ep0 maxpacket: 32 [ 236.076536][ T5369] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 236.090610][ T8426] device veth1_to_team entered promiscuous mode [ 236.117955][ T5369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.172822][ T5369] usb 6-1: config 0 descriptor?? [ 236.195483][ T8426] device veth1_to_team left promiscuous mode [ 236.399179][ T5369] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 236.463257][ T5369] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 236.528894][ T8438] loop6: detected capacity change from 0 to 128 [ 236.538277][ T5369] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 236.573597][ T5369] usb 6-1: media controller created [ 236.625971][ T8438] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 236.681386][ T5369] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.697095][ T8438] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.744818][ T8446] loop1: detected capacity change from 0 to 1024 [ 236.786490][ T5369] az6027: usb out operation failed. (-71) [ 236.868068][ T5369] az6027: usb out operation failed. (-71) [ 236.916783][ T5369] stb0899_attach: Driver disabled by Kconfig [ 236.959141][ T5369] az6027: no front-end attached [ 236.959141][ T5369] [ 237.000295][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 237.009369][ T5369] az6027: usb out operation failed. (-71) [ 237.039344][ T5369] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 237.071941][ T5369] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 237.748550][ T8469] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.236027][ T5369] dvb-usb: schedule remote query interval to 400 msecs. [ 238.273769][ T5369] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 238.351279][ T8449] loop4: detected capacity change from 0 to 32768 [ 238.376306][ T5369] usb 6-1: USB disconnect, device number 8 [ 238.474236][ T5369] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 238.576036][ T8449] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 238.614665][ T8452] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 238.720303][ T8449] XFS (loop4): Mounting V5 Filesystem [ 239.386935][ T8498] loop6: detected capacity change from 0 to 131072 [ 239.394330][ T5369] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 239.417314][ T8498] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 239.425686][ T8498] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 239.442990][ T8498] F2FS-fs (loop6): invalid crc value [ 239.449238][ T8449] XFS (loop4): Ending clean mount [ 239.486694][ T8498] F2FS-fs (loop6): Found nat_bits in checkpoint [ 239.527277][ T8498] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 239.534557][ T8498] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 239.666524][ T5369] usb 6-1: Using ep0 maxpacket: 32 [ 239.882599][ T5369] usb 6-1: unable to get BOS descriptor or descriptor too short [ 239.929442][ T5369] usb 6-1: no configurations [ 239.967444][ T8479] loop1: detected capacity change from 0 to 32768 [ 239.977146][ T5369] usb 6-1: can't read configurations, error -22 [ 240.021203][ T4272] XFS (loop4): Unmounting Filesystem [ 240.079376][ T8479] XFS (loop1): Mounting V5 Filesystem [ 240.304238][ T8479] XFS (loop1): Ending clean mount [ 240.344262][ T8479] XFS (loop1): Quotacheck needed: Please wait. [ 240.579032][ T8479] XFS (loop1): Quotacheck: Done. [ 240.905137][ T4271] XFS (loop1): Unmounting Filesystem [ 240.968932][ T27] audit: type=1800 audit(1791483701.969:63): pid=8536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1363" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 240.989262][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.263429][ T14] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 242.327745][ T8576] loop1: detected capacity change from 0 to 256 [ 242.378475][ T8576] exfat: Deprecated parameter 'utf8' [ 242.424548][ T8576] exfat: Deprecated parameter 'namecase' [ 242.460824][ T8576] exfat: Deprecated parameter 'utf8' [ 242.476692][ T14] usb 6-1: unable to get BOS descriptor or descriptor too short [ 242.516235][ T14] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 242.535895][ T8576] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 242.586119][ T14] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 242.641383][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.689136][ T14] usb 6-1: Product: syz [ 242.720553][ T14] usb 6-1: Manufacturer: syz [ 242.746949][ T14] usb 6-1: SerialNumber: syz [ 242.982381][ T14] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 242.995031][ T8570] loop6: detected capacity change from 0 to 32768 [ 243.191911][ T14] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 243.238938][ T14] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 243.593328][ T14] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 243.722170][ T14] usb 6-1: USB disconnect, device number 11 [ 244.136102][ T8594] loop1: detected capacity change from 0 to 32768 [ 244.255100][ T8594] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 244.301666][ T8594] JBD2: Ignoring recovery information on journal [ 244.397431][ T8616] loop5: detected capacity change from 0 to 2048 [ 244.494046][ T8594] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 244.573579][ T8616] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 244.639864][ T8616] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.732853][ T8626] ima: policy update failed [ 244.801162][ T27] audit: type=1802 audit(1791483705.799:64): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1390" res=0 errno=0 [ 244.897156][ T5427] EXT4-fs (loop5): unmounting filesystem. [ 244.987692][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 245.627559][ T8650] loop5: detected capacity change from 0 to 4096 [ 245.807540][ T8654] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.120428][ T8638] loop6: detected capacity change from 0 to 32768 [ 246.278613][ T8638] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 246.385307][ T8622] loop4: detected capacity change from 0 to 32768 [ 246.412980][ T14] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 246.496662][ T5967] ocfs2: Unmounting device (7,6) on (node local) [ 246.525742][ T8622] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.1389 (8622) [ 246.625560][ T14] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.675658][ T14] usb 6-1: config 0 has no interface number 0 [ 246.728131][ T8675] loop1: detected capacity change from 0 to 1024 [ 246.746434][ T14] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.835667][ T14] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.942841][ T14] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 247.023717][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.100022][ T14] usb 6-1: config 0 descriptor?? [ 247.131395][ T8622] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 247.395803][ T8622] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 247.540694][ T14] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 247.559171][ T8622] BTRFS info (device loop4): using free space tree [ 247.597727][ T14] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 247.648714][ T14] prodikeys 0003:041E:2801.000B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 247.732592][ T14] hid_prodikeys: hid-prodikeys: failed to find output report [ 247.732592][ T14] [ 247.833482][ T14] usb 6-1: USB disconnect, device number 12 [ 248.042406][ T8710] fido_id[8710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 248.154435][ T8622] BTRFS error (device loop4): open_ctree failed: -12 [ 249.207204][ T8743] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 249.470638][ T8718] loop6: detected capacity change from 0 to 40427 [ 249.548739][ T8718] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 249.599964][ T8718] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 249.666697][ T8718] F2FS-fs (loop6): invalid crc value [ 249.678717][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1415'. [ 249.770747][ T8718] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 250.026122][ T8718] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 250.073909][ T8718] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 250.228782][ T27] audit: type=1800 audit(1791483711.229:65): pid=8718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1410" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 250.408032][ T5967] syz-executor: attempt to access beyond end of device [ 250.408032][ T5967] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.809120][ T8798] loop3: detected capacity change from 0 to 4096 [ 250.994366][ T8805] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.008207][ T8798] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 251.177568][ T8809] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.209049][ T8798] NILFS (loop3): mounting fs with errors [ 251.283548][ T8809] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.296823][ T8811] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 251.410992][ T8790] loop5: detected capacity change from 0 to 32768 [ 251.560368][ T8790] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 251.638320][ T8790] JBD2: Ignoring recovery information on journal [ 251.816203][ T8790] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 251.917192][ T8823] loop3: detected capacity change from 0 to 1024 [ 251.998966][ T8823] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 252.020768][ T8790] (syz.5.1434,8790,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 252.159768][ T5427] ocfs2: Unmounting device (7,5) on (node local) [ 252.186939][ T8827] loop4: detected capacity change from 0 to 4096 [ 252.328217][ T8827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 252.573545][ T8719] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 252.711103][ T8827] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1444: corrupted inode contents [ 252.772376][ T8719] usb 7-1: Using ep0 maxpacket: 8 [ 252.786290][ T8719] usb 7-1: config 0 has no interfaces? [ 252.826865][ T8719] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 252.867417][ T8719] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 252.887718][ T8827] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #15: comm syz.4.1444: mark_inode_dirty error [ 252.919720][ T8719] usb 7-1: Product: syz [ 252.948529][ T8719] usb 7-1: Manufacturer: syz [ 252.973785][ T8719] usb 7-1: SerialNumber: syz [ 253.004645][ T8719] usb 7-1: config 0 descriptor?? [ 253.012492][ T8827] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1444: corrupted inode contents [ 253.111064][ T8827] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1444: mark_inode_dirty error [ 253.196966][ T8827] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1444: corrupted inode contents [ 253.272022][ T8719] usb 7-1: USB disconnect, device number 8 [ 253.325367][ T8827] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1444: mark_inode_dirty error [ 253.401755][ T8827] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1444: corrupted inode contents [ 253.487039][ T8827] EXT4-fs error (device loop4): ext4_truncate:4325: inode #15: comm syz.4.1444: mark_inode_dirty error [ 253.546636][ T8827] EXT4-fs error (device loop4) in ext4_setattr:5695: Corrupt filesystem [ 253.615006][ T8827] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.1444: corrupted inode contents [ 253.698573][ T8827] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 253.789548][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 254.637889][ T8894] loop6: detected capacity change from 0 to 512 [ 254.781711][ T4553] udevd[4553]: symlink '../../loop6' '/dev/disk/by-diskseq/453.tmp-b7:6' failed: Read-only file system [ 254.860661][ T4553] udevd[4553]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 254.926187][ T8884] loop1: detected capacity change from 0 to 32768 [ 254.970576][ T8884] XFS: attr2 mount option is deprecated. [ 255.064688][ T8884] XFS (loop1): Mounting V5 Filesystem [ 255.087287][ T8894] EXT4-fs: Invalid want_extra_isize 206 [ 255.137294][ T8884] XFS (loop1): Ending clean mount [ 255.155765][ T27] audit: type=1400 audit(1791483716.159:66): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=8914 comm="syz.5.1479" name="p" offset=79 [ 255.179144][ T5043] udevd[5043]: symlink '../../loop6' '/dev/disk/by-diskseq/453.tmp-b7:6' failed: Read-only file system [ 255.279381][ T5043] udevd[5043]: symlink '../../loop6' '/dev/disk/by-diskseq/453.tmp-b7:6' failed: Read-only file system [ 255.329587][ T4553] udevd[4553]: symlink '../../loop1' '/dev/disk/by-diskseq/454.tmp-b7:1' failed: Read-only file system [ 255.415597][ T4271] XFS (loop1): Unmounting Filesystem [ 255.445979][ T4553] udevd[4553]: symlink '../../loop1' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:1' failed: Read-only file system [ 255.665015][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.671374][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.864646][ T4553] udevd[4553]: symlink '../../loop1' '/dev/disk/by-diskseq/454.tmp-b7:1' failed: Read-only file system [ 255.956093][ T4553] udevd[4553]: symlink '../../loop1' '/dev/disk/by-diskseq/454.tmp-b7:1' failed: Read-only file system [ 256.364135][ T8948] loop6: detected capacity change from 0 to 512 [ 256.479053][ T4553] udevd[4553]: symlink '../../loop6' '/dev/disk/by-diskseq/457.tmp-b7:6' failed: Read-only file system [ 256.500915][ T8948] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 256.530286][ T8948] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.568442][ T4553] udevd[4553]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 256.724919][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 256.808668][ T8943] loop1: detected capacity change from 0 to 32768 [ 256.870217][ T8943] JBD2: Ignoring recovery information on journal [ 256.880198][ T8961] overlayfs: unrecognized mount option "\']*=[\,\:/.@/)&!-(-f)*[=" or missing value [ 257.023368][ T8943] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 257.260184][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 257.509318][ T8976] loop3: detected capacity change from 0 to 2048 [ 257.580682][ T8980] loop1: detected capacity change from 0 to 128 [ 257.606890][ T8976] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.383531][ T8996] loop4: detected capacity change from 0 to 4096 [ 258.449403][ T9004] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1514'. [ 258.469381][ T8996] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 258.527731][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 258.696773][ T8996] ntfs3: loop4: Failed to load $Extend. [ 258.947580][ T8992] loop3: detected capacity change from 0 to 32768 [ 258.964389][ T9013] loop1: detected capacity change from 0 to 512 [ 258.981473][ T9015] loop5: detected capacity change from 0 to 256 [ 259.035452][ T9015] exfat: Deprecated parameter 'utf8' [ 259.064623][ T27] audit: type=1800 audit(1791483720.069:67): pid=9013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1520" name="bus" dev="loop1" ino=1048750 res=0 errno=0 [ 259.085244][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.119983][ T9015] exfat: Deprecated parameter 'namecase' [ 259.176444][ T8992] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 259.191328][ T9015] exfat: Deprecated parameter 'namecase' [ 259.255041][ T9015] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 259.300617][ T8992] JBD2: Ignoring recovery information on journal [ 259.376939][ T27] audit: type=1800 audit(1791483720.379:68): pid=9015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1519" name="file1" dev="loop5" ino=1048751 res=0 errno=0 [ 259.615242][ T8992] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 259.810316][ T5043] udevd[5043]: symlink '../../loop3' '/dev/disk/by-diskseq/466.tmp-b7:3' failed: Read-only file system [ 259.854305][ T27] audit: type=1326 audit(1791483720.859:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.4.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7ffd11baaa88 code=0x0 [ 259.885756][ T8992] (syz.3.1506,8992,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 259.930525][ T5043] udevd[5043]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system [ 260.111027][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 260.157308][ T9043] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1531'. [ 260.199056][ T4553] udevd[4553]: symlink '../../loop3' '/dev/disk/by-diskseq/466.tmp-b7:3' failed: Read-only file system [ 260.299699][ T4553] udevd[4553]: symlink '../../loop3' '/dev/disk/by-diskseq/466.tmp-b7:3' failed: Read-only file system [ 260.487523][ T9052] loop5: detected capacity change from 0 to 512 [ 260.555104][ T9052] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.1536: inode #1: comm syz.5.1536: iget: illegal inode # [ 260.609798][ T4553] udevd[4553]: symlink '../../loop5' '/dev/disk/by-diskseq/473.tmp-b7:5' failed: Read-only file system [ 260.631331][ T9052] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1536: error while reading EA inode 1 err=-117 [ 260.694831][ T4553] udevd[4553]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 260.717128][ T9052] EXT4-fs (loop5): 1 orphan inode deleted [ 260.751750][ T9052] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 260.833294][ T9052] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1536: invalid indirect mapped block 234881024 (level 0) [ 261.045054][ T5427] EXT4-fs (loop5): unmounting filesystem. [ 261.096461][ T4553] udevd[4553]: symlink '../../loop5' '/dev/disk/by-diskseq/473.tmp-b7:5' failed: Read-only file system [ 261.205909][ T4553] udevd[4553]: symlink '../../loop5' '/dev/disk/by-diskseq/473.tmp-b7:5' failed: Read-only file system [ 261.236516][ T9079] loop5: detected capacity change from 0 to 256 [ 261.325638][ T9079] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 261.370616][ T4553] udevd[4553]: symlink '../../loop5' '/dev/disk/by-diskseq/475.tmp-b7:5' failed: Read-only file system [ 261.475661][ T9079] exFAT-fs (loop5): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 261.498050][ T4553] udevd[4553]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 261.547189][ T9079] exFAT-fs (loop5): Filesystem has been set read-only [ 261.819059][ T9094] loop5: detected capacity change from 0 to 128 [ 261.873654][ T9094] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 261.936349][ T9100] loop6: detected capacity change from 0 to 64 [ 261.976925][ T27] audit: type=1800 audit(1791483722.979:70): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1553" name="file1" dev="loop5" ino=94 res=0 errno=0 [ 262.187969][ T9090] loop1: detected capacity change from 0 to 32768 [ 262.279954][ T9090] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1551 (9090) [ 262.396082][ T9090] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 262.494782][ T9090] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 262.561367][ T9090] BTRFS info (device loop1): using free space tree [ 262.741324][ T9090] BTRFS info (device loop1): enabling ssd optimizations [ 262.861393][ T4284] Bluetooth: hci5: command 0x0406 tx timeout [ 262.967093][ T4271] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 263.065862][ T27] audit: type=1400 audit(1791483724.079:71): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=9137 comm="syz.5.1565" [ 263.466061][ T9112] loop6: detected capacity change from 0 to 40427 [ 263.498350][ T9112] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 263.557103][ T9112] F2FS-fs (loop6): invalid crc value [ 263.588745][ T9112] F2FS-fs (loop6): invalid crc value [ 263.627867][ T9112] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 263.700849][ T9146] loop5: detected capacity change from 0 to 256 [ 264.547131][ T9155] loop1: detected capacity change from 0 to 131072 [ 264.588741][ T9155] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 264.597148][ T9155] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 264.611615][ T9155] F2FS-fs (loop1): invalid crc value [ 264.653614][ T9155] F2FS-fs (loop1): Found nat_bits in checkpoint [ 264.691680][ T9155] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 264.698760][ T9155] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 265.081265][ T5043] udevd[5043]: symlink '../../loop1' '/dev/disk/by-diskseq/487.tmp-b7:1' failed: Read-only file system [ 265.150661][ T5043] udevd[5043]: symlink '../../loop1' '/dev/disk/by-uuid/1cfefce0-b2cb-4c1d-89df-92d67f97f153.tmp-b7:1' failed: Read-only file system [ 265.231161][ T9142] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 265.396626][ T9160] loop6: detected capacity change from 0 to 32768 [ 265.455286][ T9142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.514550][ T9142] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 265.585211][ T9142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.670399][ T9142] usb 4-1: config 0 descriptor?? [ 265.874547][ T9176] loop5: detected capacity change from 0 to 128 [ 265.910035][ T9142] usbhid 4-1:0.0: can't add hid device: -71 [ 265.925665][ T9142] usbhid: probe of 4-1:0.0 failed with error -71 [ 265.956870][ T9176] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 265.992560][ T9142] usb 4-1: USB disconnect, device number 6 [ 266.038129][ T9176] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 266.165246][ T9176] fscrypt (loop5, inode 12): Mutually exclusive encryption flags (0x16) [ 266.362658][ T5427] EXT4-fs (loop5): unmounting filesystem. [ 266.591002][ T9142] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 266.813761][ T9142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.860033][ T9142] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 1.00 [ 266.889087][ T9142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.920200][ T9142] usb 4-1: config 0 descriptor?? [ 267.021865][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1586'. [ 267.215182][ T9142] pcwd_usb: Card did not acknowledge disable attempt [ 267.297984][ T9182] loop6: detected capacity change from 0 to 40427 [ 267.347836][ T9182] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 267.445894][ T9182] F2FS-fs (loop6): invalid crc value [ 267.511960][ T9182] F2FS-fs (loop6): Found nat_bits in checkpoint [ 267.813907][ T9182] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 267.821956][ T4298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 267.844201][ T9200] loop5: detected capacity change from 0 to 1024 [ 267.977605][ T9200] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 267.986413][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 268.061897][ T9200] EXT4-fs (loop5): orphan cleanup on readonly fs [ 268.150881][ T27] audit: type=1804 audit(1791483729.149:72): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1581" name="/newroot/181/file0/file0" dev="loop6" ino=10 res=1 errno=0 [ 268.173465][ T9200] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.1588: Freeing blocks not in datazone - block = 0, count = 4096 [ 268.354971][ T9200] EXT4-fs (loop5): Remounting filesystem read-only [ 268.383297][ T9185] loop4: detected capacity change from 0 to 32768 [ 268.397059][ T9200] EXT4-fs (loop5): 1 orphan inode deleted [ 268.427447][ T9200] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 268.564397][ T9142] pcwd_usb: Found card (Firmware: ) with temp option [ 268.583729][ T9185] JBD2: Ignoring recovery information on journal [ 268.832602][ T9209] scsi_strcpy_devinfo: vendor string 'Mꇋ8KH,P}/(a&WCa8(Au6c1كXPwe$XPK5'R X7R.]O\kekөopґ 0[{q6?Uq9mߣ7``0I3ŵ' is too long [ 268.852619][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.906143][ T9185] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 269.265646][ T9142] pcwd_usb: Option switches (0x00): Temperature Reset Enable=OFF, Power On Delay=OFF [ 269.301829][ T5967] syz-executor: attempt to access beyond end of device [ 269.301829][ T5967] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.341181][ T5427] EXT4-fs (loop5): unmounting filesystem. [ 269.376141][ T4272] ocfs2: Unmounting device (7,4) on (node local) [ 270.053859][ T9223] loop3: detected capacity change from 0 to 512 [ 270.125247][ T9223] EXT4-fs: Ignoring removed bh option [ 270.233675][ T9223] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 270.302648][ T9223] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.516291][ T9142] pcwd_usb: initialized. heartbeat=5 sec (nowayout=0) [ 270.586243][ T9142] usb 4-1: USB disconnect, device number 7 [ 270.592258][ C0] pcwd_usb: can't resubmit intr, usb_submit_urb failed with result -19 [ 270.638252][ T9223] EXT4-fs error (device loop3): ext4_get_first_dir_block:3585: inode #12: comm syz.3.1599: Directory hole found for htree leaf block 0 [ 271.009153][ T9142] pcwd_usb: Card did not acknowledge disable attempt [ 271.034061][ T9142] pcwd_usb: USB PC Watchdog disconnected [ 271.105194][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 271.429549][ T9244] device macvlan0 entered promiscuous mode [ 271.458903][ T9244] netlink: 'syz.5.1607': attribute type 1 has an invalid length. [ 271.485095][ T9244] netlink: 'syz.5.1607': attribute type 2 has an invalid length. [ 271.682250][ T9251] loop5: detected capacity change from 0 to 2048 [ 271.738140][ T9251] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 271.783836][ T9251] UDF-fs: Scanning with blocksize 512 failed [ 271.838873][ T9251] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.379823][ T9271] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 272.749383][ T9284] loop3: detected capacity change from 0 to 512 [ 272.788515][ T9283] loop6: detected capacity change from 0 to 4096 [ 272.845762][ T9283] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 272.903750][ T9284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 272.982161][ T9283] ntfs: volume version 3.1. [ 273.001082][ T9284] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.240842][ T9296] ntfs: (device loop6): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 273.344070][ T9296] ntfs: (device loop6): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 273.427439][ T4287] block nbd0: Receive control failed (result -32) [ 273.434562][ T4284] block nbd0: Receive control failed (result -32) [ 273.779015][ T9306] loop6: detected capacity change from 0 to 64 [ 273.847006][ T9304] loop4: detected capacity change from 0 to 4096 [ 273.870161][ T9142] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 274.061128][ T9311] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.092156][ T9142] usb 6-1: Using ep0 maxpacket: 32 [ 274.126665][ T9142] usb 6-1: unable to get BOS descriptor or descriptor too short [ 274.177996][ T9142] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.241425][ T9142] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.314405][ T9142] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 274.362822][ T9142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.384504][ T9142] usb 6-1: Product: syz [ 274.388692][ T9142] usb 6-1: Manufacturer: syz [ 274.406689][ T9142] usb 6-1: SerialNumber: syz [ 274.437092][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 274.466613][ T9142] usb 6-1: selecting invalid altsetting 1 [ 274.575519][ T4553] udevd[4553]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.728981][ T9300] loop5: detected capacity change from 0 to 2048 [ 274.837418][ T9300] loop5: p1 < > p4 [ 274.837418][ T9300] p4: [ 274.905265][ T9300] loop5: p4 size 722688 extends beyond EOD, truncated [ 274.926240][ T9327] scsi_strcpy_devinfo: model string 'mo劌rrdel' is too long [ 275.056598][ T5369] usb 6-1: USB disconnect, device number 13 [ 275.074724][ T4287] Bluetooth: hci3: unexpected event 0x04 length: 4 < 10 [ 275.477705][ T9344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1646'. [ 275.538571][ T9344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1646'. [ 275.573895][ T9346] loop6: detected capacity change from 0 to 64 [ 275.636357][ T9344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1646'. [ 275.740936][ T9344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1646'. [ 275.992709][ T9361] loop1: detected capacity change from 0 to 128 [ 276.067870][ T9361] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 276.096646][ T27] audit: type=1326 audit(1791483737.099:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.6.1652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffc1c5b8a88 code=0x0 [ 276.120044][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.288015][ T32] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 276.606130][ T9377] bonding: bond0 is being deleted... [ 277.216614][ T9377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.315725][ T9400] Bluetooth: hci0: unsupported parameter 5161 [ 277.345898][ T9377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.364041][ T9400] Bluetooth: hci0: unsupported parameter 8192 [ 277.392137][ T9400] Bluetooth: hci0: unsupported parameter 5161 [ 277.435308][ T9400] Bluetooth: hci0: unsupported parameter 8192 [ 277.478821][ T9377] bond0 (unregistering): Released all slaves [ 277.891399][ T9413] loop1: detected capacity change from 0 to 2048 [ 277.965326][ T9413] NILFS (loop1): invalid segment: Magic number mismatch [ 277.994650][ T4287] Bluetooth: hci1: unexpected event 0x04 length: 4 < 10 [ 278.015623][ T9417] loop5: detected capacity change from 0 to 1024 [ 278.042636][ T9413] NILFS (loop1): trying rollback from an earlier position [ 278.148070][ T9417] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 278.175429][ T9413] NILFS (loop1): recovery complete [ 278.234962][ T9425] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.260327][ T9417] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 278.305421][ T9413] NILFS (loop1): error -22 preparing GC: cannot read source blocks [ 278.337467][ T9417] jbd2_journal_init_inode: Cannot locate journal superblock [ 278.387714][ T9417] EXT4-fs (loop5): Could not load journal inode [ 278.702754][ T9428] kAFS: bad VL server IP address [ 278.859216][ T9433] loop1: detected capacity change from 0 to 256 [ 278.919893][ T9433] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 279.382218][ T27] audit: type=1400 audit(1791483741.390:74): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=9444 comm="syz.6.1680" name="p" offset=33 [ 279.702845][ T9457] loop6: detected capacity change from 0 to 128 [ 279.796742][ T11] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 279.825480][ T11] FAT-fs (loop6): Filesystem has been set read-only [ 279.855570][ T11] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 280.023218][ T9464] ima: Unable to open file: / (-22) [ 280.023517][ T9463] ima: policy update failed [ 280.088282][ T27] audit: type=1802 audit(1791483742.090:75): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1688" res=0 errno=0 [ 280.554090][ T9479] program syz.3.1694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.755899][ T9469] loop5: detected capacity change from 0 to 32768 [ 280.857304][ T9469] JBD2: Ignoring recovery information on journal [ 280.943419][ T9483] loop3: detected capacity change from 0 to 2048 [ 281.004085][ T9469] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 281.143247][ T9489] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.257643][ T27] audit: type=1800 audit(1791483743.260:76): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1691" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 281.417675][ T5427] ocfs2: Unmounting device (7,5) on (node local) [ 281.853067][ T9505] loop5: detected capacity change from 0 to 512 [ 281.938925][ T9505] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1702: bg 0: block 5: invalid block bitmap [ 282.027187][ T9505] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 282.075292][ T9505] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1702: invalid indirect mapped block 3 (level 2) [ 282.155034][ T9505] EXT4-fs (loop5): 1 orphan inode deleted [ 282.192333][ T9505] EXT4-fs (loop5): 1 truncate cleaned up [ 282.198082][ T9505] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 282.417616][ T5427] EXT4-fs error (device loop5): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 282.521257][ T5427] EXT4-fs error (device loop5): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 282.643033][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1712'. [ 282.954356][ T5427] EXT4-fs (loop5): unmounting filesystem. [ 283.223105][ T32] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.468717][ T32] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.574368][ T9529] loop1: detected capacity change from 0 to 1024 [ 283.677626][ T9529] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 283.712640][ T32] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.733566][ T9529] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.803928][ T9524] loop3: detected capacity change from 0 to 32768 [ 283.827234][ T9529] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.1716: lblock 3 mapped to illegal pblock 3 (length 3) [ 283.849134][ T9142] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 283.883980][ T32] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.942411][ T9524] JBD2: Ignoring recovery information on journal [ 283.983929][ T9529] EXT4-fs (loop1): Remounting filesystem read-only [ 284.036577][ T9535] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.1716: lblock 3 mapped to illegal pblock 3 (length 1) [ 284.057308][ T9142] usb 7-1: unable to get BOS descriptor or descriptor too short [ 284.102852][ T9142] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.167620][ T9142] usb 7-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 284.204776][ T9535] EXT4-fs (loop1): Remounting filesystem read-only [ 284.225021][ T9524] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 284.250266][ T9142] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 284.288925][ T9535] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.1716: lblock 3 mapped to illegal pblock 3 (length 1) [ 284.333114][ T9142] usb 7-1: Product: syz [ 284.382232][ T9142] usb 7-1: Manufacturer: syz [ 284.414809][ T9535] EXT4-fs (loop1): Remounting filesystem read-only [ 284.444562][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 284.456809][ T9142] usb 7-1: Found UVC 1.00 device syz (8086:0ad2) [ 284.469587][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 284.478338][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 284.487373][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 284.495041][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 284.502498][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.674129][ T27] audit: type=1800 audit(1791484002.679:77): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1713" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 284.742990][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 284.834739][ T9142] usb 7-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 284.922646][ T9142] videodev: could not get a free minor [ 284.951357][ T9142] uvcvideo 7-1:1.1: Failed to register meta-cap device (-23). [ 285.034743][ T9142] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input12 [ 285.057728][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 285.168710][ T9142] usb 7-1: USB disconnect, device number 9 [ 286.028047][ T9540] chnl_net:caif_netlink_parms(): no params data found [ 286.539097][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 286.691031][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.718599][ T9540] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.767335][ T9540] device bridge_slave_0 entered promiscuous mode [ 287.112534][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.147846][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.213310][ T9540] device bridge_slave_1 entered promiscuous mode [ 287.361684][ T9540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.813312][ T9540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.955330][ T32] device hsr_slave_0 left promiscuous mode [ 287.997085][ T32] device hsr_slave_1 left promiscuous mode [ 288.032477][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.077632][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.125317][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.177453][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.253297][ T32] batman_adv: batadv0: Interface deactivated: macvtap1 [ 288.285787][ T32] batman_adv: batadv0: Removing interface: macvtap1 [ 288.336664][ T32] device bridge_slave_1 left promiscuous mode [ 288.368334][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.416330][ T32] device bridge_slave_0 left promiscuous mode [ 288.458621][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.618730][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 288.633367][ T32] device batadv_slave_0 left promiscuous mode [ 288.682627][ T32] device veth1_macvtap left promiscuous mode [ 288.697710][ T9599] loop4: detected capacity change from 0 to 32768 [ 288.724903][ T32] device veth0_macvtap left promiscuous mode [ 288.758999][ T32] device veth1_vlan left promiscuous mode [ 288.764872][ T32] device veth0_vlan left promiscuous mode [ 288.953272][ T9599] JBD2: Ignoring recovery information on journal [ 289.286927][ T9599] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 289.546540][ T27] audit: type=1800 audit(1791484007.549:78): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1732" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 289.637087][ T9645] loop1: detected capacity change from 0 to 2048 [ 289.724016][ T9646] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.771466][ T4272] ocfs2: Unmounting device (7,4) on (node local) [ 290.217429][ T9659] loop1: detected capacity change from 0 to 64 [ 290.698579][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 291.369562][ T32] team0 (unregistering): Port device team_slave_1 removed [ 291.497974][ T32] team0 (unregistering): Port device team_slave_0 removed [ 291.627660][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.779223][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.526008][ T32] bond0 (unregistering): Released all slaves [ 292.711720][ T9540] team0: Port device team_slave_0 added [ 292.778559][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 292.786980][ T9540] team0: Port device team_slave_1 added [ 292.881967][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.921833][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.947795][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.096351][ T9540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.186767][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.265965][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.461104][ T9540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.681233][ T9540] device hsr_slave_0 entered promiscuous mode [ 293.741767][ T9540] device hsr_slave_1 entered promiscuous mode [ 293.800687][ T9540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.850948][ T9540] Cannot create hsr debugfs directory [ 294.507232][ T9540] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 294.563420][ T9540] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 294.611396][ T9540] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 294.656519][ T9540] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 294.906387][ T9735] loop6: detected capacity change from 0 to 32768 [ 295.023261][ T9540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.052472][ T9735] XFS (loop6): Mounting V5 Filesystem [ 295.114144][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.154057][ T9735] XFS (loop6): Ending clean mount [ 295.163081][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.225258][ T9540] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.294304][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.358567][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.415446][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.422627][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.442306][ T5967] XFS (loop6): Unmounting Filesystem [ 295.552576][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.572065][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.656095][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.711086][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.718275][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.806910][ T9775] loop4: detected capacity change from 0 to 2048 [ 295.827030][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.838424][ T9774] loop3: detected capacity change from 0 to 2048 [ 295.873946][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.940361][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.006691][ T9774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 296.065576][ T9775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 296.109200][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.182121][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.212423][ T9774] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.1791: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 296.235467][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.292795][ T9775] EXT4-fs error (device loop4): ext4_ext_precache:627: inode #2: comm syz.4.1792: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 296.318779][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.371153][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.403133][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.438554][ T9774] EXT4-fs (loop3): Remounting filesystem read-only [ 296.455665][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.478742][ T9774] CacheFiles: Lookup cache failed with error -117 [ 296.500142][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.545698][ T9540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.563832][ T9774] CacheFiles: Failed to register: -117 [ 296.772729][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 296.800505][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 296.811883][ T9787] loop1: detected capacity change from 0 to 32768 [ 296.910045][ T9787] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1795 (9787) [ 297.069721][ T9787] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 297.160575][ T9787] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 297.251502][ T9787] BTRFS info (device loop1): force zlib compression, level 3 [ 297.316011][ T9787] BTRFS info (device loop1): allowing degraded mounts [ 297.371360][ T9787] BTRFS info (device loop1): setting nodatasum [ 297.377539][ T9787] BTRFS info (device loop1): allowing degraded mounts [ 297.438536][ T5369] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 297.481073][ T9787] BTRFS info (device loop1): using free space tree [ 297.537985][ T5369] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 297.652436][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.706450][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.762945][ T9540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.800428][ T4271] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 297.856521][ T9142] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 298.081275][ T9801] ceph: No mds server is up or the cluster is laggy [ 298.443722][ T5371] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 298.742111][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.754870][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.827092][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.854856][ T9854] loop6: detected capacity change from 0 to 136 [ 298.870575][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.900995][ T9540] device veth0_vlan entered promiscuous mode [ 298.945253][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.999636][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.069859][ T9540] device veth1_vlan entered promiscuous mode [ 299.210867][ T9540] device veth0_macvtap entered promiscuous mode [ 299.245850][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 299.273731][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 299.312422][ T9868] [U]  [ 299.321305][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.386172][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.444370][ T9540] device veth1_macvtap entered promiscuous mode [ 299.485184][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.536744][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.606435][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.670070][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.724962][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.751382][ T9889] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1814'. [ 299.784796][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.817708][ T1156] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 299.845533][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.909913][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.963925][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.022229][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.087104][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.135061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.170891][ T9901] loop6: detected capacity change from 0 to 512 [ 300.191902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.242512][ T9901] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.1818: inode has both inline data and extents flags [ 300.340892][ T9901] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1818: couldn't read orphan inode 15 (err -117) [ 300.370158][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.405406][ T9901] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 300.428911][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.480387][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.532674][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.586852][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.626977][ T9912] loop3: detected capacity change from 0 to 512 [ 300.634995][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.666481][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.707901][ T9912] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.1821: missing EA_INODE flag [ 300.735167][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.755888][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 300.780756][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.816219][ T9912] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1821: error while reading EA inode 2 err=-117 [ 300.832258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.879408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.922327][ T9540] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.946469][ T9912] EXT4-fs (loop3): 1 orphan inode deleted [ 300.966996][ T9540] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.989354][ T9912] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 301.002511][ T9540] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.032928][ T9540] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.351485][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.394864][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.428757][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.473467][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.485430][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 301.505511][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 301.540126][ T1156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 301.832772][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1715'. [ 301.874496][ T9942] Falling back ldisc for ptm0. [ 301.939761][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 302.003180][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 302.311045][ T9955] loop6: detected capacity change from 0 to 2048 [ 302.412241][ T9955] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 302.558661][ T9962] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1837'. [ 302.625819][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 302.835248][ T9971] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1840'. [ 302.996725][ T27] audit: type=1326 audit(1791484020.999:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.3.1841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffde8fcba88 code=0x7ffc0000 [ 303.151359][ T27] audit: type=1326 audit(1791484021.039:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.3.1841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8399e1d9 code=0x7ffc0000 [ 303.356646][ T27] audit: type=1326 audit(1791484021.039:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.3.1841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8399e1d9 code=0x7ffc0000 [ 303.380685][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.550055][ T27] audit: type=1326 audit(1791484021.039:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.3.1841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffde8fcba88 code=0x7ffc0000 [ 303.738528][ T27] audit: type=1326 audit(1791484021.039:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.3.1841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8399e1d9 code=0x7ffc0000 [ 303.762460][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.010088][ T27] audit: type=1326 audit(1791484021.049:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.3.1841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8399e1d9 code=0x7ffc0000 [ 304.033984][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.294623][ T27] audit: type=1326 audit(1791484021.049:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.3.1841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffde8fcba88 code=0x7ffc0000 [ 304.414442][ T9991] loop7: detected capacity change from 0 to 32768 [ 304.536189][ T9991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1847 (9991) [ 304.557367][ T27] audit: type=1326 audit(1791484021.049:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.3.1841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b8399e1d9 code=0x7ffc0000 [ 304.581359][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.723425][ T9991] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 304.798726][T10021] loop6: detected capacity change from 0 to 256 [ 304.841894][ T9991] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 304.884944][ T27] audit: type=1326 audit(1791484021.049:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.3.1841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffde8fcba88 code=0x7ffc0000 [ 304.950497][ T9991] BTRFS info (device loop7): setting nodatasum [ 305.020766][ T9991] BTRFS info (device loop7): force zlib compression, level 3 [ 305.089318][ T9991] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 305.150390][ T27] audit: type=1326 audit(1791484021.049:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.3.1841" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b8399e1d9 code=0x7ffc0000 [ 305.225080][ T9991] BTRFS info (device loop7): use lzo compression, level 0 [ 305.293408][ T9991] BTRFS info (device loop7): turning on flush-on-commit [ 305.343230][ T9991] BTRFS info (device loop7): enabling auto defrag [ 305.394202][ T9991] BTRFS info (device loop7): max_inline at 4096 [ 305.444305][ T9991] BTRFS info (device loop7): using free space tree [ 305.623561][ T9991] BTRFS info (device loop7): enabling ssd optimizations [ 305.956758][T10069] hub 6-0:1.0: USB hub found [ 306.027745][T10069] hub 6-0:1.0: 1 port detected [ 306.701955][ T9540] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 307.376177][T10097] loop3: detected capacity change from 0 to 2048 [ 307.450384][T10097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 307.593299][T10083] loop6: detected capacity change from 0 to 40427 [ 307.632404][T10083] F2FS-fs (loop6): invalid crc value [ 307.672116][T10083] F2FS-fs (loop6): Found nat_bits in checkpoint [ 307.780496][T10083] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 317.098835][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.105133][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.175330][ T4298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 363.176236][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.534958][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.547345][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.172871][ T1156] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 411.326433][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 427.165037][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.973477][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.979767][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.962258][ T28] INFO: task syz-executor:4258 blocked for more than 143 seconds. [ 455.970561][ T28] Not tainted syzkaller #0 [ 455.986077][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.998675][ T28] task:syz-executor state:D stack:22640 pid:4258 ppid:4257 flags:0x00004002 [ 456.013067][ T28] Call Trace: [ 456.016602][ T28] [ 456.019621][ T28] __schedule+0x107f/0x4030 [ 456.027471][ T28] ? mark_lock+0x94/0x320 [ 456.033315][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 456.038405][ T28] ? release_firmware_map_entry+0x187/0x187 [ 456.046878][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 456.055779][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 456.061063][ T28] schedule+0xb9/0x180 [ 456.067732][ T28] io_schedule+0x7c/0xd0 [ 456.074027][ T28] bit_wait_io+0xd/0xc0 [ 456.078191][ T28] __wait_on_bit+0x9b/0x2c0 [ 456.084679][ T28] ? bit_wait+0xc0/0xc0 [ 456.088883][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 456.095736][ T28] ? bit_wait+0xc0/0xc0 [ 456.100331][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 456.108125][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 456.114650][ T28] ? bit_waitqueue+0x30/0x30 [ 456.119373][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 456.126585][ T28] do_get_write_access+0x605/0xf20 [ 456.133122][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 456.139171][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 456.147520][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 456.155164][ T28] ? rcu_is_watching+0x11/0xa0 [ 456.160030][ T28] ext4_reserve_inode_write+0x201/0x290 [ 456.169344][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 456.177345][ T28] ext4_dirty_inode+0xbf/0x100 [ 456.184106][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 456.189969][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 456.196536][ T28] __file_update_time+0x21d/0x240 [ 456.204255][ T28] file_update_time+0x2f3/0x370 [ 456.209135][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 456.217340][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 456.224677][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 456.229726][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 456.237400][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 456.244751][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 456.249806][ T28] do_page_mkwrite+0x16b/0x5c0 [ 456.256064][ T28] wp_page_shared+0x167/0x370 [ 456.260740][ T28] handle_mm_fault+0x1b1b/0x3d40 [ 456.267726][ T28] ? mt_find+0x157/0x830 [ 456.275029][ T28] ? numa_migrate_prep+0x250/0x250 [ 456.280863][ T28] ? lock_chain_count+0x20/0x20 [ 456.288132][ T28] ? trace_buffer_unlock_commit_regs+0x148/0x600 [ 456.295865][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 456.301617][ T28] do_user_addr_fault+0x58e/0xb20 [ 456.308628][ T28] exc_page_fault+0x60/0x100 [ 456.314615][ T28] ? clear_bhb_loop+0x60/0xb0 [ 456.319433][ T28] asm_exc_page_fault+0x22/0x30 [ 456.327106][ T28] RIP: 0033:0x7fcd2b47c762 [ 456.331610][ T28] RSP: 002b:00007ffeee886330 EFLAGS: 00010202 [ 456.339319][ T28] RAX: 00007fcd2928c000 RBX: 0000555571cb8000 RCX: 0000000000000002 [ 456.349181][ T28] RDX: 0000000000001e18 RSI: 0000555571cb5ac8 RDI: 0000000000000004 [ 456.358435][ T28] RBP: 00007ffeee886830 R08: 0000555571cb5b50 R09: 000000000000008b [ 456.368500][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffeee886670 [ 456.377848][ T28] R13: 00007ffeee886460 R14: 585858582e7a7973 R15: 00007ffeee8863b0 [ 456.390035][ T28] [ 456.394926][ T28] INFO: task syz.6.1869:10082 blocked for more than 143 seconds. [ 456.405356][ T28] Not tainted syzkaller #0 [ 456.410347][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.420542][ T28] task:syz.6.1869 state:D stack:26256 pid:10082 ppid:5967 flags:0x00004004 [ 456.431664][ T28] Call Trace: [ 456.437120][ T28] [ 456.440060][ T28] __schedule+0x107f/0x4030 [ 456.447150][ T28] ? mark_lock+0x94/0x320 [ 456.451492][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 456.457957][ T28] ? release_firmware_map_entry+0x187/0x187 [ 456.465743][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 456.471679][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 456.478356][ T28] schedule+0xb9/0x180 [ 456.485000][ T28] io_schedule+0x7c/0xd0 [ 456.489303][ T28] bit_wait_io+0xd/0xc0 [ 456.496768][ T28] __wait_on_bit+0x9b/0x2c0 [ 456.501283][ T28] ? bit_wait+0xc0/0xc0 [ 456.508255][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 456.515100][ T28] ? bit_wait+0xc0/0xc0 [ 456.519297][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 456.530809][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 456.537272][ T28] ? bit_waitqueue+0x30/0x30 [ 456.544723][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 456.549960][ T28] do_get_write_access+0x605/0xf20 [ 456.556626][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 456.564605][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 456.570830][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 456.578368][ T28] ? rcu_is_watching+0x11/0xa0 [ 456.585993][ T28] ext4_reserve_inode_write+0x201/0x290 [ 456.591549][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 456.598430][ T28] ext4_dirty_inode+0xbf/0x100 [ 456.607496][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 456.615494][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 456.620580][ T28] __file_update_time+0x21d/0x240 [ 456.627647][ T28] file_update_time+0x2f3/0x370 [ 456.633895][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 456.639222][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 456.646432][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 456.651468][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 456.660035][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 456.667263][ T28] ? put_page+0x270/0x270 [ 456.671640][ T28] do_page_mkwrite+0x16b/0x5c0 [ 456.677753][ T28] handle_mm_fault+0x199c/0x3d40 [ 456.684656][ T28] ? mt_find+0x157/0x830 [ 456.689629][ T28] ? numa_migrate_prep+0x250/0x250 [ 456.696217][ T28] ? lock_chain_count+0x20/0x20 [ 456.701073][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 456.708389][ T28] do_user_addr_fault+0x58e/0xb20 [ 456.716944][ T28] exc_page_fault+0x60/0x100 [ 456.721599][ T28] asm_exc_page_fault+0x22/0x30 [ 456.728804][ T28] RIP: 0033:0x7fe749a72fb2 [ 456.734564][ T28] RSP: 002b:00007ffc1c5a4900 EFLAGS: 00010202 [ 456.740673][ T28] RAX: 0000000000001008 RBX: 00007fe74a955720 RCX: 0000000000000000 [ 456.750575][ T28] RDX: 0000001b30f23000 RSI: 0000000000000008 RDI: 00007fe74a955720 [ 456.759934][ T28] RBP: 00000000000007d0 R08: 00007fe749e10000 R09: 00007fe749e26038 [ 456.771168][ T28] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff83fd4ca6 [ 456.780487][ T28] R13: 00007fe749e26038 R14: 00000000000001b8 R15: fffffffffffff000 [ 456.791033][ T28] ? blk_mq_plug_issue_direct+0x16/0x5a0 [ 456.798127][ T28] [ 456.801153][ T28] INFO: task syz.3.1875:10096 blocked for more than 144 seconds. [ 456.811041][ T28] Not tainted syzkaller #0 [ 456.817764][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.830188][ T28] task:syz.3.1875 state:D stack:26256 pid:10096 ppid:4273 flags:0x00004004 [ 456.841369][ T28] Call Trace: [ 456.846701][ T28] [ 456.849637][ T28] __schedule+0x107f/0x4030 [ 456.855579][ T28] ? mark_lock+0x94/0x320 [ 456.859912][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 456.867031][ T28] ? release_firmware_map_entry+0x187/0x187 [ 456.875153][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 456.881183][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 456.888414][ T28] schedule+0xb9/0x180 [ 456.894536][ T28] io_schedule+0x7c/0xd0 [ 456.898831][ T28] bit_wait_io+0xd/0xc0 [ 456.904982][ T28] __wait_on_bit+0x9b/0x2c0 [ 456.909494][ T28] ? bit_wait+0xc0/0xc0 [ 456.915600][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 456.921106][ T28] ? bit_wait+0xc0/0xc0 [ 456.928686][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 456.936746][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 456.944088][ T28] ? bit_waitqueue+0x30/0x30 [ 456.948685][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 456.955301][ T28] do_get_write_access+0x605/0xf20 [ 456.960427][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 456.968422][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 456.975925][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 456.984846][ T28] ? rcu_is_watching+0x11/0xa0 [ 456.989699][ T28] ext4_reserve_inode_write+0x201/0x290 [ 456.997458][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 457.007276][ T28] ext4_dirty_inode+0xbf/0x100 [ 457.013341][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 457.019617][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 457.027122][ T28] __file_update_time+0x21d/0x240 [ 457.033591][ T28] file_update_time+0x2f3/0x370 [ 457.038490][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 457.047495][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 457.054281][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 457.060787][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 457.068428][ T28] ? put_page+0x270/0x270 [ 457.074189][ T28] do_page_mkwrite+0x16b/0x5c0 [ 457.078968][ T28] handle_mm_fault+0x199c/0x3d40 [ 457.087071][ T28] ? mt_find+0x157/0x830 [ 457.091328][ T28] ? numa_migrate_prep+0x250/0x250 [ 457.099482][ T28] ? lock_chain_count+0x20/0x20 [ 457.106427][ T28] ? ktime_get+0x247/0x270 [ 457.110930][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 457.117612][ T28] do_user_addr_fault+0x58e/0xb20 [ 457.124993][ T28] exc_page_fault+0x60/0x100 [ 457.129711][ T28] ? clear_bhb_loop+0x60/0xb0 [ 457.136066][ T28] asm_exc_page_fault+0x22/0x30 [ 457.140937][ T28] RIP: 0033:0x7f3b83872fb2 [ 457.147403][ T28] RSP: 002b:00007ffde8fb3bc0 EFLAGS: 00010202 [ 457.156757][ T28] RAX: 0000000000007008 RBX: 00007f3b84755720 RCX: 0000000000000000 [ 457.167218][ T28] RDX: 0000001b2fe1d000 RSI: 0000000000000008 RDI: 00007f3b84755720 [ 457.176523][ T28] RBP: 000000000000042d R08: 00007f3b83c10000 R09: 00007f3b83c26038 [ 457.186406][ T28] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff8225fcfa [ 457.195735][ T28] R13: 00007f3b83c26038 R14: 000000000000015b R15: ffffffffffff9000 [ 457.207281][ T28] ? __ext4_iget+0x13ea/0x3e80 [ 457.213808][ T28] [ 457.216867][ T28] INFO: task syz.1.1874:10102 blocked for more than 144 seconds. [ 457.226977][ T28] Not tainted syzkaller #0 [ 457.233263][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.246522][ T28] task:syz.1.1874 state:D stack:27600 pid:10102 ppid:4271 flags:0x00004004 [ 457.257235][ T28] Call Trace: [ 457.260516][ T28] [ 457.267606][ T28] __schedule+0x107f/0x4030 [ 457.274413][ T28] ? mark_lock+0x94/0x320 [ 457.278861][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 457.286998][ T28] ? release_firmware_map_entry+0x187/0x187 [ 457.294370][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 457.300284][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 457.308337][ T28] schedule+0xb9/0x180 [ 457.314768][ T28] io_schedule+0x7c/0xd0 [ 457.319097][ T28] bit_wait_io+0xd/0xc0 [ 457.325736][ T28] __wait_on_bit+0x9b/0x2c0 [ 457.330249][ T28] ? bit_wait+0xc0/0xc0 [ 457.335838][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 457.341319][ T28] ? bit_wait+0xc0/0xc0 [ 457.347628][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 457.354021][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 457.359067][ T28] ? bit_waitqueue+0x30/0x30 [ 457.365617][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 457.370866][ T28] do_get_write_access+0x605/0xf20 [ 457.379989][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 457.388366][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 457.396039][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 457.405091][ T28] ? rcu_is_watching+0x11/0xa0 [ 457.409877][ T28] ext4_reserve_inode_write+0x201/0x290 [ 457.416856][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 457.425230][ T28] ext4_dirty_inode+0xbf/0x100 [ 457.430492][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 457.437721][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 457.444626][ T28] __file_update_time+0x21d/0x240 [ 457.449653][ T28] file_update_time+0x2f3/0x370 [ 457.455918][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 457.461217][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 457.468578][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 457.474905][ T28] ? pte_alloc_one+0x287/0x310 [ 457.479669][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 457.490720][ T28] do_page_mkwrite+0x16b/0x5c0 [ 457.497336][ T28] handle_mm_fault+0x199c/0x3d40 [ 457.504322][ T28] ? mt_find+0x157/0x830 [ 457.509365][ T28] ? numa_migrate_prep+0x250/0x250 [ 457.516188][ T28] ? lock_chain_count+0x20/0x20 [ 457.521116][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 457.528362][ T28] do_user_addr_fault+0x58e/0xb20 [ 457.536038][ T28] exc_page_fault+0x60/0x100 [ 457.540646][ T28] ? clear_bhb_loop+0x60/0xb0 [ 457.547256][ T28] asm_exc_page_fault+0x22/0x30 [ 457.553422][ T28] RIP: 0033:0x7fc43966bb23 [ 457.557835][ T28] RSP: 002b:00007ffd6610dea0 EFLAGS: 00010246 [ 457.572952][ T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2f664000 [ 457.580944][ T28] RDX: 0000001b2f624000 RSI: 0000000000600000 RDI: 00007fc4399e2708 [ 457.590951][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.603797][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 457.613747][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd6610e130 [ 457.624214][ T28] [ 457.627241][ T28] INFO: task syz.4.1876:10103 blocked for more than 145 seconds. [ 457.636327][ T28] Not tainted syzkaller #0 [ 457.641269][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.654002][ T28] task:syz.4.1876 state:D stack:27600 pid:10103 ppid:4272 flags:0x00004004 [ 457.664064][ T28] Call Trace: [ 457.667346][ T28] [ 457.670318][ T28] __schedule+0x107f/0x4030 [ 457.677373][ T28] ? mark_lock+0x94/0x320 [ 457.682696][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 457.687774][ T28] ? release_firmware_map_entry+0x187/0x187 [ 457.696160][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 457.704643][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 457.709898][ T28] schedule+0xb9/0x180 [ 457.717490][ T28] io_schedule+0x7c/0xd0 [ 457.722605][ T28] bit_wait_io+0xd/0xc0 [ 457.726764][ T28] __wait_on_bit+0x9b/0x2c0 [ 457.731274][ T28] ? bit_wait+0xc0/0xc0 [ 457.738397][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 457.744743][ T28] ? bit_wait+0xc0/0xc0 [ 457.748906][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 457.756442][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 457.761474][ T28] ? bit_waitqueue+0x30/0x30 [ 457.767425][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 457.775373][ T28] do_get_write_access+0x605/0xf20 [ 457.780527][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 457.787501][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 457.796301][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 457.803977][ T28] ? rcu_is_watching+0x11/0xa0 [ 457.808759][ T28] ext4_reserve_inode_write+0x201/0x290 [ 457.819299][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 457.826034][ T28] ext4_dirty_inode+0xbf/0x100 [ 457.830811][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 457.839493][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 457.845473][ T28] __file_update_time+0x21d/0x240 [ 457.850505][ T28] file_update_time+0x2f3/0x370 [ 457.857787][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 457.864275][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 457.869382][ T28] ? pte_alloc_one+0x287/0x310 [ 457.877376][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 457.884839][ T28] do_page_mkwrite+0x16b/0x5c0 [ 457.889675][ T28] handle_mm_fault+0x199c/0x3d40 [ 457.897182][ T28] ? mt_find+0x157/0x830 [ 457.901451][ T28] ? numa_migrate_prep+0x250/0x250 [ 457.907713][ T28] ? lock_chain_count+0x20/0x20 [ 457.915862][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 457.921234][ T28] do_user_addr_fault+0x58e/0xb20 [ 457.928995][ T28] exc_page_fault+0x60/0x100 [ 457.936483][ T28] ? clear_bhb_loop+0x60/0xb0 [ 457.942480][ T28] asm_exc_page_fault+0x22/0x30 [ 457.947353][ T28] RIP: 0033:0x7f0752a6bb23 [ 457.954268][ T28] RSP: 002b:00007ffd11aaba20 EFLAGS: 00010246 [ 457.960374][ T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2f964000 [ 457.974953][ T28] RDX: 0000001b2f924000 RSI: 0000000000600000 RDI: 00007f0752de2708 [ 457.983895][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.995072][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 458.003422][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd11aabcb0 [ 458.015129][ T28] [ 458.018992][ T28] INFO: task syz.7.1870:10107 blocked for more than 145 seconds. [ 458.027286][ T28] Not tainted syzkaller #0 [ 458.037021][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 458.048975][ T28] task:syz.7.1870 state:D stack:27152 pid:10107 ppid:9540 flags:0x00004004 [ 458.061241][ T28] Call Trace: [ 458.064789][ T28] [ 458.067726][ T28] __schedule+0x107f/0x4030 [ 458.075239][ T28] ? mark_lock+0x94/0x320 [ 458.079591][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 458.085252][ T28] ? release_firmware_map_entry+0x187/0x187 [ 458.091230][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 458.100798][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 458.106356][ T28] schedule+0xb9/0x180 [ 458.110428][ T28] io_schedule+0x7c/0xd0 [ 458.117633][ T28] bit_wait_io+0xd/0xc0 [ 458.123913][ T28] __wait_on_bit+0x9b/0x2c0 [ 458.128425][ T28] ? bit_wait+0xc0/0xc0 [ 458.135678][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 458.141159][ T28] ? bit_wait+0xc0/0xc0 [ 458.147791][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 458.155763][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 458.160816][ T28] ? bit_waitqueue+0x30/0x30 [ 458.165732][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 458.170970][ T28] do_get_write_access+0x605/0xf20 [ 458.179193][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 458.185474][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 458.194877][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 458.201048][ T28] ? rcu_is_watching+0x11/0xa0 [ 458.206663][ T28] ext4_reserve_inode_write+0x201/0x290 [ 458.215165][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 458.220702][ T28] ext4_dirty_inode+0xbf/0x100 [ 458.226483][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 458.235459][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 458.240914][ T28] __file_update_time+0x21d/0x240 [ 458.246759][ T28] file_update_time+0x2f3/0x370 [ 458.256318][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 458.262527][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 458.267828][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 458.275861][ T28] ? pte_alloc_one+0x287/0x310 [ 458.280638][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 458.287521][ T28] do_page_mkwrite+0x16b/0x5c0 [ 458.295294][ T28] handle_mm_fault+0x199c/0x3d40 [ 458.300432][ T28] ? mt_find+0x157/0x830 [ 458.305348][ T28] ? numa_migrate_prep+0x250/0x250 [ 458.310462][ T28] ? lock_chain_count+0x20/0x20 [ 458.318926][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 458.324447][ T28] do_user_addr_fault+0x58e/0xb20 [ 458.330187][ T28] exc_page_fault+0x60/0x100 [ 458.337872][ T28] ? clear_bhb_loop+0x60/0xb0 [ 458.342946][ T28] asm_exc_page_fault+0x22/0x30 [ 458.347802][ T28] RIP: 0033:0x7fd1eb46bb23 [ 458.355697][ T28] RSP: 002b:00007ffcc9490580 EFLAGS: 00010246 [ 458.363942][ T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b30164000 [ 458.375397][ T28] RDX: 0000001b30124000 RSI: 0000000000600000 RDI: 00007fd1eb7e2708 [ 458.383685][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.394690][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 458.403096][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcc9490810 [ 458.411094][ T28] [ 458.417531][ T28] [ 458.417531][ T28] Showing all locks held in the system: [ 458.426104][ T28] 4 locks held by kworker/u4:1/11: [ 458.434827][ T28] #0: ffff88801ae5f138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 458.445863][ T28] #1: ffffc90000107d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 458.461288][ T28] #2: ffff88814ce1a0e0 (&type->s_umount_key#31){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 458.476170][ T28] #3: ffff88814ce1cc18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 458.487377][ T28] 1 lock held by rcu_tasks_kthre/12: [ 458.495589][ T28] #0: ffffffff8d92e230 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 458.506284][ T28] 1 lock held by rcu_tasks_trace/13: [ 458.514538][ T28] #0: ffffffff8d92ea50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 458.527448][ T28] 1 lock held by khungtaskd/28: [ 458.536753][ T28] #0: ffffffff8d92d8a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 458.546927][ T28] 1 lock held by khugepaged/35: [ 458.555224][ T28] #0: ffff888031ea17d8 (&mm->mmap_lock){++++}-{3:3}, at: hpage_collapse_scan_pmd+0x1f68/0x57c0 [ 458.566142][ T28] 3 locks held by kworker/0:1H/53: [ 458.571290][ T28] #0: ffff88814164c938 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 458.586697][ T28] #1: ffffc90000be7d00 ((work_completion)(&q->timeout_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 458.598904][ T28] #2: ffffffff8d933578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 458.617241][ T28] 3 locks held by syz-executor/4258: [ 458.623046][ T28] #0: ffff8880321aa6d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 458.637118][ T28] #1: ffff88814ce1a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 458.647705][ T28] #2: ffff88814ce1e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 458.660934][ T28] 2 locks held by getty/4910: [ 458.665889][ T28] #0: ffff88814cc61098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 458.678883][ T28] #1: ffffc9000384b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 458.689359][ T28] 2 locks held by kworker/0:10/5366: [ 458.699610][ T28] #0: ffff888018472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 458.710692][ T28] #1: ffffc90003417d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 458.725191][ T28] 3 locks held by syz.6.1869/10082: [ 458.730391][ T28] #0: ffff888031ea17d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 458.741344][ T28] #1: ffff88814ce1a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 458.755291][ T28] #2: ffff88814ce1e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 458.766064][ T28] 3 locks held by syz.3.1875/10096: [ 458.771306][ T28] #0: ffff88802b0e44d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 458.784530][ T28] #1: ffff88814ce1a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 458.794554][ T28] #2: ffff88814ce1e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 458.808991][ T28] 3 locks held by syz.1.1874/10102: [ 458.814807][ T28] #0: ffff88802b0e5b58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 458.827704][ T28] #1: ffff88814ce1a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 458.838388][ T28] #2: ffff88814ce1e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 458.851684][ T28] 3 locks held by syz.4.1876/10103: [ 458.856921][ T28] #0: ffff88802b0e62d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 458.870641][ T28] #1: ffff88814ce1a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 458.881210][ T28] #2: ffff88814ce1e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 458.894115][ T28] 3 locks held by syz.7.1870/10107: [ 458.899312][ T28] #0: ffff88802b0e4c58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 458.909556][ T28] #1: ffff88814ce1a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 458.925496][ T28] #2: ffff88814ce1e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 458.936633][ T28] [ 458.939715][ T28] ============================================= [ 458.939715][ T28] [ 458.950727][ T28] NMI backtrace for cpu 0 [ 458.955073][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 458.962262][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 458.972333][ T28] Call Trace: [ 458.975743][ T28] [ 458.978690][ T28] dump_stack_lvl+0x188/0x24e [ 458.983393][ T28] ? irq_work_queue+0xb8/0x140 [ 458.988827][ T28] ? show_regs_print_info+0x12/0x12 [ 458.994134][ T28] ? load_image+0x410/0x410 [ 458.998630][ T28] ? vprintk_emit+0x59f/0x6a0 [ 459.003391][ T28] ? printk_sprint+0x460/0x460 [ 459.008148][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 459.013077][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 459.019213][ T28] ? _printk+0xda/0x130 [ 459.023349][ T28] ? load_image+0x410/0x410 [ 459.027841][ T28] ? load_image+0x410/0x410 [ 459.032333][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 459.038384][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 459.044516][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 459.050508][ T28] watchdog+0xf0e/0xf50 [ 459.054709][ T28] ? watchdog+0x1ed/0xf50 [ 459.059076][ T28] kthread+0x29d/0x330 [ 459.063165][ T28] ? hungtask_pm_notify+0x40/0x40 [ 459.068188][ T28] ? kthread_blkcg+0xd0/0xd0 [ 459.072809][ T28] ret_from_fork+0x1f/0x30 [ 459.077265][ T28] [ 459.080362][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.104029][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 459.110908][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 459.118086][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 459.128126][ T28] Call Trace: [ 459.131408][ T28] [ 459.134347][ T28] dump_stack_lvl+0x188/0x24e [ 459.139026][ T28] ? memcpy+0x3c/0x60 [ 459.143057][ T28] ? show_regs_print_info+0x12/0x12 [ 459.148245][ T28] ? load_image+0x410/0x410 [ 459.152737][ T28] panic+0x2d3/0x710 [ 459.156622][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 459.162243][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 459.166737][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 459.172271][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 459.178408][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 459.184558][ T28] watchdog+0xf4d/0xf50 [ 459.188703][ T28] ? watchdog+0x1ed/0xf50 [ 459.193015][ T28] kthread+0x29d/0x330 [ 459.197075][ T28] ? hungtask_pm_notify+0x40/0x40 [ 459.202096][ T28] ? kthread_blkcg+0xd0/0xd0 [ 459.206668][ T28] ret_from_fork+0x1f/0x30 [ 459.211097][ T28] [ 459.214307][ T28] Kernel Offset: disabled [ 459.218650][ T28] Rebooting in 86400 seconds..